Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 14-04-2021
Exécuté par zbyt8 (administrateur) sur DESKTOP-E618PT4 (Micro-Star International Co., Ltd. MS-7A38) (14-04-2021 17:25:45)
Exécuté depuis C:\Users\zbyt8\Desktop
Profils chargés: zbyt8
Platform: Windows 10 Home Version 2004 19041.867 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CueLLAccessService.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\avp.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\avpui.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2101.10.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_74518f403e753586\RtkAudUService64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_74518f403e753586\RtkAudUService64.exe [1219312 2020-12-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [CORSAIR iCUE Software] => C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe [410152 2020-12-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4087528 2021-04-12] (Valve -> Valve Corporation)
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14916448 2021-03-29] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\MountPoints2: {c3769122-774a-11eb-ba9c-2cf05d286a98} - "F:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\Canon MP620 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9D.DLL [27648 2008-10-09] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP620 series: C:\Windows\system32\CNMLM9D.DLL [279040 2008-10-09] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\Windows\system32\CNMN6PPM.DLL [252928 2012-08-30] (CANON INC.) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-02] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2021-03-05]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS -> SteelSeries ApS)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {12E81188-74FE-46EE-8F33-C83FA3D2D8EE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-03] (Google LLC -> Google LLC)
Task: {7CF61F67-D0FC-46E8-B632-1FF6952EA04F} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [782320 2019-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {E1E7B1A4-A647-42BF-BBBA-F33AEDD15A84} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-03] (Google LLC -> Google LLC)
Task: {E553CE67-8018-4133-B97A-808275C7DC2F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{950f64be-40ae-43c8-bf11-c7bfd4352bd3}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Edge:
=======
Edge Profile: C:\Users\zbyt8\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-14]
Edge HKU\S-1-5-21-1688234633-52662162-2205139778-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: vcnf517m.default
FF ProfilePath: C:\Users\zbyt8\AppData\Roaming\Mozilla\Firefox\Profiles\vcnf517m.default [2020-07-12]
FF ProfilePath: C:\Users\zbyt8\AppData\Roaming\Mozilla\Firefox\Profiles\m8gpyyv4.default-release [2021-04-14]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2020-07-12] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2020-07-12] <==== ATTENTION
Chrome:
=======
CHR Profile: C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default [2021-04-14]
CHR DownloadDir: E:\Téléchargements
CHR Extension: (Slides) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-07-03]
CHR Extension: (Kaspersky Protection) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-02-21]
CHR Extension: (Docs) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-07-03]
CHR Extension: (Google Drive) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-20]
CHR Extension: (YouTube) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-07-03]
CHR Extension: (Adobe Acrobat) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-01]
CHR Extension: (Sheets) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-07-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-04-14]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-04-12]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-12]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AVP21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\avp.exe [381928 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [616344 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CueLLAccessService.exe [421928 2020-12-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [80936 2020-12-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [926176 2021-03-16] (Epic Games Inc. -> Epic Games, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1874272 2021-03-29] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6840672 2021-03-29] (GOG Sp. z o.o. -> GOG.com)
