.Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2023 Exécuté par chqntql (administrateur) sur DESKTOP-NBDT4DF (ASUSTeK COMPUTER INC. X705UVP) (18-10-2023 14:46:23) Exécuté depuis C:\Users\chqntql\Desktop\FRST64(1).exe Profils chargés: chqntql Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3570 (X64) Langue: Français (France) Navigateur par défaut: Edge Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe (C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe (DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe (explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12129.10001.1009.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (explorer.exe ->) (ASUSTek Computer Inc. -> ASUSTek Computer Inc) C:\Program Files (x86)\ASUS\Giftbox\Asusgiftbox.exe <4> (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe (explorer.exe ->) (TomTom International B.V. -> TomTom) C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe (Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5> (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\AsBhcSrv.exe (services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe (services.exe ->) (CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (services.exe ->) (ICEpower a/s -> ICEpower A/S) C:\Windows\System32\ICEsoundService64.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe (services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.105.3214.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <5> (svchost.exe ->) (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\BhcMgr.exe (svchost.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe (svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2308.3.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Windows.Media.BackgroundPlayback.exe (svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1893312 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11561184 2023-10-17] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files\Opera\assistant\browser_assistant.exe [1752480 2023-10-06] (Opera Norway AS -> Opera Software) HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION HKU\S-1-5-21-1155520083-3846007108-4210782761-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2589608 2023-10-17] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1155520083-3846007108-4210782761-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2161624 2020-05-03] (TomTom International B.V. -> TomTom) HKU\S-1-5-21-1155520083-3846007108-4210782761-1001\...\Run: [MicrosoftEdgeAutoLaunch_E190F22C696D67BBDC717441ED7AEE78] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4131264 2023-10-13] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1155520083-3846007108-4210782761-1001\...\MountPoints2: {ebc89072-faba-11ed-bd40-9822ef4c54e7} - "D:\RA64\viewer64.exe" ==================== Tâches planifiées (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du RegistrTask: {4DB7A79F-56B1-4750-A3CA-AE341877A8BC} - System32\Tasks\ASUS Battery Health Charging Notification => C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\BhcMgr.exe [2480504 2017-04-26] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {FAC37BE3-0A92-47E1-BEC7-D1337A6EA813} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [55808 2017-05-24] (ASUS) [Fichier non signé] Task: {AA6B7675-F057-470F-BAB9-26389C01BD81} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19967504 2016-11-14] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {CA78A9DC-5CED-446F-BD58-0BFE72E2E79E} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [1579296 2016-11-09] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) [Fichier non signé] Task: {D8D78F67-9993-4930-9E21-3503F38D797F} - System32\Tasks\ASUSTek Computer Inc\ASUS GIFTBOX => C:\Program Files (x86)\ASUS\Giftbox\asusgiftbox.exe [1049608 2017-07-03] (ASUSTek Computer Inc. -> ASUSTek Computer Inc) Task: {7436F231-8A32-49DC-A851-745FDBBB96D8} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124280 2017-03-21] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {53809EE6-4A9E-4697-BD9D-1235284C8007} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124280 2017-03-21] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) Task: {DE6EBD98-39FD-4F57-9107-4777E6A67448} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-16] (Dropbox, Inc -> Dropbox, Inc.) Task: {94940A92-274F-4558-B138-DE6ECCF5B8DB} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-16] (Dropbox, Inc -> Dropbox, Inc.) Task: {7D0B03DF-6316-4D6A-8A55-FF046A858A78} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [668464 2017-02-24] (Intel(R) Trust Services -> Intel(R) Corporation) Task: {C7D263F9-F339-453B-BD7E-FC51FCE06196} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26977976 2023-10-07] (Microsoft Corporation -> Microsoft Corporation) Task: {CC1BC338-54C1-4B22-8790-728D4F333E60} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26977976 2023-10-07] (Microsoft Corporation -> Microsoft Corporation) Task: {6B88ED04-600D-4D1C-B525-F3B55A82A965} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [160736 2023-10-14] (Microsoft Corporation -> Microsoft Corporation) Task: {EEB9925D-47FE-4A1D-9C8A-726CFC2AF411} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [160736 2023-10-14] (Microsoft Corporation -> Microsoft Corporation) Task: {C174A021-1A43-4D2A-904E-061E8787189F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169136 2023-10-06] (Microsoft Corporation -> Microsoft Corporation) Task: {9F1C0B8C-5E0A-4CC2-BB52-DE568E779FD5} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {D2EA4A01-DDEB-407D-BEAA-3B886AD27B2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {7B687C9B-A823-4D61-9976-61E20D5F7EF9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {BBF6B676-4411-4ED2-B353-D8902FCD82D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {A17AF766-1271-4377-BC45-67781D5E193C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {30CB698C-3AA9-4A50-BD7C-1DBC4AF7C2FE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-10-14] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {6E91AC61-DB5C-4823-A248-3C0915CB8270} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718240 2023-10-14] (Mozilla Corporation -> Mozilla Foundation) Task: {9CCCE5EB-7BEE-485D-9F16-F4255B6F9838} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {86E017D5-A846-4028-821C-9BAFF6394601} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1693632 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3315C90A-9736-42F4-BB2D-63725A066EEE} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [946112 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {D4F1537D-9884-4221-A962-C716449BE88D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [649152 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {9FC6A78C-1DEA-4127-BC3B-75C72F0F5324} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [649152 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {AB5B1577-A675-41BA-A36E-CEED8BB43B95} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436672 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F8E12167-003C-4504-9BD6-0F6F4D797FAD} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {4160138A-EEE5-4691-9372-4D17DD1AFE8C} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-05-03] (NVIDIA Corporation -> NVIDIA Corporation) Task: {23A33C83-B7CA-405C-8674-8D1E7BEAB894} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-10-17] (Microsoft Corporation -> Microsoft Corporation) Task: {11B4CA8A-6D7D-4372-A24D-EABFE8ABD50B} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1155520083-3846007108-4210782761-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130736 2023-10-17] (Microsoft Corporation -> Microsoft Corporation) Task: {25AA7F3B-2FA0-4556-A198-B9A7CC098DEA} - System32\Tasks\Opera scheduled assistant Autoupdate 1576776823 => C:\Program Files\Opera\launcher.exe [2820000 2023-10-16] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files\Opera\assistant" $(Arg0) Task: {C4888D3D-5638-42E6-AD08-CC351A6B8829} - System32\Tasks\Opera scheduled Autoupdate 1524061133 => C:\Program Files\Opera\launcher.exe [2820000 2023-10-16] (Opera Norway AS -> Opera Software) Task: {987D1AB0-AB0D-409D-8615-9B46B42C46C2} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618080 2020-08-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {A3B1FA5C-9A3D-4641-89A3-E54C868FF968} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618080 2020-08-27] (Realtek Semiconductor Corp. -> Realtek Semiconductor) Task: {2CA81A25-C27A-439E-803C-31A275F89E7A} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [143160 2019-03-12] (ASUSTek Computer Inc. -> ASUSTek Computer Inc.) