Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 31-03-2021
Exécuté par Guérande (administrateur) sur DESKTOP-7070TBN (Micro-Star International Co., Ltd. MS-7B85) (02-04-2021 17:58:27)
Exécuté depuis C:\Users\Guérande\Desktop
Profils chargés: Guérande
Platform: Windows 10 Home Version 20H2 19042.867 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0361901.inf_amd64_204a65b18f2a904a\B361909\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0361901.inf_amd64_204a65b18f2a904a\B361909\atiesrxx.exe
(A-Volute SAS -> A-Volute) C:\Users\Guérande\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe
(Discord Inc. -> Discord Inc.) C:\Users\Guérande\AppData\Local\Discord\app-0.0.309\Discord.exe <12>
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Extras\Overlay\EOSOverlayRenderer-Win64-Shipping.exe <3>
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Focusrite Audio Engineering, Ltd.) [Fichier non signé] C:\Program Files\Focusriteusb\Focusrite Notifier.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <13>
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) [Fichier non signé] C:\Windows\System32\IPROSetMonitor.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12101.1001.14.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.521.3093.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.521.3093.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20122.11121.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Psyonix, LLC -> Psyonix, LLC) Z:\rocketleague\Binaries\Win64\RocketLeague.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d87c47469b47c3f9\RtkAudUService64.exe <2>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d87c47469b47c3f9\RtkAudUService64.exe [1201448 2020-10-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusriteusb\Focusrite Notifier.exe [5029376 2020-06-02] (Focusrite Audio Engineering, Ltd.) [Fichier non signé]
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [353400 2021-01-22] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1263288 2018-02-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [C5E88E896239D60430B796AE9A0A92E28AFECB63._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Discord] => C:\Users\Guérande\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4087528 2021-03-23] (Valve -> Valve Corporation)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Spotify] => C:\Users\Guérande\AppData\Roaming\Spotify\Spotify.exe [23325416 2020-11-06] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Voicemod] => C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe [5125256 2021-01-18] (Voicemod Sociedad Limitada -> Voicemod)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [BakkesMod] => C:\Program Files\BakkesMod\BakkesMod.exe [16070656 2021-01-06] () [Fichier non signé]
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\MountPoints2: {a86ea466-d765-11ea-b975-00d861194cf0} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\MountPoints2: {e765f2d5-eec5-11ea-b987-4e7d4f53811e} - "E:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-02] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {1345247F-1FAE-4B57-BE42-6B5A5EC6F815} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2FF1A1A9-1D81-4F9F-983E-F1BDFE9F2607} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {33984C30-E81F-4E18-B1C6-B80259268043} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {34AE050E-148D-40D0-9A39-D7CD869FD427} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1710472 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {511ADFE6-BBF9-4946-9CFA-240F37726FAE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [152216 2019-01-12] (Google Inc -> Google Inc.)
Task: {80C528F2-E4AE-4B5B-AA35-2408EA45918C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [152216 2019-01-12] (Google Inc -> Google Inc.)
Task: {8A2D48A1-89F4-435C-BBDD-AF1C671FC521} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A4E23C94-E43F-475D-A2B6-BDC8B133478B} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {D394A22B-7F97-45AA-B6F2-F84423AA63CC} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {DB2ABA37-3484-49FB-B2D7-1ABDA5BAA269} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {DDD2E059-5D31-4223-92A9-8430AA71793C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1710472 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {E11CCB66-69D9-4D83-9283-6A72E004B665} - System32\Tasks\MSI_Toast_Server => C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe [30648 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {E243ED2B-D048-4862-BB90-8AF5CFC057E7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-05] (Piriform Software Ltd -> Piriform)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{4ff63713-f2db-46e0-bc2a-f56e52b4135b}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{d5ed46c1-51ce-4c98-b32b-9a03fc46b589}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{d984212b-7c43-459e-b6be-96e41accffe6}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\Guérande\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-02]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Guérande\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2021-02-06]
FireFox:
========
FF DefaultProfile: uehmc1n6.default
FF ProfilePath: C:\Users\Guérande\AppData\Roaming\Mozilla\Firefox\Profiles\uehmc1n6.default [2021-03-19]
FF ProfilePath: C:\Users\Guérande\AppData\Roaming\Mozilla\Firefox\Profiles\l6pkhnhi.default-release [2021-03-21]
FF Plugin: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2020-04-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2020-04-17] (Oracle America, Inc. -> Oracle Corporation)
Chrome:
=======
CHR Profile: C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default [2021-04-02]
CHR Extension: (Docs) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-11]
CHR Extension: (Google Drive) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-20]
CHR Extension: (YouTube) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-11]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-03-20]
CHR Extension: (Google Docs hors connexion) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-12]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-04-01]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-03-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-13]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2021-01-04] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-12-08] (GOG Sp. z o.o. -> GOG.com)
R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [505856 2018-01-31] (Intel Corporation) [Fichier non signé]
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [128976 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1633288 2020-12-09] (A-Volute SAS -> Nahimic)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2535000 2021-03-17] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3479640 2021-03-17] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2021-01-29] (Even Balance, Inc. -> )
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1631360 2020-12-02] (Rockstar Games, Inc. -> Rockstar Games)
R2 RtkAudioUniversalService; C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d87c47469b47c3f9\RtkAudUService64.exe [1201448 2020-10-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10091440 2021-01-22] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 Focusriteusb; C:\WINDOWS\System32\drivers\Focusriteusb.sys [123456 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R3 FocusriteusbSwRoot; C:\WINDOWS\System32\drivers\FocusriteusbSwRoot.sys [92568 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
S3 Focusriteusb_AUDIO; C:\WINDOWS\system32\drivers\FocusriteusbAudio.sys [87912 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2021-03-19] (Malwarebytes Corporation -> Malwarebytes)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85592 2020-01-17] (A-Volute -> Windows (R) Win 7 DDK provider)
R3 NAL; C:\Windows\system32\Drivers\iqvw64e.sys [50152 2017-10-18] (Intel(R) INTELND1617 -> Intel Corporation)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2020-04-08] (TunnelBear, Inc. -> The OpenVPN Project)
S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [5782360 2021-01-22] (Riot Games, Inc. -> Riot Games, Inc.)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\vmdrv.sys [48136 2021-01-18] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420072 2021-03-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-16] (Microsoft Windows -> Microsoft Corporation)
S2 AMDRyzenMasterDriver; \??\C:\Program Files\AMD\Performance Profile Client\RyzenMaster\AMDRyzenMasterDriver.sys [X]
S4 nvlddmkm; \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_db678424d2641c3d\nvlddmkm.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-02 17:58 - 2021-04-02 17:58 - 000020746 _____ C:\Users\Guérande\Desktop\FRST.txt
2021-04-02 17:57 - 2021-04-02 17:58 - 000000000 ____D C:\FRST
2021-04-02 17:56 - 2021-04-02 17:56 - 002298368 _____ (Farbar) C:\Users\Guérande\Desktop\FRST64.exe
2021-04-02 17:52 - 2021-04-02 17:52 - 000365483 _____ C:\Users\Guérande\Desktop\ZHPDiag.txt
2021-04-02 17:46 - 2021-04-02 17:52 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\ZHP
2021-04-02 17:46 - 2021-04-02 17:46 - 000000868 _____ C:\Users\Guérande\Desktop\ZHPSuite.lnk
2021-04-02 17:46 - 2021-04-02 17:46 - 000000000 ____D C:\Users\Guérande\AppData\Local\ZHP
2021-04-02 17:45 - 2021-04-02 17:45 - 003467416 _____ (Nicolas Coolman) C:\Users\Guérande\Desktop\ZHPSuite.exe
2021-03-26 06:45 - 2021-03-26 06:50 - 000000000 ____D C:\Users\Guérande\Desktop\Arr 2
