Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 31-07-2022
Exécuté par GUY (administrateur) sur LAPTOP-T2950B60 (HP HP Pavilion Notebook) (01-08-2022 08:42:01)
Exécuté depuis C:\Users\GUY\Desktop
Profils chargés: GUY
Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.1826 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\igfxEM.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP) C:\Windows\System32\hpservice.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-08-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1922496 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [701984 2017-07-13] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324600 2017-04-25] (HP Inc. -> HP)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [125477704 2022-02-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-3826966309-3357619277-2409006239-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2640272 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3826966309-3357619277-2409006239-1001\...\Run: [MicrosoftEdgeAutoLaunch_17C6FEB9FBF36316A636E0943B5B4964] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601840 2022-07-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3826966309-3357619277-2409006239-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [37054552 2022-07-18] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\windows\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\103.0.5060.134\Installer\chrmstp.exe [2022-07-20] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02CC1873-7EC9-41DA-A9CA-E809EAF0CCFB} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Pas de fichier <==== ATTENTION
Task: {035FF11C-5C38-4943-9E3C-A75059FE8C94} - \HP\HP CoolSense\HP CoolSense Start at Logon -> Pas de fichier <==== ATTENTION
Task: {083DBA8B-E747-4D91-BA9C-288CE8509F31} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {09E12619-95AF-4082-9260-6BD31402D23F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Pas de fichier)
Task: {10B7744A-B55A-45F2-BD37-47BE56B68AC4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [946112 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1AF927D0-5896-4986-BD9F-F9901392E122} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Pas de fichier <==== ATTENTION
Task: {26297EC5-0587-4EA4-9FF8-9F88F7C7B2D1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [107368 2017-04-07] (HP Inc. -> HP Inc.)
Task: {26841DAE-DDA2-4E81-A1F8-EC02F9C3A00D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {28851344-A7B6-4968-AD3A-A9707155BA51} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1714112 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {338C36B3-DD33-4353-B72F-9B4543222BEE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-07-18] (Piriform Software Ltd -> Piriform)
Task: {3E598940-F103-40E5-AABD-0B59B1505F30} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Pas de fichier <==== ATTENTION
Task: {3E609910-2FA4-4C35-B360-7D2033B6D6AE} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145312 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B6926D3-D490-4D93-82CE-D109F1D1BC80} - \Microsoft\Windows\WindowsUpdate\sih -> Pas de fichier <==== ATTENTION
Task: {54A4983F-29C2-4862-8A34-BB520DC2AACA} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [647616 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {54F79B2B-8210-4E74-AF55-08374CE30423} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {55880B32-5C65-40F2-BE45-229D8A069460} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3826966309-3357619277-2409006239-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214168 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C8D15C0-7D4E-49B4-8607-D447D64E2482} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Pas de fichier <==== ATTENTION
Task: {5CAB92B9-0CC9-41E5-916B-B383191D7680} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F9C6A08-C4BE-462B-9EFE-189A4F94DDA9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8414664 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {7072963F-3763-4E9F-A1F5-DE9703BAE827} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> Pas de fichier <==== ATTENTION
Task: {7F42794C-D380-4FA1-9A30-8543A16EA431} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Pas de fichier)
Task: {8153A1C7-2EE0-4778-880C-A7C8540F3986} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {85E0B423-D128-49EE-9091-42D0D32A8D19} - System32\Tasks\HPCeeScheduleForGUY => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {8D9E1849-6C42-4C34-BA6F-B2FA9A2A23E3} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64416 2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {9123AFDB-D5E7-4A50-8822-EB29980DB592} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436672 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9934F3EF-C11B-43E9-A49D-BAAA3E304F6B} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [717248 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {99F7F2A5-F11B-4C7F-B97D-62EDB32D1076} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {9C8FBD9F-24F0-4A1C-BCA5-84D3D09DAD23} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8414664 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {A33E2794-1BFA-47E2-A4A1-716848908E11} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214168 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {A4E48E2D-611F-4BBF-9656-D681F85416DD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [717248 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF96C4E3-0A7B-4C56-8E73-608CA53F4FDE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B69BCFCE-7A18-4540-90CB-2086F2607EDD} - \Hewlett-Packard\HP Support Assistant\Product Configurator -> Pas de fichier <==== ATTENTION
Task: {BB0C5477-8F27-4AF9-93F2-951BFC43A7CA} - System32\Tasks\GoogleUpdateTaskMachineCore{BC6CFF44-1F13-4AEA-87AC-B52A0F63B978} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-15] (Google LLC -> Google LLC)
Task: {C204BF28-658A-4654-84E7-075EF6519B60} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [647616 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C23E6B28-C6DF-4029-AFC5-24A502F1CA98} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {C3B91D4B-CC30-4828-932F-165D86462F7A} - System32\Tasks\GoogleUpdateTaskMachineUA{2A612D6F-CEAB-4209-B31A-4687F3AB3241} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-15] (Google LLC -> Google LLC)
Task: {C9D9ECBA-482E-40D9-8FB7-7492BD062BD3} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145312 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2FF3B50-0489-4B98-A40A-36379748AAC4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [625512 2017-04-06] (HP Inc. -> HP Inc.)
