Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 06-03-2025
Exécuté par steph (administrateur) sur DESKTOP-EC2LHJT (ASUSTeK COMPUTER INC. X751LAB) (10-03-2025 14:30:30)
Exécuté depuis C:\Users\steph\Dropbox\0000livres\aasteff\FRST64.exe
Profils chargés: steph
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.5487 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUS Cloud Corporation -> ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSPanel.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.983.1\DropboxCrashHandler.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(C:\Windows\SysWOW64\cmd.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <54>
(explorer.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Program Files\Wondershare\Wondershare PDFelement pour Windows (FR)\PENotify.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe <4>
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (WildTangent Inc -> WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2501.1.0_x64__8wekyb3d8bbwe\CalculatorApp.exe <2>
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2509.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Adobe Systems Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe <4>
(svchost.exe ->) (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(svchost.exe ->) (VS REVO GROUP OOD -> VS Revo Group Ltd.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [63272 2015-12-24] (ASUS Cloud Corporation -> )
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9238408 2025-03-03] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-03-09] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [12307864 2025-02-21] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\...\MountPoints2: {ef494e92-d47f-11ee-8a55-74c63bdb08bb} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [224768 2024-05-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\WINDOWS\system32\PEPrinterMonitor.dll [408304 2024-07-11] (Wondershare Technology Group Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\133.0.6943.142\Installer\chrmstp.exe [2025-02-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2024-08-02]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\Wondershare PDFelement pour Windows (FR)\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2024-08-02]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\Wondershare PDFelement pour Windows (FR)\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {2846E6B0-F3E9-4FE6-B4B5-54AB82719009} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2024-12-18] (Adobe Inc. -> Adobe Inc.)
Task: {C91A9A33-C641-4474-A5C2-BEF245CF0E0B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257696 2023-04-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {1F52C00F-58ED-488F-83C8-3BB2ADAF473F} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18416 2015-12-18] (ASUSTeK Computer Inc. -> AsusTek)
Task: {AFFF6174-108A-4E2B-A40A-5DEF3F13F30D} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [54784 2015-12-02] (ASUS) [Fichier non signé]
Task: {C41A75F3-3F8F-4BAB-A508-1669E7B6D380} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19782224 2015-05-25] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {A2AB61D5-D872-47C1-967A-EAD1E3C91A7B} - System32\Tasks\ASUS\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [47143320 2016-03-02] (ASUS) [Fichier non signé]
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1616160 2016-01-19] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé]
Task: {940ACE3F-9B54-42B0-B2B2-A27286E61269} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {1621ECF9-1FAE-4439-81F7-9CF008221457} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {DF418D3F-2766-45D4-8EDD-D9A308A609E6} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {E9BDE3EB-B5A8-4707-92ED-04B33DCC6A6C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9CB85490-61B6-47E5-B541-86633433D189} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{756EC3F5-232F-4314-8DFB-239D92D57C8A} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {9DD5A8D0-4688-4D7E-BD1A-741070CA7073} - System32\Tasks\IcarusAvastVpnUpgrade => C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe -> /silent /ShowVpnGui=0 /RestartUpdaterTaskName=IcarusAvastVpnUpgrade /RestartUpdaterAppExe="C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe"
Task: {EBE5191A-063A-4616-8381-95C8DC0F2B94} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C12D54D8-3AE8-4C3E-81C7-C6010C65F101} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {938357D1-A042-4505-9546-F14B40033B98} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F5D683DF-A102-4651-9EFF-4D7301489872} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8308829D-3686-4800-AB59-9A24B29D4610} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1154977337-3705901646-2316518580-1003 => C:\Users\steph\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {FAA92D14-95E3-4696-A0A3-89148AF4557F} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-11-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {C3634087-619B-46AF-B26E-BAB6BA7A73CB} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-11-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {F6A0DC9B-FF64-451A-AB8F-D3843FEAF5FD} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16409496 2015-11-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {41567C0E-D7A3-4FDE-AC27-0100822BDD96} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.)
Task: {BD05144F-743A-4165-B803-9DDA7DFDD3A3} - System32\Tasks\VS Revo Group\RevoHelperFreeStartup => C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe [4053672 2024-12-10] (VS REVO GROUP OOD -> VS Revo Group Ltd.)
