Publicité
Publicité
Commentaire : frst
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16-10-2021
Exécuté par Bobo (administrateur) sur DESKTOP-LRB0SS4 (HP HP ENVY Laptop 13-ah0xxx) (18-10-2021 21:11:46)
Exécuté depuis C:\Users\Bobo\Downloads
Profils chargés: Bobo
Platform: Microsoft Windows 10 Famille Version 21H1 19043.1288 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <41>
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPThermalControl_1.10.6.0_x64__v10z8vjag6ke6\HpSystemManagement.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPThermalControl_1.10.6.0_x64__v10z8vjag6ke6\Win32Process\HPCC.Bg.BackgroundApp.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_167a1a0325242e3d\aesm_service.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2109.6305.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowsstore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\Bobo\AppData\Roaming\ZHP\ZHPSuite.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(WhatsApp Inc.) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2140.5.0_x64__cv1g1gvanyjgm\app\WhatsApp.exe <8>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [881440 2019-06-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-2516496672-807159482-223521202-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2340200 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2516496672-807159482-223521202-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35093120 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {23214099-F456-40FC-97E3-FB616B615ADD} - System32\Tasks\KpRm-quarantines\KpRm-quarantines-20211016190813 => C:\KPRM\tasks-quarantines\kprm-quarantines.exe [2811112 2021-10-16] (kernel-panik -> kernel-panik) [Fichier non signé]
Task: {3E4EE99D-4DA5-4613-8367-E1A377D7609F} - System32\Tasks\CCleanerSkipUAC - Bobo => C:\Program Files\CCleaner\CCleaner.exe [29155968 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {457E025D-A003-4CE2-B93F-B7441491BCF3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {47B79A1D-E7C4-4F8F-9F34-2A7F1A904B32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6BFA675C-6398-4C85-A568-888D8B5A12EF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {8EA096F9-78C4-40CB-9D2D-0B0A4B612429} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {9BFC167F-E0D3-4237-95C1-75C0B80F5495} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {AA611F4B-1800-40D6-9BA0-E6C9373C65E6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4ABEA06-3F4A-411F-A007-8B432A2EBB32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BA5D56A6-1D01-4CFB-BE89-D3A92B5F1796} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C9A830C6-5FFF-4DE2-8736-C99FFE4B1134} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D101F545-04A7-4B59-A71B-C0101B9E7A3A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D59C61E0-0BBA-44E6-9D4C-EC40C1B4D957} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3977576 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {ECBF6BBC-E8A2-4090-B896-1D55B27B779F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 10.140.6.45 10.140.6.46
Tcpip\..\Interfaces\{96916de4-7d07-41a9-937b-7dd6c43d6377}: [DhcpNameServer] 10.140.6.45 10.140.6.46
FireFox:
========
FF DefaultProfile: 81gcj2hd.default
FF ProfilePath: C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\81gcj2hd.default [2021-10-16]
FF ProfilePath: C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release [2021-10-18]
FF Session Restore: Mozilla\Firefox\Profiles\wfve4zic.default-release -> est activé.
FF Extension: (Sahara Sand) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\{2ddbcb89-c6c1-4c0e-a146-21ba9bcd99ef}.xpi [2021-09-16]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default [2021-10-18]
CHR Extension: (Slides) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-10-10]
CHR Extension: (Docs) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-10-10]
CHR Extension: (Google Drive) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-10]
CHR Extension: (YouTube) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-10]
CHR Extension: (Sheets) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-10-10]
CHR Extension: (Google Docs hors connexion) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-10]
CHR Extension: (Gmail) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-10]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.196.0921.0007\FileSyncHelper.exe [3252584 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe [744000 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe [742480 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe [742488 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe [743512 2021-08-27] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe [489584 2021-06-18] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.196.0921.0007\OneDriveUpdaterService.exe [3721576 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [23960 2018-07-06] (HP Inc. -> HP Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-06] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-18 21:11 - 2021-10-18 21:12 - 000015840 _____ C:\Users\Bobo\Downloads\FRST.txt
2021-10-18 21:11 - 2021-10-18 21:11 - 002310656 _____ (Farbar) C:\Users\Bobo\Downloads\FRST64.exe
2021-10-18 21:10 - 2021-10-18 21:10 - 000229384 _____ C:\Users\Bobo\Desktop\ZHPDiag.txt
2021-10-18 21:06 - 2021-10-18 21:06 - 000000864 _____ C:\Users\Bobo\Desktop\ZHPSuite.lnk
2021-10-18 21:05 - 2021-10-18 21:05 - 003476632 _____ (Nicolas Coolman) C:\Users\Bobo\Downloads\ZHPSuite.exe
2021-10-18 21:05 - 2021-10-18 21:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\ZHP
2021-10-17 14:11 - 2021-10-17 14:11 - 000000000 ____D C:\Program Files\UNP
2021-10-16 20:45 - 2021-10-16 20:45 - 000199318 _____ C:\Users\Bobo\Documents\INTM Fiche Parcours Candidat NOM Prénom1.xlsm
2021-10-16 19:54 - 2021-10-16 19:54 - 000197609 _____ C:\Users\Bobo\Downloads\INTM Fiche Parcours Candidat NOM Prénom.xltm
2021-10-16 19:08 - 2021-10-16 19:08 - 000001653 _____ C:\Users\Bobo\Desktop\kprm-20211016190813.txt
2021-10-16 19:08 - 2021-10-16 19:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\KpRm-quarantines
2021-10-16 19:08 - 2021-10-16 19:08 - 000000000 ____D C:\KPRM
2021-10-16 19:07 - 2021-10-16 19:07 - 002811112 _____ (kernel-panik) C:\Users\Bobo\Downloads\kprm_2.9.2.exe
2021-10-16 19:00 - 2021-10-16 19:04 - 000002248 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Bobo
2021-10-16 18:45 - 2021-10-16 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2021-10-16 18:43 - 2021-10-16 18:44 - 159435544 _____ (Oracle Corporation) C:\Users\Bobo\Downloads\jdk-11.0.11_windows-x64_bin.exe
2021-10-16 18:24 - 2021-10-16 18:24 - 000000544 _____ C:\Users\Bobo\Downloads\U5MVIJO8.json
2021-10-16 16:47 - 2021-10-16 16:47 - 003445344 _____ (Alexander Roshal) C:\Users\Bobo\Downloads\winrar-x64-602fr.exe
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\WinRAR
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\Program Files\WinRAR
2021-10-16 16:39 - 2021-10-16 16:39 - 000000000 ____D C:\ProgramData\Elastic
2021-10-16 16:35 - 2021-10-16 16:35 - 313065472 _____ C:\Users\Bobo\Downloads\elasticsearch-7.15.1.msi
2021-10-16 16:28 - 2021-10-16 16:28 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Sun
2021-10-16 16:28 - 2021-10-16 16:28 - 000000000 ____D C:\ProgramData\Oracle
2021-10-16 15:50 - 2021-10-16 15:17 - 000000000 ____D C:\Windows.old