Task: {D63B5C67-4D6A-424B-83A8-B3B70A5353FD} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Pas de fichier <==== ATTENTION
Task: {DECFF11B-DCE4-4650-80F1-A2985A9C8EBB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN79QBW197 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /ForDevice:CN79QBW197 (Pas de fichier)
Task: {EBB6B05D-E104-4B13-B28A-073263323192} - \Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install -> Pas de fichier <==== ATTENTION
Task: {F343A2EE-B93B-4B1D-95DF-074064BD380A} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Pas de fichier)
Task: {F57B7352-5FFF-408A-89FE-42654BC3CDA0} - System32\Tasks\CCleanerSkipUAC - GUY => C:\Program Files\CCleaner\CCleaner.exe [31101528 2022-07-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {FF3E94A4-3DB9-4626-8D21-FBCFB75E5A7B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForGUY.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{ae31b12f-125a-4e2b-905f-7309e5cfc909}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{f449613a-d3e9-4a59-a585-d36b2790b698}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Profile: C:\Users\GUY\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-01]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\GUY\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2022-07-31]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Default [2022-08-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-15]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-07-24]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-07-30]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-07-06]
CHR Extension: (Google Docs hors connexion) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-06]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-06]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-07-24]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-07-07]
CHR Extension: (Google Docs hors connexion) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-07]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-24]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1081432 2022-07-18] (Piriform Software Ltd -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111288 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.141.0703.0002\FileSyncHelper.exe [3387808 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [223904 2022-05-29] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1077752 2016-09-28] (HP Inc. -> HP)
R2 hpsrv; C:\windows\system32\Hpservice.exe [38752 2016-09-26] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.141.0703.0002\OneDriveUpdaterService.exe [3827616 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6232176 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]
S2 HPJumpStartBridge; "c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe" [X]
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
S2 WildTangentHelper; "C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [287744 2022-02-21] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [154112 2021-12-14] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [159864 2021-06-29] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 MpKslcce3dcf2; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{20FD9980-D6EA-4DBC-A404-082EDC6DE1FF}\MpKslDrv.sys [141576 2022-07-31] (Microsoft Windows -> Microsoft Corporation)
S3 NVSWCFilter; C:\WINDOWS\System32\drivers\nvswcfilter.sys [26560 2017-08-11] (NVIDIA Corporation -> Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [65144 2021-06-29] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-07-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-07-29] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-07-29] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-01 08:42 - 2022-08-01 08:42 - 000026574 _____ C:\Users\GUY\Desktop\FRST.txt
2022-08-01 08:21 - 2022-08-01 08:21 - 000361901 _____ C:\Users\GUY\Desktop\ZHPDiag.html
2022-08-01 08:21 - 2022-08-01 08:21 - 000296107 _____ C:\Users\GUY\Desktop\ZHPDiag.txt
2022-07-31 09:33 - 2022-07-31 09:32 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Desktop\MBSetup (2).exe
2022-07-31 09:32 - 2022-07-31 09:32 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup (3).exe