S3 klvssbridge64_21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\x64\vssbridge64.exe [467352 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-23] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2536536 2021-04-07] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3481176 2021-04-07] (Electronic Arts, Inc. -> Electronic Arts)
R2 RtkAudioUniversalService; C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_74518f403e753586\RtkAudUService64.exe [1219312 2020-12-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesUpdateService.exe [32912 2021-03-03] (SteelSeries ApS -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-26] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-26] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [251608 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [60312 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccess3B84E98236B28D4E075D5737DF9F567A1FB76E8A; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys [21752 2020-11-19] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [45984 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21920 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz150; C:\Windows\temp\cpuz150\cpuz150_x64.sys [44832 2021-04-14] (CPUID S.A.R.L.U. -> CPUID)
R1 klbackupdisk; C:\Windows\system32\DRIVERS\klbackupdisk.sys [110392 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [212280 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [127288 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [37496 2020-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\Windows\system32\DRIVERS\klflt.sys [523576 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [657696 2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1400600 2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.2\Bases\klids.sys [245304 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1025336 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [95544 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [113464 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [113464 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [85288 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [97080 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [257208 2020-10-29] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [99152 2020-07-03] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [310232 2021-01-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [116888 2021-01-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [207352 2020-10-29] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [153400 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [250168 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [300856 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-04-13] (Malwarebytes Inc -> Malwarebytes)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [24000 2019-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [48848 2020-09-25] (SteelSeries ApS -> SteelSeries ApS)
R3 sshid; C:\Windows\System32\drivers\sshid.sys [57440 2020-11-02] (SteelSeries ApS -> SteelSeries ApS)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [78216 2020-08-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [430320 2020-08-26] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-26] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-14 17:25 - 2021-04-14 17:25 - 000018971 _____ C:\Users\zbyt8\Desktop\FRST.txt
2021-04-14 17:25 - 2021-04-14 17:25 - 000000000 ____D C:\FRST
2021-04-14 17:24 - 2021-04-14 17:24 - 000304315 _____ C:\Users\zbyt8\Desktop\ZHPDiag.txt
2021-04-14 17:14 - 2021-04-14 17:15 - 000000865 _____ C:\Users\zbyt8\Desktop\ZHPSuite.lnk
2021-04-14 17:14 - 2021-04-14 17:14 - 003468440 _____ (Nicolas Coolman) C:\Users\zbyt8\Desktop\ZHPSuite.exe
2021-04-14 16:57 - 2021-04-14 16:52 - 002298368 _____ (Farbar) C:\Users\zbyt8\Desktop\FRST64.exe
2021-04-14 16:56 - 2021-04-14 17:24 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\ZHP
2021-04-14 16:18 - 2021-04-14 16:18 - 000000000 ____D C:\AdwCleaner
2021-04-13 17:04 - 2021-04-13 17:04 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2021-04-09 23:37 - 2021-04-09 23:37 - 000000257 _____ C:\Users\zbyt8\Desktop\Hades.url
2021-04-09 12:32 - 2021-04-09 12:32 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\Teams
2021-04-04 22:50 - 2021-04-04 22:50 - 000000000 ____D C:\Users\zbyt8\hitman
2021-04-04 22:26 - 2021-04-04 22:26 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\IO Interactive
2021-03-31 05:54 - 2021-03-31 05:58 - 000398034 _____ C:\Users\zbyt8\Desktop\3ème.pdf