Task: {751032FB-518B-42B1-84EC-DAFF4695A73D} - System32\Tasks\WpsNotifyTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe [514408 2016-03-24] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {5365D1B5-E050-4D5E-B386-8A29115A0649} - System32\Tasks\WpsUpdateTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe [481128 2016-03-24] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{206e94bd-69cb-4ee9-973b-cb23f973b050}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{2724d8eb-7971-426f-bbca-8f625ff44876}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{c0dad5b5-c700-4550-847a-13b8b9675082}: [NameServer] 1.1.1.1,1.0.0.1,192.168.1.254
Tcpip\..\Interfaces\{c0dad5b5-c700-4550-847a-13b8b9675082}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{c0dad5b5-c700-4550-847a-13b8b9675082}\356425F573832403: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fe731191-3bba-4ea5-9a76-13ce666b0280}: [NameServer] 1.1.1.1,1.0.0.1,192.168.1.254
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default [2025-01-08]
Edge Notifications: Default -> hxxps://app.ornikar.com
Edge Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2025-01-08]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-08]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
FireFox:
========
FF DefaultProfile: 4nwijwix.default
FF ProfilePath: C:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\4nwijwix.default [2021-01-15]
FF ProfilePath: C:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\x9slewes.default-release [2024-04-04]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-02-21] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] (WildTangent Inc -> )
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default [2025-03-10]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-03-04]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Boomerang for Gmail) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2025-02-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-25]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-09]
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1 [2024-11-28]
CHR Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-01-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2 [2023-10-07]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-01-19]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3 [2023-10-29]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-02-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-28]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5 [2024-11-28]
CHR Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-07]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6 [2024-11-28]
CHR Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2024-11-26]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-11-26]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-07-31]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\System Profile [2024-07-31]
CHR HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
CHR HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [imhlianhlhdicjchlbmbfaefhhjencbe]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2024-12-18] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257696 2023-04-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe [75264 2015-12-24] (ASUS Cloud Corporation) [Fichier non signé]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [48528 2025-03-03] (Dropbox, Inc -> Dropbox, Inc.)
S3 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [326032 2018-06-05] (ASUSTeK Computer Inc. -> )
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\219.4.4463\DropboxElevationService.exe [1659280 2025-03-03] (Dropbox, Inc -> Dropbox, Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent Inc -> WildTangent)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-03-08] (HP Inc. -> HP Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdatesvr.exe [133480 2016-03-24] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [971976 2021-05-13] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NativePushService; C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [595352 2023-08-22] (Wondershare Technology Group Co.,Ltd -> Wondershare)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-17] (TeamViewer -> TeamViewer GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [102144 2019-08-19] (ASUSTek Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 FlashBoot; C:\WINDOWS\System32\drivers\FlashBoot.sys [17616 2024-01-31] (Challenger Backup Solutions, LLC -> Challenger Backup Solutions, LLC)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-18] (ASUSTek Computer Inc. -> ASUS)
R3 KMWDFILTER; C:\WINDOWS\System32\drivers\KMWDFILTER.sys [28208 2024-01-31] (Shenzhen pc-pen Co.,Ltd -> Windows (R) Codename Longhorn DDK provider)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [278944 2025-02-14] (Microsoft Windows -> Microsoft Corporation)
R3 RevoProcessDetector; C:\WINDOWS\System32\DRIVERS\RevoProcessDetector.sys [19504 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2020-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-03-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601520 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2025-03-04 23:13 - 2025-03-04 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2025-03-03 19:08 - 2025-03-03 19:08 - 000048528 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2025-02-21 11:15 - 2025-02-21 11:15 - 001133767 _____ C:\Users\steph\Documents\CONVENTION COMPTE MR LOUIS signée.pdf