2021-10-16 15:49 - 2021-10-16 15:50 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-10-16 15:48 - 2021-10-16 15:49 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-10-16 15:48 - 2021-10-16 15:48 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-10-16 15:44 - 2021-10-16 15:44 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-10-16 15:44 - 2021-10-16 15:44 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-10-16 15:44 - 2021-10-16 15:44 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-16 15:44 - 2021-10-16 15:44 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-10-16 15:44 - 2021-10-16 15:44 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-10-16 15:44 - 2021-10-16 15:44 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-10-16 15:44 - 2021-10-16 15:44 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000011495 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-16 15:44 - 2021-10-16 15:44 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2021-10-16 15:44 - 2021-10-16 15:44 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2021-10-16 15:43 - 2021-10-16 15:43 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 001823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-16 15:43 - 2021-10-16 15:43 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-16 15:43 - 2021-10-16 15:43 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-16 15:43 - 2021-10-16 15:43 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-10-16 15:43 - 2021-10-16 15:43 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-10-16 15:43 - 2021-10-16 15:43 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-16 15:43 - 2021-10-16 15:43 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-10-16 15:43 - 2021-10-16 15:43 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-10-16 15:35 - 2021-10-16 15:35 - 000023919 _____ C:\Users\Bobo\Documents\Fixlog.txt
2021-10-16 15:22 - 2021-10-16 15:22 - 000000000 ____D C:\Users\Bobo\AppData\Local\D3DSCache
2021-10-16 15:19 - 2021-10-16 19:27 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-16 15:19 - 2021-10-16 15:19 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-10-16 15:18 - 2019-06-20 03:32 - 006861904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2021-10-16 15:18 - 2019-06-20 03:23 - 032896202 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2021-10-16 15:17 - 2021-10-16 19:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-16 15:17 - 2021-10-16 19:04 - 000002776 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2021-10-16 15:17 - 2021-10-16 15:17 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2021-10-16 15:17 - 2021-10-16 15:17 - 000007623 _____ C:\WINDOWS\diagerr.xml
2021-10-16 15:17 - 2021-10-16 15:17 - 000000020 ___SH C:\Users\Bobo\ntuser.ini
2021-10-16 15:17 - 2021-10-16 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2021-10-16 15:17 - 2021-10-16 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-10-16 15:17 - 2021-10-16 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-10-16 15:14 - 2021-10-16 19:28 - 000000000 ____D C:\Users\Bobo
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Voisinage réseau
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Voisinage d'impression
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Modèles
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Mes documents
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Menu Démarrer
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Documents\Mes vidéos
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Documents\Mes images
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Documents\Ma musique
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\AppData\Local\Historique
2021-10-16 15:13 - 2021-10-18 20:44 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-16 15:13 - 2021-10-16 15:13 - 000438080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-16 14:17 - 2021-10-16 14:17 - 000005032 _____ C:\Users\Bobo\Desktop\KJqigG5j7iw_Fixlist.txt
2021-10-16 14:16 - 2021-10-16 19:03 - 000000000 ___DC C:\WINDOWS\Panther
2021-10-16 14:14 - 2021-10-16 14:16 - 000000036 _____ C:\WINDOWS\progress.ini
2021-10-16 14:06 - 2021-10-16 14:14 - 000000000 ___HD C:\$GetCurrent
2021-10-16 14:05 - 2021-10-16 14:14 - 000000000 ____D C:\Windows10Upgrade
2021-10-16 14:05 - 2021-10-16 14:05 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assistant Mise à jour de Windows 10.lnk
2021-10-16 14:05 - 2021-10-16 14:05 - 000000719 _____ C:\Users\Bobo\Desktop\Assistant Mise à jour de Windows 10.lnk
2021-10-16 11:52 - 2021-10-16 11:52 - 001004586 _____ C:\Users\Bobo\Downloads\Wub.zip
2021-10-16 11:52 - 2021-10-16 11:52 - 000000000 ____D C:\Users\Bobo\Downloads\Wub
2021-10-16 11:45 - 2021-10-16 11:45 - 000000000 ___HD C:\$WinREAgent
2021-10-15 20:29 - 2021-10-16 21:49 - 000000000 ____D C:\Program Files\CCleaner
2021-10-15 20:29 - 2021-10-16 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-10-15 20:29 - 2021-10-15 20:29 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2021-10-14 18:03 - 2021-10-14 18:03 - 001365156 _____ C:\Users\Bobo\Downloads\GarciaChauvet-slides.pdf
2021-10-13 21:32 - 2021-10-13 21:32 - 000609975 _____ C:\Users\Bobo\Downloads\AV ingénieur de données NexSis.pdf
2021-10-13 16:33 - 2021-10-13 16:33 - 000245172 _____ C:\Users\Bobo\Downloads\titre de séjour(1).pdf
2021-10-12 21:29 - 2021-10-12 21:29 - 000282285 _____ C:\Users\Bobo\Downloads\ActesSELF2016-759-770.pdf
2021-10-12 20:04 - 2021-10-17 14:48 - 000000000 ____D C:\Users\Bobo\Documents\Document
2021-10-10 19:19 - 2021-10-14 20:59 - 000000000 ____D C:\Users\Bobo\Documents\APS
2021-10-10 14:18 - 2021-10-16 15:17 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-10 14:17 - 2021-10-18 20:58 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-10 14:17 - 2021-10-11 20:49 - 000000000 ____D C:\Users\Bobo\AppData\Local\Google
2021-10-10 14:17 - 2021-10-10 14:17 - 000000000 ____D C:\Program Files\Google
2021-10-10 14:16 - 2021-10-10 14:16 - 001341272 _____ (Google LLC) C:\Users\Bobo\Downloads\ChromeSetup.exe
2021-10-07 16:47 - 2021-09-06 02:49 - 000286312 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcAudioBus.sys
2021-10-07 16:17 - 2021-10-07 16:17 - 000002293 _____ C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarLeaf.lnk
2021-10-07 16:17 - 2021-10-07 16:17 - 000000000 ____D C:\Users\Bobo\AppData\Local\Pronto
2021-10-07 16:15 - 2021-10-07 16:15 - 002735200 _____ (StarLeaf Ltd.) C:\Users\Bobo\Downloads\StarLeaf Launcher - j-hxcv0q.exe
2021-10-07 16:15 - 2021-10-07 16:15 - 000000000 ____D C:\Users\Bobo\AppData\Local\StarLeaf
2021-10-07 15:19 - 2021-10-15 16:12 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-10-04 21:59 - 2021-10-04 21:59 - 002101944 _____ (Malwarebytes) C:\Users\Bobo\Desktop\MBSetup.exe
2021-10-04 21:53 - 2021-10-04 21:54 - 000000000 ____D C:\AdwCleaner
2021-10-04 17:00 - 2021-10-11 16:12 - 000002359 _____ C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-10-04 17:00 - 2021-10-11 16:12 - 000002351 _____ C:\Users\Bobo\Desktop\Microsoft Teams.lnk
2021-10-04 17:00 - 2021-10-04 17:00 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Teams
2021-10-04 16:59 - 2021-10-11 16:12 - 000000000 ____D C:\Users\Bobo\AppData\Local\SquirrelTemp
2021-09-25 11:59 - 2021-10-18 21:11 - 000000000 ____D C:\FRST
2021-09-25 11:50 - 2021-10-18 21:10 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\ZHP
2021-09-23 07:22 - 2021-09-23 07:22 - 000000000 ____D C:\WINDOWS\system32\N360_BACKUP
2021-09-21 18:47 - 2021-09-21 18:47 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-09-20 15:19 - 2021-09-20 15:19 - 000000000 ____D C:\Users\Bobo\AppData\Local\ElevatedDiagnostics
2021-09-19 21:32 - 2021-09-24 21:22 - 000000000 ____D C:\Program Files (x86)\SMADAV
2021-09-19 21:32 - 2021-09-24 21:20 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Smadav
2021-09-19 21:32 - 2021-09-19 21:32 - 000000000 __SHD C:\[Smad-Cage]
2021-09-19 21:31 - 2021-09-19 21:31 - 006152448 _____ (Smadsoft ) C:\Users\Bobo\Downloads\smadav2021rev1462.exe
2021-09-17 20:00 - 2021-09-17 20:00 - 036174008 _____ (Piriform Software Ltd) C:\Users\Bobo\Downloads\ccsetup585.exe
