Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11.06.2024
Exécuté par touggourt (administrateur) sur PÉPÉJANOT (Hewlett-Packard HP Pavilion 17 Notebook PC) (17-06-2024 16:07:06)
Exécuté depuis C:\Users\touggourt\Desktop\FRST64.exe
Profils chargés: touggourt
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.4046 (X64) Langue: Français (France)
Navigateur par défaut: "C:\Users\touggourt\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8505088 2015-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [695528 2015-01-31] (Lanzhou Itanium Software Technology Co., Ltd. -> Zbshareware Lab)
HKLM-x32\...\Run: [AutoTransfer PC] => C:\Program Files (x86)\USB Disk Security\backupmaster.exe [397200 2018-04-08] (Bo Zheng -> Bo Zheng)
HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\Cleaner\ccleaner_update_helper.exe [813368 2024-06-17] (PIRIFORM SOFTWARE LIMITED -> Piriform)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1398352 2018-06-11] (CyberGhost SRL -> CyberGhost S.A.)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [Opera Stable] => C:\Users\touggourt\AppData\Local\Programs\Opera\opera.exe [1581984 2024-04-29] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [MicrosoftEdgeAutoLaunch_E349E25CDDA37349DEA42844FF639202] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4081208 2024-05-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\RunOnce: [Application Restart #4] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2867736 2024-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\...\Windows x64\Print Processors\Canon MG3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAR.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAD.DLL [28672 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Epson Inkjet: C:\Windows\System32\spool\prtprocs\x64\EP0NPP01.DLL [38912 2011-08-30] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3100 series: C:\WINDOWS\system32\CNMLMAR.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5100 series: C:\WINDOWS\system32\CNMLMAD.DLL [361472 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Epson Inbox Language Monitor01: C:\WINDOWS\system32\EP0SLM01.DLL [77824 2011-08-30] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [114872 2015-01-05] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\126.1.67.116\Installer\chrmstp.exe [2024-06-17] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{538C240D-3DEE-4032-AB4C-08A3A6EB0861}] ->
Startup: C:\Users\touggourt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2024-01-08]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\touggourt\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-04-24]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {C2D17328-8FBC-4F6A-AAC3-1379B2849F21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {55F0FE31-F6E6-425D-8BB9-CDF4DE6267D0} - System32\Tasks\BDAntiCryptoWallTask => C:\Program Files\Bitdefender\Tools\AntiCryptoWall\BDAntiCryptoWall.exe [1216264 2015-08-17] (Bitdefender SRL -> )
Task: {3223B411-0241-4ABD-9C14-967505F747B0} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {B1AC6451-C7C7-4366-94D6-E0FF544D2AAC} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {69CC7351-248D-4500-91DD-FFB1E4444EF9} - System32\Tasks\CCleaner Update => C:\Program Files\Cleaner\CCUpdate.exe [714256 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {EE2F2752-41F4-4684-B9EB-F67588257A14} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\Cleaner\CCleanerBugReport.exe [4703648 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\Cleaner\LOG" --programpath "C:\Program Files\Cleaner" --guid "bd77af6f-ca2f-4e6e-8666-7d2e924dade5" --version "6.18.10838" --silent
Task: {A77A5AA4-D8F7-47DD-9E37-304328DF072B} - System32\Tasks\GridinSoft Anti-Malware => "C:\Program Files\GridinSoft Anti-Malware\gsam.exe" -startupscan (Pas de fichier)
Task: {4C4B99D8-61C8-4D91-92EB-076706D06DA4} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe [184096 2017-05-31] (Maxthon (Asia) Limited. -> Maxthon International ltd.)
Task: {778ED82B-1E1F-457C-9105-4673A965DC90} - System32\Tasks\Maxthon5 Update => C:\Program Files (x86)\Maxthon5\bin\Maxthon.exe [170776 2020-02-21] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
Task: {5E413AE2-4805-478B-B689-6BFC90B1402B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {9C41A5EC-F56C-455E-905E-295D7F84B133} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {DB7D758D-C24D-483A-97ED-988C713284B8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance (Pas de fichier)
Task: {1B55A245-E434-43FA-9D9A-EF5EF7F0DB21} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdCleanup (Pas de fichier)
Task: {8FA7A5EA-22DC-4848-850F-E1224C071409} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55 -IdleScheduledJob (Pas de fichier)
Task: {1875D096-B78E-4CE7-97D5-5F58AB9A6175} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdVerification (Pas de fichier)
Task: {338A4FC1-4FAD-487C-9A9E-87F0399C8BDB} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2099052359-4194192794-1698811201-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (l'élément de données a 6 caractères en plus).
Task: {3293DCF2-022C-4C0B-90F1-3EFDE7C624DA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33696 2024-04-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {55F976AA-0D78-4BA2-8207-39B0F50AD49F} - System32\Tasks\Opera scheduled Autoupdate 1676712353 => C:\Users\touggourt\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5668768 2024-04-25] (Opera Norway AS -> Opera Software)
Task: {82C3068F-F8BC-49C0-BF77-10CE80A3FCC3} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {AC89AD10-E447-49AD-AA6A-CD61C8D970DB} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9EFF7721-0DD2-4126-A008-C52F68D38C30} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [4397144 ] (Synaptics Incorporated -> Synaptics Incorporated)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\Cleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\14E64627F696461405: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\35642502759664960264F4E4F5235485: [DhcpNameServer] 192.168.9.2
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\35642502759664960264F4E4F5235485: [DhcpDomain] extender.com
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\C457D69616025353030283732313: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\C457D69616025353030283732313: [DhcpDomain] mshome.net
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\35642502759664960264F4E4: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\35642502759664960264F4E4F5235485: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\6427565626F687D223438627A7: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\C457D69616: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\C457D69616: [DhcpDomain] mshome.net
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\14E64627F696461405: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\544696D61687548545E23556475707022383: [DhcpNameServer] 192.168.9.2
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\544696D61687548545E23556475707022383: [DhcpDomain] extender.com
Tcpip\..\Interfaces\{6754f4a9-fbca-4404-962f-2e31e8b84c61}: [DhcpNameServer] 192.168.15.133
Tcpip\..\Interfaces\{e3b538e6-dc83-42f2-af4c-4edc9e8d04f3}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{e3b538e6-dc83-42f2-af4c-4edc9e8d04f3}\356425F543731464: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}: [NameServer] 192.168.1.1
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\14E64627F696461405: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\544696D61687548545E23556475707022383: [DhcpNameServer] 192.168.9.2
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\544696D61687548545E23556475707022383: [DhcpDomain] extender.com
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-17]
Edge Extension: (Google Docs hors connexion) - C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-18]
Edge Extension: (Edge relevant text changes) - C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-18]
FireFox:
========
FF DefaultProfile: hnxqmrcx.default
FF ProfilePath: C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\hnxqmrcx.default [2024-05-12]
FF ProfilePath: C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\kvfxxutz.default-release [2024-06-17]
FF Extension: (Chrome Remote Desktop) - C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\kvfxxutz.default-release\Extensions\remotedesktop@google.com.xpi [2024-05-14] [UpdateUrl:hxxps://www.gstatic.com/chromoting/firefox_extension/update.json]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
Chrome:
=======
CHR HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR DefaultProfile: Default
Brave:
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-06-17]
BRA Extension: (Google Traduction) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-06-17]
BRA Extension: (Adobe Acrobat : outils de modif., de conversion et de signature de PDF) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-06-17]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-06-17]
BRA Extension: (Brave NTP background images) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-02-03]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-06-17]
BRA Extension: (Brave Ads Resources) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\bgifagoclclhhoflocdefiklgodpihog [2024-06-17]
BRA Extension: (Wallet Data Files Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-06-17]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2024-02-13]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2021-09-23]
BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2023-04-14]
BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-06-17]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-10]
BRA Extension: (Brave NTP sponsored images) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-06-17]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-11-13]
StartMenuInternet: Brave - C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2017-09-22] (Advanced Micro Devices, Inc. -> )
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
S3 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [106952 2015-07-03] (Andrea Electronics -> Andrea Electronics Corporation)
S3 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-16] (Advanced Micro Devices, Inc.) [Fichier non signé]
S2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5323592 2024-04-24] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
S3 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\126.1.67.116\elevation_service.exe [2700312 2024-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\Cleaner\CCleanerPerformanceOptimizerService.exe [1083808 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S3 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [204880 2018-06-11] (CyberGhost SRL -> CyberGhost S.A.)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\124.0.6367.18\remoting_host.exe [74016 2024-03-26] (Google LLC -> Google LLC)
S2 MxService; C:\Program Files (x86)\Maxthon5\Bin\MxService.exe [178464 2020-02-21] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
S3 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 MDCoreSvc; "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpDefenderCoreService.exe" [X]
S3 WdNisSvc; "%ProgramData%\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe" [X]
S2 WinDefend; "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
S3 GridinSoftInetSecurityDriver; C:\WINDOWS\system32\DRIVERS\gsInetSecurity.sys [107784 2024-02-28] (GridinSoft, LLC -> GridinSoft LLC)
S3 GSDriver; C:\WINDOWS\System32\drivers\GSDriver64.sys [55488 2024-02-28] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-29] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\n300ma.sys [1577792 2012-11-20] (On Networks -> Realtek Semiconductor Corporation)
R3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP)
S3 XUIF; C:\WINDOWS\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology Inc. -> X10 Wireless Technology, Inc.)