2021-03-26 02:09 - 2021-03-26 02:09 - 076740060 _____ C:\Users\Guérande\Downloads\BJAM2_Win64.zip
2021-03-25 21:09 - 2021-03-25 21:09 - 000046287 _____ C:\Users\Guérande\Downloads\RHfactorlike.mscz
2021-03-25 20:13 - 2021-03-25 20:13 - 000021471 _____ C:\Users\Guérande\Downloads\Compo_style_RH_Factor_Chevallier_Amaury_L3C1.mscz
2021-03-22 18:36 - 2021-03-22 18:36 - 011983789 _____ C:\Users\Guérande\Downloads\BAYER-Chapitre Mathematisation de lespace sonore.zip
2021-03-20 01:05 - 2021-04-02 17:46 - 000000000 ____D C:\Program Files\CCleaner
2021-03-20 01:05 - 2021-04-02 16:46 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-03-20 01:05 - 2021-03-20 01:05 - 000002894 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-03-20 01:05 - 2021-03-20 01:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-03-20 01:04 - 2021-03-20 01:04 - 030972600 _____ (Piriform Software Ltd) C:\Users\Guérande\Downloads\ccsetup577.exe
2021-03-19 23:57 - 2021-03-19 23:57 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-03-19 23:40 - 2021-03-19 23:43 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-19 23:40 - 2021-03-19 23:42 - 000000000 ____D C:\Users\Guérande\AppData\LocalLow\Mozilla
2021-03-19 23:40 - 2021-03-19 23:40 - 000333208 _____ (Mozilla) C:\Users\Guérande\Downloads\Firefox Installer.exe
2021-03-19 23:40 - 2021-03-19 23:40 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Mozilla
2021-03-19 23:40 - 2021-03-19 23:40 - 000000000 ____D C:\Users\Guérande\AppData\Local\Mozilla
2021-03-19 21:51 - 2020-10-04 02:50 - 000000363 _____ C:\Users\Guérande\Desktop\Labs_Octagon_02_P.vdf
2021-03-19 21:51 - 2020-10-04 02:49 - 076158200 _____ C:\Users\Guérande\Desktop\Labs_Octagon_02_P.upk
2021-03-19 14:53 - 2021-03-19 14:53 - 000189814 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (4).pdf
2021-03-13 14:27 - 2021-03-13 14:27 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-13 14:27 - 2021-03-13 14:27 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-13 14:27 - 2021-03-13 14:27 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-13 14:27 - 2021-03-13 14:27 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-13 14:27 - 2021-03-13 14:27 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-13 14:27 - 2021-03-13 14:27 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-13 14:27 - 2021-03-13 14:27 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-13 14:27 - 2021-03-13 14:27 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-13 14:27 - 2021-03-13 14:27 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-13 14:27 - 2021-03-13 14:27 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-13 14:27 - 2021-03-13 14:27 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-12 16:31 - 2021-03-12 16:32 - 090238374 _____ C:\Users\Guérande\Downloads\drive-download-20210312T143113Z-001.zip
2021-03-12 16:12 - 2021-03-12 16:13 - 052596019 _____ C:\Users\Guérande\Downloads\drive-download-20210312T141216Z-001.zip
2021-03-11 22:47 - 2021-03-11 22:47 - 000087413 _____ C:\Users\Guérande\Downloads\ilovepdf_merged (1).pdf
2021-03-11 22:40 - 2021-03-11 22:48 - 000000000 ____D C:\Users\Guérande\Desktop\Devoir arr
2021-03-09 17:30 - 2021-03-09 17:30 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-03-09 13:05 - 2021-03-09 13:05 - 000189809 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (3).pdf
2021-03-04 23:28 - 2021-03-04 23:28 - 000077465 _____ C:\Users\Guérande\Downloads\Brief Encounter Guerande mollet (1).pdf
2021-03-04 14:53 - 2021-03-04 14:54 - 080242828 _____ C:\Users\Guérande\Downloads\AimTrainingRL.udk
2021-03-02 19:08 - 2021-03-02 19:08 - 000189728 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (2).pdf
2021-03-02 16:03 - 2021-03-02 16:04 - 048217898 _____ C:\Users\Guérande\Downloads\drive-download-20210302T140332Z-001.zip
2021-02-28 20:19 - 2021-02-28 20:19 - 000047394 _____ C:\Users\Guérande\Downloads\EDT LC S2 (2).pdf
2021-02-17 18:34 - 2021-02-17 18:34 - 000068272 _____ C:\Users\Guérande\Downloads\Devis D21020120.pdf
2021-02-16 20:42 - 2021-02-16 20:43 - 157002329 _____ C:\Users\Guérande\Downloads\Sonatina_Choir_-_64.zip
2021-02-16 20:41 - 2021-02-16 20:42 - 024035160 _____ C:\Users\Guérande\Downloads\DSK_ChoirZ.zip
2021-02-16 20:40 - 2021-02-16 20:41 - 134168295 _____ C:\Users\Guérande\Downloads\NST_Vocal_Win_64.zip
2021-02-10 17:10 - 2021-02-10 17:10 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BakkesMod.lnk
2021-02-10 17:10 - 2021-02-10 17:10 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\bakkesmod
2021-02-10 17:10 - 2021-02-10 17:10 - 000000000 ____D C:\Program Files\BakkesMod
2021-02-10 17:09 - 2021-02-10 17:09 - 008097994 _____ C:\Users\Guérande\Downloads\BakkesModSetup.zip
2021-02-09 16:40 - 2021-02-09 16:40 - 044694954 _____ C:\Users\Guérande\Downloads\drive-download-20210209T144011Z-001.zip
2021-02-04 18:52 - 2021-02-04 18:53 - 072057118 _____ C:\Users\Guérande\Downloads\drive-download-20210204T165217Z-001.zip
2021-02-04 18:51 - 2021-02-04 18:51 - 002335877 _____ C:\Users\Guérande\Downloads\Labs_Underpass_P.upk
2021-02-04 18:51 - 2021-02-04 18:51 - 002244549 _____ C:\Users\Guérande\Downloads\Labs_Octagon_02_P.upk
2021-02-04 18:51 - 2021-02-04 18:51 - 001708107 _____ C:\Users\Guérande\Downloads\Labs_DoubleGoal_V2_P.upk
2021-02-04 18:41 - 2021-03-12 16:15 - 000000000 ____D C:\Users\Guérande\Desktop\Map training
2021-02-04 18:40 - 2021-02-04 18:40 - 053024701 _____ C:\Users\Guérande\Downloads\drive-download-20210204T164009Z-001.zip
2021-02-04 18:30 - 2021-02-04 18:30 - 034993877 _____ C:\Users\Guérande\Downloads\r1.udk
2021-02-04 18:29 - 2021-02-04 18:29 - 058912641 _____ C:\Users\Guérande\Downloads\Labs_CirclePillars_P.upk
2021-02-04 18:28 - 2021-02-09 16:41 - 000000000 ____D C:\Users\Guérande\Desktop\Bien au chaud
2021-02-04 18:28 - 2021-02-04 18:28 - 002529451 _____ C:\Users\Guérande\Downloads\Labs_Utopia_P.upk
2021-02-01 01:47 - 2021-02-01 01:49 - 102252340 _____ C:\Users\Guérande\Downloads\2850-Save GTA5 Ultra Full Complete.zip
2021-01-31 22:12 - 2021-01-31 22:12 - 000034027 _____ C:\Users\Guérande\Downloads\Brief Encounter Guerande mollet.pdf
2021-01-31 21:58 - 2021-01-31 21:58 - 000034027 _____ C:\Users\Guérande\Desktop\Brief Encounter Guerande mollet.pdf
2021-01-31 21:34 - 2021-01-31 21:34 - 000189603 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (1).pdf
2021-01-31 14:27 - 2021-01-31 14:27 - 000076637 _____ C:\Users\Guérande\Downloads\Es9Wq_zUYAAyj1j.jfif
2021-01-31 14:02 - 2021-01-31 14:02 - 000031146 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet (3).odt
2021-01-31 12:25 - 2021-01-31 12:25 - 000031146 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet (2).odt
2021-01-31 00:03 - 2021-01-31 00:06 - 000000000 ____D C:\Users\Guérande\Documents\Rockstar Games
2021-01-31 00:03 - 2021-01-31 00:06 - 000000000 ____D C:\Users\Guérande\AppData\Local\Rockstar Games
2021-01-31 00:02 - 2021-01-31 00:02 - 000001065 _____ C:\Users\Guérande\Desktop\Rockstar Games Launcher.lnk
2021-01-31 00:02 - 2021-01-31 00:02 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2021-01-31 00:02 - 2021-01-31 00:02 - 000000000 ____D C:\ProgramData\Rockstar Games
2021-01-31 00:00 - 2021-01-31 00:03 - 000000000 ____D C:\Program Files\Rockstar Games
2021-01-31 00:00 - 2021-01-31 00:03 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2021-01-30 22:41 - 2021-01-30 22:41 - 000023708 _____ C:\Users\Guérande\Downloads\Mollet_Guerande.pdf
2021-01-30 22:41 - 2021-01-30 22:41 - 000021753 _____ C:\Users\Guérande\Downloads\Guerande_mollet.pdf
2021-01-30 22:24 - 2021-01-30 22:24 - 000030434 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet (1).odt
2021-01-30 19:32 - 2021-01-30 19:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher Enhanced Edition [GOG.com]
2021-01-30 19:32 - 2021-01-30 19:32 - 000000000 ____D C:\ProgramData\Documents\The Witcher
2021-01-30 18:56 - 2020-12-10 22:04 - 000001235 _____ C:\Users\Guérande\Desktop\GOG GALAXY.lnk
2021-01-30 18:53 - 2021-01-30 18:53 - 000000219 _____ C:\Users\Guérande\Desktop\Team Fortress 2.url
2021-01-30 18:15 - 2021-01-30 18:15 - 000000233 _____ C:\Users\Guérande\Desktop\Assassin's Creed IV Black Flag (Singleplayer).url
2021-01-30 17:58 - 2021-01-30 17:58 - 000000222 _____ C:\Users\Guérande\Desktop\Microsoft Flight Simulator X Steam Edition.url
2021-01-30 17:58 - 2021-01-30 17:58 - 000000222 _____ C:\Users\Guérande\Desktop\Among Us.url
2021-01-30 17:57 - 2020-10-30 00:25 - 000001054 _____ C:\Users\Guérande\Desktop\Steam.lnk
2021-01-30 17:53 - 2021-01-30 00:27 - 000001480 _____ C:\Users\Guérande\Desktop\Cyberpunk 2077.lnk
2021-01-30 17:50 - 2021-01-30 17:50 - 000000000 ____D C:\Users\Guérande\Desktop\SLD
2021-01-30 17:49 - 2021-01-30 17:49 - 000000219 _____ C:\Users\Guérande\Desktop\Counter-Strike Global Offensive.url
2021-01-30 17:22 - 2021-01-30 17:22 - 000000220 _____ C:\Users\Guérande\Desktop\BioShock Infinite.url
2021-01-30 16:54 - 2021-01-30 16:54 - 000001490 _____ C:\Users\Guérande\Desktop\Goat Simulator Windows 10.lnk
2021-01-30 16:18 - 2021-01-30 16:18 - 000001159 _____ C:\Users\Guérande\Desktop\Sea of Thieves.lnk
2021-01-30 13:33 - 2021-01-31 21:58 - 000019974 _____ C:\Users\Guérande\Desktop\Guerande mollet 2.odt
2021-01-30 13:07 - 2021-01-30 14:55 - 008781704 _____ C:\Users\Guérande\Downloads\Rachmaninov_-_Piano_Concerto_n.2_c_(2P_ed.Gutheil).pdf
2021-01-30 13:02 - 2021-01-30 13:02 - 037444883 _____ C:\Users\Guérande\Downloads\1-01 RACHMANINOV Piano Concerto 2 - 1st mvt. - Moderato - Allegro.flac
2021-01-30 12:48 - 2021-01-30 12:48 - 000016028 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet.odt