2021-09-17 19:56 - 2021-10-15 16:12 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2021-09-17 19:45 - 2021-09-17 19:45 - 000000000 ____D C:\Users\Bobo\Documents\Modèles Office personnalisés
2021-09-17 16:29 - 2021-10-15 20:20 - 000000000 ____D C:\Users\Bobo\Documents\COURS
2021-09-17 00:37 - 2021-10-18 21:03 - 000000000 ____D C:\Users\Bobo\Documents\Entretient
2021-09-16 22:10 - 2021-09-16 22:10 - 000000000 ____D C:\Program Files\Common Files\AV
2021-09-15 22:32 - 2021-09-15 22:32 - 000001389 _____ C:\Users\Bobo\Desktop\Norton Installation Files.lnk
2021-09-15 22:32 - 2021-09-15 22:32 - 000000000 ____D C:\Users\Public\Downloads\Norton
2021-09-15 22:31 - 2021-09-15 22:32 - 003806720 _____ (NortonLifeLock Inc.) C:\Users\Bobo\Downloads\NAVPlusDownloader.exe
2021-09-15 22:05 - 2021-10-18 21:11 - 000000000 ____D C:\ProgramData\Mozilla
2021-09-15 22:05 - 2021-10-18 21:10 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Mozilla
2021-09-15 22:05 - 2021-10-15 16:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-15 22:05 - 2021-10-08 13:56 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-09-15 22:05 - 2021-09-15 22:05 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Mozilla
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\Mozilla
2021-09-15 22:04 - 2021-09-15 22:04 - 000333160 _____ (Mozilla) C:\Users\Bobo\Downloads\Firefox Installer.exe
2021-09-15 21:58 - 2021-09-15 21:58 - 000000000 ____D C:\Users\Bobo\AppData\Local\OneDrive
2021-09-15 18:24 - 2021-10-16 11:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-15 16:48 - 2021-09-15 16:48 - 000000000 ____D C:\Users\Bobo\AppData\Local\CEF
2021-09-15 16:17 - 2021-09-15 16:17 - 000232168 _____ (AVAST Software) C:\Users\Bobo\Downloads\avast_free_antivirus_setup_online.exe
2021-09-15 16:15 - 2021-09-15 16:15 - 005794408 _____ (McAfee, LLC) C:\Users\Bobo\Downloads\mcafee_trial_setup_433.0207.3617_key.exe
2021-09-15 16:15 - 2021-09-15 16:15 - 000910056 _____ (McAfee, LLC) C:\Users\Bobo\Downloads\Non confirmé 933967.crdownload
2021-09-15 01:08 - 2021-10-12 15:08 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-15 01:08 - 2021-09-15 01:08 - 000000000 ___RD C:\Users\Default\OneDrive
2021-09-15 01:07 - 2021-10-16 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2021-09-15 01:07 - 2021-09-15 01:07 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Entreprise.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2021-09-15 00:50 - 2021-09-15 00:50 - 001458285 _____ C:\Users\Bobo\Downloads\NOTICEEUINFORMATIQUEIMPORTANT.pdf
2021-09-15 00:49 - 2021-10-08 14:06 - 000000000 ____D C:\Program Files\Microsoft Office
2021-09-15 00:49 - 2021-09-15 00:49 - 000000000 ____D C:\Program Files\Microsoft Office 15
2021-09-14 23:43 - 2021-09-14 23:43 - 000048700 _____ C:\Users\Bobo\Downloads\AttestationDroits.pdf
2021-09-14 22:05 - 2021-09-14 22:05 - 000367647 _____ C:\Users\Bobo\Downloads\AMOA.docx.pdf
2021-09-14 22:05 - 2021-09-14 22:05 - 000000000 ____D C:\Users\Bobo\Documents\CV
2021-09-14 21:35 - 2021-09-14 21:35 - 000154672 _____ C:\Users\Bobo\Downloads\AMOA.pdf.121797043.pdf
2021-09-14 18:33 - 2021-10-06 16:34 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-09-14 18:29 - 2021-09-14 18:29 - 005708193 _____ C:\Users\Bobo\Downloads\CV-20210914T162904Z-001.zip
2021-09-14 18:22 - 2021-10-18 20:47 - 000000000 ____D C:\Users\Bobo\AppData\Local\PlaceholderTileLogoFolder
2021-09-14 18:19 - 2021-09-14 18:19 - 000000000 ____D C:\Users\Bobo\AppData\Local\Comms
2021-09-14 15:53 - 2021-10-16 15:49 - 000000000 ____D C:\WINDOWS\system32\cAVS
2021-09-14 15:53 - 2021-10-16 15:14 - 000000000 ____D C:\WINDOWS\system32\Intel
2021-09-14 15:49 - 2021-10-16 15:51 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-09-14 15:49 - 2021-10-16 15:50 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-09-14 15:49 - 2021-10-16 15:50 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2021-09-14 15:49 - 2021-09-14 15:48 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2021-09-14 15:49 - 2021-09-14 15:48 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2021-09-14 15:49 - 2021-09-14 15:48 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2021-09-14 15:49 - 2021-09-14 15:48 - 000000219 _____ C:\WINDOWS\system.ini
2021-09-14 15:49 - 2021-09-14 15:48 - 000000092 _____ C:\WINDOWS\win.ini
2021-09-14 15:06 - 2021-09-15 01:08 - 000000000 ___RD C:\Users\Bobo\OneDrive
2021-09-14 15:05 - 2021-09-14 15:05 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\HP
2021-09-14 15:04 - 2021-10-18 20:47 - 000000000 ____D C:\Users\Bobo\AppData\Local\Packages
2021-09-14 15:04 - 2021-10-18 20:47 - 000000000 ____D C:\ProgramData\Packages
2021-09-14 15:04 - 2021-10-16 21:49 - 000000000 __SHD C:\Users\Bobo\IntelGraphicsProfiles
2021-09-14 15:04 - 2021-10-16 15:17 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-09-14 15:04 - 2021-10-16 15:17 - 000000000 ___RD C:\Users\Bobo\3D Objects
2021-09-14 15:04 - 2021-09-14 18:23 - 000000000 ____D C:\Users\Bobo\AppData\Local\Publishers
2021-09-14 15:04 - 2021-09-14 15:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\Intel
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Synaptics
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Adobe
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Intel
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Local\VirtualStore
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Local\ConnectedDevicesPlatform
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Mes vidéos
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Mes images
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Ma musique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Voisinage réseau
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Voisinage d'impression
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Modèles
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Mes documents
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Menu Démarrer
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Mes vidéos
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Mes images
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Ma musique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Modèles
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Menu Démarrer
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Bureau
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Program Files\Fichiers communs
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Documents and Settings
2021-09-14 14:57 - 2021-10-16 19:20 - 000000000 ____D C:\Intel
2021-09-14 14:57 - 2021-10-06 21:01 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-09-14 14:57 - 2021-10-04 21:55 - 000000000 ____D C:\ProgramData\HP
2021-09-14 14:57 - 2021-09-14 15:00 - 000000000 ____D C:\ProgramData\Intel
2021-09-14 14:57 - 2021-09-14 14:57 - 000000037 _____ C:\WINDOWS\system32\Drivers\RtkR0Log.dat
2021-09-14 14:57 - 2021-09-14 14:57 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2021-09-14 14:57 - 2019-02-26 23:33 - 000014220 _____ C:\WINDOWS\system32\Drivers\Gen3pKey1.dat
2021-09-14 14:57 - 2019-02-18 20:05 - 000010324 _____ C:\WINDOWS\system32\Drivers\Gen3pKey.dat
2021-09-14 14:57 - 2017-12-08 18:11 - 000001304 _____ C:\WINDOWS\system32\Drivers\RTKAMPI.Dat
2021-09-14 14:57 - 2017-11-09 19:10 - 000017232 _____ C:\WINDOWS\system32\Drivers\RTSPKPT.dat
2021-09-14 14:56 - 2021-10-16 19:20 - 000008192 ___SH C:\DumpStack.log.tmp
2021-09-14 14:19 - 2021-09-14 15:54 - 000000000 ___HD C:\$SysReset
