Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 22-08.2024 Exécuté par jacqu (administrateur) sur PC2EN1 (LENOVO 82HU) (03-09-2024 09:02:36) Exécuté depuis C:\Users\jacqu\Downloads\FRST64.exe Profils chargés: jacqu Plate-forme: Microsoft Windows 11 Famille Version 24H2 26120.1542 (X64) Langue: Français (France) Navigateur par défaut: Chrome Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (082E9164-EE6C-4EC8-B62C-441FAE7BEFA1 -> Mozilla Corporation) C:\Program Files\WindowsApps\Mozilla.Firefox_129.0.2.0_x64__n80bbvh6b1yt2\VFS\ProgramFiles\Firefox Package Root\firefox.exe <21> (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19009.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19009.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe (C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(DeviceSettingsSystemAddin).exe (C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(GenericMessagingAddin).exe (C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(LenovoServiceBridgeAddin).exe (C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantage-(VantageCoreAddin).exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\KeyboardManagerEngine\PowerToys.KeyboardManagerEngine.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.AlwaysOnTop.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.Awake.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.ColorPickerUI.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.CropAndLock.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.FancyZones.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.MouseJumpUI.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.MouseWithoutBorders.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.PowerAccent.exe (C:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.PowerOCR.exe (C:\Program Files\PowerToys\PowerToys.MouseWithoutBorders.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.MouseWithoutBordersHelper.exe (C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19009.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19009.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe (C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19009.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.19009.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe (C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe (drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\24.5.1.4\x64\AppProvisioningPlugin.exe (drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDCUserAgent.exe (DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_da86a3091f808822\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~2.INF\DAX3API.exe (DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\FnHotkeyCapsLKNumLK.exe (DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\FnHotkeyUtility.exe (DriverStore\FileRepository\u0405067.inf_amd64_1b92cde6bc4a8793\B404951\atiesrxx.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405067.inf_amd64_1b92cde6bc4a8793\B404951\atieclxx.exe (explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2407.3.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingTool.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.PowerLauncher.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\WinUI3Apps\PowerToys.Peek.UI.exe (explorer.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Gen Digital Inc. -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe (LNBITSSvc.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\AutoModeDetect.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8> (services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_da86a3091f808822\DAX3API.exe (services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe (services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe (services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe (services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\YMC.exe (services.exe ->) (Lenovo -> Lenovo(beijing) Limited) C:\Windows\System32\LNBITSSvc.exe (services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe (services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe (services.exe ->) (Lenovo Limited Company) [Fichier non signé] C:\Program Files\Lenovo\LVA Pro Service\VoiceAssistantService.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrsr.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0405067.inf_amd64_1b92cde6bc4a8793\B404951\atiesrxx.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\NisSrv.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b8eb0d84f58606e5\RtkAudUService64.exe <2> (services.exe ->) (Shenzhen Goodix Technology Co., Ltd. -> Goodix) C:\Windows\System32\drivers\SessionService.exe (services.exe ->) (Wacom Co., Ltd. -> Wacom Technology, Corp.) C:\Windows\System32\DriverStore\FileRepository\wtabletserviceisd.inf_amd64_b1b6b85c93a31d53\WTabletServiceISD.exe <2> (sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24081.51.0_x64__cw5n1h2txyewy\CrossDeviceService.exe (sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\ShellHost.exe (svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2434.5.0_x64__cv1g1gvanyjgm\WhatsApp.exe (svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.StorePurchaseApp_22407.1401.0.0_x64__8wekyb3d8bbwe\StoreExperienceHost.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\PowerToys\PowerToys.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.4.0.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.124.7102.0_x64__8wekyb3d8bbwe\GameBar.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.124.7102.