Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 12-06-2021
Exécuté par baba_ (administrateur) sur LAPTOP-2I1UQRO1 (HP HP Laptop 15-da1xxx) (14-06-2021 20:53:13)
Exécuté depuis C:\Users\baba_\Desktop
Profils chargés: baba_
Platform: Windows 10 Home Single Language Version 2004 19041.985 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <32>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_e0cb3d04adc61069\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.10.1627.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_efb119a73d6b56f6\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_efb119a73d6b56f6\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_577b4722c749a41f\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2b1d9e395a05d1c9\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2b1d9e395a05d1c9\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_42f9d9bfb72d84cf\RstMwService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20122.11121.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe
(philandro Software GmbH -> philandro Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe <2>
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics) C:\ProgramData\Samsung Apps\Portable SSD\SamsungPortableSSDMon.exe
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(SWE von Schleusen) [Fichier non signé] C:\Program Files (x86)\UltimateZip\uzqkst.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe [1253232 2021-03-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKU\S-1-5-21-855102862-1451326360-2903730564-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\baba_\AppData\Local\Microsoft\Teams\Update.exe [2453720 2021-03-07] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.101\Installer\chrmstp.exe [2021-06-14] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-09-13]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
Startup: C:\Users\baba_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UltimateZip Quick Start.lnk [2020-06-13]
ShortcutTarget: UltimateZip Quick Start.lnk -> C:\Program Files (x86)\UltimateZip\uzqkst.exe (SWE von Schleusen) [Fichier non signé]
GroupPolicy-x32: Restriction ? <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {251B2686-8B31-4690-8263-85F1FC669B37} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {308E418B-39B3-4842-AB69-98AEAE8E9F96} - System32\Tasks\Samsung_PSSD_Registration => C:\ProgramData\Samsung Apps\Portable SSD\SamsungPortableSSDMon.exe [499184 2020-12-30] (Samsung Electronics Co., Ltd. -> Samsung Electronics)
Task: {331C7D9F-EBDB-451F-8FAF-F5145CF3AA22} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {39B44A9A-5C71-4F05-811E-F21448147320} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {58316230-8CA4-4858-BB9D-A6820870C658} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147272 2021-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {662199BF-5053-4D68-9D8D-511FA957A64D} - System32\Tasks\G2MUploadTask-S-1-5-21-855102862-1451326360-2903730564-1001 => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupload.exe [31320 2021-04-11] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {734F67F0-B710-4767-B0CC-1B6A9029677E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-21] (Google LLC -> Google LLC)
Task: {74E24DD2-E226-47EB-99FA-4704DF86D848} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124856 2021-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {79532CF4-8934-4BC8-A52B-228AC49B305B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7DE79FB-33EB-41C6-8A4B-A2F503971C1D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136304 2021-06-14] (HP Inc. -> HP Inc.)
Task: {C153A493-BFB1-4098-845D-26E2B7549B48} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-21] (Google LLC -> Google LLC)
Task: {C63D204D-F645-4B35-AA5F-DBFEF27A463A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124856 2021-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {C6E16403-87E1-4FDA-B9E4-EBFAD78BF4EE} - System32\Tasks\G2MUpdateTask-S-1-5-21-855102862-1451326360-2903730564-1001 => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupdate.exe [31320 2021-04-11] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {C9007082-E9E7-484D-A9CC-DF03BA1420EB} - System32\Tasks\Hewlett-Packard\HP Web Products Detection => C:\Program Files (x86)\HP\HP Support Framework\Modules\HPWPD.exe [303960 2020-11-15] (HP Inc. -> HP Inc.)