2021-03-30 08:59 - 2021-03-30 08:57 - 000118385 _____ C:\Users\zbyt8\Desktop\5ème coeur.pdf
2021-03-30 08:58 - 2021-03-30 08:58 - 000433485 _____ C:\Users\zbyt8\Desktop\Activité 6 4ème.pdf
2021-03-29 06:48 - 2021-03-30 09:00 - 000211071 _____ C:\Users\zbyt8\Desktop\BAT 4eme Act 6.pdf
2021-03-29 06:47 - 2021-03-30 09:01 - 000211104 _____ C:\Users\zbyt8\Desktop\BAT 5eme.pdf
2021-03-29 06:46 - 2021-03-29 06:46 - 000414463 _____ C:\Users\zbyt8\Desktop\4ème Activité 5.pdf
2021-03-29 06:45 - 2021-03-26 06:54 - 000778600 _____ C:\Users\zbyt8\Desktop\Contrôle SVT 5ème.pdf
2021-03-26 23:42 - 2021-03-26 23:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTG Arena
2021-03-26 07:14 - 2021-03-26 07:14 - 000211041 _____ C:\Users\zbyt8\Desktop\BAT Correction.pdf
2021-03-26 07:11 - 2021-03-26 07:10 - 000586857 _____ C:\Users\zbyt8\Desktop\SVT 2nde fonctionnement des ovaires et de l'utérus.pdf
2021-03-26 07:11 - 2021-03-26 07:10 - 000211043 _____ C:\Users\zbyt8\Desktop\BAT 2nd.pdf
2021-03-26 07:11 - 2021-03-26 07:09 - 000107260 _____ C:\Users\zbyt8\Desktop\Correction.pdf
2021-03-13 10:52 - 2021-03-13 10:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-03-13 10:52 - 2021-03-13 10:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-03-13 10:52 - 2021-03-13 10:52 - 001314128 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-03-13 10:52 - 2021-03-13 10:52 - 000011359 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-03-13 10:51 - 2021-03-13 10:51 - 001822272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-03-13 10:51 - 2021-03-13 10:51 - 001394024 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-03-13 10:51 - 2021-03-13 10:51 - 001163776 _____ C:\Windows\system32\MBR2GPT.EXE
2021-03-13 10:51 - 2021-03-13 10:51 - 000707016 _____ C:\Windows\system32\TextShaping.dll
2021-03-13 10:51 - 2021-03-13 10:51 - 000611952 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-03-13 10:51 - 2021-03-13 10:51 - 000231248 _____ C:\Windows\system32\containerdevicemanagement.dll
2021-03-13 10:51 - 2021-03-13 10:51 - 000091136 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-02-18 21:50 - 2021-02-18 21:50 - 000000000 ____D C:\Users\zbyt8\Documents\4A Games
2021-02-18 21:39 - 2021-02-18 21:39 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2021-02-18 19:32 - 2021-02-18 19:32 - 000282512 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2021-02-18 19:32 - 2021-02-18 19:32 - 000281688 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2021-02-15 16:43 - 2021-02-15 16:43 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2021-02-08 22:53 - 2021-02-08 22:53 - 000113280 _____ (Protection Technology) C:\Windows\system32\Drivers\appdrv01.fs.{A7E56839-0B44-4261-8167-6DCA58E79946}.sys
2021-02-04 10:11 - 2021-02-04 10:11 - 000600183 _____ C:\Users\zbyt8\Desktop\FICHE_DE_VOEUX_21-22_ZBYTNIEWSKI.pdf
2021-01-24 15:08 - 2021-01-24 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair
2021-01-24 15:07 - 2021-01-24 15:07 - 000000000 ____D C:\Program Files (x86)\Corsair
2021-01-24 12:00 - 2021-02-20 19:05 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-01-21 13:41 - 2021-01-21 13:41 - 000310232 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2021-01-21 13:40 - 2021-01-21 13:40 - 000116888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-14 17:08 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2021-04-14 17:03 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-14 16:55 - 2020-07-04 14:33 - 000000000 ____D C:\Program Files (x86)\Steam
2021-04-14 16:19 - 2020-07-18 17:36 - 000000000 ____D C:\ProgramData\NVIDIA
2021-04-14 15:39 - 2020-07-03 02:36 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-04-14 14:30 - 2020-11-29 18:42 - 000000000 ____D C:\ProgramData\Riot Games
2021-04-14 11:35 - 2020-08-28 11:03 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-04-14 11:35 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-04-14 11:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2021-04-14 11:10 - 2020-07-03 02:41 - 001770910 _____ C:\Windows\system32\PerfStringBackup.INI
2021-04-14 11:10 - 2019-12-07 16:49 - 000791762 _____ C:\Windows\system32\perfh00C.dat
2021-04-14 11:10 - 2019-12-07 16:49 - 000149928 _____ C:\Windows\system32\perfc00C.dat
2021-04-14 11:03 - 2020-07-03 02:36 - 000008192 ___SH C:\DumpStack.log.tmp
2021-04-14 11:03 - 2020-07-03 02:36 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-04-14 00:49 - 2020-07-18 21:05 - 000003142 _____ C:\Windows\system32\Tasks\MSIAfterburner