2021-01-30 03:33 - 2021-01-30 03:33 - 000000278 _____ C:\Users\Guérande\Desktop\Grand Theft Auto V.url
2021-01-30 03:27 - 2021-02-06 22:19 - 000000000 ____D C:\Users\Guérande\Documents\STAR WARS Battlefront II
2021-01-30 03:27 - 2021-01-30 03:27 - 000000000 ____D C:\Users\Guérande\AppData\Local\STAR WARS Battlefront II
2021-01-30 03:25 - 2021-01-30 03:25 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2021-01-30 00:50 - 2021-01-30 00:50 - 000000000 ____D C:\Users\Guérande\AppData\Local\INetHistory
2021-01-30 00:43 - 2021-03-11 14:16 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-01-30 00:42 - 2021-01-30 00:42 - 008673152 _____ () C:\Users\Guérande\Downloads\XboxInstaller.exe
2021-01-30 00:27 - 2021-01-30 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberpunk 2077 [GOG.com]
2021-01-29 20:22 - 2021-01-29 20:22 - 000000000 ____D C:\ProgramData\Documents\NI Resources
2021-01-29 20:21 - 2021-01-29 20:21 - 000000000 ____D C:\ProgramData\Documents\Native Instruments
2021-01-29 20:07 - 2021-01-29 20:07 - 000000000 __HDC C:\ProgramData\{94B1BDC0-FBC9-4D64-9187-3386227F53F3}
2021-01-29 19:43 - 2021-01-29 19:43 - 000000273 _____ C:\Users\Guérande\Desktop\Rocket League®.url
2021-01-29 12:42 - 2021-01-29 12:42 - 000002748 _____ C:\Users\Guérande\Downloads\message (1).txt
2021-01-29 10:58 - 2021-01-29 10:58 - 000047394 _____ C:\Users\Guérande\Downloads\EDT LC S2 (1).pdf
2021-01-28 23:56 - 2021-01-28 23:56 - 000000000 _____ C:\Users\Guérande\Desktop\Film.txt
2021-01-28 23:31 - 2021-01-28 23:31 - 000000000 ____D C:\Users\Guérande\Desktop\Master
2021-01-28 17:03 - 2021-01-28 17:03 - 000149101 _____ C:\Users\Guérande\Downloads\Adrien_Quintane (1).pdf
2021-01-28 16:56 - 2021-01-28 16:56 - 000149101 _____ C:\Users\Guérande\Downloads\Adrien_Quintane.pdf
2021-01-28 16:48 - 2021-01-28 16:48 - 000091107 _____ C:\Users\Guérande\Downloads\Commentaire_partiel_histoire.pdf
2021-01-28 16:42 - 2021-01-28 16:42 - 000012463 _____ C:\Users\Guérande\Downloads\Annexe1.pdf
2021-01-28 16:42 - 2021-01-28 16:42 - 000011410 _____ C:\Users\Guérande\Downloads\Annexe2.pdf
2021-01-28 15:42 - 2021-01-28 15:42 - 000012475 _____ C:\Users\Guérande\Downloads\Theme1.pdf
2021-01-28 15:13 - 2021-01-28 15:13 - 000807778 _____ C:\Users\Guérande\Downloads\polytonalite2.PDF
2021-01-28 15:13 - 2021-01-28 15:13 - 000490124 _____ C:\Users\Guérande\Downloads\polytonalite1.PDF
2021-01-28 14:46 - 2021-01-28 14:46 - 000023019 _____ C:\Users\Guérande\Downloads\consignes_EXAMEN.pdf
2021-01-28 13:29 - 2021-01-28 13:29 - 000066135 _____ C:\Users\Guérande\Downloads\Cours #3.odt
2021-01-28 13:06 - 2021-01-28 13:06 - 000061227 _____ C:\Users\Guérande\Downloads\Cours généraliste II (1).odt
2021-01-26 23:36 - 2021-01-26 23:36 - 000000000 ____D C:\Users\Guérande\AppData\Local\VALORANT
2021-01-26 23:35 - 2021-03-13 16:58 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2021-01-26 23:11 - 2021-01-26 23:11 - 000000000 ____D C:\Program Files\Riot Vanguard
2021-01-26 23:09 - 2021-01-26 23:09 - 068746984 _____ (Riot Games, Inc.) C:\Users\Guérande\Downloads\Install VALORANT.exe
2021-01-25 21:02 - 2021-02-14 16:05 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-01-24 23:08 - 2021-01-24 23:11 - 072909744 _____ C:\Users\Guérande\Downloads\Vidéo Def analyse 1080p.mp4
2021-01-22 21:36 - 2021-01-22 21:36 - 000000000 ____D C:\Users\Guérande\AppData\Local\CefSharp
2021-01-22 21:35 - 2021-01-24 23:20 - 000000000 ____D C:\ProgramData\Voicemod
2021-01-22 21:35 - 2021-01-22 21:36 - 000000000 ____D C:\Users\Guérande\AppData\Local\Voicemod
2021-01-22 21:35 - 2021-01-22 21:35 - 067471720 _____ (Voicemod S.L. ) C:\Users\Guérande\Downloads\VoicemodSetup_2.5.0.5.exe
2021-01-22 21:35 - 2021-01-22 21:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod
2021-01-22 21:35 - 2021-01-22 21:35 - 000000000 ____D C:\Program Files\Voicemod Desktop
2021-01-22 21:35 - 2021-01-18 13:30 - 000048136 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\vmdrv.sys
2021-01-22 07:05 - 2021-01-22 07:05 - 000189608 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020.pdf
2021-01-22 00:35 - 2021-01-22 00:35 - 000047394 _____ C:\Users\Guérande\Downloads\EDT LC S2.pdf
2021-01-22 00:06 - 2021-01-22 00:06 - 000079567 _____ C:\Users\Guérande\Downloads\Jenny_Wren_Arrangement.pdf
2021-01-21 23:57 - 2021-01-21 23:57 - 000041476 _____ C:\Users\Guérande\Downloads\Jenny_Wren_Arrangement-Guitare_Clef_de_Sol.pdf
2021-01-20 16:00 - 2021-01-22 22:23 - 000000000 ____D C:\Users\Guérande\Desktop\dessin
2021-01-16 04:05 - 2021-01-16 04:05 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-16 04:04 - 2021-01-16 04:04 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-16 04:04 - 2021-01-16 04:04 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-16 04:04 - 2021-01-16 04:04 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-16 04:04 - 2021-01-16 04:04 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-16 04:04 - 2021-01-16 04:04 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-16 04:04 - 2021-01-16 04:04 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-16 04:04 - 2021-01-16 04:04 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-16 04:04 - 2021-01-16 04:04 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-16 04:03 - 2021-01-16 04:03 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-16 04:03 - 2021-01-16 04:03 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-16 04:03 - 2021-01-16 04:03 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-16 04:03 - 2021-01-16 04:03 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-16 04:03 - 2021-01-16 04:03 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-16 04:03 - 2021-01-16 04:03 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-16 04:02 - 2021-01-16 04:02 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-16 04:02 - 2021-01-16 04:02 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-16 04:01 - 2021-01-16 04:01 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-16 04:01 - 2021-01-16 04:01 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-01-16 04:00 - 2021-01-16 04:00 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-16 04:00 - 2021-01-16 04:00 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-16 04:00 - 2021-01-16 04:00 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-16 04:00 - 2021-01-16 04:00 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-16 04:00 - 2021-01-16 04:00 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-15 21:16 - 2021-02-06 21:30 - 000348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2021-01-15 21:16 - 2021-01-16 18:23 - 000000000 ____D C:\ProgramData\EA Logs
2021-01-15 21:16 - 2021-01-15 21:16 - 000000000 ____D C:\Users\Guérande\Documents\Battlefield 3
2021-01-15 21:16 - 2021-01-15 21:16 - 000000000 ____D C:\Users\Guérande\AppData\Local\PunkBuster
2021-01-15 21:16 - 2021-01-15 21:16 - 000000000 ____D C:\ProgramData\EA Core
2021-01-15 21:14 - 2021-02-06 21:30 - 000348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2021-01-15 21:14 - 2021-02-06 21:29 - 000280904 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2021-01-15 21:14 - 2021-01-29 20:00 - 000076152 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2021-01-15 21:14 - 2021-01-15 21:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2021-01-15 20:26 - 2021-01-29 19:51 - 000000000 ____D C:\Program Files (x86)\Origin Games
2021-01-15 20:26 - 2021-01-15 21:16 - 000000000 ____D C:\ProgramData\Electronic Arts
2021-01-15 20:25 - 2021-03-26 19:53 - 000000000 ____D C:\Program Files (x86)\Origin
2021-01-15 20:25 - 2021-01-15 20:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2021-01-14 19:44 - 2021-03-26 22:11 - 000000000 ____D C:\ProgramData\Origin
2021-01-14 19:44 - 2021-03-26 21:56 - 000000000 ____D C:\Users\Guérande\AppData\Local\Origin
2021-01-14 19:44 - 2021-03-26 19:54 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Origin
2021-01-14 19:44 - 2021-01-14 19:44 - 000000000 ____D C:\Users\Guérande\.QtWebEngineProcess
2021-01-14 19:44 - 2021-01-14 19:44 - 000000000 ____D C:\Users\Guérande\.Origin
2021-01-14 14:41 - 2021-01-14 14:41 - 003895945 _____ C:\Users\Guérande\Downloads\Standards 2018 2019 s2.pdf
2021-01-14 14:41 - 2021-01-14 14:41 - 003895945 _____ C:\Users\Guérande\Desktop\Standards II.pdf
2021-01-11 23:51 - 2021-01-11 23:52 - 000126358 _____ C:\Users\Guérande\Downloads\Les berceaux C- (1).pdf
2021-01-11 23:32 - 2021-01-11 23:32 - 000126358 _____ C:\Users\Guérande\Downloads\Les berceaux C-.pdf
2021-01-09 19:40 - 2021-01-09 19:40 - 000171902 _____ C:\Users\Guérande\Downloads\CLE MINGUS.pdf
2021-01-09 02:06 - 2021-01-09 02:06 - 000015146 _____ C:\Users\Guérande\Downloads\Clssct sideslipping Guérande Mollet.pdf
2021-01-07 02:41 - 2021-01-07 02:41 - 000748897 _____ C:\Users\Guérande\Downloads\Screens.pdf
2021-01-06 23:33 - 2021-01-06 23:33 - 000015146 _____ C:\Users\Guérande\Downloads\Clssct_sideslipping_Guerande_Mollet.pdf
2021-01-06 23:05 - 2021-01-06 23:05 - 000139867 _____ C:\Users\Guérande\Downloads\Line Up - Lennie Tristanos Solo (C).pdf
2021-01-06 23:02 - 2021-01-06 23:02 - 000022650 _____ C:\Users\Guérande\Downloads\analyse_sidesliping.odt
2021-01-06 22:36 - 2021-01-06 22:36 - 000078846 _____ C:\Users\Guérande\Downloads\tableau (1).pdf
2021-01-06 22:33 - 2021-01-06 22:33 - 000078846 _____ C:\Users\Guérande\Downloads\tableau.pdf
2021-01-04 22:53 - 2021-01-04 22:53 - 000002123 _____ C:\Users\Guérande\AppData\Local\recently-used.xbel
2021-01-03 23:14 - 2021-03-31 23:01 - 000000000 ____D C:\Users\Guérande\Documents\My Games
