Fenêtres Powershell qui s'ouvrent toutes seules [résolu]

valoo550 · par **valoo550** » 25 avr. 2024 11:52

Bonjour, depuis plusieurs semaines, j'ai remarqué des fenêtres Powershell qui s'ouvrent toutes seules

j'ai fait une analyse avec FRST dont voici les résultats
https://pjjoint.malekal.com/files.php?i ... 3u11k11u14
https://pjjoint.malekal.com/files.php?i ... 13x5t10q15

J'ai aussi fait une analyse avec malwarbyte qui m'a donné plusieurs erreurs.

Merci d'avance.

par **Malekal_morte** » 25 avr. 2024 14:07

Bonjour,

Voici la correction à effectuer avec FRST. Tu peux t'aider de cette Voici la correction à effectuer avec FRST. Tu peux t'aider de cette #fix note explicative avec des captures d'écran.
Relance FRST puis sur ton clavier appuyer sur la touche CTRL + Y.
Le bloc-note va s'ouvrir, copie/colle ceci.

Code : Tout sélectionner

Start:
CloseProcesses:
CreateRestorePoint:
Task: {D3AB1986-2F3A-4320-A960-19D72A3788E5} - System32\Tasks\Check system => C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -windowstyle Hidden C:\ProgramData\updates.ps1 <==== ATTENTION
Task: {AA86CA60-8274-405C-9785-B5367F692F7A} - System32\Tasks\corbeille => C:\Windows\System32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c "echo O|PowerShell.exe -NoProfile -Command Clear-RecycleBin" <==== ATTENTION
Task: {A0697306-77B7-43A4-AD92-D929F5BB399E} - System32\Tasks\dllhost => C:\Users\tinti\AppData\Roaming\Intel\dllhost.exe [3265536 2024-04-20] () [Fichier non signé] <==== ATTENTION
Task: {59946ECC-7A87-4430-91B5-E9DF6F0DD01E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8573352 2023-03-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {5270CEDF-AA0E-4AC4-8D3C-2AD6317449BA} - System32\Tasks\Microsoft\Windows\Bluetooth\Chromeniumscrypt => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -File C:\Users\Public\updates.ps1
Task: {E42B90B6-DED7-4D1C-BC4B-625D4E9330B2} - System32\Tasks\Microsoft\Windows\Bluetooth\CLEANTASK => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\tinti\AppData\Local\Temp\4a0a520e-2dcb-47a0-9255-56b13e13f6bb.ps1" <==== ATTENTION
Task: {A50E1563-6194-497B-AFBA-A444D24A6A34} - System32\Tasks\Microsoft\Windows\Bluetooth\java => C:\ProgramData\java.exe  (Pas de fichier) <==== ATTENTION
Task: {6F69DE3E-8F0C-4C21-BF58-E50BC33C9F9B} - System32\Tasks\Microsoft\Windows\Bluetooth\svchost => C:\Windows\powershells.exe  (Pas de fichier)
Task: {EEBE166B-F506-459A-AD1D-7AE5EF023869} - System32\Tasks\Microsoft\Windows\TPM\Tpm-MaintenanceENOBZstL8 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\42EA63D2-7865-47E0-BBA8-CD7C9E9B790E.ps1" <==== ATTENTION
2024-04-25 11:26 - 2024-04-25 11:30 - 000000000 ____D C:\AdwCleaner
2024-04-25 10:57 - 2024-04-25 10:57 - 000395776 ____H C:\Users\tinti\AppData\Roaming\win32.exe
2024-04-25 10:57 - 2024-04-25 10:57 - 000044084 _____ C:\Users\Public\updates.ps1
2024-04-25 10:57 - 2024-04-25 10:57 - 000003392 _____ C:\WINDOWS\system32\Tasks\Check system
2024-04-24 17:08 - 2024-04-24 17:08 - 000000101 _____ C:\WINDOWS\SysWOW64\_system.ini
2024-04-24 17:07 - 2024-04-24 21:36 - 000000000 ____D C:\Program Files (x86)\Top Password
2024-04-22 15:19 - 2024-04-22 15:19 - 000765190 _____ C:\WINDOWS\system32\perfh00C.dat
2024-04-22 15:19 - 2024-04-22 15:19 - 000154938 _____ C:\WINDOWS\system32\perfc00C.dat
2024-04-20 04:19 - 2024-04-25 11:43 - 000003306 _____ C:\WINDOWS\system32\Tasks\dllhost
2024-04-20 04:19 - 2024-04-20 04:19 - 003265536 ____H () C:\Users\tinti\AppData\Roaming\dllhost.exe
2024-04-20 04:19 - 2024-04-20 04:19 - 000000000 ___HD C:\Users\tinti\AppData\Roaming\Intel
2024-04-19 10:06 - 2024-04-19 10:06 - 000000000 ____D C:\Users\tinti\OneDrive\Documents\AoaoPhoto Digital Studio
2024-04-19 10:05 - 2024-04-19 10:08 - 000000000 ____D C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AoaoPhoto Digital Studio
2024-04-19 10:05 - 2024-04-19 10:08 - 000000000 ____D C:\Program Files (x86)\AoaoPhoto Digital Studio
2024-04-17 15:31 - 2024-04-17 15:31 - 000000000 ____D C:\Users\tinti\AppData\Local\MultiPlayerManager
2024-04-15 21:38 - 2024-04-25 11:11 - 000000297 _____ C:\Users\tinti\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2024-04-20 04:19 - 2024-04-20 04:19 - 003265536 ____H () C:\Users\tinti\AppData\Roaming\dllhost.exe
2023-12-20 18:19 - 2023-12-20 18:19 - 000000064 ___SH () C:\Users\tinti\AppData\Roaming\systempage.sys
2024-04-25 10:57 - 2024-04-25 10:57 - 000395776 ____H () C:\Users\tinti\AppData\Roaming\win32.exe
2023-03-01 16:25 - 2023-03-01 16:25 - 000000017 _____ () C:\Users\tinti\AppData\Local\resmon.resmoncfg

Hosts:
EmptyTemp:
RemoveProxy:
Reboot:
End:

Ferme le bloc-note, retourne sur FRST et clique sur le bouton "Corriger / Fix"
Un redémarrage sera peut-être nécessaire et automatique.
Un fichier texte apparaît, copie/colle le contenu ici dans un nouveau message.

Redémarre l'ordinateur.
(L'ordinateur peut redémarrer tout seul, si le rapport de correction ne s'ouvre pas, cherche un fichier fixlog.txt qui se trouve dans le même dossier que FRST)

Important :

Le contenu de la correction ne doit pas être vide et doit refléter le script donné précédemment.
Dans le cas où la correction est vide, essaye de faire la correction FRST comme ceci :

Place le programme FRST sur le bureau
Ouvre le bloc-note.
Colle le script donné plus haut.
Enregistre le fichier sur le sur le bureau de Windows (pas ailleurs) sous le nom de fixlist.txt.
Relance FRST puis Corriger.

