Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 10-11-2019
Exécuté par PLAY (administrateur) sur UTILISA-H6ZRS8Z (Hewlett-Packard HP EliteBook 8540w) (10-11-2019 15:25:18)
Exécuté depuis C:\Users\PLAY\Desktop
Profils chargés: PLAY (Profils disponibles: PLAY & evelyne)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(GameHouse Europe B.V. -> RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(Intel Corporation-Mobile Wireless Group -> Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation-Mobile Wireless Group -> Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\stacsv64.exe
(Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation -> ) C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation -> ) C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\Wondershare dr.fone\Library\DriverInstaller\DriverInstall.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645648 2019-10-05] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\...\Policies\Explorer: [NoSMBalloonTip] 1
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\JEWELQ~1.scr
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-10-11] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2017-09-04]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [Fichier non signé]
BootExecute: autocheck autochk * sdnclean64.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0B950EDA-598B-4D4C-9429-B6DAE7F42208} - System32\Tasks\Launch BitComet => C:\Program Files\BitComet\BitComet.exe
Task: {0E896866-C6A3-4116-B89E-6088F7DAB928} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {116A0485-9AB2-49F5-9828-E4B1844D6A98} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {219B9467-3826-4820-B5E4-62754251CE30} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {6242FBC1-86D1-4724-BB35-21CF21F4E7C4} - System32\Tasks\{6F67D56E-1A1D-43E5-AA2C-EB35FAF554BE} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4174.exe -d C:\Users\PLAY\Downloads
Task: {7C995F6F-1590-4551-B25E-5118D46417A0} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
Task: {914732AC-5A61-4927-8667-2C72EC6C65F2} - System32\Tasks\{0200C543-C033-4A94-8638-07D814E325CA} => C:\Windows\system32\pcalua.exe -a "E:\JEUX\JEUX\Book of Legends FR.exe" -d E:\JEUX\JEUX
Task: {A025916E-2A9D-422D-8217-2F329BABE132} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-10-09] (Adobe Inc. -> Adobe)
Task: {CEB613C9-75AC-48A9-923B-AA816AC07892} - System32\Tasks\{E0656419-F5B8-46F3-A2F5-659B04BBCBE5} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4198(2).exe -d C:\Users\PLAY\Downloads
Task: {CF822FAC-A437-4F84-B2DA-19B54FDB293F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1873288 2019-09-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {D393A906-B1C9-4F7A-9466-112260BD84B8} - System32\Tasks\Epson Printer Software Downloader => C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE [395160 2009-05-26] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {DA324711-9276-45BE-8518-556D70CDF95B} - System32\Tasks\{E3B9F7D7-E967-4B19-9F3B-620A0E2C18C5} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4198(1).exe -d C:\Users\PLAY\Downloads
Task: {DD767FA7-74ED-4AF6-B29B-3EE6E02E7365} - System32\Tasks\{31DABAE5-AEFA-49D3-AA78-8D86B62F7773} => C:\Windows\system32\pcalua.exe -a "C:\Users\PLAY\Documents\drivers hp 8540w\Pilote interface intel management 2012 sp54511.exe" -d "C:\Users\PLAY\Documents\drivers hp 8540w"
Task: {E4BCE909-743F-43BB-B0B8-1D8B67DB28FA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_270_Plugin.exe [1457720 2019-10-09] (Adobe Inc. -> Adobe)
Task: {EBE95E63-AEC7-4321-B0DB-021EA79984E3} - System32\Tasks\{1F9D8EB2-1714-4B02-9C42-26220CA9D370} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4198(3).exe -d C:\Users\PLAY\Downloads
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\Epson Printer Software Downloader.job => C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE
Task: C:\Windows\Tasks\{1DFA37AD-8808-5F34-23B3-01BA92E3DEFB}.job => C:\Users\PLAY\AppData\Local\UpdateTask\productupdt.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{2DD8DEC4-18BB-483B-8568-CB4146C2CD11}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{A71419D3-709A-4271-BB6C-6E01F8D7615E}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr
HKU\S-1-5-21-3335031210-1566165278-64582409-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11102019131150243\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://unattendshare.free.fr/index2.html
HKU\S-1-5-21-3335031210-1566165278-64582409-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11102019131150243\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://unattendshare.free.fr/index2.html
SearchScopes: HKLM -> DefaultScope {B8D84EE3-E402-4597-A32A-850C507DEFFF} URL =
SearchScopes: HKLM -> {B8D84EE3-E402-4597-A32A-850C507DEFFF} URL =
SearchScopes: HKLM -> {BC96D426-A9E4-4400-91C9-53DA440051C1} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {68E20E40-9712-4F24-B2AD-A4B8B747A4BA} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3335031210-1566165278-64582409-1000 -> DefaultScope {BC96D426-A9E4-4400-91C9-53DA440051C1} URL =
SearchScopes: HKU\S-1-5-21-3335031210-1566165278-64582409-1000 -> {BC96D426-A9E4-4400-91C9-53DA440051C1} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => Pas de fichier
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF DefaultProfile: 0mac0ae4.default-1559855190749
FF ProfilePath: C:\Users\PLAY\AppData\Roaming\Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749 [2019-11-10]
FF Homepage: Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749 -> hxxps://www.google.fr/
FF Notifications: Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749 -> hxxps://www.jetcost.com
FF Extension: (CIM Netpanel) - C:\Users\PLAY\AppData\Roaming\Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749\Extensions\netpanel@gemius.com.xpi [2019-11-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_270.dll [2019-10-09] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_270.dll [2019-10-09] (Adobe Inc. -> )
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2008-11-06] (DivX,Inc.) [Fichier non signé]
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll [2008-12-11] (DivX, Inc) [Fichier non signé]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-11] (Adobe Inc. -> Adobe Systems Inc.)
StartMenuInternet: FIREFOX.EXE - firefox.exe
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe [89600 2009-03-02] (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6085360 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-03-29] (Digital Wave Ltd -> Digital Wave Ltd.)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2019-11-08] (Malwarebytes Inc -> Malwarebytes)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2701880 2016-01-29] (NVIDIA Corporation -> )
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (GameHouse Europe B.V. -> RealNetworks, Inc.)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\STacSV64.exe [244736 2010-03-17] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH -> TeamViewer GmbH)
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2010-02-15] (Microsoft Corporation) [Fichier non signé]
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
R2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-07-09] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 WsDrvInst; C:\Program Files (x86)\Wondershare\Wondershare dr.fone\Library\DriverInstaller\DriverInstall.exe [130336 2019-09-02] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 PMBDeviceInfoProvider; "C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AgereSoftModem; C:\Windows\System32\DRIVERS\agrsm64.sys [1146880 2009-06-10] (Microsoft Windows -> LSI Corp)
R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [198144 2012-03-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [198144 2012-03-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37616 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [204824 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [274456 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [209552 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [65120 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42736 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [171520 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110320 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83792 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848432 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460448 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [236024 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316528 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2019-11-08] (Malwarebytes Corporation -> Malwarebytes)
S3 L1E; C:\Windows\System32\DRIVERS\L1E62x64.sys [54272 2009-06-20] (Microsoft Windows -> Atheros Communications, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [248480 2019-11-08] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [224408 2019-11-10] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [73584 2019-11-10] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [278344 2019-11-10] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [106344 2019-11-10] (Malwarebytes Corporation -> Malwarebytes)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [97792 2012-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [217600 2012-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R1 SCDEmu; C:\Windows\System32\Drivers\SCDEmu.sys [91568 2009-11-09] (Fenghua Lee -> PowerISO Computing, Inc.)
R3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [505856 2010-03-17] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) ===================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-11-10 15:25 - 2019-11-10 15:26 - 000022261 _____ C:\Users\PLAY\Desktop\FRST.txt
2019-11-10 15:23 - 2019-11-10 15:24 - 002260480 _____ (Farbar) C:\Users\PLAY\Desktop\FRST64.exe
2019-11-10 14:26 - 2019-11-10 14:25 - 000298060 _____ C:\Users\PLAY\Desktop\ZHPDiag.txt
2019-11-10 14:20 - 2019-11-10 14:20 - 003246976 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPDiag3.exe
2019-11-10 13:14 - 2019-11-10 13:14 - 000073584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-11-10 13:11 - 2019-11-10 13:11 - 000278344 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-11-10 13:11 - 2019-11-10 13:11 - 000224408 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-11-10 13:11 - 2019-11-10 13:11 - 000106344 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-11-10 13:09 - 2019-11-10 14:15 - 000006659 _____ C:\Users\PLAY\Desktop\ZHPFix.txt