2021-04-14 00:49 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-04-12 21:29 - 2020-08-28 11:03 - 000003634 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-12 21:29 - 2020-08-28 11:03 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-04-12 11:20 - 2020-07-18 21:02 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2021-04-10 23:06 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2021-04-10 02:15 - 2020-08-01 22:26 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\steelseries-engine-3-client
2021-04-09 23:04 - 2020-12-11 20:56 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-04-09 21:51 - 2020-11-29 18:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2021-04-08 20:07 - 2020-07-04 17:31 - 000000000 ____D C:\Program Files (x86)\Origin
2021-04-04 22:50 - 2020-07-03 02:39 - 000000000 ____D C:\Users\zbyt8
2021-04-01 11:22 - 2020-08-04 14:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gwent [GOG.com]
2021-03-31 05:55 - 2020-11-30 07:30 - 000211073 _____ C:\Users\zbyt8\Desktop\BAT 3ème.pdf
2021-03-29 21:09 - 2020-12-09 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberpunk 2077 [GOG.com]
2021-03-29 21:06 - 2020-07-04 09:29 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2021-03-29 21:06 - 2020-07-03 19:57 - 000000000 ____D C:\ProgramData\Package Cache
2021-03-28 15:50 - 2020-07-04 09:26 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2021-03-16 10:16 - 2020-07-04 11:48 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2021-03-15 10:58 - 2020-04-28 21:42 - 000657696 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klgse.sys
2021-03-15 10:58 - 2020-04-28 20:34 - 001400600 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
==================== Fichiers à la racine de certains dossiers ========
2020-07-13 06:21 - 2020-12-13 15:28 - 000007605 _____ () C:\Users\zbyt8\AppData\Local\resmon.resmoncfg
==================== SigCheckExt =========================
2020-07-08 08:58 - 2012-08-30 11:18 - 000252928 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2020-07-08 08:58 - 2012-08-30 11:18 - 000152576 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2019-08-30 10:05 - 2019-08-30 10:05 - 000105984 _____ (Beepa P/L) C:\Windows\system32\frapsv64.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000246272 _____ C:\Windows\system32\rtvcvfw64.dll
2020-07-03 20:14 - 2020-07-03 20:14 - 000010752 _____ C:\Windows\SetupAfterRebootService.exe
2020-07-08 08:58 - 2012-08-30 11:16 - 000366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL
2019-08-30 10:05 - 2019-08-30 10:05 - 000094208 _____ (Beepa P/L) C:\Windows\SysWOW64\frapsvid.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000247296 _____ C:\Windows\SysWOW64\rtvcvfw32.dll
2021-04-14 16:57 - 2021-04-14 16:52 - 002298368 _____ (Farbar) C:\Users\zbyt8\Desktop\FRST64.exe
2021-04-14 17:14 - 2021-04-14 17:14 - 003468440 _____ (Nicolas Coolman) C:\Users\zbyt8\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{cb6fac1c-bcd1-11ea-b8da-806e6f6e6963}
timeout 1
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {60b7a6ef-bccd-11ea-baee-995b52385f4c}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {cb6fac1c-bcd1-11ea-b8da-806e6f6e6963}
description Hard Drive
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \Windows\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {60b7a6f1-bccd-11ea-baee-995b52385f4c}
displaymessageoverride StartupRepair
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \Windows
resumeobject {60b7a6ef-bccd-11ea-baee-995b52385f4c}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {60b7a6f1-bccd-11ea-baee-995b52385f4c}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{60b7a6f2-bccd-11ea-baee-995b52385f4c}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-fr
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{60b7a6f2-bccd-11ea-baee-995b52385f4c}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {60b7a6ef-bccd-11ea-baee-995b52385f4c}
device partition=C:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {60b7a6f1-bccd-11ea-baee-995b52385f4c}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
integrityservices Enable
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {60b7a6f2-bccd-11ea-baee-995b52385f4c}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par zbyt8 (administrateur) sur DESKTOP-E618PT4 (Micro-Star International Co., Ltd. MS-7A38) (14-04-2021 17:25:45)
Exécuté depuis C:\Users\zbyt8\Desktop
Profils chargés: zbyt8