2021-09-02 00:20 - 2021-05-06 23:25 - 048047288 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTPreprocStreamer.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 001686184 _____ (Intel Corporation) C:\WINDOWS\system32\MultiChannelWoV.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 000877752 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWovSDK.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 000507064 _____ (Intel Corporation) C:\WINDOWS\system32\MultichannelWoVCfg.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 005570328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 003733936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTKSpeechPP2.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 003732872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTKSpeechPP.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 001126552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 000482120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2021-09-02 00:20 - 2019-06-20 03:37 - 000881440 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe
2021-09-02 00:20 - 2019-06-20 03:37 - 000821328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2021-09-02 00:20 - 2019-06-20 03:37 - 000215032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 019840776 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPRes.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 004313864 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnh.exe
2021-09-02 00:05 - 2019-12-04 02:16 - 000812296 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 000769288 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000383240 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnhService.exe
2021-09-02 00:05 - 2019-12-04 02:16 - 000275720 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 000064264 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynRMIHID.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000049416 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000048904 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF.sys
2021-09-02 00:03 - 2021-05-06 23:25 - 000852760 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcOED.sys
2021-09-02 00:03 - 2021-05-06 22:52 - 000243016 _____ C:\WINDOWS\system32\Drivers\dsp_fw_release.bin
2021-09-02 00:03 - 2021-05-06 22:52 - 000012288 _____ C:\WINDOWS\system32\Drivers\dsp_fw_release_7CAD0808-AB10-CD23-EF45-12AB34CD56EF.bin
2021-08-12 19:49 - 2020-09-11 11:36 - 000305992 _____ C:\WINDOWS\system32\libmfxhw64.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000254520 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000171472 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000146752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 026676016 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 013519664 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 001790192 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001790192 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001386224 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001386224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001096800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 001096800 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000949856 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000949856 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000507696 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000462640 _____ C:\WINDOWS\system32\ze_loader.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000370480 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000148784 _____ C:\WINDOWS\system32\ze_validation_layer.dll
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-18 21:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-18 20:47 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-17 14:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-10-16 21:49 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-16 19:27 - 2019-12-07 16:49 - 000756416 _____ C:\WINDOWS\system32\perfh00C.dat
2021-10-16 19:27 - 2019-12-07 16:49 - 000142186 _____ C:\WINDOWS\system32\perfc00C.dat
2021-10-16 19:27 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-16 19:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-16 19:20 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-10-16 19:14 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-16 15:51 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-10-16 15:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-10-16 15:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-10-16 15:50 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-10-16 15:50 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-10-16 15:46 - 2019-12-07 16:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-10-16 15:46 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-10-16 15:46 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-10-16 15:39 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2021-10-16 15:31 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-10-16 15:17 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-10-16 15:15 - 2019-12-07 11:14 - 000000000 __RHD C:\Users\Public\Libraries
==================== SigCheckExt =========================
2021-10-18 21:11 - 2021-10-18 21:11 - 002310656 _____ (Farbar) C:\Users\Bobo\Downloads\FRST64.exe
2021-10-16 19:07 - 2021-10-16 19:07 - 002811112 _____ (kernel-panik) C:\Users\Bobo\Downloads\kprm_2.9.2.exe
2021-10-18 21:05 - 2021-10-18 21:05 - 003476632 _____ (Nicolas Coolman) C:\Users\Bobo\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {14e40a9a-2e88-11ec-aab5-c2f5626fab1d}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {ecc371aa-2e82-11ec-9bfb-917bdedc0a8f}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {14e40a9a-2e88-11ec-aab5-c2f5626fab1d}
nx OptIn
bootmenupolicy Standard
Installation de Windows
-----------------------
identificateur {cbd971bf-b7b8-4885-951a-fa03044f5d71}
device ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{1ec848b5-2e7c-11ec-9bf9-8f823bcc8c93}
bootstatdevice partition=C:
custom:11000083 partition=C:
path \windows\system32\winload.exe
description Windows Rollback
locale fr-FR
bootstatfilepath \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
inherit {bootloadersettings}
restartonfailure Yes
osdevice ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{1ec848b5-2e7c-11ec-9bf9-8f823bcc8c93}
custom:21000152 partition=C:
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {ecc371aa-2e82-11ec-9bfb-917bdedc0a8f}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{ecc371ab-2e82-11ec-9bfb-917bdedc0a8f}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{ecc371ab-2e82-11ec-9bfb-917bdedc0a8f}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-fr
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride PushButtonReset
osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {14e40a9a-2e88-11ec-aab5-c2f5626fab1d}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {ecc371aa-2e82-11ec-9bfb-917bdedc0a8f}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {37659898-1563-11ec-899e-ab4d9aa93883}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {1ec848b5-2e7c-11ec-9bf9-8f823bcc8c93}
description Windows Setup
ramdisksdidevice partition=C:
ramdisksdipath \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {ecc371ab-2e82-11ec-9bfb-917bdedc0a8f}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par Bobo (administrateur) sur DESKTOP-LRB0SS4 (HP HP ENVY Laptop 13-ah0xxx) (18-10-2021 21:11:46)
Exécuté depuis C:\Users\Bobo\Downloads
Profils chargés: Bobo
Platform: Microsoft Windows 10 Famille Version 21H1 19043.1288 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <41>
