Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11.06.2024 Exécuté par touggourt (administrateur) sur PÉPÉJANOT (Hewlett-Packard HP Pavilion 17 Notebook PC) (17-06-2024 16:07:06) Exécuté depuis C:\Users\touggourt\Desktop\FRST64.exe Profils chargés: touggourt Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.4046 (X64) Langue: Français (France) Navigateur par défaut: "C:\Users\touggourt\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1" Mode d'amorçage: Normal ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registre (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8505088 2015-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1402624 2015-07-03] (Realtek Semiconductor Corp -> Realtek Semiconductor) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [89184 2012-11-05] (Microsoft Corporation -> Microsoft Corporation) HKLM-x32\...\Run: [USB Security] => C:\Program Files (x86)\USB Disk Security\USBGuard.exe [695528 2015-01-31] (Lanzhou Itanium Software Technology Co., Ltd. -> Zbshareware Lab) HKLM-x32\...\Run: [AutoTransfer PC] => C:\Program Files (x86)\USB Disk Security\backupmaster.exe [397200 2018-04-08] (Bo Zheng -> Bo Zheng) HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\Cleaner\ccleaner_update_helper.exe [813368 2024-06-17] (PIRIFORM SOFTWARE LIMITED -> Piriform) HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1398352 2018-06-11] (CyberGhost SRL -> CyberGhost S.A.) HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [Opera Stable] => C:\Users\touggourt\AppData\Local\Programs\Opera\opera.exe [1581984 2024-04-29] (Opera Norway AS -> Opera Software) HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\Run: [MicrosoftEdgeAutoLaunch_E349E25CDDA37349DEA42844FF639202] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4081208 2024-05-10] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\...\RunOnce: [Application Restart #4] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2867736 2024-06-14] (Brave Software, Inc. -> Brave Software, Inc.) HKLM\...\Windows x64\Print Processors\Canon MG3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAR.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Windows x64\Print Processors\Canon MG5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAD.DLL [28672 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Windows x64\Print Processors\Epson Inkjet: C:\Windows\System32\spool\prtprocs\x64\EP0NPP01.DLL [38912 2011-08-30] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3100 series: C:\WINDOWS\system32\CNMLMAR.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5100 series: C:\WINDOWS\system32\CNMLMAD.DLL [361472 2010-08-25] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Epson Inbox Language Monitor01: C:\WINDOWS\system32\EP0SLM01.DLL [77824 2011-08-30] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) HKLM\...\Print\Monitors\HP Universal Port Monitor: C:\WINDOWS\system32\hpbprtmon.dll [365568 2012-12-01] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard) HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [114872 2015-01-05] (pdfforge GmbH -> pdfforge GmbH) HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\126.1.67.116\Installer\chrmstp.exe [2024-06-17] (Brave Software, Inc. -> Brave Software, Inc.) HKLM\Software\...\Authentication\Credential Providers: [{538C240D-3DEE-4032-AB4C-08A3A6EB0861}] -> Startup: C:\Users\touggourt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2024-01-08] ShortcutTarget: DeepL auto-start.lnk -> C:\Users\touggourt\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [Fichier non signé] Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2024-04-24] ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (AnyDesk Software GmbH -> AnyDesk Software GmbH) GroupPolicy: Restriction ? <==== ATTENTION Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION ==================== Tâches planifiées (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {C2D17328-8FBC-4F6A-AAC3-1379B2849F21} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.) Task: {55F0FE31-F6E6-425D-8BB9-CDF4DE6267D0} - System32\Tasks\BDAntiCryptoWallTask => C:\Program Files\Bitdefender\Tools\AntiCryptoWall\BDAntiCryptoWall.exe [1216264 2015-08-17] (Bitdefender SRL -> ) Task: {3223B411-0241-4ABD-9C14-967505F747B0} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {B1AC6451-C7C7-4366-94D6-E0FF544D2AAC} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.) Task: {69CC7351-248D-4500-91DD-FFB1E4444EF9} - System32\Tasks\CCleaner Update => C:\Program Files\Cleaner\CCUpdate.exe [714256 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {EE2F2752-41F4-4684-B9EB-F67588257A14} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\Cleaner\CCleanerBugReport.exe [4703648 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\Cleaner\LOG" --programpath "C:\Program Files\Cleaner" --guid "bd77af6f-ca2f-4e6e-8666-7d2e924dade5" --version "6.18.10838" --silent Task: {A77A5AA4-D8F7-47DD-9E37-304328DF072B} - System32\Tasks\GridinSoft Anti-Malware => "C:\Program Files\GridinSoft Anti-Malware\gsam.exe" -startupscan (Pas de fichier) Task: {4C4B99D8-61C8-4D91-92EB-076706D06DA4} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe [184096 2017-05-31] (Maxthon (Asia) Limited. -> Maxthon International ltd.) Task: {778ED82B-1E1F-457C-9105-4673A965DC90} - System32\Tasks\Maxthon5 Update => C:\Program Files (x86)\Maxthon5\bin\Maxthon.exe [170776 2020-02-21] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.) Task: {5E413AE2-4805-478B-B689-6BFC90B1402B} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {C9DCF59E-6B97-4C0C-8641-B8261089C8CA} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E} Task: {CE2DE968-E342-40D7-9566-427D45E4A886} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371} Task: {9C41A5EC-F56C-455E-905E-295D7F84B133} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload => {EBF00FCB-0769-4B81-9BEC-6C05514111AA} Task: {094CD275-5C71-4753-B57E-5566CA859498} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316} Task: {DB21EF32-6BA9-4118-BBC1-BC4FF48961E5} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61} Task: {8B6759EE-1C08-4B8F-955C-774AB5A6544E} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1} Task: {0F6DBBD1-1FA5-490B-A482-1F43FCC689E6} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969} Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task => {BF6C1E47-86EC-4194-9CE5-13C15DCB2001} Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task => {1B1F472E-3221-4826-97DB-2C2324D389AE} Task: {DB7D758D-C24D-483A-97ED-988C713284B8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdCacheMaintenance (Pas de fichier) Task: {1B55A245-E434-43FA-9D9A-EF5EF7F0DB21} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdCleanup (Pas de fichier) Task: {8FA7A5EA-22DC-4848-850F-E1224C071409} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe Scan -ScheduleJob -ScanTrigger 55 -IdleScheduledJob (Pas de fichier) Task: {1875D096-B78E-4CE7-97D5-5F58AB9A6175} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe -IdleTask -TaskName WdVerification (Pas de fichier) Task: {338A4FC1-4FAD-487C-9A9E-87F0399C8BDB} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2099052359-4194192794-1698811201-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [673696 2024-04-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (l'élément de données a 6 caractères en plus). Task: {3293DCF2-022C-4C0B-90F1-3EFDE7C624DA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33696 2024-04-27] (Mozilla Corporation -> Mozilla Foundation) Task: {55F976AA-0D78-4BA2-8207-39B0F50AD49F} - System32\Tasks\Opera scheduled Autoupdate 1676712353 => C:\Users\touggourt\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5668768 2024-04-25] (Opera Norway AS -> Opera Software) Task: {82C3068F-F8BC-49C0-BF77-10CE80A3FCC3} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {AC89AD10-E447-49AD-AA6A-CD61C8D970DB} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-08-21] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) Task: {9EFF7721-0DD2-4126-A008-C52F68D38C30} - System32\Tasks\Synaptics TouchPad Enhancements => \Program Files\Synaptics\SynTP\SynTPEnh.exe [4397144 ] (Synaptics Incorporated -> Synaptics Incorporated) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\Cleaner\CCleanerBugReport.exe Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Tcpip\Parameters: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}: [DhcpNameServer] 109.0.66.20 109.0.66.10 Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\14E64627F696461405: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\35642502759664960264F4E4F5235485: [DhcpNameServer] 192.168.9.2 Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\35642502759664960264F4E4F5235485: [DhcpDomain] extender.com Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\C457D69616025353030283732313: [DhcpNameServer] 192.168.137.1 Tcpip\..\Interfaces\{00ff6b89-d220-4306-bd49-f1e8f79d4f1c}\C457D69616025353030283732313: [DhcpDomain] mshome.net Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\35642502759664960264F4E4: [DhcpNameServer] 109.0.66.20 109.0.66.10 Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\35642502759664960264F4E4F5235485: [DhcpNameServer] 109.0.66.20 109.0.66.10 Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\6427565626F687D223438627A7: [DhcpNameServer] 192.168.0.254 Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\C457D69616: [DhcpNameServer] 192.168.137.1 Tcpip\..\Interfaces\{2d86388d-f132-416c-a9fe-1b39133c4907}\C457D69616: [DhcpDomain] mshome.net Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}: [NameServer] 8.8.8.8,8.8.4.4 Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\14E64627F696461405: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\544696D61687548545E23556475707022383: [DhcpNameServer] 192.168.9.2 Tcpip\..\Interfaces\{532d4ce3-b0a6-4bc7-9caf-e9e017009f95}\544696D61687548545E23556475707022383: [DhcpDomain] extender.com Tcpip\..\Interfaces\{6754f4a9-fbca-4404-962f-2e31e8b84c61}: [DhcpNameServer] 192.168.15.133 Tcpip\..\Interfaces\{e3b538e6-dc83-42f2-af4c-4edc9e8d04f3}: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{e3b538e6-dc83-42f2-af4c-4edc9e8d04f3}\356425F543731464: [DhcpNameServer] 109.0.66.20 109.0.66.10 Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}: [NameServer] 192.168.1.1 Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\14E64627F696461405: [DhcpNameServer] 192.168.43.1 Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\544696D61687548545E23556475707022383: [DhcpNameServer] 192.168.9.2 Tcpip\..