Platform: Windows 10 Home Version 2004 19041.867 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CueLLAccessService.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\avp.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\avpui.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2101.10.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_74518f403e753586\RtkAudUService64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_74518f403e753586\RtkAudUService64.exe [1219312 2020-12-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [CORSAIR iCUE Software] => C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe [410152 2020-12-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4087528 2021-04-12] (Valve -> Valve Corporation)
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14916448 2021-03-29] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-1688234633-52662162-2205139778-1001\...\MountPoints2: {c3769122-774a-11eb-ba9c-2cf05d286a98} - "F:\HiSuiteDownLoader.exe"
HKLM\...\Windows x64\Print Processors\Canon MP620 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPD9D.DLL [27648 2008-10-09] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MP620 series: C:\Windows\system32\CNMLM9D.DLL [279040 2008-10-09] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\Windows\system32\CNMN6PPM.DLL [252928 2012-08-30] (CANON INC.) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.114\Installer\chrmstp.exe [2021-04-02] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2021-03-05]
ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS -> SteelSeries ApS)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {12E81188-74FE-46EE-8F33-C83FA3D2D8EE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-03] (Google LLC -> Google LLC)
Task: {7CF61F67-D0FC-46E8-B632-1FF6952EA04F} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [782320 2019-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {E1E7B1A4-A647-42BF-BBBA-F33AEDD15A84} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-07-03] (Google LLC -> Google LLC)
Task: {E553CE67-8018-4133-B97A-808275C7DC2F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 89.2.0.1 89.2.0.2
Tcpip\..\Interfaces\{950f64be-40ae-43c8-bf11-c7bfd4352bd3}: [DhcpNameServer] 89.2.0.1 89.2.0.2
Edge:
=======
Edge Profile: C:\Users\zbyt8\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-14]
Edge HKU\S-1-5-21-1688234633-52662162-2205139778-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: vcnf517m.default
FF ProfilePath: C:\Users\zbyt8\AppData\Roaming\Mozilla\Firefox\Profiles\vcnf517m.default [2020-07-12]
FF ProfilePath: C:\Users\zbyt8\AppData\Roaming\Mozilla\Firefox\Profiles\m8gpyyv4.default-release [2021-04-14]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\FFExt\light_plugin_firefox\addon.xpi => non trouvé(e)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2020-07-12] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2020-07-12] <==== ATTENTION
Chrome:
=======
CHR Profile: C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default [2021-04-14]
CHR DownloadDir: E:\Téléchargements
CHR Extension: (Slides) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-07-03]
CHR Extension: (Kaspersky Protection) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-02-21]
CHR Extension: (Docs) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-07-03]
CHR Extension: (Google Drive) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-20]
CHR Extension: (YouTube) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-07-03]
CHR Extension: (Adobe Acrobat) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-01]
CHR Extension: (Sheets) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-07-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-04-14]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-04-12]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\zbyt8\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-12]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AVP21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\avp.exe [381928 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [616344 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CueLLAccessService.exe [421928 2020-12-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [80936 2020-12-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [926176 2021-03-16] (Epic Games Inc. -> Epic Games, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1874272 2021-03-29] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6840672 2021-03-29] (GOG Sp. z o.o. -> GOG.com)
S3 klvssbridge64_21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Security Cloud 21.2\x64\vssbridge64.exe [467352 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-23] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2536536 2021-04-07] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3481176 2021-04-07] (Electronic Arts, Inc. -> Electronic Arts)