2) réinitialiser les navigateurs:
==================================
Réinitialise tes navigateurs et/ou re-paramètre manuellement tes navigateurs WEB ( page de démarrage, moteur de recherche, etc ) mais aussi supprimer/désactiver les extensions inutiles/parasites.
Pour t'aider à effectuer ce ménage, clique ci-dessous sur le nom du navigateur WEB que tu utilises :

Réparer Mozilla Firefox (premier paragraphe)
Réparer Google Chrome (premier paragraphe)
Comment réparer ou réinitialiser Microsoft Edge

3)
Refais un scan FRST et donne les nouveaux rapports via pjjoint

valoo550 · par **valoo550** » 25 avr. 2024 14:43

le fichier fixlog

Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
Exécuté par Valentin (25-04-2024 14:32:53) Run:1
Exécuté depuis D:\Valentin
Profils chargés: Valentin
Mode d'amorçage: Normal
==============================================

fixlist contenu:
*****************
Start:
CloseProcesses:
CreateRestorePoint:
Task: {D3AB1986-2F3A-4320-A960-19D72A3788E5} - System32\Tasks\Check system => C:\Windows\system32\WindowsPowerShell\v1.0\PowerShell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -windowstyle Hidden C:\ProgramData\updates.ps1 <==== ATTENTION
Task: {AA86CA60-8274-405C-9785-B5367F692F7A} - System32\Tasks\corbeille => C:\Windows\System32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c "echo O|PowerShell.exe -NoProfile -Command Clear-RecycleBin" <==== ATTENTION
Task: {A0697306-77B7-43A4-AD92-D929F5BB399E} - System32\Tasks\dllhost => C:\Users\tinti\AppData\Roaming\Intel\dllhost.exe [3265536 2024-04-20] () [Fichier non signé] <==== ATTENTION
Task: {59946ECC-7A87-4430-91B5-E9DF6F0DD01E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8573352 2023-03-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {5270CEDF-AA0E-4AC4-8D3C-2AD6317449BA} - System32\Tasks\Microsoft\Windows\Bluetooth\Chromeniumscrypt => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -File C:\Users\Public\updates.ps1
Task: {E42B90B6-DED7-4D1C-BC4B-625D4E9330B2} - System32\Tasks\Microsoft\Windows\Bluetooth\CLEANTASK => C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Users\tinti\AppData\Local\Temp\4a0a520e-2dcb-47a0-9255-56b13e13f6bb.ps1" <==== ATTENTION
Task: {A50E1563-6194-497B-AFBA-A444D24A6A34} - System32\Tasks\Microsoft\Windows\Bluetooth\java => C:\ProgramData\java.exe (Pas de fichier) <==== ATTENTION
Task: {6F69DE3E-8F0C-4C21-BF58-E50BC33C9F9B} - System32\Tasks\Microsoft\Windows\Bluetooth\svchost => C:\Windows\powershells.exe (Pas de fichier)
Task: {EEBE166B-F506-459A-AD1D-7AE5EF023869} - System32\Tasks\Microsoft\Windows\TPM\Tpm-MaintenanceENOBZstL8 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [450560 2024-02-14] (Microsoft Windows -> Microsoft Corporation) -> -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\WINDOWS\System32\42EA63D2-7865-47E0-BBA8-CD7C9E9B790E.ps1" <==== ATTENTION
2024-04-25 11:26 - 2024-04-25 11:30 - 000000000 ____D C:\AdwCleaner
2024-04-25 10:57 - 2024-04-25 10:57 - 000395776 ____H C:\Users\tinti\AppData\Roaming\win32.exe
2024-04-25 10:57 - 2024-04-25 10:57 - 000044084 _____ C:\Users\Public\updates.ps1
2024-04-25 10:57 - 2024-04-25 10:57 - 000003392 _____ C:\WINDOWS\system32\Tasks\Check system
2024-04-24 17:08 - 2024-04-24 17:08 - 000000101 _____ C:\WINDOWS\SysWOW64\_system.ini
2024-04-24 17:07 - 2024-04-24 21:36 - 000000000 ____D C:\Program Files (x86)\Top Password
2024-04-22 15:19 - 2024-04-22 15:19 - 000765190 _____ C:\WINDOWS\system32\perfh00C.dat
2024-04-22 15:19 - 2024-04-22 15:19 - 000154938 _____ C:\WINDOWS\system32\perfc00C.dat
2024-04-20 04:19 - 2024-04-25 11:43 - 000003306 _____ C:\WINDOWS\system32\Tasks\dllhost
2024-04-20 04:19 - 2024-04-20 04:19 - 003265536 ____H () C:\Users\tinti\AppData\Roaming\dllhost.exe
2024-04-20 04:19 - 2024-04-20 04:19 - 000000000 ___HD C:\Users\tinti\AppData\Roaming\Intel
2024-04-19 10:06 - 2024-04-19 10:06 - 000000000 ____D C:\Users\tinti\OneDrive\Documents\AoaoPhoto Digital Studio
2024-04-19 10:05 - 2024-04-19 10:08 - 000000000 ____D C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AoaoPhoto Digital Studio
2024-04-19 10:05 - 2024-04-19 10:08 - 000000000 ____D C:\Program Files (x86)\AoaoPhoto Digital Studio
2024-04-17 15:31 - 2024-04-17 15:31 - 000000000 ____D C:\Users\tinti\AppData\Local\MultiPlayerManager
2024-04-15 21:38 - 2024-04-25 11:11 - 000000297 _____ C:\Users\tinti\d4ac4633ebd6440fa397b84f1bc94a3c.7z
2024-04-20 04:19 - 2024-04-20 04:19 - 003265536 ____H () C:\Users\tinti\AppData\Roaming\dllhost.exe
2023-12-20 18:19 - 2023-12-20 18:19 - 000000064 ___SH () C:\Users\tinti\AppData\Roaming\systempage.sys
2024-04-25 10:57 - 2024-04-25 10:57 - 000395776 ____H () C:\Users\tinti\AppData\Roaming\win32.exe
2023-03-01 16:25 - 2023-03-01 16:25 - 000000017 _____ () C:\Users\tinti\AppData\Local\resmon.resmoncfg

Hosts:
EmptyTemp:
RemoveProxy:
Reboot:
End:
*****************

Processus fermé avec succès.
Le Point de restauration a été créé avec succès.
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{D3AB1986-2F3A-4320-A960-19D72A3788E5}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{D3AB1986-2F3A-4320-A960-19D72A3788E5}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Check system => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Check system" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{AA86CA60-8274-405C-9785-B5367F692F7A}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA86CA60-8274-405C-9785-B5367F692F7A}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\corbeille => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\corbeille" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A0697306-77B7-43A4-AD92-D929F5BB399E}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0697306-77B7-43A4-AD92-D929F5BB399E}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\dllhost => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\dllhost" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{59946ECC-7A87-4430-91B5-E9DF6F0DD01E}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{59946ECC-7A87-4430-91B5-E9DF6F0DD01E}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Office\OfficeTelemetryAgentLogOn2016" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{5270CEDF-AA0E-4AC4-8D3C-2AD6317449BA}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5270CEDF-AA0E-4AC4-8D3C-2AD6317449BA}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Bluetooth\Chromeniumscrypt => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Bluetooth\Chromeniumscrypt" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{E42B90B6-DED7-4D1C-BC4B-625D4E9330B2}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E42B90B6-DED7-4D1C-BC4B-625D4E9330B2}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Bluetooth\CLEANTASK => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Bluetooth\CLEANTASK" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{A50E1563-6194-497B-AFBA-A444D24A6A34}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A50E1563-6194-497B-AFBA-A444D24A6A34}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Bluetooth\java => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Bluetooth\java" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{6F69DE3E-8F0C-4C21-BF58-E50BC33C9F9B}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{6F69DE3E-8F0C-4C21-BF58-E50BC33C9F9B}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Microsoft\Windows\Bluetooth\svchost => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Bluetooth\svchost" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{EEBE166B-F506-459A-AD1D-7AE5EF023869}" => supprimé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEBE166B-F506-459A-AD1D-7AE5EF023869}" => supprimé(es) avec succès
C:\WINDOWS\System32\Tasks\Microsoft\Windows\TPM\Tpm-MaintenanceENOBZstL8 => déplacé(es) avec succès
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\TPM\Tpm-MaintenanceENOBZstL8" => supprimé(es) avec succès