2019-11-10 13:04 - 2019-11-10 13:04 - 000000819 _____ C:\Users\PLAY\Desktop\ZHPFix2.lnk
2019-11-10 13:03 - 2019-11-10 13:03 - 001707904 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPFix2.exe
2019-11-10 13:02 - 2019-11-10 13:02 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Sun
2019-11-10 13:02 - 2019-11-10 13:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-11-10 13:02 - 2019-11-10 13:01 - 000129080 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2019-11-10 13:01 - 2019-11-10 13:01 - 000000000 ____D C:\ProgramData\Oracle
2019-11-10 13:01 - 2019-11-10 13:01 - 000000000 ____D C:\Program Files\Java
2019-11-10 12:58 - 2019-11-10 12:59 - 076332064 _____ (Oracle Corporation) C:\Users\PLAY\Desktop\jre-8u231-windows-x64.exe
2019-11-08 18:22 - 2019-11-08 18:22 - 000248480 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-11-08 18:08 - 2019-11-08 18:08 - 000000000 ____D C:\Users\PLAY\AppData\Local\cache
2019-11-08 00:10 - 2019-11-08 00:10 - 000091705 _____ C:\Users\PLAY\Downloads\Shortcut.txt
2019-11-08 00:04 - 2019-11-08 00:10 - 000052994 _____ C:\Users\PLAY\Downloads\Addition.txt
2019-11-07 23:52 - 2019-11-10 15:26 - 000000000 ____D C:\FRST
2019-11-07 23:52 - 2019-11-07 23:52 - 002259968 _____ (Farbar) C:\Users\PLAY\Downloads\FRST64.exe
2019-11-07 23:45 - 2019-11-07 23:45 - 003244928 _____ (Nicolas Coolman) C:\Users\PLAY\Downloads\ZHPDiag3(1).exe
2019-11-04 11:30 - 2019-11-04 11:30 - 000000000 ____D C:\Users\PLAY\Desktop\assurances
2019-11-04 00:20 - 2011-04-18 12:40 - 002371467 _____ C:\Users\PLAY\Documents\Amber Maiden - Track3.wma
2019-11-04 00:20 - 2011-04-18 12:40 - 002066691 _____ C:\Users\PLAY\Documents\Amber Maiden - Track1.wma
2019-11-04 00:20 - 2011-04-18 12:40 - 001989003 _____ C:\Users\PLAY\Documents\Amber Maiden - Track4.wma
2019-11-04 00:20 - 2011-04-18 12:40 - 001445187 _____ C:\Users\PLAY\Documents\Amber Maiden - Track2.wma
2019-11-01 12:05 - 2019-11-01 12:05 - 000000000 ____D C:\Users\PLAY\AppData\Local\mbamtray
2019-11-01 12:05 - 2019-11-01 12:05 - 000000000 ____D C:\Users\PLAY\AppData\Local\mbam
2019-11-01 12:04 - 2019-11-08 18:22 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-11-01 12:04 - 2019-11-01 12:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-11-01 11:55 - 2019-11-01 11:56 - 024578944 _____ (Piriform Software Ltd) C:\Users\PLAY\Downloads\ccsetup563.exe
2019-10-31 17:34 - 2019-10-31 17:34 - 000000000 ____D C:\Users\PLAY\Documents\HiddenExpedition_TheCrownOfSolomonCE
2019-10-18 17:36 - 2019-10-18 17:36 - 032273722 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\mahjong-world-contest.exe
2019-10-14 15:30 - 2019-10-14 15:30 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-10-14 15:30 - 2019-10-14 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard
2019-10-14 15:29 - 2019-10-14 15:29 - 043259432 _____ (EaseUS ) C:\Users\PLAY\Downloads\DRW_trialRSS_easeus.exe
2019-10-14 15:29 - 2019-10-14 15:29 - 000000000 ____D C:\Program Files\EaseUS
2019-10-14 15:28 - 2019-10-14 15:29 - 001545472 _____ C:\Users\PLAY\Downloads\DRW_Trial_RSS_Installer_20191014.100000.exe
2019-10-12 17:35 - 2019-10-12 17:35 - 000000000 ____D C:\Users\PLAY\AppData\Local\WonderShare
2019-10-12 00:53 - 2019-10-14 17:15 - 000000000 ____D C:\Users\PLAY\AppData\Local\Everything
2019-10-12 00:46 - 2015-07-18 14:08 - 000984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2019-10-12 00:33 - 2019-10-12 00:45 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\DFXCT
2019-10-12 00:33 - 2019-10-12 00:33 - 002825160 _____ (DLL-Files.com Client ) C:\Users\PLAY\Downloads\clientsetup_d-0(1).exe
2019-10-12 00:32 - 2019-10-12 00:32 - 002825160 _____ (DLL-Files.com Client ) C:\Users\PLAY\Downloads\clientsetup_d-0.exe
2019-10-12 00:21 - 2019-10-12 00:21 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2019-10-12 00:19 - 2019-10-12 00:19 - 001002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2019-10-12 00:08 - 2019-10-12 00:08 - 000997600 _____ C:\Users\PLAY\Downloads\win-drfone_setup_full3360(1).exe
2019-10-12 00:00 - 2019-10-12 00:00 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Wondershare
2019-10-11 23:58 - 2019-10-11 23:58 - 000997600 _____ C:\Users\PLAY\Downloads\win-drfone_setup_full3360.exe
2019-10-11 19:25 - 2019-10-11 19:25 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(6).exe
2019-10-11 19:25 - 2019-10-11 19:25 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(5).exe
2019-10-11 19:08 - 2019-10-11 19:08 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(4).exe
2019-10-11 19:04 - 2019-10-14 17:15 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Everything
2019-10-11 19:04 - 2019-10-11 19:04 - 001482520 _____ () C:\Users\PLAY\Downloads\Everything-1.4.1.932.x86-Setup.exe
2019-10-11 19:04 - 2019-10-11 19:04 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything
2019-10-11 19:04 - 2019-10-11 19:04 - 000000000 ____D C:\Program Files (x86)\Everything
2019-10-11 18:59 - 2019-10-11 18:59 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4174(1).exe
2019-10-11 18:58 - 2019-10-11 18:58 - 000003170 _____ C:\Windows\system32\Tasks\{1F9D8EB2-1714-4B02-9C42-26220CA9D370}
2019-10-11 18:57 - 2019-10-11 18:57 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198(3).exe
2019-10-11 18:45 - 2019-10-11 18:45 - 000003164 _____ C:\Windows\system32\Tasks\{6F67D56E-1A1D-43E5-AA2C-EB35FAF554BE}
2019-10-11 18:44 - 2019-10-11 18:44 - 009304927 _____ C:\Users\PLAY\Downloads\recoverit_full4201.dmg
2019-10-11 18:44 - 2019-10-11 18:44 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4174.exe
2019-10-11 18:42 - 2019-10-11 19:07 - 000000000 ____D C:\Program Files\Wondershare
2019-10-11 18:42 - 2019-10-11 18:42 - 000003170 _____ C:\Windows\system32\Tasks\{E0656419-F5B8-46F3-A2F5-659B04BBCBE5}
2019-10-11 18:41 - 2019-10-11 18:41 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198(2).exe
2019-10-11 17:51 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2019-10-11 17:50 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\Wondershare
2019-10-11 17:50 - 2019-10-11 23:59 - 000000000 ____D C:\Program Files (x86)\Wondershare
2019-10-11 17:48 - 2019-10-12 00:09 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2019-10-11 17:48 - 2019-10-12 00:09 - 000000000 ____D C:\ProgramData\Documents\Wondershare
2019-10-11 17:47 - 2019-10-11 17:47 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198(1).exe
2019-10-11 17:47 - 2019-10-11 17:47 - 000003170 _____ C:\Windows\system32\Tasks\{E3B9F7D7-E967-4B19-9F3B-620A0E2C18C5}
2019-10-11 17:46 - 2019-10-11 17:46 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198.exe
2019-10-11 15:37 - 2019-10-11 15:37 - 000560388 _____ C:\Users\PLAY\Downloads\2_Privacypolicy_EN_BrowserExtension_AdReal_FR.pdf
2019-10-11 15:37 - 2019-10-11 15:37 - 000123361 _____ C:\Users\PLAY\Downloads\3_NetPanel_new_EN_BrowserExtension_add-adreal_FR.pdf
2019-10-11 00:53 - 2019-10-11 00:53 - 000000000 ____D C:\Users\PLAY\Documents\FonePaw
2019-10-11 00:19 - 2019-10-11 00:19 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(3).exe
2019-10-11 00:16 - 2019-10-11 00:17 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(2).exe
2019-10-11 00:12 - 2019-10-11 00:13 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(1).exe
2019-10-11 00:11 - 2019-11-01 11:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-10-10 23:54 - 2019-10-10 23:54 - 010479928 _____ (FonePaw ) C:\Users\PLAY\Downloads\data-recovery.exe
2019-10-10 23:34 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FonePaw
2019-10-10 23:34 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\FonePaw
2019-10-10 23:34 - 2019-10-11 00:17 - 000000000 ____D C:\Program Files (x86)\FonePaw
2019-10-10 23:34 - 2019-10-10 23:56 - 000000000 ____D C:\Users\PLAY\AppData\Local\FonePaw
2019-10-10 23:34 - 2019-10-10 23:34 - 000000000 ____D C:\Users\PLAY\.android
2019-10-10 23:33 - 2019-10-10 23:33 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery.exe
2019-10-10 08:07 - 2019-10-10 08:10 - 000000000 ____D C:\Users\PLAY\Desktop\ARCHIVES PHOTOS
2019-10-10 07:04 - 2019-10-10 16:24 - 000000000 ____D C:\Users\PLAY\Desktop\PHOTOS 2019 DIVERS
2019-10-10 06:50 - 2019-10-10 16:53 - 000000000 ____D C:\Users\PLAY\Desktop\PORTUGAL
2019-10-08 22:22 - 2019-10-08 22:22 - 000084528 _____ C:\Users\evelyne\AppData\Local\GDIPFONTCACHEV1.DAT
2019-10-05 13:12 - 2019-10-05 13:12 - 000001969 _____ C:\Users\Public\Desktop\Avast Antivirus Gratuit.lnk
2019-10-05 13:12 - 2019-10-05 13:12 - 000001969 _____ C:\ProgramData\Desktop\Avast Antivirus Gratuit.lnk
2019-10-04 18:57 - 2019-10-04 18:28 - 000355720 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-10-04 18:29 - 2019-10-04 18:28 - 000236024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2019-10-04 18:29 - 2019-10-04 18:28 - 000171520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2019-10-02 21:45 - 2019-10-06 17:17 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\DVDVideoSoft
2019-09-29 17:31 - 2019-10-08 22:21 - 000000000 ____D C:\Users\evelyne\AppData\LocalLow\Mozilla
2019-09-29 17:31 - 2019-09-29 17:31 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\Mozilla
2019-09-29 17:31 - 2019-09-29 17:31 - 000000000 ____D C:\Users\evelyne\AppData\Local\Mozilla
2019-09-24 16:58 - 2019-10-22 15:31 - 000000000 ____D C:\Windows\JewelQuest6Screensaver Uninstaller
2019-09-24 16:58 - 2011-09-20 12:33 - 004187062 _____ (Jan Kolarik & Ondrej Vaverka) C:\Windows\JewelQuest6Screensaver.scr
2019-09-22 16:05 - 2019-09-22 16:06 - 011128930 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\talismans-of-atlantis.exe
2019-09-21 09:41 - 2019-09-21 09:41 - 000000000 ____D C:\Users\Public\Documents\myrealgames
2019-09-21 09:41 - 2019-09-21 09:41 - 000000000 ____D C:\ProgramData\Documents\myrealgames
2019-09-21 09:36 - 2019-09-21 09:38 - 296920585 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest-mysteries-2-trail-of-the-midnight-heart.exe
2019-09-21 09:34 - 2019-09-21 09:36 - 116494615 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\downtown-secrets.exe
2019-09-21 09:34 - 2019-09-21 09:35 - 033229353 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-kingdom-prophecy.exe
2019-09-21 09:33 - 2019-09-21 09:35 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet(1).exe
2019-09-20 18:05 - 2019-09-20 18:05 - 009362164 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest.exe
2019-09-20 16:45 - 2019-09-20 16:45 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Funlinker
2019-09-20 15:59 - 2019-09-20 15:59 - 000000000 ____D C:\Users\Public\Documents\TheLostIncaProphecy
2019-09-20 15:59 - 2019-09-20 15:59 - 000000000 ____D C:\ProgramData\Documents\TheLostIncaProphecy