U4 nxdm; pas de ImagePath
U4 nxfs; pas de ImagePath
U4 nxpcap; pas de ImagePath
U4 nxsshd; pas de ImagePath
U4 nxtun; pas de ImagePath
U4 nxusbd; pas de ImagePath
U4 nxusbh; pas de ImagePath
U4 nxusbs; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-17 16:07 - 2024-06-17 16:11 - 000026645 _____ C:\Users\touggourt\Desktop\FRST.txt
2024-06-17 16:03 - 2024-06-17 16:03 - 000027258 _____ C:\Users\touggourt\Desktop\ZHPCleaner (R).html
2024-06-17 16:03 - 2024-06-17 16:03 - 000016631 _____ C:\Users\touggourt\Desktop\ZHPCleaner (R).txt
2024-06-17 15:58 - 2024-06-17 15:58 - 000027165 _____ C:\Users\touggourt\Desktop\ZHPCleaner (S).html
2024-06-17 15:58 - 2024-06-17 15:58 - 000016607 _____ C:\Users\touggourt\Desktop\ZHPCleaner (S).txt
2024-06-17 15:12 - 2024-06-17 15:12 - 008790880 _____ (Malwarebytes) C:\Users\touggourt\Desktop\adwcleaner(1).exe
2024-06-17 15:11 - 2024-06-17 15:11 - 008791352 _____ (Malwarebytes) C:\Users\touggourt\Desktop\AdwCleaner.exe
2024-06-17 15:10 - 2024-06-17 15:10 - 002395136 _____ (Farbar) C:\Users\touggourt\Desktop\FRST64.exe
2024-06-17 14:50 - 2024-06-17 15:20 - 000000886 _____ C:\Users\touggourt\Desktop\ZHPCleaner.lnk
2024-06-17 14:48 - 2024-06-17 14:49 - 003364512 _____ (Nicolas Coolman) C:\Users\touggourt\Desktop\ZHPCleaner.exe
2024-06-17 11:38 - 2024-06-17 11:38 - 000000290 __RSH C:\ProgramData\ntuser.pol
2024-06-17 09:39 - 2024-06-17 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashPeak Slimjet (64 bit)
2024-06-17 09:39 - 2024-06-17 09:39 - 000000000 ____D C:\Users\touggourt\AppData\Local\Slimjet
2024-06-17 09:38 - 2024-06-17 11:21 - 000000000 ____D C:\Program Files\Slimjet
2024-05-31 20:50 - 2024-06-16 20:28 - 001974784 _____ C:\Users\touggourt\Documents\CODES Divers (version 1) (Enregistré automatiquement) (Enregistré automatiquement) (Enregistré automatiquement) (Enregistré automatiquement).xls
2024-05-30 16:30 - 2024-06-02 15:38 - 000000000 ____D C:\Users\touggourt\Desktop\ZIP 16 avril 2024
2024-05-28 15:36 - 2024-05-29 10:29 - 000000000 ____D C:\Users\touggourt\Desktop\ios pa converi
2024-05-28 15:36 - 2024-05-28 19:06 - 000000000 ____D C:\Users\touggourt\Desktop\ios converti
2024-05-24 20:52 - 2024-05-24 20:52 - 000000512 _____ C:\Users\touggourt\Documents\BDBE0A60
2024-05-24 14:27 - 2024-05-26 06:49 - 000000000 ____D C:\Users\touggourt\Desktop\Nouveau dossier
2024-05-23 16:38 - 2024-05-23 16:45 - 000000000 ____D C:\Users\touggourt\Desktop\ZIP
2024-05-16 09:49 - 2024-05-09 11:09 - 000001188 _____ C:\Users\touggourt\Desktop\Copie.jpg.txt
2024-05-14 13:47 - 2024-06-17 11:22 - 000000000 ____D C:\Program Files (x86)\Google
2024-05-14 13:43 - 2024-05-14 13:43 - 021159936 _____ C:\Users\touggourt\Downloads\chromeremotedesktophost.msi
2024-05-13 21:15 - 2024-05-24 20:51 - 000000273 _____ C:\Users\touggourt\Desktop\adresse formation carnegie.txt
2024-05-12 15:16 - 2024-06-17 11:45 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-05-12 15:16 - 2024-05-12 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2024-05-12 15:16 - 2024-05-12 15:16 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Mozilla
2024-05-12 15:16 - 2024-05-12 15:16 - 000000000 ____D C:\Users\touggourt\AppData\Local\Mozilla
2024-05-12 15:15 - 2024-06-17 11:46 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-05-12 15:15 - 2024-06-17 11:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-05-12 15:15 - 2024-05-12 15:15 - 000002053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigation privée de Firefox.lnk
2024-05-12 15:15 - 2024-05-12 15:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-05-12 15:15 - 2024-05-12 15:15 - 000001000 _____ C:\Users\Public\Desktop\Firefox.lnk
2024-05-09 11:09 - 2024-05-09 11:09 - 000001188 _____ C:\Users\touggourt\Desktop\les métiers.txt
2024-05-07 09:39 - 2024-05-07 09:40 - 000001142 _____ C:\Users\touggourt\Desktop\Jo-Hu-Chlo-é famille - Raccourci.lnk
2024-05-06 10:52 - 2024-05-06 10:52 - 000000017 _____ C:\Users\touggourt\Documents\list.bat
2024-05-06 10:01 - 2024-05-09 10:33 - 000000000 ____D C:\Users\touggourt\Desktop\FAIRE LISTE de Fichiers
2024-05-05 14:53 - 2024-05-05 14:19 - 000014860 _____ C:\Users\touggourt\Documents\1.txt
2024-04-29 17:30 - 2024-05-14 07:07 - 000001475 _____ C:\Users\touggourt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2024-04-24 16:14 - 2024-06-17 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk
2024-04-24 09:41 - 2024-06-17 09:06 - 000000000 ____D C:\Users\touggourt\Desktop\RTM
2024-04-08 15:23 - 2024-04-20 09:31 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Lavasoft
2024-04-08 11:48 - 2024-04-20 09:31 - 000000000 ____D C:\ProgramData\Lavasoft
2024-04-07 20:44 - 2024-04-07 20:44 - 000021454 _____ C:\Users\touggourt\Documents\Classeur1.xlsx
2024-04-04 15:44 - 2024-05-06 19:32 - 000005927 _____ C:\Users\touggourt\Desktop\CHRISTELLE LASPINA.txt
2024-04-02 09:23 - 2024-04-02 11:52 - 000000000 ____D C:\Users\touggourt\Desktop\livres à vendre
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-17 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-06-17 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-06-17 16:11 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-06-17 16:09 - 2023-02-15 19:12 - 000000000 ___DC C:\FRST
2024-06-17 16:03 - 2017-06-25 12:32 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\ZHP
2024-06-17 15:55 - 2022-10-28 02:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-06-17 15:19 - 2019-03-29 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2024-06-17 15:19 - 2016-11-02 19:06 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Samsung
2024-06-17 15:19 - 2016-11-02 19:05 - 000000000 ____D C:\Program Files (x86)\Samsung
2024-06-17 14:44 - 2020-08-13 11:31 - 000002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-06-17 14:43 - 2022-09-08 05:11 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-06-17 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-06-17 11:37 - 2023-11-29 19:08 - 000000000 ___HD C:\Users\touggourt\Downloads\.opera
2024-06-17 11:37 - 2023-11-29 19:08 - 000000000 ___HD C:\Users\touggourt\.opera
2024-06-17 11:37 - 2022-10-28 03:10 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-06-17 11:37 - 2022-10-28 03:10 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-06-17 11:36 - 2020-04-20 09:27 - 000000000 ____D C:\Program Files\Cleaner
2024-06-17 11:30 - 2022-10-27 23:50 - 000000000 ____D C:\Users\touggourt
2024-06-17 11:29 - 2023-05-21 18:35 - 000000000 ____D C:\ProgramData\AnyDesk
2024-06-17 11:28 - 2022-10-28 03:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-06-17 11:28 - 2022-10-28 03:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2024-06-17 11:28 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-06-17 11:27 - 2021-03-07 01:24 - 000008192 ___SH C:\DumpStack.log.tmp
2024-06-17 11:23 - 2017-09-15 22:51 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2024-06-17 11:22 - 2023-05-21 18:35 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2024-06-17 11:22 - 2023-05-18 09:53 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\AnyDesk
2024-06-17 11:22 - 2022-05-20 11:00 - 000000000 ____D C:\Users\touggourt\Desktop\Pál
2024-06-17 11:22 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-06-17 11:22 - 2018-06-12 18:48 - 000000000 ____D C:\Users\touggourt\AppData\Local\Microsoft Help
2024-06-17 11:22 - 2015-01-07 22:15 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\XnView
2024-06-17 11:22 - 2014-11-20 20:48 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\vlc
2024-06-17 11:22 - 2014-10-02 20:36 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Microsoft\Word
2024-06-17 11:22 - 2013-08-22 17:36 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2024-06-17 10:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\registration
2024-06-17 10:32 - 2018-03-19 12:40 - 000000000 __HDC C:\$SysReset
2024-06-17 09:50 - 2018-03-20 20:20 - 000000000 ____D C:\Users\touggourt\AppData\Local\Packages
2024-06-17 09:41 - 2018-06-13 15:24 - 000000000 ____D C:\Users\touggourt\AppData\Local\D3DSCache
2024-06-16 20:40 - 2024-02-16 20:53 - 000000000 ____D C:\Users\touggourt\Desktop\opera
2024-06-13 09:38 - 2018-12-16 09:52 - 000000000 ____D C:\Users\touggourt\AppData\Local\CrashDumps
2024-06-05 18:47 - 2018-03-03 15:41 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-05-31 20:56 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
==================== Fichiers à la racine de certains dossiers ========
2024-01-11 15:43 - 2024-01-11 15:43 - 000000025 _____ () C:\Users\touggourt\liste.bat
2016-06-13 09:15 - 2016-06-13 09:15 - 000000096 _____ () C:\Users\touggourt\AppData\Roaming\version2.xml
