Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 01-12-2021
Exécuté par a-gui (administrateur) sur DESKTOP-09CDLTU (Micro-Star International Co., Ltd. MS-7B98) (03-12-2021 14:12:42)
Exécuté depuis C:\Users\a-gui\AppData\Local\Temp\scoped_dir1168_169146131
Profils chargés: a-gui
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1348 (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Gaijin Network LTD -> Gaijin) C:\Users\a-gui\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Logitech -> Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\a-gui\AppData\Local\Temp\scoped_dir1836_2133814490\ZHPSuite.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\NVDisplay.Container.exe <2>
(Opera Software AS -> Opera Software) C:\Users\a-gui\AppData\Local\Programs\Opera GX\81.0.4196.61\opera_autoupdate.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_01042bb7f11c17c4\RtkAudUService64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3180256 2021-11-03] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_01042bb7f11c17c4\RtkAudUService64.exe [1256824 2021-04-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [35342976 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\a-gui\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35342976 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [Gaijin.Net Updater] => C:\Users\a-gui\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2374376 2020-12-03] (Gaijin Network LTD -> Gaijin)
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {25483C10-95A3-4DAC-AAC2-FE2D9D5D897A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-11-12] (Piriform Software Ltd -> Piriform)
Task: {3ABF2620-67CE-4A9D-8529-5DD141BE3535} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {668CF7B7-F5F2-4407-B5EB-D64AB20671CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8461A64B-751D-489F-975F-288C15B74BD5} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1616012535 => C:\Users\a-gui\AppData\Local\Programs\Opera GX\launcher.exe [2201808 2021-11-24] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\a-gui\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {8468D443-79DE-49AB-898C-B20AF1FD08AC} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {8F16AD2E-6910-4BEA-BF20-AA81BF5C03F1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A4FBA387-0595-4948-98A9-F9838F25409B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BE8D31D9-3E73-4A4F-A086-BF81BE9D434C} - System32\Tasks\CCleanerSkipUAC - a-gui => C:\Program Files\CCleaner\CCleaner.exe [29417088 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {EFB53706-1328-461E-8141-40B5BFD75CA2} - System32\Tasks\Opera GX scheduled Autoupdate 1606553343 => C:\Users\a-gui\AppData\Local\Programs\Opera GX\launcher.exe [2201808 2021-11-24] (Opera Software AS -> Opera Software)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f5f9e95f-af99-432c-b7c2-6a7caeae209a}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge Profile: C:\Users\a-gui\AppData\Local\Microsoft\Edge\User Data\Default [2021-12-03]
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @vlcstreamer.com/VLCStreamer Update;version=3 -> C:\Program Files (x86)\VLCStreamer\Update\1.3.99.0\npVLCStreamerUpdate3.dll [Pas de fichier]
FF Plugin-x32: @vlcstreamer.com/VLCStreamer Update;version=9 -> C:\Program Files (x86)\VLCStreamer\Update\1.3.99.0\npVLCStreamerUpdate3.dll [Pas de fichier]
Opera:
=======
StartMenuInternet: (HKU\S-1-5-21-3470109689-949784763-2888423446-1001) Opera GXStable - "C:\Users\a-gui\AppData\Local\Programs\Opera GX\Launcher.exe"
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8914856 2021-10-09] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2020-12-03] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-20] (Epic Games Inc. -> Epic Games, Inc.)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-07] (Mixbyte Inc -> Freemake)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557656 2021-11-02] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3476184 2021-11-02] (Electronic Arts, Inc. -> Electronic Arts)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\UNCHEATER\ucldr_battlegrounds_gl.exe [7374576 2021-10-09] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10157608 2021-11-03] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2110.6-0\NisSrv.exe [2872024 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2110.6-0\MsMpEng.exe [128376 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [7700680 2021-10-09] (PUBG CORPORATION -> PUBG Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 RimUsb; C:\WINDOWS\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Research In Motion Limited)
S3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [53656 2020-11-15] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_0078; C:\WINDOWS\System32\drivers\RzDev_0078.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [57768 2021-11-11] (Windscribe Limited -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8227000 2021-11-03] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435424 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86240 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 windtun420; C:\WINDOWS\System32\drivers\windtun420.sys [47544 2021-11-11] (Windscribe Limited -> WireGuard LLC)