\Interfaces\{e9bfdbe2-591b-4d99-9769-35591778d733}\544696D61687548545E23556475707022383: [DhcpDomain] extender.com Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default [2024-06-17] Edge Extension: (Google Docs hors connexion) - C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-18] Edge Extension: (Edge relevant text changes) - C:\Users\touggourt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-04-18] FireFox: ======== FF DefaultProfile: hnxqmrcx.default FF ProfilePath: C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\hnxqmrcx.default [2024-05-12] FF ProfilePath: C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\kvfxxutz.default-release [2024-06-17] FF Extension: (Chrome Remote Desktop) - C:\Users\touggourt\AppData\Roaming\Mozilla\Firefox\Profiles\kvfxxutz.default-release\Extensions\remotedesktop@google.com.xpi [2024-05-14] [UpdateUrl:hxxps://www.gstatic.com/chromoting/firefox_extension/update.json] FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-05-04] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.) FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.) Chrome: ======= CHR HKU\S-1-5-21-2099052359-4194192794-1698811201-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] Opera: ======= OPR DefaultProfile: Default Brave: ======= BRA DefaultProfile: Default BRA Profile: C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-06-17] BRA Extension: (Google Traduction) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-06-17] BRA Extension: (Adobe Acrobat : outils de modif., de conversion et de signature de PDF) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-06-17] BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-06-17] BRA Extension: (Brave Local Data Files Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-06-17] BRA Extension: (Brave NTP background images) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-02-03] BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-06-17] BRA Extension: (Brave Ads Resources) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\bgifagoclclhhoflocdefiklgodpihog [2024-06-17] BRA Extension: (Wallet Data Files Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-06-17] BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-06-17] BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2024-02-13] BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2021-09-23] BRA Extension: (Brave Ad Block Updater (AdGuard Français)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\emaecjinaegfkoklcdafkiocjhoeilao [2023-04-14] BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2024-06-17] BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-06-17] BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-06-17] BRA Extension: (Brave SpeedReader Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-10] BRA Extension: (Brave NTP sponsored images) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2024-06-17] BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-06-17] BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\touggourt\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-11-13] StartMenuInternet: Brave - C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe ==================== Services (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 AdaptiveSleepService; C:\Program Files\ATI Technologies\ATI.ACE\A4\AdaptiveSleepService.exe [155016 2017-09-22] (Advanced Micro Devices, Inc. -> ) S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.) S3 AERTFilters; C:\Program Files\Realtek\Audio\HDA\AERTSr64.EXE [106952 2015-07-03] (Andrea Electronics -> Andrea Electronics Corporation) S3 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2013-04-16] (Advanced Micro Devices, Inc.) [Fichier non signé] S2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5323592 2024-04-24] (AnyDesk Software GmbH -> AnyDesk Software GmbH) S3 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.) S3 BraveElevationService; C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\126.1.67.116\elevation_service.exe [2700312 2024-06-14] (Brave Software, Inc. -> Brave Software, Inc.) S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [155848 2020-08-13] (Brave Software, Inc. -> BraveSoftware Inc.) S3 CCleanerPerformanceOptimizerService; C:\Program Files\Cleaner\CCleanerPerformanceOptimizerService.exe [1083808 2023-11-21] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) S3 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [204880 2018-06-11] (CyberGhost SRL -> CyberGhost S.A.) S3 chromoting; C:\Program Files (x86)\Google\Chrome Remote Desktop\124.0.6367.18\remoting_host.exe [74016 2024-03-26] (Google LLC -> Google LLC) S2 MxService; C:\Program Files (x86)\Maxthon5\Bin\MxService.exe [178464 2020-02-21] (Maxthon Technology Co, Ltd. -> Maxthon International ltd.) S3 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2017-01-16] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) S2 MDCoreSvc; "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpDefenderCoreService.exe" [X] S3 WdNisSvc; "%ProgramData%\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe" [X] S2 WinDefend; "C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe" [X] ===================== Pilotes (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.) S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> ) R3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R1 ElRawDisk; C:\WINDOWS\system32\drivers\rsdrvx64.sys [26024 2009-02-12] (EldoS Corporation -> EldoS Corporation) S3 GridinSoftInetSecurityDriver; C:\WINDOWS\system32\DRIVERS\gsInetSecurity.sys [107784 2024-02-28] (GridinSoft, LLC -> GridinSoft LLC) S3 GSDriver; C:\WINDOWS\System32\drivers\GSDriver64.sys [55488 2024-02-28] (Microsoft Windows Hardware Compatibility Publisher -> ) R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [310528 2015-06-29] (Realtek Semiconductor Corp -> Realtek Semiconductor Corp.) S3 RtlWlanu; C:\WINDOWS\System32\drivers\n300ma.sys [1577792 2012-11-20] (On Networks -> Realtek Semiconductor Corporation) R3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22080 2024-06-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [602520 2024-06-05] (Microsoft Windows -> Microsoft