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b8eb0d84f58606e5\RtkAudUService64.exe [1631128 2022-12-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [LVAW] => C:\Program Files\Lenovo\LVA Pro Service\StartupHelper.exe [689152 2022-08-19] (Lenovo Limited Company) [Fichier non signé] HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> ) HKLM-x32\...\Run: [Family Tree Builder Update] => C:\Program Files (x86)\MyHeritage\Bin\FTBCheckUpdates.exe [18623680 2023-10-05] (MyHeritage (USA) Inc. -> MyHeritage) HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919200 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919200 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-2611112945-1519522136-3444468991-1001\...\Run: [MicrosoftEdgeAutoLaunch_6E3718692237A865C79EA62865AADB59] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3895232 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-2611112945-1519522136-3444468991-1001\...\Run: [ProtonVPN] => C:\Program Files\Proton\VPN\ProtonVPN.Launcher.exe [12287472 2024-03-27] (Proton AG -> ProtonVPN) HKU\S-1-5-21-2611112945-1519522136-3444468991-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45120304 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd) HKU\S-1-5-21-2611112945-1519522136-3444468991-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919200 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-2611112945-1519522136-3444468991-1002\...\Run: [MicrosoftEdgeAutoLaunch_B128130DE50E8B3879CA034B5B28F532] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --win-session-start [3895232 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Print\Monitors\Virtual Port Monitor: C:\WINDOWS\system32\VirtualMon.dll [192512 2024-08-21] (Microsoft Windows -> Microsoft Corporation) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\128.0.6613.114\Installer\chrmstp.exe [2024-09-03] (Google LLC -> Google LLC) HKLM\Software\...\Winlogon\GPExtensions: [{9F02E2F5-5A41-4D1A-B473-4617E84BC957}] -> C:\WINDOWS\system32\WindowsProtectedPrintConfiguration.dll [2024-08-21] (Microsoft Windows -> Microsoft Corporation) Startup: C:\Users\jacqu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2024-03-04] ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation) Startup: C:\Users\jacqu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\WhatsApp - Raccourci.lnk [2022-09-21] ShortcutTarget: WhatsApp - Raccourci.lnk -> (Pas de fichier) ==================== Tâches planifiées (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {BFC1F299-1926-4AD9-8F40-F2A30A92B50E} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [829408 2024-08-16] (Gen Digital Inc. -> Gen Digital Inc.) Task: {F8D4E5A0-6B69-4E0F-B5CF-B50FD045614B} - System32\Tasks\CCleanerClean => C:\Program Files\CCleaner\CCleaner.exe [39072560 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd) Task: {E7CDE94B-93E4-4DC4-B012-FF16E722A297} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5075248 2024-08-16] (Gen Digital Inc. -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "f87ed5e4-98e8-42f9-a798-e98132436144" --version "6.27.11214" --silent Task: {F3EE87DC-99D8-4D79-BD72-A96C6D1F2052} - System32\Tasks\CCleanerSkipUAC - jacqu => C:\Program Files\CCleaner\CCleaner.exe [39072560 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd) Task: {3A215800-060F-4571-AD9C-E54B552570C2} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{C1A10148-3E4A-4717-9DEB-1ABFF064E611} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC) Task: {CE2ADE13-84D5-4798-8DD9-B14D770D2519} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2611112945-1519522136-3444468991-1001Core{71473BC5-FA2F-42CE-9A58-047E6859F863} => C:\Users\jacqu\AppData\Local\Google\Update\GoogleUpdate.exe /c (Pas de fichier) Task: {E39E886D-555A-4EDB-B81E-2111EA24E33A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2611112945-1519522136-3444468991-1001UA{6E3E6368-D699-4F2F-A412-F03583845BB4} => C:\Users\jacqu\AppData\Local\Google\Update\GoogleUpdate.exe /ua /installsource scheduler (Pas de fichier) Task: {D1589A45-CD0F-4C4A-B803-A592B1C1A7A1} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.) Task: {8C0E17BD-767B-412E-B5E8-EDB9879FE4B0} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2024-04-01] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService Task: {1D5D9565-4579-45C1-9789-23EEE76E8E3C} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2024-04-01] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32 Task: {E33752DE-A0D0-4083-90F0-FBFD72B127F5} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\1cf586f6-1c40-43e0-ac39-22fa0ce66d80 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.) Task: {C8B2AFB5-720C-4882-AD8C-4AC7698D7254} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\231d6dec-beac-43ec-bc1a-52f07d4230f3 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.) Task: {5A5F168B-9E6E-42C9-84BD-AA0FACA27D2D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\2765266f-9cea-4e65-afbc-e0aa4152b20a => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.) Task: {283C646E-E7FC-490A-84EA-696E47BC220C} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\3fc92d64-afd8-43ad-a72c-eafcdd5a7f4c => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.) Task: {CBF4D2FF-B235-4FC9-B517-C01DC57321A5} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\f44dbf55-2e2d-4d21-878e-1b391bf32ac2 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.) Task: {FC0C6405-6EA1-4C2C-9523-03BA1E44D182} - System32\Tasks\Lenovo\LenovoWelcomeLauncher => C:\Program Files (x86)\Lenovo\LenovoWelcome\x86\LenovoWelcome.exe [1007952 2022-07-12] (Lenovo -> Lenovo Group Ltd.) -> C:\Program Files (x86)\Lenovo\LenovoWelcome\x86\/task Task: {654D77F8-5A89-485D-8F9E-6495902A2FF2} - System32\Tasks\Lenovo\LenovoWelcomeTask => C:\Program Files (x86)\Lenovo\LenovoWelcome\x86\LenovoWelcomeTask.exe [1557840 2022-07-12] (Lenovo -> Lenovo Group Ltd.) -> C:\Program Files (x86)\Lenovo\LenovoWelcome\x86\$(EventData) Task: {1C7E5326-3ECF-439B-845C-E687BF1E1594} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2024-04-01] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210 Task: {20614649-DF98-4AAE-9935-D9B91A9B4262} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [90976 2024-08-06] (Lenovo -> Lenovo Group Ltd.) -> C:\windows\system32\drivers\Lenovo\udc\Service\/onidle Task: {756A8CBD-BE57-4D82-B728-26357782A1CC} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [193248 2024-08-06] (Lenovo -> Lenovo Group Ltd.) Task: {01B4292B-630D-4CF0-A693-ABDF393D37BA} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2024-04-01] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService Task: {A7211171-9BAD-4B9A-A15D-AEB5442F2042} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {19D900E6-3041-4376-85F5-9FDE655649CF} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {89011A49-5E28-4A59-81AD-245D84DE28EE} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {657B2ACA-01A7-42DA-976C-8AB2CBA6FA7C} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {5A1048BB-8EED-4DF0-99F2-C10158C8BF39} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {6D121FF5-F94E-4F34-97C8-9EA977EFE087} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {341618CC-AF29-44D5-8985-A3F258C6AFA3} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.SScan => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {DFDAA248-3563-4B28-933A-0F0354A492FF} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {0ABEB10E-E053-40AD-9D13-AAD49DA1B76A} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {2334338E-D453-4FDE-8E81-6C25055658C8} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {7C1E3CB9-A62F-42E2-A3B2-E8ED8A6D1D8F} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {59408B86-5A50-46FE-AD7A-7D8329677C9B} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {69C1E1C5-E240-4C39-9ECD-C0A0F905CE7A} - System32\Tasks\Lenovo\Vantage\Schedule\SmartLock.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {F1517375-54FA-4E93-B62C-A1B3C9DDBD43} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {A8B586B0-E4F9-4B85-8E5C-E972895D5F0C} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\ScheduleEventAction.exe [30160 2024-07-16] (Lenovo -> Lenovo) Task: {053244F9-0BEF-4A5D-A68D-E1A410F719FA} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\uninstall.exe [345448 2024-07-16] (Lenovo -> Lenovo) Task: {D78BAC62-8BB1-4D47-8F8D-F95294551DF6} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28617456 2024-08-27] (Microsoft Corporation -> Microsoft Corporation) Task: {2D67A2C5-6FEE-402B-A479-8D8E4F1FF8A9} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28617456 2024-08-27] (Microsoft Corporation -> Microsoft Corporation) Task: {191AB38C-2CFF-48A7-8CAE-77E949A3F1F8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312472 2024-08-31] (Microsoft Corporation -> Microsoft Corporation) Task: {2528C2EB-D574-4D14-B98B-93C51FA5D33E} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312472 2024-08-31] (Microsoft Corporation -> Microsoft Corporation) Task: {5C760FF4-C15E-4B11-A95F-93C744F86EB4} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [187464 2024-08-31] (Microsoft Corporation -> Microsoft Corporation) Task: {D1211565-C8D3-4652-94F0-E7177DB88C70} - System32\Tasks\Microsoft\Windows\Diagnosis\UnexpectedCodepath => C:\WINDOWS\system32\UCConfigTask.exe [77824 2024-08-21] (Microsoft Windows -> ) Task: {CF536A0E-CA4F-438A-9617-F84BEAF60E22} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Pas de fichier) Task: {EC4E1419-ADE4-4C7B-B3E1-C4DE54F3DBA8} - System32\Tasks\Microsoft\Windows\PerformanceTrace\RequestTrace => {9EFEB182-2EE3-4AF9-AFFA-521410D110D1} C:\WINDOWS\system32\PerformanceTraceHandler.dll [114688 2024-07-16] (Microsoft Windows -> Microsoft Corporation) Task: {FD953D65-B217-4C79-946C-40F34EA51665} - System32\Tasks\Microsoft\Windows\ReFsDedupSvc\Initialization => {DCFF735B-64F7-45F3-B39C-6C66BBE2120F} C:\WINDOWS\System32\ReFsDedupSvc.exe [2195456 2024-08-21] (Microsoft Windows -> Microsoft Corporation) Task: {6921181A-1915-4378-916E-2CA0C9661680} - System32\Tasks\Microsoft\Windows\Servicing\OOBEFodSetup => C:\WINDOWS\system32\OOBEFodSetup.exe [40960 2024-07-28] (Microsoft Windows -> Microsoft Corporation) Task: {6E9522D4-5ECB-478B-90ED-91561B8D4524} - System32\Tasks\Microsoft\Windows\SharedPC\Account Cleanup => {7750564D-D61C-4557-8A9D-7DF56BDCFF96} C:\WINDOWS\system32\Windows.SharedPC.AccountManager.dll [270336 2024-07-16] (Microsoft Windows -> Microsoft Corporation) Task: {6B549F30-9F73-486A-9FFB-D9A4B9B0B516} - System32\Tasks\Microsoft\Windows\Sustainability\PowerGridForecastTask => {251E5B1F-E370-4E12-B5BD-B7AD2A8EE810} C:\WINDOWS\system32\PowerGridForecastTask.dll [331776 2024-08-21] (Microsoft Windows -> Microsoft Corporation) Task: {B4715198-913F-4ED3-9995-49887584491F} - System32\Tasks\Microsoft\Windows\Sustainability\SustainabilityTelemetry => {6EE41D75-D091-4FB7-9AD5-018760DD25D4} C:\WINDOWS\system32\EcoScoreTask.dll [90112 2024-08-21] (Microsoft Windows -> Microsoft Corporation) Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier) Task: {AE889AF2-B6E2-4941-8C89-FCD4EB658F9B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UUS Failover Task => C:\WINDOWS\System32\MLEngineStub.exe [86016 2024-07-16] (Microsoft Windows -> Microsoft Corporation) Task: {63925303-17A4-4FFF-A25E-08393810381E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MpCmdRun.exe [1687344 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {58E3B0FD-C945-4375-A09D-A546D14E21FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MpCmdRun.exe [1687344 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {CA2DEEC5-36C2-4B0A-855A-5D59FFBD31EC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MpCmdRun.exe [1687344 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {4F5A70D5-EDE8-430A-B95C-A280BDDD0BCC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MpCmdRun.exe [1687344 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {FDBABAEE-A5E5-4911-8D94-ABC4E71C9EDB} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209056 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) Task: {BC76116D-199F-4A66-9E74-032A071A45E7} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2611112945-1519522136-3444468991-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209056 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) Task: {670B2FAB-2ACF-4DB2-B6D4-BC17AC46BF37} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2611112945-1519522136-3444468991-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209056 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) Task: {B0DD8D7B-558F-40AD-B0B4-C9FD9336AFAD} - System32\Tasks\PowerToys\Autorun for jacqu => C:\Program Files\PowerToys\PowerToys.exe [1216544 2024-01-05] (Microsoft Corporation -> Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\CCleanerClean.job => C:\Program Files\CCleaner\CCleaner.exe Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 Tcpip\..\Interfaces\{94a841fa-1c6a-45f1-ae95-f4a83fd1c58d}\6427565626F687D2134413349334F5548545: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{f0761e5a-e06e-405c-a5f6-9b7589e79e31}: [DhcpNameServer] 192.168.1.254 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\jacqu\AppData\Local\Microsoft\Edge\User Data\Default [2024-09-03] Edge Notifications: Default -> hxxps://www.facebook.com; hxxps://www.msn.com Edge Extension: (Google Docs hors connexion) - C:\Users\jacqu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-26] Edge Extension: (Pas de nom) - C:\Users\jacqu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hokifickgkhplphjiodbggjmoafhignh [2024-04-23] Edge Extension: (Edge relevant text changes) - C:\Users\jacqu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-26] Edge Extension: (Proper Menubar for Microsoft Edge) - C:\Users\jacqu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mdffgnflikkenkkjhkgojbgkjabknlob [2024-08-21] Edge Extension: (Youtube Subscriptions Transfer) - C:\Users\jacqu\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ojnekffpabpincdklmmmlnoanffkfahj [2024-05-02] FireFox: ======== FF DefaultProfile: vn0ivm4b.default FF ProfilePath: C:\Users\jacqu\AppData\Roaming\Zotero\Zotero\Profiles\vn0ivm4b.default [2024-02-15] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-03-14] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-03-15] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin-x32: @videolan.org/vlc,version=3.0.20 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) Chrome: ======= CHR Profile: C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default [2024-09-03] CHR Notifications: Default -> hxxps://android-mt.ouest-france.fr; hxxps://epargnant.epargne-salariale.labanquepostale.fr; hxxps://recoverit.wondershare.fr; hxxps://ripostelaique.com; hxxps://teams.microsoft.com; hxxps://www.android-mt.com; hxxps://www.cherchetrouve.net; hxxps://www.facebook.com; hxxps://www.fff.fr; hxxps://www.hauteloirefootball.fr; hxxps://www.herodote.net; hxxps://www.hihonor.com; hxxps://www.honor.com; hxxps://www.lesmobiles.com; hxxps://www.pagesjaunes.fr; hxxps://www.streamon-sport.top; hxxps://www.youtube.com; hxxps://www.zoomdici.fr CHR Extension: (AdGuard AdBlocker) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2024-08-30] CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-08-29] CHR Extension: (Proper Menubar pour Google Chrome) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\egclcjdpndeoioimlbbbmdhcaopnedkp [2024-08-21] CHR Extension: (I don't care about cookies) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2024-06-27] CHR Extension: (Google Docs hors connexion) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-08-27] CHR Extension: (Spade: Draw on and Annotate the Web & PDFs) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\kamhfnamfpipghhnbaolbgemgnafkejo [2024-01-18] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-07] CHR Extension: (ShortsBlocker - Remove Shorts from YouTube) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\oahiolknhkbpcolgnpljehalnhblolkm [2024-07-08] CHR Extension: (AIPRM for ChatGPT) - C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojnbohmppadfgpejeebfnmnknjdlckgj [2024-09-02] CHR Profile: C:\Users\jacqu\AppData\Local\Google\Chrome\User Data\System Profile [2024-08-05] ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 ApxSvc; C:\WINDOWS\System32\ApxSvc.dll [73728 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1086256 2024-08-16] (Gen Digital Inc. -> Piriform Software Ltd) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13860560 2024-08-27] (Microsoft Corporation -> Microsoft Corporation) R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_da86a3091f808822\DAX3API.exe [2149944 2021-09-02] (Dolby Laboratories, Inc. -> Dolby