S3 xhunter1; C:\Windows\xhunter1.sys [2729456 2021-10-09] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-02 18:36 - 2021-12-02 18:36 - 000000000 ____D C:\Users\a-gui\AppData\Local\mbam
2021-12-02 18:35 - 2021-12-02 18:35 - 000000000 ____D C:\Program Files\Malwarebytes
2021-12-02 18:26 - 2021-12-02 18:28 - 000000000 ____D C:\AdwCleaner
2021-12-02 17:13 - 2021-12-02 19:04 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-02 17:13 - 2021-12-02 17:13 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-12-02 17:13 - 2021-12-02 17:13 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-12-02 17:12 - 2021-12-02 17:12 - 000000020 ___SH C:\Users\a-gui\ntuser.ini
2021-12-02 17:11 - 2021-12-03 13:38 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{ABD93F46-E77D-40B2-8916-4984A9301FBB}
2021-12-02 17:11 - 2021-12-02 18:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-02 17:11 - 2021-12-02 18:34 - 000003840 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2021-12-02 17:11 - 2021-12-02 17:11 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2021-12-02 17:11 - 2021-12-02 17:11 - 000007623 _____ C:\WINDOWS\diagerr.xml
2021-12-02 17:11 - 2021-12-02 17:11 - 000003784 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled assistant Autoupdate 1616012535
2021-12-02 17:11 - 2021-12-02 17:11 - 000003562 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-02 17:11 - 2021-12-02 17:11 - 000003550 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1606553343
2021-12-02 17:11 - 2021-12-02 17:11 - 000003338 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-12-02 17:11 - 2021-12-02 17:11 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-12-02 17:11 - 2021-12-02 17:11 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - a-gui
2021-12-02 17:08 - 2021-12-02 22:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-02 17:08 - 2021-12-02 17:08 - 000257912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-12-02 17:08 - 2021-12-02 17:08 - 000000000 ____D C:\WINDOWS\system32\lxss
2021-12-02 17:07 - 2021-12-02 17:11 - 000000000 ____D C:\Windows.old
2021-12-02 17:03 - 2021-12-02 17:12 - 000000000 ____D C:\Users\a-gui
2021-12-02 17:03 - 2021-12-02 17:07 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Voisinage réseau
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Voisinage d'impression
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Modèles
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Mes documents
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Menu Démarrer
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\AppData\Local\Historique
2021-12-02 17:02 - 2021-12-02 17:03 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-12-02 16:59 - 2021-12-02 16:59 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-02 16:59 - 2021-12-02 16:59 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-02 16:59 - 2021-12-02 16:59 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-12-02 16:59 - 2021-12-02 16:59 - 000011363 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-12-02 16:56 - 2019-10-15 13:53 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2021-12-02 16:56 - 2019-04-18 18:49 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files\MSBuild
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-12-02 16:51 - 2021-12-02 16:51 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-12-02 16:45 - 2021-12-02 18:34 - 000000000 ___DC C:\WINDOWS\Panther
2021-12-02 16:16 - 2021-12-02 16:36 - 000000000 ____D C:\ESD
2021-12-02 16:13 - 2021-12-02 16:13 - 000000000 ___HD C:\$Windows.~WS
2021-12-02 16:04 - 2021-12-02 16:04 - 001004586 _____ C:\Users\a-gui\Downloads\Wub.zip
2021-12-02 09:00 - 2021-12-03 14:12 - 000000000 ____D C:\FRST
2021-12-02 08:44 - 2021-12-03 14:09 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\ZHP
2021-12-02 08:44 - 2021-12-02 18:01 - 000000000 ____D C:\Users\a-gui\AppData\Local\ZHP
2021-11-29 17:44 - 2021-11-29 17:46 - 368768632 _____ C:\Users\a-gui\Downloads\soa.s01e07.dvdrip-Wawacity.vip.avi.avi
2021-11-29 17:33 - 2021-11-29 17:34 - 368746866 _____ C:\Users\a-gui\Downloads\soa.s01e06.dvdrip-Wawacity.vip.avi.avi
2021-11-27 20:28 - 2021-11-27 20:30 - 368930410 _____ C:\Users\a-gui\Downloads\soa.s01e05.dvdrip-Wawacity.vip.avi.avi
2021-11-27 20:21 - 2021-11-27 20:21 - 365846096 _____ C:\Users\a-gui\Downloads\soa.s01e04.dvdrip-Wawacity.vip.avi.avi
2021-11-27 16:29 - 2021-11-27 16:29 - 365502180 _____ C:\Users\a-gui\Downloads\soa.s01e03.dvdrip-Wawacity.vip.avi.avi
2021-11-27 13:52 - 2021-11-27 13:54 - 365619764 _____ C:\Users\a-gui\Downloads\soa.s01e02.dvdrip-Wawacity.vip.avi.avi
2021-11-26 17:54 - 2021-11-26 17:54 - 000007594 _____ C:\Users\a-gui\AppData\Local\Resmon.ResmonCfg
2021-11-22 17:46 - 2021-11-22 17:46 - 000000000 ____D C:\Users\a-gui\AppData\Local\DBG
2021-11-22 17:46 - 2021-11-22 17:46 - 000000000 ____D C:\Users\a-gui\AppData\Local\CrashReportClient
2021-11-20 10:28 - 2021-10-28 23:14 - 000079840 _____ (Razer Inc) C:\WINDOWS\system32\RazerS3Coinstaller.dll
2021-11-16 20:33 - 2021-11-16 20:33 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\fltk.org
2021-11-16 20:33 - 2021-11-16 20:33 - 000000000 ____D C:\ProgramData\fltk.org