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPThermalControl_1.10.6.0_x64__v10z8vjag6ke6\HpSystemManagement.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPThermalControl_1.10.6.0_x64__v10z8vjag6ke6\Win32Process\HPCC.Bg.BackgroundApp.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_167a1a0325242e3d\aesm_service.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2109.6305.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowsstore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\Bobo\AppData\Roaming\ZHP\ZHPSuite.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(WhatsApp Inc.) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2140.5.0_x64__cv1g1gvanyjgm\app\WhatsApp.exe <8>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [881440 2019-06-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-2516496672-807159482-223521202-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2340200 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2516496672-807159482-223521202-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35093120 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {23214099-F456-40FC-97E3-FB616B615ADD} - System32\Tasks\KpRm-quarantines\KpRm-quarantines-20211016190813 => C:\KPRM\tasks-quarantines\kprm-quarantines.exe [2811112 2021-10-16] (kernel-panik -> kernel-panik) [Fichier non signé]
Task: {3E4EE99D-4DA5-4613-8367-E1A377D7609F} - System32\Tasks\CCleanerSkipUAC - Bobo => C:\Program Files\CCleaner\CCleaner.exe [29155968 2021-09-10] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {457E025D-A003-4CE2-B93F-B7441491BCF3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {47B79A1D-E7C4-4F8F-9F34-2A7F1A904B32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6BFA675C-6398-4C85-A568-888D8B5A12EF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {8EA096F9-78C4-40CB-9D2D-0B0A4B612429} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {9BFC167F-E0D3-4237-95C1-75C0B80F5495} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {AA611F4B-1800-40D6-9BA0-E6C9373C65E6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4ABEA06-3F4A-411F-A007-8B432A2EBB32} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BA5D56A6-1D01-4CFB-BE89-D3A92B5F1796} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MpCmdRun.exe [884544 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C9A830C6-5FFF-4DE2-8736-C99FFE4B1134} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5729184 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D101F545-04A7-4B59-A71B-C0101B9E7A3A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [134488 2021-10-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {D59C61E0-0BBA-44E6-9D4C-EC40C1B4D957} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3977576 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {ECBF6BBC-E8A2-4090-B896-1D55B27B779F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21976976 2021-09-25] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 10.140.6.45 10.140.6.46
Tcpip\..\Interfaces\{96916de4-7d07-41a9-937b-7dd6c43d6377}: [DhcpNameServer] 10.140.6.45 10.140.6.46
FireFox:
========
FF DefaultProfile: 81gcj2hd.default
FF ProfilePath: C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\81gcj2hd.default [2021-10-16]
FF ProfilePath: C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release [2021-10-18]
FF Session Restore: Mozilla\Firefox\Profiles\wfve4zic.default-release -> est activé.
FF Extension: (Sahara Sand) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\{2ddbcb89-c6c1-4c0e-a146-21ba9bcd99ef}.xpi [2021-09-16]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default [2021-10-18]
CHR Extension: (Slides) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-10-10]
CHR Extension: (Docs) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-10-10]
CHR Extension: (Google Drive) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-10]
CHR Extension: (YouTube) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-10-10]
CHR Extension: (Sheets) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-10-10]
CHR Extension: (Google Docs hors connexion) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-10-15]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-10]
CHR Extension: (Gmail) - C:\Users\Bobo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-10]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9250696 2021-10-01] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.196.0921.0007\FileSyncHelper.exe [3252584 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe [744000 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe [742480 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe [742488 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe [743512 2021-08-27] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe [489584 2021-06-18] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.196.0921.0007\OneDriveUpdaterService.exe [3721576 2021-10-12] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [23960 2018-07-06] (HP Inc. -> HP Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-06] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-18 21:11 - 2021-10-18 21:12 - 000015840 _____ C:\Users\Bobo\Downloads\FRST.txt
2021-10-18 21:11 - 2021-10-18 21:11 - 002310656 _____ (Farbar) C:\Users\Bobo\Downloads\FRST64.exe
2021-10-18 21:10 - 2021-10-18 21:10 - 000229384 _____ C:\Users\Bobo\Desktop\ZHPDiag.txt
2021-10-18 21:06 - 2021-10-18 21:06 - 000000864 _____ C:\Users\Bobo\Desktop\ZHPSuite.lnk
2021-10-18 21:05 - 2021-10-18 21:05 - 003476632 _____ (Nicolas Coolman) C:\Users\Bobo\Downloads\ZHPSuite.exe
2021-10-18 21:05 - 2021-10-18 21:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\ZHP
2021-10-17 14:11 - 2021-10-17 14:11 - 000000000 ____D C:\Program Files\UNP
2021-10-16 20:45 - 2021-10-16 20:45 - 000199318 _____ C:\Users\Bobo\Documents\INTM Fiche Parcours Candidat NOM Prénom1.xlsm
2021-10-16 19:54 - 2021-10-16 19:54 - 000197609 _____ C:\Users\Bobo\Downloads\INTM Fiche Parcours Candidat NOM Prénom.xltm
2021-10-16 19:08 - 2021-10-16 19:08 - 000001653 _____ C:\Users\Bobo\Desktop\kprm-20211016190813.txt
2021-10-16 19:08 - 2021-10-16 19:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\KpRm-quarantines
2021-10-16 19:08 - 2021-10-16 19:08 - 000000000 ____D C:\KPRM
2021-10-16 19:07 - 2021-10-16 19:07 - 002811112 _____ (kernel-panik) C:\Users\Bobo\Downloads\kprm_2.9.2.exe
2021-10-16 19:00 - 2021-10-16 19:04 - 000002248 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Bobo
2021-10-16 18:45 - 2021-10-16 18:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java Development Kit
2021-10-16 18:43 - 2021-10-16 18:44 - 159435544 _____ (Oracle Corporation) C:\Users\Bobo\Downloads\jdk-11.0.11_windows-x64_bin.exe
2021-10-16 18:24 - 2021-10-16 18:24 - 000000544 _____ C:\Users\Bobo\Downloads\U5MVIJO8.json
2021-10-16 16:47 - 2021-10-16 16:47 - 003445344 _____ (Alexander Roshal) C:\Users\Bobo\Downloads\winrar-x64-602fr.exe
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\WinRAR
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-10-16 16:47 - 2021-10-16 16:47 - 000000000 ____D C:\Program Files\WinRAR
2021-10-16 16:39 - 2021-10-16 16:39 - 000000000 ____D C:\ProgramData\Elastic
2021-10-16 16:35 - 2021-10-16 16:35 - 313065472 _____ C:\Users\Bobo\Downloads\elasticsearch-7.15.1.msi
2021-10-16 16:28 - 2021-10-16 16:28 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Sun
2021-10-16 16:28 - 2021-10-16 16:28 - 000000000 ____D C:\ProgramData\Oracle
2021-10-16 15:50 - 2021-10-16 15:17 - 000000000 ____D C:\Windows.old
2021-10-16 15:49 - 2021-10-16 15:50 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-10-16 15:48 - 2021-10-16 15:49 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-10-16 15:48 - 2021-10-16 15:48 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-10-16 15:44 - 2021-10-16 15:44 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-10-16 15:44 - 2021-10-16 15:44 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-10-16 15:44 - 2021-10-16 15:44 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-10-16 15:44 - 2021-10-16 15:44 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000449024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-10-16 15:44 - 2021-10-16 15:44 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-10-16 15:44 - 2021-10-16 15:44 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-10-16 15:44 - 2021-10-16 15:44 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-10-16 15:44 - 2021-10-16 15:44 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-10-16 15:44 - 2021-10-16 15:44 - 000011495 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-10-16 15:44 - 2021-10-16 15:44 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000007168 _____ (Microsoft Corporation) C:\WINDOWS\system32\msdxm.ocx