2019-09-20 15:58 - 2019-09-20 15:59 - 118583371 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\murder-in-new-york.exe
2019-09-20 15:58 - 2019-09-20 15:58 - 026468656 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-inca-prophecy.exe
2019-09-20 15:57 - 2019-09-20 15:57 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet.exe
2019-09-20 11:21 - 2019-10-18 17:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyRealGames.com
2019-09-20 11:21 - 2019-10-18 17:36 - 000000000 ____D C:\Program Files (x86)\MyRealGames.com
2019-09-20 11:20 - 2019-09-20 11:20 - 012446103 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\great-secrets-da-vinci.exe
2019-09-20 09:08 - 2019-09-20 09:08 - 000051988 _____ C:\Users\PLAY\Desktop\COMPTE CHEQUES 1.pdf
2019-09-14 15:44 - 2019-09-14 15:44 - 000000996 _____ C:\Users\Public\Desktop\FreeMi UPnP Media Server.lnk
2019-09-14 15:44 - 2019-09-14 15:44 - 000000996 _____ C:\ProgramData\Desktop\FreeMi UPnP Media Server.lnk
2019-09-14 15:44 - 2019-09-14 15:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMi UPnP Media Server
2019-09-14 15:44 - 2016-05-24 18:38 - 000445942 _____ C:\Users\PLAY\Desktop\Setup.exe
2019-09-14 15:43 - 2019-09-14 15:43 - 000420122 _____ C:\Users\PLAY\Downloads\FreeMiUPnP.zip
2019-09-14 15:42 - 2019-09-14 15:42 - 000887896 _____ (Microsoft Corporation) C:\Users\PLAY\Downloads\dotNetFx40_Client_setup(1).exe
2019-09-12 22:01 - 2019-09-12 22:01 - 002023056 _____ (CybelSoft) C:\Users\PLAY\Downloads\Drivers_UTILISA-H6ZRS8Z.exe
2019-09-12 21:58 - 2019-09-12 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2019-09-12 21:58 - 2019-09-12 21:58 - 000000000 ____D C:\ProgramData\DriversCloud.com
2019-09-12 21:58 - 2019-09-12 21:58 - 000000000 ____D C:\Program Files\DriversCloud.com
2019-09-12 21:57 - 2019-09-12 21:57 - 000239216 _____ C:\Users\PLAY\Downloads\DriversCloud_Win.exe
2019-09-09 07:54 - 2019-09-09 07:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2019-09-07 11:02 - 2019-09-07 11:02 - 000463528 _____ C:\Users\PLAY\Downloads\BoardingPass.pdf
2019-08-21 08:43 - 2019-08-21 08:43 - 000000000 ____D C:\Users\evelyne\AppData\Local\VirtualStore
2019-08-14 23:22 - 2019-08-14 23:22 - 000000000 ____D C:\Users\evelyne\AppData\LocalLow\Sun
2019-08-14 19:34 - 2019-08-14 19:34 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\AVAST Software
2019-08-14 19:34 - 2019-08-14 19:34 - 000000000 ____D C:\Users\evelyne\AppData\Local\CEF
2019-08-14 19:24 - 2019-08-14 19:24 - 000001459 _____ C:\Users\evelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2019-08-14 19:24 - 2019-08-14 19:24 - 000001385 _____ C:\Users\evelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2019-08-14 19:24 - 2019-08-14 19:24 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\Epson
2019-08-14 19:23 - 2019-10-05 13:12 - 000000000 ____D C:\Users\evelyne
2019-08-14 19:23 - 2019-08-14 19:23 - 000000020 ___SH C:\Users\evelyne\ntuser.ini
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Voisinage réseau
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Voisinage d'impression
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Modèles
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Mes documents
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Menu Démarrer
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Documents\Mes vidéos
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Documents\Mes images
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Documents\Ma musique
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\AppData\Local\Historique
2019-08-14 19:23 - 2017-08-30 08:26 - 000000000 ____D C:\Users\evelyne\AppData\Local\Microsoft Help
2019-08-14 19:23 - 2009-07-14 16:35 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\Media Center Programs
2019-08-14 19:17 - 2019-08-14 19:18 - 021320248 _____ (Adobe) C:\Users\PLAY\Downloads\install_flash_player.exe
2019-08-14 10:52 - 2019-08-14 10:52 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract(1).exe
2019-08-14 10:51 - 2019-08-14 10:51 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract.exe
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-11-10 15:18 - 2017-08-29 07:32 - 000000000 ____D C:\Users\PLAY\AppData\LocalLow\Mozilla
2019-11-10 14:25 - 2018-01-21 12:14 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\ZHP
2019-11-10 13:20 - 2009-07-14 05:45 - 000020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-11-10 13:20 - 2009-07-14 05:45 - 000020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-11-10 13:14 - 2017-08-29 07:48 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2019-11-10 13:11 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-11-10 13:04 - 2018-01-21 12:28 - 000000000 ____D C:\Users\PLAY\AppData\Local\ZHP
2019-11-10 12:17 - 2018-01-08 12:31 - 000000000 ___RD C:\Users\PLAY\Desktop\MAINTENANCE
2019-11-10 12:12 - 2018-01-08 12:24 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2019-11-10 12:10 - 2018-01-08 12:39 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2019-11-10 12:10 - 2018-01-08 12:35 - 000000706 _____ C:\Windows\wininit.ini
2019-11-10 11:18 - 2017-09-06 10:18 - 000000250 _____ C:\Windows\Tasks\Epson Printer Software Downloader.job
2019-11-09 00:50 - 2017-08-30 17:47 - 000000000 ____D C:\Users\PLAY\Desktop\Captvty
2019-11-08 18:12 - 2017-10-17 09:25 - 000000000 ____D C:\Program Files (x86)\Sony
2019-11-08 17:51 - 2018-01-08 12:21 - 000000000 ____D C:\AdwCleaner
2019-11-08 11:25 - 2017-09-10 18:50 - 000000000 ___RD C:\Users\PLAY\Desktop\MAISON
2019-11-04 09:50 - 2017-10-18 08:21 - 000000000 ____D C:\Users\PLAY\Documents\PDF mode emploi MATERIEL
2019-11-04 09:48 - 2017-09-29 16:46 - 000000000 ____D C:\Users\PLAY\AppData\LocalLow\Adobe
2019-11-04 00:21 - 2018-03-07 13:48 - 000000000 ____D C:\Users\PLAY\Desktop\NOUVEAUX JEUX
2019-11-04 00:21 - 2017-11-19 18:01 - 000000000 ____D C:\ProgramData\TEMP
2019-11-03 10:59 - 2010-02-15 08:44 - 000000000 ____D C:\Users\PLAY
2019-11-02 10:12 - 2009-07-14 16:24 - 000750650 _____ C:\Windows\system32\perfh00C.dat
2019-11-02 10:12 - 2009-07-14 16:24 - 000151264 _____ C:\Windows\system32\perfc00C.dat
2019-11-02 10:12 - 2009-07-14 06:13 - 001677362 _____ C:\Windows\system32\PerfStringBackup.INI
2019-11-02 10:12 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2019-11-02 10:04 - 2017-08-29 07:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-11-01 12:16 - 2018-01-20 00:58 - 000000000 ____D C:\Windows\Minidump
2019-11-01 12:14 - 2017-08-29 07:50 - 000000000 ____D C:\Program Files (x86)\Google
2019-11-01 11:58 - 2018-01-21 12:40 - 000003870 _____ C:\Windows\system32\Tasks\CCleaner Update
2019-11-01 11:58 - 2018-01-21 12:40 - 000000000 ____D C:\Program Files\CCleaner
2019-10-25 14:12 - 2018-07-12 14:58 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-10-23 19:47 - 2017-08-29 07:30 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\vlc
2019-10-18 17:38 - 2018-03-25 16:24 - 000000000 ____D C:\Users\PLAY\Documents\8floor
2019-10-16 10:46 - 2017-08-29 07:56 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2019-10-16 10:41 - 2010-02-15 08:52 - 000000000 ____D C:\Users\PLAY\AppData\Local\Adobe
2019-10-15 00:26 - 2018-02-16 16:20 - 000000000 ____D C:\BigFishCache
2019-10-14 15:38 - 2017-11-30 19:21 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\NVIDIA
2019-10-14 15:21 - 2017-10-25 15:06 - 000000000 ____D C:\Program Files\Recuva
2019-10-12 00:55 - 2009-07-14 05:45 - 000354544 _____ C:\Windows\system32\FNTCACHE.DAT
2019-10-11 18:50 - 2018-02-18 18:00 - 000000000 ____D C:\Program Files (x86)\Garmin
2019-10-11 18:40 - 2010-02-15 09:21 - 000085344 _____ C:\Users\PLAY\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Fichiers à la racine de certains dossiers ========
2018-03-06 01:47 - 2018-03-06 01:47 - 000000045 _____ () C:\Users\PLAY\AppData\Roaming\WB.CFG
2017-10-07 13:16 - 2017-10-07 13:16 - 000003584 _____ () C:\Users\PLAY\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheckExt =========================
2009-07-14 00:57 - 2010-02-14 10:00 - 028114432 ____R (Microsoft Corporation) C:\Windows\system32\imageres.dll
2009-07-14 00:54 - 2010-02-15 09:45 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2009-07-14 00:55 - 2010-02-15 09:45 - 000332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2017-09-04 00:15 - 1998-10-07 12:08 - 000327168 _____ (InstallShield Software Corporation) C:\Windows\IsUn040c.exe
2010-02-15 08:57 - 2003-03-15 23:15 - 000090112 _____ (MindVision Software) C:\Windows\unvise32.exe
2017-08-01 04:57 - 2009-12-14 09:03 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000684032 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivX.dll
2008-11-06 17:37 - 2008-11-06 17:37 - 000524288 _____ (DivX Inc.) C:\Windows\SysWOW64\DivXsm.exe
2008-11-06 17:33 - 2008-11-06 17:33 - 000012288 _____ C:\Windows\SysWOW64\DivXWMPExtType.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000823296 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx07.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000815104 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx0a.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000823296 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx0c.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000802816 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx11.dll
2008-12-11 01:33 - 2008-12-11 01:33 - 000086016 _____ (DivX, Inc.) C:\Windows\SysWOW64\dpl100.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000294912 _____ (DivXNetworks) C:\Windows\SysWOW64\dpu11.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000593920 _____ (DivXNetworks) C:\Windows\SysWOW64\dpuGUI11.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000344064 _____ (DivXNetworks) C:\Windows\SysWOW64\dpus11.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000057344 _____ (DivXNetworks) C:\Windows\SysWOW64\dpv11.dll
2008-12-11 01:33 - 2008-12-11 01:33 - 000200704 _____ (DivX, Inc.) C:\Windows\SysWOW64\dtu100.dll
2010-02-15 08:58 - 2008-07-04 18:23 - 001757184 ____R (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagX7.dll
2010-02-15 08:58 - 2008-07-04 18:23 - 000258048 ____R (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXR7.dll
2010-02-15 08:58 - 2008-07-04 18:23 - 000802816 ____R (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXRA7.dll
2008-11-06 17:35 - 2008-11-06 17:35 - 001044480 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libdivx.dll
2017-09-03 13:20 - 1997-07-17 07:39 - 000133904 ____N (Microsoft Corporation) C:\Windows\SysWOW64\mfcans32.dll
2017-09-03 13:20 - 1997-07-17 07:39 - 000108032 ____N (Microsoft Corporation) C:\Windows\SysWOW64\mfcuia32.dll