R2 RtkAudioUniversalService; C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_74518f403e753586\RtkAudUService64.exe [1219312 2020-12-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesUpdateService.exe [32912 2021-03-03] (SteelSeries ApS -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\NisSrv.exe [2169568 2020-08-26] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2007.8-0\MsMpEng.exe [128376 2020-08-26] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_a51067c0ac557884\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [251608 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [60312 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccess3B84E98236B28D4E075D5737DF9F567A1FB76E8A; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys [21752 2020-11-19] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\Windows\System32\drivers\CorsairVBusDriver.sys [45984 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\Windows\System32\drivers\CorsairVHidDriver.sys [21920 2020-10-29] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz150; C:\Windows\temp\cpuz150\cpuz150_x64.sys [44832 2021-04-14] (CPUID S.A.R.L.U. -> CPUID)
R1 klbackupdisk; C:\Windows\system32\DRIVERS\klbackupdisk.sys [110392 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [212280 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [127288 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [37496 2020-10-22] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\Windows\system32\DRIVERS\klflt.sys [523576 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [657696 2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1400600 2021-03-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.2\Bases\klids.sys [245304 2021-04-13] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1025336 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [95544 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [113464 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [113464 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [85288 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [97080 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [257208 2020-10-29] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 klupd_klif_kimul; C:\Windows\System32\Drivers\klupd_klif_kimul.sys [99152 2020-07-03] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [310232 2021-01-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [116888 2021-01-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [207352 2020-10-29] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [153400 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [250168 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [300856 2020-10-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-04-13] (Malwarebytes Inc -> Malwarebytes)
R3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [24000 2019-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [48848 2020-09-25] (SteelSeries ApS -> SteelSeries ApS)
R3 sshid; C:\Windows\System32\drivers\sshid.sys [57440 2020-11-02] (SteelSeries ApS -> SteelSeries ApS)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [78216 2020-08-26] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [430320 2020-08-26] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [98520 2020-08-26] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-14 17:25 - 2021-04-14 17:25 - 000018971 _____ C:\Users\zbyt8\Desktop\FRST.txt
2021-04-14 17:25 - 2021-04-14 17:25 - 000000000 ____D C:\FRST
2021-04-14 17:24 - 2021-04-14 17:24 - 000304315 _____ C:\Users\zbyt8\Desktop\ZHPDiag.txt
2021-04-14 17:14 - 2021-04-14 17:15 - 000000865 _____ C:\Users\zbyt8\Desktop\ZHPSuite.lnk
2021-04-14 17:14 - 2021-04-14 17:14 - 003468440 _____ (Nicolas Coolman) C:\Users\zbyt8\Desktop\ZHPSuite.exe
2021-04-14 16:57 - 2021-04-14 16:52 - 002298368 _____ (Farbar) C:\Users\zbyt8\Desktop\FRST64.exe
2021-04-14 16:56 - 2021-04-14 17:24 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\ZHP
2021-04-14 16:18 - 2021-04-14 16:18 - 000000000 ____D C:\AdwCleaner
2021-04-13 17:04 - 2021-04-13 17:04 - 000248992 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2021-04-09 23:37 - 2021-04-09 23:37 - 000000257 _____ C:\Users\zbyt8\Desktop\Hades.url
2021-04-09 12:32 - 2021-04-09 12:32 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\Teams
2021-04-04 22:50 - 2021-04-04 22:50 - 000000000 ____D C:\Users\zbyt8\hitman
2021-04-04 22:26 - 2021-04-04 22:26 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\IO Interactive