"C:\AdwCleaner" Dossier déplacer:

C:\AdwCleaner => déplacé(es) avec succès
C:\Users\tinti\AppData\Roaming\win32.exe => déplacé(es) avec succès
C:\Users\Public\updates.ps1 => déplacé(es) avec succès
"C:\WINDOWS\system32\Tasks\Check system" => non trouvé(e)
C:\WINDOWS\SysWOW64\_system.ini => déplacé(es) avec succès

"C:\Program Files (x86)\Top Password" Dossier déplacer:

C:\Program Files (x86)\Top Password => déplacé(es) avec succès
C:\WINDOWS\system32\perfh00C.dat => déplacé(es) avec succès
C:\WINDOWS\system32\perfc00C.dat => déplacé(es) avec succès
"C:\WINDOWS\system32\Tasks\dllhost" => non trouvé(e)
C:\Users\tinti\AppData\Roaming\dllhost.exe => déplacé(es) avec succès

"C:\Users\tinti\AppData\Roaming\Intel" Dossier déplacer:

C:\Users\tinti\AppData\Roaming\Intel => déplacé(es) avec succès

"C:\Users\tinti\OneDrive\Documents\AoaoPhoto Digital Studio" Dossier déplacer:

C:\Users\tinti\OneDrive\Documents\AoaoPhoto Digital Studio => déplacé(es) avec succès

"C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AoaoPhoto Digital Studio" Dossier déplacer:

C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AoaoPhoto Digital Studio => déplacé(es) avec succès

"C:\Program Files (x86)\AoaoPhoto Digital Studio" Dossier déplacer:

C:\Program Files (x86)\AoaoPhoto Digital Studio => déplacé(es) avec succès

"C:\Users\tinti\AppData\Local\MultiPlayerManager" Dossier déplacer:

C:\Users\tinti\AppData\Local\MultiPlayerManager => déplacé(es) avec succès
C:\Users\tinti\d4ac4633ebd6440fa397b84f1bc94a3c.7z => déplacé(es) avec succès
"C:\Users\tinti\AppData\Roaming\dllhost.exe" => non trouvé(e)
C:\Users\tinti\AppData\Roaming\systempage.sys => déplacé(es) avec succès
"C:\Users\tinti\AppData\Roaming\win32.exe" => non trouvé(e)
C:\Users\tinti\AppData\Local\resmon.resmoncfg => déplacé(es) avec succès
C:\Windows\System32\Drivers\etc\hosts => déplacé(es) avec succès
Hosts restauré(es) avec succès.

========= RemoveProxy: =========

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => supprimé(es) avec succès
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => supprimé(es) avec succès
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => supprimé(es) avec succès
"HKU\S-1-5-21-2187874359-2326730379-599994202-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => supprimé(es) avec succès
"HKU\S-1-5-21-2187874359-2326730379-599994202-1002\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => supprimé(es) avec succès

========= Fin de RemoveProxy: =========

=========== EmptyTemp: ==========

FlushDNS => terminé(e)
BITS transfer queue => 1310720 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 108852513 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 317815076 B
Windows/system/drivers => 34650246 B
Edge => 0 B
Brave => 96583441 B
Firefox => 66210570 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 662290 B
NetworkService => 662290 B
tinti => 1261159441 B

RecycleBin => 891392 B
EmptyTemp: => 1.8 GB données temporaires supprimées.

================================

Le système a dû redémarrer.

