Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 30-01-2022
Exécuté par user (administrateur) sur DESKTOP-FJHRL66 (31-01-2022 18:19:21)
Exécuté depuis C:\Users\user\Desktop
Profils chargés: user
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1466 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] [Fichier en cours d'utilisation] \\Freebox_Server\sams-4tera\0A videos-nous\0-captv\Captvty.exe
() [Fichier non signé] C:\ProgramData\myCANAL\nssm.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Inc. -> Adobe) C:\Program Files\Adobe\Elements 2021 Organizer\dynamiclinkmanager.exe
(Adobe Inc. -> Adobe) C:\Program Files\Adobe\Elements 2021 Organizer\Elements Auto Creations 2021.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Gianpaolo Bottin -> Gianpaolo Bottin) C:\Program Files (x86)\gPhotoShow\ControlSS.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(Groupe Canal+ -> ) C:\ProgramData\myCANAL\myCANAL.Service.exe
(HP Inc -> HP Inc.) C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\HPNetworkCommunicatorCom.exe
(HP Inc -> HP Inc.) C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\ScanToPCActivationApp.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_de4302f9ce503910\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_de4302f9ce503910\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e709cb715c39d0e0\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e709cb715c39d0e0\IntelCpHeciSvc.exe
(INTERNET PROJECT LLC -> Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1371_none_7e1bd7147c8285b0\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <45>
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\user\Desktop\ZHPSuite(2).exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279328 2018-09-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobePSE19AutoAnalyzer] => C:\Program Files\Adobe\Elements 2021 Organizer\Elements Auto Creations 2021.exe [2656032 2021-09-04] (Adobe Inc. -> Adobe)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2095672 2020-12-20] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [184104 2021-02-17] (Mixbyte Inc -> )
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [ControlSSaver] => C:\Program Files (x86)\gPhotoShow\ControlSS.exe [507952 2020-12-01] (Gianpaolo Bottin -> Gianpaolo Bottin)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [112191904 2021-12-06] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [HP ENVY Photo 6200 (NET)] => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\ScanToPCActivationApp.exe [4064160 2019-03-18] (HP Inc -> HP Inc.)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7089888 2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [581120 2021-04-09] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG5200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAE.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [327680 2010-02-05] (CANON INC.) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-25] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2016-02-17] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2019-03-30]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Luminar AI.lnk [2021-12-08]
ShortcutTarget: Luminar AI.lnk -> C:\Program Files\Skylum\Luminar AI\Luminar AI.exe (Skylum Software USA, Inc. -> Skylum)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0312465A-BBE7-4FAC-B14A-BC06565C92E3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {144498D8-1A8C-45D8-82E8-89CE1F82E10A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {36086386-0B22-4929-9540-2627BD6AA504} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {4CF532CC-4A3C-40D2-9C2F-4680917C1054} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-10-10] (Google Inc -> Google Inc.)
Task: {54BC0EFD-18B8-4E1D-B930-50D1166FB002} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-FJHRL66-user => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {5C522A5B-4D9D-4935-A58D-02FDAE00575B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {60ACB1CF-3899-4E46-8981-2C7EB95B673B} - System32\Tasks\2BrightSparks\SyncBackFree\DESKTOP-FJHRL66-user\SyncBackFree Hebdo_sur_H => C:\Program Files (x86)\2BrightSparks\SyncBackFree\SyncBackFree.exe [61638736 2021-12-14] (2BrightSparks Pte. Ltd. -> 2BrightSparks Pte. Ltd.)
Task: {64BA1B3B-061F-4C14-AC10-1AAC139A126C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {65CCEDAB-10EC-4CC6-ABED-42216BDCC7A4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {68EF15D4-FD6C-4399-AB40-C80E4DA39BD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6B753147-CDE8-4AB6-86A3-17051A1FB707} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [326320 2021-07-15] (HP Inc. -> HP Inc.)
Task: {75DFA18E-04B2-4A67-88FE-FA4ECD1F4BF7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {7C716F31-A1CB-4B3F-8A28-A343023B0596} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-16] (HP Inc. -> HP Inc.)
Task: {93052428-53E7-4AE5-8242-69787C99C253} - System32\Tasks\HPCustParticipation HP ENVY Photo 6200 series => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\HPCustPartic.exe [6659488 2019-03-18] (HP Inc -> HP Inc.)
Task: {9D34BC2E-11A8-419F-8296-51C3E2327B05} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {ABFBEB40-8933-46D7-BAA1-4E096CACB218} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {B77FC59E-2B99-462E-B7E6-5EB328981EC0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C1DE718F-3D57-4ED1-83E2-F80EB562300B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-10-10] (Google Inc -> Google Inc.)
Task: {C3E1925D-D795-4B76-8AB2-8848DA656E31} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D0C7AEF7-1F17-4CE4-BE43-E4B36EAC2117} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {D382495F-3A78-4FB8-BB8B-DBBBFEEF3967} - System32\Tasks\HPPSDrTelemetryWatch => C:\Program Files (x86)\HP\Diagnostics\TelemetryWatch\PSDrTelemetryWatch.exe [32392 2021-03-29] (HP Inc. -> )
Task: {DC4A3D32-C58C-41D6-B10A-2D6E96A9A011} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {DDE99C58-B0D4-49D3-BAE2-22B033624AE9} - System32\Tasks\2BrightSparks\SyncBackFree\DESKTOP-FJHRL66-user\SyncBackFree parfois-sur-G => C:\Program Files (x86)\2BrightSparks\SyncBackFree\SyncBackFree.exe [61638736 2021-12-14] (2BrightSparks Pte. Ltd. -> 2BrightSparks Pte. Ltd.)