2021-03-31 05:54 - 2021-03-31 05:58 - 000398034 _____ C:\Users\zbyt8\Desktop\3ème.pdf
2021-03-30 08:59 - 2021-03-30 08:57 - 000118385 _____ C:\Users\zbyt8\Desktop\5ème coeur.pdf
2021-03-30 08:58 - 2021-03-30 08:58 - 000433485 _____ C:\Users\zbyt8\Desktop\Activité 6 4ème.pdf
2021-03-29 06:48 - 2021-03-30 09:00 - 000211071 _____ C:\Users\zbyt8\Desktop\BAT 4eme Act 6.pdf
2021-03-29 06:47 - 2021-03-30 09:01 - 000211104 _____ C:\Users\zbyt8\Desktop\BAT 5eme.pdf
2021-03-29 06:46 - 2021-03-29 06:46 - 000414463 _____ C:\Users\zbyt8\Desktop\4ème Activité 5.pdf
2021-03-29 06:45 - 2021-03-26 06:54 - 000778600 _____ C:\Users\zbyt8\Desktop\Contrôle SVT 5ème.pdf
2021-03-26 23:42 - 2021-03-26 23:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTG Arena
2021-03-26 07:14 - 2021-03-26 07:14 - 000211041 _____ C:\Users\zbyt8\Desktop\BAT Correction.pdf
2021-03-26 07:11 - 2021-03-26 07:10 - 000586857 _____ C:\Users\zbyt8\Desktop\SVT 2nde fonctionnement des ovaires et de l'utérus.pdf
2021-03-26 07:11 - 2021-03-26 07:10 - 000211043 _____ C:\Users\zbyt8\Desktop\BAT 2nd.pdf
2021-03-26 07:11 - 2021-03-26 07:09 - 000107260 _____ C:\Users\zbyt8\Desktop\Correction.pdf
2021-03-13 10:52 - 2021-03-13 10:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-03-13 10:52 - 2021-03-13 10:52 - 002755584 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2021-03-13 10:52 - 2021-03-13 10:52 - 001314128 _____ (Microsoft Corporation) C:\Windows\system32\SecConfig.efi
2021-03-13 10:52 - 2021-03-13 10:52 - 000011359 _____ C:\Windows\system32\DrtmAuthTxt.wim
2021-03-13 10:51 - 2021-03-13 10:51 - 001822272 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2021-03-13 10:51 - 2021-03-13 10:51 - 001394024 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2021-03-13 10:51 - 2021-03-13 10:51 - 001163776 _____ C:\Windows\system32\MBR2GPT.EXE
2021-03-13 10:51 - 2021-03-13 10:51 - 000707016 _____ C:\Windows\system32\TextShaping.dll
2021-03-13 10:51 - 2021-03-13 10:51 - 000611952 _____ C:\Windows\SysWOW64\TextShaping.dll
2021-03-13 10:51 - 2021-03-13 10:51 - 000231248 _____ C:\Windows\system32\containerdevicemanagement.dll
2021-03-13 10:51 - 2021-03-13 10:51 - 000091136 _____ C:\Windows\system32\Drivers\cimfs.sys
2021-02-18 21:50 - 2021-02-18 21:50 - 000000000 ____D C:\Users\zbyt8\Documents\4A Games
2021-02-18 21:39 - 2021-02-18 21:39 - 000000000 ____D C:\Program Files (x86)\AGEIA Technologies
2021-02-18 19:32 - 2021-02-18 19:32 - 000282512 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2021-02-18 19:32 - 2021-02-18 19:32 - 000281688 _____ C:\Windows\SysWOW64\PnkBstrB.xtr
2021-02-15 16:43 - 2021-02-15 16:43 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RivaTuner Statistics Server
2021-02-08 22:53 - 2021-02-08 22:53 - 000113280 _____ (Protection Technology) C:\Windows\system32\Drivers\appdrv01.fs.{A7E56839-0B44-4261-8167-6DCA58E79946}.sys
2021-02-04 10:11 - 2021-02-04 10:11 - 000600183 _____ C:\Users\zbyt8\Desktop\FICHE_DE_VOEUX_21-22_ZBYTNIEWSKI.pdf
2021-01-24 15:08 - 2021-01-24 15:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair
2021-01-24 15:07 - 2021-01-24 15:07 - 000000000 ____D C:\Program Files (x86)\Corsair
2021-01-24 12:00 - 2021-02-20 19:05 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-01-21 13:41 - 2021-01-21 13:41 - 000310232 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klark.sys
2021-01-21 13:40 - 2021-01-21 13:40 - 000116888 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klupd_klif_klbg.sys
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-04-14 17:08 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2021-04-14 17:03 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-14 16:55 - 2020-07-04 14:33 - 000000000 ____D C:\Program Files (x86)\Steam
2021-04-14 16:19 - 2020-07-18 17:36 - 000000000 ____D C:\ProgramData\NVIDIA
2021-04-14 15:39 - 2020-07-03 02:36 - 000000000 ____D C:\Windows\system32\SleepStudy
2021-04-14 14:30 - 2020-11-29 18:42 - 000000000 ____D C:\ProgramData\Riot Games
2021-04-14 11:35 - 2020-08-28 11:03 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-04-14 11:35 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-04-14 11:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2021-04-14 11:10 - 2020-07-03 02:41 - 001770910 _____ C:\Windows\system32\PerfStringBackup.INI
2021-04-14 11:10 - 2019-12-07 16:49 - 000791762 _____ C:\Windows\system32\perfh00C.dat
2021-04-14 11:10 - 2019-12-07 16:49 - 000149928 _____ C:\Windows\system32\perfc00C.dat
2021-04-14 11:03 - 2020-07-03 02:36 - 000008192 ___SH C:\DumpStack.log.tmp