2021-10-16 15:44 - 2021-10-16 15:44 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-10-16 15:44 - 2021-10-16 15:44 - 000005632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdxm.ocx
2021-10-16 15:43 - 2021-10-16 15:43 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 001823296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-10-16 15:43 - 2021-10-16 15:43 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-10-16 15:43 - 2021-10-16 15:43 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000593920 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-10-16 15:43 - 2021-10-16 15:43 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-10-16 15:43 - 2021-10-16 15:43 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-10-16 15:43 - 2021-10-16 15:43 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-10-16 15:43 - 2021-10-16 15:43 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-16 15:43 - 2021-10-16 15:43 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-10-16 15:43 - 2021-10-16 15:43 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-10-16 15:35 - 2021-10-16 15:35 - 000023919 _____ C:\Users\Bobo\Documents\Fixlog.txt
2021-10-16 15:22 - 2021-10-16 15:22 - 000000000 ____D C:\Users\Bobo\AppData\Local\D3DSCache
2021-10-16 15:19 - 2021-10-16 19:27 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-16 15:19 - 2021-10-16 15:19 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-10-16 15:18 - 2019-06-20 03:32 - 006861904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2021-10-16 15:18 - 2019-06-20 03:23 - 032896202 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2021-10-16 15:17 - 2021-10-16 19:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-16 15:17 - 2021-10-16 19:04 - 000002776 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2021-10-16 15:17 - 2021-10-16 15:17 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2021-10-16 15:17 - 2021-10-16 15:17 - 000007623 _____ C:\WINDOWS\diagerr.xml
2021-10-16 15:17 - 2021-10-16 15:17 - 000000020 ___SH C:\Users\Bobo\ntuser.ini
2021-10-16 15:17 - 2021-10-16 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2021-10-16 15:17 - 2021-10-16 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-10-16 15:17 - 2021-10-16 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-10-16 15:14 - 2021-10-16 19:28 - 000000000 ____D C:\Users\Bobo
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Voisinage réseau
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Voisinage d'impression
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Modèles
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Mes documents
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Menu Démarrer
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Documents\Mes vidéos
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Documents\Mes images
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\Documents\Ma musique
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-10-16 15:14 - 2021-10-16 15:14 - 000000000 _SHDL C:\Users\Bobo\AppData\Local\Historique
2021-10-16 15:13 - 2021-10-18 20:44 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-16 15:13 - 2021-10-16 15:13 - 000438080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-10-16 14:17 - 2021-10-16 14:17 - 000005032 _____ C:\Users\Bobo\Desktop\KJqigG5j7iw_Fixlist.txt
2021-10-16 14:16 - 2021-10-16 19:03 - 000000000 ___DC C:\WINDOWS\Panther
2021-10-16 14:14 - 2021-10-16 14:16 - 000000036 _____ C:\WINDOWS\progress.ini
2021-10-16 14:06 - 2021-10-16 14:14 - 000000000 ___HD C:\$GetCurrent
2021-10-16 14:05 - 2021-10-16 14:14 - 000000000 ____D C:\Windows10Upgrade
2021-10-16 14:05 - 2021-10-16 14:05 - 000000731 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Assistant Mise à jour de Windows 10.lnk
2021-10-16 14:05 - 2021-10-16 14:05 - 000000719 _____ C:\Users\Bobo\Desktop\Assistant Mise à jour de Windows 10.lnk
2021-10-16 11:52 - 2021-10-16 11:52 - 001004586 _____ C:\Users\Bobo\Downloads\Wub.zip
2021-10-16 11:52 - 2021-10-16 11:52 - 000000000 ____D C:\Users\Bobo\Downloads\Wub
2021-10-16 11:45 - 2021-10-16 11:45 - 000000000 ___HD C:\$WinREAgent
2021-10-15 20:29 - 2021-10-16 21:49 - 000000000 ____D C:\Program Files\CCleaner
2021-10-15 20:29 - 2021-10-16 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-10-15 20:29 - 2021-10-15 20:29 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2021-10-14 18:03 - 2021-10-14 18:03 - 001365156 _____ C:\Users\Bobo\Downloads\GarciaChauvet-slides.pdf
2021-10-13 21:32 - 2021-10-13 21:32 - 000609975 _____ C:\Users\Bobo\Downloads\AV ingénieur de données NexSis.pdf
2021-10-13 16:33 - 2021-10-13 16:33 - 000245172 _____ C:\Users\Bobo\Downloads\titre de séjour(1).pdf
2021-10-12 21:29 - 2021-10-12 21:29 - 000282285 _____ C:\Users\Bobo\Downloads\ActesSELF2016-759-770.pdf
2021-10-12 20:04 - 2021-10-17 14:48 - 000000000 ____D C:\Users\Bobo\Documents\Document
2021-10-10 19:19 - 2021-10-14 20:59 - 000000000 ____D C:\Users\Bobo\Documents\APS
2021-10-10 14:18 - 2021-10-16 15:17 - 000002245 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-10-10 14:17 - 2021-10-18 20:58 - 000000000 ____D C:\Program Files (x86)\Google
2021-10-10 14:17 - 2021-10-11 20:49 - 000000000 ____D C:\Users\Bobo\AppData\Local\Google
2021-10-10 14:17 - 2021-10-10 14:17 - 000000000 ____D C:\Program Files\Google
2021-10-10 14:16 - 2021-10-10 14:16 - 001341272 _____ (Google LLC) C:\Users\Bobo\Downloads\ChromeSetup.exe
2021-10-07 16:47 - 2021-09-06 02:49 - 000286312 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcAudioBus.sys
2021-10-07 16:17 - 2021-10-07 16:17 - 000002293 _____ C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\StarLeaf.lnk
2021-10-07 16:17 - 2021-10-07 16:17 - 000000000 ____D C:\Users\Bobo\AppData\Local\Pronto
2021-10-07 16:15 - 2021-10-07 16:15 - 002735200 _____ (StarLeaf Ltd.) C:\Users\Bobo\Downloads\StarLeaf Launcher - j-hxcv0q.exe
2021-10-07 16:15 - 2021-10-07 16:15 - 000000000 ____D C:\Users\Bobo\AppData\Local\StarLeaf
2021-10-07 15:19 - 2021-10-15 16:12 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-10-04 21:59 - 2021-10-04 21:59 - 002101944 _____ (Malwarebytes) C:\Users\Bobo\Desktop\MBSetup.exe
2021-10-04 21:53 - 2021-10-04 21:54 - 000000000 ____D C:\AdwCleaner
2021-10-04 17:00 - 2021-10-11 16:12 - 000002359 _____ C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-10-04 17:00 - 2021-10-11 16:12 - 000002351 _____ C:\Users\Bobo\Desktop\Microsoft Teams.lnk
2021-10-04 17:00 - 2021-10-04 17:00 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Teams
2021-10-04 16:59 - 2021-10-11 16:12 - 000000000 ____D C:\Users\Bobo\AppData\Local\SquirrelTemp
2021-09-25 11:59 - 2021-10-18 21:11 - 000000000 ____D C:\FRST
2021-09-25 11:50 - 2021-10-18 21:10 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\ZHP
2021-09-23 07:22 - 2021-09-23 07:22 - 000000000 ____D C:\WINDOWS\system32\N360_BACKUP
2021-09-21 18:47 - 2021-09-21 18:47 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-09-20 15:19 - 2021-09-20 15:19 - 000000000 ____D C:\Users\Bobo\AppData\Local\ElevatedDiagnostics
2021-09-19 21:32 - 2021-09-24 21:22 - 000000000 ____D C:\Program Files (x86)\SMADAV
2021-09-19 21:32 - 2021-09-24 21:20 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Smadav
