cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 28-03-2022
Exécuté par Boris (administrateur) sur BORIS (Micro-Star International Co., Ltd. GL62M 7RDX) (31-03-2022 12:25:55)
Exécuté depuis C:\Users\Boris\Desktop
Profils chargés: Boris
Plate-forme: Microsoft Windows 10 Éducation Version 20H2 19042.1586 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe ->) (Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_d70b02a5a438df3c\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_d70b02a5a438df3c\igfxEM.exe
(explorer.exe ->) (Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe
(explorer.exe ->) (Hewlett Packard -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP OfficeJet 7510 series\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <27>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\redline\bdredline.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(services.exe ->) (Disc Soft Ltd -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe
(services.exe ->) (Hi-Rez Studios) [Fichier non signé] C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> ) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_577475639d32bfed\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_d70b02a5a438df3c\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_dbe5409d82f02c3f\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_dbe5409d82f02c3f\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmii.inf_amd64_1cacf25fc4e8a006\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(svchost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_3.2202.10603.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20858.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20858.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [319520 2018-09-26] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9230312 2017-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-07-07] (Oracle America, Inc. -> Oracle Corporation)
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4279208 2022-03-14] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [5263040 2018-01-12] (Disc Soft Ltd -> Disc Soft Ltd)
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [Discord] => C:\Users\Boris\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [HP OfficeJet 7510 series (NET)] => C:\Program Files\HP\HP OfficeJet 7510 series\Bin\ScanToPCActivationApp.exe [3558408 2015-05-12] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [EpicGamesLauncher] => D:\Jeux\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33268192 2021-08-16] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Boris\AppData\Local\Microsoft\Teams\Update.exe [2492128 2022-03-31] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1239015781-1633601583-440821419-1001\...\Run: [ZAR App] => "C:\Users\Boris\AppData\Local\Programs\zar-app\ZAR App.exe" --hidden (Pas de fichier)
HKLM\...\Windows x64\Print Processors\Canon MG5500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBU.DLL [30208 2013-04-04] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\HP 7F12 Status Monitor: C:\Windows\system32\hpinksts7F12LM.dll [380424 2015-05-02] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP OfficeJet 7510 series): C:\Windows\system32\HPDiscoPM7F12.dll [803848 2015-05-12] (Hewlett Packard -> Hewlett-Packard Development Company, LP)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0F176413-6E22-4C95-9F11-8AA7C725BDC1} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1A98CDD1-12C1-42EC-8B6D-D82064ACB628} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1F5A1B81-F3D6-4092-BF51-03BFB7D77EDC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {387AC3CB-205D-4ABC-AC3F-EB15F6D74B8F} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {44644234-7A22-4644-B262-4CDA657EF9DC} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {48EB09F1-DD92-4CC1-8523-FE6BFD7C35ED} - System32\Tasks\AdobeAAMUpdater-1.0-DESKTOP-M7TFLD6-Boris => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe -mode=scheduled (Pas de fichier)
Task: {59CF5D6B-85F5-47B8-96E2-53691AD150D2} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5ABA6A1C-4D01-452F-AB75-B8A8E49ACAE0} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {5BAFA946-E28C-42A7-91D9-4992BEC3CDA2} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [959440 2021-02-02] (Bitdefender SRL -> Bitdefender)
Task: {62F0E2DE-2649-4D86-969E-0A9F9B9AA08D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {67E70375-DE16-495E-9C84-5671FA2711F2} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\26.0.1.217\WatchDog.exe [1050728 2022-03-14] (Bitdefender SRL -> Bitdefender)
Task: {780AEDD3-7D11-45D1-936A-ECF715EF8C6E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {8529CD29-E380-4EEC-B75B-ABF7EE49BF44} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3426560 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {884E4D3D-8EB0-4EE6-8632-0F6F66F848A1} - System32\Tasks\Microsoft\Windows\Display\Brightness\BrightnessReset => {2755524D-68F2-4B39-A816-9DB31839C897}
Task: {9F0B0041-93DA-4937-A33A-4F147533EF1D} - System32\Tasks\Nvbackend_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Pas de fichier)
Task: {A933CEE2-5296-4766-A8AD-9288AD311633} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {AA71560F-B44A-4478-9ACF-F6576FEA43A2} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CFE71BA7-A475-4F92-A009-6A2D7F77FE03} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E9A400BD-241A-4995-B4DC-D37565A2071D} - System32\Tasks\eteindre => shutdown /S
Task: {FA186F57-13E5-450E-85C5-84CC7ADB091F} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2022-02-10] (Adobe Inc. -> Adobe Inc.)
Task: {FB292A1F-8189-45ED-A4FD-E7A622601BC4} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.232.17
Tcpip\..\Interfaces\{7ef3395d-defe-4e31-9009-16674f8c9d0e}: [DhcpNameServer] 192.168.232.17
Tcpip\..\Interfaces\{dfd7fca2-d7ca-485b-8e4e-0aa8016cd5b8}: [DhcpNameServer] 10.1.3.253