2021-01-03 23:14 - 2021-01-03 23:14 - 000000000 ____D C:\Users\Guérande\AppData\Local\Epic Games
2021-01-03 20:59 - 2021-01-03 20:59 - 023873522 _____ C:\Users\Guérande\Downloads\IMG_4401.CR2
2021-01-03 19:48 - 2021-01-07 18:48 - 000000000 ____D C:\Users\Guérande\Documents\TOF
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-02 17:59 - 2020-01-05 20:32 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Discord
2021-04-02 17:54 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-02 04:23 - 2020-10-30 00:25 - 000000000 ____D C:\Program Files (x86)\Steam
2021-04-02 04:14 - 2020-08-31 00:31 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-04-02 03:17 - 2019-01-11 23:38 - 000000000 ____D C:\Users\Guérande\AppData\Local\D3DSCache
2021-03-31 20:50 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-31 20:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-30 17:38 - 2020-08-31 10:57 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-30 17:38 - 2019-12-07 16:49 - 000791756 _____ C:\WINDOWS\system32\perfh00C.dat
2021-03-30 17:38 - 2019-12-07 16:49 - 000149922 _____ C:\WINDOWS\system32\perfc00C.dat
2021-03-30 17:38 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-29 02:13 - 2020-08-31 00:32 - 000000000 ____D C:\Users\Guérande
2021-03-27 15:42 - 2020-07-04 18:35 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-26 18:53 - 2020-12-12 13:35 - 000000000 ____D C:\Users\Guérande\AppData\Local\AMD_Common
2021-03-26 06:47 - 2019-09-05 19:45 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\MuseScore
2021-03-26 02:10 - 2019-01-13 18:22 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Maize Sampler Player
2021-03-26 02:09 - 2019-01-12 17:40 - 000000000 ____D C:\Program Files\Common Files\VST
2021-03-24 21:49 - 2019-01-13 18:31 - 000000000 ____D C:\Users\Guérande\Documents\REAPER Media
2021-03-16 14:30 - 2019-01-11 22:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-13 16:55 - 2020-08-31 00:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-13 16:55 - 2020-08-31 00:31 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-13 16:54 - 2020-12-12 13:29 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-03-13 16:54 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-03-13 16:53 - 2020-08-31 00:31 - 000453208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-13 14:29 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-10 20:36 - 2019-01-11 22:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-10 20:34 - 2019-01-11 22:05 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-09 17:30 - 2020-05-14 14:30 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Zoom
2021-03-04 14:07 - 2020-08-31 00:37 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-04 14:07 - 2020-08-31 00:37 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2020-04-17 00:51 - 2020-04-17 00:51 - 000000923 _____ () C:\Users\Guérande\AppData\Roaming\AdobeWLCMR2Cache.dat
2021-01-04 22:53 - 2021-01-04 22:53 - 000002123 _____ () C:\Users\Guérande\AppData\Local\recently-used.xbel
2020-05-17 21:43 - 2020-05-17 21:43 - 000007605 _____ () C:\Users\Guérande\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2018-01-31 15:39 - 2018-01-31 15:39 - 002271232 _____ (Intel(R) Corporation) C:\WINDOWS\system32\accesor.dll
2021-01-30 00:43 - 2021-03-11 14:16 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2018-01-31 15:42 - 2018-01-31 15:42 - 000505856 _____ (Intel Corporation) C:\WINDOWS\system32\IPROSetMonitor.exe
2018-01-31 15:40 - 2018-01-31 15:40 - 001568256 _____ (Intel(R) Corporation) C:\WINDOWS\system32\ncs2dmix.dll
2018-01-31 15:37 - 2018-01-31 15:37 - 000671232 _____ (Intel(R) Corporation) C:\WINDOWS\system32\ncs2instutility.dll
2018-01-25 13:10 - 2018-01-25 13:10 - 000349696 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Ncs2Setp.dll
2018-01-31 15:34 - 2018-01-31 15:34 - 004811264 _____ (Intel(R) Corporation) C:\WINDOWS\system32\ncscolib.dll
2001-07-13 15:09 - 2001-07-13 15:09 - 000279552 _____ (InterActual Technologies, Inc.) C:\WINDOWS\SysWOW64\itiimg3.dll
2001-07-13 15:11 - 2001-07-13 15:11 - 000565760 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msvcp50.dll
2021-04-02 17:56 - 2021-04-02 17:56 - 002298368 _____ (Farbar) C:\Users\Guérande\Desktop\FRST64.exe
2021-04-02 17:45 - 2021-04-02 17:45 - 003467416 _____ (Nicolas Coolman) C:\Users\Guérande\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{c6cde7ea-15e5-11e9-837a-c93a0ff2840d}
{c6cde7eb-15e5-11e9-837a-c93a0ff2840d}
timeout 1
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {d25f5968-eb18-11ea-b412-f0bdcfe39074}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {c6cde7ea-15e5-11e9-837a-c93a0ff2840d}
device unknown
description CD/DVD Drive
Application logicielle (101fffff)
--------------------------------
identificateur {c6cde7eb-15e5-11e9-837a-c93a0ff2840d}
description Hard Drive
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {d25f596a-eb18-11ea-b412-f0bdcfe39074}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {d25f5968-eb18-11ea-b412-f0bdcfe39074}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {d25f596a-eb18-11ea-b412-f0bdcfe39074}
device ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{d25f596b-eb18-11ea-b412-f0bdcfe39074}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{d25f596b-eb18-11ea-b412-f0bdcfe39074}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {d25f5968-eb18-11ea-b412-f0bdcfe39074}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {d25f596a-eb18-11ea-b412-f0bdcfe39074}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {d25f596b-eb18-11ea-b412-f0bdcfe39074}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume1
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par Guérande (administrateur) sur DESKTOP-7070TBN (Micro-Star International Co., Ltd. MS-7B85) (02-04-2021 17:58:27)
Exécuté depuis C:\Users\Guérande\Desktop
Profils chargés: Guérande
Platform: Windows 10 Home Version 20H2 19042.867 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0361901.inf_amd64_204a65b18f2a904a\B361909\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0361901.inf_amd64_204a65b18f2a904a\B361909\atiesrxx.exe
(A-Volute SAS -> A-Volute) C:\Users\Guérande\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe
(Discord Inc. -> Discord Inc.) C:\Users\Guérande\AppData\Local\Discord\app-0.0.309\Discord.exe <12>
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files (x86)\Epic Games\Launcher\Portal\Extras\Overlay\EOSOverlayRenderer-Win64-Shipping.exe <3>
(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(Focusrite Audio Engineering, Ltd.) [Fichier non signé] C:\Program Files\Focusriteusb\Focusrite Notifier.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <13>
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel Corporation) [Fichier non signé] C:\Windows\System32\IPROSetMonitor.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12101.1001.14.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.521.3093.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.521.3093.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20122.11121.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Psyonix, LLC -> Psyonix, LLC) Z:\rocketleague\Binaries\Win64\RocketLeague.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d87c47469b47c3f9\RtkAudUService64.exe <2>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d87c47469b47c3f9\RtkAudUService64.exe [1201448 2020-10-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusriteusb\Focusrite Notifier.exe [5029376 2020-06-02] (Focusrite Audio Engineering, Ltd.) [Fichier non signé]
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [353400 2021-01-22] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1263288 2018-02-27] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [645456 2019-04-01] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [C5E88E896239D60430B796AE9A0A92E28AFECB63._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Discord] => C:\Users\Guérande\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4087528 2021-03-23] (Valve -> Valve Corporation)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Spotify] => C:\Users\Guérande\AppData\Roaming\Spotify\Spotify.exe [23325416 2020-11-06] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [Voicemod] => C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe [5125256 2021-01-18] (Voicemod Sociedad Limitada -> Voicemod)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [BakkesMod] => C:\Program Files\BakkesMod\BakkesMod.exe [16070656 2021-01-06] () [Fichier non signé]
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [32726088 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\MountPoints2: {a86ea466-d765-11ea-b975-00d861194cf0} - "F:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3247901576-1007082045-1312965907-1001\...\MountPoints2: {e765f2d5-eec5-11ea-b987-4e7d4f53811e} - "E:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-02] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {1345247F-1FAE-4B57-BE42-6B5A5EC6F815} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2FF1A1A9-1D81-4F9F-983E-F1BDFE9F2607} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {33984C30-E81F-4E18-B1C6-B80259268043} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {34AE050E-148D-40D0-9A39-D7CD869FD427} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1710472 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {511ADFE6-BBF9-4946-9CFA-240F37726FAE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [152216 2019-01-12] (Google Inc -> Google Inc.)