2021-11-11 19:05 - 2021-11-11 19:05 - 000057768 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tapwindscribe0901.sys
2021-11-11 19:05 - 2021-11-11 19:05 - 000047544 _____ (WireGuard LLC) C:\WINDOWS\system32\Drivers\windtun420.sys
2021-11-11 19:05 - 2021-11-11 19:05 - 000000000 ____D C:\Users\a-gui\AppData\Local\Windscribe
2021-11-10 22:24 - 2021-11-10 22:24 - 000000000 ___HD C:\$WinREAgent
2021-11-05 14:03 - 2021-11-05 14:03 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-11-05 14:03 - 2021-11-05 14:03 - 000000000 ____D C:\Program Files\PCHealthCheck
2021-10-24 20:50 - 2021-12-02 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2021-10-24 20:50 - 2021-11-28 11:34 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\vlc
2021-10-24 20:50 - 2021-10-24 20:50 - 000000000 ____D C:\Program Files (x86)\VideoLAN
2021-10-20 12:30 - 2021-10-20 12:30 - 000000000 ____D C:\Users\a-gui\AppData\Local\Epic Games
2021-10-20 12:30 - 2021-10-20 12:30 - 000000000 ____D C:\Users\a-gui\AppData\Local\EOSUserHelper
2021-10-20 12:14 - 2021-10-20 12:14 - 000000000 ____D C:\Users\Default\AppData\Local\Epic Games
2021-10-09 12:21 - 2021-10-09 12:21 - 000000000 ____D C:\Users\a-gui\AppData\Local\UNCHEATER
2021-10-06 14:34 - 2021-10-06 14:34 - 000000000 ____D C:\ProgramData\ssh
2021-10-06 14:30 - 2021-10-06 14:30 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-10-06 14:29 - 2021-10-06 14:29 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-10-06 14:29 - 2021-10-06 14:29 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-10-06 14:29 - 2021-10-06 14:29 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000047472 _____ C:\WINDOWS\SysWOW64\umpdc.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2021-10-06 14:28 - 2021-10-06 14:28 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-06 14:28 - 2021-10-06 14:28 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000064552 _____ C:\WINDOWS\system32\umpdc.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000029696 _____ (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000025088 _____ (The ICU Project) C:\WINDOWS\system32\icuin.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-03 13:59 - 2021-04-10 08:52 - 000000000 ____D C:\Users\a-gui\AppData\Local\CrashDumps
2021-12-03 13:59 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-12-03 13:38 - 2020-11-28 10:01 - 000000000 ____D C:\Program Files\CCleaner
2021-12-03 13:38 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-12-03 13:38 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-03 13:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-03 13:36 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-03 13:36 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-02 22:37 - 2020-11-28 10:46 - 000000000 ____D C:\ProgramData\NVIDIA
2021-12-02 19:04 - 2019-12-07 15:49 - 000791594 _____ C:\WINDOWS\system32\perfh00C.dat
2021-12-02 19:04 - 2019-12-07 15:49 - 000149760 _____ C:\WINDOWS\system32\perfc00C.dat
2021-12-02 18:59 - 2020-12-06 11:29 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2021-12-02 18:57 - 2020-11-27 22:27 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-02 18:56 - 2019-12-07 10:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2021-12-02 17:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-12-02 17:28 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-12-02 17:12 - 2021-02-01 13:29 - 000000000 ____D C:\Program Files (x86)\Razer
2021-12-02 17:12 - 2020-11-28 09:40 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-12-02 17:12 - 2020-11-28 09:40 - 000000000 ___RD C:\Users\a-gui\3D Objects
2021-12-02 17:12 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-02 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-12-02 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows NT
2021-12-02 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-12-02 17:11 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-12-02 17:10 - 2019-12-07 10:14 - 000000000 __RSD C:\WINDOWS\Media
2021-12-02 17:08 - 2021-06-27 10:37 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2021-12-02 17:07 - 2021-07-10 11:38 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Enlisted
2021-12-02 17:07 - 2021-07-02 18:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft
2021-12-02 17:07 - 2020-12-10 15:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2021-12-02 17:07 - 2020-12-09 20:17 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-12-02 17:07 - 2020-12-06 11:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2021-12-02 17:07 - 2020-11-28 12:38 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-12-02 17:07 - 2020-11-28 12:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-12-02 17:07 - 2020-11-28 10:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch
2021-12-02 17:07 - 2020-11-28 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2021-12-02 17:07 - 2020-11-28 10:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2021-12-02 17:07 - 2020-11-28 10:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-12-02 17:07 - 2020-11-28 09:41 - 000000000 ___RD C:\Users\a-gui\OneDrive
2021-12-02 17:07 - 2019-12-07 10:18 - 000000000 ____D C:\WINDOWS\Setup