Edge:
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Profile: C:\Users\Boris\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-10]
Edge Extension: (360 Viewer) - C:\Users\Boris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmglcbnpblebkmcllnfcgamdelbbekge [2022-03-10]

FireFox:
========
FF DefaultProfile: iq5ccz0u.default-1576137204758
FF ProfilePath: C:\Users\Boris\AppData\Roaming\Mozilla\Firefox\Profiles\iq5ccz0u.default-1576137204758 [2022-03-31]
FF Notifications: Mozilla\Firefox\Profiles\iq5ccz0u.default-1576137204758 -> hxxps://photos.google.com
FF Extension: (Adblock Plus - bloqueur de publicités gratuit) - C:\Users\Boris\AppData\Roaming\Mozilla\Firefox\Profiles\iq5ccz0u.default-1576137204758\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2021-11-24]
FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-09-29] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ]
FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF Extension: (Bitdefender Anti-tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2020-10-14] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/antitracker/updates.json ]
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-04-30] [] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi
FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext
FF Plugin: @java.com/DTPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\dtplugin\npDeployJava1.dll [2018-10-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.181.2 -> C:\Program Files\Java\jre1.8.0_181\bin\plugin2\npjp2.dll [2018-10-11] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\dtplugin\npDeployJava1.dll [2017-11-09] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.151.2 -> C:\Program Files (x86)\Java\jre1.8.0_151\bin\plugin2\npjp2.dll [2017-11-09] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @videolan.org/vlc,version=2.2.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-11-29] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2022-03-02] (Adobe Inc. -> Adobe Systems Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\bd_js_config.js [2019-09-04] <==== ATTENTION (Pointe vers un fichier *.cfg)
FF ExtraCheck: C:\Program Files\mozilla firefox\bd_config.cfg [2019-09-04] <==== ATTENTION

Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl]
CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3849472 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3617024 2021-11-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-10-14] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-10-14] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195320 2018-09-24] (Bitdefender SRL -> Bitdefender)
R2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2454632 2022-02-10] (Bitdefender SRL -> Bitdefender)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6971400 2017-11-30] (BattlEye Innovations e.K. -> )
R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [3480768 2018-01-12] (Disc Soft Ltd -> Disc Soft Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [802432 2019-02-06] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
U2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2017-09-19] (Hi-Rez Studios) [Fichier non signé]
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [786536 2022-03-14] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6228008 2022-03-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [171272 2021-02-02] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-10-14] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_1cacf25fc4e8a006\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmii.inf_amd64_1cacf25fc4e8a006\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2638328 2021-02-02] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\WINDOWS\System32\DRIVERS\bddci.sys [802968 2021-02-02] (Bitdefender SRL -> Bitdefender)
S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-04-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Bitdefender)
R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-02-21] (Bitdefender SRL -> © Bitdefender SRL)
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Fichier non signé]
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-01-29] (Disc Soft Ltd -> Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-01-29] (Disc Soft Ltd -> Disc Soft Ltd)
R0 Gemma; C:\WINDOWS\System32\DRIVERS\Gemma.sys [481936 2021-02-02] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA)
R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [195232 2020-10-14] (Bitdefender SRL -> BitDefender LLC)
R2 Ignis; C:\WINDOWS\System32\DRIVERS\ignis.sys [185312 2020-12-14] (Bitdefender SRL -> Bitdefender)
R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [640760 2020-10-14] (Bitdefender SRL -> Bitdefender)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Trois mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-03-31 12:25 - 2022-03-31 12:26 - 000025199 ____C C:\Users\Boris\Desktop\FRST.txt
2022-03-31 12:25 - 2022-03-31 12:26 - 000000000 ____D C:\FRST
2022-03-31 12:25 - 2022-03-31 12:25 - 002365440 _____ (Farbar) C:\Users\Boris\Desktop\FRST64.exe
2022-03-31 12:19 - 2022-03-31 12:19 - 000458624 ____C C:\Users\Boris\Desktop\ZHPDiag.txt
2022-03-31 12:04 - 2022-03-31 12:19 - 000000000 ____D C:\Users\Boris\AppData\Roaming\ZHP
2022-03-31 12:04 - 2022-03-31 12:04 - 000000865 ____C C:\Users\Boris\Desktop\ZHPSuite.lnk
2022-03-31 12:04 - 2022-03-31 12:04 - 000000000 ____D C:\Users\Boris\AppData\Local\ZHP
2022-03-31 12:03 - 2022-03-31 12:03 - 003480728 _____ (Nicolas Coolman) C:\Users\Boris\Desktop\ZHPSuite.exe
2022-03-25 09:44 - 2022-03-27 21:43 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-03-25 09:38 - 2022-03-25 09:38 - 000100260 _____ C:\ProgramData\agent.update.1648193892.bdinstall.v2.bin
2022-03-11 17:14 - 2022-03-11 17:14 - 000195584 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-03-11 17:13 - 2022-03-11 17:13 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-03-11 17:13 - 2022-03-11 17:13 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2022-03-11 17:13 - 2022-03-11 17:13 - 000272896 _____ C:\WINDOWS\system32\TpmTool.exe
2022-03-11 17:13 - 2022-03-11 17:13 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2022-03-11 17:13 - 2022-03-11 17:13 - 000011911 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-03-11 17:05 - 2022-03-11 17:05 - 000000000 ___HD C:\$WinREAgent
2022-03-05 20:57 - 2022-03-05 20:57 - 000000000 ____D C:\WINDOWS\system32\lxss
2022-03-05 20:53 - 2022-02-10 20:42 - 001905936 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-03-05 20:53 - 2022-02-10 20:42 - 001905936 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-03-05 20:53 - 2022-02-10 20:42 - 001478416 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-03-05 20:53 - 2022-02-10 20:42 - 001478416 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-03-05 20:53 - 2022-02-10 20:42 - 001467840 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-03-05 20:53 - 2022-02-10 20:42 - 001432336 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-03-05 20:53 - 2022-02-10 20:42 - 001432336 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-03-05 20:53 - 2022-02-10 20:42 - 001209280 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-03-05 20:53 - 2022-02-10 20:42 - 001145616 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-03-05 20:53 - 2022-02-10 20:42 - 001145616 