Task: {E49C4FE9-8E96-45DF-83CB-D843C2B54482} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {F5FDC6C2-8022-4467-948B-E6399A6BE887} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {FC8B336B-E296-4E47-9AE0-FB0237889D42} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {FCAC755D-3471-4ED6-84A2-28F637C32284} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{d135031f-48c4-4122-b7e4-85ec0e75dee4}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-22]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-01-22]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 67gyh0mn.default-1574625783219
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 [2022-01-31]
FF Homepage: Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 -> hxxps://www.google.com
FF Session Restore: Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 -> hxxps://www.youtube.com; hxxps://www.facebook.com; hxxps://www.fnac.com; hxxps://www.cnetfrance.fr; hxxps://sciencepost.fr; hxxps://www.instagram.com; hxxps://photos.google.com; hxxps://www.20minutes.fr; hxxps://drive.google.com; hxxps://web.whatsapp.com; hxxps://www.larousse.fr; hxxps://www.telerama.fr; hxxps://www.nikonpassion.com; hxxps://www.galerieslafayette.com; hxxps://www.closermag.fr; hxxps://assiste.com
FF Extension: (Enhancer for YouTube™) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2022-01-19]
FF Extension: (HTTPS partout) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\https-everywhere@eff.org.xpi [2021-07-14]
FF Extension: (uBlock Origin) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\uBlock0@raymondhill.net.xpi [2022-01-12]
FF Extension: (Ouvrir avec VLC) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{1c7effb9-3126-48bb-824c-8b7520fa66dc}.xpi [2019-12-19]
FF Extension: (Pas de nom) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{5c04f89d-84c2-4410-823e-7ba85a2e31fc}.xpi [2020-12-06]
FF Extension: (Open in VLC™ media player) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{6b954d17-d17c-4a19-8fe6-ee8052a562d6}.xpi [2019-11-24]
FF Extension: (NoScript) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2022-01-19]
FF Extension: (Video DownloadHelper) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-01]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-12-20] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.) [Fichier non signé]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-12-20] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2022-01-25]
CHR Notifications: Default -> hxxps://drive.google.com; hxxps://meet.google.com
CHR Session Restore: Default -> est activé.
CHR Extension: (Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-15]
CHR Extension: (Adobe Acrobat) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-11-16]
CHR Extension: (Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-25]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-01-25]
CHR Extension: (Video DownloadHelper) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2021-07-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [852024 2020-12-20] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3849472 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3617024 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2021-02-17] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [15856 2019-04-12] (INTERNET PROJECT LLC -> Ellora Assets Corp.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [299680 2021-08-28] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] (Canon Inc. -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7972536 2022-01-19] (Malwarebytes Inc -> Malwarebytes)
R2 myCANAL Server; C:\ProgramData\myCANAL\nssm.exe [294912 2019-06-26] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [136760 2019-05-07] (Alcorlink Corp. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220568 2022-01-19] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-11-07] (Malwarebytes Inc -> Malwarebytes)
R3 MpKslf5bfcf26; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B14F1FD-66DF-4E83-A4E7-ABBAC41F7FA8}\MpKslDrv.sys [134376 2022-01-30] (Microsoft Windows -> Microsoft Corporation)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation -> Corel Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-01-31 18:19 - 2022-01-31 18:20 - 000030650 _____ C:\Users\user\Desktop\FRST.txt
2022-01-31 18:19 - 2022-01-31 18:20 - 000000000 ____D C:\FRST
2022-01-31 18:18 - 2022-01-31 18:15 - 002311680 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2022-01-31 18:10 - 2022-01-31 18:10 - 000521738 _____ C:\Users\user\Desktop\ZHPDiag.txt
2022-01-31 17:39 - 2022-01-31 17:38 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(2).exe
2022-01-31 17:35 - 2022-01-31 17:34 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(1).exe
2022-01-31 16:01 - 2022-01-31 17:46 - 000521739 _____ C:\Users\user\Desktop\ZHPDiag-001.txt
2022-01-31 16:01 - 2022-01-31 16:01 - 000639137 _____ C:\Users\user\Desktop\ZHPDiag.html
2022-01-31 15:55 - 2022-01-31 18:10 - 000000000 ____D C:\Users\user\AppData\Roaming\ZHP
2022-01-31 15:55 - 2022-01-31 17:36 - 000000909 _____ C:\Users\user\Desktop\ZHPSuite.lnk
2022-01-31 15:55 - 2022-01-31 15:55 - 000000000 ____D C:\Users\user\AppData\Local\ZHP
2022-01-31 15:55 - 2022-01-31 15:52 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite.exe
2022-01-28 12:01 - 2022-01-28 12:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-01-24 23:19 - 2022-01-24 23:20 - 000001719 _____ C:\Users\user\Desktop\MBAMService.exe - Raccourci.lnk
2022-01-19 10:35 - 2022-01-19 10:35 - 000220568 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-01-12 01:19 - 2022-01-12 01:19 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-12 01:19 - 2022-01-12 01:19 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-01-12 01:19 - 2022-01-12 01:19 - 000011797 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-01-12 01:15 - 2022-01-12 01:15 - 000000000 ___HD C:\$WinREAgent
2021-12-17 23:58 - 2021-12-17 23:58 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-17 09:57 - 2021-12-17 09:57 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-17 09:56 - 2021-12-17 09:56 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-17 09:56 - 2021-12-17 09:56 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-12-12 21:42 - 2022-01-26 22:37 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3741801579-3113529701-4021853521-1001