2021-12-02 17:07 - 2019-12-07 10:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-12-02 17:06 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-12-02 17:03 - 2021-01-30 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2021-12-02 17:03 - 2020-11-28 10:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2021-12-02 17:03 - 2020-11-28 09:40 - 000000000 ____D C:\Users\a-gui\AppData\Local\Packages
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-12-02 17:01 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-12-02 16:55 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2021-12-02 16:55 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2021-12-02 16:07 - 2020-11-28 10:12 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\discord
2021-12-02 15:53 - 2020-11-28 10:12 - 000000000 ____D C:\Users\a-gui\AppData\Local\Discord
2021-12-02 15:50 - 2020-11-28 10:21 - 000000000 ____D C:\Users\a-gui\AppData\Local\Battle.net
2021-12-02 14:25 - 2020-11-28 09:44 - 000000000 ____D C:\Users\a-gui\AppData\Local\D3DSCache
2021-12-01 21:06 - 2020-11-28 09:49 - 000001434 _____ C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera GX.lnk
2021-11-27 14:25 - 2020-11-28 12:59 - 000000296 _____ C:\Users\a-gui\OneDrive\Documents\séries.txt
2021-11-23 20:24 - 2021-03-13 12:46 - 000000000 ____D C:\Program Files (x86)\Origin
2021-11-22 14:34 - 2020-11-28 10:43 - 000000000 ____D C:\Users\a-gui\OneDrive\Documents\My Games
2021-11-19 16:06 - 2020-11-28 09:40 - 000000000 ____D C:\ProgramData\Packages
2021-11-14 15:27 - 2020-12-06 11:26 - 000000000 ____D C:\ProgramData\Riot Games
2021-11-11 10:15 - 2020-11-28 12:31 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\Twitch
2021-11-10 22:23 - 2020-12-09 20:17 - 141529560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-11-07 20:37 - 2020-12-06 11:26 - 000000000 ____D C:\Program Files\Riot Vanguard
==================== Fichiers à la racine de certains dossiers ========
2021-11-26 17:54 - 2021-11-26 17:54 - 000007594 _____ () C:\Users\a-gui\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2021-03-12 18:18 - 2021-03-12 18:18 - 000010752 _____ C:\WINDOWS\SetupAfterRebootService.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {eb4db409-5389-11ec-995d-00d861752416}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {13782362-538a-11ec-995e-d821c9f68993}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{13782363-538a-11ec-995e-d821c9f68993}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{13782363-538a-11ec-995e-d821c9f68993}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {17955994-30f3-11eb-8540-adc0e3b2ace4}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{17955995-30f3-11eb-8540-adc0e3b2ace4}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{17955995-30f3-11eb-8540-adc0e3b2ace4}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Installation de Windows
-----------------------
identificateur {cbd971bf-b7b8-4885-951a-fa03044f5d71}
device ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{eb4db40b-5389-11ec-995d-00d861752416}
bootstatdevice partition=C:
custom:11000083 partition=C:
path \windows\system32\winload.exe
description Windows Rollback
locale fr-FR
bootstatfilepath \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
inherit {bootloadersettings}
restartonfailure Yes
osdevice ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{eb4db40b-5389-11ec-995d-00d861752416}
custom:21000152 partition=C:
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {13782362-538a-11ec-995e-d821c9f68993}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {eb4db409-5389-11ec-995d-00d861752416}
nx OptIn
bootmenupolicy Standard
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {176cc269-30f3-11eb-8540-adc0e3b2ace4}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {17955994-30f3-11eb-8540-adc0e3b2ace4}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {eb4db409-5389-11ec-995d-00d861752416}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {13782362-538a-11ec-995e-d821c9f68993}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {13782363-538a-11ec-995e-d821c9f68993}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {17955995-30f3-11eb-8540-adc0e3b2ace4}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {eb4db40b-5389-11ec-995d-00d861752416}
description Windows Setup
ramdisksdidevice partition=C:
ramdisksdipath \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par a-gui (administrateur) sur DESKTOP-09CDLTU (Micro-Star International Co., Ltd. MS-7B98) (03-12-2021 14:12:42)
Exécuté depuis C:\Users\a-gui\AppData\Local\Temp\scoped_dir1168_169146131
Profils chargés: a-gui
Plate-forme: Microsoft Windows 10 Famille Version 21H2 19044.1348 (X64) Langue: Français (France)
Navigateur par défaut: Opera
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Gaijin Network LTD -> Gaijin) C:\Users\a-gui\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Logitech -> Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2110.13603.0_x64__8wekyb3d8bbwe\Win32Bridge.Server.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\a-gui\AppData\Local\Temp\scoped_dir1836_2133814490\ZHPSuite.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\NVDisplay.Container.exe <2>
(Opera Software AS -> Opera Software) C:\Users\a-gui\AppData\Local\Programs\Opera GX\81.0.4196.61\opera_autoupdate.exe <2>