Corporation) S3 wdm_usb; C:\WINDOWS\system32\DRIVERS\usb2ser.sys [159936 2016-08-16] (NGO -> MBB) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-05] (Microsoft Windows -> Microsoft Corporation) R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [34944 2018-05-11] (HP Inc. -> HP) S3 XUIF; C:\WINDOWS\System32\Drivers\x10ufx2.sys [33048 2006-11-30] (X10 Wireless Technology Inc. -> X10 Wireless Technology, Inc.) U4 nxdm; pas de ImagePath U4 nxfs; pas de ImagePath U4 nxpcap; pas de ImagePath U4 nxsshd; pas de ImagePath U4 nxtun; pas de ImagePath U4 nxusbd; pas de ImagePath U4 nxusbh; pas de ImagePath U4 nxusbs; pas de ImagePath ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Trois mois (créés) (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2024-06-17 16:07 - 2024-06-17 16:11 - 000026645 _____ C:\Users\touggourt\Desktop\FRST.txt 2024-06-17 16:03 - 2024-06-17 16:03 - 000027258 _____ C:\Users\touggourt\Desktop\ZHPCleaner (R).html 2024-06-17 16:03 - 2024-06-17 16:03 - 000016631 _____ C:\Users\touggourt\Desktop\ZHPCleaner (R).txt 2024-06-17 15:58 - 2024-06-17 15:58 - 000027165 _____ C:\Users\touggourt\Desktop\ZHPCleaner (S).html 2024-06-17 15:58 - 2024-06-17 15:58 - 000016607 _____ C:\Users\touggourt\Desktop\ZHPCleaner (S).txt 2024-06-17 15:12 - 2024-06-17 15:12 - 008790880 _____ (Malwarebytes) C:\Users\touggourt\Desktop\adwcleaner(1).exe 2024-06-17 15:11 - 2024-06-17 15:11 - 008791352 _____ (Malwarebytes) C:\Users\touggourt\Desktop\AdwCleaner.exe 2024-06-17 15:10 - 2024-06-17 15:10 - 002395136 _____ (Farbar) C:\Users\touggourt\Desktop\FRST64.exe 2024-06-17 14:50 - 2024-06-17 15:20 - 000000886 _____ C:\Users\touggourt\Desktop\ZHPCleaner.lnk 2024-06-17 14:48 - 2024-06-17 14:49 - 003364512 _____ (Nicolas Coolman) C:\Users\touggourt\Desktop\ZHPCleaner.exe 2024-06-17 11:38 - 2024-06-17 11:38 - 000000290 __RSH C:\ProgramData\ntuser.pol 2024-06-17 09:39 - 2024-06-17 11:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashPeak Slimjet (64 bit) 2024-06-17 09:39 - 2024-06-17 09:39 - 000000000 ____D C:\Users\touggourt\AppData\Local\Slimjet 2024-06-17 09:38 - 2024-06-17 11:21 - 000000000 ____D C:\Program Files\Slimjet 2024-05-31 20:50 - 2024-06-16 20:28 - 001974784 _____ C:\Users\touggourt\Documents\CODES Divers (version 1) (Enregistré automatiquement) (Enregistré automatiquement) (Enregistré automatiquement) (Enregistré automatiquement).xls 2024-05-30 16:30 - 2024-06-02 15:38 - 000000000 ____D C:\Users\touggourt\Desktop\ZIP 16 avril 2024 2024-05-28 15:36 - 2024-05-29 10:29 - 000000000 ____D C:\Users\touggourt\Desktop\ios pa converi 2024-05-28 15:36 - 2024-05-28 19:06 - 000000000 ____D C:\Users\touggourt\Desktop\ios converti 2024-05-24 20:52 - 2024-05-24 20:52 - 000000512 _____ C:\Users\touggourt\Documents\BDBE0A60 2024-05-24 14:27 - 2024-05-26 06:49 - 000000000 ____D C:\Users\touggourt\Desktop\Nouveau dossier 2024-05-23 16:38 - 2024-05-23 16:45 - 000000000 ____D C:\Users\touggourt\Desktop\ZIP 2024-05-16 09:49 - 2024-05-09 11:09 - 000001188 _____ C:\Users\touggourt\Desktop\Copie.jpg.txt 2024-05-14 13:47 - 2024-06-17 11:22 - 000000000 ____D C:\Program Files (x86)\Google 2024-05-14 13:43 - 2024-05-14 13:43 - 021159936 _____ C:\Users\touggourt\Downloads\chromeremotedesktophost.msi 2024-05-13 21:15 - 2024-05-24 20:51 - 000000273 _____ C:\Users\touggourt\Desktop\adresse formation carnegie.txt 2024-05-12 15:16 - 2024-06-17 11:45 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2024-05-12 15:16 - 2024-05-12 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2024-05-12 15:16 - 2024-05-12 15:16 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Mozilla 2024-05-12 15:16 - 2024-05-12 15:16 - 000000000 ____D C:\Users\touggourt\AppData\Local\Mozilla 2024-05-12 15:15 - 2024-06-17 11:46 - 000000000 ____D C:\Program Files\Mozilla Firefox 2024-05-12 15:15 - 2024-06-17 11:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2024-05-12 15:15 - 2024-05-12 15:15 - 000002053 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigation privée de Firefox.lnk 2024-05-12 15:15 - 2024-05-12 15:15 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2024-05-12 15:15 - 2024-05-12 15:15 - 000001000 _____ C:\Users\Public\Desktop\Firefox.lnk 2024-05-09 11:09 - 2024-05-09 11:09 - 000001188 _____ C:\Users\touggourt\Desktop\les métiers.txt 2024-05-07 09:39 - 2024-05-07 09:40 - 000001142 _____ C:\Users\touggourt\Desktop\Jo-Hu-Chlo-é famille - Raccourci.lnk 2024-05-06 10:52 - 2024-05-06 10:52 - 000000017 _____ C:\Users\touggourt\Documents\list.bat 2024-05-06 10:01 - 2024-05-09 10:33 - 000000000 ____D C:\Users\touggourt\Desktop\FAIRE LISTE de Fichiers 2024-05-05 14:53 - 2024-05-05 14:19 - 000014860 _____ C:\Users\touggourt\Documents\1.txt 2024-04-29 17:30 - 2024-05-14 07:07 - 000001475 _____ C:\Users\touggourt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk 2024-04-24 16:14 - 2024-06-17 11:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk 2024-04-24 09:41 - 2024-06-17 09:06 - 000000000 ____D C:\Users\touggourt\Desktop\RTM 2024-04-08 15:23 - 2024-04-20 09:31 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Lavasoft 2024-04-08 11:48 - 2024-04-20 09:31 - 000000000 ____D C:\ProgramData\Lavasoft 2024-04-07 20:44 - 2024-04-07 20:44 - 000021454 _____ C:\Users\touggourt\Documents\Classeur1.xlsx 2024-04-04 15:44 - 2024-05-06 19:32 - 000005927 _____ C:\Users\touggourt\Desktop\CHRISTELLE LASPINA.txt 2024-04-02 09:23 - 2024-04-02 11:52 - 000000000 ____D C:\Users\touggourt\Desktop\livres à vendre ==================== Trois mois (modifiés) ================== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2024-06-17 