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-03-05 20:53 - 2022-02-10 20:39 - 001531872 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-03-05 20:53 - 2022-02-10 20:39 - 001176704 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-03-05 20:53 - 2022-02-10 20:39 - 000797112 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-03-05 20:53 - 2022-02-10 20:39 - 000717760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-03-05 20:53 - 2022-02-10 20:39 - 000636032 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-03-05 20:53 - 2022-02-10 20:38 - 002120320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-03-05 20:53 - 2022-02-10 20:38 - 001602728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-03-05 20:53 - 2022-02-10 20:38 - 000983992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-03-05 20:53 - 2022-02-10 20:38 - 000795584 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-03-05 20:53 - 2022-02-10 20:38 - 000711608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-03-05 20:53 - 2022-02-10 20:37 - 008612496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-03-05 20:53 - 2022-02-10 20:37 - 007714960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-03-05 20:53 - 2022-02-10 20:37 - 005727376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-03-05 20:53 - 2022-02-10 20:37 - 005099152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-03-05 20:53 - 2022-02-10 20:37 - 002935744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-03-05 20:53 - 2022-02-10 20:37 - 000456848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-03-05 20:53 - 2022-02-10 20:35 - 000849024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-03-05 20:53 - 2022-02-10 20:34 - 006461040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-03-05 20:53 - 2022-02-10 08:18 - 000089251 _____ C:\WINDOWS\system32\nvinfo.pb
2022-03-05 20:49 - 2021-06-03 15:56 - 000043408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\NvModuleTracker.sys
2022-02-28 12:39 - 2022-02-28 12:39 - 000000000 ____D C:\Users\Boris\AppData\Local\Bitdefender
2022-02-21 16:59 - 2022-02-21 16:59 - 000000000 ___DC C:\Users\Boris\AppData\LocalLow\Die of Death Games
2022-02-20 18:21 - 2022-02-20 18:21 - 000000000 ___DC C:\Users\Boris\AppData\LocalLow\11BitStudios
2022-02-20 09:57 - 2022-02-20 09:57 - 000238801 ____C C:\Users\Boris\Desktop\SOILIHI_Harmia CHFapp.odt
2022-02-18 18:06 - 2022-02-18 18:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Grim Dawn [GOG.com]
2022-02-11 10:23 - 2022-03-31 12:00 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-02-10 17:01 - 2022-02-13 19:03 - 000000008 _____ C:\Users\Boris\AppData\Roaming\DofusAppId0_3
2022-02-10 17:01 - 2022-02-10 17:01 - 000000000 ____D C:\Users\Boris\AppData\Roaming\Dofus-3
2022-02-10 15:37 - 2022-02-10 15:37 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-02-10 15:37 - 2022-02-10 15:37 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2022-02-10 12:10 - 2022-02-14 19:01 - 000000008 _____ C:\Users\Boris\AppData\Roaming\DofusAppId0_2
2022-02-10 12:10 - 2022-02-10 12:10 - 000000000 ____D C:\Users\Boris\AppData\Roaming\Dofus-2
2022-02-10 11:55 - 2022-02-10 11:55 - 000000000 ____D C:\Users\Boris\AppData\Roaming\AnkamaCertificates
2022-02-10 11:54 - 2022-02-14 19:41 - 000000008 _____ C:\Users\Boris\AppData\Roaming\DofusAppId0_1
2022-02-10 11:54 - 2022-02-14 19:32 - 000000000 ____D C:\Users\Boris\AppData\Roaming\Dofus
2022-02-10 11:54 - 2022-02-14 17:32 - 000000117 _____ C:\Users\Boris\AppData\Roaming\D2Info0
2022-02-10 11:54 - 2022-02-10 11:54 - 000000000 ____D C:\Users\Boris\AppData\Roaming\[Worker].null
2022-02-10 11:43 - 2022-02-11 12:40 - 000000000 ____D C:\Users\Boris\AppData\Roaming\zaap
2022-02-10 11:43 - 2022-02-11 12:40 - 000000000 ____D C:\Users\Boris\AppData\Roaming\Ankama Launcher
2022-02-10 11:43 - 2022-02-10 11:43 - 000000000 ____D C:\Users\Boris\AppData\Local\zaap-updater
2022-02-10 11:43 - 2022-02-10 11:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ankama
2022-02-10 11:42 - 2022-02-10 11:42 - 000000000 ____D C:\Program Files\Ankama
2022-02-07 18:13 - 2022-02-07 18:57 - 000000000 ____D C:\Users\Boris\AppData\Local\Teardown
2022-02-04 18:12 - 2022-02-04 18:12 - 000000000 ___DC C:\Users\Boris\AppData\LocalLow\Shiny Shoe
2022-02-04 18:11 - 2022-02-04 18:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Monster Train [GOG.com]
2022-02-04 18:01 - 2022-02-04 18:01 - 000188769 _____ C:\Users\Boris\Desktop\justifDomiPierre.pdf
2022-02-01 18:55 - 2022-02-01 18:55 - 000000000 ____D C:\Users\Boris\AppData\Local\NovaDrift
2022-02-01 11:25 - 2022-02-01 14:52 - 000000000 ____D C:\Users\Boris\AppData\Roaming\Vampire_Survivors
2022-01-12 10:40 - 2022-01-12 10:40 - 000523776 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-01-12 10:40 - 2022-01-12 10:40 - 000464384 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-01-11 16:51 - 2022-01-11 16:51 - 000003424 _____ C:\WINDOWS\system32\Tasks\eteindre
2022-01-10 17:04 - 2022-01-10 17:04 - 000000000 ___DC C:\Users\Boris\AppData\LocalLow\Weather Factory
2022-01-03 17:03 - 2022-01-03 17:03 - 000000000 ___DC C:\Users\Boris\AppData\LocalLow\Daniel Mullins Games