Task: {D9FDCBFB-4150-4D5D-855C-6912CDB7C64F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EE551F6F-167B-4C23-B62F-816A5180CE64} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF1A197A-6EA0-49F0-860A-F535E526B10D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147272 2021-06-14] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-855102862-1451326360-2903730564-1001.job => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-855102862-1451326360-2903730564-1001.job => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupload.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a75b40dd-7ef3-42c9-9ca1-5f7af93ee8fd}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\baba_\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-14]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-855102862-1451326360-2903730564-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\baba_\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-05-12] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
Chrome:
=======
CHR Profile: C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default [2021-06-14]
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Extension: (Slides) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-01-21]
CHR Extension: (Docs) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-01-21]
CHR Extension: (Google Drive) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-01-21]
CHR Extension: (Adobe Acrobat) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-15]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-15]
CHR Extension: (Sheets) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-01-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-04]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-05-03]
CHR Extension: (Avast Online Security) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-02-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-13]
CHR Extension: (Gmail) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-07]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3743464 2021-03-09] (philandro Software GmbH -> philandro Software GmbH)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11279752 2021-06-03] (Microsoft Corporation -> Microsoft Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [905080 2020-03-18] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\AppHelperCap.exe [733208 2021-04-20] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\DiagsCap.exe [731160 2021-04-20] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\NetworkCap.exe [731160 2021-04-20] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-06-06] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\SysInfoCap.exe [732184 2021-04-20] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_e0cb3d04adc61069\x64\TouchpointAnalyticsClientService.exe [489528 2021-04-21] (HP Inc. -> HP Inc.)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe [2644776 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe [136656 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [127936 2019-03-26] (Alcorlink Corp. -> )
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [25024 2019-04-18] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 MpKsl78776add; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9C30250C-06DF-4B3F-8875-7AA2049B81BF}\MpKslDrv.sys [107744 2021-06-14] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2021-06-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [425184 2021-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76000 2021-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-14 20:53 - 2021-06-14 20:55 - 000020557 _____ C:\Users\baba_\Desktop\FRST.txt
2021-06-14 20:52 - 2021-06-14 20:54 - 000000000 ____D C:\FRST
2021-06-14 20:51 - 2021-06-14 20:51 - 002300416 _____ (Farbar) C:\Users\baba_\Desktop\FRST64.exe
2021-06-14 20:38 - 2021-06-14 20:38 - 000261245 _____ C:\Users\baba_\Desktop\ZHPDiag.txt
2021-06-14 20:30 - 2021-06-14 20:30 - 000000872 _____ C:\Users\baba_\Desktop\ZHPSuite.lnk
2021-06-14 20:29 - 2021-06-14 20:30 - 003471512 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPSuite.exe
2021-06-14 20:28 - 2021-06-14 20:28 - 000000000 ____D C:\Users\baba_\Desktop\cleaning
2021-06-14 18:56 - 2021-06-14 18:56 - 000000000 ____D C:\Users\baba_\AppData\Local\mbam
2021-06-14 18:53 - 2021-06-14 18:53 - 000000000 ____D C:\Program Files\Malwarebytes
2021-06-14 18:51 - 2021-06-14 18:51 - 002080712 _____ (Malwarebytes) C:\Users\baba_\Downloads\MBSetup.exe
2021-06-14 18:51 - 2021-06-14 18:51 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2021-06-14 18:37 - 2021-06-14 18:41 - 000000000 ____D C:\AdwCleaner