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe askMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{8154cc62-acdf-4665-a80e-06304aca50e2}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{de2d7c84-0888-420c-8bb0-b31a97f814dc}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)] Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)] Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)] Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] Edge DefaultProfile: Default Edge Profile: C:\Users\chqntql\AppData\Local\Microsoft\Edge\User Data\Default [2023-10-18] Edge Extension: (Google Docs hors connexion) - C:\Users\chqntql\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-28] Edge Extension: (Edge relevant text changes) - C:\Users\chqntql\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-28] FireFox: ======== FF DefaultProfile: 8ta94sdx.default FF ProfilePath: C:\Users\chqntql\AppData\Roaming\Mozilla\Firefox\Profiles\8ta94sdx.default [2023-10-18] FF Notifications: Mozilla\Firefox\Profiles\8ta94sdx.default -> hxxps://www.pinterest.fr; hxxps://www.interflora.fr; hxxps://www.just4camper.fr; hxxps://www.trigano-camping.com FF Extension: (Template Search) - C:\Users\chqntql\AppData\Roaming\Mozilla\Firefox\Profiles\8ta94sdx.default\Extensions\{4e023032-b2c9-46f1-a459-6eaa627a7d7e}.xpi [2023-07-03] [UpdateUrl:hxxps://cdn.templatesearch-cdn.org/xpi/templateSearch/yhs/0820/search/updates.json] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-08-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-10-06] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation) Opera: ======= OPR Profile: C:\Users\chqntql\AppData\Roaming\Opera Software\Opera Stable [2023-10-06] OPR Notifications: Opera Stable -> hxxps://www.youtube.com OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding} OPR Extension: (Rich Hints Agent) - C:\Users\chqntql\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-03-11] OPR Extension: (Amazon Assistant Promotion) - C:\Users\chqntql\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-03-11] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R2 AsBhcService; C:\Program Files (x86)\ASUS\ASUS Battery Health Charging\AsBhcSrv.exe [114360 2016-10-20] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12860928 2023-10-07] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-16] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-16] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-10-17] (Dropbox, Inc -> Dropbox, Inc.) S3 DevActSvc; C:\Program Files (x86)\ASUS\ASUS Device Activation\DevActSvc.exe [326032 2018-06-05] (ASUSTeK Computer Inc. -> ) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.211.1010.0001\FileSyncHelper.exe [3505576 2023-10-17] (Microsoft Corporation -> Microsoft Corporation) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.211.1010.0001\OneDriveUpdaterService.exe [3841960 2023-10-17] (Microsoft Corporation -> Microsoft Corporation) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> ) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe [3116904 2023-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe [133584 2023-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) S3 ZenAnywhere; C:\Program Files\Orbweb Inc\ZenAnywhere\ZenAnywhere.exe [154456 2017-05-25] (Orbweb Taiwan Inc. -> Orbweb Inc.) S3 ZenAnywhere Updater; C:\Program Files\Orbweb Inc\ZenAnywhere\updater.exe [154456 2017-05-25] (Orbweb Taiwan Inc. -> Orbweb Inc.) S3 ZenAnywhereNetworkService; C:\Program Files\Orbweb Inc\ZenAnywhere\bin\ZenAnywhereNetworkService.exe [67416 2017-04-07] (Orbweb Taiwan Inc. -> Orbweb Inc.) R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin" ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [29312 2016-11-14] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.) R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé] S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé] R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS) R3 MpKsl2f395fd8; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{ED52D706-CB5A-4406-B475-6F21CD01B4F9}\MpKslDrv.sys [263560 2023-10-18] (Microsoft Windows -> Microsoft Corporation) R3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-10-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [572712 2023-10-06] (Microsoft Windows -> Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (NGO -> MBB) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105872 2023-10-06] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2023-10-18 14:12 - 2023-10-18 14:16 - 000063540 _____ C:\Users\chqntql\Desktop\Addition.txt 2023-10-18 13:57 - 2023-10-18 14:49 - 000026179 _____ C:\Users\chqntql\Desktop\FRST.txt 2023-10-18 13:53 - 2023-10-18 14:48 - 000000000 ___DC C:\FRST 2023-10-18 11:44 - 2023-10-18 11:31 - 002383360 _____ (Farbar) C:\Users\chqntql\Desktop\FRST64(1).exe 2023-10-18 11:44 - 2023-10-18 11:20 - 017633400 _____ (TopWin Software Limited) C:\Users\chqntql\Desktop\windows-movie-maker-new-multi.exe 2023-10-17 20:08 - 2023-10-17 20:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2023-10-17 15:52 - 2023-10-17 15:52 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2023-10-14 12:27 - 2023-10-17 19:47 - 000000000 ____D C:\Program