Laboratories) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.166.0818.0002\FileSyncHelper.exe [3522976 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [423296 2021-10-07] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [241104 2024-08-07] (HP Inc. -> HP Inc.) R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.) R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_1f1bd4b8a7603166\LenovoUtilityService.exe [178656 2024-08-21] (Lenovo -> Lenovo) R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.1.22.0\LenovoVantageService.exe [34664 2024-07-16] (Lenovo -> Lenovo) R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1831672 2022-08-17] (Lenovo -> Lenovo(beijing) Limited) S3 LocalKdc; C:\WINDOWS\system32\localkdcsvc.dll [778240 2024-08-21] (Microsoft Windows -> Microsoft Corporation) R2 LVAWService; C:\Program Files\Lenovo\LVA Pro Service\VoiceAssistantService.exe [683008 2022-08-19] (Lenovo Limited Company) [Fichier non signé] R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MpDefenderCoreService.exe [1431024 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.166.0818.0002\OneDriveUpdaterService.exe [3863456 2024-08-29] (Microsoft Corporation -> Microsoft Corporation) S3 PrintDeviceConfigurationService; C:\WINDOWS\System32\PrintDeviceConfigurationService.dll [172032 2024-08-21] (Microsoft Windows -> Microsoft Corporation) S3 PrintScanBrokerService; C:\WINDOWS\System32\PrintScanBrokerService.dll [155648 2024-08-21] (Microsoft Windows -> Microsoft Corporation) S3 ProtonVPN Service; C:\Program Files\Proton\VPN\v3.2.11\ProtonVPNService.exe [474824 2024-03-27] (Proton AG -> ProtonVPN) S3 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v3.2.11\ProtonVPN.WireGuardService.exe [474312 2024-03-27] (Proton AG -> ProtonVPN) S3 refsdedupsvc; C:\WINDOWS\System32\ReFsDedupSvc.exe [2195456 2024-08-21] (Microsoft Windows -> Microsoft Corporation) R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72416 2024-08-06] (Lenovo -> Lenovo Group Ltd.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\NisSrv.exe [3199520 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.8-0\MsMpEng.exe [133688 2024-08-30] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WSAIFabricSvc; C:\WINDOWS\system32\WSAIFabricHost.dll [249856 2024-08-21] (Microsoft Windows -> Microsoft Corporation) S3 WsaService; C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.0.0_x64__8wekyb3d8bbwe\WsaService\WsaService.exe [317952 2024-07-25] (Microsoft Corporation -> ) R2 YMC; C:\WINDOWS\System32\YMC.exe [856928 2021-07-18] (Lenovo -> Lenovo Group Ltd.) ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 acpipagr; C:\WINDOWS\System32\DriverStore\FileRepository\acpipagr.inf_amd64_864031f05c50286f\acpipagr.sys [49152 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 AcpiPmi; C:\WINDOWS\System32\DriverStore\FileRepository\acpipmi.inf_amd64_e121d98280afa19b\acpipmi.sys [53248 2024-07-16] (Microsoft Windows -> Microsoft Corporation) R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_5f2cd636dbc40dd2\amdfendrmgr.sys [36016 2024-07-19] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0405067.inf_amd64_1b92cde6bc4a8793\B404951\amdkmdag.sys [106384048 2024-07-19] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) R0 amdwps; C:\WINDOWS\System32\drivers\amdwps.sys [67040 2024-07-16] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.) R3 CDD; C:\WINDOWS\System32\cdd.dll [331776 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 devmap; C:\WINDOWS\System32\DriverStore\FileRepository\devmap.inf_amd64_7e07c6665243f0c3\devmap.sys [53248 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 DisplayMux; C:\WINDOWS\System32\DriverStore\FileRepository\displaymux.inf_amd64_9f16c785c468e555\DisplayMux.sys [57344 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm660.sys [161632 2024-03-06] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.) R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222520 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 I3CHost; C:\WINDOWS\System32\DriverStore\FileRepository\i3chost.inf_amd64_708c6a5fcb79a0a7\I3CHost.sys [296256 2024-08-21] (Microsoft Windows -> Microsoft Corporation) S3 kdnic_legacy; C:\WINDOWS\System32\drivers\kdnic_legacy.sys [71072 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [132400 2024-08-11] (Microsoft Windows -> Microsoft Corporation) R3 MsQuicPrev; C:\WINDOWS\System32\drivers\msquicprev.sys [458160 2024-07-16] (Microsoft Windows -> Microsoft Corporation) R3 MTKBTFilterX64; C:\WINDOWS\system32\DRIVERS\mtkbtfilterx.sys [275448 2021-12-16] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.) R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1399768 2021-12-15] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.) S2 NetworkPrivacyPolicy; C:\WINDOWS\System32\DriverStore\FileRepository\networkprivacypolicy.inf_amd64_bd58c45133ad113b\NetworkPrivacyPolicy.sys [102400 2024-07-16] (Microsoft Windows -> ) S3 PlutonHeci; C:\WINDOWS\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_cf70d35f4da49c35\pluton-heci.sys [58680 2024-07-16] (Microsoft Windows -> ) S3 PlutonHsp2; C:\WINDOWS\System32\DriverStore\FileRepository\plutonhsp2.inf_amd64_30a85b77c4d4242b\PlutonHsp2.sys [58800 2024-07-16] (Microsoft Windows -> ) S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v3.2.11\Resources\ProtonVPN.CalloutDriver.sys [34176 2023-11-20] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG) R2 SSPORT; C:\WINDOWS\system32\Drivers\SSPORT.sys [14224 2023-03-29] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc) S3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2022-10-07] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) R1 