2021-06-14 18:36 - 2021-06-14 18:36 - 008534696 _____ (Malwarebytes) C:\Users\baba_\Downloads\adwcleaner_8.2.exe
2021-06-14 18:11 - 2021-06-14 18:11 - 000000882 _____ C:\Users\baba_\Desktop\ZHPCleaner.lnk
2021-06-14 17:06 - 2021-06-14 17:06 - 000000000 ____D C:\Users\baba_\Downloads\Wub
2021-06-14 17:05 - 2021-06-14 17:05 - 001003898 _____ C:\Users\baba_\Downloads\Wub.zip
2021-06-14 17:00 - 2021-06-14 17:00 - 000000000 ____D C:\Users\baba_\AppData\Local\OneDrive
2021-06-14 15:15 - 2021-06-14 15:17 - 152232431 _____ C:\Users\baba_\Downloads\Videos (2).zip
2021-06-14 14:23 - 2021-06-14 20:38 - 000000000 ____D C:\Users\baba_\AppData\Roaming\ZHP
2021-06-14 14:23 - 2021-06-14 20:30 - 000000000 ____D C:\Users\baba_\AppData\Local\ZHP
2021-06-14 14:23 - 2021-06-14 14:23 - 000000872 _____ C:\Users\baba_\Desktop\ZHPDiag.lnk
2021-06-14 14:22 - 2021-06-14 14:22 - 003276440 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPDiag3.exe
2021-06-14 13:13 - 2021-06-14 13:13 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-06-14 13:12 - 2021-06-14 13:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-14 13:12 - 2021-06-14 13:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-14 13:12 - 2021-06-14 13:12 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-06-14 13:11 - 2021-06-14 13:11 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-06-14 13:11 - 2021-06-14 13:11 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-06-14 13:11 - 2021-06-14 13:11 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-06-14 13:10 - 2021-06-14 13:10 - 001823816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-06-14 13:10 - 2021-06-14 13:10 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-06-14 13:10 - 2021-06-14 13:10 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-06-14 13:09 - 2021-06-14 13:09 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-06-14 13:08 - 2021-06-14 13:08 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-06-01 20:11 - 2021-06-01 20:13 - 000140846 _____ C:\Users\baba_\Downloads\gmsla2000.pdf
2021-05-15 21:17 - 2021-06-14 17:01 - 000002408 _____ C:\Users\baba_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-04-29 11:05 - 2021-04-29 11:05 - 019251780 _____ C:\Users\baba_\Downloads\archive (1).zip
2021-04-17 17:51 - 2021-04-17 17:51 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-16 12:34 - 2021-04-16 12:35 - 131014788 _____ C:\Users\baba_\Downloads\Ismail Sentissi - Genoma - Ismail Sentissi Trio.zip
2021-04-16 12:16 - 2020-11-11 03:50 - 000306568 _____ C:\WINDOWS\system32\libmfxhw64.dll
2021-04-16 12:16 - 2020-11-11 03:50 - 000254496 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2021-04-16 12:16 - 2020-11-11 03:50 - 000171536 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2021-04-16 12:16 - 2020-11-11 03:50 - 000146832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 026679128 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 013521752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 001789712 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001789712 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001385744 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001385744 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001096328 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 001096328 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000949384 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000949384 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000507736 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000427864 _____ C:\WINDOWS\system32\ze_loader.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000370520 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000148824 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2021-03-29 19:19 - 2021-03-29 19:19 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-29 19:17 - 2021-03-29 19:17 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-29 19:17 - 2021-03-29 19:17 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-24 20:05 - 2020-09-10 00:53 - 041975010 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-14 21:02 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-06-14 20:49 - 2020-10-10 18:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-06-14 20:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-06-14 20:27 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-06-14 18:51 - 2020-10-10 19:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2021-06-14 18:51 - 2020-10-10 19:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2021-06-14 18:51 - 2020-10-10 18:57 - 001791436 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-06-14 18:51 - 2019-12-07 15:49 - 000797844 _____ C:\WINDOWS\system32\perfh00C.dat