2017-02-15 19:41 - 2017-02-15 19:41 - 000132803 _____ () C:\Users\touggourt\AppData\Local\ars.cache
2017-02-15 19:43 - 2017-02-15 19:43 - 000389166 _____ () C:\Users\touggourt\AppData\Local\census.cache
2020-04-13 15:53 - 2023-01-06 18:45 - 000016896 _____ () C:\Users\touggourt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-15 18:13 - 2017-02-15 18:13 - 000000036 _____ () C:\Users\touggourt\AppData\Local\housecall.guid.cache
2023-06-23 11:13 - 2023-06-23 11:13 - 000000477 _____ () C:\Users\touggourt\AppData\Local\kdeglobals
2023-06-23 11:04 - 2023-06-23 11:04 - 000008337 _____ () C:\Users\touggourt\AppData\Local\kdenlive-layoutsrc
2023-06-23 11:04 - 2023-06-23 11:15 - 000004645 _____ () C:\Users\touggourt\AppData\Local\kdenliverc
2015-10-11 11:16 - 2015-10-11 11:16 - 000000888 _____ () C:\Users\touggourt\AppData\Local\recently-used.xbel
2018-02-24 17:42 - 2022-02-03 09:54 - 000007597 _____ () C:\Users\touggourt\AppData\Local\Resmon.ResmonCfg
2023-06-23 11:05 - 2023-06-23 11:05 - 000005174 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel
2023-06-23 11:05 - 2023-06-23 11:05 - 000004490 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel.bak
2023-06-23 11:05 - 2023-06-23 11:05 - 000000000 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel.tbcache
==================== SigCheckExt =========================
2015-10-18 14:55 - 2009-02-06 02:09 - 000685568 ____C C:\MiNi-Image.dll
2015-10-18 14:55 - 2010-10-08 00:15 - 001622016 ____C C:\minidir.exe
2015-10-18 14:55 - 2010-10-08 00:14 - 001622016 ____C C:\miniima.exe
2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll
2013-08-22 13:45 - 2013-08-22 13:45 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-fibers-l2-1-1.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-psm-appnotify-l1-1-0.dll
2013-08-22 13:43 - 2013-08-22 13:43 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-devices-config-l1-1-1.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-mm-misc-l1-1-1.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-rtcore-ntuser-winevent-l1-1-0.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-security-cryptoapi-l1-1-0.dll
2016-07-14 14:13 - 2016-07-01 05:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2013-08-22 14:37 - 2013-06-18 17:03 - 000032256 _____ (CANON INC.) C:\WINDOWS\system32\CNHI10A.DLL
2013-08-22 14:37 - 2013-06-18 17:03 - 000180224 _____ (CANON INC.) C:\WINDOWS\system32\CNHL5100.DLL
2013-08-22 14:37 - 2013-06-18 17:03 - 000019968 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCAN.DLL
2015-10-30 09:19 - 2015-10-30 09:19 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2017-04-18 09:46 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll
2014-12-17 21:02 - 2014-10-29 03:59 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2014-12-17 21:07 - 2014-10-29 03:54 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-msa-ui-l1-1-0.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-misc-l1-2-0.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-rtcore-ntuser-dpi-l1-1-0.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 003447296 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\HPScanTRDrvWn8.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 000303616 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPWia2DrvRootWn8.dll
2012-07-25 22:22 - 2012-07-26 05:07 - 004722176 _____ (Intel Corporation) C:\WINDOWS\system32\igd10umd64.dll
2012-07-25 22:22 - 2012-07-26 05:07 - 006549504 _____ (Intel Corporation) C:\WINDOWS\system32\igdumd64.dll
2017-05-11 20:58 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll
2012-11-27 01:18 - 2012-11-27 01:18 - 000050688 _____ C:\WINDOWS\system32\kdbsdk64.dll
2015-08-20 22:55 - 2014-11-19 11:20 - 001207670 _____ (The GLib developer community) C:\WINDOWS\system32\libglib-2.0-0.dll
2014-10-20 13:16 - 2014-07-10 06:08 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2005-09-13 17:27 - 2005-09-13 17:27 - 000054784 _____ C:\WINDOWS\system32\lxbkcnv5.dll
2006-10-14 10:59 - 2006-10-14 10:59 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\lxbkg.dll
2023-06-17 19:15 - 2003-05-21 22:50 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3a.dll
2007-02-28 15:00 - 2007-02-28 15:00 - 000138240 _____ (Funai) C:\WINDOWS\system32\rtscan.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2012-07-18 20:30 - 2012-07-18 20:30 - 000007680 _____ (Voyage au bout de la langue) C:\WINDOWS\system32\voyaFRHU.dll
2014-12-17 21:03 - 2014-10-29 04:09 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiafbdrv.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll
2015-04-11 21:09 - 2015-03-14 03:51 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2019-04-17 18:20 - 2016-09-29 09:44 - 001298584 _____ C:\WINDOWS\ddmmain.exe
2018-12-16 12:29 - 2018-12-16 12:29 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\Setup1.exe
2018-12-16 12:29 - 2018-12-16 12:29 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\ST6UNST.EXE
2013-08-22 06:17 - 2013-08-22 06:17 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-fibers-l2-1-1.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-psm-appnotify-l1-1-0.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-devices-config-l1-1-1.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-mm-misc-l1-1-1.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-rtcore-ntuser-winevent-l1-1-0.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-security-cryptoapi-l1-1-0.dll
2015-10-21 09:22 - 2005-02-24 14:10 - 002084864 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDesign.dll
2015-10-21 09:22 - 2005-02-24 14:10 - 000417792 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDisplay.dll
2015-10-21 09:11 - 2011-09-29 14:20 - 001986560 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudFile.dll
2015-10-21 09:11 - 2011-09-29 14:20 - 001212416 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioInfos.dll
2015-10-21 09:22 - 2005-03-10 18:00 - 000454656 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioRecord.dll
2015-10-21 09:22 - 2005-02-24 14:11 - 000479232 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioVisu.dll
2015-10-21 09:11 - 2011-09-29 14:20 - 000458752 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudPlayer.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000974848 _____ C:\WINDOWS\SysWOW64\cis-2.4.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CMDLGFR.DLL
2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll
2015-10-30 09:19 - 2015-10-30 09:19 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2014-09-26 17:29 - 1999-01-20 06:01 - 000210032 _____ C:\WINDOWS\SysWOW64\DBCLIENT.DLL
2007-04-27 10:43 - 2007-04-27 10:43 - 000120200 _____ () C:\WINDOWS\SysWOW64\DLLDEV32i.dll
1997-09-12 01:00 - 1997-09-12 01:00 - 000022016 _____ C:\WINDOWS\SysWOW64\DOCOBJ.DLL
2013-08-22 06:14 - 2013-08-22 06:14 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-msa-ui-l1-1-0.dll
2013-08-22 06:14 - 2013-08-22 06:13 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-ntuser-misc-l1-2-0.dll
2013-08-22 06:14 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-rtcore-ntuser-dpi-l1-1-0.dll
1997-09-12 01:00 - 1997-09-12 01:00 - 000012288 _____ C:\WINDOWS\SysWOW64\HLINKPRX.DLL
2012-07-25 22:22 - 2012-06-02 16:32 - 004338688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10umd32.dll
2012-07-25 22:22 - 2012-06-02 16:32 - 004896768 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumd32.dll
2017-03-20 13:37 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetfr.DLL
2016-07-16 13:44 - 2016-07-17 00:45 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000081920 _____ C:\WINDOWS\SysWOW64\issacapi_bs-2.3.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000065536 _____ C:\WINDOWS\SysWOW64\issacapi_pe-2.3.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ C:\WINDOWS\SysWOW64\issacapi_se-2.3.dll
2014-09-12 10:03 - 2010-12-01 09:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2012-11-27 01:18 - 2012-11-27 01:18 - 000038912 _____ C:\WINDOWS\SysWOW64\kdbsdk32.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000045056 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MACXMLProto.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000118784 _____ ((주)마크애니) C:\WINDOWS\SysWOW64\MaDRM.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000049152 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MaJGUILib.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000045320 _____ (MARKANY) C:\WINDOWS\SysWOW64\MAMACExtract.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000024576 _____ ((주)마크애니) C:\WINDOWS\SysWOW64\MASetupCleaner.exe