2021-12-09 18:55 - 2021-12-09 18:55 - 000002101 _____ C:\Users\Public\Desktop\Aurora HDR 2018.lnk
2021-12-09 18:55 - 2021-12-09 18:55 - 000000000 ____D C:\Users\user\AppData\Roaming\Aurora HDR 2018
2021-12-09 18:55 - 2021-12-09 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aurora
2021-12-08 15:48 - 2021-12-08 15:48 - 000000000 ____D C:\Users\user\AppData\Local\Sentry
2021-12-08 15:47 - 2021-12-08 15:47 - 000001227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Luminar AI.lnk
2021-12-08 15:47 - 2021-12-08 15:47 - 000001221 _____ C:\Users\Public\Desktop\Luminar AI.lnk
2021-12-08 15:44 - 2022-01-25 15:58 - 000000000 ____D C:\Users\user\AppData\Roaming\Luminar AI
2021-12-08 15:44 - 2021-12-08 15:44 - 000000000 ____D C:\ProgramData\Luminar AI
2021-12-02 20:08 - 2021-12-02 20:08 - 000001406 _____ C:\Users\user\Desktop\HDR Efex Pro 2.exe - Raccourci.lnk
2021-12-02 20:06 - 2021-12-02 20:06 - 000001786 _____ C:\Users\user\Desktop\Dfine2.exe - Raccourci.lnk
2021-11-11 11:32 - 2021-11-11 11:32 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-11-10 10:11 - 2021-11-10 10:11 - 000000000 ____D C:\Users\user\AppData\Local\SolidDocuments
2021-11-09 15:28 - 2022-01-14 11:21 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2021-11-09 15:28 - 2022-01-14 11:21 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2021-11-07 15:49 - 2021-11-07 15:49 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-11-04 11:47 - 2021-10-08 11:00 - 000160376 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2021-11-02 23:41 - 2021-11-02 23:41 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-11-02 23:41 - 2021-11-02 23:41 - 000000000 ____D C:\Program Files\PCHealthCheck
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-01-31 17:39 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-31 17:37 - 2017-10-10 14:26 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-31 16:45 - 2017-10-12 18:11 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla
2022-01-31 15:54 - 2021-09-13 14:57 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{2A321CDB-99C0-4060-8400-F6F34466BA14}
2022-01-31 15:02 - 2019-10-03 19:14 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2022-01-31 09:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-31 09:35 - 2019-02-05 08:47 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-31 09:34 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-31 09:33 - 2017-10-10 11:45 - 000000000 __SHD C:\Users\user\IntelGraphicsProfiles
2022-01-30 10:30 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-29 09:39 - 2021-09-25 11:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-01-29 09:39 - 2017-10-12 18:11 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-01-29 09:37 - 2020-06-15 08:34 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-29 09:37 - 2020-06-15 08:34 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-01-28 11:43 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-01-27 23:56 - 2017-10-12 16:57 - 000000000 ____D C:\Users\user\AppData\Roaming\vlc
2022-01-27 20:40 - 2021-10-05 10:27 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7a8a6e18ca015
2022-01-27 20:40 - 2021-09-13 14:57 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-26 22:37 - 2021-09-25 11:14 - 000002463 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-01-26 22:37 - 2021-09-13 14:57 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3741801579-3113529701-4021853521-1001
2022-01-24 23:10 - 2021-10-26 13:23 - 000000000 ____D C:\Users\user\AppData\Roaming\obs-studio
2022-01-24 19:14 - 2021-09-13 14:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-24 12:45 - 2020-08-09 16:37 - 000000000 ____D C:\Users\user\AppData\Local\CrashDumps
2022-01-21 19:43 - 2017-10-12 18:24 - 000000000 ____D C:\Users\user\AppData\Local\Adobe
2022-01-21 14:32 - 2021-09-13 14:57 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-21 14:32 - 2021-09-13 14:57 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-20 00:32 - 2020-04-29 09:03 - 000000000 ____D C:\Users\user\AppData\LocalLow\IGDump
2022-01-19 10:35 - 2020-08-09 16:34 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-01-19 10:35 - 2020-01-23 19:24 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-01-19 10:34 - 2020-01-23 19:24 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-01-19 10:34 - 2020-01-23 19:24 - 000000000 ____D C:\Program Files\Malwarebytes
2022-01-15 09:29 - 2017-10-12 18:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-01-14 17:37 - 2020-08-22 13:35 - 000001411 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SyncBackFree.lnk
2022-01-14 11:21 - 2021-09-13 14:57 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-01-14 11:07 - 2021-09-13 14:57 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-14 11:07 - 2019-12-07 15:49 - 000791594 _____ C:\WINDOWS\system32\perfh00C.dat
2022-01-14 11:07 - 2019-12-07 15:49 - 000149760 _____ C:\WINDOWS\system32\perfc00C.dat
2022-01-14 11:03 - 2021-09-13 14:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-14 11:03 - 2020-08-20 23:39 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-14 00:19 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-01-14 00:18 - 2021-09-13 14:51 - 002042080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-01-13 18:34 - 2017-10-12 19:52 - 000000000 ____D C:\Users\user\AppData\Roaming\Audacity
2022-01-12 01:14 - 2017-10-12 16:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-12 01:12 - 2017-10-12 16:30 - 145765912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Fichiers à la racine de certains dossiers ========
2017-11-05 12:59 - 2020-03-19 10:41 - 000000132 _____ () C:\Users\user\AppData\Roaming\Préfs Format PNG Adobe CS5
2018-09-28 07:51 - 2018-09-28 07:51 - 000000000 _____ () C:\Users\user\AppData\Local\oobelibMkey.log
==================== SigCheckExt =========================
2017-10-12 16:48 - 2010-02-05 02:37 - 000327680 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6PPM.DLL
2017-10-12 16:48 - 2010-02-05 02:37 - 000037376 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6UI.DLL
2017-10-12 16:48 - 2010-02-05 02:37 - 000340992 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNMNPPM.DLL
2011-02-11 22:23 - 2011-02-11 22:23 - 000053299 _____ C:\WINDOWS\SysWOW64\pthreadVC.dll