2021-06-14 18:51 - 2019-12-07 15:49 - 000160198 _____ C:\WINDOWS\system32\perfc00C.dat
2021-06-14 18:47 - 2020-01-21 12:37 - 000000000 __SHD C:\Users\baba_\IntelGraphicsProfiles
2021-06-14 18:45 - 2020-10-10 19:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-06-14 18:45 - 2020-10-10 18:37 - 000008192 ___SH C:\DumpStack.log.tmp
2021-06-14 18:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-06-14 18:45 - 2019-10-18 13:41 - 000000000 ____D C:\Intel
2021-06-14 18:44 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-06-14 18:41 - 2020-01-21 13:08 - 000000000 ____D C:\Users\baba_\AppData\Roaming\Hewlett-Packard
2021-06-14 18:41 - 2019-10-18 13:16 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-06-14 18:41 - 2019-05-07 06:14 - 000000000 ____D C:\ProgramData\HP
2021-06-14 18:41 - 2019-04-26 21:22 - 000000000 ___HD C:\hp
2021-06-14 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-06-14 17:02 - 2020-10-10 19:08 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-855102862-1451326360-2903730564-1001
2021-06-14 17:02 - 2020-01-21 12:40 - 000000000 ___RD C:\Users\baba_\OneDrive
2021-06-14 15:28 - 2020-01-29 21:29 - 000000000 ____D C:\Users\baba_\AppData\Local\HP_Inc
2021-06-14 14:49 - 2020-01-21 19:21 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-06-14 14:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-06-14 14:36 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-06-14 14:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-06-14 14:03 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-06-14 13:58 - 2020-01-22 01:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-14 13:55 - 2019-04-15 16:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-06-14 13:54 - 2020-01-22 01:32 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-06-14 13:53 - 2020-08-25 01:23 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-14 13:44 - 2020-10-10 18:37 - 000615328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-06-14 13:37 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-06-14 13:25 - 2019-12-07 15:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-06-14 12:32 - 2019-05-07 06:18 - 000000000 ____D C:\Program Files\Microsoft Office
2021-06-14 12:28 - 2020-06-09 11:58 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-06-06 18:39 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-06-01 19:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-05-25 07:48 - 2020-08-25 01:23 - 000725304 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2021-05-25 07:48 - 2020-08-25 01:23 - 000470328 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
==================== SigCheckExt =========================
2020-11-15 13:21 - 2012-06-20 16:38 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll
2021-06-14 20:51 - 2021-06-14 20:51 - 002300416 _____ (Farbar) C:\Users\baba_\Desktop\FRST64.exe
2021-06-14 14:22 - 2021-06-14 14:22 - 003276440 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPDiag3.exe
2021-06-14 20:29 - 2021-06-14 20:30 - 003471512 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{19969966-f1f0-11e9-849b-040e3cf2a181}
{19969967-f1f0-11e9-849b-040e3cf2a181}
{da5bfc9e-f2fe-11ea-81a9-806e6f6e6963}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {279d61c8-0b1f-11eb-8462-d0517b0ee526}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {19969966-f1f0-11e9-849b-040e3cf2a181}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {19969967-f1f0-11e9-849b-040e3cf2a181}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {da5bfc9e-f2fe-11ea-81a9-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {279d61ca-0b1f-11eb-8462-d0517b0ee526}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {279d61c8-0b1f-11eb-8462-d0517b0ee526}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {279d61ca-0b1f-11eb-8462-d0517b0ee526}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{279d61cb-0b1f-11eb-8462-d0517b0ee526}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{279d61cb-0b1f-11eb-8462-d0517b0ee526}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {279d61c8-0b1f-11eb-8462-d0517b0ee526}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {279d61ca-0b1f-11eb-8462-d0517b0ee526}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {279d61cb-0b1f-11eb-8462-d0517b0ee526}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par baba_ (administrateur) sur LAPTOP-2I1UQRO1 (HP HP Laptop 15-da1xxx) (14-06-2021 20:53:13)
Exécuté depuis C:\Users\baba_\Desktop