==== Fin de Fixlog 14:33:13 ====

valoo550 · par **valoo550** » 25 avr. 2024 14:44

le nouveau scan de FRST

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 19.04.2024 01
Exécuté par Valentin (administrateur) sur PC-ENGEL (Acer Nitro AN517-52) (25-04-2024 14:38:51)
Exécuté depuis D:\Valentin\FRST64.exe
Profils chargés: Valentin
Plate-forme: Microsoft Windows 11 Famille Version 23H2 22631.3447 (X64) Langue: Français (France)
Navigateur par défaut: "C:\Program Files\SRWare Iron (64-Bit)\chrome.exe" -- "%1"
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAgent.exe
(Acer Incorporated -> I3D Technology Inc.) C:\Program Files (x86)\PLANET9DA\PLANET9DAHelper.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(C:\Program Files (x86)\SigridWave\SigridWaveService.exe ->) (Acer Incorporated -> I3D Technology Inc.) C:\Program Files (x86)\SigridWave\SigridWaveCore.exe
(C:\Program Files\Acer\NitroSense Service\PSSvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSAdminAgent.exe
(C:\Program Files\Acer\Quick Access Service\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe
(C:\Program Files\Acer\Quick Access Service\QASvc.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAgent.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24032.123.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24032.123.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(D:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\MKCHelper.exe
(D:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA) D:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\nvrla.exe
(D:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA) D:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\PresentMon_x64.exe <2>
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\AlwaysOnTop\PowerToys.AlwaysOnTop.exe
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\Awake\PowerToys.Awake.exe
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\ColorPicker\PowerToys.ColorPickerUI.exe
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\FancyZones\PowerToys.FancyZones.exe
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\KeyboardManager\KeyboardManagerEngine\PowerToys.KeyboardManagerEngine.exe
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\launcher\PowerToys.PowerLauncher.exe
(D:\Program Files\PowerToys\PowerToys.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\modules\PowerOCR\PowerToys.PowerOCR.exe
(D:\Program Files\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe ->) (Skutta Software GmbH -> ) D:\Program Files\Steam\steamapps\common\wallpaper_engine\bin\ui32.exe <5>
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\xTendUtilityService.exe ->) (Rivet Networks LLC -> Rivet Networks LLC) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtility.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_f9f92cc42e038a12\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f9f92cc42e038a12\igfxEM.exe
(EB742617-4934-4951-8B93-E211D04E5A38 -> Rivet Networks) C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_2.2.3216.0_x64__rh07ty8m5nkag\KillerControlCenter_v2\KillerControlCenter.exe
(explorer.exe ->) (Opera Software AS -> Opera Software) C:\Users\tinti\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe <2>
(explorer.exe ->) (Skutta Software GmbH -> ) D:\Program Files\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(explorer.exe ->) (Stefan Ries -> The Chromium Authors) C:\Program Files\SRWare Iron (64-Bit)\chrome.exe <58>
(Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.6.35.0_x64__wyx1vj98g3asy\QuickShareService\QuickShareService.exe
(services.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.23.12130.0_x64__3c1yjt4zspk6g\SAService\SAService.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\NitroSense Service\PSSvc.exe
(services.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QASvc.exe
(services.exe ->) (Acer Incorporated -> I3D Technology Inc.) C:\Program Files (x86)\PLANET9DA\PLANET9DA.exe
(services.exe ->) (Acer Incorporated -> I3D Technology Inc.) C:\Program Files (x86)\SigridWave\SigridWaveService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (CYBELSOFT -> ) C:\Program Files\Cybelsoft\DriversCloud.com\DriversCloudAgent.exe
(services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome Remote Desktop\124.0.6367.18\remoting_host.exe <2>
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_82b77f8c4618e2d0\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_42f9d9bfb72d84cf\RstMwService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f9f92cc42e038a12\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_553b9a82ff9cf770\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2b7bcff446ea567f\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2b7bcff446ea567f\IntelCpHeciSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvacig.inf_amd64_52f3e1d0b5db2a3a\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA) D:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe
(services.exe ->) (Pango LLC -> Pango Inc.) C:\Program Files (x86)\Hotspot Shield\12.8.2\bin\cmw_srv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9971779a1c712866\RtkAudUService64.exe <2>
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Rivet Networks LLC -> Rivet Networks, LLC.) C:\Windows\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\IAS\IntelAudioService.exe
(sihost.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.6.35.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.33.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.6.35.0_x64__wyx1vj98g3asy\QuickShare.exe
(svchost.exe ->) (Acer Incorporated -> ) C:\Program Files (x86)\Acer\Care Center\ACCStd.exe
(svchost.exe ->) (Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe
(svchost.exe ->) (Acer Incorporated -> Microsoft) C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe
(svchost.exe ->) (CyberLink Corp. -> CyberLink Corp.) C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe
(svchost.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f9f92cc42e038a12\igfxext.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftStickyNotes_6.0.2.0_x64__8wekyb3d8bbwe\Microsoft.Notes.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) D:\Program Files\PowerToys\PowerToys.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9971779a1c712866\RtkAudUService64.exe [1201968 2020-10-28] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\89.0.2.0\GoogleDriveFS.exe [60206368 2024-04-06] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\89.0.2.0\GoogleDriveFS.exe [60206368 2024-04-06] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\89.0.2.0\GoogleDriveFS.exe [60206368 2024-04-06] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [Steam] => D:\Program Files\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [WallpaperEngine] => D:\Program Files\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [3311032 2024-03-14] (Skutta Software GmbH -> )
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37448168 2024-04-18] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [qBittorrent] => C:\Program Files\qBittorrent\qbittorrent.exe [32255488 2023-11-27] (The qBittorrent Project) [Fichier non signé]
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [Opera GX Browser Assistant] => C:\Users\tinti\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [MicrosoftEdgeAutoLaunch_AE575C21443C1C9C90BE837ACD8736A3] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4082112 2024-04-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [46056704 2024-03-08] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Run: [NoxMultiPlayer] => D:\Program Files\Nox\bin\MultiPlayerManager.exe [3926632 2024-04-15] (Nox Limited -> )
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Policies\Explorer: [NoLowDiskSpaceChecks] False
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Policies\Explorer: [DisallowRun] 1
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Policies\Explorer\DisallowRun: [1] mshta.exe
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\Policies\Explorer\DisallowRun: [2] powershell.exe
HKU\S-1-5-21-2187874359-2326730379-599994202-1002\...\MountPoints2: {7871f73b-d97f-11ee-adcf-10a51d867157} - "F:\setup.exe"
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\89.0.2.0\GoogleDriveFS.exe [60206368 2024-04-06] (Google LLC -> Google, Inc.)
HKLM\...\Windows x64\Print Processors\Canon MG3600 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCT.DLL [30208 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [203936 2022-11-14] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3600 series: C:\Windows\system32\CNMLMCT.DLL [406528 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.122\Installer\chrmstp.exe [2024-04-25] (Brave Software, Inc. -> Brave Software, Inc.)