2022-01-31 18:18 - 2022-01-31 18:15 - 002311680 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2017-10-31 23:53 - 2013-04-20 21:55 - 000531968 _____ C:\Users\user\Desktop\ToYcon.exe
2022-01-31 17:35 - 2022-01-31 17:34 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(1).exe
2022-01-31 17:39 - 2022-01-31 17:38 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(2).exe
2022-01-31 15:55 - 2022-01-31 15:52 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{c0603f96-addd-11e7-97d8-81f7a1df4453}
{c0603f97-addd-11e7-97d8-81f7a1df4453}
{3b2269e8-6c17-11ec-845f-0019860011c5}
{3b2269e9-6c17-11ec-845f-0019860011c5}
{3b2269ea-6c17-11ec-845f-0019860011c5}
timeout 1
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {77d8626b-3426-11e9-880d-a2199160f4b2}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {3b2269e8-6c17-11ec-845f-0019860011c5}
description UEFI:CD/DVD Drive
Application logicielle (101fffff)
--------------------------------
identificateur {3b2269e9-6c17-11ec-845f-0019860011c5}
description UEFI:Removable Device
Application logicielle (101fffff)
--------------------------------
identificateur {3b2269ea-6c17-11ec-845f-0019860011c5}
description UEFI:Network Device
Application logicielle (101fffff)
--------------------------------
identificateur {c0603f96-addd-11e7-97d8-81f7a1df4453}
description Hard Drive
Application logicielle (101fffff)
--------------------------------
identificateur {c0603f97-addd-11e7-97d8-81f7a1df4453}
description CD/DVD Drive
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {cac8ff0a-1499-11ec-83e8-ff1bc50aefa2}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {77d8626b-3426-11e9-880d-a2199160f4b2}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {cac8ff0a-1499-11ec-83e8-ff1bc50aefa2}
device ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{cac8ff0b-1499-11ec-83e8-ff1bc50aefa2}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{cac8ff0b-1499-11ec-83e8-ff1bc50aefa2}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {77d8626b-3426-11e9-880d-a2199160f4b2}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {cac8ff0a-1499-11ec-83e8-ff1bc50aefa2}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {cac8ff0b-1499-11ec-83e8-ff1bc50aefa2}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume5
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par user (administrateur) sur DESKTOP-FJHRL66 (31-01-2022 18:19:21)
Exécuté depuis C:\Users\user\Desktop
Profils chargés: user
Plate-forme: Microsoft Windows 10 Famille Version 21H1 19043.1466 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
() [Fichier non signé] [Fichier en cours d'utilisation] \\Freebox_Server\sams-4tera\0A videos-nous\0-captv\Captvty.exe
() [Fichier non signé] C:\ProgramData\myCANAL\nssm.exe
(Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(Adobe Inc. -> Adobe) C:\Program Files\Adobe\Elements 2021 Organizer\dynamiclinkmanager.exe
(Adobe Inc. -> Adobe) C:\Program Files\Adobe\Elements 2021 Organizer\Elements Auto Creations 2021.exe
(Adobe Systems Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe
(Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Broadcom Corporation -> Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Gianpaolo Bottin -> Gianpaolo Bottin) C:\Program Files (x86)\gPhotoShow\ControlSS.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.122\GoogleCrashHandler64.exe
(Groupe Canal+ -> ) C:\ProgramData\myCANAL\myCANAL.Service.exe
(HP Inc -> HP Inc.) C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\HPNetworkCommunicatorCom.exe
(HP Inc -> HP Inc.) C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\ScanToPCActivationApp.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_de4302f9ce503910\igfxCUIService.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_de4302f9ce503910\igfxEM.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e709cb715c39d0e0\IntelCpHDCPSvc.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e709cb715c39d0e0\IntelCpHeciSvc.exe
(INTERNET PROJECT LLC -> Ellora Assets Corp.) C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1371_none_7e1bd7147c8285b0\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCopyAccelerator.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe
(Mixbyte Inc -> Freemake) C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <45>
(Nicolas Coolman -> Nicolas Coolman) [Fichier non signé] C:\Users\user\Desktop\ZHPSuite(2).exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279328 2018-09-05] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2726728 2010-03-24] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobePSE19AutoAnalyzer] => C:\Program Files\Adobe\Elements 2021 Organizer\Elements Auto Creations 2021.exe [2656032 2021-09-04] (Adobe Inc. -> Adobe)
HKLM-x32\...\Run: [CanonSolutionMenuEx] => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE [1185112 2010-04-02] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2095672 2020-12-20] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [184104 2021-02-17] (Mixbyte Inc -> )
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [ControlSSaver] => C:\Program Files (x86)\gPhotoShow\ControlSS.exe [507952 2020-12-01] (Gianpaolo Bottin -> Gianpaolo Bottin)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [22458328 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [112191904 2021-12-06] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [HP ENVY Photo 6200 (NET)] => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\ScanToPCActivationApp.exe [4064160 2019-03-18] (HP Inc -> HP Inc.)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7089888 2021-12-24] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3741801579-3113529701-4021853521-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\PhotoScreensaver.scr [581120 2021-04-09] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG5200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAE.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [327680 2010-02-05] (CANON INC.) [Fichier non signé]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\97.0.4692.99\Installer\chrmstp.exe [2022-01-25] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{50968FF7-10C1-4fb3-98B0-CD654D6CB97E}] -> C:\Program Files\WIDCOMM\Bluetooth Software\\BtwCP.dll [2016-02-17] (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2019-03-30]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation -> Broadcom Corporation.)