Profils chargés: baba_
Platform: Windows 10 Home Single Language Version 2004 19041.985 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <32>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.82\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_e0cb3d04adc61069\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPJumpStarts_1.10.1627.0_x64__v10z8vjag6ke6\HP.JumpStarts.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_21306a77b30fd6e0\esif_uf.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_efb119a73d6b56f6\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_efb119a73d6b56f6\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_577b4722c749a41f\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2b1d9e395a05d1c9\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_2b1d9e395a05d1c9\IntelCpHeciSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_42f9d9bfb72d84cf\RstMwService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20122.11121.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe
(philandro Software GmbH -> philandro Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe <2>
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics) C:\ProgramData\Samsung Apps\Portable SSD\SamsungPortableSSDMon.exe
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(SWE von Schleusen) [Fichier non signé] C:\Program Files (x86)\UltimateZip\uzqkst.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bb0c442560f99618\RtkAudUService64.exe [1253232 2021-03-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2097600 2018-04-18] (Realtek Semiconductor Corp. -> Realtek)
HKLM\...\Run: [WindowsDefender] => "%ProgramFiles%\Windows Defender\MSASCuiL.exe"
HKU\S-1-5-21-855102862-1451326360-2903730564-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\baba_\AppData\Local\Microsoft\Teams\Update.exe [2453720 2021-03-07] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\91.0.4472.101\Installer\chrmstp.exe [2021-06-14] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2020-09-13]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
Startup: C:\Users\baba_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UltimateZip Quick Start.lnk [2020-06-13]
ShortcutTarget: UltimateZip Quick Start.lnk -> C:\Program Files (x86)\UltimateZip\uzqkst.exe (SWE von Schleusen) [Fichier non signé]
GroupPolicy-x32: Restriction ? <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {251B2686-8B31-4690-8263-85F1FC669B37} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {308E418B-39B3-4842-AB69-98AEAE8E9F96} - System32\Tasks\Samsung_PSSD_Registration => C:\ProgramData\Samsung Apps\Portable SSD\SamsungPortableSSDMon.exe [499184 2020-12-30] (Samsung Electronics Co., Ltd. -> Samsung Electronics)
Task: {331C7D9F-EBDB-451F-8FAF-F5145CF3AA22} - System32\Tasks\HP\Consent Manager Launcher => sc start hptouchpointanalyticsservice
Task: {39B44A9A-5C71-4F05-811E-F21448147320} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {58316230-8CA4-4858-BB9D-A6820870C658} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147272 2021-06-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {662199BF-5053-4D68-9D8D-511FA957A64D} - System32\Tasks\G2MUploadTask-S-1-5-21-855102862-1451326360-2903730564-1001 => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupload.exe [31320 2021-04-11] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {734F67F0-B710-4767-B0CC-1B6A9029677E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-21] (Google LLC -> Google LLC)
Task: {74E24DD2-E226-47EB-99FA-4704DF86D848} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124856 2021-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {79532CF4-8934-4BC8-A52B-228AC49B305B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7DE79FB-33EB-41C6-8A4B-A2F503971C1D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136304 2021-06-14] (HP Inc. -> HP Inc.)
Task: {C153A493-BFB1-4098-845D-26E2B7549B48} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-21] (Google LLC -> Google LLC)
Task: {C63D204D-F645-4B35-AA5F-DBFEF27A463A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23124856 2021-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {C6E16403-87E1-4FDA-B9E4-EBFAD78BF4EE} - System32\Tasks\G2MUpdateTask-S-1-5-21-855102862-1451326360-2903730564-1001 => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupdate.exe [31320 2021-04-11] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {C9007082-E9E7-484D-A9CC-DF03BA1420EB} - System32\Tasks\Hewlett-Packard\HP Web Products Detection => C:\Program Files (x86)\HP\HP Support Framework\Modules\HPWPD.exe [303960 2020-11-15] (HP Inc. -> HP Inc.)