Task: {80C528F2-E4AE-4B5B-AA35-2408EA45918C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [152216 2019-01-12] (Google Inc -> Google Inc.)
Task: {8A2D48A1-89F4-435C-BBDD-AF1C671FC521} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A4E23C94-E43F-475D-A2B6-BDC8B133478B} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {D394A22B-7F97-45AA-B6F2-F84423AA63CC} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {DB2ABA37-3484-49FB-B2D7-1ABDA5BAA269} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [27168840 2021-03-05] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {DDD2E059-5D31-4223-92A9-8430AA71793C} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1710472 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {E11CCB66-69D9-4D83-9283-6A72E004B665} - System32\Tasks\MSI_Toast_Server => C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe [30648 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
Task: {E243ED2B-D048-4862-BB90-8AF5CFC057E7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-03-05] (Piriform Software Ltd -> Piriform)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{4ff63713-f2db-46e0-bc2a-f56e52b4135b}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{d5ed46c1-51ce-4c98-b32b-9a03fc46b589}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{d984212b-7c43-459e-b6be-96e41accffe6}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Profile: C:\Users\Guérande\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-02]
Edge Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Guérande\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2021-02-06]
FireFox:
========
FF DefaultProfile: uehmc1n6.default
FF ProfilePath: C:\Users\Guérande\AppData\Roaming\Mozilla\Firefox\Profiles\uehmc1n6.default [2021-03-19]
FF ProfilePath: C:\Users\Guérande\AppData\Roaming\Mozilla\Firefox\Profiles\l6pkhnhi.default-release [2021-03-21]
FF Plugin: @java.com/DTPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\dtplugin\npDeployJava1.dll [2020-04-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.211.2 -> C:\Program Files\Java\jre1.8.0_211\bin\plugin2\npjp2.dll [2020-04-17] (Oracle America, Inc. -> Oracle Corporation)
Chrome:
=======
CHR Profile: C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default [2021-04-02]
CHR Extension: (Docs) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2019-01-11]
CHR Extension: (Google Drive) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-20]
CHR Extension: (YouTube) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2019-01-11]
CHR Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-03-20]
CHR Extension: (Google Docs hors connexion) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-12]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-04-01]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-03-29]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\Guérande\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-13]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2021-01-04] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-12-08] (GOG Sp. z o.o. -> GOG.com)
R2 Intel(R) PROSet Monitoring Service; C:\Windows\system32\IProsetMonitor.exe [505856 2018-01-31] (Intel Corporation) [Fichier non signé]
R3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6744288 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [128976 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183992 2017-12-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1633288 2020-12-09] (A-Volute SAS -> Nahimic)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2535000 2021-03-17] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3479640 2021-03-17] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2021-01-29] (Even Balance, Inc. -> )
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1631360 2020-12-02] (Rockstar Games, Inc. -> Rockstar Games)
R2 RtkAudioUniversalService; C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d87c47469b47c3f9\RtkAudUService64.exe [1201448 2020-10-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10091440 2021-01-22] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 Focusriteusb; C:\WINDOWS\System32\drivers\Focusriteusb.sys [123456 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R3 FocusriteusbSwRoot; C:\WINDOWS\System32\drivers\FocusriteusbSwRoot.sys [92568 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
S3 Focusriteusb_AUDIO; C:\WINDOWS\system32\drivers\FocusriteusbAudio.sys [87912 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [20936 2019-06-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [275232 2021-03-19] (Malwarebytes Corporation -> Malwarebytes)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85592 2020-01-17] (A-Volute -> Windows (R) Win 7 DDK provider)
R3 NAL; C:\Windows\system32\Drivers\iqvw64e.sys [50152 2017-10-18] (Intel(R) INTELND1617 -> Intel Corporation)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2020-04-08] (TunnelBear, Inc. -> The OpenVPN Project)
S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [5782360 2021-01-22] (Riot Games, Inc. -> Riot Games, Inc.)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\vmdrv.sys [48136 2021-01-18] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-03-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420072 2021-03-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-16] (Microsoft Windows -> Microsoft Corporation)
S2 AMDRyzenMasterDriver; \??\C:\Program Files\AMD\Performance Profile Client\RyzenMaster\AMDRyzenMasterDriver.sys [X]
S4 nvlddmkm; \SystemRoot\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_db678424d2641c3d\nvlddmkm.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-02 17:58 - 2021-04-02 17:58 - 000020746 _____ C:\Users\Guérande\Desktop\FRST.txt
2021-04-02 17:57 - 2021-04-02 17:58 - 000000000 ____D C:\FRST
2021-04-02 17:56 - 2021-04-02 17:56 - 002298368 _____ (Farbar) C:\Users\Guérande\Desktop\FRST64.exe
2021-04-02 17:52 - 2021-04-02 17:52 - 000365483 _____ C:\Users\Guérande\Desktop\ZHPDiag.txt
2021-04-02 17:46 - 2021-04-02 17:52 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\ZHP
2021-04-02 17:46 - 2021-04-02 17:46 - 000000868 _____ C:\Users\Guérande\Desktop\ZHPSuite.lnk
2021-04-02 17:46 - 2021-04-02 17:46 - 000000000 ____D C:\Users\Guérande\AppData\Local\ZHP
2021-04-02 17:45 - 2021-04-02 17:45 - 003467416 _____ (Nicolas Coolman) C:\Users\Guérande\Desktop\ZHPSuite.exe
2021-03-26 06:45 - 2021-03-26 06:50 - 000000000 ____D C:\Users\Guérande\Desktop\Arr 2
2021-03-26 02:09 - 2021-03-26 02:09 - 076740060 _____ C:\Users\Guérande\Downloads\BJAM2_Win64.zip
2021-03-25 21:09 - 2021-03-25 21:09 - 000046287 _____ C:\Users\Guérande\Downloads\RHfactorlike.mscz
2021-03-25 20:13 - 2021-03-25 20:13 - 000021471 _____ C:\Users\Guérande\Downloads\Compo_style_RH_Factor_Chevallier_Amaury_L3C1.mscz
2021-03-22 18:36 - 2021-03-22 18:36 - 011983789 _____ C:\Users\Guérande\Downloads\BAYER-Chapitre Mathematisation de lespace sonore.zip
2021-03-20 01:05 - 2021-04-02 17:46 - 000000000 ____D C:\Program Files\CCleaner
2021-03-20 01:05 - 2021-04-02 16:46 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-03-20 01:05 - 2021-03-20 01:05 - 000002894 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC
2021-03-20 01:05 - 2021-03-20 01:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-03-20 01:04 - 2021-03-20 01:04 - 030972600 _____ (Piriform Software Ltd) C:\Users\Guérande\Downloads\ccsetup577.exe
2021-03-19 23:57 - 2021-03-19 23:57 - 000275232 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-03-19 23:40 - 2021-03-19 23:43 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-19 23:40 - 2021-03-19 23:42 - 000000000 ____D C:\Users\Guérande\AppData\LocalLow\Mozilla
2021-03-19 23:40 - 2021-03-19 23:40 - 000333208 _____ (Mozilla) C:\Users\Guérande\Downloads\Firefox Installer.exe
2021-03-19 23:40 - 2021-03-19 23:40 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Mozilla
