Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2022
Exécuté par Borie (administrateur) sur DESKTOP-F3LLQK5 (ASUSTeK COMPUTER INC. UX510UWK) (23-06-2022 15:22:06)
Exécuté depuis C:\Users\Borie\Desktop
Profils chargés: Borie
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1706 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

() [Fichier non signé] C:\Program Files (x86)\Plustek\Plustek OpticSlim A3 Series\DocuAction.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe <2>
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Integration\Integrator.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.15330.20158\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\backup\1C603B58-35C3-42A4-8F43-C688DE634A68\OfficeClickToRun.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.369.65.0.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\MpSigStub.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxEM.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Orange -> Orange) C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\Updates\16.0.15330.20158\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Borie\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe <2>
(msiexec.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_9f310939ec1eebf9\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(svchost.exe ->) (Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (Glarysoft LTD -> Glarysoft Ltd) C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1737_none_7dec0d8c7ca729de\TiWorker.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(wininit.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WerFault.exe
(wuauclt.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\SoftwareDistribution\Download\Install\AM_Delta_Patch_1.369.65.0.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3427104 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2084920 2019-09-27] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [DocAction (Plustek OpticSlim A3 Series)] => C:\Program Files (x86)\Plustek\Plustek OpticSlim A3 Series\DocuAction.exe [286208 2020-04-17] () [Fichier non signé]
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [Chromium Update] => C:\Users\Borie\AppData\Local\Chromium\Update\1.3.99.0\ChromiumUpdateCore.exe [591872 2020-02-11] (Chromium.) [Fichier non signé] <==== ATTENTION
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [Chromium] => "c:\users\borie\appdata\local\chromium\application\chrome.exe" --auto-launch-at-startup --profile-directory="Default" --restore-last-session [4195328 2017-10-07] (The Chromium Authors) [Fichier non signé]
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35373696 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [Amazon Music Helper] => C:\Users\Borie\AppData\Local\Amazon Music\Amazon Music Helper.exe [2106312 2020-09-05] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [Amazon Music] => C:\Users\Borie\AppData\Local\Amazon Music\Amazon Music.exe [20254152 2020-09-05] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4282328 2022-06-07] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [MicrosoftEdgeAutoLaunch_E3A7512B50C3B5AE94670F950A100586] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595192 2022-06-13] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [MailNotifier] => C:\Program Files (x86)\Orange\MailNotifier\MailNotifier.exe [1573688 2021-09-02] (Orange -> Orange)
HKU\S-1-5-21-1951308367-1358118151-1789755590-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7097112 2022-04-07] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Windows x64\Print Processors\Canon MG5600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCA.DLL [30208 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon TR4500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEU.DLL [482816 2018-03-21] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor TR4500 series: C:\WINDOWS\system32\CNCALEU.DLL [254464 2018-03-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5600 series: C:\WINDOWS\system32\CNMLMCA.DLL [406016 2014-03-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TR4500 series: C:\WINDOWS\system32\CNMLMEU.DLL [1303040 2018-03-21] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-15] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RealTimes.lnk [2020-10-19]
ShortcutTarget: RealTimes.lnk -> C:\Program Files (x86)\Real\RealPlayer\RPDS\Bin\rpsystray.exe (Pas de fichier)