2025-02-20 09:34 - 2025-02-20 09:37 - 000278525 _____ C:\Users\steph\Downloads\SPECIALEDEUX_PART_90_2025_02_4568568396.pdf
2025-02-12 14:32 - 2025-02-12 14:32 - 000000000 ___HD C:\$WinREAgent
2025-02-10 08:48 - 2025-02-10 08:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\VS Revo Group
2025-02-10 08:48 - 2025-02-10 08:48 - 000000000 ____D C:\Users\steph\AppData\Local\VS Revo Group
2025-02-09 21:46 - 2025-02-09 22:07 - 000000000 ____D C:\Users\steph\AppData\Roaming\RtSubscribe
2025-02-09 19:47 - 2025-02-09 19:47 - 000000000 ____D C:\Voiceover
2025-02-09 19:24 - 2025-02-09 19:24 - 000001511 _____ C:\Users\steph\Desktop\Wondershare Filmora 14.lnk
2025-02-09 19:22 - 2025-02-09 19:22 - 000000000 ____D C:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wondershare
2025-02-09 19:22 - 2024-12-06 15:49 - 000754688 _____ C:\WINDOWS\system32\FilmoraContextMenu.dll
2025-02-09 19:17 - 2025-02-13 16:29 - 000000000 ____D C:\Users\steph\AppData\Local\Wondershare
2025-02-09 19:14 - 2025-02-09 19:14 - 000022709 _____ C:\WINDOWS\unins000.msg
2025-02-09 16:39 - 2025-02-09 19:14 - 000036038 _____ C:\WINDOWS\unins000.dat
2025-02-09 16:39 - 2025-02-09 16:39 - 001183176 _____ C:\WINDOWS\unins000.exe
2025-02-09 16:39 - 2017-04-27 17:05 - 000000427 _____ C:\WINDOWS\SysWOW64\Microsoft.VC80.CRT.manifest
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2025-03-10 14:42 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-10 14:35 - 2024-04-01 17:53 - 000000000 ____D C:\FRST
2025-03-10 14:05 - 2021-01-15 18:08 - 000000000 ____D C:\Users\steph\AppData\Local\ASUS GIFTBOX
2025-03-10 13:58 - 2021-01-15 18:04 - 000000184 _____ C:\Users\steph\AppData\Roaming\sp_data.sys
2025-03-10 13:49 - 2021-01-26 14:37 - 000000000 ____D C:\Users\steph\AppData\Roaming\Dropbox
2025-03-10 13:49 - 2021-01-26 14:35 - 000000000 ____D C:\Users\steph\AppData\Local\Dropbox
2025-03-10 13:47 - 2021-01-15 18:04 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
2025-03-10 13:45 - 2021-01-15 16:51 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2025-03-10 13:45 - 2021-01-15 14:06 - 000000000 __SHD C:\Users\steph\IntelGraphicsProfiles
2025-03-10 13:44 - 2021-05-13 23:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-10 13:44 - 2021-05-13 23:07 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-10 13:44 - 2021-05-13 23:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-10 13:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-03-10 08:12 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-10 08:12 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-08 10:45 - 2024-03-19 10:18 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-03-08 10:45 - 2024-03-19 10:12 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-03-08 10:27 - 2023-01-16 22:44 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-03-08 10:27 - 2021-01-15 17:01 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-03-07 07:26 - 2021-07-03 08:32 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d748463456ca87
2025-03-07 07:26 - 2021-05-13 23:36 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-03-05 06:19 - 2021-01-15 17:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-04 23:16 - 2021-01-26 14:35 - 000000000 ____D C:\Program Files (x86)\Dropbox
2025-03-04 17:53 - 2021-01-15 19:11 - 000000000 ___RD C:\Users\steph\Dropbox
2025-03-04 14:11 - 2021-01-16 16:17 - 000000000 ____D C:\Users\steph\AppData\Roaming\vlc
2025-03-04 12:30 - 2025-02-05 23:15 - 000003576 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1154977337-3705901646-2316518580-1003
2025-03-04 12:30 - 2022-04-20 18:38 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1154977337-3705901646-2316518580-1003
2025-03-04 12:30 - 2021-05-13 23:55 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1154977337-3705901646-2316518580-1003
2025-03-04 12:29 - 2023-06-19 19:09 - 000002470 _____ C:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 11:06 - 2021-05-13 23:14 - 000000000 ____D C:\Users\steph
2025-03-03 07:29 - 2022-04-19 15:36 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-02-28 08:34 - 2024-04-30 07:43 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-02-28 08:32 - 2024-04-30 07:40 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-02-28 08:32 - 2024-04-30 07:40 - 000002063 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2025-02-28 07:41 - 2024-09-11 07:57 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-02-28 07:41 - 2024-09-11 07:57 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-02-25 08:14 - 2021-05-13 23:25 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-02-25 08:14 - 2019-12-07 15:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2025-02-25 08:14 - 2019-12-07 15:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2025-02-25 08:14 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2025-02-22 18:20 - 2024-10-20 17:26 - 000000000 ____D C:\Program Files\HP
2025-02-14 09:02 - 2024-08-02 09:06 - 000000000 ____D C:\ProgramData\Wondershare
2025-02-14 08:48 - 2021-05-13 23:07 - 000467112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-02-14 08:46 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2025-02-14 08:44 - 2024-07-12 06:44 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-14 08:43 - 2023-12-19 09:26 - 000000000 ____D C:\WINDOWS\InboxApps