uiomap; C:\WINDOWS\System32\DriverStore\FileRepository\uiomap.inf_amd64_a6358dd492229021\uiomap.sys [69632 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 UmPass; C:\WINDOWS\System32\DriverStore\FileRepository\umpass.inf_amd64_5b3b9a44467899e0\umpass.sys [53248 2024-07-16] (Microsoft Windows -> Microsoft Corporation) R2 UnionFS; C:\WINDOWS\system32\drivers\UnionFS.sys [501056 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2024-07-16] (Microsoft Windows -> Microsoft Corporation) R3 vwifibus; C:\WINDOWS\System32\DriverStore\FileRepository\netvwifibus.inf_amd64_10cc1f3cd2e0205d\vwifibus.sys [65536 2024-07-16] (Microsoft Windows -> Microsoft Corporation) R3 vwifimp; C:\WINDOWS\System32\DriverStore\FileRepository\netvwifimp.inf_amd64_ebfb361bf17edf76\vwifimp.sys [86016 2024-07-16] (Microsoft Windows -> Microsoft Corporation) R3 WacHIDRouterISDF; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [116536 2021-07-23] (Wacom Co., Ltd. -> Wacom Technology, Corp.) S3 WacHIDRouterISDFV; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [116536 2021-07-23] (Wacom Co., Ltd. -> Wacom Technology, Corp.) S3 WacHIDRouterISDU; C:\WINDOWS\System32\drivers\WacHIDRouterISDU.sys [116552 2021-07-23] (Wacom Co., Ltd. -> Wacom Technology, Corp.) S3 WacHIDRouterISDUV; C:\WINDOWS\System32\drivers\WacHIDRouterISDU.sys [116552 2021-07-23] (Wacom Co., Ltd. -> Wacom Technology, Corp.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22064 2024-08-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602504 2024-08-30] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-08-30] (Microsoft Windows -> Microsoft Corporation) S3 WinAccelCx0101; C:\WINDOWS\System32\drivers\WinAccelCx.sys [144704 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 WinI3C; C:\WINDOWS\System32\DriverStore\FileRepository\wini3c.inf_amd64_aa79d5ba4f260043\WinI3C.sys [75184 2024-08-06] (Microsoft Windows -> Microsoft Corporation) S3 wintun; C:\WINDOWS\System32\drivers\wintun.sys [29592 2023-08-03] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2022-12-30] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_043895cf97d5d780\WSDPrint.sys [57344 2024-07-16] (Microsoft Windows -> Microsoft Corporation) S3 ZTDNS; C:\WINDOWS\System32\drivers\ztdns.sys [107832 2024-07-28] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2024-09-03 09:02 - 2024-09-03 09:03 - 000046046 _____ C:\Users\jacqu\Downloads\FRST.txt 2024-09-03 09:01 - 2024-09-03 09:02 - 000000000 ____D C:\FRST 2024-09-03 09:00 - 2024-09-03 09:00 - 002397184 _____ (Farbar) C:\Users\jacqu\Downloads\FRST64.exe 2024-09-03 08:16 - 2024-09-03 08:16 - 000807964 _____ C:\Users\jacqu\Downloads\20240829_fco-btv3-communes-departements-zone-regulee-btv3.xlsx 2024-09-02 17:14 - 2024-09-02 17:14 - 000122825 _____ C:\Users\jacqu\Downloads\export_marques_20240902171427.csv 2024-09-02 17:14 - 2024-09-02 17:14 - 000122825 _____ C:\Users\jacqu\Downloads\export_marques_20240902171427(1).csv 2024-09-02 07:48 - 2024-09-02 07:48 - 000755364 _____ C:\WINDOWS\system32\perfh00C.dat 2024-09-02 07:48 - 2024-09-02 07:48 - 000150716 _____ C:\WINDOWS\system32\perfc00C.dat 2024-08-31 09:21 - 2024-08-31 09:21 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2024-08-30 07:22 - 2024-08-31 16:56 - 000000000 ____D C:\Users\jacqu\AppData\Roaming\Telegram Desktop 2024-08-30 07:22 - 2024-08-30 07:22 - 000001055 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\Telegram.lnk 2024-08-30 07:22 - 2024-08-30 07:22 - 000000000 ____D C:\Users\jacqu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop 2024-08-29 17:49 - 2024-08-29 17:49 - 000123149 _____ C:\Users\jacqu\Downloads\Fiche_précontractuelle_Orias.pdf 2024-08-29 17:07 - 2024-08-29 17:07 - 000321414 _____ C:\Users\jacqu\Downloads\CDE_FDC_48_20240829_1705_2425_635891_006758048.pdf 2024-08-28 18:05 - 2024-08-28 18:05 - 000126657 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\Devis_signé_Deberle.pdf 2024-08-26 17:16 - 2024-08-26 17:16 - 000143727 _____ C:\Users\jacqu\Downloads\Mon Devis Assurance Auto (4).pdf 2024-08-26 17:16 - 2024-08-26 17:16 - 000143486 _____ C:\Users\jacqu\Downloads\Mon Devis Assurance Auto (3).pdf 2024-08-26 17:15 - 2024-08-26 17:15 - 000663088 _____ C:\Users\jacqu\Downloads\L'essentiel à savoir (1).pdf 2024-08-26 17:14 - 2024-08-26 17:14 - 000143486 _____ C:\Users\jacqu\Downloads\Mon Devis Assurance Auto (2).pdf 2024-08-26 17:13 - 2024-08-26 17:13 - 000143884 _____ C:\Users\jacqu\Downloads\Mon Devis Assurance Auto (1).pdf 2024-08-26 17:08 - 2024-08-26 17:08 - 000663088 _____ C:\Users\jacqu\Downloads\L'essentiel à savoir.pdf 2024-08-26 17:02 - 2024-08-26 17:02 - 000143884 _____ C:\Users\jacqu\Downloads\Mon Devis Assurance Auto.pdf 2024-08-24 09:49 - 2024-08-24 09:49 - 000963502 _____ C:\Users\jacqu\Downloads\Facture Oculiste.pdf 2024-08-24 08:11 - 2024-08-24 08:11 - 000084507 _____ C:\Users\jacqu\Downloads\ReleveMensuel_Août.pdf 2024-08-23 09:50 - 2024-08-23 09:50 - 000046624 _____ C:\Users\jacqu\Downloads\Décompte Prestations Retraite-20 août 2024.pdf 2024-08-22 08:13 - 2024-08-22 08:13 - 000708309 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2024 (5).pdf 2024-08-22 08:12 - 2024-08-22 08:12 - 000670151 _____ C:\Users\jacqu\Downloads\Carte_verte_digitale_(Ne_pas_imprimer)_01_09_2023.pdf 2024-08-22 08:10 - 2024-08-22 08:10 - 000709469 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\Avis_d'échéance_de_cotisation_01_09_2024 (4).pdf 2024-08-22 08:05 - 2024-08-22 08:05 - 000709469 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2024 (4).pdf 2024-08-21 08:29 - 2024-09-02 10:47 - 000000000 ____D C:\WINDOWS\CbsTemp 2024-08-19 10:59 - 2024-08-19 10:59 - 000003930 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2611112945-1519522136-3444468991-1001UA{6E3E6368-D699-4F2F-A412-F03583845BB4} 2024-08-19 10:59 - 2024-08-19 10:59 - 000003662 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskUserS-1-5-21-2611112945-1519522136-3444468991-1001Core{71473BC5-FA2F-42CE-9A58-047E6859F863} 2024-08-19 10:59 - 2024-08-19 10:59 - 000002306 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk 2024-08-19 10:59 - 2024-08-19 10:59 - 000000000 ____D C:\Users\jacqu\AppData\LocalLow\Google 2024-08-14 19:29 - 2024-08-14 19:29 - 000124522 _____ C:\Users\jacqu\Downloads\Document_827b50ce-a213-4a1f-84f7-8361bc258e41.pdf 2024-08-14 19:29 - 2024-08-14 19:29 - 000124522 _____ C:\Users\jacqu\Downloads\Document_70c7fa61-3de0-426a-9181-7013f5ebc047.pdf 2024-08-14 19:28 - 2024-08-14 19:28 - 000141534 _____ C:\Users\jacqu\Downloads\Document_b83d7a73-64fb-4885-9d9e-ebcdff7b81b7.pdf 2024-08-14 15:53 - 2024-08-14 15:53 - 003344432 _____ C:\Users\jacqu\Downloads\MON_GUIDE_SANTE_AHSM_SALARIES_2023.pdf 2024-08-14 15:53 - 2024-08-14 15:53 - 000183316 _____ C:\Users\jacqu\Downloads\Garanties invisibles - Santé collective.pdf 2024-08-14 15:52 - 2024-08-14 15:52 - 000350323 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\Exemples de remboursement UNOCAM groupe AHSM 2023.pdf 2024-08-14 15:50 - 2024-08-14 15:50 - 000350323 _____ C:\Users\jacqu\Downloads\Exemples de remboursement UNOCAM groupe AHSM 2023.pdf 2024-08-14 15:44 - 2024-08-14 15:44 - 000248016 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\ATTESTATION GENERATION CHANTAL.pdf 2024-08-14 15:43 - 2024-08-14 15:43 - 000248016 _____ C:\Users\jacqu\Downloads\Attestation-3.pdf 2024-08-14 15:22 - 2024-08-14 15:22 - 000213518 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\Les_Conseils_de_Groupama_29188.pdf 2024-08-14 15:22 - 2024-08-14 15:22 - 000213518 _____ C:\Users\jacqu\Downloads\Les_Conseils_de_Groupama_29188.pdf 2024-08-14 15:18 - 2024-08-14 15:18 - 000213518 _____ C:\Users\jacqu\Downloads\Les_Conseils_de_Groupama_36441.pdf 2024-08-14 15:03 - 2024-08-14 15:03 - 000393234 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\CA_Devis_AutomobileCLIO.pdf 2024-08-14 14:59 - 2024-08-14 14:59 - 000393234 _____ C:\Users\jacqu\Downloads\CA_Devis_Automobile.pdf 2024-08-14 09:59 - 2024-08-14 09:59 - 000488038 _____ C:\Users\jacqu\Downloads\Mémo_d'assurance (1).pdf 2024-08-13 07:23 - 2024-08-13 08:05 - 016668974 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\L'Eveil1.pdf 2024-08-12 07:53 - 2024-08-12 07:53 - 000488038 _____ C:\Users\jacqu\Downloads\Mémo_d'assurance.pdf 2024-08-12 07:49 - 2024-08-12 07:49 - 000708925 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2023 (1).pdf 2024-08-12 07:47 - 2024-08-12 07:47 - 000708899 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2023.pdf 2024-08-11 09:31 - 2024-08-29 17:33 - 000000000 ____D C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\AXA 2024-08-11 09:30 - 2024-08-11 09:30 - 000708497 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2024 (3).pdf 2024-08-11 09:30 - 2024-08-11 09:30 - 000708497 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2024 (2).pdf 2024-08-11 09:29 - 2024-08-11 09:29 - 000708309 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2024 (1).pdf 2024-08-11 09:28 - 2024-08-11 09:28 - 000708309 _____ C:\Users\jacqu\Downloads\Avis_d'échéance_de_cotisation_01_09_2024.pdf 2024-08-11 09:26 - 2024-08-11 09:26 - 000016986 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\Avis échéance assurance maison AXA.html 2024-08-07 07:33 - 2024-08-07 07:33 - 000025762 _____ C:\Users\jacqu\OneDrive\Documents\cc_20240807_073302.reg 2024-08-07 07:29 - 2024-08-07 07:29 - 000746237 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\CNI William(2).pdf 2024-08-06 09:42 - 2024-08-06 09:42 - 000005264 _____ C:\WINDOWS\system32\ecoscore_config.json ==================== Un mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2024-09-03 09:04 - 2022-03-01 08:59 - 000000512 _____ C:\Users\Public\amdsfhdcd.bin 2024-09-03 09:00 - 2023-01-18 16:48 - 000000000 ____D C:\Program Files\CCleaner 2024-09-03 08:59 - 2022-08-30 12:07 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2024-09-03 08:56 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-09-03 08:26 - 2022-09-04 14:10 - 000000000 ____D C:\Users\jacqu\AppData\Roaming\Microsoft\Excel 2024-09-03 08:17 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-09-03 08:17 - 2022-08-29 16:36 - 000000000 ____D C:\Users\jacqu\AppData\Local\Packages 2024-09-03 08:10 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps 2024-09-03 08:10 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-09-03 08:08 - 2024-04-06 09:49 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2024-09-03 08:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2024-09-03 08:07 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF 2024-09-03 08:07 - 2022-08-29 16:36 - 000000000 ____D C:\Users\jacqu\AppData\Local\D3DSCache 2024-09-03 08:07 - 2022-08-29 15:47 - 000000000 ____D C:\ProgramData\Goodix 2024-09-02 14:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\NDF 2024-09-02 14:19 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase 2024-09-02 11:04 - 2022-08-29 16:40 - 000000000 ____D C:\Users\jacqu\AppData\Roaming\Microsoft\Word 2024-09-02 08:01 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth 2024-09-02 07:48 - 2024-04-06 09:50 - 001684128 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2024-09-02 07:41 - 