Files\Mozilla Firefox 2023-10-14 10:25 - 2023-10-14 10:25 - 000000000 ____D C:\Users\chqntql\AppData\Local\Backup 2023-10-13 13:00 - 2023-10-13 13:00 - 000000000 ____D C:\Users\chqntql\Documents\renolink 2.09 2023-10-13 13:00 - 2023-10-12 12:01 - 000001087 _____ C:\Users\chqntql\Documents\RenOLink.lnk 2023-10-12 12:01 - 2023-10-12 12:01 - 000001087 _____ C:\Users\chqntql\Desktop\RenOLink.lnk 2023-10-12 12:01 - 2023-10-12 12:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RenOLink 2023-10-12 11:52 - 2023-10-12 14:24 - 000000000 ____D C:\Program Files (x86)\RenOLink 2023-10-12 11:52 - 2023-10-12 12:01 - 000000000 ___DC C:\DDT2000data 2023-10-11 18:49 - 2023-10-11 18:49 - 000016059 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json 2023-10-11 17:06 - 2023-10-11 17:06 - 000000000 __HDC C:\$WinREAgent 2023-10-06 16:55 - 2023-10-06 16:55 - 000000000 ____D C:\Program Files\Common Files\DESIGNER ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2023-10-18 14:46 - 2020-11-01 13:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2023-10-18 14:22 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2023-10-18 14:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2023-10-18 14:21 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2023-10-18 13:55 - 2020-11-01 14:54 - 000003984 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1524061133 2023-10-18 13:55 - 2018-04-18 16:19 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk 2023-10-18 13:55 - 2018-04-18 16:12 - 000000000 ____D C:\Program Files\Opera 2023-10-18 13:51 - 2022-02-09 14:13 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2023-10-18 13:49 - 2018-04-17 15:15 - 000000200 _____ C:\Users\chqntql\AppData\Roaming\sp_data.sys 2023-10-18 13:47 - 2018-04-18 15:23 - 000000000 ____D C:\Users\chqntql\AppData\Local\Dropbox 2023-10-18 13:46 - 2018-05-10 15:11 - 000000000 ____D C:\Users\chqntql\Desktop\Dossiers 2023-10-18 13:44 - 2018-04-17 15:12 - 000000000 __SHD C:\Users\chqntql\IntelGraphicsProfiles 2023-10-17 20:43 - 2017-12-15 06:20 - 000000000 ____D C:\ProgramData\NVIDIA 2023-10-17 20:11 - 2018-04-18 15:23 - 000000000 ____D C:\Program Files (x86)\Dropbox 2023-10-17 19:55 - 2020-11-01 14:28 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2023-10-17 19:55 - 2019-12-07 16:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat 2023-10-17 19:55 - 2019-12-07 16:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat 2023-10-17 19:55 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2023-10-17 19:47 - 2021-09-10 15:34 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2023-10-17 19:47 - 2020-11-01 14:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2023-10-17 19:47 - 2020-08-29 09:15 - 000008192 ___SH C:\DumpStack.log.tmp 2023-10-17 19:47 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2023-10-17 19:47 - 2018-04-18 17:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2023-10-17 19:47 - 2017-12-15 06:22 - 000000000 ___HD C:\Intel 2023-10-17 11:05 - 2021-12-11 09:53 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1155520083-3846007108-4210782761-1001 2023-10-17 11:05 - 2020-11-01 14:54 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2023-10-17 11:04 - 2020-10-31 14:32 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2023-10-16 11:03 - 2021-09-07 15:46 - 000000000 ____D C:\Users\chqntql\AppData\Local\D3DSCache 2023-10-15 15:14 - 2020-07-21 16:20 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2023-10-14 15:34 - 2018-04-18 17:33 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2023-10-14 14:50 - 2017-12-15 06:58 - 000000000 ____D C:\Program Files\Microsoft Office 2023-10-14 10:35 - 2018-04-18 17:24 - 000000000 ____D C:\Users\chqntql\AppData\Local\CrashDumps 2023-10-13 12:52 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2023-10-13 12:43 - 2020-11-01 13:43 - 000537216 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2023-10-12 14:44 - 2019-12-07 11:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2023-10-12 14:37 - 2019-12-07 16:49 - 000000000 ____D C:\WINDOWS\SysWOW64\fr 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com 2023-10-12 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2023-10-12 14:35 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP 2023-10-12 14:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2023-10-12 14:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2023-10-12 14:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2023-10-12 14:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2023-10-12 14:35 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2023-10-12 14:34 - 2020-11-01 11:52 