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-06-17 16:17 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-06-17 16:11 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-06-17 16:09 - 2023-02-15 19:12 - 000000000 ___DC C:\FRST 2024-06-17 16:03 - 2017-06-25 12:32 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\ZHP 2024-06-17 15:55 - 2022-10-28 02:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-06-17 15:19 - 2019-03-29 16:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung 2024-06-17 15:19 - 2016-11-02 19:06 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Samsung 2024-06-17 15:19 - 2016-11-02 19:05 - 000000000 ____D C:\Program Files (x86)\Samsung 2024-06-17 14:44 - 2020-08-13 11:31 - 000002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk 2024-06-17 14:43 - 2022-09-08 05:11 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-06-17 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\NDF 2024-06-17 11:37 - 2023-11-29 19:08 - 000000000 ___HD C:\Users\touggourt\Downloads\.opera 2024-06-17 11:37 - 2023-11-29 19:08 - 000000000 ___HD C:\Users\touggourt\.opera 2024-06-17 11:37 - 2022-10-28 03:10 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-06-17 11:37 - 2022-10-28 03:10 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2024-06-17 11:36 - 2020-04-20 09:27 - 000000000 ____D C:\Program Files\Cleaner 2024-06-17 11:30 - 2022-10-27 23:50 - 000000000 ____D C:\Users\touggourt 2024-06-17 11:29 - 2023-05-21 18:35 - 000000000 ____D C:\ProgramData\AnyDesk 2024-06-17 11:28 - 2022-10-28 03:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-06-17 11:28 - 2022-10-28 03:10 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software 2024-06-17 11:28 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState 2024-06-17 11:27 - 2021-03-07 01:24 - 000008192 ___SH C:\DumpStack.log.tmp 2024-06-17 11:23 - 2017-09-15 22:51 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin 2024-06-17 11:22 - 2023-05-21 18:35 - 000000000 ____D C:\Program Files (x86)\AnyDesk 2024-06-17 11:22 - 2023-05-18 09:53 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\AnyDesk 2024-06-17 11:22 - 2022-05-20 11:00 - 000000000 ____D C:\Users\touggourt\Desktop\Pál 2024-06-17 11:22 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2024-06-17 11:22 - 2018-06-12 18:48 - 000000000 ____D C:\Users\touggourt\AppData\Local\Microsoft Help 2024-06-17 11:22 - 2015-01-07 22:15 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\XnView 2024-06-17 11:22 - 2014-11-20 20:48 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\vlc 2024-06-17 11:22 - 2014-10-02 20:36 - 000000000 ____D C:\Users\touggourt\AppData\Roaming\Microsoft\Word 2024-06-17 11:22 - 2013-08-22 17:36 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy 2024-06-17 10:37 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\registration 2024-06-17 10:32 - 2018-03-19 12:40 - 000000000 __HDC C:\$SysReset 2024-06-17 09:50 - 2018-03-20 20:20 - 000000000 ____D C:\Users\touggourt\AppData\Local\Packages 2024-06-17 09:41 - 2018-06-13 15:24 - 000000000 ____D C:\Users\touggourt\AppData\Local\D3DSCache 2024-06-16 20:40 - 2024-02-16 20:53 - 000000000 ____D C:\Users\touggourt\Desktop\opera 2024-06-13 09:38 - 2018-12-16 09:52 - 000000000 ____D C:\Users\touggourt\AppData\Local\CrashDumps 2024-06-05 18:47 - 2018-03-03 15:41 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2024-05-31 20:56 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports ==================== Fichiers à la racine de certains dossiers ======== 2024-01-11 15:43 - 2024-01-11 15:43 - 000000025 _____ () C:\Users\touggourt\liste.bat 2016-06-13 09:15 - 2016-06-13 09:15 - 000000096 _____ () C:\Users\touggourt\AppData\Roaming\version2.xml 2017-02-15 19:41 - 2017-02-15 19:41 - 000132803 _____ () C:\Users\touggourt\AppData\Local\ars.cache 2017-02-15 19:43 - 2017-02-15 19:43 - 000389166 _____ () C:\Users\touggourt\AppData\Local\census.cache 2020-04-13 15:53 - 2023-01-06 18:45 - 000016896 _____ () C:\Users\touggourt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2017-02-15 18:13 - 2017-02-15 18:13 - 000000036 _____ () C:\Users\touggourt\AppData\Local\housecall.guid.cache 2023-06-23 11:13 - 2023-06-23 11:13 - 000000477 _____ () C:\Users\touggourt\AppData\Local\kdeglobals 2023-06-23 11:04 - 2023-06-23 11:04 - 000008337 _____ () C:\Users\touggourt\AppData\Local\kdenlive-layoutsrc 2023-06-23 11:04 - 2023-06-23 11:15 - 000004645 _____ () C:\Users\touggourt\AppData\Local\kdenliverc 2015-10-11 11:16 - 2015-10-11 11:16 - 000000888 _____ () C:\Users\touggourt\AppData\Local\recently-used.xbel 2018-02-24 17:42 - 2022-02-03 09:54 - 000007597 _____ () C:\Users\touggourt\AppData\Local\Resmon.ResmonCfg 2023-06-23 11:05 - 2023-06-23 11:05 - 000005174 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel 2023-06-23 11:05 - 2023-06-23 11:05 - 000004490 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel.bak 2023-06-23 11:05 - 2023-06-23 11:05 - 000000000 _____ () C:\Users\touggourt\AppData\Local\user-places.xbel.tbcache ==================== SigCheckExt ========================= 2015-10-18 14:55 - 2009-02-06 02:09 - 000685568 ____C C:\MiNi-Image.dll 2015-10-18 14:55 - 2010-10-08 00:15 - 001622016 ____C C:\minidir.exe 2015-10-18 14:55 - 2010-10-08 00:14 - 001622016 ____C C:\miniima.exe 2016-07-16 13:42 - 2016-07-16 13:42 - 000073216 _____ (Microsoft Corporation) C:\WINDOWS\system32\AllJoynDiscoveryPlugin.dll 2013-08-22 13:45 - 2013-08-22 13:45 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-fibers-l2-1-1.