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-02-14 08:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-13 07:59 - 2021-01-15 18:01 - 000000000 ____D C:\ProgramData\Packages
2025-02-13 07:59 - 2021-01-15 17:59 - 000000000 ____D C:\Users\steph\AppData\Local\Packages
2025-02-13 07:49 - 2021-05-26 12:39 - 000000000 ____D C:\ProgramData\Adobe
2025-02-13 07:49 - 2021-01-15 17:59 - 000000000 ____D C:\Users\steph\AppData\Roaming\Adobe
2025-02-13 07:48 - 2021-05-26 12:33 - 000000000 ____D C:\Users\steph\AppData\Local\Adobe
2025-02-12 18:06 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-02-12 17:36 - 2021-05-13 23:11 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 14:17 - 2021-01-17 20:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 14:00 - 2021-01-17 20:21 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:35 - 2024-08-02 09:01 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2025-02-11 20:27 - 2024-08-02 09:06 - 000000000 ____D C:\Users\steph\AppData\Roaming\Wondershare
2025-02-10 08:47 - 2023-03-21 08:49 - 000001081 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2025-02-10 08:47 - 2023-03-21 08:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
==================== Fichiers à la racine de certains dossiers ========
2023-03-03 08:49 - 2023-03-03 08:49 - 000000171 _____ () C:\Users\steph\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2021-01-15 18:04 - 2025-03-10 13:58 - 000000184 _____ () C:\Users\steph\AppData\Roaming\sp_data.sys
2024-04-24 06:51 - 2024-04-24 06:51 - 000003584 _____ () C:\Users\steph\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================
Exécuté par steph (administrateur) sur DESKTOP-EC2LHJT (ASUSTeK COMPUTER INC. X751LAB) (10-03-2025 14:30:30)
Exécuté depuis C:\Users\steph\Dropbox\0000livres\aasteff\FRST64.exe
Profils chargés: steph
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.5487 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUS Cloud Corporation -> ASUS Cloud Corporation) C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSPanel.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPHelper.exe
(C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPCenter.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\cmd.exe
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.983.1\DropboxCrashHandler.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (ASUSTeK Computer Inc. -> AsusTek) C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLoader.exe
(C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe
(C:\Windows\SysWOW64\cmd.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
(C:\Windows\SysWOW64\esif_uf.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <54>
(explorer.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Program Files\Wondershare\Wondershare PDFelement pour Windows (FR)\PENotify.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe <4>
(Intel(R) pGFX -> ) C:\Windows\System32\igfxTray.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxHK.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\GFNEXSrv.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Intel(R) Software -> Intel Corporation) C:\Windows\SysWOW64\esif_uf.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\mcafee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe
(services.exe ->) (Qualcomm Atheros -> Windows (R) Win 7 DDK provider) C:\Windows\System32\drivers\AdminService.exe
(services.exe ->) (TeamViewer -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (WildTangent Inc -> WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> Wondershare) C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2501.1.0_x64__8wekyb3d8bbwe\CalculatorApp.exe <2>
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2509.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Adobe Systems Incorporated -> ) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe <4>
(svchost.exe ->) (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
(svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(svchost.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(svchost.exe ->) (VS REVO GROUP OOD -> VS Revo Group Ltd.) C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM-x32\...\Run: [WebStorage] => C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\ASUSWSLoader.exe [63272 2015-12-24] (ASUS Cloud Corporation -> )
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9238408 2025-03-03] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare)
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-03-09] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [12307864 2025-02-21] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\...\MountPoints2: {ef494e92-d47f-11ee-8a55-74c63bdb08bb} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [224768 2024-05-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\WINDOWS\system32\PEPrinterMonitor.dll [408304 2024-07-11] (Wondershare Technology Group Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\133.0.6943.142\Installer\chrmstp.exe [2025-02-28] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2024-08-02]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\Wondershare PDFelement pour Windows (FR)\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2024-08-02]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\Wondershare PDFelement pour Windows (FR)\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {2846E6B0-F3E9-4FE6-B4B5-54AB82719009} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2024-12-18] (Adobe Inc. -> Adobe Inc.)