2017-11-19 18:24 - 2003-02-21 14:42 - 000348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2008-11-06 17:37 - 2008-11-06 17:37 - 003596288 _____ C:\Windows\SysWOW64\qt-dx331.dll
2017-09-03 13:20 - 1999-03-26 04:17 - 000108032 ____N C:\Windows\SysWOW64\sh33w32.dll
2017-11-19 18:24 - 1998-03-04 10:40 - 000083968 _____ (STOIK Software Ltd.) C:\Windows\SysWOW64\Skbase40.dll
2017-11-19 18:24 - 1998-07-09 19:41 - 000217088 _____ (STOIK Software) C:\Windows\SysWOW64\skjpeg40.dll
2008-11-06 17:35 - 2008-11-06 17:35 - 000200704 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssldivx.dll
2017-11-19 18:25 - 2004-03-09 09:39 - 000008704 _____ () C:\Windows\SysWOW64\vidccleaner.exe
2006-10-26 12:45 - 2006-10-26 12:45 - 000293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WISPTIS.EXE
2017-11-19 18:25 - 2005-12-14 15:10 - 000552960 _____ C:\Windows\SysWOW64\xvidcore.dll
2017-11-19 18:25 - 2005-12-14 15:08 - 000159744 _____ C:\Windows\SysWOW64\xvidvfw.dll
2019-11-10 15:23 - 2019-11-10 15:24 - 002260480 _____ (Farbar) C:\Users\PLAY\Desktop\FRST64.exe
2019-09-14 15:44 - 2016-05-24 18:38 - 000445942 _____ C:\Users\PLAY\Desktop\Setup.exe
2019-11-10 14:20 - 2019-11-10 14:20 - 003246976 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPDiag3.exe
2019-11-10 13:03 - 2019-11-10 13:03 - 001707904 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPFix2.exe
2017-12-03 14:26 - 2017-12-03 14:27 - 010957807 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.6.5.1-autoextract.exe
2018-01-22 19:27 - 2018-01-22 19:27 - 010960014 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.6.6-autoextract.exe
2018-02-12 19:27 - 2018-02-12 19:28 - 010948932 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.7.1.1-autoextract.exe
2018-02-26 12:04 - 2018-02-26 12:04 - 010944232 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.7.2-autoextract(1).exe
2018-02-26 12:03 - 2018-02-26 12:03 - 010944232 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.7.2-autoextract.exe
2019-08-14 10:52 - 2019-08-14 10:52 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract(1).exe
2019-08-14 10:51 - 2019-08-14 10:51 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract.exe
2019-09-21 09:34 - 2019-09-21 09:36 - 116494615 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\downtown-secrets.exe
2019-10-14 15:29 - 2019-10-14 15:29 - 043259432 _____ (EaseUS ) C:\Users\PLAY\Downloads\DRW_trialRSS_easeus.exe
2019-10-14 15:28 - 2019-10-14 15:29 - 001545472 _____ C:\Users\PLAY\Downloads\DRW_Trial_RSS_Installer_20191014.100000.exe
2018-03-06 08:40 - 2018-03-06 08:40 - 003389035 _____ C:\Users\PLAY\Downloads\eMule0.50a-Installer (1).exe
2018-03-06 08:37 - 2018-03-06 08:37 - 003389035 _____ C:\Users\PLAY\Downloads\eMule0.50a-Installer.exe
2017-09-03 09:47 - 2017-09-03 09:47 - 012872704 _____ C:\Users\PLAY\Downloads\epson323810eu.exe
2017-12-10 18:23 - 2016-05-24 19:37 - 000279552 _____ (Stéphane Mitermite) C:\Users\PLAY\Downloads\FreeMi UPnP Media Server.exe
2017-12-10 18:23 - 2016-05-24 19:37 - 000122368 _____ (Stéphane Mitermite) C:\Users\PLAY\Downloads\FreeMi.Core.dll
2017-12-10 18:23 - 2016-05-24 19:37 - 000029184 _____ (Stéphane Mitermite) C:\Users\PLAY\Downloads\FreeMi.UI.dll
2019-11-07 23:52 - 2019-11-07 23:52 - 002259968 _____ (Farbar) C:\Users\PLAY\Downloads\FRST64.exe
2019-09-20 11:20 - 2019-09-20 11:20 - 012446103 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\great-secrets-da-vinci.exe
2019-09-21 09:36 - 2019-09-21 09:38 - 296920585 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest-mysteries-2-trail-of-the-midnight-heart.exe
2019-09-20 18:05 - 2019-09-20 18:05 - 009362164 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest.exe
2019-10-18 17:36 - 2019-10-18 17:36 - 032273722 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\mahjong-world-contest.exe
2019-09-20 15:58 - 2019-09-20 15:59 - 118583371 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\murder-in-new-york.exe
2017-12-01 16:07 - 2017-12-01 16:07 - 000000000 _____ C:\Users\PLAY\Downloads\pdfreader10_2263405.exe
2019-09-22 16:05 - 2019-09-22 16:06 - 011128930 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\talismans-of-atlantis.exe
2019-09-20 15:58 - 2019-09-20 15:58 - 026468656 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-inca-prophecy.exe
2019-09-21 09:34 - 2019-09-21 09:35 - 033229353 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-kingdom-prophecy.exe
2019-09-21 09:33 - 2019-09-21 09:35 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet(1).exe
2019-09-20 15:57 - 2019-09-20 15:57 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet.exe
2017-12-10 18:23 - 2016-05-24 19:37 - 000196608 _____ () C:\Users\PLAY\Downloads\UPnP.dll
2018-03-08 01:06 - 2018-03-08 01:07 - 003097472 _____ C:\Users\PLAY\Downloads\ZHPCleaner(1).exe
2018-01-21 12:13 - 2018-01-21 12:14 - 002513920 _____ C:\Users\PLAY\Downloads\ZHPCleaner-2017.exe
2018-03-08 01:06 - 2018-03-08 01:06 - 003097472 _____ C:\Users\PLAY\Downloads\ZHPCleaner.exe
2019-11-07 23:45 - 2019-11-07 23:45 - 003244928 _____ (Nicolas Coolman) C:\Users\PLAY\Downloads\ZHPDiag3(1).exe
2018-01-21 12:27 - 2018-01-21 12:27 - 002965888 _____ C:\Users\PLAY\Downloads\ZHPDiag3.exe
2017-08-30 17:47 - 2017-08-30 17:47 - 010702699 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Documents\captvty-2.6.2-autoextract.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d�marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {7949e2e0-25f5-11e6-a14f-f7b637bb323e}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d�marrage Windows
-----------------------------
identificateur {7949e2da-25f5-11e6-a14f-f7b637bb323e}
device ramdisk=[C:]\Recovery\7949e2da-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2db-25f5-11e6-a14f-f7b637bb323e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7949e2da-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2db-25f5-11e6-a14f-f7b637bb323e}
systemroot \windows
nx OptIn
winpe Yes
Chargeur de d�marrage Windows
-----------------------------
identificateur {7949e2de-25f5-11e6-a14f-f7b637bb323e}
device ramdisk=[C:]\Recovery\7949e2de-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2df-25f5-11e6-a14f-f7b637bb323e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7949e2de-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2df-25f5-11e6-a14f-f7b637bb323e}
systemroot \windows
nx OptIn
winpe Yes
Chargeur de d�marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale fr-FR
inherit {bootloadersettings}
recoverysequence {7949e2e2-25f5-11e6-a14f-f7b637bb323e}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {7949e2e0-25f5-11e6-a14f-f7b637bb323e}
nx OptIn
Chargeur de d�marrage Windows
-----------------------------
identificateur {7949e2e2-25f5-11e6-a14f-f7b637bb323e}
device ramdisk=[C:]\Recovery\7949e2e2-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2e3-25f5-11e6-a14f-f7b637bb323e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7949e2e2-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2e3-25f5-11e6-a14f-f7b637bb323e}
systemroot \windows
nx OptIn
winpe Yes
Reprendre � partir de la mise en veille prolong�e
-------------------------------------------------
identificateur {7949e2e0-25f5-11e6-a14f-f7b637bb323e}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No
Testeur de m�moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m�moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
Param�tres EMS
--------------
identificateur {emssettings}
bootems Yes
Param�tres du d�bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m�moire RAM
----------------------
identificateur {badmemory}
Param�tres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Param�tres du chargeur de d�marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Param�tres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Param�tres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p�riph�rique
-----------------------
identificateur {7949e2db-25f5-11e6-a14f-f7b637bb323e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7949e2da-25f5-11e6-a14f-f7b637bb323e\boot.sdi
Options de p�riph�rique
-----------------------
identificateur {7949e2df-25f5-11e6-a14f-f7b637bb323e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7949e2de-25f5-11e6-a14f-f7b637bb323e\boot.sdi
Options de p�riph�rique
-----------------------
identificateur {7949e2e3-25f5-11e6-a14f-f7b637bb323e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7949e2e2-25f5-11e6-a14f-f7b637bb323e\boot.sdi
LastRegBack: 2019-11-09 00:40
==================== Fin de FRST.txt ========================
Exécuté par PLAY (administrateur) sur UTILISA-H6ZRS8Z (Hewlett-Packard HP EliteBook 8540w) (10-11-2019 15:25:18)
Exécuté depuis C:\Users\PLAY\Desktop
Profils chargés: PLAY (Profils disponibles: PLAY & evelyne)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Langue: Français (France)
Internet Explorer Version 8 (Navigateur par défaut: FF)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Systems) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\aswidsagent.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(AVAST Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(GameHouse Europe B.V. -> RealNetworks, Inc.) C:\Program Files (x86)\Online Games Manager\ogmservice.exe
(Intel Corporation-Mobile Wireless Group -> Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Intel Corporation-Mobile Wireless Group -> Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe
(Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.) C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\stacsv64.exe
(Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE
(Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION) C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(NVIDIA Corporation -> ) C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation -> ) C:\Windows\System32\nvwmi64.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Software Ltd -> Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Renesas Electronics Corporation -> Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\Wondershare dr.fone\Library\DriverInstaller\DriverInstall.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [268680 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [NUSB3MON] => c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [115048 2011-09-16] (Renesas Electronics Corporation -> Renesas Electronics Corporation)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645648 2019-10-05] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\...\Policies\Explorer: [NoSMBalloonTip] 1
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\JEWELQ~1.scr