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {06C9EF65-7194-420E-9440-FF2A91175160} - System32\Tasks\RealDownloader Update Check => C:\Program Files (x86)\Real\RealDownloader\downloader2.exe /scheduler (Pas de fichier)
Task: {0A457FDB-FE66-4E97-B0C5-9BFBFEA344E1} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {0E2B57FE-73F8-46CA-BFD1-EE10A29F85D3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8414176 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {0F803FAE-DD50-4F41-8261-BBE8C8B1D6DA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-07] (Google LLC -> Google LLC)
Task: {16001189-C2A1-4F59-B44D-C3FDCE3D2E69} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Install => C:\Program Files (x86)\Orange Update\install.bat [0 2021-08-11] () <==== ATTENTION [zéro octet Fichier/Dossier] <==== ATTENTION
Task: {17BB1DB6-A43C-4BDC-BE71-30388A3F154A} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16717832 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {3384DD02-8C58-4542-8E75-D056EAEEC268} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145320 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {3A97FFB5-0A8B-4A8F-96DA-33BCD1E41FA6} - System32\Tasks\CCleanerSkipUAC - Borie => C:\Program Files\CCleaner\CCleaner.exe [29442688 2021-12-07] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {3C31E962-58BB-4C2D-9589-E30AD14477E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4F8F601A-D4C2-4C84-BFDF-CA63A22FD733} - System32\Tasks\ChromiumUpdateTaskUserS-1-5-21-1951308367-1358118151-1789755590-1001UA => C:\Users\Borie\AppData\Local\Chromium\Update\ChromiumUpdate.exe [102400 2020-02-11] (Chromium.) [Fichier non signé] <==== ATTENTION
Task: {562FFE53-2E32-423C-B4A1-AECC50EDC898} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1473032 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {571DE1D4-358D-4E3A-8814-E8FA9BF975F3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {5881994C-6D32-4D0D-8C30-ABB6A7280E88} - System32\Tasks\ChromiumUpdateTaskUserS-1-5-21-1951308367-1358118151-1789755590-1001Core => C:\Users\Borie\AppData\Local\Chromium\Update\ChromiumUpdate.exe [102400 2020-02-11] (Chromium.) [Fichier non signé] <==== ATTENTION
Task: {5EC8376C-E519-40F0-A71F-1234C4255DC5} - System32\Tasks\GUMalwareHunter => C:\Program Files (x86)\Glarysoft\Malware Hunter\mhtray.exe [971136 2022-01-08] (Glarysoft LTD -> Glarysoft Ltd)
Task: {718A3D56-1F12-47C8-8CB1-C803317B15E7} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {730C9151-0251-4259-911B-571A35856EF5} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-F3LLQK5-Borie => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {743FBFAF-D0A2-41D2-87A0-DAE7FEC725C4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {802807F1-ABDA-48BD-A0CF-13A168C0EF96} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145320 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {A373F75A-3BA3-466F-A8C9-93BF80785B1A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-12-07] (Piriform Software Ltd -> Piriform)
Task: {A837F42A-ED4E-40C1-B97F-9365E3D79A79} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-07] (Google LLC -> Google LLC)
Task: {CD0206DB-71BE-4A57-A8BF-EB739C07D65C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D40F0363-38F4-421D-8A06-A2D230BACCE0} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3427104 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {D700D272-9C80-466A-949D-1AC689F60FBF} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64416 2022-06-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {DED2F435-2360-459E-AAF2-3442119CECB9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8414176 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {EA34A5C7-14DB-4955-9A90-5FF5263326F9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EB840474-03F3-4CCC-96BF-29D682D76A87} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(1): Net -> stop "Orange Update Core Service"
Task: {EB840474-03F3-4CCC-96BF-29D682D76A87} - System32\Tasks\Microsoft\Windows\OrangeUpdate_Launch => Command(2): Net -> start "Orange Update Core Service"
Task: {F53A74B0-93F0-4070-9B37-095D7B9E27BD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23374288 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {F9386B06-3B58-45B1-984C-BA593BB39510} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23374288 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{e58e57c3-d9a0-4a0a-9c07-6d5330ba9c3e}: [DhcpNameServer] 212.27.40.240 212.27.40.241

Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Borie\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-23]
Edge Notifications: Default -> hxxps://www.facebook.com

FireFox:
========
FF DefaultProfile: qcpxi3ei.default
FF ProfilePath: C:\Users\Borie\AppData\Roaming\Mozilla\Firefox\Profiles\qcpxi3ei.default [2022-06-23]
FF Notifications: Mozilla\Firefox\Profiles\qcpxi3ei.default -> hxxps://www.privatesportshop.fr; hxxps://www.ldlc.com; hxxps://www.maisonsdumonde.com; hxxps://www.conforama.ch; hxxps://www.la-canadienne.com; hxxps://www.reddit.com; hxxps://www.pinterest.fr; hxxps://www.sport-classic.com; hxxps://www.3as-racing.com; hxxps://fly.vietnamairlines.com; hxxps://mail.google.com
FF Extension: (User-Agent Switcher and Manager) - C:\Users\Borie\AppData\Roaming\Mozilla\Firefox\Profiles\qcpxi3ei.default\Extensions\{a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7}.xpi [2022-05-23]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-06-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2018-02-27] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2019-09-27] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-06-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2019-09-27] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\S-1-5-21-1951308367-1358118151-1789755590-1001: @chbrowserupdate.com/Chromium Update;version=3 -> C:\Users\Borie\AppData\Local\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [2020-02-11] (Chromium.) [Fichier non signé]
FF Plugin HKU\S-1-5-21-1951308367-1358118151-1789755590-1001: @chbrowserupdate.com/Chromium Update;version=9 -> C:\Users\Borie\AppData\Local\Chromium\Update\1.3.99.0\npChromiumUpdate3.dll [2020-02-11] (Chromium.) [Fichier non signé]