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_01042bb7f11c17c4\RtkAudUService64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3180256 2021-11-03] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_01042bb7f11c17c4\RtkAudUService64.exe [1256824 2021-04-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [35342976 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\a-gui\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [35342976 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3470109689-949784763-2888423446-1001\...\Run: [Gaijin.Net Updater] => C:\Users\a-gui\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2374376 2020-12-03] (Gaijin Network LTD -> Gaijin)
GroupPolicy: Restriction ? <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {25483C10-95A3-4DAC-AAC2-FE2D9D5D897A} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2021-11-12] (Piriform Software Ltd -> Piriform)
Task: {3ABF2620-67CE-4A9D-8529-5DD141BE3535} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {668CF7B7-F5F2-4407-B5EB-D64AB20671CC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8461A64B-751D-489F-975F-288C15B74BD5} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1616012535 => C:\Users\a-gui\AppData\Local\Programs\Opera GX\launcher.exe [2201808 2021-11-24] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\a-gui\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {8468D443-79DE-49AB-898C-B20AF1FD08AC} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {8F16AD2E-6910-4BEA-BF20-AA81BF5C03F1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A4FBA387-0595-4948-98A9-F9838F25409B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MpCmdRun.exe [901056 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BE8D31D9-3E73-4A4F-A086-BF81BE9D434C} - System32\Tasks\CCleanerSkipUAC - a-gui => C:\Program Files\CCleaner\CCleaner.exe [29417088 2021-11-12] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {EFB53706-1328-461E-8141-40B5BFD75CA2} - System32\Tasks\Opera GX scheduled Autoupdate 1606553343 => C:\Users\a-gui\AppData\Local\Programs\Opera GX\launcher.exe [2201808 2021-11-24] (Opera Software AS -> Opera Software)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{f5f9e95f-af99-432c-b7c2-6a7caeae209a}: [DhcpNameServer] 192.168.1.1
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge Profile: C:\Users\a-gui\AppData\Local\Microsoft\Edge\User Data\Default [2021-12-03]
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @videolan.org/vlc,version=3.0.16 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @vlcstreamer.com/VLCStreamer Update;version=3 -> C:\Program Files (x86)\VLCStreamer\Update\1.3.99.0\npVLCStreamerUpdate3.dll [Pas de fichier]
FF Plugin-x32: @vlcstreamer.com/VLCStreamer Update;version=9 -> C:\Program Files (x86)\VLCStreamer\Update\1.3.99.0\npVLCStreamerUpdate3.dll [Pas de fichier]
Opera:
=======
StartMenuInternet: (HKU\S-1-5-21-3470109689-949784763-2888423446-1001) Opera GXStable - "C:\Users\a-gui\AppData\Local\Programs\Opera GX\Launcher.exe"
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8914856 2021-10-09] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [818304 2020-12-03] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-20] (Epic Games Inc. -> Epic Games, Inc.)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-07] (Mixbyte Inc -> Freemake)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557656 2021-11-02] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3476184 2021-11-02] (Electronic Arts, Inc. -> Electronic Arts)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\UNCHEATER\ucldr_battlegrounds_gl.exe [7374576 2021-10-09] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10157608 2021-11-03] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2110.6-0\NisSrv.exe [2872024 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2110.6-0\MsMpEng.exe [128376 2021-11-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [7700680 2021-10-09] (PUBG CORPORATION -> PUBG Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_4a746d937e6a7240\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 RimUsb; C:\WINDOWS\System32\Drivers\RimUsb_AMD64.sys [27520 2007-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Research In Motion Limited)
S3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [53656 2020-11-15] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_0078; C:\WINDOWS\System32\drivers\RzDev_0078.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [57768 2021-11-11] (Windscribe Limited -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8227000 2021-11-03] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-11-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435424 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 wdm_usb; C:\WINDOWS\System32\drivers\usb2ser.sys [151184 2016-07-15] (NGO -> MBB)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86240 2021-11-02] (Microsoft Windows -> Microsoft Corporation)
S3 windtun420; C:\WINDOWS\System32\drivers\windtun420.sys [47544 2021-11-11] (Windscribe Limited -> WireGuard LLC)
S3 xhunter1; C:\Windows\xhunter1.sys [2729456 2021-10-09] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-02 18:36 - 2021-12-02 18:36 - 000000000 ____D C:\Users\a-gui\AppData\Local\mbam