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> "C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{A6EADE66-0000-0000-484E-7E8A45000000}] -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Esl\AiodLite.dll [2019-10-11] (Adobe Inc. -> Adobe Systems, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk [2017-09-04]
ShortcutTarget: Adobe Gamma Loader.lnk -> C:\Program Files (x86)\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.) [Fichier non signé]
BootExecute: autocheck autochk * sdnclean64.exe
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0B950EDA-598B-4D4C-9429-B6DAE7F42208} - System32\Tasks\Launch BitComet => C:\Program Files\BitComet\BitComet.exe
Task: {0E896866-C6A3-4116-B89E-6088F7DAB928} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {116A0485-9AB2-49F5-9828-E4B1844D6A98} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1240656 2019-09-10] (Adobe Inc. -> Adobe Systems)
Task: {219B9467-3826-4820-B5E4-62754251CE30} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {6242FBC1-86D1-4724-BB35-21CF21F4E7C4} - System32\Tasks\{6F67D56E-1A1D-43E5-AA2C-EB35FAF554BE} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4174.exe -d C:\Users\PLAY\Downloads
Task: {7C995F6F-1590-4551-B25E-5118D46417A0} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [3933576 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
Task: {914732AC-5A61-4927-8667-2C72EC6C65F2} - System32\Tasks\{0200C543-C033-4A94-8638-07D814E325CA} => C:\Windows\system32\pcalua.exe -a "E:\JEUX\JEUX\Book of Legends FR.exe" -d E:\JEUX\JEUX
Task: {A025916E-2A9D-422D-8217-2F329BABE132} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-10-09] (Adobe Inc. -> Adobe)
Task: {CEB613C9-75AC-48A9-923B-AA816AC07892} - System32\Tasks\{E0656419-F5B8-46F3-A2F5-659B04BBCBE5} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4198(2).exe -d C:\Users\PLAY\Downloads
Task: {CF822FAC-A437-4F84-B2DA-19B54FDB293F} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1873288 2019-09-19] (AVAST Software s.r.o. -> AVAST Software)
Task: {D393A906-B1C9-4F7A-9466-112260BD84B8} - System32\Tasks\Epson Printer Software Downloader => C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE [395160 2009-05-26] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
Task: {DA324711-9276-45BE-8518-556D70CDF95B} - System32\Tasks\{E3B9F7D7-E967-4B19-9F3B-620A0E2C18C5} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4198(1).exe -d C:\Users\PLAY\Downloads
Task: {DD767FA7-74ED-4AF6-B29B-3EE6E02E7365} - System32\Tasks\{31DABAE5-AEFA-49D3-AA78-8D86B62F7773} => C:\Windows\system32\pcalua.exe -a "C:\Users\PLAY\Documents\drivers hp 8540w\Pilote interface intel management 2012 sp54511.exe" -d "C:\Users\PLAY\Documents\drivers hp 8540w"
Task: {E4BCE909-743F-43BB-B0B8-1D8B67DB28FA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_270_Plugin.exe [1457720 2019-10-09] (Adobe Inc. -> Adobe)
Task: {EBE95E63-AEC7-4321-B0DB-021EA79984E3} - System32\Tasks\{1F9D8EB2-1714-4B02-9C42-26220CA9D370} => C:\Windows\system32\pcalua.exe -a C:\Users\PLAY\Downloads\recoverit_setup_full4198(3).exe -d C:\Users\PLAY\Downloads
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\Epson Printer Software Downloader.job => C:\Program Files (x86)\EPSON\EPAPDL\E_SAPDL2.EXE
Task: C:\Windows\Tasks\{1DFA37AD-8808-5F34-23B3-01BA92E3DEFB}.job => C:\Users\PLAY\AppData\Local\UpdateTask\productupdt.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{2DD8DEC4-18BB-483B-8568-CB4146C2CD11}: [DhcpNameServer] 212.27.40.241 212.27.40.240
Tcpip\..\Interfaces\{A71419D3-709A-4271-BB6C-6E01F8D7615E}: [DhcpNameServer] 192.168.1.1
Internet Explorer:
==================
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKU\S-1-5-21-3335031210-1566165278-64582409-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr
HKU\S-1-5-21-3335031210-1566165278-64582409-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11102019131150243\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://unattendshare.free.fr/index2.html
HKU\S-1-5-21-3335031210-1566165278-64582409-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11102019131150243\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://unattendshare.free.fr/index2.html
SearchScopes: HKLM -> DefaultScope {B8D84EE3-E402-4597-A32A-850C507DEFFF} URL =
SearchScopes: HKLM -> {B8D84EE3-E402-4597-A32A-850C507DEFFF} URL =
SearchScopes: HKLM -> {BC96D426-A9E4-4400-91C9-53DA440051C1} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {68E20E40-9712-4F24-B2AD-A4B8B747A4BA} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3335031210-1566165278-64582409-1000 -> DefaultScope {BC96D426-A9E4-4400-91C9-53DA440051C1} URL =
SearchScopes: HKU\S-1-5-21-3335031210-1566165278-64582409-1000 -> {BC96D426-A9E4-4400-91C9-53DA440051C1} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_231\bin\ssv.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_231\bin\jp2ssv.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre6\bin\jp2ssv.dll => Pas de fichier
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-20] (Microsoft Windows -> Microsoft Corporation)
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF DefaultProfile: 0mac0ae4.default-1559855190749
FF ProfilePath: C:\Users\PLAY\AppData\Roaming\Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749 [2019-11-10]
FF Homepage: Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749 -> hxxps://www.google.fr/
FF Notifications: Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749 -> hxxps://www.jetcost.com
FF Extension: (CIM Netpanel) - C:\Users\PLAY\AppData\Roaming\Mozilla\Firefox\Profiles\0mac0ae4.default-1559855190749\Extensions\netpanel@gemius.com.xpi [2019-11-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_270.dll [2019-10-09] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\dtplugin\npDeployJava1.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.231.2 -> C:\Program Files\Java\jre1.8.0_231\bin\plugin2\npjp2.dll [2019-11-10] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_270.dll [2019-10-09] (Adobe Inc. -> )
FF Plugin-x32: @divx.com/DivX Browser Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Web Player\npdivx32.dll [2008-11-06] (DivX,Inc.) [Fichier non signé]
FF Plugin-x32: @divx.com/DivX Player Plugin,version=1.0.0 -> C:\Program Files (x86)\DivX\DivX Player\npDivxPlayerPlugin.dll [2008-12-11] (DivX, Inc) [Fichier non signé]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-02-09] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-10-11] (Adobe Inc. -> Adobe Systems Inc.)
StartMenuInternet: FIREFOX.EXE - firefox.exe
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AESTFilters; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\AESTSr64.exe [89600 2009-03-02] (Microsoft Windows Hardware Compatibility Publisher -> Andrea Electronics Corporation)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\aswidsagent.exe [6085360 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [996880 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-03-29] (Digital Wave Ltd -> Digital Wave Ltd.)
R2 EPSON_EB_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40STB.EXE [163840 2007-12-17] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R2 EPSON_PM_RPCV4_01; C:\ProgramData\EPSON\EPW!3 SSRP\E_S40RPB.EXE [126464 2007-01-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6960640 2019-11-08] (Malwarebytes Inc -> Malwarebytes)
R2 NVWMI; C:\Windows\system32\nvwmi64.exe [2701880 2016-01-29] (NVIDIA Corporation -> )
R2 ogmservice; C:\Program Files (x86)\Online Games Manager\ogmservice.exe [582544 2016-07-13] (GameHouse Europe B.V. -> RealNetworks, Inc.)
R2 STacSV; C:\Windows\System32\DriverStore\FileRepository\stwrt64.inf_amd64_neutral_b20011ea53a6b83e\STacSV64.exe [244736 2010-03-17] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH -> TeamViewer GmbH)
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2010-02-15] (Microsoft Corporation) [Fichier non signé]
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
R2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-07-09] (Wondershare Technology Co.,Ltd -> Wondershare)
R2 WsDrvInst; C:\Program Files (x86)\Wondershare\Wondershare dr.fone\Library\DriverInstaller\DriverInstall.exe [130336 2019-09-02] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 PMBDeviceInfoProvider; "C:\Program Files (x86)\Sony\PlayMemories Home\PMBDeviceInfoProvider.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AgereSoftModem; C:\Windows\System32\DRIVERS\agrsm64.sys [1146880 2009-06-10] (Microsoft Windows -> LSI Corp)
R3 AMPPAL; C:\Windows\System32\DRIVERS\AMPPAL.sys [198144 2012-03-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 AMPPALP; C:\Windows\System32\DRIVERS\amppal.sys [198144 2012-03-15] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R0 aswArDisk; C:\Windows\System32\drivers\aswArDisk.sys [37616 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [204824 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdriver.sys [274456 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsh.sys [209552 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniv.sys [65120 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswKbd; C:\Windows\System32\drivers\aswKbd.sys [42736 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [171520 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [110320 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [83792 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [848432 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460448 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [236024 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [316528 2019-10-04] (AVAST Software s.r.o. -> AVAST Software)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153312 2019-11-08] (Malwarebytes Corporation -> Malwarebytes)
S3 L1E; C:\Windows\System32\DRIVERS\L1E62x64.sys [54272 2009-06-20] (Microsoft Windows -> Atheros Communications, Inc.)
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [248480 2019-11-08] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [224408 2019-11-10] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [73584 2019-11-10] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [278344 2019-11-10] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\System32\DRIVERS\mwac.sys [106344 2019-11-10] (Malwarebytes Corporation -> Malwarebytes)
R3 nusb3hub; C:\Windows\System32\DRIVERS\nusb3hub.sys [97792 2012-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R3 nusb3xhc; C:\Windows\System32\DRIVERS\nusb3xhc.sys [217600 2012-05-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
R1 SCDEmu; C:\Windows\System32\Drivers\SCDEmu.sys [91568 2009-11-09] (Fenghua Lee -> PowerISO Computing, Inc.)
