start::
closeprocesses:
createrestorepoint:
Intel Driver && Support Assistant (HKLM-x32\...\{19B7322D-268B-4D88-AA3E-938F36F9DCE9}) (Version: 22.3.20.6 - Intel) Hidden
CustomCLSID: HKU\S-1-5-21-4211000935-2073647821-1762783432-1003_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD LT 2020\acadlt.exe => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4211000935-2073647821-1762783432-1003_Classes\CLSID\{74F5CC00-49A9-11CF-A2F9-444553540000}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD LT 2020\fr-FR\acadltficn.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4211000935-2073647821-1762783432-1003_Classes\CLSID\{9AAF0EB6-42D8-46C1-A2EF-679511B37A0D}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2018\acad.exe /Automation => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4211000935-2073647821-1762783432-1003_Classes\CLSID\{B6EB585B-B467-4E46-A9C7-48D7D6FD26CB}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2018\acad.exe => Pas de fichier
ShellIconOverlayIdentifiers: [ 01UnsuppModule] -> {AEB16659-2125-4ADA-A4AB-45EE21E86469} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ 02SyncingModule] -> {48AB5ADA-36B1-4137-99C9-2BD97F8788AB} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ 03SyncedModule] -> {472CE1AD-5D53-4BCF-A1FB-3982A5F55138} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ 04ReadOnlyModule] -> {A433C3E0-8B24-40EB-93C3-4B10D9959F58} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ 05NoPermModule] -> {C701AD67-3DF0-47C9-89CB-DFA6207BE229} => -> Pas de fichier
ContextMenuHandlers1: [BB FlashBack 2] -> {A8065B9E-193F-4797-B62D-8F6321E7FCCB} => -> Pas de fichier
ContextMenuHandlers1: [QuickShare] -> {A8065B9E-193F-4797-B62D-8F6321E7FCCB} => -> Pas de fichier
ContextMenuHandlers4-x32: [CMenuExtender] -> {ABC70703-32AF-11d4-90C4-D483A70F4825} => C:\Program Files (x86)\iColorFolder\CMExt.dll -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
HKLM\...\.scr: ZWCAD.SCR.2021 => <==== ATTENTION
BHO: Pas de nom -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> Pas de fichier
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-4211000935-2073647821-1762783432-1003\...\webcompanion.com -> hxxp://webcompanion.com
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [288184 2022-05-09] (Intel Corporation -> Intel)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPAgent.exe, <==== ATTENTION
HKU\S-1-5-21-4211000935-2073647821-1762783432-1003\...\Policies\Explorer: []
HKU\S-1-5-21-4211000935-2073647821-1762783432-1013\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe --disable-domain-reliability --disable-features=NotificationTriggers,WebOTP,TextFragmentAnchor,PrivacySettingsRedesign,TabHove (l'élément de données a 777 caractères en plus). (Pas de fichier)
HKU\S-1-5-21-4211000935-2073647821-1762783432-1013\...\Policies\Explorer: []
HKU\S-1-5-21-4211000935-2073647821-1762783432-1015\...\Policies\Explorer: []
HKLM\Software\...\Authentication\Credential Providers: [{02AA8B83-49C5-482C-915A-B6824F665CCD}] ->
HKLM\Software\...\Authentication\Credential Providers: [{2A16DF2F-490B-4F2B-8C68-21EF46FCCC37}] ->
HKLM\Software\...\Authentication\Credential Providers: [{3ADC7042-51AF-4D0F-BD1D-4D6965A77323}] ->
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] ->
HKLM\Software\...\Authentication\Credential Providers: [{57E84B57-5533-4624-AB49-E29C8C5489D6}] ->
HKLM\Software\...\Authentication\Credential Providers: [{70099717-17C8-4BD0-B3D4-FAF721AB1A62}] ->
HKLM\Software\...\Authentication\Credential Providers: [{722DEFE8-78AF-4E12-86A1-A8B21B509C52}] -> C:\WINDOWS\system32\DPCrProv2.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{77B7ED10-A641-4766-A428-8B9EE42E830A}] -> C:\WINDOWS\system32\DPCrProv2.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{E85E7D14-653B-4E51-9BC5-E5F9EC9BC51D}] -> C:\WINDOWS\system32\DPCrProv2.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F0C31759-99A6-493E-AD7D-7F69126CDFBC}] -> C:\WINDOWS\system32\DPCrProv2.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{F731030D-3272-4D8B-A21A-3940EF268453}] -> C:\WINDOWS\system32\DPCrProv2.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