==================== Tâches planifiées (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {F9F85AC5-1E2F-4DFF-BAB5-411FA77D4A75} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2971808 2021-12-30] (Acer Incorporated -> ) -> C:\Program Files (x86)\Acer\Care Center\-auto
Task: {488B22D6-DBCF-42C6-B260-0559CAF20F92} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41632 2021-12-30] (Acer Incorporated -> )
Task: {5858D21E-2AF4-4C92-ADE6-10FB11DEFC83} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4836512 2021-12-30] (Acer Incorporated -> )
Task: {1870FC10-94B0-4CD4-8E12-0DC88993E604} - System32\Tasks\AcerCMUpdateTask2.5.22250 => C:\Program Files (x86)\Acer\Amundsen\2.5.22250\awc.exe [96904 2022-09-25] (Acer Incorporated -> )
Task: {B80746C2-0FE4-4BCC-BDAF-654BE9ED1C84} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {75C70DCB-070C-453D-80A4-7DA7D276FEA1} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [302968 2024-03-22] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {3FC67D5E-BB4A-4D59-B0C5-CD46D03E8BFB} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{8E491E41-BD89-4A46-A2CA-7B44B7D4518C} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-27] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {17A224AB-DB49-41C4-A1FD-2DD2E1C30B75} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{366DEFB4-EBEA-4D7D-969F-800705850150} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-27] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {44D721C1-8049-4D2E-8766-719A437BBB84} - System32\Tasks\CLToast => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317064 2024-01-04] (CyberLink Corp. -> )
Task: {F1EBE006-4C94-4C54-99D0-748679C5EA34} - System32\Tasks\CLToastRun => C:\Program Files (x86)\CyberLink\Shared files\CLToast.exe [2317064 2024-01-04] (CyberLink Corp. -> )
Task: {A5BFBB06-C6BE-4D9C-B340-9ED301768F4F} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem126.0.6425.0{FFF1DD48-0D4D-4662-855A-7E8602CC6319} => C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0\updater.exe [4786464 2024-04-18] (Google LLC -> Google LLC)
Task: {4C282344-8656-429C-BDD6-7EC25A073431} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4910680 2024-02-21] (Intel Corporation -> Intel Corporation)
Task: {557495E8-F42C-4679-BC89-70643A958AFC} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [4910680 2024-02-21] (Intel Corporation -> Intel Corporation)
Task: {0902B8DD-59A6-494A-B26E-4F97A49435D4} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Pas de fichier)
Task: {F6C938AD-6FC1-4427-88A9-68664CF33228} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22880112 2022-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {74A202F4-C835-4F5B-9C43-9CF43B86B72C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22880112 2022-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {FCE224BD-9892-42CA-BDD4-1A00853C764C} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138584 2023-03-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {8464D81D-F626-4231-AA4D-418C3212AEEC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138584 2023-03-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {AF237360-8494-4685-88D3-B5600F2EBFE8} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8573352 2023-03-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {6D8E4019-D7E2-4C57-9F21-2B9AAC5E6793} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B3001523-7F7C-4DE9-8650-48BAA0A1190D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BEF59085-CA1A-4FF8-936D-F7D217DBD811} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {43019AA9-8B75-4CC6-A19E-BC30F9665F28} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9F80C17A-F3AA-485F-A736-2B947C25F96B} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => d:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2463600 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {DFA99C73-C761-4C57-B114-9313E3095DD4} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => d:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1938792 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {B20022BB-BCAC-4002-8278-D79D80B054F2} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => d:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2335600 2021-09-08] (Microsoft Corporation -> Microsoft)
Task: {4ABDFDB0-5CC1-4E47-BABD-583A2DBA4FF9} - System32\Tasks\Microsoft_MKC_Logon_Task_ceip.exe => d:\Program Files\Microsoft Mouse and Keyboard Center\CEIP.exe [32632 2021-09-08] (Microsoft Corporation -> Microsoft)
Task: {84937ACE-32A8-45DC-998E-99F200D0050C} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => d:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2463600 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {0DB9DE8C-6BD1-4875-85DC-C706BD84CF7E} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => d:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [1938792 2021-09-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {E30A1E7E-AC46-49B7-929C-7D4DBD8CAB8A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34720 2024-04-07] (Mozilla Corporation -> Mozilla Foundation)
Task: {12173A44-52BC-4675-8431-A98F0B0BE55D} - System32\Tasks\NitroSense => C:\Program Files\Acer\NitroSense Service\PSLauncher.exe [609512 2021-08-09] (Acer Incorporated -> Acer Incorporated)
Task: {0D51CA3E-2808-41F8-AA33-EE840901C7D8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {253CF88B-2598-4308-B5A7-0871E1FF111A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BD84321F-2D48-46F5-AFA4-FCCE11488649} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {FC4D4A6C-4AEE-48FE-BD6D-62C891077525} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {87400002-3B6C-42BE-B059-59C85350B2F5} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C9823F1F-EF5D-4B84-9B34-7A19AE0D7891} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CD8F6BE7-1977-44BB-AF36-7553A8941023} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7BA9CCB2-7B59-4B95-90A6-08867BEF3866} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {794CB609-CD3D-401F-9BEC-77521838B4D9} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7FD5C34C-AB50-453D-A0F7-04411372D599} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [70792 2022-08-15] (Acer Incorporated -> )
Task: {79B83C08-81D3-4B89-849B-80650463BC73} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2187874359-2326730379-599994202-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe /reporting (Pas de fichier)
Task: {B41B88B2-E17E-4C15-B459-BF7DCBCAD980} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2187874359-2326730379-599994202-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe (Pas de fichier)
Task: {DBCB29E5-6C44-428B-B64F-012889B24E61} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1684540759 => C:\Users\tinti\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-12] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\tinti\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {A9DEEE93-8B39-4CF3-9836-AF414B12452F} - System32\Tasks\Opera GX scheduled Autoupdate 1684369457 => C:\Users\tinti\AppData\Local\Programs\Opera GX\launcher.exe [2304416 2024-04-12] (Opera Norway AS -> Opera Software)
Task: {F3502AAE-66DD-4DB1-9D43-EBF942DE0E8C} - System32\Tasks\Planet9Helper => C:\Program Files\PLANET9\win32\Planet9Helper.exe [23784 2023-02-09] (Acer Incorporated -> )
Task: {7C3D6F13-0945-48A2-A114-3A8B42AF123B} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2771616 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {59B88468-F934-4163-BB6F-CE11F6DF433C} - System32\Tasks\PowerDirectorStyleAgent => C:\Program Files (x86)\CyberLink\Shared files\PDStyleAgent\PDStyleAgent.exe [97544 2024-01-04] (CyberLink Corp. -> CyberLink Corp.)
Task: {81B13451-70B9-43C5-B9D0-289E81163E2E} - System32\Tasks\PowerToys\Autorun for Valentin => D:\Program Files\PowerToys\PowerToys.exe [1103296 2023-03-07] (Microsoft Corporation -> Microsoft Corporation)
Task: {B2501172-15F2-414E-8D39-8CA46350B39A} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [446624 2022-01-03] (Acer Incorporated -> Acer Incorporated)
Task: {68502DF9-186B-4C4D-A86F-A3A03D0B1321} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [461472 2021-12-30] (Acer Incorporated -> Acer Incorporated)
Task: {685635EE-D6EA-4727-8FE7-60FB381D0AAC} - System32\Tasks\StorPSCTL => C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe [153640 2021-03-29] (Acer Incorporated -> Microsoft)
Task: {ADC7920E-2638-4C50-8874-5D47C09730C4} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268520 2021-04-19] (Acer Incorporated -> Acer Incorporated)
Task: {893B3257-F9AB-4E31-B14F-06B8EDAAC2D0} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211560 2021-04-19] (Acer Incorporated -> Acer Incorporated)
Task: {1E4092F0-4DC5-4EC9-93C3-82CBD2C9C45C} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\WINDOWS\System32\Wscript.exe [200704 2023-05-12] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files\Intel\SUR\QUEENCREEK\x64\//B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8faf1f47-b1cf-4b82-a1e1-90ea9156b995}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{8faf1f47-b1cf-4b82-a1e1-90ea9156b995}: [DhcpDomain] home
Tcpip\..\Interfaces\{8faf1f47-b1cf-4b82-a1e1-90ea9156b995}\3523330255C6472716024656026716C656E64796E6: [DhcpNameServer] 192.168.171.254
Tcpip\..\Interfaces\{8faf1f47-b1cf-4b82-a1e1-90ea9156b995}\F40505F4026496E646028533020527F6: [DhcpNameServer] 192.168.76.194
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

Edge:
=======
Edge Profile: C:\Users\tinti\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-25]
Edge Extension: (Dashlane - Gestionnaire de mots de passe) - C:\Users\tinti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gehmmocbbkpblljhkekmfhjpfbkclbph [2024-04-23]
Edge Extension: (Google Docs hors connexion) - C:\Users\tinti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-02]
Edge Extension: (Edge relevant text changes) - C:\Users\tinti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge Extension: (Scan Translator) - C:\Users\tinti\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mnngaddpelmhcgkbeajnbjmkdmpkogbo [2024-03-23]
Edge Extension: (Google Sheets) - C:\Extension\7.5.8._0 [2023-12-13]

FireFox:
========
FF DefaultProfile: vruxhuk7.default
FF ProfilePath: C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\vruxhuk7.default [2024-04-25]
FF ProfilePath: C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\gf105t38.default-release [2024-04-25]
FF Extension: (Dashlane) - C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\gf105t38.default-release\Extensions\[email protected] [2024-04-08]
FF Extension: (Language: Français (French)) - C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\gf105t38.default-release\Extensions\[email protected] [2024-04-05]
FF Extension: (uBlock Origin) - C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\gf105t38.default-release\Extensions\[email protected] [2024-04-07]
FF Extension: (IGRAAL : Cashback & codes promo) - C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\gf105t38.default-release\Extensions\{dbac9680-d559-4cd4-9765-059879e8c467}.xpi [2024-03-26]
FF Extension: (wanteeed) - C:\Users\tinti\AppData\Roaming\Mozilla\Firefox\Profiles\gf105t38.default-release\Extensions\{EDB6A15C-5F8C-4531-92FA-98E988CF233C}.xpi [2024-03-29]
FF HKLM\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-03-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-11-14] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32.dll [2023-03-18] (Adobe Systems Incorporated -> )
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-03-01] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

Opera:
=======
StartMenuInternet: (HKU\S-1-5-21-2187874359-2326730379-599994202-1002) Opera GXStable - "C:\Users\tinti\AppData\Local\Programs\Opera GX\Launcher.exe"