Startup: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Luminar AI.lnk [2021-12-08]
ShortcutTarget: Luminar AI.lnk -> C:\Program Files\Skylum\Luminar AI\Luminar AI.exe (Skylum Software USA, Inc. -> Skylum)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0312465A-BBE7-4FAC-B14A-BC06565C92E3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {144498D8-1A8C-45D8-82E8-89CE1F82E10A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [136304 2021-03-30] (HP Inc. -> HP Inc.)
Task: {36086386-0B22-4929-9540-2627BD6AA504} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {4CF532CC-4A3C-40D2-9C2F-4680917C1054} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-10-10] (Google Inc -> Google Inc.)
Task: {54BC0EFD-18B8-4E1D-B930-50D1166FB002} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-FJHRL66-user => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {5C522A5B-4D9D-4935-A58D-02FDAE00575B} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {60ACB1CF-3899-4E46-8981-2C7EB95B673B} - System32\Tasks\2BrightSparks\SyncBackFree\DESKTOP-FJHRL66-user\SyncBackFree Hebdo_sur_H => C:\Program Files (x86)\2BrightSparks\SyncBackFree\SyncBackFree.exe [61638736 2021-12-14] (2BrightSparks Pte. Ltd. -> 2BrightSparks Pte. Ltd.)
Task: {64BA1B3B-061F-4C14-AC10-1AAC139A126C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {65CCEDAB-10EC-4CC6-ABED-42216BDCC7A4} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {68EF15D4-FD6C-4399-AB40-C80E4DA39BD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6B753147-CDE8-4AB6-86A3-17051A1FB707} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [326320 2021-07-15] (HP Inc. -> HP Inc.)
Task: {75DFA18E-04B2-4A67-88FE-FA4ECD1F4BF7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {7C716F31-A1CB-4B3F-8A28-A343023B0596} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1136984 2020-09-16] (HP Inc. -> HP Inc.)
Task: {93052428-53E7-4AE5-8242-69787C99C253} - System32\Tasks\HPCustParticipation HP ENVY Photo 6200 series => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\HPCustPartic.exe [6659488 2019-03-18] (HP Inc -> HP Inc.)
Task: {9D34BC2E-11A8-419F-8296-51C3E2327B05} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [16467424 2019-02-27] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {ABFBEB40-8933-46D7-BAA1-4E096CACB218} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {B77FC59E-2B99-462E-B7E6-5EB328981EC0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C1DE718F-3D57-4ED1-83E2-F80EB562300B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-10-10] (Google Inc -> Google Inc.)
Task: {C3E1925D-D795-4B76-8AB2-8848DA656E31} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D0C7AEF7-1F17-4CE4-BE43-E4B36EAC2117} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1506648 2020-08-20] (HP Inc. -> HP Inc.)
Task: {D382495F-3A78-4FB8-BB8B-DBBBFEEF3967} - System32\Tasks\HPPSDrTelemetryWatch => C:\Program Files (x86)\HP\Diagnostics\TelemetryWatch\PSDrTelemetryWatch.exe [32392 2021-03-29] (HP Inc. -> )
Task: {DC4A3D32-C58C-41D6-B10A-2D6E96A9A011} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {DDE99C58-B0D4-49D3-BAE2-22B033624AE9} - System32\Tasks\2BrightSparks\SyncBackFree\DESKTOP-FJHRL66-user\SyncBackFree parfois-sur-G => C:\Program Files (x86)\2BrightSparks\SyncBackFree\SyncBackFree.exe [61638736 2021-12-14] (2BrightSparks Pte. Ltd. -> 2BrightSparks Pte. Ltd.)
Task: {E49C4FE9-8E96-45DF-83CB-D843C2B54482} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {F5FDC6C2-8022-4467-948B-E6399A6BE887} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {FC8B336B-E296-4E47-9AE0-FB0237889D42} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - resources updates => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [665944 2020-08-07] (HP Inc. -> HP Inc.)