R3 STHDA; C:\Windows\System32\DRIVERS\stwrt64.sys [505856 2010-03-17] (Microsoft Windows Hardware Compatibility Publisher -> IDT, Inc.)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) ===================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-11-10 15:25 - 2019-11-10 15:26 - 000022261 _____ C:\Users\PLAY\Desktop\FRST.txt
2019-11-10 15:23 - 2019-11-10 15:24 - 002260480 _____ (Farbar) C:\Users\PLAY\Desktop\FRST64.exe
2019-11-10 14:26 - 2019-11-10 14:25 - 000298060 _____ C:\Users\PLAY\Desktop\ZHPDiag.txt
2019-11-10 14:20 - 2019-11-10 14:20 - 003246976 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPDiag3.exe
2019-11-10 13:14 - 2019-11-10 13:14 - 000073584 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-11-10 13:11 - 2019-11-10 13:11 - 000278344 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-11-10 13:11 - 2019-11-10 13:11 - 000224408 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-11-10 13:11 - 2019-11-10 13:11 - 000106344 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-11-10 13:09 - 2019-11-10 14:15 - 000006659 _____ C:\Users\PLAY\Desktop\ZHPFix.txt
2019-11-10 13:04 - 2019-11-10 13:04 - 000000819 _____ C:\Users\PLAY\Desktop\ZHPFix2.lnk
2019-11-10 13:03 - 2019-11-10 13:03 - 001707904 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPFix2.exe
2019-11-10 13:02 - 2019-11-10 13:02 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Sun
2019-11-10 13:02 - 2019-11-10 13:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2019-11-10 13:02 - 2019-11-10 13:01 - 000129080 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2019-11-10 13:01 - 2019-11-10 13:01 - 000000000 ____D C:\ProgramData\Oracle
2019-11-10 13:01 - 2019-11-10 13:01 - 000000000 ____D C:\Program Files\Java
2019-11-10 12:58 - 2019-11-10 12:59 - 076332064 _____ (Oracle Corporation) C:\Users\PLAY\Desktop\jre-8u231-windows-x64.exe
2019-11-08 18:22 - 2019-11-08 18:22 - 000248480 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-11-08 18:08 - 2019-11-08 18:08 - 000000000 ____D C:\Users\PLAY\AppData\Local\cache
2019-11-08 00:10 - 2019-11-08 00:10 - 000091705 _____ C:\Users\PLAY\Downloads\Shortcut.txt
2019-11-08 00:04 - 2019-11-08 00:10 - 000052994 _____ C:\Users\PLAY\Downloads\Addition.txt
2019-11-07 23:52 - 2019-11-10 15:26 - 000000000 ____D C:\FRST
2019-11-07 23:52 - 2019-11-07 23:52 - 002259968 _____ (Farbar) C:\Users\PLAY\Downloads\FRST64.exe
2019-11-07 23:45 - 2019-11-07 23:45 - 003244928 _____ (Nicolas Coolman) C:\Users\PLAY\Downloads\ZHPDiag3(1).exe
2019-11-04 11:30 - 2019-11-04 11:30 - 000000000 ____D C:\Users\PLAY\Desktop\assurances
2019-11-04 00:20 - 2011-04-18 12:40 - 002371467 _____ C:\Users\PLAY\Documents\Amber Maiden - Track3.wma
2019-11-04 00:20 - 2011-04-18 12:40 - 002066691 _____ C:\Users\PLAY\Documents\Amber Maiden - Track1.wma
2019-11-04 00:20 - 2011-04-18 12:40 - 001989003 _____ C:\Users\PLAY\Documents\Amber Maiden - Track4.wma
2019-11-04 00:20 - 2011-04-18 12:40 - 001445187 _____ C:\Users\PLAY\Documents\Amber Maiden - Track2.wma
2019-11-01 12:05 - 2019-11-01 12:05 - 000000000 ____D C:\Users\PLAY\AppData\Local\mbamtray
2019-11-01 12:05 - 2019-11-01 12:05 - 000000000 ____D C:\Users\PLAY\AppData\Local\mbam
2019-11-01 12:04 - 2019-11-08 18:22 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-11-01 12:04 - 2019-11-01 12:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-11-01 11:55 - 2019-11-01 11:56 - 024578944 _____ (Piriform Software Ltd) C:\Users\PLAY\Downloads\ccsetup563.exe
2019-10-31 17:34 - 2019-10-31 17:34 - 000000000 ____D C:\Users\PLAY\Documents\HiddenExpedition_TheCrownOfSolomonCE
2019-10-18 17:36 - 2019-10-18 17:36 - 032273722 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\mahjong-world-contest.exe
2019-10-14 15:30 - 2019-10-14 15:30 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-10-14 15:30 - 2019-10-14 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Data Recovery Wizard
2019-10-14 15:29 - 2019-10-14 15:29 - 043259432 _____ (EaseUS ) C:\Users\PLAY\Downloads\DRW_trialRSS_easeus.exe
2019-10-14 15:29 - 2019-10-14 15:29 - 000000000 ____D C:\Program Files\EaseUS
2019-10-14 15:28 - 2019-10-14 15:29 - 001545472 _____ C:\Users\PLAY\Downloads\DRW_Trial_RSS_Installer_20191014.100000.exe
2019-10-12 17:35 - 2019-10-12 17:35 - 000000000 ____D C:\Users\PLAY\AppData\Local\WonderShare
2019-10-12 00:53 - 2019-10-14 17:15 - 000000000 ____D C:\Users\PLAY\AppData\Local\Everything
2019-10-12 00:46 - 2015-07-18 14:08 - 000984448 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000901264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-eventing-provider-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-eventing-provider-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll
2019-10-12 00:46 - 2015-07-18 14:08 - 000011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll
2019-10-12 00:33 - 2019-10-12 00:45 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\DFXCT
2019-10-12 00:33 - 2019-10-12 00:33 - 002825160 _____ (DLL-Files.com Client ) C:\Users\PLAY\Downloads\clientsetup_d-0(1).exe
2019-10-12 00:32 - 2019-10-12 00:32 - 002825160 _____ (DLL-Files.com Client ) C:\Users\PLAY\Downloads\clientsetup_d-0.exe
2019-10-12 00:21 - 2019-10-12 00:21 - 000000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01009.Wdf
2019-10-12 00:19 - 2019-10-12 00:19 - 001002728 _____ (Microsoft Corporation) C:\Windows\system32\WinUSBCoInstaller2.dll
2019-10-12 00:08 - 2019-10-12 00:08 - 000997600 _____ C:\Users\PLAY\Downloads\win-drfone_setup_full3360(1).exe
2019-10-12 00:00 - 2019-10-12 00:00 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Wondershare
2019-10-11 23:58 - 2019-10-11 23:58 - 000997600 _____ C:\Users\PLAY\Downloads\win-drfone_setup_full3360.exe
2019-10-11 19:25 - 2019-10-11 19:25 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(6).exe
2019-10-11 19:25 - 2019-10-11 19:25 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(5).exe
2019-10-11 19:08 - 2019-10-11 19:08 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(4).exe
2019-10-11 19:04 - 2019-10-14 17:15 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Everything
2019-10-11 19:04 - 2019-10-11 19:04 - 001482520 _____ () C:\Users\PLAY\Downloads\Everything-1.4.1.932.x86-Setup.exe
2019-10-11 19:04 - 2019-10-11 19:04 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Everything
2019-10-11 19:04 - 2019-10-11 19:04 - 000000000 ____D C:\Program Files (x86)\Everything
2019-10-11 18:59 - 2019-10-11 18:59 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4174(1).exe
2019-10-11 18:58 - 2019-10-11 18:58 - 000003170 _____ C:\Windows\system32\Tasks\{1F9D8EB2-1714-4B02-9C42-26220CA9D370}
2019-10-11 18:57 - 2019-10-11 18:57 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198(3).exe
2019-10-11 18:45 - 2019-10-11 18:45 - 000003164 _____ C:\Windows\system32\Tasks\{6F67D56E-1A1D-43E5-AA2C-EB35FAF554BE}
2019-10-11 18:44 - 2019-10-11 18:44 - 009304927 _____ C:\Users\PLAY\Downloads\recoverit_full4201.dmg
2019-10-11 18:44 - 2019-10-11 18:44 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4174.exe
2019-10-11 18:42 - 2019-10-11 19:07 - 000000000 ____D C:\Program Files\Wondershare
2019-10-11 18:42 - 2019-10-11 18:42 - 000003170 _____ C:\Windows\system32\Tasks\{E0656419-F5B8-46F3-A2F5-659B04BBCBE5}
2019-10-11 18:41 - 2019-10-11 18:41 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198(2).exe
2019-10-11 17:51 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2019-10-11 17:50 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\Wondershare
2019-10-11 17:50 - 2019-10-11 23:59 - 000000000 ____D C:\Program Files (x86)\Wondershare
2019-10-11 17:48 - 2019-10-12 00:09 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2019-10-11 17:48 - 2019-10-12 00:09 - 000000000 ____D C:\ProgramData\Documents\Wondershare
2019-10-11 17:47 - 2019-10-11 17:47 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198(1).exe
2019-10-11 17:47 - 2019-10-11 17:47 - 000003170 _____ C:\Windows\system32\Tasks\{E3B9F7D7-E967-4B19-9F3B-620A0E2C18C5}
2019-10-11 17:46 - 2019-10-11 17:46 - 001388272 _____ C:\Users\PLAY\Downloads\recoverit_setup_full4198.exe
2019-10-11 15:37 - 2019-10-11 15:37 - 000560388 _____ C:\Users\PLAY\Downloads\2_Privacypolicy_EN_BrowserExtension_AdReal_FR.pdf
2019-10-11 15:37 - 2019-10-11 15:37 - 000123361 _____ C:\Users\PLAY\Downloads\3_NetPanel_new_EN_BrowserExtension_add-adreal_FR.pdf
2019-10-11 00:53 - 2019-10-11 00:53 - 000000000 ____D C:\Users\PLAY\Documents\FonePaw
2019-10-11 00:19 - 2019-10-11 00:19 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(3).exe
2019-10-11 00:16 - 2019-10-11 00:17 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(2).exe
2019-10-11 00:12 - 2019-10-11 00:13 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery(1).exe
2019-10-11 00:11 - 2019-11-01 11:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2019-10-10 23:54 - 2019-10-10 23:54 - 010479928 _____ (FonePaw ) C:\Users\PLAY\Downloads\data-recovery.exe
2019-10-10 23:34 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FonePaw
2019-10-10 23:34 - 2019-11-01 12:13 - 000000000 ____D C:\ProgramData\FonePaw
2019-10-10 23:34 - 2019-10-11 00:17 - 000000000 ____D C:\Program Files (x86)\FonePaw
2019-10-10 23:34 - 2019-10-10 23:56 - 000000000 ____D C:\Users\PLAY\AppData\Local\FonePaw
2019-10-10 23:34 - 2019-10-10 23:34 - 000000000 ____D C:\Users\PLAY\.android
2019-10-10 23:33 - 2019-10-10 23:33 - 042729272 _____ (FonePaw ) C:\Users\PLAY\Downloads\android-data-recovery.exe
2019-10-10 08:07 - 2019-10-10 08:10 - 000000000 ____D C:\Users\PLAY\Desktop\ARCHIVES PHOTOS
2019-10-10 07:04 - 2019-10-10 16:24 - 000000000 ____D C:\Users\PLAY\Desktop\PHOTOS 2019 DIVERS
2019-10-10 06:50 - 2019-10-10 16:53 - 000000000 ____D C:\Users\PLAY\Desktop\PORTUGAL
2019-10-08 22:22 - 2019-10-08 22:22 - 000084528 _____ C:\Users\evelyne\AppData\Local\GDIPFONTCACHEV1.DAT
2019-10-05 13:12 - 2019-10-05 13:12 - 000001969 _____ C:\Users\Public\Desktop\Avast Antivirus Gratuit.lnk
2019-10-05 13:12 - 2019-10-05 13:12 - 000001969 _____ C:\ProgramData\Desktop\Avast Antivirus Gratuit.lnk
2019-10-04 18:57 - 2019-10-04 18:28 - 000355720 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2019-10-04 18:29 - 2019-10-04 18:28 - 000236024 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2019-10-04 18:29 - 2019-10-04 18:28 - 000171520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2019-10-02 21:45 - 2019-10-06 17:17 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\DVDVideoSoft
2019-09-29 17:31 - 2019-10-08 22:21 - 000000000 ____D C:\Users\evelyne\AppData\LocalLow\Mozilla
2019-09-29 17:31 - 2019-09-29 17:31 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\Mozilla