Brave:
=======
BRA Profile: C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-04-25]
BRA Extension: (Adobe Acrobat : outils de modification, de conversion et de signature de PDF) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-12-16]
BRA Extension: (Google Sheets) - C:\Extension\2.8.8._0 [2023-12-13]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-01-13]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-01-13]
BRA Extension: (Brave NTP background images) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2023-10-27]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-01-13]
BRA Extension: (Brave Ads Resources) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\bgifagoclclhhoflocdefiklgodpihog [2024-01-07]
BRA Extension: (Wallet Data Files Updater) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-01-13]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-01-13]
BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2024-01-13]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-11-18]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2023-10-27]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-01-13]
BRA Extension: (Brave NTP sponsored images) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2024-01-13]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-01-13]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\tinti\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-10-27]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [259232 2021-12-30] (Acer Incorporated -> Acer Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-27] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService1da28958f6774f0; C:\Program Files\BraveSoftware\Brave-Browser\Application\124.1.65.122\elevation_service.exe [2679320 2024-04-24] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-27] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\124.0.6367.18\remoting_host.exe [74016 2024-03-26] (Google LLC -> Google LLC)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12124536 2022-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4977488 2023-03-11] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 DriversCloudAgent; C:\Program Files\Cybelsoft\DriversCloud.com\DriversCloudAgent.exe [1803744 2024-04-07] (CYBELSOFT -> )
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe [43784 2024-03-27] (Intel Corporation -> Intel)
R3 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe [291592 2024-03-27] (Intel Corporation -> Intel)
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [243432 2022-07-08] (DTS, Inc. -> DTS Inc.)
R3 FvSvc; D:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [1081896 2024-04-03] (NVIDIA Corporation -> NVIDIA)
S2 GoogleUpdaterInternalService126.0.6425.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0\updater.exe [4786464 2024-04-18] (Google LLC -> Google LLC)
S2 GoogleUpdaterService126.0.6425.0; C:\Program Files (x86)\Google\GoogleUpdater\126.0.6425.0\updater.exe [4786464 2024-04-18] (Google LLC -> Google LLC)
R2 hshld_12.8.2; C:\Program Files (x86)\Hotspot Shield\12.8.2\bin\cmw_srv.exe [262160 2024-04-03] (Pango LLC -> Pango Inc.)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [1748992 2020-01-10] (Rivet Networks LLC -> Rivet Networks)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2651640 2020-01-10] (Rivet Networks LLC -> Rivet Networks)
R3 Killer Wifi Optimization Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [73704 2020-01-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [73712 2020-01-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10994432 2024-03-08] (Logitech Inc -> Logitech, Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8884840 2024-04-25] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpDefenderCoreService.exe [1459968 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvacig.inf_amd64_52f3e1d0b5db2a3a\Display.NvContainer\NVDisplay.Container.exe [1275424 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R2 PLANET9DAService; C:\Program Files (x86)\PLANET9DA\PLANET9DA.exe [2180472 2023-12-20] (Acer Incorporated -> I3D Technology Inc.)
S3 ProtonVPN Service; C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe [401512 2022-12-14] (Proton Technologies AG -> ProtonVPN)
R3 PSSvc; C:\Program Files\Acer\NitroSense Service\PSSvc.exe [840424 2021-08-09] (Acer Incorporated -> Acer Incorporated)
S3 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [466080 2022-01-03] (Acer Incorporated -> Acer Incorporated)
R3 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [504480 2022-01-03] (Acer Incorporated -> Acer Incorporated)
R2 Quick Share Service; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.6.35.0_x64__wyx1vj98g3asy\QuickShareService\QuickShareService.exe [45568 2024-03-01] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [625928 2024-01-04] (CyberLink Corp. -> CyberLink)
R2 SamsungAccountService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.23.12130.0_x64__3c1yjt4zspk6g\SAService\SAService.exe [6656 2024-03-01] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> )
R2 SigridWaveService; C:\Program Files (x86)\SigridWave\SigridWaveService.exe [454504 2023-01-11] (Acer Incorporated -> I3D Technology Inc.)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [343272 2021-04-19] (Acer Incorporated -> Acer Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 xTendSoftAPService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendSoftAPService.exe [73720 2020-01-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
R2 xTendUtilityService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\xTendUtilityService.exe [73720 2020-01-10] (Rivet Networks LLC -> Rivet Networks, LLC.)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AcerAirplaneModeController; C:\WINDOWS\System32\drivers\AcerAirplaneModeController.sys [36800 2022-06-02] (Acer Incorporated -> Acer Incorporated)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2023-07-26] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [394288 2024-03-22] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 DriversCloud_amd64; C:\Program Files\Cybelsoft\DriversCloud.com\Drivers\DriversCloud_amd64.sys [24768 2024-02-09] (Cybelsoft -> CybelSoft)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2023-03-11] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2023-03-11] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-11-01] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 hsstap; C:\WINDOWS\System32\drivers\hsstap.sys [39424 2020-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Pango)
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo10X64.sys [177272 2020-01-10] (Rivet Networks LLC -> Rivet Networks, LLC.)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [44880 2023-03-10] (Logitech Inc -> Logitech)
S3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [32080 2023-03-01] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [73040 2023-03-10] (Logitech Inc -> Logitech)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-08-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-04-25] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKsl6649f5f3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F554930F-42DD-4B85-A024-DFCD208DCA2A}\MpKslDrv.sys [301336 2024-04-25] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [235016 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R1 pango_netfilter2; C:\WINDOWS\System32\drivers\pango_netfilter2.sys [89088 2024-04-03] (Microsoft Windows Hardware Compatibility Publisher -> Pango Inc)
S3 ProtonVPNCallout; C:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys [34176 2022-10-07] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2023-07-10] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2022-10-07] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20936 2024-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601376 2024-04-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-10] (Microsoft Windows -> Microsoft Corporation)
R3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [29680 2023-03-01] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
R1 YSDrv; C:\Program Files (x86)\Bignox\BigNoxVM\RT\YSDrv.sys [312776 2024-04-23] (Microsoft Windows Hardware Compatibility Publisher -> Nox Limited Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