Task: {D9FDCBFB-4150-4D5D-855C-6912CDB7C64F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EE551F6F-167B-4C23-B62F-816A5180CE64} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MpCmdRun.exe [644888 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FF1A197A-6EA0-49F0-860A-F535E526B10D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [147272 2021-06-14] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-855102862-1451326360-2903730564-1001.job => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-855102862-1451326360-2903730564-1001.job => C:\Users\baba_\AppData\Local\GoToMeeting\19598\g2mupload.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{a75b40dd-7ef3-42c9-9ca1-5f7af93ee8fd}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\baba_\AppData\Local\Microsoft\Edge\User Data\Default [2021-06-14]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-06-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-06-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-05-28] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-855102862-1451326360-2903730564-1001: @zoom.us/ZoomVideoPlugin -> C:\Users\baba_\AppData\Roaming\Zoom\bin\npzoomplugin.dll [2020-05-12] (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
Chrome:
=======
CHR Profile: C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default [2021-06-14]
CHR HomePage: Default -> hxxp://www.google.com
CHR StartupUrls: Default -> "hxxp://www.google.com"
CHR Extension: (Slides) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-01-21]
CHR Extension: (Docs) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-01-21]
CHR Extension: (Google Drive) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-01-21]
CHR Extension: (Adobe Acrobat) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-03-15]
CHR Extension: (Avast SafePrice | Comparaison, offres, coupons) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2020-11-15]
CHR Extension: (Sheets) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-01-21]
CHR Extension: (Google Docs hors connexion) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-04]
CHR Extension: (AdBlock — le meilleur bloqueur de pubs) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-05-03]
CHR Extension: (Avast Online Security) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2021-02-21]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-13]
CHR Extension: (Gmail) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-25]
CHR Extension: (Chrome Media Router) - C:\Users\baba_\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-06-07]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3743464 2021-03-09] (philandro Software GmbH -> philandro Software GmbH)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11279752 2021-06-03] (Microsoft Corporation -> Microsoft Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [905080 2020-03-18] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\AppHelperCap.exe [733208 2021-04-20] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\DiagsCap.exe [731160 2021-04-20] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\NetworkCap.exe [731160 2021-04-20] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [288360 2021-06-06] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bfd9ce614b7974c4\x64\SysInfoCap.exe [732184 2021-04-20] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_e0cb3d04adc61069\x64\TouchpointAnalyticsClientService.exe [489528 2021-04-21] (HP Inc. -> HP Inc.)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\NisSrv.exe [2644776 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2105.5-0\MsMpEng.exe [136656 2021-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [127936 2019-03-26] (Alcorlink Corp. -> )
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [25024 2019-04-18] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 MpKsl78776add; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{9C30250C-06DF-4B3F-8875-7AA2049B81BF}\MpKslDrv.sys [107744 2021-06-14] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49568 2021-06-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [425184 2021-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [76000 2021-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-14 20:53 - 2021-06-14 20:55 - 000020557 _____ C:\Users\baba_\Desktop\FRST.txt
2021-06-14 20:52 - 2021-06-14 20:54 - 000000000 ____D C:\FRST
2021-06-14 20:51 - 2021-06-14 20:51 - 002300416 _____ (Farbar) C:\Users\baba_\Desktop\FRST64.exe
2021-06-14 20:38 - 2021-06-14 20:38 - 000261245 _____ C:\Users\baba_\Desktop\ZHPDiag.txt
2021-06-14 20:30 - 2021-06-14 20:30 - 000000872 _____ C:\Users\baba_\Desktop\ZHPSuite.lnk
2021-06-14 20:29 - 2021-06-14 20:30 - 003471512 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPSuite.exe
2021-06-14 20:28 - 2021-06-14 20:28 - 000000000 ____D C:\Users\baba_\Desktop\cleaning
2021-06-14 18:56 - 2021-06-14 18:56 - 000000000 ____D C:\Users\baba_\AppData\Local\mbam
2021-06-14 18:53 - 2021-06-14 18:53 - 000000000 ____D C:\Program Files\Malwarebytes