2016-05-17 23:49 - 2016-05-17 23:49 - 000045056 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MaXMLProto.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ (Marktek) C:\WINDOWS\SysWOW64\MK_Lyric.dll
2015-10-30 09:19 - 2016-09-14 12:26 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-10-30 09:19 - 2016-09-14 12:26 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2fr.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000245760 _____ (Teruten Inc.) C:\WINDOWS\SysWOW64\MSCLib.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCFR.DLL
2016-05-17 23:49 - 2016-05-17 23:49 - 000155648 _____ (Teruten Inc.) C:\WINDOWS\SysWOW64\MSFLib.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000352256 _____ (Sample Corporation) C:\WINDOWS\SysWOW64\MSLUR71.dll
2014-09-12 10:23 - 2014-09-12 10:23 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2014-09-12 10:23 - 2014-09-12 10:23 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000040960 _____ (Telechips Inc.,) C:\WINDOWS\SysWOW64\MTTELECHIP.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ (Marktek Inc.) C:\WINDOWS\SysWOW64\MTXSYNCICON.dll
2018-07-09 08:46 - 2016-05-17 23:49 - 004659712 _____ (Dmitry Streblechenko) C:\WINDOWS\SysWOW64\Redemption.dll
2017-01-11 16:47 - 2001-07-10 19:01 - 000045056 _____ (ULTIMA ELECTRONICS CORP.) C:\WINDOWS\SysWOW64\Remove48U.exe
2014-10-23 19:40 - 2012-02-14 19:37 - 000594432 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\SysWOW64\Rtlihvs.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTFR.DLL
2015-10-21 09:11 - 2011-09-29 14:19 - 000119568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6FR.DLL
2015-10-21 09:11 - 2011-09-29 14:19 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6STKIT.DLL
2012-07-18 20:30 - 2012-07-18 20:30 - 000007680 _____ (Voyage au bout de la langue) C:\WINDOWS\SysWOW64\voyaFRHU.dll
2006-10-26 13:45 - 2006-10-26 13:45 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WISPTIS.EXE
2015-10-21 09:11 - 2011-09-29 14:20 - 000348160 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\WMAFile.dll
2024-06-17 15:10 - 2024-06-17 15:10 - 002395136 _____ (Farbar) C:\Users\touggourt\Desktop\FRST64.exe
2023-05-21 18:31 - 2023-05-18 09:54 - 000394240 _____ (Google Inc.) C:\Users\touggourt\Desktop\gcapi.dll
2024-06-17 14:48 - 2024-06-17 14:49 - 003364512 _____ (Nicolas Coolman) C:\Users\touggourt\Desktop\ZHPCleaner.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de démarrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{25c4cfe3-5472-11ed-824c-806e6f6e6963}
{4d8bebb6-3aa3-11e4-8ad4-947cdaeb8744}
{4d8bebb7-3aa3-11e4-8ad4-947cdaeb8744}
timeout 5
Gestionnaire de démarrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {566c5309-7ed3-11eb-81f4-c49c7e26f49b}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {25c4cfe3-5472-11ed-824c-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb6-3aa3-11e4-8ad4-947cdaeb8744}
description USB Drive (UEFI)
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb7-3aa3-11e4-8ad4-947cdaeb8744}
description Internal CD/DVD ROM Drive (UEFI)
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb8-3aa3-11e4-8ad4-947cdaeb8744}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb9-3aa3-11e4-8ad4-947cdaeb8744}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebba-3aa3-11e4-8ad4-947cdaeb8744}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebbb-3aa3-11e4-8ad4-947cdaeb8744}
description Notebook Hard Drive
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebbc-3aa3-11e4-8ad4-947cdaeb8744}
description Network Adapter (IPv4 Legacy)
Application logicielle (101fffff)
--------------------------------
identificateur {863468e2-3a4f-11e4-be69-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {aa089c35-163d-11ee-828d-a0481c1b6eb0}
description USB Hard Drive - Samsung M3 Portable
Chargeur de démarrage Windows
-----------------------------
identificateur {4d8bebc7-3aa3-11e4-8ad4-947cdaeb8744}
device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{4d8bebc8-3aa3-11e4-8ad4-947cdaeb8744}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride Recovery
osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{4d8bebc8-3aa3-11e4-8ad4-947cdaeb8744}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de démarrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {d01a3762-5653-11ed-824e-d3505b6e4513}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {566c5309-7ed3-11eb-81f4-c49c7e26f49b}
nx OptIn
bootmenupolicy Standard
Chargeur de démarrage Windows
-----------------------------
identificateur {d01a3762-5653-11ed-824e-d3505b6e4513}
device ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{d01a3763-5653-11ed-824e-d3505b6e4513}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{d01a3763-5653-11ed-824e-d3505b6e4513}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre à partir de la mise en veille prolongée
-------------------------------------------------
identificateur {566c5309-7ed3-11eb-81f4-c49c7e26f49b}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {d01a3762-5653-11ed-824e-d3505b6e4513}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de mémoire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics mémoire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
Paramètres EMS
--------------
identificateur {emssettings}
bootems No
Paramètres du débogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de mémoire RAM
----------------------
identificateur {badmemory}
Paramètres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Paramètres du chargeur de démarrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Paramètres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Paramètres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de périphérique
-----------------------
identificateur {d01a3763-5653-11ed-824e-d3505b6e4513}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume5
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par touggourt (administrateur) sur PÉPÉJANOT (Hewlett-Packard HP Pavilion 17 Notebook PC) (17-06-2024 16:07:06)
Exécuté depuis C:\Users\touggourt\Desktop\FRST64.exe
Profils chargés: touggourt
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.4046 (X64) Langue: Français (France)
Navigateur par défaut: "C:\Users\touggourt\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8505088 2015-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [695528 2015-01-31] (Lanzhou Itanium Software Technology Co., Ltd. -> Zbshareware Lab)
HKLM-x32\...\Run: [AutoTransfer PC] => C:\Program Files (x86)\USB Disk Security\backupmaster.exe [397200 2018-04-08] (Bo Zheng -> Bo Zheng)
HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\Cleaner\ccleaner_update_helper.exe [813368 2024-06-17] (PIRIFORM SOFTWARE LIMITED -> Piriform)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1398352 2018-06-11] (CyberGhost SRL -> CyberGhost S.A.)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [Opera Stable] => C:\Users\touggourt\AppData\Local\Programs\Opera\opera.exe [1581984 2024-04-29] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [MicrosoftEdgeAutoLaunch_E349E25CDDA37349DEA42844FF639202] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4081208 2024-05-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\RunOnce: [Application Restart #4] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2867736 2024-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\...\Windows x64\Print Processors\Canon MG3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAR.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAD.DLL [28672 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Epson Inkjet: C:\Windows\System32\spool\prtprocs\x64\EP0NPP01.DLL [38912 2011-08-30] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3100 series: C:\WINDOWS\system32\CNMLMAR.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5100 series: C:\WINDOWS\system32\CNMLMAD.DLL [361472 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Epson Inbox Language Monitor01: C:\WINDOWS\system32\EP0SLM01.DLL [77824 2011-08-30] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [114872 2015-01-05] (pdfforge GmbH -> pdfforge GmbH)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\126.1.67.116\Installer\chrmstp.exe [2024-06-17] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{538C240D-3DEE-4032-AB4C-08A3A6EB0861}] ->