2021-12-02 18:35 - 2021-12-02 18:35 - 000000000 ____D C:\Program Files\Malwarebytes
2021-12-02 18:26 - 2021-12-02 18:28 - 000000000 ____D C:\AdwCleaner
2021-12-02 17:13 - 2021-12-02 19:04 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-12-02 17:13 - 2021-12-02 17:13 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-12-02 17:13 - 2021-12-02 17:13 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-12-02 17:12 - 2021-12-02 17:12 - 000000020 ___SH C:\Users\a-gui\ntuser.ini
2021-12-02 17:11 - 2021-12-03 13:38 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{ABD93F46-E77D-40B2-8916-4984A9301FBB}
2021-12-02 17:11 - 2021-12-02 18:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-12-02 17:11 - 2021-12-02 18:34 - 000003840 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2021-12-02 17:11 - 2021-12-02 17:11 - 000007623 _____ C:\WINDOWS\diagwrn.xml
2021-12-02 17:11 - 2021-12-02 17:11 - 000007623 _____ C:\WINDOWS\diagerr.xml
2021-12-02 17:11 - 2021-12-02 17:11 - 000003784 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled assistant Autoupdate 1616012535
2021-12-02 17:11 - 2021-12-02 17:11 - 000003562 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-12-02 17:11 - 2021-12-02 17:11 - 000003550 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1606553343
2021-12-02 17:11 - 2021-12-02 17:11 - 000003338 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-12-02 17:11 - 2021-12-02 17:11 - 000002988 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2021-12-02 17:11 - 2021-12-02 17:11 - 000002252 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - a-gui
2021-12-02 17:08 - 2021-12-02 22:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-12-02 17:08 - 2021-12-02 17:08 - 000257912 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-12-02 17:08 - 2021-12-02 17:08 - 000000000 ____D C:\WINDOWS\system32\lxss
2021-12-02 17:07 - 2021-12-02 17:11 - 000000000 ____D C:\Windows.old
2021-12-02 17:03 - 2021-12-02 17:12 - 000000000 ____D C:\Users\a-gui
2021-12-02 17:03 - 2021-12-02 17:07 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Voisinage réseau
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Voisinage d'impression
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Modèles
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Mes documents
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\Menu Démarrer
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-12-02 17:03 - 2021-12-02 17:03 - 000000000 _SHDL C:\Users\a-gui\AppData\Local\Historique
2021-12-02 17:02 - 2021-12-02 17:03 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-12-02 16:59 - 2021-12-02 16:59 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-02 16:59 - 2021-12-02 16:59 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-02 16:59 - 2021-12-02 16:59 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-12-02 16:59 - 2021-12-02 16:59 - 000011363 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-12-02 16:56 - 2019-10-15 13:53 - 000076060 _____ C:\WINDOWS\system32\xpsrchvw.xml
2021-12-02 16:56 - 2019-04-18 18:49 - 000076060 _____ C:\WINDOWS\SysWOW64\xpsrchvw.xml
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files\MSBuild
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-12-02 16:55 - 2021-12-02 16:55 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-12-02 16:51 - 2021-12-02 16:51 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-12-02 16:45 - 2021-12-02 18:34 - 000000000 ___DC C:\WINDOWS\Panther
2021-12-02 16:16 - 2021-12-02 16:36 - 000000000 ____D C:\ESD
2021-12-02 16:13 - 2021-12-02 16:13 - 000000000 ___HD C:\$Windows.~WS
2021-12-02 16:04 - 2021-12-02 16:04 - 001004586 _____ C:\Users\a-gui\Downloads\Wub.zip
2021-12-02 09:00 - 2021-12-03 14:12 - 000000000 ____D C:\FRST
2021-12-02 08:44 - 2021-12-03 14:09 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\ZHP
2021-12-02 08:44 - 2021-12-02 18:01 - 000000000 ____D C:\Users\a-gui\AppData\Local\ZHP
2021-11-29 17:44 - 2021-11-29 17:46 - 368768632 _____ C:\Users\a-gui\Downloads\soa.s01e07.dvdrip-Wawacity.vip.avi.avi
2021-11-29 17:33 - 2021-11-29 17:34 - 368746866 _____ C:\Users\a-gui\Downloads\soa.s01e06.dvdrip-Wawacity.vip.avi.avi
2021-11-27 20:28 - 2021-11-27 20:30 - 368930410 _____ C:\Users\a-gui\Downloads\soa.s01e05.dvdrip-Wawacity.vip.avi.avi
2021-11-27 20:21 - 2021-11-27 20:21 - 365846096 _____ C:\Users\a-gui\Downloads\soa.s01e04.dvdrip-Wawacity.vip.avi.avi
2021-11-27 16:29 - 2021-11-27 16:29 - 365502180 _____ C:\Users\a-gui\Downloads\soa.s01e03.dvdrip-Wawacity.vip.avi.avi
2021-11-27 13:52 - 2021-11-27 13:54 - 365619764 _____ C:\Users\a-gui\Downloads\soa.s01e02.dvdrip-Wawacity.vip.avi.avi
2021-11-26 17:54 - 2021-11-26 17:54 - 000007594 _____ C:\Users\a-gui\AppData\Local\Resmon.ResmonCfg
2021-11-22 17:46 - 2021-11-22 17:46 - 000000000 ____D C:\Users\a-gui\AppData\Local\DBG
2021-11-22 17:46 - 2021-11-22 17:46 - 000000000 ____D C:\Users\a-gui\AppData\Local\CrashReportClient
2021-11-20 10:28 - 2021-10-28 23:14 - 000079840 _____ (Razer Inc) C:\WINDOWS\system32\RazerS3Coinstaller.dll
2021-11-16 20:33 - 2021-11-16 20:33 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\fltk.org