Task: {FCAC755D-3471-4ED6-84A2-28F637C32284} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{d135031f-48c4-4122-b7e4-85ec0e75dee4}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-22]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-01-22]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: 67gyh0mn.default-1574625783219
FF ProfilePath: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 [2022-01-31]
FF Homepage: Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 -> hxxps://www.google.com
FF Session Restore: Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 -> est activé.
FF Notifications: Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219 -> hxxps://www.youtube.com; hxxps://www.facebook.com; hxxps://www.fnac.com; hxxps://www.cnetfrance.fr; hxxps://sciencepost.fr; hxxps://www.instagram.com; hxxps://photos.google.com; hxxps://www.20minutes.fr; hxxps://drive.google.com; hxxps://web.whatsapp.com; hxxps://www.larousse.fr; hxxps://www.telerama.fr; hxxps://www.nikonpassion.com; hxxps://www.galerieslafayette.com; hxxps://www.closermag.fr; hxxps://assiste.com
FF Extension: (Enhancer for YouTube™) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\enhancerforyoutube@maximerf.addons.mozilla.org.xpi [2022-01-19]
FF Extension: (HTTPS partout) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\https-everywhere@eff.org.xpi [2021-07-14]
FF Extension: (uBlock Origin) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\uBlock0@raymondhill.net.xpi [2022-01-12]
FF Extension: (Ouvrir avec VLC) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{1c7effb9-3126-48bb-824c-8b7520fa66dc}.xpi [2019-12-19]
FF Extension: (Pas de nom) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{5c04f89d-84c2-4410-823e-7ba85a2e31fc}.xpi [2020-12-06]
FF Extension: (Open in VLC™ media player) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{6b954d17-d17c-4a19-8fe6-ee8052a562d6}.xpi [2019-11-24]
FF Extension: (NoScript) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2022-01-19]
FF Extension: (Video DownloadHelper) - C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\67gyh0mn.default-1574625783219\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-01]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-12-24] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-12-20] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2010-04-14] (CANON INC.) [Fichier non signé]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-12-20] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default [2022-01-25]
CHR Notifications: Default -> hxxps://drive.google.com; hxxps://meet.google.com
CHR Session Restore: Default -> est activé.
CHR Extension: (Slides) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-15]
CHR Extension: (Docs) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-15]
CHR Extension: (Google Drive) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-15]
CHR Extension: (Adobe Acrobat) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2021-11-16]
CHR Extension: (Sheets) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-15]
CHR Extension: (Google Docs hors connexion) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-01-25]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-01-25]
CHR Extension: (Video DownloadHelper) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjnegcaeklhafolokijcfjliaokphfk [2021-07-02]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Gmail) - C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeActiveFileMonitor11.0; C:\Program Files (x86)\Adobe\Elements 11 Organizer\PhotoshopElementsFileAgent.exe [171600 2012-09-17] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [852024 2020-12-20] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3849472 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3617024 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2021-02-17] (Mixbyte Inc -> Freemake)
R2 FreemakeVideoCapture; C:\Program Files (x86)\Freemake\CaptureLib\CaptureLibService.exe [15856 2019-04-12] (INTERNET PROJECT LLC -> Ellora Assets Corp.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [299680 2021-08-28] (HP Inc. -> HP Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [379736 2020-08-20] (HP Inc. -> HP Inc.)
S3 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [116104 2010-04-05] (Canon Inc. -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7972536 2022-01-19] (Malwarebytes Inc -> Malwarebytes)
R2 myCANAL Server; C:\ProgramData\myCANAL\nssm.exe [294912 2019-06-26] () [Fichier non signé]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2021-12-16] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [136760 2019-05-07] (Alcorlink Corp. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220568 2022-01-19] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-11-07] (Malwarebytes Inc -> Malwarebytes)
R3 MpKslf5bfcf26; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{6B14F1FD-66DF-4E83-A4E7-ABBAC41F7FA8}\MpKslDrv.sys [134376 2022-01-30] (Microsoft Windows -> Microsoft Corporation)
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [35344 2011-02-11] (CACE Technologies, Inc. -> CACE Technologies, Inc.)