Chrome:
=======
CHR Profile: C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default [2022-03-13]
CHR Extension: (Slides) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-10-07]
CHR Extension: (Docs) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-10-07]
CHR Extension: (Google Drive) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-07]
CHR Extension: (YouTube) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-07]
CHR Extension: (Minty - Coupon Automatique & Comparateur Prix) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fefnkplkicihcoenmljhbihhaaagjhpp [2022-03-10]
CHR Extension: (Sheets) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-10-07]
CHR Extension: (Google Docs hors connexion) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-07]
CHR Extension: (Gmail) - C:\Users\Borie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-07]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [823352 2019-09-27] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3815712 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3580200 2022-04-13] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144784 2018-04-18] (Canon Inc. -> CANON INC.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111312 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [398784 2019-04-22] (Canon Inc. -> )
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7901368 2022-01-10] (Malwarebytes Inc -> Malwarebytes)
S2 Orange Update Core Service; C:\Program Files (x86)\Orange Update\OUService.exe [177880 2021-08-12] (Orange -> Orange)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 GUMHFilters; C:\Program Files (x86)\Glarysoft\Malware Hunter\Native\winxp_x64\GUMHFilter.sys [42976 2021-07-26] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [210352 2022-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2022-01-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2022-01-10] (Malwarebytes Inc -> Malwarebytes)
S3 MpKsl90823b2e; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{28E65D62-EBE1-443B-B17B-21D2461ED424}\MpKslDrv.sys [141568 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 MpKslfac1f702; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{28E65D62-EBE1-443B-B17B-21D2461ED424}\MpKslDrv.sys [141568 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-06-23 14:58 - 2022-06-23 15:17 - 000049042 _____ C:\Users\Borie\Desktop\Addition.txt
2022-06-23 13:55 - 2022-06-23 15:26 - 000028699 _____ C:\Users\Borie\Desktop\FRST.txt
2022-06-23 13:51 - 2022-06-23 15:25 - 000000000 ____D C:\FRST
2022-06-23 13:46 - 2022-06-23 13:47 - 002369024 _____ (Farbar) C:\Users\Borie\Desktop\FRST64.exe
2022-06-23 13:37 - 2022-06-23 13:37 - 000000000 ___HD C:\$WinREAgent
2022-06-23 13:20 - 2022-06-23 13:20 - 000000000 _____ C:\WINDOWS\Minidump\062322-95453-01.dmp
2022-06-23 12:20 - 2022-06-23 12:20 - 000000000 _____ C:\WINDOWS\Minidump\062322-168703-01.dmp
2022-06-21 20:25 - 2022-06-21 20:25 - 000000000 _____ C:\WINDOWS\Minidump\062122-237468-01.dmp
2022-06-19 12:38 - 2022-06-21 11:02 - 001683924 _____ C:\WINDOWS\Minidump\061922-115437-01.dmp
2022-06-15 20:59 - 2022-06-16 12:01 - 001927228 _____ C:\WINDOWS\Minidump\061522-69203-01.dmp
2022-06-13 16:37 - 2022-06-13 16:37 - 000056015 _____ C:\Users\Borie\Desktop\déclaration de CA_05_2022.pdf
2022-06-11 08:54 - 2022-06-12 10:36 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-10 15:02 - 2022-06-10 15:02 - 000166490 _____ C:\Users\Borie\Desktop\DEVIS 3 stages mangas Franck BORIE.pdf
2022-06-07 15:38 - 2022-06-07 15:38 - 000231061 _____ C:\Users\Borie\Desktop\ATELIER MANGA 2022-2023 inscriptions cours à l'année.pdf
2022-06-03 14:23 - 2022-06-03 14:23 - 000013553 ____H C:\Users\Borie\Desktop\~WRL2511.tmp
2022-05-31 17:25 - 2022-05-31 17:25 - 007673230 _____ C:\Users\Borie\Downloads\Ce gâteau magnifique ! de Marc James Roels et Emma de Swaef.pdf
2022-05-31 17:23 - 2022-06-08 21:37 - 000000000 ____D C:\Users\Borie\Desktop\projet editeur cnc
2022-05-25 14:46 - 2022-05-25 14:46 - 000195843 _____ C:\Users\Borie\Desktop\DEVIS Médiathèque de Cazères.pdf
2022-05-24 17:47 - 2022-05-24 17:47 - 000021646 ____H C:\Users\Borie\Desktop\~WRL2765.tmp