Task: {C91A9A33-C641-4474-A5C2-BEF245CF0E0B} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257696 2023-04-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {1F52C00F-58ED-488F-83C8-3BB2ADAF473F} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [18416 2015-12-18] (ASUSTeK Computer Inc. -> AsusTek)
Task: {AFFF6174-108A-4E2B-A40A-5DEF3F13F30D} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [54784 2015-12-02] (ASUS) [Fichier non signé]
Task: {C41A75F3-3F8F-4BAB-A508-1669E7B6D380} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19782224 2015-05-25] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {A2AB61D5-D872-47C1-967A-EAD1E3C91A7B} - System32\Tasks\ASUS\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [47143320 2016-03-02] (ASUS) [Fichier non signé]
Task: {6430CC72-EBF8-4F8C-AF87-2CCE1878ED23} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1616160 2016-01-19] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé]
Task: {940ACE3F-9B54-42B0-B2B2-A27286E61269} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {1621ECF9-1FAE-4439-81F7-9CF008221457} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122168 2015-03-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {DF418D3F-2766-45D4-8EDD-D9A308A609E6} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {E9BDE3EB-B5A8-4707-92ED-04B33DCC6A6C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9CB85490-61B6-47E5-B541-86633433D189} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{756EC3F5-232F-4314-8DFB-239D92D57C8A} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {9DD5A8D0-4688-4D7E-BD1A-741070CA7073} - System32\Tasks\IcarusAvastVpnUpgrade => C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe -> /silent /ShowVpnGui=0 /RestartUpdaterTaskName=IcarusAvastVpnUpgrade /RestartUpdaterAppExe="C:\Program Files\AVAST Software\SecureLine\setup\avast_vpn_online_setup.exe"
Task: {EBE5191A-063A-4616-8381-95C8DC0F2B94} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C12D54D8-3AE8-4C3E-81C7-C6010C65F101} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {938357D1-A042-4505-9546-F14B40033B98} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F5D683DF-A102-4651-9EFF-4D7301489872} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8308829D-3686-4800-AB59-9A24B29D4610} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1154977337-3705901646-2316518580-1003 => C:\Users\steph\AppData\Local\Microsoft\OneDrive\25.020.0202.0001\OneDriveLauncher.exe [669200 2025-03-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {FAA92D14-95E3-4696-A0A3-89148AF4557F} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-11-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {C3634087-619B-46AF-B26E-BAB6BA7A73CB} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1407744 2015-11-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {F6A0DC9B-FF64-451A-AB8F-D3843FEAF5FD} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16409496 2015-11-30] (Realtek Semiconductor Corp -> Realtek Semiconductor)
Task: {41567C0E-D7A3-4FDE-AC27-0100822BDD96} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.)
Task: {BD05144F-743A-4165-B803-9DDA7DFDD3A3} - System32\Tasks\VS Revo Group\RevoHelperFreeStartup => C:\Program Files\VS Revo Group\Revo Uninstaller\RevoUninHelper.exe [4053672 2024-12-10] (VS REVO GROUP OOD -> VS Revo Group Ltd.)