==================== Trois mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2022-03-31 12:25 - 2017-11-03 12:03 - 000000000 ____D C:\ProgramData\NVIDIA
2022-03-31 12:16 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-31 12:07 - 2021-07-15 19:10 - 001772722 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-31 12:07 - 2019-12-07 16:50 - 000792988 _____ C:\WINDOWS\system32\perfh00C.dat
2022-03-31 12:07 - 2019-12-07 16:50 - 000150118 _____ C:\WINDOWS\system32\perfc00C.dat
2022-03-31 12:07 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-03-31 12:00 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-03-31 12:00 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-31 11:59 - 2021-07-15 19:12 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-03-31 11:59 - 2021-07-15 19:00 - 000008192 ___SH C:\DumpStack.log.tmp
2022-03-31 11:59 - 2017-12-29 16:14 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2022-03-31 11:59 - 2017-11-03 12:04 - 000000000 ___DC C:\Users\Boris\AppData\LocalLow\Mozilla
2022-03-31 11:59 - 2017-11-03 01:23 - 000000000 __SHD C:\Users\Boris\IntelGraphicsProfiles
2022-03-31 11:17 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-03-31 10:45 - 2020-09-17 12:34 - 000002364 ____C C:\Users\Boris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2022-03-31 10:45 - 2020-09-17 12:34 - 000002356 ____C C:\Users\Boris\Desktop\Microsoft Teams.lnk
2022-03-30 18:00 - 2019-10-10 13:02 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2022-03-30 17:42 - 2017-11-03 12:05 - 000000000 ____D C:\ProgramData\Riot Games
2022-03-30 17:40 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-03-28 22:41 - 2021-07-15 19:00 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-03-28 13:39 - 2021-07-15 19:01 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-03-27 21:43 - 2021-07-15 19:00 - 000295032 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-03-27 21:43 - 2017-11-03 12:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-03-27 21:41 - 2019-12-07 16:53 - 000000000 ___SD C:\WINDOWS\system32\AppV
2022-03-27 21:41 - 2019-12-07 16:53 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-03-27 21:41 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-03-27 21:41 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-03-27 19:03 - 2021-07-15 19:12 - 000003358 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1239015781-1633601583-440821419-1001
2022-03-27 19:03 - 2021-07-15 19:02 - 000002417 ____C C:\Users\Boris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-03-27 18:56 - 2021-10-06 14:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-03-27 18:56 - 2017-11-03 12:04 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-03-25 09:38 - 2021-07-15 19:12 - 000003846 _____ C:\WINDOWS\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2022-03-25 09:38 - 2018-01-28 21:15 - 000000000 ____D C:\Program Files\Bitdefender Agent
2022-03-23 11:50 - 2017-11-04 21:33 - 000000000 ____D C:\Program Files (x86)\Steam
2022-03-23 10:32 - 2017-11-08 13:45 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2022-03-19 01:44 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-03-13 15:54 - 2021-12-13 15:22 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1239015781-1633601583-440821419-1001
2022-03-11 17:16 - 2021-07-19 12:06 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2022-03-11 17:15 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-03-11 17:13 - 2021-07-15 19:01 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-03-11 17:05 - 2017-11-04 20:51 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-03-11 17:02 - 2017-11-04 20:51 - 145666720 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-03-10 11:11 - 2021-07-19 12:05 - 000003634 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-03-10 11:11 - 2021-07-19 12:05 - 000003540 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d7799beb482ecb
2022-03-09 23:47 - 2017-11-10 15:57 - 000000000 ___DC C:\Users\Boris\AppData\Local\CrashDumps
2022-03-07 13:08 - 2018-12-07 22:29 - 000000000 ___DC C:\Users\Boris\AppData\Local\NVIDIA
2022-03-06 01:11 - 2021-07-15 19:02 - 000000000 ____D C:\Users\Boris
2022-03-05 20:57 - 2021-01-04 16:13 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2022-03-05 20:54 - 2017-11-03 12:02 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2022-03-05 20:50 - 2021-07-15 19:12 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:50 - 2021-07-15 19:12 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:50 - 2017-11-04 22:07 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2022-03-05 20:49 - 2021-07-15 19:12 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2021-07-15 19:12 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-03-05 20:49 - 2017-11-03 12:02 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2022-03-05 20:45 - 2018-01-03 22:40 - 000000000 ___DC C:\Users\Boris\AppData\Roaming\vlc
2022-03-05 20:41 - 2017-11-10 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CodeBlocks