2021-06-14 18:51 - 2021-06-14 18:51 - 002080712 _____ (Malwarebytes) C:\Users\baba_\Downloads\MBSetup.exe
2021-06-14 18:51 - 2021-06-14 18:51 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2021-06-14 18:37 - 2021-06-14 18:41 - 000000000 ____D C:\AdwCleaner
2021-06-14 18:36 - 2021-06-14 18:36 - 008534696 _____ (Malwarebytes) C:\Users\baba_\Downloads\adwcleaner_8.2.exe
2021-06-14 18:11 - 2021-06-14 18:11 - 000000882 _____ C:\Users\baba_\Desktop\ZHPCleaner.lnk
2021-06-14 17:06 - 2021-06-14 17:06 - 000000000 ____D C:\Users\baba_\Downloads\Wub
2021-06-14 17:05 - 2021-06-14 17:05 - 001003898 _____ C:\Users\baba_\Downloads\Wub.zip
2021-06-14 17:00 - 2021-06-14 17:00 - 000000000 ____D C:\Users\baba_\AppData\Local\OneDrive
2021-06-14 15:15 - 2021-06-14 15:17 - 152232431 _____ C:\Users\baba_\Downloads\Videos (2).zip
2021-06-14 14:23 - 2021-06-14 20:38 - 000000000 ____D C:\Users\baba_\AppData\Roaming\ZHP
2021-06-14 14:23 - 2021-06-14 20:30 - 000000000 ____D C:\Users\baba_\AppData\Local\ZHP
2021-06-14 14:23 - 2021-06-14 14:23 - 000000872 _____ C:\Users\baba_\Desktop\ZHPDiag.lnk
2021-06-14 14:22 - 2021-06-14 14:22 - 003276440 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPDiag3.exe
2021-06-14 13:13 - 2021-06-14 13:13 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-06-14 13:12 - 2021-06-14 13:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-06-14 13:12 - 2021-06-14 13:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-06-14 13:12 - 2021-06-14 13:12 - 000700928 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-06-14 13:11 - 2021-06-14 13:11 - 001314120 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-06-14 13:11 - 2021-06-14 13:11 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-06-14 13:11 - 2021-06-14 13:11 - 000011351 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-06-14 13:10 - 2021-06-14 13:10 - 001823816 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-06-14 13:10 - 2021-06-14 13:10 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-06-14 13:10 - 2021-06-14 13:10 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-06-14 13:09 - 2021-06-14 13:09 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-06-14 13:08 - 2021-06-14 13:08 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-06-01 20:11 - 2021-06-01 20:13 - 000140846 _____ C:\Users\baba_\Downloads\gmsla2000.pdf
2021-05-15 21:17 - 2021-06-14 17:01 - 000002408 _____ C:\Users\baba_\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-04-29 11:05 - 2021-04-29 11:05 - 019251780 _____ C:\Users\baba_\Downloads\archive (1).zip
2021-04-17 17:51 - 2021-04-17 17:51 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-16 12:34 - 2021-04-16 12:35 - 131014788 _____ C:\Users\baba_\Downloads\Ismail Sentissi - Genoma - Ismail Sentissi Trio.zip
2021-04-16 12:16 - 2020-11-11 03:50 - 000306568 _____ C:\WINDOWS\system32\libmfxhw64.dll
2021-04-16 12:16 - 2020-11-11 03:50 - 000254496 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2021-04-16 12:16 - 2020-11-11 03:50 - 000171536 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2021-04-16 12:16 - 2020-11-11 03:50 - 000146832 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 026679128 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 013521752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 001789712 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001789712 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001385744 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001385744 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-04-16 12:16 - 2020-11-11 03:43 - 001096328 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 001096328 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000949384 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000949384 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000507736 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000427864 _____ C:\WINDOWS\system32\ze_loader.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000370520 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-04-16 12:16 - 2020-11-11 03:43 - 000148824 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2021-03-29 19:19 - 2021-03-29 19:19 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-29 19:17 - 2021-03-29 19:17 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-29 19:17 - 2021-03-29 19:17 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-24 20:05 - 2020-09-10 00:53 - 041975010 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-06-14 21:02 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-06-14 20:49 - 2020-10-10 18:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-06-14 20:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-06-14 20:27 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-06-14 18:51 - 2020-10-10 19:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2021-06-14 18:51 - 2020-10-10 19:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2021-06-14 18:51 - 2020-10-10 18:57 - 001791436 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-06-14 18:51 - 2019-12-07 15:49 - 000797844 _____ C:\WINDOWS\system32\perfh00C.dat