2021-11-16 20:33 - 2021-11-16 20:33 - 000000000 ____D C:\ProgramData\fltk.org
2021-11-11 19:05 - 2021-11-11 19:05 - 000057768 _____ (The OpenVPN Project) C:\WINDOWS\system32\Drivers\tapwindscribe0901.sys
2021-11-11 19:05 - 2021-11-11 19:05 - 000047544 _____ (WireGuard LLC) C:\WINDOWS\system32\Drivers\windtun420.sys
2021-11-11 19:05 - 2021-11-11 19:05 - 000000000 ____D C:\Users\a-gui\AppData\Local\Windscribe
2021-11-10 22:24 - 2021-11-10 22:24 - 000000000 ___HD C:\$WinREAgent
2021-11-05 14:03 - 2021-11-05 14:03 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-11-05 14:03 - 2021-11-05 14:03 - 000000000 ____D C:\Program Files\PCHealthCheck
2021-10-24 20:50 - 2021-12-02 17:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2021-10-24 20:50 - 2021-11-28 11:34 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\vlc
2021-10-24 20:50 - 2021-10-24 20:50 - 000000000 ____D C:\Program Files (x86)\VideoLAN
2021-10-20 12:30 - 2021-10-20 12:30 - 000000000 ____D C:\Users\a-gui\AppData\Local\Epic Games
2021-10-20 12:30 - 2021-10-20 12:30 - 000000000 ____D C:\Users\a-gui\AppData\Local\EOSUserHelper
2021-10-20 12:14 - 2021-10-20 12:14 - 000000000 ____D C:\Users\Default\AppData\Local\Epic Games
2021-10-09 12:21 - 2021-10-09 12:21 - 000000000 ____D C:\Users\a-gui\AppData\Local\UNCHEATER
2021-10-06 14:34 - 2021-10-06 14:34 - 000000000 ____D C:\ProgramData\ssh
2021-10-06 14:30 - 2021-10-06 14:30 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-10-06 14:29 - 2021-10-06 14:29 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000611960 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-10-06 14:29 - 2021-10-06 14:29 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-10-06 14:29 - 2021-10-06 14:29 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000047472 _____ C:\WINDOWS\SysWOW64\umpdc.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2021-10-06 14:29 - 2021-10-06 14:29 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2021-10-06 14:28 - 2021-10-06 14:28 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000706536 _____ C:\WINDOWS\system32\TextShaping.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 000098304 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-10-06 14:28 - 2021-10-06 14:28 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000064552 _____ C:\WINDOWS\system32\umpdc.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000029696 _____ (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000025088 _____ (The ICU Project) C:\WINDOWS\system32\icuin.dll
2021-10-06 14:28 - 2021-10-06 14:28 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-10-06 14:28 - 2021-10-06 14:28 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2021-12-03 13:59 - 2021-04-10 08:52 - 000000000 ____D C:\Users\a-gui\AppData\Local\CrashDumps
2021-12-03 13:59 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-12-03 13:38 - 2020-11-28 10:01 - 000000000 ____D C:\Program Files\CCleaner
2021-12-03 13:38 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-12-03 13:38 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-12-03 13:36 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-12-03 13:36 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-12-03 13:36 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-12-02 22:37 - 2020-11-28 10:46 - 000000000 ____D C:\ProgramData\NVIDIA
2021-12-02 19:04 - 2019-12-07 15:49 - 000791594 _____ C:\WINDOWS\system32\perfh00C.dat
2021-12-02 19:04 - 2019-12-07 15:49 - 000149760 _____ C:\WINDOWS\system32\perfc00C.dat
2021-12-02 18:59 - 2020-12-06 11:29 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2021-12-02 18:57 - 2020-11-27 22:27 - 000008192 ___SH C:\DumpStack.log.tmp
2021-12-02 18:56 - 2019-12-07 10:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2021-12-02 17:55 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-12-02 17:28 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-12-02 17:12 - 2021-02-01 13:29 - 000000000 ____D C:\Program Files (x86)\Razer
2021-12-02 17:12 - 2020-11-28 09:40 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-12-02 17:12 - 2020-11-28 09:40 - 000000000 ___RD C:\Users\a-gui\3D Objects
2021-12-02 17:12 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-12-02 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-12-02 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows NT
2021-12-02 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-12-02 17:11 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-12-02 17:10 - 2019-12-07 10:14 - 000000000 __RSD C:\WINDOWS\Media
2021-12-02 17:08 - 2021-06-27 10:37 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2021-12-02 17:07 - 2021-07-10 11:38 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Enlisted
2021-12-02 17:07 - 2021-07-02 18:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StarCraft
2021-12-02 17:07 - 2020-12-10 15:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2021-12-02 17:07 - 2020-12-09 20:17 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-12-02 17:07 - 2020-12-06 11:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2021-12-02 17:07 - 2020-11-28 12:38 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-12-02 17:07 - 2020-11-28 12:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2021-12-02 17:07 - 2020-11-28 10:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch
2021-12-02 17:07 - 2020-11-28 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2021-12-02 17:07 - 2020-11-28 10:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2021-12-02 17:07 - 2020-11-28 10:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2021-12-02 17:07 - 2020-11-28 09:41 - 000000000 ___RD C:\Users\a-gui\OneDrive
2021-12-02 17:07 - 2019-12-07 10:18 - 000000000 ____D C:\WINDOWS\Setup
2021-12-02 17:07 - 2019-12-07 10:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-12-02 17:07 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-12-02 17:06 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\USOPrivate
2021-12-02 17:03 - 2021-01-30 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Realtek
2021-12-02 17:03 - 2020-11-28 10:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2021-12-02 17:03 - 2020-11-28 09:40 - 000000000 ____D C:\Users\a-gui\AppData\Local\Packages
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-12-02 17:01 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-12-02 17:01 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-12-02 16:55 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2021-12-02 16:55 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2021-12-02 16:07 - 2020-11-28 10:12 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\discord
2021-12-02 15:53 - 2020-11-28 10:12 - 000000000 ____D C:\Users\a-gui\AppData\Local\Discord
2021-12-02 15:50 - 2020-11-28 10:21 - 000000000 ____D C:\Users\a-gui\AppData\Local\Battle.net
2021-12-02 14:25 - 2020-11-28 09:44 - 000000000 ____D C:\Users\a-gui\AppData\Local\D3DSCache
2021-12-01 21:06 - 2020-11-28 09:49 - 000001434 _____ C:\Users\a-gui\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Navigateur Opera GX.lnk
2021-11-27 14:25 - 2020-11-28 12:59 - 000000296 _____ C:\Users\a-gui\OneDrive\Documents\séries.txt
2021-11-23 20:24 - 2021-03-13 12:46 - 000000000 ____D C:\Program Files (x86)\Origin
2021-11-22 14:34 - 2020-11-28 10:43 - 000000000 ____D C:\Users\a-gui\OneDrive\Documents\My Games
2021-11-19 16:06 - 2020-11-28 09:40 - 000000000 ____D C:\ProgramData\Packages
2021-11-14 15:27 - 2020-12-06 11:26 - 000000000 ____D C:\ProgramData\Riot Games
2021-11-11 10:15 - 2020-11-28 12:31 - 000000000 ____D C:\Users\a-gui\AppData\Roaming\Twitch
2021-11-10 22:23 - 2020-12-09 20:17 - 141529560 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-11-07 20:37 - 2020-12-06 11:26 - 000000000 ____D C:\Program Files\Riot Vanguard
==================== Fichiers à la racine de certains dossiers ========
2021-11-26 17:54 - 2021-11-26 17:54 - 000007594 _____ () C:\Users\a-gui\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2021-03-12 18:18 - 2021-03-12 18:18 - 000010752 _____ C:\WINDOWS\SetupAfterRebootService.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {eb4db409-5389-11ec-995d-00d861752416}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Chargeur de d‚marrage Windows
-----------------------------
identificateur {13782362-538a-11ec-995e-d821c9f68993}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{13782363-538a-11ec-995e-d821c9f68993}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{13782363-538a-11ec-995e-d821c9f68993}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {17955994-30f3-11eb-8540-adc0e3b2ace4}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{17955995-30f3-11eb-8540-adc0e3b2ace4}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{17955995-30f3-11eb-8540-adc0e3b2ace4}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Installation de Windows
-----------------------
identificateur {cbd971bf-b7b8-4885-951a-fa03044f5d71}
device ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{eb4db40b-5389-11ec-995d-00d861752416}
bootstatdevice partition=C:
custom:11000083 partition=C:
path \windows\system32\winload.exe
description Windows Rollback
locale fr-FR
bootstatfilepath \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
inherit {bootloadersettings}
restartonfailure Yes
osdevice ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{eb4db40b-5389-11ec-995d-00d861752416}
custom:21000152 partition=C:
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {13782362-538a-11ec-995e-d821c9f68993}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {eb4db409-5389-11ec-995d-00d861752416}
nx OptIn
bootmenupolicy Standard
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {176cc269-30f3-11eb-8540-adc0e3b2ace4}
device partition=C:
path \Windows\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {17955994-30f3-11eb-8540-adc0e3b2ace4}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {eb4db409-5389-11ec-995d-00d861752416}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {13782362-538a-11ec-995e-d821c9f68993}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {13782363-538a-11ec-995e-d821c9f68993}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {17955995-30f3-11eb-8540-adc0e3b2ace4}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {eb4db40b-5389-11ec-995d-00d861752416}
description Windows Setup
ramdisksdidevice partition=C:
ramdisksdipath \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
==================== Fin de FRST.txt ========================