==================== Fichiers à la racine de certains dossiers ========

2021-05-18 10:21 - 2021-07-24 13:29 - 000000032 ____C () C:\Users\Boris\AppData\Roaming\.machineId
2018-01-18 12:10 - 2018-10-04 13:44 - 000000033 ____C () C:\Users\Boris\AppData\Roaming\AdobeWLCMCache.dat
2022-02-10 11:54 - 2022-02-14 17:32 - 000000117 _____ () C:\Users\Boris\AppData\Roaming\D2Info0
2022-02-10 11:54 - 2022-02-14 19:41 - 000000008 _____ () C:\Users\Boris\AppData\Roaming\DofusAppId0_1
2022-02-10 12:10 - 2022-02-14 19:01 - 000000008 _____ () C:\Users\Boris\AppData\Roaming\DofusAppId0_2
2022-02-10 17:01 - 2022-02-13 19:03 - 000000008 _____ () C:\Users\Boris\AppData\Roaming\DofusAppId0_3
2018-10-01 18:09 - 2018-10-01 18:09 - 000000000 ____C () C:\Users\Boris\AppData\Local\oobelibMkey.log
2018-09-13 18:23 - 2018-09-13 18:23 - 000353118 ____C () C:\Users\Boris\AppData\Local\SquareClock.Production_Home_Ixina_WebIcon.ico
2018-11-07 12:09 - 2018-11-07 12:09 - 000070340 ____C () C:\Users\Boris\AppData\Local\TempF6A781A7B81F6DDD6A8A5C103ADBD459_S_Dump_4lx2snst.zip

==================== SigCheckExt =========================

2015-03-17 02:34 - 2015-03-17 02:34 - 000089088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\atl71.dll
2015-03-17 02:34 - 2015-03-17 02:34 - 001060864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71.dll
2015-03-17 02:34 - 2015-03-17 02:34 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHS.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71CHT.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71DEU.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ENU.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ESP.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71FRA.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000061440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71ITA.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71JPN.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 000049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFC71KOR.DLL
2015-03-17 02:34 - 2015-03-17 02:34 - 001047552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfc71u.dll
2015-03-17 02:34 - 2015-03-17 02:34 - 000499712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcp71.dll
2015-03-17 02:34 - 2015-03-17 02:34 - 000348160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvcr71.dll
2022-03-31 12:25 - 2022-03-31 12:25 - 002365440 _____ (Farbar) C:\Users\Boris\Desktop\FRST64.exe
2022-03-31 12:03 - 2022-03-31 12:03 - 003480728 _____ (Nicolas Coolman) C:\Users\Boris\Desktop\ZHPSuite.exe
2017-12-05 14:55 - 2017-12-05 14:55 - 000086528 _____ (MinGW.org Project) C:\Users\Boris\Downloads\mingw-get-setup.exe

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)


==================== BCD ================================

Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {741e946f-e596-11eb-ab04-ad371e83fec9}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Chargeur de d‚marrage Windows
-----------------------------
identificateur {398552c2-e58e-11eb-98a1-d45bbed95e25}
device ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{398552c3-e58e-11eb-98a1-d45bbed95e25}
path \windows\system32\winload.exe
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
osdevice ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{398552c3-e58e-11eb-98a1-d45bbed95e25}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes

Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.exe
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {398552c2-e58e-11eb-98a1-d45bbed95e25}
displaymessageoverride Recovery
recoveryenabled Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {741e946f-e596-11eb-ab04-ad371e83fec9}
nx OptIn
bootmenupolicy Standard

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {741e946f-e596-11eb-ab04-ad371e83fec9}
device partition=C:
path \WINDOWS\system32\winresume.exe
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {398552c2-e58e-11eb-98a1-d45bbed95e25}
recoveryenabled Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No

Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \boot\memtest.exe
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes

ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No

ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local

Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}

ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}

ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}

ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}

Options de p‚riph‚rique
-----------------------
identificateur {398552c3-e58e-11eb-98a1-d45bbed95e25}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume3
ramdisksdipath \Recovery\WindowsRE\boot.sdi

==================== Fin de FRST.txt ========================

Publicité


Signaler le contenu de ce document

Publicité