2021-03-19 23:40 - 2021-03-19 23:40 - 000000000 ____D C:\Users\Guérande\AppData\Local\Mozilla
2021-03-19 21:51 - 2020-10-04 02:50 - 000000363 _____ C:\Users\Guérande\Desktop\Labs_Octagon_02_P.vdf
2021-03-19 21:51 - 2020-10-04 02:49 - 076158200 _____ C:\Users\Guérande\Desktop\Labs_Octagon_02_P.upk
2021-03-19 14:53 - 2021-03-19 14:53 - 000189814 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (4).pdf
2021-03-13 14:27 - 2021-03-13 14:27 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-13 14:27 - 2021-03-13 14:27 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-13 14:27 - 2021-03-13 14:27 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-13 14:27 - 2021-03-13 14:27 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-13 14:27 - 2021-03-13 14:27 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-13 14:27 - 2021-03-13 14:27 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-13 14:27 - 2021-03-13 14:27 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-13 14:27 - 2021-03-13 14:27 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-13 14:27 - 2021-03-13 14:27 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-13 14:27 - 2021-03-13 14:27 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-13 14:27 - 2021-03-13 14:27 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-12 16:31 - 2021-03-12 16:32 - 090238374 _____ C:\Users\Guérande\Downloads\drive-download-20210312T143113Z-001.zip
2021-03-12 16:12 - 2021-03-12 16:13 - 052596019 _____ C:\Users\Guérande\Downloads\drive-download-20210312T141216Z-001.zip
2021-03-11 22:47 - 2021-03-11 22:47 - 000087413 _____ C:\Users\Guérande\Downloads\ilovepdf_merged (1).pdf
2021-03-11 22:40 - 2021-03-11 22:48 - 000000000 ____D C:\Users\Guérande\Desktop\Devoir arr
2021-03-09 17:30 - 2021-03-09 17:30 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-03-09 13:05 - 2021-03-09 13:05 - 000189809 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (3).pdf
2021-03-04 23:28 - 2021-03-04 23:28 - 000077465 _____ C:\Users\Guérande\Downloads\Brief Encounter Guerande mollet (1).pdf
2021-03-04 14:53 - 2021-03-04 14:54 - 080242828 _____ C:\Users\Guérande\Downloads\AimTrainingRL.udk
2021-03-02 19:08 - 2021-03-02 19:08 - 000189728 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (2).pdf
2021-03-02 16:03 - 2021-03-02 16:04 - 048217898 _____ C:\Users\Guérande\Downloads\drive-download-20210302T140332Z-001.zip
2021-02-28 20:19 - 2021-02-28 20:19 - 000047394 _____ C:\Users\Guérande\Downloads\EDT LC S2 (2).pdf
2021-02-17 18:34 - 2021-02-17 18:34 - 000068272 _____ C:\Users\Guérande\Downloads\Devis D21020120.pdf
2021-02-16 20:42 - 2021-02-16 20:43 - 157002329 _____ C:\Users\Guérande\Downloads\Sonatina_Choir_-_64.zip
2021-02-16 20:41 - 2021-02-16 20:42 - 024035160 _____ C:\Users\Guérande\Downloads\DSK_ChoirZ.zip
2021-02-16 20:40 - 2021-02-16 20:41 - 134168295 _____ C:\Users\Guérande\Downloads\NST_Vocal_Win_64.zip
2021-02-10 17:10 - 2021-02-10 17:10 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BakkesMod.lnk
2021-02-10 17:10 - 2021-02-10 17:10 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\bakkesmod
2021-02-10 17:10 - 2021-02-10 17:10 - 000000000 ____D C:\Program Files\BakkesMod
2021-02-10 17:09 - 2021-02-10 17:09 - 008097994 _____ C:\Users\Guérande\Downloads\BakkesModSetup.zip
2021-02-09 16:40 - 2021-02-09 16:40 - 044694954 _____ C:\Users\Guérande\Downloads\drive-download-20210209T144011Z-001.zip
2021-02-04 18:52 - 2021-02-04 18:53 - 072057118 _____ C:\Users\Guérande\Downloads\drive-download-20210204T165217Z-001.zip
2021-02-04 18:51 - 2021-02-04 18:51 - 002335877 _____ C:\Users\Guérande\Downloads\Labs_Underpass_P.upk
2021-02-04 18:51 - 2021-02-04 18:51 - 002244549 _____ C:\Users\Guérande\Downloads\Labs_Octagon_02_P.upk
2021-02-04 18:51 - 2021-02-04 18:51 - 001708107 _____ C:\Users\Guérande\Downloads\Labs_DoubleGoal_V2_P.upk
2021-02-04 18:41 - 2021-03-12 16:15 - 000000000 ____D C:\Users\Guérande\Desktop\Map training
2021-02-04 18:40 - 2021-02-04 18:40 - 053024701 _____ C:\Users\Guérande\Downloads\drive-download-20210204T164009Z-001.zip
2021-02-04 18:30 - 2021-02-04 18:30 - 034993877 _____ C:\Users\Guérande\Downloads\r1.udk
2021-02-04 18:29 - 2021-02-04 18:29 - 058912641 _____ C:\Users\Guérande\Downloads\Labs_CirclePillars_P.upk
2021-02-04 18:28 - 2021-02-09 16:41 - 000000000 ____D C:\Users\Guérande\Desktop\Bien au chaud
2021-02-04 18:28 - 2021-02-04 18:28 - 002529451 _____ C:\Users\Guérande\Downloads\Labs_Utopia_P.upk
2021-02-01 01:47 - 2021-02-01 01:49 - 102252340 _____ C:\Users\Guérande\Downloads\2850-Save GTA5 Ultra Full Complete.zip
2021-01-31 22:12 - 2021-01-31 22:12 - 000034027 _____ C:\Users\Guérande\Downloads\Brief Encounter Guerande mollet.pdf
2021-01-31 21:58 - 2021-01-31 21:58 - 000034027 _____ C:\Users\Guérande\Desktop\Brief Encounter Guerande mollet.pdf
2021-01-31 21:34 - 2021-01-31 21:34 - 000189603 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020 (1).pdf
2021-01-31 14:27 - 2021-01-31 14:27 - 000076637 _____ C:\Users\Guérande\Downloads\Es9Wq_zUYAAyj1j.jfif
2021-01-31 14:02 - 2021-01-31 14:02 - 000031146 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet (3).odt
2021-01-31 12:25 - 2021-01-31 12:25 - 000031146 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet (2).odt
2021-01-31 00:03 - 2021-01-31 00:06 - 000000000 ____D C:\Users\Guérande\Documents\Rockstar Games
2021-01-31 00:03 - 2021-01-31 00:06 - 000000000 ____D C:\Users\Guérande\AppData\Local\Rockstar Games
2021-01-31 00:02 - 2021-01-31 00:02 - 000001065 _____ C:\Users\Guérande\Desktop\Rockstar Games Launcher.lnk
2021-01-31 00:02 - 2021-01-31 00:02 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2021-01-31 00:02 - 2021-01-31 00:02 - 000000000 ____D C:\ProgramData\Rockstar Games
2021-01-31 00:00 - 2021-01-31 00:03 - 000000000 ____D C:\Program Files\Rockstar Games
2021-01-31 00:00 - 2021-01-31 00:03 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2021-01-30 22:41 - 2021-01-30 22:41 - 000023708 _____ C:\Users\Guérande\Downloads\Mollet_Guerande.pdf
2021-01-30 22:41 - 2021-01-30 22:41 - 000021753 _____ C:\Users\Guérande\Downloads\Guerande_mollet.pdf
2021-01-30 22:24 - 2021-01-30 22:24 - 000030434 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet (1).odt
2021-01-30 19:32 - 2021-01-30 19:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher Enhanced Edition [GOG.com]
2021-01-30 19:32 - 2021-01-30 19:32 - 000000000 ____D C:\ProgramData\Documents\The Witcher
2021-01-30 18:56 - 2020-12-10 22:04 - 000001235 _____ C:\Users\Guérande\Desktop\GOG GALAXY.lnk
2021-01-30 18:53 - 2021-01-30 18:53 - 000000219 _____ C:\Users\Guérande\Desktop\Team Fortress 2.url
2021-01-30 18:15 - 2021-01-30 18:15 - 000000233 _____ C:\Users\Guérande\Desktop\Assassin's Creed IV Black Flag (Singleplayer).url
2021-01-30 17:58 - 2021-01-30 17:58 - 000000222 _____ C:\Users\Guérande\Desktop\Microsoft Flight Simulator X Steam Edition.url
2021-01-30 17:58 - 2021-01-30 17:58 - 000000222 _____ C:\Users\Guérande\Desktop\Among Us.url
2021-01-30 17:57 - 2020-10-30 00:25 - 000001054 _____ C:\Users\Guérande\Desktop\Steam.lnk
2021-01-30 17:53 - 2021-01-30 00:27 - 000001480 _____ C:\Users\Guérande\Desktop\Cyberpunk 2077.lnk
2021-01-30 17:50 - 2021-01-30 17:50 - 000000000 ____D C:\Users\Guérande\Desktop\SLD
2021-01-30 17:49 - 2021-01-30 17:49 - 000000219 _____ C:\Users\Guérande\Desktop\Counter-Strike Global Offensive.url
2021-01-30 17:22 - 2021-01-30 17:22 - 000000220 _____ C:\Users\Guérande\Desktop\BioShock Infinite.url
2021-01-30 16:54 - 2021-01-30 16:54 - 000001490 _____ C:\Users\Guérande\Desktop\Goat Simulator Windows 10.lnk
2021-01-30 16:18 - 2021-01-30 16:18 - 000001159 _____ C:\Users\Guérande\Desktop\Sea of Thieves.lnk
2021-01-30 13:33 - 2021-01-31 21:58 - 000019974 _____ C:\Users\Guérande\Desktop\Guerande mollet 2.odt
2021-01-30 13:07 - 2021-01-30 14:55 - 008781704 _____ C:\Users\Guérande\Downloads\Rachmaninov_-_Piano_Concerto_n.2_c_(2P_ed.Gutheil).pdf