2021-09-19 21:32 - 2021-09-19 21:32 - 000000000 __SHD C:\[Smad-Cage]
2021-09-19 21:31 - 2021-09-19 21:31 - 006152448 _____ (Smadsoft ) C:\Users\Bobo\Downloads\smadav2021rev1462.exe
2021-09-17 20:00 - 2021-09-17 20:00 - 036174008 _____ (Piriform Software Ltd) C:\Users\Bobo\Downloads\ccsetup585.exe
2021-09-17 19:56 - 2021-10-15 16:12 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2021-09-17 19:45 - 2021-09-17 19:45 - 000000000 ____D C:\Users\Bobo\Documents\Modèles Office personnalisés
2021-09-17 16:29 - 2021-10-15 20:20 - 000000000 ____D C:\Users\Bobo\Documents\COURS
2021-09-17 00:37 - 2021-10-18 21:03 - 000000000 ____D C:\Users\Bobo\Documents\Entretient
2021-09-16 22:10 - 2021-09-16 22:10 - 000000000 ____D C:\Program Files\Common Files\AV
2021-09-15 22:32 - 2021-09-15 22:32 - 000001389 _____ C:\Users\Bobo\Desktop\Norton Installation Files.lnk
2021-09-15 22:32 - 2021-09-15 22:32 - 000000000 ____D C:\Users\Public\Downloads\Norton
2021-09-15 22:31 - 2021-09-15 22:32 - 003806720 _____ (NortonLifeLock Inc.) C:\Users\Bobo\Downloads\NAVPlusDownloader.exe
2021-09-15 22:05 - 2021-10-18 21:11 - 000000000 ____D C:\ProgramData\Mozilla
2021-09-15 22:05 - 2021-10-18 21:10 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Mozilla
2021-09-15 22:05 - 2021-10-15 16:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-15 22:05 - 2021-10-08 13:56 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-09-15 22:05 - 2021-09-15 22:05 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Mozilla
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\Mozilla
2021-09-15 22:04 - 2021-09-15 22:04 - 000333160 _____ (Mozilla) C:\Users\Bobo\Downloads\Firefox Installer.exe
2021-09-15 21:58 - 2021-09-15 21:58 - 000000000 ____D C:\Users\Bobo\AppData\Local\OneDrive
2021-09-15 18:24 - 2021-10-16 11:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-15 16:48 - 2021-09-15 16:48 - 000000000 ____D C:\Users\Bobo\AppData\Local\CEF
2021-09-15 16:17 - 2021-09-15 16:17 - 000232168 _____ (AVAST Software) C:\Users\Bobo\Downloads\avast_free_antivirus_setup_online.exe
2021-09-15 16:15 - 2021-09-15 16:15 - 005794408 _____ (McAfee, LLC) C:\Users\Bobo\Downloads\mcafee_trial_setup_433.0207.3617_key.exe
2021-09-15 16:15 - 2021-09-15 16:15 - 000910056 _____ (McAfee, LLC) C:\Users\Bobo\Downloads\Non confirmé 933967.crdownload
2021-09-15 01:08 - 2021-10-12 15:08 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-15 01:08 - 2021-09-15 01:08 - 000000000 ___RD C:\Users\Default\OneDrive
2021-09-15 01:07 - 2021-10-16 15:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2021-09-15 01:07 - 2021-09-15 01:07 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Entreprise.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2021-09-15 00:50 - 2021-09-15 00:50 - 001458285 _____ C:\Users\Bobo\Downloads\NOTICEEUINFORMATIQUEIMPORTANT.pdf
2021-09-15 00:49 - 2021-10-08 14:06 - 000000000 ____D C:\Program Files\Microsoft Office
2021-09-15 00:49 - 2021-09-15 00:49 - 000000000 ____D C:\Program Files\Microsoft Office 15
2021-09-14 23:43 - 2021-09-14 23:43 - 000048700 _____ C:\Users\Bobo\Downloads\AttestationDroits.pdf
2021-09-14 22:05 - 2021-09-14 22:05 - 000367647 _____ C:\Users\Bobo\Downloads\AMOA.docx.pdf
2021-09-14 22:05 - 2021-09-14 22:05 - 000000000 ____D C:\Users\Bobo\Documents\CV
2021-09-14 21:35 - 2021-09-14 21:35 - 000154672 _____ C:\Users\Bobo\Downloads\AMOA.pdf.121797043.pdf
2021-09-14 18:33 - 2021-10-06 16:34 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-09-14 18:29 - 2021-09-14 18:29 - 005708193 _____ C:\Users\Bobo\Downloads\CV-20210914T162904Z-001.zip
2021-09-14 18:22 - 2021-10-18 20:47 - 000000000 ____D C:\Users\Bobo\AppData\Local\PlaceholderTileLogoFolder
2021-09-14 18:19 - 2021-09-14 18:19 - 000000000 ____D C:\Users\Bobo\AppData\Local\Comms
2021-09-14 15:53 - 2021-10-16 15:49 - 000000000 ____D C:\WINDOWS\system32\cAVS
2021-09-14 15:53 - 2021-10-16 15:14 - 000000000 ____D C:\WINDOWS\system32\Intel
2021-09-14 15:49 - 2021-10-16 15:51 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-09-14 15:49 - 2021-10-16 15:50 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-09-14 15:49 - 2021-10-16 15:50 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2021-09-14 15:49 - 2021-09-14 15:48 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2021-09-14 15:49 - 2021-09-14 15:48 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2021-09-14 15:49 - 2021-09-14 15:48 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2021-09-14 15:49 - 2021-09-14 15:48 - 000000219 _____ C:\WINDOWS\system.ini
2021-09-14 15:49 - 2021-09-14 15:48 - 000000092 _____ C:\WINDOWS\win.ini
2021-09-14 15:06 - 2021-09-15 01:08 - 000000000 ___RD C:\Users\Bobo\OneDrive
2021-09-14 15:05 - 2021-09-14 15:05 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\HP
2021-09-14 15:04 - 2021-10-18 20:47 - 000000000 ____D C:\Users\Bobo\AppData\Local\Packages
2021-09-14 15:04 - 2021-10-18 20:47 - 000000000 ____D C:\ProgramData\Packages
2021-09-14 15:04 - 2021-10-16 21:49 - 000000000 __SHD C:\Users\Bobo\IntelGraphicsProfiles
2021-09-14 15:04 - 2021-10-16 15:17 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-09-14 15:04 - 2021-10-16 15:17 - 000000000 ___RD C:\Users\Bobo\3D Objects
2021-09-14 15:04 - 2021-09-14 18:23 - 000000000 ____D C:\Users\Bobo\AppData\Local\Publishers
2021-09-14 15:04 - 2021-09-14 15:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\Intel
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Synaptics
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Adobe
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Intel
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Local\VirtualStore
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Local\ConnectedDevicesPlatform
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Mes vidéos
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Mes images
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Ma musique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Voisinage réseau
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Voisinage d'impression
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Modèles
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Mes documents
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Menu Démarrer
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Mes vidéos
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Mes images
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Ma musique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Modèles
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Menu Démarrer
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Bureau
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Program Files\Fichiers communs
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Documents and Settings
2021-09-14 14:57 - 2021-10-16 19:20 - 000000000 ____D C:\Intel
2021-09-14 14:57 - 2021-10-06 21:01 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-09-14 14:57 - 2021-10-04 21:55 - 000000000 ____D C:\ProgramData\HP
2021-09-14 14:57 - 2021-09-14 15:00 - 000000000 ____D C:\ProgramData\Intel
2021-09-14 14:57 - 2021-09-14 14:57 - 000000037 _____ C:\WINDOWS\system32\Drivers\RtkR0Log.dat
2021-09-14 14:57 - 2021-09-14 14:57 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2021-09-14 14:57 - 2019-02-26 23:33 - 000014220 _____ C:\WINDOWS\system32\Drivers\Gen3pKey1.dat
2021-09-14 14:57 - 2019-02-18 20:05 - 000010324 _____ C:\WINDOWS\system32\Drivers\Gen3pKey.dat
2021-09-14 14:57 - 2017-12-08 18:11 - 000001304 _____ C:\WINDOWS\system32\Drivers\RTKAMPI.Dat
2021-09-14 14:57 - 2017-11-09 19:10 - 000017232 _____ C:\WINDOWS\system32\Drivers\RTSPKPT.dat
2021-09-14 14:56 - 2021-10-16 19:20 - 000008192 ___SH C:\DumpStack.log.tmp
2021-09-14 14:19 - 2021-09-14 15:54 - 000000000 ___HD C:\$SysReset