Startup: C:\Users\touggourt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2024-01-08]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\touggourt\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [Fichier non signé]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-04-24]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {C2D17328-8FBC-4F6A-AAC3-1379B2849F21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {55F0FE31-F6E6-425D-8BB9-CDF4DE6267D0} - System32\Tasks\BDAntiCryptoWallTask => C:\Program Files\Bitdefender\Tools\AntiCryptoWall\BDAntiCryptoWall.exe [1216264 2015-08-17] (Bitdefender SRL -> )
Task: {3223B411-0241-4ABD-9C14-967505F747B0} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {B1AC6451-C7C7-4366-94D6-E0FF544D2AAC} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {69CC7351-248D-4500-91DD-FFB1E4444EF9} - System32\Tasks\CCleaner Update => C:\Program Files\Cleaner\CCUpdate.exe [714256 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {EE2F2752-41F4-4684-B9EB-F67588257A14} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\Cleaner\CCleanerBugReport.exe [4703648 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\Cleaner\LOG" --programpath "C:\Program Files\Cleaner" --guid "bd77af6f-ca2f-4e6e-8666-7d2e924dade5" --version "6.18.10838" --silent
Task: {A77A5AA4-D8F7-47DD-9E37-304328DF072B} - System32\Tasks\GridinSoft Anti-Malware => "C:\Program Files\GridinSoft Anti-Malware\gsam.exe" -startupscan (Pas de fichier)
Task: {4C4B99D8-61C8-4D91-92EB-076706D06DA4} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe [184096 2017-05-31] (Maxthon (Asia) Limited. -> Maxthon International ltd.)
Task: {778ED82B-1E1F-457C-9105-4673A965DC90} - System32\Tasks\Maxthon5 Update => C:\Program Files (x86)\Maxthon5\bin\Maxthon.exe [170776 2020-02-21] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
Task: {5E413AE2-4805-478B-B689-6BFC90B1402B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {9C41A5EC-F56C-455E-905E-295D7F84B133} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA}
Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001}
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE}
Task: {DB7D758D-C24D-483A-97ED-988C713284B8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance (Pas de fichier)
Task: {1B55A245-E434-43FA-9D9A-EF5EF7F0DB21} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdCleanup (Pas de fichier)
Task: {8FA7A5EA-22DC-4848-850F-E1224C071409} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55 -IdleScheduledJob (Pas de fichier)
Task: {1875D096-B78E-4CE7-97D5-5F58AB9A6175} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdVerification (Pas de fichier)
Task: {338A4FC1-4FAD-487C-9A9E-87F0399C8BDB} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2099052359-4194192794-1698811201-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (l'élément de données a 6 caractères en plus).
Task: {3293DCF2-022C-4C0B-90F1-3EFDE7C624DA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33696 2024-04-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {55F976AA-0D78-4BA2-8207-39B0F50AD49F} - System32\Tasks\Opera scheduled Autoupdate 1676712353 => C:\Users\touggourt\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5668768 2024-04-25] (Opera Norway AS -> Opera Software)
Task: {82C3068F-F8BC-49C0-BF77-10CE80A3FCC3} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {AC89AD10-E447-49AD-AA6A-CD61C8D970DB} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {9EFF7721-0DD2-4126-A008-C52F68D38C30} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [4397144 ] (Synaptics Incorporated -> Synaptics Incorporated)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\Cleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\14E64627F696461405: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\35642502759664960264F4E4F5235485: [DhcpNameServer] 192.168.9.2
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\35642502759664960264F4E4F5235485: [DhcpDomain] extender.com
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\C457D69616025353030283732313: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\C457D69616025353030283732313: [DhcpDomain] mshome.net
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\35642502759664960264F4E4: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\35642502759664960264F4E4F5235485: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\6427565626F687D223438627A7: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\C457D69616: [DhcpNameServer] 192.168.137.1
Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\C457D69616: [DhcpDomain] mshome.net
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\14E64627F696461405: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\544696D61687548545E23556475707022383: [DhcpNameServer] 192.168.9.2
Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\544696D61687548545E23556475707022383: [DhcpDomain] extender.com
Tcpip\..\Interfaces\{6754f4a9-fbca-4404-962f-2e31e8b84c61}: [DhcpNameServer] 192.168.15.133
Tcpip\..\Interfaces\{e3b538e6-dc83-42f2-af4c-4edc9e8d04f3}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{e3b538e6-dc83-42f2-af4c-4edc9e8d04f3}\356425F543731464: [DhcpNameServer] 109.0.66.20 109.0.66.10
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}: [NameServer] 192.168.1.1
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\14E64627F696461405: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\544696D61687548545E23556475707022383: [DhcpNameServer] 192.168.9.2
Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\544696D61687548545E23556475707022383: [DhcpDomain] extender.com
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-17]
Edge Extension: (Google Docs hors connexion) - C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-18]
Edge Extension: (Edge relevant text changes) - C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-18]
FireFox:
========
FF DefaultProfile: hnxqmrcx.default
FF ProfilePath: C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\hnxqmrcx.default [2024-05-12]
FF ProfilePath: C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\kvfxxutz.default-release [2024-06-17]
FF Extension: (Chrome Remote Desktop) - C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\kvfxxutz.default-release\Extensions\remotedesktop@google.com.xpi [2024-05-14] [UpdateUrl:hxxps://www.gstatic.com/chromoting/firefox_extension/update.json]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-05-04] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
Chrome:
=======
CHR HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
Opera:
=======
OPR DefaultProfile: Default
Brave:
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-06-17]
BRA Extension: (Google Traduction) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-06-17]
BRA Extension: (Adobe Acrobat : outils de modif., de conversion et de signature de PDF) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-06-17]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-06-17]
BRA Extension: (Brave NTP background images) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-02-03]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-06-17]
BRA Extension: (Brave Ads Resources) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\bgifagoclclhhoflocdefiklgodpihog [2024-06-17]
BRA Extension: (Wallet Data Files Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-06-17]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2024-02-13]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2021-09-23]
BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2023-04-14]
BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-06-17]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-10]
BRA Extension: (Brave NTP sponsored images) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2024-06-17]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-06-17]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-11-13]
StartMenuInternet: Brave - C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2017-09-22] (Advanced Micro Devices, Inc. -> )
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
S3 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [106952 2015-07-03] (Andrea Electronics -> Andrea Electronics Corporation)
S3 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-16] (Advanced Micro Devices, Inc.) [Fichier non signé]
S2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5323592 2024-04-24] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
S3 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\126.1.67.116\elevation_service.exe [2700312 2024-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\Cleaner\CCleanerPerformanceOptimizerService.exe [1083808 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S3 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [204880 2018-06-11] (CyberGhost SRL -> CyberGhost S.A.)