==================== Un mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2024-04-25 14:34 - 2024-04-25 14:34 - 000000000 ____D C:\Users\tinti\AppData\Local\MultiPlayerManager
2024-04-15 15:55 - 2024-04-25 13:37 - 000000000 ____D C:\Users\tinti\.android
2024-04-15 15:55 - 2024-04-15 15:55 - 000000066 _____ C:\Users\tinti\inittk.ini
2024-04-15 15:54 - 2024-04-25 13:36 - 000000000 ____D C:\Users\tinti\vmlogs
2024-04-15 15:54 - 2024-04-25 13:36 - 000000000 ____D C:\Users\tinti\AppData\Local\NoxSrv
2024-04-15 15:54 - 2024-04-25 13:36 - 000000000 ____D C:\Users\tinti\.BigNox
2024-04-15 15:54 - 2024-04-23 15:04 - 000000000 ____D C:\Program Files (x86)\Bignox
2024-04-15 15:54 - 2024-04-15 15:54 - 000000053 _____ C:\Users\tinti\useruid.ini
2024-04-15 15:54 - 2024-04-15 15:54 - 000000045 _____ C:\Users\tinti\nuuid.ini
2024-04-15 15:54 - 2024-04-15 15:54 - 000000041 _____ C:\Users\tinti\inst.ini
2024-04-15 15:54 - 2024-04-15 15:54 - 000000000 ____D C:\Users\tinti\Nox_share
2024-04-15 15:54 - 2024-04-15 15:54 - 000000000 ____D C:\Users\tinti\AppData\Roaming\NoxSrv
2024-04-15 15:54 - 2024-04-15 15:54 - 000000000 ____D C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Nox
2024-04-15 15:53 - 2024-04-25 14:38 - 000000000 ____D C:\Users\tinti\AppData\Local\Nox
2024-04-13 22:09 - 2024-04-13 22:09 - 000516484 _____ C:\Users\tinti\OneDrive\Documents\Ordures me_nage.pdf
2024-04-12 10:56 - 2024-04-12 10:56 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2024-04-12 10:51 - 2024-04-03 15:53 - 002031464 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2024-04-12 10:51 - 2024-04-03 15:53 - 002031464 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-04-12 10:51 - 2024-04-03 15:53 - 001578752 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-04-12 10:51 - 2024-04-03 15:53 - 001578752 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-04-12 10:51 - 2024-04-03 15:53 - 001487904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-04-12 10:51 - 2024-04-03 15:53 - 001445224 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2024-04-12 10:51 - 2024-04-03 15:53 - 001445224 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-04-12 10:51 - 2024-04-03 15:53 - 001295104 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2024-04-12 10:51 - 2024-04-03 15:53 - 001295104 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-04-12 10:51 - 2024-04-03 15:53 - 001226864 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-04-12 10:51 - 2024-04-03 15:50 - 001543712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-04-12 10:51 - 2024-04-03 15:50 - 001199624 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-04-12 10:51 - 2024-04-03 15:50 - 000841736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2024-04-12 10:51 - 2024-04-03 15:50 - 000670240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2024-04-12 10:51 - 2024-04-03 15:50 - 000505352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2024-04-12 10:51 - 2024-04-03 15:49 - 012929568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-04-12 10:51 - 2024-04-03 15:49 - 002174496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-04-12 10:51 - 2024-04-03 15:49 - 001626120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-04-12 10:51 - 2024-04-03 15:49 - 001024544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2024-04-12 10:51 - 2024-04-03 15:49 - 000787464 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2024-04-12 10:51 - 2024-04-03 15:49 - 000459272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2024-04-12 10:51 - 2024-04-03 15:48 - 016034848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-04-12 10:51 - 2024-04-03 15:48 - 006780960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-04-12 10:51 - 2024-04-03 15:48 - 005913200 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-04-12 10:51 - 2024-04-03 15:48 - 005773344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2024-04-12 10:51 - 2024-04-03 15:48 - 003721224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-04-12 10:51 - 2024-04-03 15:48 - 000853008 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2024-04-12 10:51 - 2024-04-03 15:47 - 006034736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-04-12 10:51 - 2024-04-03 03:54 - 000119466 _____ C:\WINDOWS\system32\nvinfo.pb
2024-04-12 10:46 - 2024-04-12 10:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2024-04-10 19:27 - 2024-04-10 19:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2024-04-10 19:27 - 2024-04-10 19:27 - 000000000 ____D C:\Program Files (x86)\Hotspot Shield
2024-04-10 11:19 - 2024-04-10 11:19 - 000024320 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-10 11:18 - 2024-04-10 11:18 - 000024320 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-04-08 15:22 - 2024-04-08 15:22 - 000003670 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2024-04-08 15:22 - 2024-02-22 09:58 - 000047240 _____ C:\WINDOWS\system32\Drivers\semav6msr64.sys
2024-04-04 17:22 - 2024-04-04 17:22 - 000000000 ____D C:\Users\tinti\AppData\Local\CrashReportClient
2024-04-04 15:50 - 2024-04-25 11:19 - 000000000 ____D C:\Users\tinti\AppData\Roaming\WeMod
2024-04-04 15:50 - 2024-04-25 11:19 - 000000000 ____D C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WeMod
2024-04-04 15:50 - 2024-04-25 11:19 - 000000000 ____D C:\Users\tinti\AppData\Local\WeMod
2024-04-03 21:31 - 2024-04-25 11:11 - 000000000 ____D C:\ProgramData\bst_boost_interprocess
2024-04-03 21:31 - 2024-04-25 11:11 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2024-04-03 21:31 - 2024-04-03 21:31 - 000000000 ____D C:\Program Files\BlueStacks_nxt