HKLM\Software\...\Authentication\Credential Provider Filters: [{DCFB2A33-814B-4236-BFBD-FFEA3F528385}] -> C:\WINDOWS\system32\DPCrProv2.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
HKLM\Software\...\Authentication\Credential Provider Filters: [{FD2AB138-F9A8-4ab6-9095-EEE7AF8B6C28}] ->
HKLM\Software\...\Winlogon\GPExtensions: [{8D90E7E9-6F48-4e24-85E0-596C8E6C4639}] -> C:\Program Files\Hewlett-Packard\HP ProtectTools Security Manager\Bin\DPCmsGPOClient.dll [2015-09-28] (DigitalPersona, Inc. -> DigitalPersona, Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => Pas de fichier
Lsa: [Notification Packages] DPPassFilter scecli
Startup: C:\Users\Ancelord_D\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ZoomIt.exe - Raccourci.lnk [2022-02-15]
ShortcutTarget: ZoomIt.exe - Raccourci.lnk -> C:\Users\Ancelord\Applications portables\ZOOMIT\ZoomIt.exe (Pas de fichier)
Task: {1729FCCA-ACC9-4CCB-9F6E-54E5026120A4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Pas de fichier)
Task: {1AC8FE47-EDF2-4A88-87C6-6F6921FE5218} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Pas de fichier)
Task: {1E9033D6-9AB4-400D-985A-77931CE20FA6} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Pas de fichier)
Task: {1ED85EFA-3B5B-4E46-9B97-8A5222CAE65E} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Pas de fichier)
Task: {1F764682-1B9E-408A-9348-D6333D86E3C5} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {22C8B87C-630E-4553-9809-F4C7496FAA98} - System32\Tasks\G2MUploadTask-S-1-5-21-4211000935-2073647821-1762783432-1005 => C:\Users\Ancelord D\AppData\Local\GoToMeeting\16474\g2mupload.exe (Pas de fichier)
Task: {30E89F0D-43A3-4931-AE9A-087100DAA3BD} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Pas de fichier)
Task: {3231857B-7283-463F-A7D9-2BC74CB8BDDC} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Pas de fichier)
Task: {3E021C93-95E2-496E-A67E-29350DCF28C7} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Pas de fichier)
Task: {3ED9C289-92D5-47D3-AF17-7A45BCA1912F} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe (Pas de fichier)
Task: {43E588CD-6E78-46EF-AED5-E8D495193BC7} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {450BCB35-2934-4C0B-BE99-91BB5A315AAB} - \CCleanerSkipUAC -> Pas de fichier <==== ATTENTION
Task: {51F67433-B992-42E9-85A0-BB94FF332ED6} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Pas de fichier)
Task: {574E35B5-981D-4616-94C4-17742B9E4509} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_314_Plugin.exe [1457720 2020-01-15] (Adobe Inc. -> Adobe)
Task: {57A4FE7E-C912-4F48-90A8-BF671DA23AD1} - \Microsoft\Windows\Setup\EOSNotify -> Pas de fichier <==== ATTENTION
Task: {596848C7-636D-4BD0-B6DA-F74C94B706E6} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Pas de fichier)
Task: {59B39544-B5BE-4FC0-995A-7590A2E15CA2} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Pas de fichier)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5DB780D9-BD72-47CA-9B18-4060D902AE69} - System32\Tasks\Sump Task (One-Time) => C:\Program Files (x86)\IObit\IObit Uninstaller\sump.exe /sup2 (Pas de fichier)
Task: {645E737B-834E-4947-9BB1-0BF146B26203} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Pas de fichier)
Task: {66938907-9A1E-4F97-82C7-2F3968A19454} - \Microsoft\Windows\Setup\EOSNotify2 -> Pas de fichier <==== ATTENTION
Task: {69E26192-6F50-43EA-8721-7BE43781AB26} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Pas de fichier)
Task: {76C57324-C6C3-46BA-9FE8-50CE40ABAD7D} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {8126B2CB-D2B3-47C1-853B-794383D4E858} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Pas de fichier)
Task: {8521576B-80D1-4EC2-81EB-D2631E543864} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Pas de fichier)