S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\124.0.6367.18\remoting_host.exe [74016 2024-03-26] (Google LLC -> Google LLC)
S2 MxService; C:\Program Files (x86)\Maxthon5\Bin\MxService.exe [178464 2020-02-21] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.)
S3 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S2 MDCoreSvc; "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpDefenderCoreService.exe" [X]
S3 WdNisSvc; "%ProgramData%\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe" [X]
S2 WinDefend; "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation)
S3 GridinSoftInetSecurityDriver; C:\WINDOWS\system32\DRIVERS\gsInetSecurity.sys [107784 2024-02-28] (GridinSoft, LLC -> GridinSoft LLC)
S3 GSDriver; C:\WINDOWS\System32\drivers\GSDriver64.sys [55488 2024-02-28] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-29] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\n300ma.sys [1577792 2012-11-20] (On Networks -> Realtek Semiconductor Corporation)
R3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP)
S3 XUIF; C:\WINDOWS\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology Inc. -> X10 Wireless Technology, Inc.)
U4 nxdm; pas de ImagePath
U4 nxfs; pas de ImagePath
U4 nxpcap; pas de ImagePath
U4 nxsshd; pas de ImagePath
U4 nxtun; pas de ImagePath
U4 nxusbd; pas de ImagePath
U4 nxusbh; pas de ImagePath
U4 nxusbs; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-17 16:07 - 2024-06-17 16:11 - 000026645 _____ C:\Users\touggourt\Desktop\FRST.txt
2024-06-17 16:03 - 2024-06-17 16:03 - 000027258 _____ C:\Users\touggourt\Desktop\ZHPCleaner (R).html
2024-06-17 16:03 - 2024-06-17 16:03 - 000016631 _____ C:\Users\touggourt\Desktop\ZHPCleaner (R).txt
2024-06-17 15:58 - 2024-06-17 15:58 - 000027165 _____ C:\Users\touggourt\Desktop\ZHPCleaner (S).html
2024-06-17 15:58 - 2024-06-17 15:58 - 000016607 _____ C:\Users\touggourt\Desktop\ZHPCleaner (S).txt
2024-06-17 15:12 - 2024-06-17 15:12 - 008790880 _____ (Malwarebytes) C:\Users\touggourt\Desktop\adwcleaner(1).exe
2024-06-17 15:11 - 2024-06-17 15:11 - 008791352 _____ (Malwarebytes) C:\Users\touggourt\Desktop\AdwCleaner.exe
2024-06-17 15:10 - 2024-06-17 15:10 - 002395136 _____ (Farbar) C:\Users\touggourt\Desktop\FRST64.exe
2024-06-17 14:50 - 2024-06-17 15:20 - 000000886 _____ C:\Users\touggourt\Desktop\ZHPCleaner.lnk
2024-06-17 14:48 - 2024-06-17 14:49 - 003364512 _____ (Nicolas Coolman) C:\Users\touggourt\Desktop\ZHPCleaner.exe
2024-06-17 11:38 - 2024-06-17 11:38 - 000000290 __RSH C:\ProgramData\ntuser.pol
2024-06-17 09:39 - 2024-06-17 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashPeak Slimjet (64 bit)
2024-06-17 09:39 - 2024-06-17 09:39 - 000000000 ____D C:\Users\touggourt\AppData\Local\Slimjet
2024-06-17 09:38 - 2024-06-17 11:21 - 000000000 ____D C:\Program Files\Slimjet
2024-05-31 20:50 - 2024-06-16 20:28 - 001974784 _____ C:\Users\touggourt\Documents\CODES Divers (version 1) (Enregistré automatiquement) (Enregistré automatiquement) (Enregistré automatiquement) (Enregistré automatiquement).xls
2024-05-30 16:30 - 2024-06-02 15:38 - 000000000 ____D C:\Users\touggourt\Desktop\ZIP 16 avril 2024
2024-05-28 15:36 - 2024-05-29 10:29 - 000000000 ____D C:\Users\touggourt\Desktop\ios pa converi
2024-05-28 15:36 - 2024-05-28 19:06 - 000000000 ____D C:\Users\touggourt\Desktop\ios converti
2024-05-24 20:52 - 2024-05-24 20:52 - 000000512 _____ C:\Users\touggourt\Documents\BDBE0A60
2024-05-24 14:27 - 2024-05-26 06:49 - 000000000 ____D C:\Users\touggourt\Desktop\Nouveau dossier
2024-05-23 16:38 - 2024-05-23 16:45 - 000000000 ____D C:\Users\touggourt\Desktop\ZIP
2024-05-16 09:49 - 2024-05-09 11:09 - 000001188 _____ C:\Users\touggourt\Desktop\Copie.jpg.txt
2024-05-14 13:47 - 2024-06-17 11:22 - 000000000 ____D C:\Program Files (x86)\Google
2024-05-14 13:43 - 2024-05-14 13:43 - 021159936 _____ C:\Users\touggourt\Downloads\chromeremotedesktophost.msi
2024-05-13 21:15 - 2024-05-24 20:51 - 000000273 _____ C:\Users\touggourt\Desktop\adresse formation carnegie.txt
2024-05-12 15:16 - 2024-06-17 11:45 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-05-12 15:16 - 2024-05-12 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2024-05-12 15:16 - 2024-05-12 15:16 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Mozilla
2024-05-12 15:16 - 2024-05-12 15:16 - 000000000 ____D C:\Users\touggourt\AppData\Local\Mozilla
2024-05-12 15:15 - 2024-06-17 11:46 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-05-12 15:15 - 2024-06-17 11:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-05-12 15:15 - 2024-05-12 15:15 - 000002053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigation privée de Firefox.lnk
2024-05-12 15:15 - 2024-05-12 15:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-05-12 15:15 - 2024-05-12 15:15 - 000001000 _____ C:\Users\Public\Desktop\Firefox.lnk
2024-05-09 11:09 - 2024-05-09 11:09 - 000001188 _____ C:\Users\touggourt\Desktop\les métiers.txt
2024-05-07 09:39 - 2024-05-07 09:40 - 000001142 _____ C:\Users\touggourt\Desktop\Jo-Hu-Chlo-é famille - Raccourci.lnk
2024-05-06 10:52 - 2024-05-06 10:52 - 000000017 _____ C:\Users\touggourt\Documents\list.bat
2024-05-06 10:01 - 2024-05-09 10:33 - 000000000 ____D C:\Users\touggourt\Desktop\FAIRE LISTE de Fichiers
2024-05-05 14:53 - 2024-05-05 14:19 - 000014860 _____ C:\Users\touggourt\Documents\1.txt
2024-04-29 17:30 - 2024-05-14 07:07 - 000001475 _____ C:\Users\touggourt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2024-04-24 16:14 - 2024-06-17 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk
2024-04-24 09:41 - 2024-06-17 09:06 - 000000000 ____D C:\Users\touggourt\Desktop\RTM
2024-04-08 15:23 - 2024-04-20 09:31 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Lavasoft
2024-04-08 11:48 - 2024-04-20 09:31 - 000000000 ____D C:\ProgramData\Lavasoft
2024-04-07 20:44 - 2024-04-07 20:44 - 000021454 _____ C:\Users\touggourt\Documents\Classeur1.xlsx
2024-04-04 15:44 - 2024-05-06 19:32 - 000005927 _____ C:\Users\touggourt\Desktop\CHRISTELLE LASPINA.txt
2024-04-02 09:23 - 2024-04-02 11:52 - 000000000 ____D C:\Users\touggourt\Desktop\livres à vendre
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-06-17 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-06-17 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-06-17 16:11 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-06-17 16:09 - 2023-02-15 19:12 - 000000000 ___DC C:\FRST
2024-06-17 16:03 - 2017-06-25 12:32 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\ZHP
2024-06-17 15:55 - 2022-10-28 02:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-06-17 15:19 - 2019-03-29 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2024-06-17 15:19 - 2016-11-02 19:06 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Samsung
2024-06-17 15:19 - 2016-11-02 19:05 - 000000000 ____D C:\Program Files (x86)\Samsung
2024-06-17 14:44 - 2020-08-13 11:31 - 000002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-06-17 14:43 - 2022-09-08 05:11 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-06-17 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2024-06-17 11:37 - 2023-11-29 19:08 - 000000000 ___HD C:\Users\touggourt\Downloads\.opera
2024-06-17 11:37 - 2023-11-29 19:08 - 000000000 ___HD C:\Users\touggourt\.opera
2024-06-17 11:37 - 2022-10-28 03:10 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-06-17 11:37 - 2022-10-28 03:10 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-06-17 11:36 - 2020-04-20 09:27 - 000000000 ____D C:\Program Files\Cleaner
2024-06-17 11:30 - 2022-10-27 23:50 - 000000000 ____D C:\Users\touggourt
2024-06-17 11:29 - 2023-05-21 18:35 - 000000000 ____D C:\ProgramData\AnyDesk
2024-06-17 11:28 - 2022-10-28 03:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-06-17 11:28 - 2022-10-28 03:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2024-06-17 11:28 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-06-17 11:27 - 2021-03-07 01:24 - 000008192 ___SH C:\DumpStack.log.tmp
2024-06-17 11:23 - 2017-09-15 22:51 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2024-06-17 11:22 - 2023-05-21 18:35 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2024-06-17 11:22 - 2023-05-18 09:53 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\AnyDesk