R0 PxHlpa64; C:\WINDOWS\System32\Drivers\PxHlpa64.sys [56336 2012-08-10] (Corel Corporation -> Corel Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-12-16] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [435432 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86248 2021-12-16] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-01-31 18:19 - 2022-01-31 18:20 - 000030650 _____ C:\Users\user\Desktop\FRST.txt
2022-01-31 18:19 - 2022-01-31 18:20 - 000000000 ____D C:\FRST
2022-01-31 18:18 - 2022-01-31 18:15 - 002311680 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2022-01-31 18:10 - 2022-01-31 18:10 - 000521738 _____ C:\Users\user\Desktop\ZHPDiag.txt
2022-01-31 17:39 - 2022-01-31 17:38 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(2).exe
2022-01-31 17:35 - 2022-01-31 17:34 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(1).exe
2022-01-31 16:01 - 2022-01-31 17:46 - 000521739 _____ C:\Users\user\Desktop\ZHPDiag-001.txt
2022-01-31 16:01 - 2022-01-31 16:01 - 000639137 _____ C:\Users\user\Desktop\ZHPDiag.html
2022-01-31 15:55 - 2022-01-31 18:10 - 000000000 ____D C:\Users\user\AppData\Roaming\ZHP
2022-01-31 15:55 - 2022-01-31 17:36 - 000000909 _____ C:\Users\user\Desktop\ZHPSuite.lnk
2022-01-31 15:55 - 2022-01-31 15:55 - 000000000 ____D C:\Users\user\AppData\Local\ZHP
2022-01-31 15:55 - 2022-01-31 15:52 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite.exe
2022-01-28 12:01 - 2022-01-28 12:01 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-01-24 23:19 - 2022-01-24 23:20 - 000001719 _____ C:\Users\user\Desktop\MBAMService.exe - Raccourci.lnk
2022-01-19 10:35 - 2022-01-19 10:35 - 000220568 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-01-12 01:19 - 2022-01-12 01:19 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-12 01:19 - 2022-01-12 01:19 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-01-12 01:19 - 2022-01-12 01:19 - 000011797 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-01-12 01:15 - 2022-01-12 01:15 - 000000000 ___HD C:\$WinREAgent
2021-12-17 23:58 - 2021-12-17 23:58 - 000000000 ____D C:\WINDOWS\SystemTemp
2021-12-17 09:57 - 2021-12-17 09:57 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-12-17 09:56 - 2021-12-17 09:56 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-12-17 09:56 - 2021-12-17 09:56 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-12-12 21:42 - 2022-01-26 22:37 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3741801579-3113529701-4021853521-1001
2021-12-09 18:55 - 2021-12-09 18:55 - 000002101 _____ C:\Users\Public\Desktop\Aurora HDR 2018.lnk
2021-12-09 18:55 - 2021-12-09 18:55 - 000000000 ____D C:\Users\user\AppData\Roaming\Aurora HDR 2018
2021-12-09 18:55 - 2021-12-09 18:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aurora
2021-12-08 15:48 - 2021-12-08 15:48 - 000000000 ____D C:\Users\user\AppData\Local\Sentry
2021-12-08 15:47 - 2021-12-08 15:47 - 000001227 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Luminar AI.lnk
2021-12-08 15:47 - 2021-12-08 15:47 - 000001221 _____ C:\Users\Public\Desktop\Luminar AI.lnk
2021-12-08 15:44 - 2022-01-25 15:58 - 000000000 ____D C:\Users\user\AppData\Roaming\Luminar AI
2021-12-08 15:44 - 2021-12-08 15:44 - 000000000 ____D C:\ProgramData\Luminar AI
2021-12-02 20:08 - 2021-12-02 20:08 - 000001406 _____ C:\Users\user\Desktop\HDR Efex Pro 2.exe - Raccourci.lnk
2021-12-02 20:06 - 2021-12-02 20:06 - 000001786 _____ C:\Users\user\Desktop\Dfine2.exe - Raccourci.lnk
2021-11-11 11:32 - 2021-11-11 11:32 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-11-10 10:11 - 2021-11-10 10:11 - 000000000 ____D C:\Users\user\AppData\Local\SolidDocuments
2021-11-09 15:28 - 2022-01-14 11:21 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2021-11-09 15:28 - 2022-01-14 11:21 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2021-11-07 15:49 - 2021-11-07 15:49 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-11-04 11:47 - 2021-10-08 11:00 - 000160376 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2021-11-02 23:41 - 2021-11-02 23:41 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2021-11-02 23:41 - 2021-11-02 23:41 - 000000000 ____D C:\Program Files\PCHealthCheck
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-01-31 17:39 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-01-31 17:37 - 2017-10-10 14:26 - 000000000 ____D C:\Program Files (x86)\Google
2022-01-31 16:45 - 2017-10-12 18:11 - 000000000 ____D C:\Users\user\AppData\LocalLow\Mozilla
2022-01-31 15:54 - 2021-09-13 14:57 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{2A321CDB-99C0-4060-8400-F6F34466BA14}
2022-01-31 15:02 - 2019-10-03 19:14 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2022-01-31 09:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-01-31 09:35 - 2019-02-05 08:47 - 000000000 ____D C:\ProgramData\Mozilla
2022-01-31 09:34 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-01-31 09:33 - 2017-10-10 11:45 - 000000000 __SHD C:\Users\user\IntelGraphicsProfiles
2022-01-30 10:30 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-01-29 09:39 - 2021-09-25 11:12 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-01-29 09:39 - 2017-10-12 18:11 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-01-29 09:37 - 2020-06-15 08:34 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-01-29 09:37 - 2020-06-15 08:34 - 000002280 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-01-28 11:43 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-01-27 23:56 - 2017-10-12 16:57 - 000000000 ____D C:\Users\user\AppData\Roaming\vlc
2022-01-27 20:40 - 2021-10-05 10:27 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7a8a6e18ca015