2019-09-29 17:31 - 2019-09-29 17:31 - 000000000 ____D C:\Users\evelyne\AppData\Local\Mozilla
2019-09-24 16:58 - 2019-10-22 15:31 - 000000000 ____D C:\Windows\JewelQuest6Screensaver Uninstaller
2019-09-24 16:58 - 2011-09-20 12:33 - 004187062 _____ (Jan Kolarik & Ondrej Vaverka) C:\Windows\JewelQuest6Screensaver.scr
2019-09-22 16:05 - 2019-09-22 16:06 - 011128930 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\talismans-of-atlantis.exe
2019-09-21 09:41 - 2019-09-21 09:41 - 000000000 ____D C:\Users\Public\Documents\myrealgames
2019-09-21 09:41 - 2019-09-21 09:41 - 000000000 ____D C:\ProgramData\Documents\myrealgames
2019-09-21 09:36 - 2019-09-21 09:38 - 296920585 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest-mysteries-2-trail-of-the-midnight-heart.exe
2019-09-21 09:34 - 2019-09-21 09:36 - 116494615 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\downtown-secrets.exe
2019-09-21 09:34 - 2019-09-21 09:35 - 033229353 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-kingdom-prophecy.exe
2019-09-21 09:33 - 2019-09-21 09:35 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet(1).exe
2019-09-20 18:05 - 2019-09-20 18:05 - 009362164 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest.exe
2019-09-20 16:45 - 2019-09-20 16:45 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\Funlinker
2019-09-20 15:59 - 2019-09-20 15:59 - 000000000 ____D C:\Users\Public\Documents\TheLostIncaProphecy
2019-09-20 15:59 - 2019-09-20 15:59 - 000000000 ____D C:\ProgramData\Documents\TheLostIncaProphecy
2019-09-20 15:58 - 2019-09-20 15:59 - 118583371 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\murder-in-new-york.exe
2019-09-20 15:58 - 2019-09-20 15:58 - 026468656 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-inca-prophecy.exe
2019-09-20 15:57 - 2019-09-20 15:57 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet.exe
2019-09-20 11:21 - 2019-10-18 17:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyRealGames.com
2019-09-20 11:21 - 2019-10-18 17:36 - 000000000 ____D C:\Program Files (x86)\MyRealGames.com
2019-09-20 11:20 - 2019-09-20 11:20 - 012446103 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\great-secrets-da-vinci.exe
2019-09-20 09:08 - 2019-09-20 09:08 - 000051988 _____ C:\Users\PLAY\Desktop\COMPTE CHEQUES 1.pdf
2019-09-14 15:44 - 2019-09-14 15:44 - 000000996 _____ C:\Users\Public\Desktop\FreeMi UPnP Media Server.lnk
2019-09-14 15:44 - 2019-09-14 15:44 - 000000996 _____ C:\ProgramData\Desktop\FreeMi UPnP Media Server.lnk
2019-09-14 15:44 - 2019-09-14 15:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeMi UPnP Media Server
2019-09-14 15:44 - 2016-05-24 18:38 - 000445942 _____ C:\Users\PLAY\Desktop\Setup.exe
2019-09-14 15:43 - 2019-09-14 15:43 - 000420122 _____ C:\Users\PLAY\Downloads\FreeMiUPnP.zip
2019-09-14 15:42 - 2019-09-14 15:42 - 000887896 _____ (Microsoft Corporation) C:\Users\PLAY\Downloads\dotNetFx40_Client_setup(1).exe
2019-09-12 22:01 - 2019-09-12 22:01 - 002023056 _____ (CybelSoft) C:\Users\PLAY\Downloads\Drivers_UTILISA-H6ZRS8Z.exe
2019-09-12 21:58 - 2019-09-12 21:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriversCloud.com
2019-09-12 21:58 - 2019-09-12 21:58 - 000000000 ____D C:\ProgramData\DriversCloud.com
2019-09-12 21:58 - 2019-09-12 21:58 - 000000000 ____D C:\Program Files\DriversCloud.com
2019-09-12 21:57 - 2019-09-12 21:57 - 000239216 _____ C:\Users\PLAY\Downloads\DriversCloud_Win.exe
2019-09-09 07:54 - 2019-09-09 07:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2019-09-07 11:02 - 2019-09-07 11:02 - 000463528 _____ C:\Users\PLAY\Downloads\BoardingPass.pdf
2019-08-21 08:43 - 2019-08-21 08:43 - 000000000 ____D C:\Users\evelyne\AppData\Local\VirtualStore
2019-08-14 23:22 - 2019-08-14 23:22 - 000000000 ____D C:\Users\evelyne\AppData\LocalLow\Sun
2019-08-14 19:34 - 2019-08-14 19:34 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\AVAST Software
2019-08-14 19:34 - 2019-08-14 19:34 - 000000000 ____D C:\Users\evelyne\AppData\Local\CEF
2019-08-14 19:24 - 2019-08-14 19:24 - 000001459 _____ C:\Users\evelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2019-08-14 19:24 - 2019-08-14 19:24 - 000001385 _____ C:\Users\evelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer (64-bit).lnk
2019-08-14 19:24 - 2019-08-14 19:24 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\Epson
2019-08-14 19:23 - 2019-10-05 13:12 - 000000000 ____D C:\Users\evelyne
2019-08-14 19:23 - 2019-08-14 19:23 - 000000020 ___SH C:\Users\evelyne\ntuser.ini
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Voisinage réseau
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Voisinage d'impression
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Modèles
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Mes documents
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Menu Démarrer
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Documents\Mes vidéos
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Documents\Mes images
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\Documents\Ma musique
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2019-08-14 19:23 - 2019-08-14 19:23 - 000000000 _SHDL C:\Users\evelyne\AppData\Local\Historique
2019-08-14 19:23 - 2017-08-30 08:26 - 000000000 ____D C:\Users\evelyne\AppData\Local\Microsoft Help
2019-08-14 19:23 - 2009-07-14 16:35 - 000000000 ____D C:\Users\evelyne\AppData\Roaming\Media Center Programs
2019-08-14 19:17 - 2019-08-14 19:18 - 021320248 _____ (Adobe) C:\Users\PLAY\Downloads\install_flash_player.exe
2019-08-14 10:52 - 2019-08-14 10:52 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract(1).exe
2019-08-14 10:51 - 2019-08-14 10:51 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract.exe
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2019-11-10 15:18 - 2017-08-29 07:32 - 000000000 ____D C:\Users\PLAY\AppData\LocalLow\Mozilla
2019-11-10 14:25 - 2018-01-21 12:14 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\ZHP
2019-11-10 13:20 - 2009-07-14 05:45 - 000020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2019-11-10 13:20 - 2009-07-14 05:45 - 000020480 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2019-11-10 13:14 - 2017-08-29 07:48 - 000004168 _____ C:\Windows\system32\Tasks\Avast Emergency Update
2019-11-10 13:11 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-11-10 13:04 - 2018-01-21 12:28 - 000000000 ____D C:\Users\PLAY\AppData\Local\ZHP
2019-11-10 12:17 - 2018-01-08 12:31 - 000000000 ___RD C:\Users\PLAY\Desktop\MAINTENANCE
2019-11-10 12:12 - 2018-01-08 12:24 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2019-11-10 12:10 - 2018-01-08 12:39 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2019-11-10 12:10 - 2018-01-08 12:35 - 000000706 _____ C:\Windows\wininit.ini
2019-11-10 11:18 - 2017-09-06 10:18 - 000000250 _____ C:\Windows\Tasks\Epson Printer Software Downloader.job
2019-11-09 00:50 - 2017-08-30 17:47 - 000000000 ____D C:\Users\PLAY\Desktop\Captvty
2019-11-08 18:12 - 2017-10-17 09:25 - 000000000 ____D C:\Program Files (x86)\Sony
2019-11-08 17:51 - 2018-01-08 12:21 - 000000000 ____D C:\AdwCleaner
2019-11-08 11:25 - 2017-09-10 18:50 - 000000000 ___RD C:\Users\PLAY\Desktop\MAISON
2019-11-04 09:50 - 2017-10-18 08:21 - 000000000 ____D C:\Users\PLAY\Documents\PDF mode emploi MATERIEL
2019-11-04 09:48 - 2017-09-29 16:46 - 000000000 ____D C:\Users\PLAY\AppData\LocalLow\Adobe
2019-11-04 00:21 - 2018-03-07 13:48 - 000000000 ____D C:\Users\PLAY\Desktop\NOUVEAUX JEUX
2019-11-04 00:21 - 2017-11-19 18:01 - 000000000 ____D C:\ProgramData\TEMP
2019-11-03 10:59 - 2010-02-15 08:44 - 000000000 ____D C:\Users\PLAY
2019-11-02 10:12 - 2009-07-14 16:24 - 000750650 _____ C:\Windows\system32\perfh00C.dat
2019-11-02 10:12 - 2009-07-14 16:24 - 000151264 _____ C:\Windows\system32\perfc00C.dat
2019-11-02 10:12 - 2009-07-14 06:13 - 001677362 _____ C:\Windows\system32\PerfStringBackup.INI
2019-11-02 10:12 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2019-11-02 10:04 - 2017-08-29 07:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2019-11-01 12:16 - 2018-01-20 00:58 - 000000000 ____D C:\Windows\Minidump
2019-11-01 12:14 - 2017-08-29 07:50 - 000000000 ____D C:\Program Files (x86)\Google
2019-11-01 11:58 - 2018-01-21 12:40 - 000003870 _____ C:\Windows\system32\Tasks\CCleaner Update
2019-11-01 11:58 - 2018-01-21 12:40 - 000000000 ____D C:\Program Files\CCleaner
2019-10-25 14:12 - 2018-07-12 14:58 - 000002471 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-10-23 19:47 - 2017-08-29 07:30 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\vlc
2019-10-18 17:38 - 2018-03-25 16:24 - 000000000 ____D C:\Users\PLAY\Documents\8floor
2019-10-16 10:46 - 2017-08-29 07:56 - 000004476 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2019-10-16 10:41 - 2010-02-15 08:52 - 000000000 ____D C:\Users\PLAY\AppData\Local\Adobe
2019-10-15 00:26 - 2018-02-16 16:20 - 000000000 ____D C:\BigFishCache
2019-10-14 15:38 - 2017-11-30 19:21 - 000000000 ____D C:\Users\PLAY\AppData\Roaming\NVIDIA
2019-10-14 15:21 - 2017-10-25 15:06 - 000000000 ____D C:\Program Files\Recuva
2019-10-12 00:55 - 2009-07-14 05:45 - 000354544 _____ C:\Windows\system32\FNTCACHE.DAT
2019-10-11 18:50 - 2018-02-18 18:00 - 000000000 ____D C:\Program Files (x86)\Garmin
2019-10-11 18:40 - 2010-02-15 09:21 - 000085344 _____ C:\Users\PLAY\AppData\Local\GDIPFONTCACHEV1.DAT
==================== Fichiers à la racine de certains dossiers ========
2018-03-06 01:47 - 2018-03-06 01:47 - 000000045 _____ () C:\Users\PLAY\AppData\Roaming\WB.CFG
2017-10-07 13:16 - 2017-10-07 13:16 - 000003584 _____ () C:\Users\PLAY\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheckExt =========================
2009-07-14 00:57 - 2010-02-14 10:00 - 028114432 ____R (Microsoft Corporation) C:\Windows\system32\imageres.dll
2009-07-14 00:54 - 2010-02-15 09:45 - 000044544 _____ (Microsoft Corporation) C:\Windows\system32\themeservice.dll
2009-07-14 00:55 - 2010-02-15 09:45 - 000332288 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2017-09-04 00:15 - 1998-10-07 12:08 - 000327168 _____ (InstallShield Software Corporation) C:\Windows\IsUn040c.exe
2010-02-15 08:57 - 2003-03-15 23:15 - 000090112 _____ (MindVision Software) C:\Windows\unvise32.exe
2017-08-01 04:57 - 2009-12-14 09:03 - 000053248 _____ (Windows XP Bundled build C-Centric Single User) C:\Windows\SysWOW64\CSVer.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000684032 _____ (DivX, Inc.) C:\Windows\SysWOW64\DivX.dll
2008-11-06 17:37 - 2008-11-06 17:37 - 000524288 _____ (DivX Inc.) C:\Windows\SysWOW64\DivXsm.exe