Task: {751032FB-518B-42B1-84EC-DAFF4695A73D} - System32\Tasks\WpsNotifyTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe [514408 2016-03-24] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
Task: {5365D1B5-E050-4D5E-B386-8A29115A0649} - System32\Tasks\WpsUpdateTask_Administrator => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe [481128 2016-03-24] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\WpsNotifyTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsnotify.exe
Task: C:\WINDOWS\Tasks\WpsUpdateTask_Administrator.job => C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdate.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{206e94bd-69cb-4ee9-973b-cb23f973b050}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{2724d8eb-7971-426f-bbca-8f625ff44876}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{c0dad5b5-c700-4550-847a-13b8b9675082}: [NameServer] 1.1.1.1,1.0.0.1,192.168.1.254
Tcpip\..\Interfaces\{c0dad5b5-c700-4550-847a-13b8b9675082}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{c0dad5b5-c700-4550-847a-13b8b9675082}\356425F573832403: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{fe731191-3bba-4ea5-9a76-13ce666b0280}: [NameServer] 1.1.1.1,1.0.0.1,192.168.1.254
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default [2025-01-08]
Edge Notifications: Default -> hxxps://app.ornikar.com
Edge Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2025-01-08]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-01-08]hxxps://clients2.google.com/service/update2/crx
Edge Extension: (Edge relevant text changes) - C:\Users\steph\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25]hxxps://edge.microsoft.com/extensionwebstorebase/v1/crx
Edge HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
FireFox:
========
FF DefaultProfile: 4nwijwix.default
FF ProfilePath: C:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\4nwijwix.default [2021-01-15]
FF ProfilePath: C:\Users\steph\AppData\Roaming\Mozilla\Firefox\Profiles\x9slewes.default-release [2024-04-04]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-02-21] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [2015-12-22] (WildTangent Inc -> )
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default [2025-03-10]
CHR Notifications: Default -> hxxps://www.facebook.com
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-03-04]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Boomerang for Gmail) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2025-02-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-06-25]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-09]
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1 [2024-11-28]
CHR Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-01-16]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2 [2023-10-07]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-01-19]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3 [2023-10-29]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-10-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-02-07]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-28]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5 [2024-11-28]
CHR Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-11-28]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 5\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-07]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6 [2024-11-28]
CHR Extension: (MultiPassword — Gestionnaire de mots de passe) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\cnlhokffphohmfcddnibpohmkdfafdli [2024-11-26]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-11-26]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Google Docs hors connexion) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-31]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\steph\AppData\Local\Google\Chrome\User Data\Profile 6\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-07-31]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\steph\AppData\Local\Google\Chrome\User Data\System Profile [2024-07-31]
CHR HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [cnlhokffphohmfcddnibpohmkdfafdli]
CHR HKU\S-1-5-21-1154977337-3705901646-2316518580-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [imhlianhlhdicjchlbmbfaefhhjencbe]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2024-12-18] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [257696 2023-04-12] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 Asus WebStorage Windows Service; C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe [75264 2015-12-24] (ASUS Cloud Corporation) [Fichier non signé]
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [48528 2025-03-03] (Dropbox, Inc -> Dropbox, Inc.)
S3 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [326032 2018-06-05] (ASUSTeK Computer Inc. -> )