2022-01-27 20:40 - 2021-09-13 14:57 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-01-26 22:37 - 2021-09-25 11:14 - 000002463 _____ C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-01-26 22:37 - 2021-09-13 14:57 - 000003378 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3741801579-3113529701-4021853521-1001
2022-01-24 23:10 - 2021-10-26 13:23 - 000000000 ____D C:\Users\user\AppData\Roaming\obs-studio
2022-01-24 19:14 - 2021-09-13 14:51 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-01-24 12:45 - 2020-08-09 16:37 - 000000000 ____D C:\Users\user\AppData\Local\CrashDumps
2022-01-21 19:43 - 2017-10-12 18:24 - 000000000 ____D C:\Users\user\AppData\Local\Adobe
2022-01-21 14:32 - 2021-09-13 14:57 - 000003590 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2022-01-21 14:32 - 2021-09-13 14:57 - 000003466 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2022-01-20 00:32 - 2020-04-29 09:03 - 000000000 ____D C:\Users\user\AppData\LocalLow\IGDump
2022-01-19 10:35 - 2020-08-09 16:34 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-01-19 10:35 - 2020-01-23 19:24 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-01-19 10:34 - 2020-01-23 19:24 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-01-19 10:34 - 2020-01-23 19:24 - 000000000 ____D C:\Program Files\Malwarebytes
2022-01-15 09:29 - 2017-10-12 18:11 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-01-14 17:37 - 2020-08-22 13:35 - 000001411 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SyncBackFree.lnk
2022-01-14 11:21 - 2021-09-13 14:57 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-01-14 11:07 - 2021-09-13 14:57 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-01-14 11:07 - 2019-12-07 15:49 - 000791594 _____ C:\WINDOWS\system32\perfh00C.dat
2022-01-14 11:07 - 2019-12-07 15:49 - 000149760 _____ C:\WINDOWS\system32\perfc00C.dat
2022-01-14 11:03 - 2021-09-13 14:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-01-14 11:03 - 2020-08-20 23:39 - 000008192 ___SH C:\DumpStack.log.tmp
2022-01-14 00:19 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-01-14 00:18 - 2021-09-13 14:51 - 002042080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-01-14 00:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-01-13 18:34 - 2017-10-12 19:52 - 000000000 ____D C:\Users\user\AppData\Roaming\Audacity
2022-01-12 01:14 - 2017-10-12 16:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-01-12 01:12 - 2017-10-12 16:30 - 145765912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
==================== Fichiers à la racine de certains dossiers ========
2017-11-05 12:59 - 2020-03-19 10:41 - 000000132 _____ () C:\Users\user\AppData\Roaming\Préfs Format PNG Adobe CS5
2018-09-28 07:51 - 2018-09-28 07:51 - 000000000 _____ () C:\Users\user\AppData\Local\oobelibMkey.log
==================== SigCheckExt =========================
2017-10-12 16:48 - 2010-02-05 02:37 - 000327680 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6PPM.DLL
2017-10-12 16:48 - 2010-02-05 02:37 - 000037376 _____ (CANON INC.) C:\WINDOWS\system32\CNMN6UI.DLL
2017-10-12 16:48 - 2010-02-05 02:37 - 000340992 _____ (CANON INC.) C:\WINDOWS\SysWOW64\CNMNPPM.DLL
2011-02-11 22:23 - 2011-02-11 22:23 - 000053299 _____ C:\WINDOWS\SysWOW64\pthreadVC.dll
2022-01-31 18:18 - 2022-01-31 18:15 - 002311680 _____ (Farbar) C:\Users\user\Desktop\FRST64.exe
2017-10-31 23:53 - 2013-04-20 21:55 - 000531968 _____ C:\Users\user\Desktop\ToYcon.exe
2022-01-31 17:35 - 2022-01-31 17:34 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(1).exe
2022-01-31 17:39 - 2022-01-31 17:38 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite(2).exe
2022-01-31 15:55 - 2022-01-31 15:52 - 003479192 _____ (Nicolas Coolman) C:\Users\user\Desktop\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{c0603f96-addd-11e7-97d8-81f7a1df4453}
{c0603f97-addd-11e7-97d8-81f7a1df4453}
{3b2269e8-6c17-11ec-845f-0019860011c5}
{3b2269e9-6c17-11ec-845f-0019860011c5}
{3b2269ea-6c17-11ec-845f-0019860011c5}
timeout 1
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {77d8626b-3426-11e9-880d-a2199160f4b2}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {3b2269e8-6c17-11ec-845f-0019860011c5}
description UEFI:CD/DVD Drive
Application logicielle (101fffff)
--------------------------------
identificateur {3b2269e9-6c17-11ec-845f-0019860011c5}
description UEFI:Removable Device
Application logicielle (101fffff)
--------------------------------
identificateur {3b2269ea-6c17-11ec-845f-0019860011c5}
description UEFI:Network Device
Application logicielle (101fffff)
--------------------------------
identificateur {c0603f96-addd-11e7-97d8-81f7a1df4453}
description Hard Drive
Application logicielle (101fffff)
--------------------------------
identificateur {c0603f97-addd-11e7-97d8-81f7a1df4453}
description CD/DVD Drive
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {cac8ff0a-1499-11ec-83e8-ff1bc50aefa2}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {77d8626b-3426-11e9-880d-a2199160f4b2}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {cac8ff0a-1499-11ec-83e8-ff1bc50aefa2}
device ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{cac8ff0b-1499-11ec-83e8-ff1bc50aefa2}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume5]\Recovery\WindowsRE\Winre.wim,{cac8ff0b-1499-11ec-83e8-ff1bc50aefa2}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {77d8626b-3426-11e9-880d-a2199160f4b2}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {cac8ff0a-1499-11ec-83e8-ff1bc50aefa2}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {cac8ff0b-1499-11ec-83e8-ff1bc50aefa2}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume5
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================