Task: {99C1F23A-A7AB-46A6-8D4B-9B5BA82F59FA} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => C:\WINDOWS\system32\sipnotify.exe -LogonOrUnlock (Pas de fichier)
Task: {9A359A70-6CD0-415F-A61E-7267D87230FF} - \RocketTab Update Task -> Pas de fichier <==== ATTENTION
Task: {A9A09011-D20E-4099-B6C2-75F1A4A33711} - System32\Tasks\HPCustPartic.exe_{0683912F-CDEA-4A14-8720-DEBFDAAB2E81} => C:\Program Files\HP\HP OfficeJet Pro 6970\Bin\HPCustPartic.exe /installoptin 1570045579 /installreport yes (Pas de fichier)
Task: {ADCB22FD-BE2D-44F3-8334-B323BA9C0DD8} - System32\Tasks\G2MUpdateTask-S-1-5-21-4211000935-2073647821-1762783432-1005 => C:\Users\Ancelord D\AppData\Local\GoToMeeting\16474\g2mupdate.exe (Pas de fichier)
Task: {AE1DE206-AAB4-430A-9F89-DF2AB5351E23} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Pas de fichier)
Task: {AE605290-82EB-4CAB-A122-E9B3AFAC7644} - System32\Tasks\{20BE025F-46A4-4A3D-8DD1-F3FF1D81F121} => C:\Windows\system32\pcalua.exe -a F:\setup.exe -d F:\
Task: {AEACE138-8524-419F-8435-AA46DB3229E7} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => C:\WINDOWS\system32\sipnotify.exe -Daily (Pas de fichier)
Task: {C06EFA6E-DCF2-4B66-9195-C6F4F079A2CD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Pas de fichier)
Task: {C3DFDDE7-F58A-47C8-B7AB-340D96C9DE1F} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {CE27968F-1B55-404E-9D22-BD5EDE283D30} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Pas de fichier)
Task: {D1B680B2-7638-4B9B-B074-4770FA74DE68} - System32\Tasks\HPCustPartic.exe_{D3C02E05-4300-455D-A1F8-0E74632C529F} => C:\Program Files\HP\HP OfficeJet Pro 6970\Bin\HPCustPartic.exe /surveydata /cc fr /zipcode 75020 /usagetype 0032 /lang fr (Pas de fichier)
Task: {D9B62E2D-0417-4294-9910-5D2FA5DCCB1C} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {E6650574-5A30-4D0B-A6D0-318AB731CBB4} - System32\Tasks\Norton Remove and Reinstall\Norton Remove and Reinstall => C:\Users\Ancelord\Desktop\NRnR.exe (Pas de fichier)
Task: {E890568D-F8F7-4C56-B5F3-CB8043162C95} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Pas de fichier)
Task: {E897F4C2-48DF-4BB5-890B-67E31220E0F5} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe /StartRecording (Pas de fichier)
Task: {E9492158-482D-43BE-B64D-AEAB73251ACF} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe /launch (Pas de fichier)
Task: {ECC16307-A4ED-4C9A-80A0-7F488367CC60} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Pas de fichier)
Task: {ED95FD65-7591-46EF-93B2-0E38E366F477} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-01-15] (Adobe Inc. -> Adobe)
Task: {F14B86E5-633A-4623-9F98-82A3C8BD2153} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Pas de fichier)
Task: {F3390159-4155-45FA-B47F-B4FA69D8F0CC} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Pas de fichier)
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\0q0qwkl50zr.js [2021-04-15] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\hgs4azbs0j2.js [2020-11-14] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\xdfw0hphrpg.js [2020-11-26] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\0q0qwkl50zr.cfg [2021-04-15] <==== ATTENTION
FF ExtraCheck: C:\Program Files\mozilla firefox\hgs4azbs0j2.cfg [2020-11-14] <==== ATTENTION
FF ExtraCheck: C:\Program Files\mozilla firefox\xdfw0hphrpg.cfg [2020-11-26] <==== ATTENTION
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [Pas de fichier]
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [Pas de fichier]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKU\S-1-5-21-4211000935-2073647821-1762783432-1003\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]
CHR HKLM-x32\...\Chrome\Extension: [ncffjdbbodifgldkcbhmiiljfcnbgjab] - C:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome.crx [2015-09-28]
C:\WINDOWS\system32\default_error_stack*.txt
cmd: sfc /scannow
emptytemp:
end::