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\219.4.4463\DropboxElevationService.exe [1659280 2025-03-03] (Dropbox, Inc -> Dropbox, Inc.)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-12-22] (WildTangent Inc -> WildTangent)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-03-08] (HP Inc. -> HP Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
S2 Kingsoft_WPS_UpdateService; C:\Program Files (x86)\Kingsoft\WPS Office\9.1.0.5247\wtoolex\wpsupdatesvr.exe [133480 2016-03-24] (Zhuhai Kingsoft Office Software Co.,Ltd -> Zhuhai Kingsoft Office Software Co.,Ltd)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [971976 2021-05-13] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NativePushService; C:\Users\steph\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [595352 2023-08-22] (Wondershare Technology Group Co.,Ltd -> Wondershare)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-17] (TeamViewer -> TeamViewer GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R2 ASMMAP64; C:\Program Files (x86)\ASUS\ATK Package\ATKGFNEX\ASMMAP64.sys [18048 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUS)
R3 AsusTP; C:\WINDOWS\System32\drivers\AsusTP.sys [102144 2019-08-19] (ASUSTek Computer Inc. -> ASUS Corporation)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 FlashBoot; C:\WINDOWS\System32\drivers\FlashBoot.sys [17616 2024-01-31] (Challenger Backup Solutions, LLC -> Challenger Backup Solutions, LLC)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-18] (ASUSTek Computer Inc. -> ASUS)
R3 KMWDFILTER; C:\WINDOWS\System32\drivers\KMWDFILTER.sys [28208 2024-01-31] (Shenzhen pc-pen Co.,Ltd -> Windows (R) Codename Longhorn DDK provider)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [278944 2025-02-14] (Microsoft Windows -> Microsoft Corporation)
R3 RevoProcessDetector; C:\WINDOWS\System32\DRIVERS\RevoProcessDetector.sys [19504 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64912 2017-05-18] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2020-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20016 2025-03-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601520 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-05] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2025-03-04 23:13 - 2025-03-04 23:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2025-03-03 19:08 - 2025-03-03 19:08 - 000048528 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2025-02-21 11:15 - 2025-02-21 11:15 - 001133767 _____ C:\Users\steph\Documents\CONVENTION COMPTE MR LOUIS signée.pdf
2025-02-20 09:34 - 2025-02-20 09:37 - 000278525 _____ C:\Users\steph\Downloads\SPECIALEDEUX_PART_90_2025_02_4568568396.pdf
2025-02-12 14:32 - 2025-02-12 14:32 - 000000000 ___HD C:\$WinREAgent
2025-02-10 08:48 - 2025-02-10 08:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\VS Revo Group
2025-02-10 08:48 - 2025-02-10 08:48 - 000000000 ____D C:\Users\steph\AppData\Local\VS Revo Group
2025-02-09 21:46 - 2025-02-09 22:07 - 000000000 ____D C:\Users\steph\AppData\Roaming\RtSubscribe
2025-02-09 19:47 - 2025-02-09 19:47 - 000000000 ____D C:\Voiceover
2025-02-09 19:24 - 2025-02-09 19:24 - 000001511 _____ C:\Users\steph\Desktop\Wondershare Filmora 14.lnk
2025-02-09 19:22 - 2025-02-09 19:22 - 000000000 ____D C:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wondershare
2025-02-09 19:22 - 2024-12-06 15:49 - 000754688 _____ C:\WINDOWS\system32\FilmoraContextMenu.dll
2025-02-09 19:17 - 2025-02-13 16:29 - 000000000 ____D C:\Users\steph\AppData\Local\Wondershare
2025-02-09 19:14 - 2025-02-09 19:14 - 000022709 _____ C:\WINDOWS\unins000.msg
2025-02-09 16:39 - 2025-02-09 19:14 - 000036038 _____ C:\WINDOWS\unins000.dat
2025-02-09 16:39 - 2025-02-09 16:39 - 001183176 _____ C:\WINDOWS\unins000.exe
2025-02-09 16:39 - 2017-04-27 17:05 - 000000427 _____ C:\WINDOWS\SysWOW64\Microsoft.VC80.CRT.manifest
==================== Un mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2025-03-10 14:42 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-10 14:35 - 2024-04-01 17:53 - 000000000 ____D C:\FRST
2025-03-10 14:05 - 2021-01-15 18:08 - 000000000 ____D C:\Users\steph\AppData\Local\ASUS GIFTBOX
2025-03-10 13:58 - 2021-01-15 18:04 - 000000184 _____ C:\Users\steph\AppData\Roaming\sp_data.sys
2025-03-10 13:49 - 2021-01-26 14:37 - 000000000 ____D C:\Users\steph\AppData\Roaming\Dropbox
2025-03-10 13:49 - 2021-01-26 14:35 - 000000000 ____D C:\Users\steph\AppData\Local\Dropbox
2025-03-10 13:47 - 2021-01-15 18:04 - 000000000 ____D C:\ProgramData\ASUS Smart Gesture
2025-03-10 13:45 - 2021-01-15 16:51 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2025-03-10 13:45 - 2021-01-15 14:06 - 000000000 __SHD C:\Users\steph\IntelGraphicsProfiles
2025-03-10 13:44 - 2021-05-13 23:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-03-10 13:44 - 2021-05-13 23:07 - 000008192 ___SH C:\DumpStack.log.tmp