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-06-23 15:25 - 2021-10-07 20:24 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-23 15:22 - 2018-03-31 04:33 - 000000000 ____D C:\Users\Borie\AppData\LocalLow\Mozilla
2022-06-23 15:19 - 2018-03-26 12:50 - 000000000 ____D C:\Program Files\Microsoft Office
2022-06-23 15:15 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-23 14:08 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-23 13:58 - 2020-02-12 00:40 - 000000000 ____D C:\Program Files\CCleaner
2022-06-23 13:39 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-23 13:33 - 2020-12-01 18:36 - 000000000 ____D C:\Program Files (x86)\Steam
2022-06-23 13:26 - 2020-08-27 13:09 - 001770910 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-23 13:26 - 2019-12-07 16:49 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2022-06-23 13:26 - 2019-12-07 16:49 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2022-06-23 13:26 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-23 13:23 - 2018-03-20 10:16 - 000000000 __SHD C:\Users\Borie\IntelGraphicsProfiles
2022-06-23 13:22 - 2020-08-27 12:50 - 000000000 ____D C:\Users\Borie
2022-06-23 13:22 - 2018-03-19 18:05 - 000000000 ____D C:\ProgramData\NVIDIA
2022-06-23 13:20 - 2022-01-17 21:02 - 825279058 _____ C:\WINDOWS\MEMORY.DMP
2022-06-23 13:20 - 2021-02-26 13:37 - 000000000 ____D C:\WINDOWS\Minidump
2022-06-23 13:20 - 2020-08-27 13:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-23 13:20 - 2020-08-27 12:44 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-23 13:20 - 2020-08-27 12:43 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-23 13:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-06-23 12:56 - 2018-03-20 10:13 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-06-23 11:32 - 2019-10-03 21:05 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2022-06-21 15:51 - 2020-08-27 13:41 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-06-21 10:43 - 2022-01-22 21:55 - 000000000 ____D C:\Users\Borie\AppData\Local\CrashDumps
2022-06-17 15:47 - 2018-03-19 19:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-06-17 15:36 - 2018-03-19 19:05 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-17 12:36 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-17 12:28 - 2018-04-15 15:39 - 000000000 ____D C:\Users\Borie\AppData\Roaming\vlc
2022-06-17 11:41 - 2019-09-02 10:29 - 000000000 ____D C:\ProgramData\CanonIJPLM
2022-06-16 12:04 - 2020-07-18 22:18 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-15 11:17 - 2021-10-07 20:26 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-15 11:17 - 2021-10-07 20:26 - 000002204 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2022-06-13 16:37 - 2022-03-18 14:55 - 000000000 ____D C:\Users\Borie\Desktop\MOTO
2022-06-13 13:36 - 2022-01-09 06:53 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1951308367-1358118151-1789755590-1001
2022-06-13 13:36 - 2020-08-27 13:41 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1951308367-1358118151-1789755590-1001
2022-06-13 13:36 - 2020-08-27 12:50 - 000002421 _____ C:\Users\Borie\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-12 10:36 - 2018-03-31 04:33 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-06-11 09:22 - 2020-08-27 13:41 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-11 09:22 - 2020-08-27 13:41 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-11 09:16 - 2021-10-12 15:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-06-11 09:16 - 2018-03-31 04:33 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-11 09:02 - 2020-11-06 20:53 - 000000000 ____D C:\Users\Public\Documents\ScanDoc
2022-06-07 15:38 - 2020-02-09 11:43 - 000000000 ____D C:\Users\Borie\Desktop\ATELIER MANGA RIEUME
2022-06-07 14:44 - 2022-05-08 18:04 - 000000000 ____D C:\Users\Borie\Desktop\dessins élèves
2022-05-27 23:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-05-25 08:27 - 2020-08-27 13:41 - 000004178 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{AA41D2F6-B494-4E1A-91AE-C2AD2F93B7DF}
2022-05-24 18:11 - 2018-06-06 08:53 - 000000000 ____D C:\Users\Borie\AppData\Local\D3DSCache
2022-05-24 16:07 - 2020-08-27 13:41 - 000003522 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0

==================== Fichiers à la racine de certains dossiers ========

2020-05-27 18:03 - 2020-05-27 18:03 - 000000080 _____ () C:\Users\Borie\AppData\Roaming\WB.CFG
2018-09-30 17:23 - 2018-09-30 17:23 - 000000000 _____ () C:\Users\Borie\AppData\Local\oobelibMkey.log

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================