2024-06-17 11:22 - 2022-05-20 11:00 - 000000000 ____D C:\Users\touggourt\Desktop\Pál
2024-06-17 11:22 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-06-17 11:22 - 2018-06-12 18:48 - 000000000 ____D C:\Users\touggourt\AppData\Local\Microsoft Help
2024-06-17 11:22 - 2015-01-07 22:15 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\XnView
2024-06-17 11:22 - 2014-11-20 20:48 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\vlc
2024-06-17 11:22 - 2014-10-02 20:36 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Microsoft\Word
2024-06-17 11:22 - 2013-08-22 17:36 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2024-06-17 10:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\registration
2024-06-17 10:32 - 2018-03-19 12:40 - 000000000 __HDC C:\$SysReset
2024-06-17 09:50 - 2018-03-20 20:20 - 000000000 ____D C:\Users\touggourt\AppData\Local\Packages
2024-06-17 09:41 - 2018-06-13 15:24 - 000000000 ____D C:\Users\touggourt\AppData\Local\D3DSCache
2024-06-16 20:40 - 2024-02-16 20:53 - 000000000 ____D C:\Users\touggourt\Desktop\opera
2024-06-13 09:38 - 2018-12-16 09:52 - 000000000 ____D C:\Users\touggourt\AppData\Local\CrashDumps
2024-06-05 18:47 - 2018-03-03 15:41 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-05-31 20:56 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
==================== Fichiers à la racine de certains dossiers ========
2024-01-11 15:43 - 2024-01-11 15:43 - 000000025 _____ () C:\Users\touggourt\liste.bat
2016-06-13 09:15 - 2016-06-13 09:15 - 000000096 _____ () C:\Users\touggourt\AppData\Roaming\version2.xml
2017-02-15 19:41 - 2017-02-15 19:41 - 000132803 _____ () C:\Users\touggourt\AppData\Local\ars.cache
2017-02-15 19:43 - 2017-02-15 19:43 - 000389166 _____ () C:\Users\touggourt\AppData\Local\census.cache
2020-04-13 15:53 - 2023-01-06 18:45 - 000016896 _____ () C:\Users\touggourt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-15 18:13 - 2017-02-15 18:13 - 000000036 _____ () C:\Users\touggourt\AppData\Local\housecall.guid.cache
2023-06-23 11:13 - 2023-06-23 11:13 - 000000477 _____ () C:\Users\touggourt\AppData\Local\kdeglobals
2023-06-23 11:04 - 2023-06-23 11:04 - 000008337 _____ () C:\Users\touggourt\AppData\Local\kdenlive-layoutsrc
2023-06-23 11:04 - 2023-06-23 11:15 - 000004645 _____ () C:\Users\touggourt\AppData\Local\kdenliverc
2015-10-11 11:16 - 2015-10-11 11:16 - 000000888 _____ () C:\Users\touggourt\AppData\Local\recently-used.xbel
2018-02-24 17:42 - 2022-02-03 09:54 - 000007597 _____ () C:\Users\touggourt\AppData\Local\Resmon.ResmonCfg
2023-06-23 11:05 - 2023-06-23 11:05 - 000005174 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel
2023-06-23 11:05 - 2023-06-23 11:05 - 000004490 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel.bak
2023-06-23 11:05 - 2023-06-23 11:05 - 000000000 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel.tbcache
==================== SigCheckExt =========================
2015-10-18 14:55 - 2009-02-06 02:09 - 000685568 ____C C:\MiNi-Image.dll
2015-10-18 14:55 - 2010-10-08 00:15 - 001622016 ____C C:\minidir.exe
2015-10-18 14:55 - 2010-10-08 00:14 - 001622016 ____C C:\miniima.exe
2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll
2013-08-22 13:45 - 2013-08-22 13:45 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-fibers-l2-1-1.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-psm-appnotify-l1-1-0.dll
2013-08-22 13:43 - 2013-08-22 13:43 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-devices-config-l1-1-1.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-mm-misc-l1-1-1.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-rtcore-ntuser-winevent-l1-1-0.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-security-cryptoapi-l1-1-0.dll
2016-07-14 14:13 - 2016-07-01 05:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe
2013-08-22 14:37 - 2013-06-18 17:03 - 000032256 _____ (CANON INC.) C:\WINDOWS\system32\CNHI10A.DLL
2013-08-22 14:37 - 2013-06-18 17:03 - 000180224 _____ (CANON INC.) C:\WINDOWS\system32\CNHL5100.DLL
2013-08-22 14:37 - 2013-06-18 17:03 - 000019968 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCAN.DLL
2015-10-30 09:19 - 2015-10-30 09:19 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll
2017-04-18 09:46 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll
2014-12-17 21:02 - 2014-10-29 03:59 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe
2014-12-17 21:07 - 2014-10-29 03:54 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-msa-ui-l1-1-0.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-misc-l1-2-0.dll
2013-08-22 13:42 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-rtcore-ntuser-dpi-l1-1-0.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 003447296 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\HPScanTRDrvWn8.dll
2016-07-16 13:41 - 2016-07-16 13:41 - 000303616 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPWia2DrvRootWn8.dll
2012-07-25 22:22 - 2012-07-26 05:07 - 004722176 _____ (Intel Corporation) C:\WINDOWS\system32\igd10umd64.dll
2012-07-25 22:22 - 2012-07-26 05:07 - 006549504 _____ (Intel Corporation) C:\WINDOWS\system32\igdumd64.dll
2017-05-11 20:58 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll
2012-11-27 01:18 - 2012-11-27 01:18 - 000050688 _____ C:\WINDOWS\system32\kdbsdk64.dll
2015-08-20 22:55 - 2014-11-19 11:20 - 001207670 _____ (The GLib developer community) C:\WINDOWS\system32\libglib-2.0-0.dll
2014-10-20 13:16 - 2014-07-10 06:08 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll
2005-09-13 17:27 - 2005-09-13 17:27 - 000054784 _____ C:\WINDOWS\system32\lxbkcnv5.dll
2006-10-14 10:59 - 2006-10-14 10:59 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\lxbkg.dll
2023-06-17 19:15 - 2003-05-21 22:50 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3a.dll
2007-02-28 15:00 - 2007-02-28 15:00 - 000138240 _____ (Funai) C:\WINDOWS\system32\rtscan.dll
2015-10-30 09:18 - 2015-10-30 09:18 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll
2012-07-18 20:30 - 2012-07-18 20:30 - 000007680 _____ (Voyage au bout de la langue) C:\WINDOWS\system32\voyaFRHU.dll
2014-12-17 21:03 - 2014-10-29 04:09 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiafbdrv.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll
2015-04-11 21:09 - 2015-03-14 03:51 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll
2019-04-17 18:20 - 2016-09-29 09:44 - 001298584 _____ C:\WINDOWS\ddmmain.exe
2018-12-16 12:29 - 2018-12-16 12:29 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\Setup1.exe
2018-12-16 12:29 - 2018-12-16 12:29 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\ST6UNST.EXE
2013-08-22 06:17 - 2013-08-22 06:17 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-fibers-l2-1-1.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-psm-appnotify-l1-1-0.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-devices-config-l1-1-1.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-mm-misc-l1-1-1.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-rtcore-ntuser-winevent-l1-1-0.dll
2013-08-22 06:14 - 2013-08-22 06:14 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-security-cryptoapi-l1-1-0.dll
2015-10-21 09:22 - 2005-02-24 14:10 - 002084864 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDesign.dll
2015-10-21 09:22 - 2005-02-24 14:10 - 000417792 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDisplay.dll
2015-10-21 09:11 - 2011-09-29 14:20 - 001986560 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudFile.dll
2015-10-21 09:11 - 2011-09-29 14:20 - 001212416 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioInfos.dll
2015-10-21 09:22 - 2005-03-10 18:00 - 000454656 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioRecord.dll
2015-10-21 09:22 - 2005-02-24 14:11 - 000479232 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioVisu.dll
2015-10-21 09:11 - 2011-09-29 14:20 - 000458752 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudPlayer.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000974848 _____ C:\WINDOWS\SysWOW64\cis-2.4.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CMDLGFR.DLL
2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll
2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll
2015-10-30 09:19 - 2015-10-30 09:19 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll
2014-09-26 17:29 - 1999-01-20 06:01 - 000210032 _____ C:\WINDOWS\SysWOW64\DBCLIENT.DLL
2007-04-27 10:43 - 2007-04-27 10:43 - 000120200 _____ () C:\WINDOWS\SysWOW64\DLLDEV32i.dll
1997-09-12 01:00 - 1997-09-12 01:00 - 000022016 _____ C:\WINDOWS\SysWOW64\DOCOBJ.DLL
2013-08-22 06:14 - 2013-08-22 06:14 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-msa-ui-l1-1-0.dll
2013-08-22 06:14 - 2013-08-22 06:13 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-ntuser-misc-l1-2-0.dll
2013-08-22 06:14 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-rtcore-ntuser-dpi-l1-1-0.dll
1997-09-12 01:00 - 1997-09-12 01:00 - 000012288 _____ C:\WINDOWS\SysWOW64\HLINKPRX.DLL
2012-07-25 22:22 - 2012-06-02 16:32 - 004338688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10umd32.dll
2012-07-25 22:22 - 2012-06-02 16:32 - 004896768 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumd32.dll
2017-03-20 13:37 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetfr.DLL
2016-07-16 13:44 - 2016-07-17 00:45 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000081920 _____ C:\WINDOWS\SysWOW64\issacapi_bs-2.3.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000065536 _____ C:\WINDOWS\SysWOW64\issacapi_pe-2.3.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ C:\WINDOWS\SysWOW64\issacapi_se-2.3.dll
2014-09-12 10:03 - 2010-12-01 09:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe
2012-11-27 01:18 - 2012-11-27 01:18 - 000038912 _____ C:\WINDOWS\SysWOW64\kdbsdk32.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000045056 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MACXMLProto.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000118784 _____ ((주)마크애니) C:\WINDOWS\SysWOW64\MaDRM.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000049152 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MaJGUILib.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000045320 _____ (MARKANY) C:\WINDOWS\SysWOW64\MAMACExtract.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000024576 _____ ((주)마크애니) C:\WINDOWS\SysWOW64\MASetupCleaner.exe
2016-05-17 23:49 - 2016-05-17 23:49 - 000045056 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MaXMLProto.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ (Marktek) C:\WINDOWS\SysWOW64\MK_Lyric.dll
2015-10-30 09:19 - 2016-09-14 12:26 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-10-30 09:19 - 2016-09-14 12:26 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2fr.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000245760 _____ (Teruten Inc.) C:\WINDOWS\SysWOW64\MSCLib.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCFR.DLL
2016-05-17 23:49 - 2016-05-17 23:49 - 000155648 _____ (Teruten Inc.) C:\WINDOWS\SysWOW64\MSFLib.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000352256 _____ (Sample Corporation) C:\WINDOWS\SysWOW64\MSLUR71.dll
2014-09-12 10:23 - 2014-09-12 10:23 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2014-09-12 10:23 - 2014-09-12 10:23 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000040960 _____ (Telechips Inc.,) C:\WINDOWS\SysWOW64\MTTELECHIP.dll
2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ (Marktek Inc.) C:\WINDOWS\SysWOW64\MTXSYNCICON.dll
2018-07-09 08:46 - 2016-05-17 23:49 - 004659712 _____ (Dmitry Streblechenko) C:\WINDOWS\SysWOW64\Redemption.dll
2017-01-11 16:47 - 2001-07-10 19:01 - 000045056 _____ (ULTIMA ELECTRONICS CORP.) C:\WINDOWS\SysWOW64\Remove48U.exe
2014-10-23 19:40 - 2012-02-14 19:37 - 000594432 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\SysWOW64\Rtlihvs.dll
2015-10-21 09:11 - 2011-09-29 14:19 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTFR.DLL
2015-10-21 09:11 - 2011-09-29 14:19 - 000119568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6FR.DLL
2015-10-21 09:11 - 2011-09-29 14:19 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6STKIT.DLL
2012-07-18 20:30 - 2012-07-18 20:30 - 000007680 _____ (Voyage au bout de la langue) C:\WINDOWS\SysWOW64\voyaFRHU.dll
2006-10-26 13:45 - 2006-10-26 13:45 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WISPTIS.EXE
2015-10-21 09:11 - 2011-09-29 14:20 - 000348160 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\WMAFile.dll
2024-06-17 15:10 - 2024-06-17 15:10 - 002395136 _____ (Farbar) C:\Users\touggourt\Desktop\FRST64.exe
2023-05-21 18:31 - 2023-05-18 09:54 - 000394240 _____ (Google Inc.) C:\Users\touggourt\Desktop\gcapi.dll
2024-06-17 14:48 - 2024-06-17 14:49 - 003364512 _____ (Nicolas Coolman) C:\Users\touggourt\Desktop\ZHPCleaner.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de démarrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{25c4cfe3-5472-11ed-824c-806e6f6e6963}
{4d8bebb6-3aa3-11e4-8ad4-947cdaeb8744}
{4d8bebb7-3aa3-11e4-8ad4-947cdaeb8744}
timeout 5
Gestionnaire de démarrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {566c5309-7ed3-11eb-81f4-c49c7e26f49b}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {25c4cfe3-5472-11ed-824c-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb6-3aa3-11e4-8ad4-947cdaeb8744}
description USB Drive (UEFI)
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb7-3aa3-11e4-8ad4-947cdaeb8744}
description Internal CD/DVD ROM Drive (UEFI)
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb8-3aa3-11e4-8ad4-947cdaeb8744}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebb9-3aa3-11e4-8ad4-947cdaeb8744}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebba-3aa3-11e4-8ad4-947cdaeb8744}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebbb-3aa3-11e4-8ad4-947cdaeb8744}
description Notebook Hard Drive
Application logicielle (101fffff)
--------------------------------
identificateur {4d8bebbc-3aa3-11e4-8ad4-947cdaeb8744}
description Network Adapter (IPv4 Legacy)
Application logicielle (101fffff)
--------------------------------
identificateur {863468e2-3a4f-11e4-be69-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Application logicielle (101fffff)
--------------------------------
identificateur {aa089c35-163d-11ee-828d-a0481c1b6eb0}
description USB Hard Drive - Samsung M3 Portable
Chargeur de démarrage Windows
-----------------------------
identificateur {4d8bebc7-3aa3-11e4-8ad4-947cdaeb8744}
device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{4d8bebc8-3aa3-11e4-8ad4-947cdaeb8744}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride Recovery
osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{4d8bebc8-3aa3-11e4-8ad4-947cdaeb8744}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de démarrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {d01a3762-5653-11ed-824e-d3505b6e4513}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {566c5309-7ed3-11eb-81f4-c49c7e26f49b}
nx OptIn
bootmenupolicy Standard
Chargeur de démarrage Windows
-----------------------------
identificateur {d01a3762-5653-11ed-824e-d3505b6e4513}
device ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{d01a3763-5653-11ed-824e-d3505b6e4513}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{d01a3763-5653-11ed-824e-d3505b6e4513}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre à partir de la mise en veille prolongée
-------------------------------------------------
identificateur {566c5309-7ed3-11eb-81f4-c49c7e26f49b}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {d01a3762-5653-11ed-824e-d3505b6e4513}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de mémoire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics mémoire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
Paramètres EMS
--------------
identificateur {emssettings}
bootems No
Paramètres du débogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de mémoire RAM
----------------------
identificateur {badmemory}
Paramètres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Paramètres du chargeur de démarrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Paramètres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Paramètres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de périphérique
-----------------------
identificateur {d01a3763-5653-11ed-824e-d3505b6e4513}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume5
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================