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB 2023-10-12 14:34 - 2019-12-07 16:49 - 000000000 ____D C:\WINDOWS\system32\fr 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\F12 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Com 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser 2023-10-12 14:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2023-10-12 14:31 - 2020-11-01 11:52 - 000000000 ____D C:\WINDOWS\en-GB 2023-10-12 14:31 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2023-10-12 14:31 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\IME 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System 2023-10-12 14:31 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender 2023-10-12 14:31 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing 2023-10-12 11:47 - 2018-04-17 15:18 - 000000000 ___RD C:\Users\chqntql\OneDrive 2023-10-11 23:40 - 2022-03-01 11:27 - 000000000 ____D C:\Program Files\RUXIM 2023-10-11 21:00 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2023-10-11 20:54 - 2019-12-07 16:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll 2023-10-11 20:54 - 2019-12-07 11:15 - 000208384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll 2023-10-11 20:54 - 2019-12-07 11:14 - 000232448 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll 2023-10-11 18:47 - 2020-11-01 13:47 - 003014144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2023-10-11 16:18 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2023-10-11 15:29 - 2018-04-19 12:46 - 000000000 ____D C:\WINDOWS\system32\MRT 2023-10-11 15:10 - 2018-04-19 12:44 - 181553176 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2023-10-06 22:02 - 2020-11-01 13:51 - 000000000 ____D C:\Users\chqntql 2023-10-06 20:15 - 2018-04-20 14:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2023-10-06 16:23 - 2023-07-02 07:52 - 000004170 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1576776823 2023-09-28 12:41 - 2018-07-11 18:15 - 000000000 ____D C:\ProgramData\Packages ==================== Fichiers à la racine de certains dossiers ======== 2018-04-28 13:04 - 2018-04-28 13:04 - 003080576 _____ () C:\Users\chqntql\ZHPDiag3.exe 2018-04-17 15:15 - 2023-10-18 13:49 - 000000200 _____ () C:\Users\chqntql\AppData\Roaming\sp_data.sys 2022-07-08 20:17 - 2022-07-08 20:17 - 000000813 _____ () C:\Users\chqntql\AppData\Local\recently-used.xbel 2021-08-19 17:38 - 2021-08-19 17:38 - 000000000 _____ () C:\Users\chqntql\AppData\Local\{9D09D8C4-BBC0-4386-AA50-0BCB13CBCEB3} ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ======================== ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{8154cc62-acdf-4665-a80e-06304aca50e2}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{de2d7c84-0888-420c-8bb0-b31a97f814dc}: [DhcpNameServer] 192.168.1.1 Edge: ======= Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)] Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)] Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)] Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)] Edge DefaultProfile: Default Edge Profile: C:\Users\chqntql\AppData\Local\Microsoft\Edge\User Data\Default [2023-10-18] Edge Extension: (Google Docs hors connexion) - C:\Users\chqntql\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-28] Edge Extension: (Edge relevant text changes) - C:\Users\chqntql\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-28] FireFox: ======== FF DefaultProfile: 8ta94sdx.default FF ProfilePath: C:\Users\chqntql\AppData\Roaming\Mozilla\Firefox\Profiles\8ta94sdx.default [2023-10-18] FF Notifications: Mozilla\Firefox\Profiles\8ta94sdx.default -> hxxps://www.pinterest.fr; hxxps://www.interflora.fr; hxxps://www.just4camper.fr; hxxps://www.trigano-camping.com FF Extension: (Template Search) - C:\Users\chqntql\AppData\Roaming\Mozilla\Firefox\Profiles\8ta94sdx.default\Extensions\{4e023032-b2c9-46f1-a459-6eaa627a7d7e}.xpi [2023-07-03] [UpdateUrl:hxxps://cdn.templatesearch-cdn.org/xpi/templateSearch/yhs/0820/search/updates.json] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-08-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-10-06] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation) Opera: ======= OPR Profile: C:\Users\chqntql\AppData\Roaming\Opera Software\Opera Stable [2023-10-06] OPR Notifications: Opera Stable -> hxxps://www.youtube.com OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding} OPR Extension: (Rich Hints Agent) - C:\Users\chqntql\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-03-11] OPR Extension: (Amazon Assistant Promotion) - C:\Users\chqntql\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-03-11]