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-core-psm-appnotify-l1-1-0.dll 2013-08-22 13:43 - 2013-08-22 13:43 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-devices-config-l1-1-1.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-mm-misc-l1-1-1.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-rtcore-ntuser-winevent-l1-1-0.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\system32\api-ms-win-security-cryptoapi-l1-1-0.dll 2016-07-14 14:13 - 2016-07-01 05:57 - 000059392 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpreference.exe 2013-08-22 14:37 - 2013-06-18 17:03 - 000032256 _____ (CANON INC.) C:\WINDOWS\system32\CNHI10A.DLL 2013-08-22 14:37 - 2013-06-18 17:03 - 000180224 _____ (CANON INC.) C:\WINDOWS\system32\CNHL5100.DLL 2013-08-22 14:37 - 2013-06-18 17:03 - 000019968 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCAN.DLL 2015-10-30 09:19 - 2015-10-30 09:19 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\DafCdp.dll 2017-04-18 09:46 - 2017-03-28 07:37 - 000031232 _____ (Microsoft Corporation) C:\WINDOWS\system32\DdcWnsListener.dll 2014-12-17 21:02 - 2014-10-29 03:59 - 000032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\dfp.exe 2014-12-17 21:07 - 2014-10-29 03:54 - 000408576 _____ (Microsoft Corporation) C:\WINDOWS\system32\DfpCommon.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-msa-ui-l1-1-0.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-ntuser-misc-l1-2-0.dll 2013-08-22 13:42 - 2013-08-22 13:42 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ext-ms-win-rtcore-ntuser-dpi-l1-1-0.dll 2016-07-16 13:41 - 2016-07-16 13:41 - 003447296 _____ (Hewlett-Packard Co.) C:\WINDOWS\system32\HPScanTRDrvWn8.dll 2016-07-16 13:41 - 2016-07-16 13:41 - 000303616 _____ (Hewlett-Packard) C:\WINDOWS\system32\HPWia2DrvRootWn8.dll 2012-07-25 22:22 - 2012-07-26 05:07 - 004722176 _____ (Intel Corporation) C:\WINDOWS\system32\igd10umd64.dll 2012-07-25 22:22 - 2012-07-26 05:07 - 006549504 _____ (Intel Corporation) C:\WINDOWS\system32\igdumd64.dll 2017-05-11 20:58 - 2017-03-04 08:26 - 000261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2016-07-16 13:43 - 2016-07-17 00:45 - 003584000 _____ (Microsoft Corporation) C:\WINDOWS\system32\InkAnalysisLegacyCom.dll 2012-11-27 01:18 - 2012-11-27 01:18 - 000050688 _____ C:\WINDOWS\system32\kdbsdk64.dll 2015-08-20 22:55 - 2014-11-19 11:20 - 001207670 _____ (The GLib developer community) C:\WINDOWS\system32\libglib-2.0-0.dll 2014-10-20 13:16 - 2014-07-10 06:08 - 000321536 _____ (Microsoft Corporation) C:\WINDOWS\system32\lockscreencn.dll 2005-09-13 17:27 - 2005-09-13 17:27 - 000054784 _____ C:\WINDOWS\system32\lxbkcnv5.dll 2006-10-14 10:59 - 2006-10-14 10:59 - 001462272 _____ (Microsoft Corporation) C:\WINDOWS\system32\lxbkg.dll 2023-06-17 19:15 - 2003-05-21 22:50 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3a.dll 2007-02-28 15:00 - 2007-02-28 15:00 - 000138240 _____ (Funai) C:\WINDOWS\system32\rtscan.dll 2015-10-30 09:18 - 2015-10-30 09:18 - 000066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_Flashlight.dll 2012-07-18 20:30 - 2012-07-18 20:30 - 000007680 _____ (Voyage au bout de la langue) C:\WINDOWS\system32\voyaFRHU.dll 2014-12-17 21:03 - 2014-10-29 04:09 - 000103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\wiafbdrv.dll 2016-07-16 13:42 - 2016-07-16 13:42 - 000076800 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiDiscoveryPlugin.dll 2016-07-16 13:42 - 2016-07-16 13:42 - 000081920 _____ (Microsoft Corporation) C:\WINDOWS\system32\WiFiOnboardingPlugin.dll 2015-04-11 21:09 - 2015-03-14 03:51 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wu.upgrade.ps.dll 2019-04-17 18:20 - 2016-09-29 09:44 - 001298584 _____ C:\WINDOWS\ddmmain.exe 2018-12-16 12:29 - 2018-12-16 12:29 - 000253952 _____ (Microsoft Corporation) C:\WINDOWS\Setup1.exe 2018-12-16 12:29 - 2018-12-16 12:29 - 000074752 _____ (Microsoft Corporation) C:\WINDOWS\ST6UNST.EXE 2013-08-22 06:17 - 2013-08-22 06:17 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-fibers-l2-1-1.dll 2013-08-22 06:14 - 2013-08-22 06:14 - 000002560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-core-psm-appnotify-l1-1-0.dll 2013-08-22 06:14 - 2013-08-22 06:14 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-devices-config-l1-1-1.dll 2013-08-22 06:14 - 2013-08-22 06:14 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-mm-misc-l1-1-1.dll 2013-08-22 06:14 - 2013-08-22 06:14 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-rtcore-ntuser-winevent-l1-1-0.dll 2013-08-22 06:14 - 2013-08-22 06:14 - 000004096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\api-ms-win-security-cryptoapi-l1-1-0.dll 2015-10-21 09:22 - 2005-02-24 14:10 - 002084864 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDesign.dll 2015-10-21 09:22 - 2005-02-24 14:10 - 000417792 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudDisplay.dll 2015-10-21 09:11 - 2011-09-29 14:20 - 001986560 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudFile.dll 2015-10-21 09:11 - 2011-09-29 14:20 - 001212416 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioInfos.dll 2015-10-21 09:22 - 2005-03-10 18:00 - 000454656 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioRecord.dll 2015-10-21 09:22 - 2005-02-24 14:11 - 000479232 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudioVisu.dll 2015-10-21 09:11 - 2011-09-29 14:20 - 000458752 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\AudPlayer.