2021-01-30 13:02 - 2021-01-30 13:02 - 037444883 _____ C:\Users\Guérande\Downloads\1-01 RACHMANINOV Piano Concerto 2 - 1st mvt. - Moderato - Allegro.flac
2021-01-30 12:48 - 2021-01-30 12:48 - 000016028 _____ C:\Users\Guérande\Downloads\Partiel_de_Cine-musique_-_Jolan_Chiquet.odt
2021-01-30 03:33 - 2021-01-30 03:33 - 000000278 _____ C:\Users\Guérande\Desktop\Grand Theft Auto V.url
2021-01-30 03:27 - 2021-02-06 22:19 - 000000000 ____D C:\Users\Guérande\Documents\STAR WARS Battlefront II
2021-01-30 03:27 - 2021-01-30 03:27 - 000000000 ____D C:\Users\Guérande\AppData\Local\STAR WARS Battlefront II
2021-01-30 03:25 - 2021-01-30 03:25 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2021-01-30 00:50 - 2021-01-30 00:50 - 000000000 ____D C:\Users\Guérande\AppData\Local\INetHistory
2021-01-30 00:43 - 2021-03-11 14:16 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-01-30 00:42 - 2021-01-30 00:42 - 008673152 _____ () C:\Users\Guérande\Downloads\XboxInstaller.exe
2021-01-30 00:27 - 2021-01-30 00:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberpunk 2077 [GOG.com]
2021-01-29 20:22 - 2021-01-29 20:22 - 000000000 ____D C:\ProgramData\Documents\NI Resources
2021-01-29 20:21 - 2021-01-29 20:21 - 000000000 ____D C:\ProgramData\Documents\Native Instruments
2021-01-29 20:07 - 2021-01-29 20:07 - 000000000 __HDC C:\ProgramData\{94B1BDC0-FBC9-4D64-9187-3386227F53F3}
2021-01-29 19:43 - 2021-01-29 19:43 - 000000273 _____ C:\Users\Guérande\Desktop\Rocket League®.url
2021-01-29 12:42 - 2021-01-29 12:42 - 000002748 _____ C:\Users\Guérande\Downloads\message (1).txt
2021-01-29 10:58 - 2021-01-29 10:58 - 000047394 _____ C:\Users\Guérande\Downloads\EDT LC S2 (1).pdf
2021-01-28 23:56 - 2021-01-28 23:56 - 000000000 _____ C:\Users\Guérande\Desktop\Film.txt
2021-01-28 23:31 - 2021-01-28 23:31 - 000000000 ____D C:\Users\Guérande\Desktop\Master
2021-01-28 17:03 - 2021-01-28 17:03 - 000149101 _____ C:\Users\Guérande\Downloads\Adrien_Quintane (1).pdf
2021-01-28 16:56 - 2021-01-28 16:56 - 000149101 _____ C:\Users\Guérande\Downloads\Adrien_Quintane.pdf
2021-01-28 16:48 - 2021-01-28 16:48 - 000091107 _____ C:\Users\Guérande\Downloads\Commentaire_partiel_histoire.pdf
2021-01-28 16:42 - 2021-01-28 16:42 - 000012463 _____ C:\Users\Guérande\Downloads\Annexe1.pdf
2021-01-28 16:42 - 2021-01-28 16:42 - 000011410 _____ C:\Users\Guérande\Downloads\Annexe2.pdf
2021-01-28 15:42 - 2021-01-28 15:42 - 000012475 _____ C:\Users\Guérande\Downloads\Theme1.pdf
2021-01-28 15:13 - 2021-01-28 15:13 - 000807778 _____ C:\Users\Guérande\Downloads\polytonalite2.PDF
2021-01-28 15:13 - 2021-01-28 15:13 - 000490124 _____ C:\Users\Guérande\Downloads\polytonalite1.PDF
2021-01-28 14:46 - 2021-01-28 14:46 - 000023019 _____ C:\Users\Guérande\Downloads\consignes_EXAMEN.pdf
2021-01-28 13:29 - 2021-01-28 13:29 - 000066135 _____ C:\Users\Guérande\Downloads\Cours #3.odt
2021-01-28 13:06 - 2021-01-28 13:06 - 000061227 _____ C:\Users\Guérande\Downloads\Cours généraliste II (1).odt
2021-01-26 23:36 - 2021-01-26 23:36 - 000000000 ____D C:\Users\Guérande\AppData\Local\VALORANT
2021-01-26 23:35 - 2021-03-13 16:58 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2021-01-26 23:11 - 2021-01-26 23:11 - 000000000 ____D C:\Program Files\Riot Vanguard
2021-01-26 23:09 - 2021-01-26 23:09 - 068746984 _____ (Riot Games, Inc.) C:\Users\Guérande\Downloads\Install VALORANT.exe
2021-01-25 21:02 - 2021-02-14 16:05 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-01-24 23:08 - 2021-01-24 23:11 - 072909744 _____ C:\Users\Guérande\Downloads\Vidéo Def analyse 1080p.mp4
2021-01-22 21:36 - 2021-01-22 21:36 - 000000000 ____D C:\Users\Guérande\AppData\Local\CefSharp
2021-01-22 21:35 - 2021-01-24 23:20 - 000000000 ____D C:\ProgramData\Voicemod
2021-01-22 21:35 - 2021-01-22 21:36 - 000000000 ____D C:\Users\Guérande\AppData\Local\Voicemod
2021-01-22 21:35 - 2021-01-22 21:35 - 067471720 _____ (Voicemod S.L. ) C:\Users\Guérande\Downloads\VoicemodSetup_2.5.0.5.exe
2021-01-22 21:35 - 2021-01-22 21:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod
2021-01-22 21:35 - 2021-01-22 21:35 - 000000000 ____D C:\Program Files\Voicemod Desktop
2021-01-22 21:35 - 2021-01-18 13:30 - 000048136 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\vmdrv.sys
2021-01-22 07:05 - 2021-01-22 07:05 - 000189608 _____ C:\Users\Guérande\Downloads\guerande.mollet_MUC1L38402020.pdf
2021-01-22 00:35 - 2021-01-22 00:35 - 000047394 _____ C:\Users\Guérande\Downloads\EDT LC S2.pdf
2021-01-22 00:06 - 2021-01-22 00:06 - 000079567 _____ C:\Users\Guérande\Downloads\Jenny_Wren_Arrangement.pdf
2021-01-21 23:57 - 2021-01-21 23:57 - 000041476 _____ C:\Users\Guérande\Downloads\Jenny_Wren_Arrangement-Guitare_Clef_de_Sol.pdf
2021-01-20 16:00 - 2021-01-22 22:23 - 000000000 ____D C:\Users\Guérande\Desktop\dessin
2021-01-16 04:05 - 2021-01-16 04:05 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-16 04:04 - 2021-01-16 04:04 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-16 04:04 - 2021-01-16 04:04 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-16 04:04 - 2021-01-16 04:04 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-16 04:04 - 2021-01-16 04:04 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-16 04:04 - 2021-01-16 04:04 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-16 04:04 - 2021-01-16 04:04 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-16 04:04 - 2021-01-16 04:04 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-16 04:04 - 2021-01-16 04:04 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-16 04:04 - 2021-01-16 04:04 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-16 04:03 - 2021-01-16 04:03 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-16 04:03 - 2021-01-16 04:03 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-16 04:03 - 2021-01-16 04:03 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-16 04:03 - 2021-01-16 04:03 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-16 04:03 - 2021-01-16 04:03 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-16 04:03 - 2021-01-16 04:03 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-16 04:02 - 2021-01-16 04:02 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-16 04:02 - 2021-01-16 04:02 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-16 04:02 - 2021-01-16 04:02 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-16 04:01 - 2021-01-16 04:01 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-16 04:01 - 2021-01-16 04:01 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-16 04:01 - 2021-01-16 04:01 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-01-16 04:00 - 2021-01-16 04:00 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-16 04:00 - 2021-01-16 04:00 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-16 04:00 - 2021-01-16 04:00 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-16 04:00 - 2021-01-16 04:00 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-16 04:00 - 2021-01-16 04:00 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-15 21:16 - 2021-02-06 21:30 - 000348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr
2021-01-15 21:16 - 2021-01-16 18:23 - 000000000 ____D C:\ProgramData\EA Logs
2021-01-15 21:16 - 2021-01-15 21:16 - 000000000 ____D C:\Users\Guérande\Documents\Battlefield 3
2021-01-15 21:16 - 2021-01-15 21:16 - 000000000 ____D C:\Users\Guérande\AppData\Local\PunkBuster
2021-01-15 21:16 - 2021-01-15 21:16 - 000000000 ____D C:\ProgramData\EA Core
2021-01-15 21:14 - 2021-02-06 21:30 - 000348360 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2021-01-15 21:14 - 2021-02-06 21:29 - 000280904 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0
2021-01-15 21:14 - 2021-01-29 20:00 - 000076152 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2021-01-15 21:14 - 2021-01-15 21:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battlefield 3
2021-01-15 20:26 - 2021-01-29 19:51 - 000000000 ____D C:\Program Files (x86)\Origin Games
2021-01-15 20:26 - 2021-01-15 21:16 - 000000000 ____D C:\ProgramData\Electronic Arts