2021-04-14 11:03 - 2020-07-03 02:36 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-04-14 00:49 - 2020-07-18 21:05 - 000003142 _____ C:\Windows\system32\Tasks\MSIAfterburner
2021-04-14 00:49 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2021-04-12 21:29 - 2020-08-28 11:03 - 000003634 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-12 21:29 - 2020-08-28 11:03 - 000003510 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-04-12 11:20 - 2020-07-18 21:02 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2021-04-10 23:06 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2021-04-10 02:15 - 2020-08-01 22:26 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\steelseries-engine-3-client
2021-04-09 23:04 - 2020-12-11 20:56 - 000000000 ____D C:\Users\zbyt8\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-04-09 21:51 - 2020-11-29 18:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2021-04-08 20:07 - 2020-07-04 17:31 - 000000000 ____D C:\Program Files (x86)\Origin
2021-04-04 22:50 - 2020-07-03 02:39 - 000000000 ____D C:\Users\zbyt8
2021-04-01 11:22 - 2020-08-04 14:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gwent [GOG.com]
2021-03-31 05:55 - 2020-11-30 07:30 - 000211073 _____ C:\Users\zbyt8\Desktop\BAT 3ème.pdf
2021-03-29 21:09 - 2020-12-09 21:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberpunk 2077 [GOG.com]
2021-03-29 21:06 - 2020-07-04 09:29 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2021-03-29 21:06 - 2020-07-03 19:57 - 000000000 ____D C:\ProgramData\Package Cache
2021-03-28 15:50 - 2020-07-04 09:26 - 000199128 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2021-03-16 10:16 - 2020-07-04 11:48 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2021-03-15 10:58 - 2020-04-28 21:42 - 000657696 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klgse.sys
2021-03-15 10:58 - 2020-04-28 20:34 - 001400600 _____ (AO Kaspersky Lab) C:\Windows\system32\Drivers\klhk.sys
==================== Fichiers à la racine de certains dossiers ========
2020-07-13 06:21 - 2020-12-13 15:28 - 000007605 _____ () C:\Users\zbyt8\AppData\Local\resmon.resmoncfg
==================== SigCheckExt =========================
2020-07-08 08:58 - 2012-08-30 11:18 - 000252928 _____ (CANON INC.) C:\Windows\system32\CNMN6PPM.DLL
2020-07-08 08:58 - 2012-08-30 11:18 - 000152576 _____ (CANON INC.) C:\Windows\system32\CNMN6UI.DLL
2019-08-30 10:05 - 2019-08-30 10:05 - 000105984 _____ (Beepa P/L) C:\Windows\system32\frapsv64.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000246272 _____ C:\Windows\system32\rtvcvfw64.dll
2020-07-03 20:14 - 2020-07-03 20:14 - 000010752 _____ C:\Windows\SetupAfterRebootService.exe
2020-07-08 08:58 - 2012-08-30 11:16 - 000366592 _____ (CANON INC.) C:\Windows\SysWOW64\CNMNPPM.DLL
2019-08-30 10:05 - 2019-08-30 10:05 - 000094208 _____ (Beepa P/L) C:\Windows\SysWOW64\frapsvid.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000247296 _____ C:\Windows\SysWOW64\rtvcvfw32.dll
2021-04-14 16:57 - 2021-04-14 16:52 - 002298368 _____ (Farbar) C:\Users\zbyt8\Desktop\FRST64.exe
2021-04-14 17:14 - 2021-04-14 17:14 - 003468440 _____ (Nicolas Coolman) C:\Users\zbyt8\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{cb6fac1c-bcd1-11ea-b8da-806e6f6e6963}
timeout 1
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {60b7a6ef-bccd-11ea-baee-995b52385f4c}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {cb6fac1c-bcd1-11ea-b8da-806e6f6e6963}
description Hard Drive
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \Windows\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {60b7a6f1-bccd-11ea-baee-995b52385f4c}
displaymessageoverride StartupRepair
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \Windows
resumeobject {60b7a6ef-bccd-11ea-baee-995b52385f4c}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {60b7a6f1-bccd-11ea-baee-995b52385f4c}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{60b7a6f2-bccd-11ea-baee-995b52385f4c}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-fr
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{60b7a6f2-bccd-11ea-baee-995b52385f4c}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {60b7a6ef-bccd-11ea-baee-995b52385f4c}
device partition=C:
path \Windows\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {60b7a6f1-bccd-11ea-baee-995b52385f4c}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
integrityservices Enable
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {60b7a6f2-bccd-11ea-baee-995b52385f4c}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================