==================== Un mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2024-04-25 14:39 - 2023-12-07 22:40 - 000000000 ____D C:\FRST
2024-04-25 14:37 - 2023-03-01 17:18 - 000850372 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-04-25 14:37 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-04-25 14:36 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-04-25 14:35 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-04-25 14:33 - 2023-07-01 11:41 - 000000000 ____D C:\Users\tinti\AppData\LocalLow\Temp
2024-04-25 14:33 - 2023-03-09 03:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\PowerToys
2024-04-25 14:33 - 2023-03-01 17:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-04-25 14:33 - 2023-03-01 17:10 - 000000000 ____D C:\Users\tinti
2024-04-25 14:33 - 2023-03-01 13:08 - 000000000 ____D C:\Users\tinti\AppData\Local\CrashDumps
2024-04-25 14:33 - 2022-06-24 17:35 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-25 14:33 - 2022-06-24 17:23 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-25 14:33 - 2022-06-24 17:23 - 000000000 ___HD C:\Intel
2024-04-25 14:33 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-04-25 14:33 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-25 14:33 - 2022-05-07 07:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-04-25 11:45 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-25 11:35 - 2023-08-09 21:25 - 000000000 ____D C:\Users\tinti\AppData\Local\Malwarebytes
2024-04-25 11:34 - 2023-08-09 21:25 - 000239576 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2024-04-25 11:21 - 2023-03-12 14:56 - 000000000 ____D C:\Users\tinti\AppData\Roaming\The Creative Assembly
2024-04-25 11:20 - 2024-03-17 01:29 - 000000000 ____D C:\Users\tinti\AppData\Local\Package Cache
2024-04-25 10:59 - 2023-10-27 13:30 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-04-24 21:36 - 2023-12-20 18:29 - 000000000 ____D C:\Program Files (x86)\PassFab for RAR
2024-04-24 17:29 - 2023-03-01 17:30 - 000000000 ____D C:\Users\tinti\AppData\Roaming\qBittorrent
2024-04-24 10:22 - 2023-03-01 17:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-04-23 15:04 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Registration
2024-04-22 15:16 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-04-22 10:58 - 2023-03-01 12:11 - 000000000 ____D C:\Users\tinti\AppData\Local\D3DSCache
2024-04-20 03:43 - 2023-04-27 23:44 - 000000000 ____D C:\Users\tinti\AppData\Roaming\Microsoft\Excel
2024-04-19 19:17 - 2022-06-24 17:23 - 000002533 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-19 11:59 - 2021-10-06 06:06 - 000000000 ___HD C:\OEM
2024-04-19 10:09 - 2023-03-01 12:11 - 000000000 ____D C:\Users\tinti\AppData\Local\Packages
2024-04-18 15:03 - 2023-03-01 12:08 - 000000000 ___SD C:\Users\tinti\AppData\Roaming\Microsoft\Credentials
2024-04-17 22:24 - 2023-06-27 21:25 - 000000000 ____D C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2024-04-16 13:15 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-04-15 17:53 - 2023-05-18 02:24 - 000004220 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1684369457
2024-04-15 17:53 - 2023-05-18 02:24 - 000001441 _____ C:\Users\tinti\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera GX.lnk
2024-04-13 01:26 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-04-12 11:39 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-12 10:57 - 2023-06-15 17:17 - 000000000 ____D C:\Users\tinti\AppData\LocalLow\NVIDIA
2024-04-12 10:57 - 2023-03-01 17:09 - 000521184 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-04-12 10:56 - 2023-10-27 03:42 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-04-12 10:56 - 2022-06-24 18:17 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-04-12 10:56 - 2022-06-24 18:17 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-04-12 10:56 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-04-12 10:55 - 2022-06-24 17:35 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2024-04-12 10:54 - 2023-03-10 15:50 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-10 15:50 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-10 15:50 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-10 15:50 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-10 15:50 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-10 15:50 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-10 15:50 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-01 17:13 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2023-03-01 17:13 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-04-12 10:54 - 2022-06-24 17:35 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2024-04-12 10:54 - 2022-06-24 17:34 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2024-04-12 10:52 - 2023-03-10 15:50 - 000000000 ____D C:\Users\tinti\AppData\Local\NVIDIA
2024-04-12 10:46 - 2024-03-25 18:44 - 000000000 ____D C:\ProgramData\driverscloud.com
2024-04-12 09:56 - 2023-03-01 18:46 - 000000000 ____D C:\Users\tinti\AppData\Roaming\vlc
2024-04-10 19:27 - 2023-03-04 14:54 - 000000000 ____D C:\ProgramData\Hotspot Shield
2024-04-10 19:27 - 2022-06-24 17:26 - 000000000 ____D C:\ProgramData\Package Cache
2024-04-10 12:04 - 2023-03-01 22:20 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-04-10 12:02 - 2023-03-01 22:19 - 192651728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-04-10 11:19 - 2023-03-01 17:13 - 003213824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-04-10 01:14 - 2022-06-24 17:23 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-04-08 21:14 - 2023-03-02 03:53 - 000000000 ____D C:\Program Files (x86)\Google
2024-04-08 16:59 - 2023-10-27 13:30 - 000003982 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA{366DEFB4-EBEA-4D7D-969F-800705850150}
2024-04-08 16:59 - 2023-10-27 13:30 - 000003858 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore{8E491E41-BD89-4A46-A2CA-7B44B7D4518C}
2024-04-08 16:00 - 2024-03-01 14:44 - 000003834 _____ C:\WINDOWS\system32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473
2024-04-08 15:22 - 2024-03-01 14:32 - 000003762 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132
2024-04-08 15:22 - 2024-03-01 14:32 - 000003528 _____ C:\WINDOWS\system32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon
2024-04-07 13:55 - 2022-06-24 18:17 - 000001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-04-06 02:13 - 2023-03-02 03:53 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2024-04-04 17:58 - 2023-05-12 04:29 - 000000000 ____D C:\Users\tinti\AppData\Local\ElevatedDiagnostics
2024-04-04 15:50 - 2023-12-19 17:40 - 000000000 ____D C:\Users\tinti\AppData\Local\SquirrelTemp
2024-04-04 12:11 - 2023-03-01 17:13 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-04 12:11 - 2023-03-01 17:13 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-04-03 21:34 - 2023-04-23 14:41 - 000000000 ____D C:\Users\tinti\AppData\Local\BlueStacks X
2024-04-03 21:31 - 2023-04-22 16:07 - 000003930 _____ C:\WINDOWS\system32\Tasks\BlueStacksHelper_nxt
2024-04-03 21:31 - 2023-04-22 16:05 - 000000000 ____D C:\Users\tinti\AppData\Local\Bluestacks
2024-04-03 21:31 - 2023-04-22 16:05 - 000000000 ____D C:\Users\Public\BlueStacks
2024-04-03 21:29 - 2023-04-22 16:06 - 000000000 ____D C:\Program Files (x86)\BlueStacks X
2024-04-03 15:50 - 2023-12-20 15:02 - 001046040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2024-04-03 15:47 - 2021-06-28 12:59 - 006948672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-04-03 11:03 - 2023-04-22 16:07 - 000000000 ____D C:\ProgramData\boost_interprocess
2024-04-03 03:54 - 2023-03-10 15:50 - 002905128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 002235944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 001296936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 000170040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 000149048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 000086568 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 000075304 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2024-04-03 03:54 - 2023-03-10 15:50 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2024-04-03 03:54 - 2022-06-24 17:34 - 000235016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvpcf.sys
2024-03-29 15:51 - 2024-03-01 14:32 - 000001517 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk
2024-03-28 02:35 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

==================== Fin de FRST.txt ========================

par **Malekal_morte** » 25 avr. 2024 15:03

Ca doit commencer à aller mieux.
Cela donne quoi au niveau des fenêtres PowerShell qui s'ouvre intempestivement ?

valoo550 · par **valoo550** » 25 avr. 2024 15:29

pour le moment plus aucune fênetre ne s'ouvre, plus de PowerShell non plus dans le gestionnaire de taches, j'ai aussi suivi le tuto du site https://www.malekal.com/comment-desacti ... ell-mshta/ pour le désactivé de windows, plus de détection non plus du côté de malwarbyte

par **Malekal_morte** » 25 avr. 2024 15:57

Oui j'ai vu dans FRST, note que parfois PowerShell peut être utilisé, donc si tu as des messages d'erreur d'application, il faudra le réactiver.
Maintenant lis bien la phrase suivante :

CHANGE TOUS LES MOTS DE PASSE DE TES COMPTES INTERNET.

Car ils ont été volés.

Supprime C:\FRST et ses restes.
Fais des analyses MBAM et vérifie que Windows Defender fonctionne correctement.

A lire : que faire après une attaque de virus informatique.
Change tes mots de passe et suis les instructions pour la bonne conduite pour ne plus te faire infecter.

Pour éviter les virus, il faut savoir comment les pirates s'y prennent pour infecter les ordinateurs : Comment les virus informatiques sont distribués
Enfin pour protéger ton PC : Comment protéger son PC des virus et des pirates ?

Si l'aide t'a contenu ou si les tutoriels du site t'ont aidé, tu peux prendre le temps d'évaluer le site sur Bing, ce serait sympa : Evaluer le site malekal.com

Guilebike · par **Guilebike** » 20 août 2024 10:08

Bonjour,

j'ai le même problème sur mon ordi. J'ai fait l'analyse FRST et je voudrais savoir ou vous transmettre les rapports d'analyse?
Merci d'avance

par **Parisien_entraide** » 20 août 2024 10:31

Bonjour

Idéalement il te faudrait ouvrir ton propre sujet (cela évite les mélanges)

Tu dois avoir 3 rapports

* FRST.txt
* Shortcut
* Additionnal.txt

Envoie ces 3 rapports sur le site https://pjjoint.malekal.com/ (sans mot de passe) ou https://textup.fr si cela ne passe pas,et en retour donne les 3 liens qui mènent aux rapports dans ton nouveau sujet afin qu'ils puissent être consultés

Malekal.com forum

Fenêtres Powershell qui s'ouvrent toutes seules [résolu]

Fenêtres Powershell qui s'ouvrent toutes seules [résolu]

Re: Fenêtres Powershell qui s'ouvrent toutes seules

Re: Fenêtres Powershell qui s'ouvrent toutes seules

Re: Fenêtres Powershell qui s'ouvrent toutes seules

Re: Fenêtres Powershell qui s'ouvrent toutes seules

Re: Fenêtres Powershell qui s'ouvrent toutes seules

Re: Fenêtres Powershell qui s'ouvrent toutes seules

Re: Fenêtres Powershell qui s'ouvrent toutes seules [résolu]

Re: Fenêtres Powershell qui s'ouvrent toutes seules [résolu]