2021-01-15 20:25 - 2021-03-26 19:53 - 000000000 ____D C:\Program Files (x86)\Origin
2021-01-15 20:25 - 2021-01-15 20:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin
2021-01-14 19:44 - 2021-03-26 22:11 - 000000000 ____D C:\ProgramData\Origin
2021-01-14 19:44 - 2021-03-26 21:56 - 000000000 ____D C:\Users\Guérande\AppData\Local\Origin
2021-01-14 19:44 - 2021-03-26 19:54 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Origin
2021-01-14 19:44 - 2021-01-14 19:44 - 000000000 ____D C:\Users\Guérande\.QtWebEngineProcess
2021-01-14 19:44 - 2021-01-14 19:44 - 000000000 ____D C:\Users\Guérande\.Origin
2021-01-14 14:41 - 2021-01-14 14:41 - 003895945 _____ C:\Users\Guérande\Downloads\Standards 2018 2019 s2.pdf
2021-01-14 14:41 - 2021-01-14 14:41 - 003895945 _____ C:\Users\Guérande\Desktop\Standards II.pdf
2021-01-11 23:51 - 2021-01-11 23:52 - 000126358 _____ C:\Users\Guérande\Downloads\Les berceaux C- (1).pdf
2021-01-11 23:32 - 2021-01-11 23:32 - 000126358 _____ C:\Users\Guérande\Downloads\Les berceaux C-.pdf
2021-01-09 19:40 - 2021-01-09 19:40 - 000171902 _____ C:\Users\Guérande\Downloads\CLE MINGUS.pdf
2021-01-09 02:06 - 2021-01-09 02:06 - 000015146 _____ C:\Users\Guérande\Downloads\Clssct sideslipping Guérande Mollet.pdf
2021-01-07 02:41 - 2021-01-07 02:41 - 000748897 _____ C:\Users\Guérande\Downloads\Screens.pdf
2021-01-06 23:33 - 2021-01-06 23:33 - 000015146 _____ C:\Users\Guérande\Downloads\Clssct_sideslipping_Guerande_Mollet.pdf
2021-01-06 23:05 - 2021-01-06 23:05 - 000139867 _____ C:\Users\Guérande\Downloads\Line Up - Lennie Tristanos Solo (C).pdf
2021-01-06 23:02 - 2021-01-06 23:02 - 000022650 _____ C:\Users\Guérande\Downloads\analyse_sidesliping.odt
2021-01-06 22:36 - 2021-01-06 22:36 - 000078846 _____ C:\Users\Guérande\Downloads\tableau (1).pdf
2021-01-06 22:33 - 2021-01-06 22:33 - 000078846 _____ C:\Users\Guérande\Downloads\tableau.pdf
2021-01-04 22:53 - 2021-01-04 22:53 - 000002123 _____ C:\Users\Guérande\AppData\Local\recently-used.xbel
2021-01-03 23:14 - 2021-03-31 23:01 - 000000000 ____D C:\Users\Guérande\Documents\My Games
2021-01-03 23:14 - 2021-01-03 23:14 - 000000000 ____D C:\Users\Guérande\AppData\Local\Epic Games
2021-01-03 20:59 - 2021-01-03 20:59 - 023873522 _____ C:\Users\Guérande\Downloads\IMG_4401.CR2
2021-01-03 19:48 - 2021-01-07 18:48 - 000000000 ____D C:\Users\Guérande\Documents\TOF
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-02 17:59 - 2020-01-05 20:32 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Discord
2021-04-02 17:54 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-02 04:23 - 2020-10-30 00:25 - 000000000 ____D C:\Program Files (x86)\Steam
2021-04-02 04:14 - 2020-08-31 00:31 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-04-02 03:17 - 2019-01-11 23:38 - 000000000 ____D C:\Users\Guérande\AppData\Local\D3DSCache
2021-03-31 20:50 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-31 20:50 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-30 17:38 - 2020-08-31 10:57 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-30 17:38 - 2019-12-07 16:49 - 000791756 _____ C:\WINDOWS\system32\perfh00C.dat
2021-03-30 17:38 - 2019-12-07 16:49 - 000149922 _____ C:\WINDOWS\system32\perfc00C.dat
2021-03-30 17:38 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-29 02:13 - 2020-08-31 00:32 - 000000000 ____D C:\Users\Guérande
2021-03-27 15:42 - 2020-07-04 18:35 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-26 18:53 - 2020-12-12 13:35 - 000000000 ____D C:\Users\Guérande\AppData\Local\AMD_Common
2021-03-26 06:47 - 2019-09-05 19:45 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\MuseScore
2021-03-26 02:10 - 2019-01-13 18:22 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Maize Sampler Player
2021-03-26 02:09 - 2019-01-12 17:40 - 000000000 ____D C:\Program Files\Common Files\VST
2021-03-24 21:49 - 2019-01-13 18:31 - 000000000 ____D C:\Users\Guérande\Documents\REAPER Media
2021-03-16 14:30 - 2019-01-11 22:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-13 16:55 - 2020-08-31 00:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-13 16:55 - 2020-08-31 00:31 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-13 16:54 - 2020-12-12 13:29 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-03-13 16:54 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-03-13 16:53 - 2020-08-31 00:31 - 000453208 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-13 16:52 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-13 14:29 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-10 20:36 - 2019-01-11 22:05 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-10 20:34 - 2019-01-11 22:05 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-09 17:30 - 2020-05-14 14:30 - 000000000 ____D C:\Users\Guérande\AppData\Roaming\Zoom
2021-03-04 14:07 - 2020-08-31 00:37 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-04 14:07 - 2020-08-31 00:37 - 000003510 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Fichiers à la racine de certains dossiers ========
2020-04-17 00:51 - 2020-04-17 00:51 - 000000923 _____ () C:\Users\Guérande\AppData\Roaming\AdobeWLCMR2Cache.dat
2021-01-04 22:53 - 2021-01-04 22:53 - 000002123 _____ () C:\Users\Guérande\AppData\Local\recently-used.xbel
2020-05-17 21:43 - 2020-05-17 21:43 - 000007605 _____ () C:\Users\Guérande\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2018-01-31 15:39 - 2018-01-31 15:39 - 002271232 _____ (Intel(R) Corporation) C:\WINDOWS\system32\accesor.dll
2021-01-30 00:43 - 2021-03-11 14:16 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2018-01-31 15:42 - 2018-01-31 15:42 - 000505856 _____ (Intel Corporation) C:\WINDOWS\system32\IPROSetMonitor.exe
2018-01-31 15:40 - 2018-01-31 15:40 - 001568256 _____ (Intel(R) Corporation) C:\WINDOWS\system32\ncs2dmix.dll
2018-01-31 15:37 - 2018-01-31 15:37 - 000671232 _____ (Intel(R) Corporation) C:\WINDOWS\system32\ncs2instutility.dll
2018-01-25 13:10 - 2018-01-25 13:10 - 000349696 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Ncs2Setp.dll
2018-01-31 15:34 - 2018-01-31 15:34 - 004811264 _____ (Intel(R) Corporation) C:\WINDOWS\system32\ncscolib.dll
2001-07-13 15:09 - 2001-07-13 15:09 - 000279552 _____ (InterActual Technologies, Inc.) C:\WINDOWS\SysWOW64\itiimg3.dll
2001-07-13 15:11 - 2001-07-13 15:11 - 000565760 ____R (Microsoft Corporation) C:\WINDOWS\SysWOW64\Msvcp50.dll
2021-04-02 17:56 - 2021-04-02 17:56 - 002298368 _____ (Farbar) C:\Users\Guérande\Desktop\FRST64.exe
2021-04-02 17:45 - 2021-04-02 17:45 - 003467416 _____ (Nicolas Coolman) C:\Users\Guérande\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{c6cde7ea-15e5-11e9-837a-c93a0ff2840d}
{c6cde7eb-15e5-11e9-837a-c93a0ff2840d}
timeout 1
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {d25f5968-eb18-11ea-b412-f0bdcfe39074}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {c6cde7ea-15e5-11e9-837a-c93a0ff2840d}
device unknown
description CD/DVD Drive
Application logicielle (101fffff)
--------------------------------
identificateur {c6cde7eb-15e5-11e9-837a-c93a0ff2840d}
description Hard Drive
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {d25f596a-eb18-11ea-b412-f0bdcfe39074}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {d25f5968-eb18-11ea-b412-f0bdcfe39074}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {d25f596a-eb18-11ea-b412-f0bdcfe39074}
device ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{d25f596b-eb18-11ea-b412-f0bdcfe39074}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{d25f596b-eb18-11ea-b412-f0bdcfe39074}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {d25f5968-eb18-11ea-b412-f0bdcfe39074}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {d25f596a-eb18-11ea-b412-f0bdcfe39074}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {d25f596b-eb18-11ea-b412-f0bdcfe39074}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume1
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================