2024-04-06 09:49 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-09-02 07:41 - 2024-04-06 09:49 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys 2024-09-02 07:41 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState 2024-09-02 07:41 - 2024-02-09 14:25 - 000020440 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2 2024-09-02 07:41 - 2022-08-29 15:47 - 000012288 ___SH C:\DumpStack.log.tmp 2024-09-02 07:40 - 2024-04-01 09:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI 2024-09-01 13:43 - 2022-09-13 20:36 - 000000000 ____D C:\Users\chant\AppData\Local\D3DSCache 2024-09-01 13:39 - 2022-09-20 18:21 - 000000000 ____D C:\Users\chant\OneDrive\Documents\Fichiers Outlook 2024-09-01 13:30 - 2022-09-13 20:37 - 000000000 ___RD C:\Users\chant\OneDrive 2024-08-31 16:56 - 2023-04-03 10:26 - 000000000 ____D C:\Users\jacqu\AppData\Local\Cache 2024-08-31 09:54 - 2024-06-08 08:04 - 012701273 _____ C:\Users\jacqu\OneDrive\1 - Documents Perso\Bureau\L'Eveil.pdf 2024-08-31 09:21 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared 2024-08-31 09:21 - 2022-03-01 08:59 - 000000000 ____D C:\Program Files\Microsoft Office 2024-08-31 09:15 - 2024-01-03 19:27 - 000000000 ____D C:\Users\jacqu\AppData\Local\CrashDumps 2024-08-30 18:52 - 2022-09-13 20:36 - 000000000 ____D C:\Users\chant\AppData\Local\AMD 2024-08-30 08:57 - 2024-04-06 09:45 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK 2024-08-30 08:57 - 2023-02-28 18:09 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2024-08-30 07:21 - 2022-08-29 15:47 - 000002453 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-08-30 07:21 - 2021-09-29 23:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2024-08-29 11:46 - 2022-09-20 07:14 - 000000000 ____D C:\Users\chant\AppData\Roaming\Microsoft\Word 2024-08-29 10:15 - 2024-04-06 09:49 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2611112945-1519522136-3444468991-1002 2024-08-29 10:15 - 2024-04-06 09:49 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2611112945-1519522136-3444468991-1001 2024-08-29 10:15 - 2024-04-06 09:49 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2024-08-29 10:15 - 2023-02-28 18:10 - 000002181 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-08-29 09:41 - 2022-09-25 09:53 - 000000000 ____D C:\Users\chant\AppData\Roaming\Microsoft\Excel 2024-08-28 15:29 - 2024-04-06 09:45 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-08-23 07:35 - 2022-08-29 15:47 - 000000000 ____D C:\ProgramData\Lenovo 2024-08-22 07:55 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate 2024-08-22 07:39 - 2024-04-06 09:45 - 000478104 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2024-08-22 07:39 - 2023-01-18 16:48 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\UNP 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\schemas 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr 2024-08-22 07:38 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System 2024-08-21 15:33 - 2024-04-06 09:49 - 000003382 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting 2024-08-21 08:01 - 2024-04-06 09:47 - 003282432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2024-08-20 20:00 - 2022-09-07 07:55 - 000000000 ____D C:\Users\jacqu\AppData\Local\Google 2024-08-19 10:59 - 2022-09-07 07:56 - 000000000 ____D C:\Program Files (x86)\Google 2024-08-17 15:54 - 2024-04-05 19:52 - 000000000 ____D C:\Users\jacqu 2024-08-14 15:38 - 2022-08-29 17:16 - 000000000 ____D C:\WINDOWS\system32\MRT 2024-08-14 15:37 - 2022-08-29 17:16 - 197093640 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2024-08-11 10:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata 2024-08-11 10:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps 2024-08-11 10:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata 2024-08-11 10:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm 2024-08-11 10:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz 2024-08-11 10:11 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning 2024-08-07 10:11 - 2024-04-06 09:49 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP 2024-08-07 10:11 - 2024-03-27 12:44 - 000000000 ____D C:\Program Files\HPPrintScanDoctor 2024-08-04 10:34 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData 2024-08-04 09:59 - 2022-08-29 16:36 - 000000000 ____D C:\Users\jacqu\AppData\Local\AMD ==================== Fichiers à la racine de certains dossiers ======== 2023-04-03 10:26 - 2023-04-03 10:26 - 000000000 _____ () C:\Users\jacqu\AppData\Local\000003.log 2023-04-03 10:26 - 2023-04-03 14:57 - 000020480 _____ () C:\Users\jacqu\AppData\Local\Cookies 2023-04-03 10:26 - 2023-04-03 14:57 - 000000000 _____ () C:\Users\jacqu\AppData\Local\Cookies-journal 2023-04-03 10:26 - 2023-04-03 10:26 - 000000016 _____ () C:\Users\jacqu\AppData\Local\CURRENT 2023-04-03 10:26 - 2023-04-03 10:26 - 000000000 _____ () C:\Users\jacqu\AppData\Local\LOCK 2023-04-03 10:26 - 2023-04-03 10:26 - 000000092 _____ () C:\Users\jacqu\AppData\Local\LOG 2023-04-03 10:26 - 2023-04-03 10:26 - 000000041 _____ () C:\Users\jacqu\AppData\Local\MANIFEST-000001 2023-04-03 10:26 - 2023-04-03 10:26 - 000053248 _____ () C:\Users\jacqu\AppData\Local\QuotaManager 2023-04-03 10:26 - 2023-04-03 10:26 - 000000000 _____ () C:\Users\jacqu\AppData\Local\QuotaManager-journal 2023-04-03 10:26 - 2023-04-03 14:57 - 000131072 _____ () C:\Users\jacqu\AppData\Local\Visited Links ==================== FLock ============================== 2022-09-20 21:57 C:\WINDOWS\system32\config\BFS ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== Fin de FRST.txt ========================