2025-03-10 13:44 - 2021-05-13 23:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-03-10 13:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2025-03-10 08:12 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-10 08:12 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-03-08 10:45 - 2024-03-19 10:18 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2025-03-08 10:45 - 2024-03-19 10:12 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-03-08 10:27 - 2023-01-16 22:44 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-03-08 10:27 - 2021-01-15 17:01 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-03-07 07:26 - 2021-07-03 08:32 - 000003596 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d748463456ca87
2025-03-07 07:26 - 2021-05-13 23:36 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-03-05 06:19 - 2021-01-15 17:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-03-04 23:16 - 2021-01-26 14:35 - 000000000 ____D C:\Program Files (x86)\Dropbox
2025-03-04 17:53 - 2021-01-15 19:11 - 000000000 ___RD C:\Users\steph\Dropbox
2025-03-04 14:11 - 2021-01-16 16:17 - 000000000 ____D C:\Users\steph\AppData\Roaming\vlc
2025-03-04 12:30 - 2025-02-05 23:15 - 000003576 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1154977337-3705901646-2316518580-1003
2025-03-04 12:30 - 2022-04-20 18:38 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1154977337-3705901646-2316518580-1003
2025-03-04 12:30 - 2021-05-13 23:55 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1154977337-3705901646-2316518580-1003
2025-03-04 12:29 - 2023-06-19 19:09 - 000002470 _____ C:\Users\steph\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-04 11:06 - 2021-05-13 23:14 - 000000000 ____D C:\Users\steph
2025-03-03 07:29 - 2022-04-19 15:36 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-02-28 08:34 - 2024-04-30 07:43 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-02-28 08:32 - 2024-04-30 07:40 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-02-28 08:32 - 2024-04-30 07:40 - 000002063 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2025-02-28 07:41 - 2024-09-11 07:57 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-02-28 07:41 - 2024-09-11 07:57 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-02-25 08:14 - 2021-05-13 23:25 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-02-25 08:14 - 2019-12-07 15:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2025-02-25 08:14 - 2019-12-07 15:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2025-02-25 08:14 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2025-02-22 18:20 - 2024-10-20 17:26 - 000000000 ____D C:\Program Files\HP
2025-02-14 09:02 - 2024-08-02 09:06 - 000000000 ____D C:\ProgramData\Wondershare
2025-02-14 08:48 - 2021-05-13 23:07 - 000467112 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-02-14 08:46 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2025-02-14 08:44 - 2024-07-12 06:44 - 000000000 ____D C:\WINDOWS\system32\compatrel
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2025-02-14 08:44 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-02-14 08:43 - 2023-12-19 09:26 - 000000000 ____D C:\WINDOWS\InboxApps
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-02-14 08:43 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2025-02-14 08:43 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2025-02-13 07:59 - 2021-01-15 18:01 - 000000000 ____D C:\ProgramData\Packages
2025-02-13 07:59 - 2021-01-15 17:59 - 000000000 ____D C:\Users\steph\AppData\Local\Packages
2025-02-13 07:49 - 2021-05-26 12:39 - 000000000 ____D C:\ProgramData\Adobe
2025-02-13 07:49 - 2021-01-15 17:59 - 000000000 ____D C:\Users\steph\AppData\Roaming\Adobe
2025-02-13 07:48 - 2021-05-26 12:33 - 000000000 ____D C:\Users\steph\AppData\Local\Adobe
2025-02-12 18:06 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-02-12 17:36 - 2021-05-13 23:11 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-02-12 14:17 - 2021-01-17 20:21 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-02-12 14:00 - 2021-01-17 20:21 - 209365816 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-02-11 20:35 - 2024-08-02 09:01 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2025-02-11 20:27 - 2024-08-02 09:06 - 000000000 ____D C:\Users\steph\AppData\Roaming\Wondershare
2025-02-10 08:47 - 2023-03-21 08:49 - 000001081 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2025-02-10 08:47 - 2023-03-21 08:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
==================== Fichiers à la racine de certains dossiers ========
2023-03-03 08:49 - 2023-03-03 08:49 - 000000171 _____ () C:\Users\steph\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2021-01-15 18:04 - 2025-03-10 13:58 - 000000184 _____ () C:\Users\steph\AppData\Roaming\sp_data.sys
2024-04-24 06:51 - 2024-04-24 06:51 - 000003584 _____ () C:\Users\steph\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== Fin de FRST.txt ========================