2021-09-02 00:20 - 2021-05-06 23:25 - 048047288 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTPreprocStreamer.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 001686184 _____ (Intel Corporation) C:\WINDOWS\system32\MultiChannelWoV.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 000877752 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWovSDK.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 000507064 _____ (Intel Corporation) C:\WINDOWS\system32\MultichannelWoVCfg.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 005570328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 003733936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTKSpeechPP2.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 003732872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTKSpeechPP.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 001126552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 000482120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2021-09-02 00:20 - 2019-06-20 03:37 - 000881440 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe
2021-09-02 00:20 - 2019-06-20 03:37 - 000821328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2021-09-02 00:20 - 2019-06-20 03:37 - 000215032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 019840776 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPRes.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 004313864 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnh.exe
2021-09-02 00:05 - 2019-12-04 02:16 - 000812296 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 000769288 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000383240 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnhService.exe
2021-09-02 00:05 - 2019-12-04 02:16 - 000275720 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 000064264 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynRMIHID.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000049416 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000048904 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF.sys
2021-09-02 00:03 - 2021-05-06 23:25 - 000852760 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcOED.sys
2021-09-02 00:03 - 2021-05-06 22:52 - 000243016 _____ C:\WINDOWS\system32\Drivers\dsp_fw_release.bin
2021-09-02 00:03 - 2021-05-06 22:52 - 000012288 _____ C:\WINDOWS\system32\Drivers\dsp_fw_release_7CAD0808-AB10-CD23-EF45-12AB34CD56EF.bin
2021-08-12 19:49 - 2020-09-11 11:36 - 000305992 _____ C:\WINDOWS\system32\libmfxhw64.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000254520 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000171472 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000146752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 026676016 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 013519664 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 001790192 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001790192 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001386224 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001386224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001096800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 001096800 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000949856 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000949856 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000507696 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000462640 _____ C:\WINDOWS\system32\ze_loader.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000370480 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000148784 _____ C:\WINDOWS\system32\ze_validation_layer.dll
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-10-18 21:05 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-18 20:47 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-17 14:10 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-10-16 21:49 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-16 19:27 - 2019-12-07 16:49 - 000756416 _____ C:\WINDOWS\system32\perfh00C.dat
2021-10-16 19:27 - 2019-12-07 16:49 - 000142186 _____ C:\WINDOWS\system32\perfc00C.dat
2021-10-16 19:27 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-16 19:20 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-16 19:20 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-10-16 19:14 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-16 15:51 - 2019-12-07 11:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-10-16 15:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-10-16 15:51 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-10-16 15:50 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-10-16 15:50 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-10-16 15:46 - 2019-12-07 16:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-10-16 15:46 - 2019-12-07 16:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-10-16 15:46 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-10-16 15:46 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-10-16 15:39 - 2019-12-07 11:18 - 000000000 ____D C:\WINDOWS\Setup
2021-10-16 15:31 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows NT
2021-10-16 15:17 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-10-16 15:17 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-10-16 15:15 - 2019-12-07 11:14 - 000000000 __RHD C:\Users\Public\Libraries
==================== SigCheckExt =========================
2021-10-18 21:11 - 2021-10-18 21:11 - 002310656 _____ (Farbar) C:\Users\Bobo\Downloads\FRST64.exe
2021-10-16 19:07 - 2021-10-16 19:07 - 002811112 _____ (kernel-panik) C:\Users\Bobo\Downloads\kprm_2.9.2.exe
2021-10-18 21:05 - 2021-10-18 21:05 - 003476632 _____ (Nicolas Coolman) C:\Users\Bobo\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {14e40a9a-2e88-11ec-aab5-c2f5626fab1d}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {ecc371aa-2e82-11ec-9bfb-917bdedc0a8f}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {14e40a9a-2e88-11ec-aab5-c2f5626fab1d}
nx OptIn
bootmenupolicy Standard
Installation de Windows
-----------------------
identificateur {cbd971bf-b7b8-4885-951a-fa03044f5d71}
device ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{1ec848b5-2e7c-11ec-9bf9-8f823bcc8c93}
bootstatdevice partition=C:
custom:11000083 partition=C:
path \windows\system32\winload.exe
description Windows Rollback
locale fr-FR
bootstatfilepath \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
inherit {bootloadersettings}
restartonfailure Yes
osdevice ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{1ec848b5-2e7c-11ec-9bf9-8f823bcc8c93}
custom:21000152 partition=C:
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {ecc371aa-2e82-11ec-9bfb-917bdedc0a8f}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{ecc371ab-2e82-11ec-9bfb-917bdedc0a8f}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{ecc371ab-2e82-11ec-9bfb-917bdedc0a8f}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
device ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-fr
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride PushButtonReset
osdevice ramdisk=[unknown]\Recovery\WindowsRE\Winre.wim,{f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {14e40a9a-2e88-11ec-aab5-c2f5626fab1d}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {ecc371aa-2e82-11ec-9bfb-917bdedc0a8f}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {37659898-1563-11ec-899e-ab4d9aa93883}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {1ec848b5-2e7c-11ec-9bf9-8f823bcc8c93}
description Windows Setup
ramdisksdidevice partition=C:
ramdisksdipath \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {ecc371ab-2e82-11ec-9bfb-917bdedc0a8f}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================