2008-11-06 17:33 - 2008-11-06 17:33 - 000012288 _____ C:\Windows\SysWOW64\DivXWMPExtType.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000823296 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx07.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000815104 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx0a.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000823296 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx0c.dll
2008-11-06 17:33 - 2008-11-06 17:33 - 000802816 _____ (DivX, Inc.) C:\Windows\SysWOW64\divx_xx11.dll
2008-12-11 01:33 - 2008-12-11 01:33 - 000086016 _____ (DivX, Inc.) C:\Windows\SysWOW64\dpl100.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000294912 _____ (DivXNetworks) C:\Windows\SysWOW64\dpu11.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000593920 _____ (DivXNetworks) C:\Windows\SysWOW64\dpuGUI11.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000344064 _____ (DivXNetworks) C:\Windows\SysWOW64\dpus11.dll
2008-12-09 03:28 - 2008-12-09 03:28 - 000057344 _____ (DivXNetworks) C:\Windows\SysWOW64\dpv11.dll
2008-12-11 01:33 - 2008-12-11 01:33 - 000200704 _____ (DivX, Inc.) C:\Windows\SysWOW64\dtu100.dll
2010-02-15 08:58 - 2008-07-04 18:23 - 001757184 ____R (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagX7.dll
2010-02-15 08:58 - 2008-07-04 18:23 - 000258048 ____R (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXR7.dll
2010-02-15 08:58 - 2008-07-04 18:23 - 000802816 ____R (Pegasus Imaging Corp.) C:\Windows\SysWOW64\imagXRA7.dll
2008-11-06 17:35 - 2008-11-06 17:35 - 001044480 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\libdivx.dll
2017-09-03 13:20 - 1997-07-17 07:39 - 000133904 ____N (Microsoft Corporation) C:\Windows\SysWOW64\mfcans32.dll
2017-09-03 13:20 - 1997-07-17 07:39 - 000108032 ____N (Microsoft Corporation) C:\Windows\SysWOW64\mfcuia32.dll
2017-11-19 18:24 - 2003-02-21 14:42 - 000348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2008-11-06 17:37 - 2008-11-06 17:37 - 003596288 _____ C:\Windows\SysWOW64\qt-dx331.dll
2017-09-03 13:20 - 1999-03-26 04:17 - 000108032 ____N C:\Windows\SysWOW64\sh33w32.dll
2017-11-19 18:24 - 1998-03-04 10:40 - 000083968 _____ (STOIK Software Ltd.) C:\Windows\SysWOW64\Skbase40.dll
2017-11-19 18:24 - 1998-07-09 19:41 - 000217088 _____ (STOIK Software) C:\Windows\SysWOW64\skjpeg40.dll
2008-11-06 17:35 - 2008-11-06 17:35 - 000200704 _____ (The OpenSSL Project, hxxp://www.openssl.org/) C:\Windows\SysWOW64\ssldivx.dll
2017-11-19 18:25 - 2004-03-09 09:39 - 000008704 _____ () C:\Windows\SysWOW64\vidccleaner.exe
2006-10-26 12:45 - 2006-10-26 12:45 - 000293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WISPTIS.EXE
2017-11-19 18:25 - 2005-12-14 15:10 - 000552960 _____ C:\Windows\SysWOW64\xvidcore.dll
2017-11-19 18:25 - 2005-12-14 15:08 - 000159744 _____ C:\Windows\SysWOW64\xvidvfw.dll
2019-11-10 15:23 - 2019-11-10 15:24 - 002260480 _____ (Farbar) C:\Users\PLAY\Desktop\FRST64.exe
2019-09-14 15:44 - 2016-05-24 18:38 - 000445942 _____ C:\Users\PLAY\Desktop\Setup.exe
2019-11-10 14:20 - 2019-11-10 14:20 - 003246976 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPDiag3.exe
2019-11-10 13:03 - 2019-11-10 13:03 - 001707904 _____ (Nicolas Coolman) C:\Users\PLAY\Desktop\ZHPFix2.exe
2017-12-03 14:26 - 2017-12-03 14:27 - 010957807 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.6.5.1-autoextract.exe
2018-01-22 19:27 - 2018-01-22 19:27 - 010960014 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.6.6-autoextract.exe
2018-02-12 19:27 - 2018-02-12 19:28 - 010948932 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.7.1.1-autoextract.exe
2018-02-26 12:04 - 2018-02-26 12:04 - 010944232 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.7.2-autoextract(1).exe
2018-02-26 12:03 - 2018-02-26 12:03 - 010944232 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.7.2-autoextract.exe
2019-08-14 10:52 - 2019-08-14 10:52 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract(1).exe
2019-08-14 10:51 - 2019-08-14 10:51 - 010570104 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Downloads\captvty-2.8-autoextract.exe
2019-09-21 09:34 - 2019-09-21 09:36 - 116494615 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\downtown-secrets.exe
2019-10-14 15:29 - 2019-10-14 15:29 - 043259432 _____ (EaseUS ) C:\Users\PLAY\Downloads\DRW_trialRSS_easeus.exe
2019-10-14 15:28 - 2019-10-14 15:29 - 001545472 _____ C:\Users\PLAY\Downloads\DRW_Trial_RSS_Installer_20191014.100000.exe
2018-03-06 08:40 - 2018-03-06 08:40 - 003389035 _____ C:\Users\PLAY\Downloads\eMule0.50a-Installer (1).exe
2018-03-06 08:37 - 2018-03-06 08:37 - 003389035 _____ C:\Users\PLAY\Downloads\eMule0.50a-Installer.exe
2017-09-03 09:47 - 2017-09-03 09:47 - 012872704 _____ C:\Users\PLAY\Downloads\epson323810eu.exe
2017-12-10 18:23 - 2016-05-24 19:37 - 000279552 _____ (Stéphane Mitermite) C:\Users\PLAY\Downloads\FreeMi UPnP Media Server.exe
2017-12-10 18:23 - 2016-05-24 19:37 - 000122368 _____ (Stéphane Mitermite) C:\Users\PLAY\Downloads\FreeMi.Core.dll
2017-12-10 18:23 - 2016-05-24 19:37 - 000029184 _____ (Stéphane Mitermite) C:\Users\PLAY\Downloads\FreeMi.UI.dll
2019-11-07 23:52 - 2019-11-07 23:52 - 002259968 _____ (Farbar) C:\Users\PLAY\Downloads\FRST64.exe
2019-09-20 11:20 - 2019-09-20 11:20 - 012446103 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\great-secrets-da-vinci.exe
2019-09-21 09:36 - 2019-09-21 09:38 - 296920585 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest-mysteries-2-trail-of-the-midnight-heart.exe
2019-09-20 18:05 - 2019-09-20 18:05 - 009362164 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\jewel-quest.exe
2019-10-18 17:36 - 2019-10-18 17:36 - 032273722 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\mahjong-world-contest.exe
2019-09-20 15:58 - 2019-09-20 15:59 - 118583371 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\murder-in-new-york.exe
2017-12-01 16:07 - 2017-12-01 16:07 - 000000000 _____ C:\Users\PLAY\Downloads\pdfreader10_2263405.exe
2019-09-22 16:05 - 2019-09-22 16:06 - 011128930 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\talismans-of-atlantis.exe
2019-09-20 15:58 - 2019-09-20 15:58 - 026468656 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-inca-prophecy.exe
2019-09-21 09:34 - 2019-09-21 09:35 - 033229353 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-lost-kingdom-prophecy.exe
2019-09-21 09:33 - 2019-09-21 09:35 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet(1).exe
2019-09-20 15:57 - 2019-09-20 15:57 - 089357836 _____ (My Real Games Ltd ) C:\Users\PLAY\Downloads\the-witchs-green-amulet.exe
2017-12-10 18:23 - 2016-05-24 19:37 - 000196608 _____ () C:\Users\PLAY\Downloads\UPnP.dll
2018-03-08 01:06 - 2018-03-08 01:07 - 003097472 _____ C:\Users\PLAY\Downloads\ZHPCleaner(1).exe
2018-01-21 12:13 - 2018-01-21 12:14 - 002513920 _____ C:\Users\PLAY\Downloads\ZHPCleaner-2017.exe
2018-03-08 01:06 - 2018-03-08 01:06 - 003097472 _____ C:\Users\PLAY\Downloads\ZHPCleaner.exe
2019-11-07 23:45 - 2019-11-07 23:45 - 003244928 _____ (Nicolas Coolman) C:\Users\PLAY\Downloads\ZHPDiag3(1).exe
2018-01-21 12:27 - 2018-01-21 12:27 - 002965888 _____ C:\Users\PLAY\Downloads\ZHPDiag3.exe
2017-08-30 17:47 - 2017-08-30 17:47 - 010702699 _____ (Oleg N. Scherbakov) C:\Users\PLAY\Documents\captvty-2.6.2-autoextract.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d�marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {7949e2e0-25f5-11e6-a14f-f7b637bb323e}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d�marrage Windows
-----------------------------
identificateur {7949e2da-25f5-11e6-a14f-f7b637bb323e}
device ramdisk=[C:]\Recovery\7949e2da-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2db-25f5-11e6-a14f-f7b637bb323e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7949e2da-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2db-25f5-11e6-a14f-f7b637bb323e}
systemroot \windows
nx OptIn
winpe Yes
Chargeur de d�marrage Windows
-----------------------------
identificateur {7949e2de-25f5-11e6-a14f-f7b637bb323e}
device ramdisk=[C:]\Recovery\7949e2de-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2df-25f5-11e6-a14f-f7b637bb323e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7949e2de-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2df-25f5-11e6-a14f-f7b637bb323e}
systemroot \windows
nx OptIn
winpe Yes
Chargeur de d�marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \Windows\system32\winload.exe
description Windows 7
locale fr-FR
inherit {bootloadersettings}
recoverysequence {7949e2e2-25f5-11e6-a14f-f7b637bb323e}
recoveryenabled Yes
osdevice partition=C:
systemroot \Windows
resumeobject {7949e2e0-25f5-11e6-a14f-f7b637bb323e}
nx OptIn
Chargeur de d�marrage Windows
-----------------------------
identificateur {7949e2e2-25f5-11e6-a14f-f7b637bb323e}
device ramdisk=[C:]\Recovery\7949e2e2-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2e3-25f5-11e6-a14f-f7b637bb323e}
path \windows\system32\winload.exe
description Windows Recovery Environment
inherit {bootloadersettings}
osdevice ramdisk=[C:]\Recovery\7949e2e2-25f5-11e6-a14f-f7b637bb323e\Winre.wim,{7949e2e3-25f5-11e6-a14f-f7b637bb323e}
systemroot \windows
nx OptIn
winpe Yes
Reprendre � partir de la mise en veille prolong�e
-------------------------------------------------
identificateur {7949e2e0-25f5-11e6-a14f-f7b637bb323e}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
filedevice partition=C:
filepath \hiberfil.sys
debugoptionenabled No
Testeur de m�moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m�moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
Param�tres EMS
--------------
identificateur {emssettings}
bootems Yes
Param�tres du d�bogueur
-----------------------
identificateur {dbgsettings}
debugtype Serial
debugport 1
baudrate 115200
Erreurs de m�moire RAM
----------------------
identificateur {badmemory}
Param�tres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
Param�tres du chargeur de d�marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
Param�tres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Param�tres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p�riph�rique
-----------------------
identificateur {7949e2db-25f5-11e6-a14f-f7b637bb323e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7949e2da-25f5-11e6-a14f-f7b637bb323e\boot.sdi
Options de p�riph�rique
-----------------------
identificateur {7949e2df-25f5-11e6-a14f-f7b637bb323e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7949e2de-25f5-11e6-a14f-f7b637bb323e\boot.sdi
Options de p�riph�rique
-----------------------
identificateur {7949e2e3-25f5-11e6-a14f-f7b637bb323e}
description Ramdisk Options
ramdisksdidevice partition=C:
ramdisksdipath \Recovery\7949e2e2-25f5-11e6-a14f-f7b637bb323e\boot.sdi
LastRegBack: 2019-11-09 00:40
==================== Fin de FRST.txt ========================