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000974848 _____ C:\WINDOWS\SysWOW64\cis-2.4.dll 2015-10-21 09:11 - 2011-09-29 14:19 - 000032768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CMDLGFR.DLL 2016-07-16 13:43 - 2016-07-16 13:43 - 000300032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\configmanager2.dll 2016-07-16 13:43 - 2016-07-16 13:43 - 000172032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\coredpus.dll 2015-10-30 09:19 - 2015-10-30 09:19 - 000018432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DafCdp.dll 2014-09-26 17:29 - 1999-01-20 06:01 - 000210032 _____ C:\WINDOWS\SysWOW64\DBCLIENT.DLL 2007-04-27 10:43 - 2007-04-27 10:43 - 000120200 _____ () C:\WINDOWS\SysWOW64\DLLDEV32i.dll 1997-09-12 01:00 - 1997-09-12 01:00 - 000022016 _____ C:\WINDOWS\SysWOW64\DOCOBJ.DLL 2013-08-22 06:14 - 2013-08-22 06:14 - 000003584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-msa-ui-l1-1-0.dll 2013-08-22 06:14 - 2013-08-22 06:13 - 000004608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-ntuser-misc-l1-2-0.dll 2013-08-22 06:14 - 2013-08-22 06:13 - 000003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ext-ms-win-rtcore-ntuser-dpi-l1-1-0.dll 1997-09-12 01:00 - 1997-09-12 01:00 - 000012288 _____ C:\WINDOWS\SysWOW64\HLINKPRX.DLL 2012-07-25 22:22 - 2012-06-02 16:32 - 004338688 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igd10umd32.dll 2012-07-25 22:22 - 2012-06-02 16:32 - 004896768 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\igdumd32.dll 2017-03-20 13:37 - 2017-03-04 08:18 - 000198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2015-10-21 09:11 - 2011-09-29 14:19 - 000015360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetfr.DLL 2016-07-16 13:44 - 2016-07-17 00:45 - 002549760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InkAnalysisLegacyCom.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000081920 _____ C:\WINDOWS\SysWOW64\issacapi_bs-2.3.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000065536 _____ C:\WINDOWS\SysWOW64\issacapi_pe-2.3.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ C:\WINDOWS\SysWOW64\issacapi_se-2.3.dll 2014-09-12 10:03 - 2010-12-01 09:31 - 000451072 _____ C:\WINDOWS\SysWOW64\ISSRemoveSP.exe 2012-11-27 01:18 - 2012-11-27 01:18 - 000038912 _____ C:\WINDOWS\SysWOW64\kdbsdk32.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000045056 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MACXMLProto.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000118784 _____ ((주)마크애니) C:\WINDOWS\SysWOW64\MaDRM.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000049152 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MaJGUILib.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000045320 _____ (MARKANY) C:\WINDOWS\SysWOW64\MAMACExtract.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000024576 _____ ((주)마크애니) C:\WINDOWS\SysWOW64\MASetupCleaner.exe 2016-05-17 23:49 - 2016-05-17 23:49 - 000045056 _____ ((주) 마크애니) C:\WINDOWS\SysWOW64\MaXMLProto.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ (Marktek) C:\WINDOWS\SysWOW64\MK_Lyric.dll 2015-10-30 09:19 - 2016-09-14 12:26 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll 2015-10-30 09:19 - 2016-09-14 12:26 - 000635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll 2015-10-21 09:11 - 2011-09-29 14:19 - 000059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Mscc2fr.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000245760 _____ (Teruten Inc.) C:\WINDOWS\SysWOW64\MSCLib.dll 2015-10-21 09:11 - 2011-09-29 14:19 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSCMCFR.DLL 2016-05-17 23:49 - 2016-05-17 23:49 - 000155648 _____ (Teruten Inc.) C:\WINDOWS\SysWOW64\MSFLib.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000352256 _____ (Sample Corporation) C:\WINDOWS\SysWOW64\MSLUR71.dll 2014-09-12 10:23 - 2014-09-12 10:23 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll 2014-09-12 10:23 - 2014-09-12 10:23 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000040960 _____ (Telechips Inc.,) C:\WINDOWS\SysWOW64\MTTELECHIP.dll 2016-05-17 23:49 - 2016-05-17 23:49 - 000057344 _____ (Marktek Inc.) C:\WINDOWS\SysWOW64\MTXSYNCICON.dll 2018-07-09 08:46 - 2016-05-17 23:49 - 004659712 _____ (Dmitry Streblechenko) C:\WINDOWS\SysWOW64\Redemption.dll 2017-01-11 16:47 - 2001-07-10 19:01 - 000045056 _____ (ULTIMA ELECTRONICS CORP.) C:\WINDOWS\SysWOW64\Remove48U.exe 2014-10-23 19:40 - 2012-02-14 19:37 - 000594432 _____ (Realtek Semiconductor Corp. ) C:\WINDOWS\SysWOW64\Rtlihvs.dll 2015-10-21 09:11 - 2011-09-29 14:19 - 000021504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TABCTFR.DLL 2015-10-21 09:11 - 2011-09-29 14:19 - 000119568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6FR.DLL 2015-10-21 09:11 - 2011-09-29 14:19 - 000101888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VB6STKIT.DLL 2012-07-18 20:30 - 2012-07-18 20:30 - 000007680 _____ (Voyage au bout de la langue) C:\WINDOWS\SysWOW64\voyaFRHU.dll 2006-10-26 13:45 - 2006-10-26 13:45 - 000293376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WISPTIS.EXE 2015-10-21 09:11 - 2011-09-29 14:20 - 000348160 _____ (NCT Company Ltd.) C:\WINDOWS\SysWOW64\WMAFile.dll 2024-06-17 15:10 - 2024-06-17 15:10 - 002395136 _____ (Farbar) C:\Users\touggourt\Desktop\FRST64.exe 2023-05-21 18:31 - 2023-05-18 09:54 - 000394240 _____ (Google Inc.) C:\Users\touggourt\Desktop\gcapi.dll 2024-06-17 14:48 - 2024-06-17 14:49 - 003364512 _____ (Nicolas Coolman) C:\Users\touggourt\Desktop\ZHPCleaner.exe ==================== SigCheck ============================ (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) ==================== BCD ================================ Gestionnaire de démarrage du microprogramme ------------------------------------------- identificateur {fwbootmgr} displayorder {bootmgr} {25c4cfe3-5472-11ed-824c-806e6f6e6963} {4d8bebb6-3aa3-11e4-8ad4-947cdaeb8744} {4d8bebb7-3aa3-11e4-8ad4-947cdaeb8744} timeout 5 Gestionnaire de démarrage Windows --------------------------------- identificateur {bootmgr} device partition=\Device\HarddiskVolume2 path \EFI\Microsoft\Boot\bootmgfw.efi description Windows Boot Manager locale fr-FR inherit {globalsettings} default {current} resumeobject {566c5309-7ed3-11eb-81f4-c49c7e26f49b} displayorder {current} toolsdisplayorder {memdiag} timeout 30 Application logicielle (101fffff) -------------------------------- identificateur {25c4cfe3-5472-11ed-824c-806e6f6e6963} description Internal Hard Disk or Solid State Disk Application logicielle (101fffff) -------------------------------- identificateur {4d8bebb6-3aa3-11e4-8ad4-947cdaeb8744} description USB Drive (UEFI) Application logicielle (101fffff) -------------------------------- identificateur {4d8bebb7-3aa3-11e4-8ad4-947cdaeb8744} description Internal CD/DVD ROM Drive (UEFI) Application logicielle (101fffff) -------------------------------- identificateur {4d8bebb8-3aa3-11e4-8ad4-947cdaeb8744} description Internal Hard Disk or Solid State Disk Application logicielle (101fffff) -------------------------------- identificateur {4d8bebb9-3aa3-11e4-8ad4-947cdaeb8744} description Internal Hard Disk or Solid State Disk Application logicielle (101fffff) -------------------------------- identificateur {4d8bebba-3aa3-11e4-8ad4-947cdaeb8744} description Internal Hard Disk or Solid State Disk Application logicielle (101fffff) -------------------------------- identificateur {4d8bebbb-3aa3-11e4-8ad4-947cdaeb8744} description Notebook Hard Drive Application logicielle (101fffff) -------------------------------- identificateur {4d8bebbc-3aa3-11e4-8ad4-947cdaeb8744} description Network Adapter (IPv4 Legacy) Application logicielle (101fffff) -------------------------------- identificateur {863468e2-3a4f-11e4-be69-806e6f6e6963} description Internal Hard Disk or Solid State Disk Application logicielle (101fffff) -------------------------------- identificateur {aa089c35-163d-11ee-828d-a0481c1b6eb0} description USB Hard Drive - Samsung M3 Portable Chargeur de démarrage Windows ----------------------------- identificateur {4d8bebc7-3aa3-11e4-8ad4-947cdaeb8744} device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{4d8bebc8-3aa3-11e4-8ad4-947cdaeb8744} path \windows\system32\winload.efi description Windows Recovery Environment locale fr-FR inherit {bootloadersettings} displaymessage Recovery displaymessageoverride Recovery osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{4d8bebc8-3aa3-11e4-8ad4-947cdaeb8744} systemroot \windows nx OptIn bootmenupolicy Standard winpe Yes Chargeur de démarrage Windows ----------------------------- identificateur {current} device partition=C: path \WINDOWS\system32\winload.efi description Windows 10 locale fr-FR inherit {bootloadersettings} recoverysequence {d01a3762-5653-11ed-824e-d3505b6e4513} displaymessageoverride Recovery recoveryenabled Yes isolatedcontext Yes allowedinmemorysettings 0x15000075 osdevice partition=C: systemroot \WINDOWS resumeobject {566c5309-7ed3-11eb-81f4-c49c7e26f49b} nx OptIn bootmenupolicy Standard Chargeur de démarrage Windows ----------------------------- identificateur {d01a3762-5653-11ed-824e-d3505b6e4513} device ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{d01a3763-5653-11ed-824e-d3505b6e4513} path \windows\system32\winload.efi description Windows Recovery Environment locale fr-FR inherit {bootloadersettings} displaymessage Recovery osdevice ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{d01a3763-5653-11ed-824e-d3505b6e4513} systemroot \windows nx OptIn bootmenupolicy Standard winpe Yes Reprendre à partir de la mise en veille prolongée ------------------------------------------------- identificateur {566c5309-7ed3-11eb-81f4-c49c7e26f49b} device partition=C: path \WINDOWS\system32\winresume.efi description Windows Resume Application locale fr-FR inherit {resumeloadersettings} recoverysequence {d01a3762-5653-11ed-824e-d3505b6e4513} recoveryenabled Yes isolatedcontext Yes allowedinmemorysettings 0x15000075 filedevice partition=C: filepath \hiberfil.sys bootmenupolicy Standard debugoptionenabled No Testeur de mémoire Windows -------------------------- identificateur {memdiag} device partition=\Device\HarddiskVolume2 path \EFI\Microsoft\Boot\memtest.efi description Diagnostics mémoire Windows locale fr-FR inherit {globalsettings} badmemoryaccess Yes Paramètres EMS -------------- identificateur {emssettings} bootems No Paramètres du débogueur ----------------------- identificateur {dbgsettings} debugtype Serial debugport 1 baudrate 115200 Erreurs de mémoire RAM ---------------------- identificateur {badmemory} Paramètres globaux ------------------ identificateur {globalsettings} inherit {dbgsettings} {emssettings} {badmemory} Paramètres du chargeur de démarrage ----------------------------------- identificateur {bootloadersettings} inherit {globalsettings} {hypervisorsettings} Paramètres de l'hyperviseur ------------------- identificateur {hypervisorsettings} hypervisordebugtype Serial hypervisordebugport 1 hypervisorbaudrate 115200 Paramètres du chargeur de reprise --------------------------------- identificateur {resumeloadersettings} inherit {globalsettings} Options de périphérique ----------------------- identificateur {d01a3763-5653-11ed-824e-d3505b6e4513} description Windows Recovery ramdisksdidevice partition=\Device\HarddiskVolume5 ramdisksdipath \Recovery\WindowsRE\boot.sdi ==================== Fin de FRST.txt ========================