2021-06-14 18:51 - 2019-12-07 15:49 - 000160198 _____ C:\WINDOWS\system32\perfc00C.dat
2021-06-14 18:47 - 2020-01-21 12:37 - 000000000 __SHD C:\Users\baba_\IntelGraphicsProfiles
2021-06-14 18:45 - 2020-10-10 19:08 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-06-14 18:45 - 2020-10-10 18:37 - 000008192 ___SH C:\DumpStack.log.tmp
2021-06-14 18:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-06-14 18:45 - 2019-10-18 13:41 - 000000000 ____D C:\Intel
2021-06-14 18:44 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-06-14 18:41 - 2020-01-21 13:08 - 000000000 ____D C:\Users\baba_\AppData\Roaming\Hewlett-Packard
2021-06-14 18:41 - 2019-10-18 13:16 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-06-14 18:41 - 2019-05-07 06:14 - 000000000 ____D C:\ProgramData\HP
2021-06-14 18:41 - 2019-04-26 21:22 - 000000000 ___HD C:\hp
2021-06-14 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-06-14 17:02 - 2020-10-10 19:08 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-855102862-1451326360-2903730564-1001
2021-06-14 17:02 - 2020-01-21 12:40 - 000000000 ___RD C:\Users\baba_\OneDrive
2021-06-14 15:28 - 2020-01-29 21:29 - 000000000 ____D C:\Users\baba_\AppData\Local\HP_Inc
2021-06-14 14:49 - 2020-01-21 19:21 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-06-14 14:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-06-14 14:36 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-06-14 14:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-06-14 14:03 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-06-14 13:58 - 2020-01-22 01:32 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-06-14 13:55 - 2019-04-15 16:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-06-14 13:54 - 2020-01-22 01:32 - 132447432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-06-14 13:53 - 2020-08-25 01:23 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-06-14 13:44 - 2020-10-10 18:37 - 000615328 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-06-14 13:37 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-06-14 13:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-06-14 13:25 - 2019-12-07 15:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-06-14 12:32 - 2019-05-07 06:18 - 000000000 ____D C:\Program Files\Microsoft Office
2021-06-14 12:28 - 2020-06-09 11:58 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-06-06 18:39 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-06-01 19:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-05-25 07:48 - 2020-08-25 01:23 - 000725304 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2021-05-25 07:48 - 2020-08-25 01:23 - 000470328 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
==================== SigCheckExt =========================
2020-11-15 13:21 - 2012-06-20 16:38 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfc71u.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000487424 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp70.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp71.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000344064 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr70.dll
2020-11-15 13:21 - 2012-06-20 16:38 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcr71.dll
2021-06-14 20:51 - 2021-06-14 20:51 - 002300416 _____ (Farbar) C:\Users\baba_\Desktop\FRST64.exe
2021-06-14 14:22 - 2021-06-14 14:22 - 003276440 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPDiag3.exe
2021-06-14 20:29 - 2021-06-14 20:30 - 003471512 _____ (Nicolas Coolman) C:\Users\baba_\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{19969966-f1f0-11e9-849b-040e3cf2a181}
{19969967-f1f0-11e9-849b-040e3cf2a181}
{da5bfc9e-f2fe-11ea-81a9-806e6f6e6963}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {279d61c8-0b1f-11eb-8462-d0517b0ee526}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {19969966-f1f0-11e9-849b-040e3cf2a181}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {19969967-f1f0-11e9-849b-040e3cf2a181}
description EFI DVD/CDROM
Application logicielle (101fffff)
--------------------------------
identificateur {da5bfc9e-f2fe-11ea-81a9-806e6f6e6963}
description Internal Hard Disk or Solid State Disk
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {279d61ca-0b1f-11eb-8462-d0517b0ee526}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {279d61c8-0b1f-11eb-8462-d0517b0ee526}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {279d61ca-0b1f-11eb-8462-d0517b0ee526}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{279d61cb-0b1f-11eb-8462-d0517b0ee526}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{279d61cb-0b1f-11eb-8462-d0517b0ee526}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {279d61c8-0b1f-11eb-8462-d0517b0ee526}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {279d61ca-0b1f-11eb-8462-d0517b0ee526}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {279d61cb-0b1f-11eb-8462-d0517b0ee526}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================