2022-07-31 09:31 - 2022-07-31 09:32 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup (2).exe
2022-07-31 08:08 - 2022-07-31 08:08 - 000000000 ____D C:\Users\GUY\AppData\Local\mbam
2022-07-31 08:02 - 2022-07-31 08:07 - 000000000 ____D C:\AdwCleaner
2022-07-31 07:58 - 2022-07-31 07:58 - 008551608 _____ (Malwarebytes) C:\Users\GUY\Desktop\adwcleaner_8.3.2.exe
2022-07-30 21:08 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Desktop\MBSetup.exe
2022-07-30 21:08 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Desktop\MBSetup (1).exe
2022-07-30 21:06 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup.exe
2022-07-30 21:06 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup (1).exe
2022-07-30 18:05 - 2022-07-30 18:05 - 000000880 _____ C:\Users\GUY\Desktop\ZHPCleaner.lnk
2022-07-30 18:03 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPCleaner.exe
2022-07-30 18:02 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPCleaner.exe
2022-07-30 17:53 - 2022-07-30 17:53 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2022-07-30 11:42 - 2022-07-30 11:42 - 001036172 _____ C:\Users\GUY\Downloads\Wub (2).zip
2022-07-30 11:40 - 2022-07-30 11:43 - 000000142 _____ C:\Users\GUY\Downloads\Wub (1).zip
2022-07-29 20:00 - 2022-08-01 08:42 - 000000000 ____D C:\FRST
2022-07-29 19:56 - 2022-07-31 16:18 - 002370048 _____ (Farbar) C:\Users\GUY\Desktop\FRST64.exe
2022-07-29 09:04 - 2022-07-29 09:04 - 000000000 ____D C:\Users\GUY\Documents\Nouveau dossier
2022-07-29 08:52 - 2022-07-29 08:52 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\ZHPSuite.exe
2022-07-29 08:32 - 2022-08-01 08:21 - 000000000 ____D C:\Users\GUY\AppData\Roaming\ZHP
2022-07-29 08:32 - 2022-07-31 15:28 - 000000870 _____ C:\Users\GUY\Desktop\ZHPSuite.lnk
2022-07-29 08:32 - 2022-07-30 18:05 - 000000000 ____D C:\Users\GUY\AppData\Local\ZHP
2022-07-29 08:32 - 2022-07-29 08:32 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPSuite (2).exe
2022-07-19 07:05 - 2022-07-19 07:05 - 000000000 ____D C:\Users\GUY\Downloads\Wub
2022-07-19 07:04 - 2022-07-19 07:04 - 001036134 _____ C:\Users\GUY\Downloads\Wub.zip
2022-07-18 06:41 - 2022-07-18 06:41 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2022-07-18 06:41 - 2022-07-18 06:41 - 000470528 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-07-18 06:41 - 2022-07-18 06:41 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-07-18 06:41 - 2022-07-18 06:41 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2022-07-18 06:41 - 2022-07-18 06:41 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2022-07-18 06:41 - 2022-07-18 06:41 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2022-07-18 06:41 - 2022-07-18 06:41 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000530944 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-07-18 06:40 - 2022-07-18 06:40 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll
2022-07-18 06:40 - 2022-07-18 06:40 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll
2022-07-18 06:40 - 2022-07-18 06:40 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll
2022-07-18 06:40 - 2022-07-18 06:40 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000011811 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-07-18 06:39 - 2022-07-18 06:39 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-07-18 06:39 - 2022-07-18 06:39 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2022-07-18 06:39 - 2022-07-18 06:39 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-07-18 06:39 - 2022-07-18 06:39 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2022-07-17 19:32 - 2022-07-17 19:32 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite (1).exe
2022-07-17 19:26 - 2022-07-17 19:26 - 000000000 ___HD C:\$WinREAgent
2022-07-17 19:24 - 2022-07-17 19:24 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite.exe
2022-07-14 19:17 - 2022-07-14 19:17 - 000000000 ____D C:\Users\GUY\Documents\Modèles Office personnalisés
2022-07-14 07:29 - 2022-07-26 18:51 - 000216885 _____ C:\Users\GUY\Documents\Duplicate Cleaner log.txt
2022-07-14 07:28 - 2022-07-14 07:28 - 006239168 _____ (DigitalVolcano Software Ltd) C:\Users\GUY\Downloads\DuplicateCleanerFree4_setup.exe
2022-07-10 06:00 - 2022-07-10 06:00 - 000004608 _____ C:\Users\GUY\Downloads\export_10_07_2022_06_00_18.xls
2022-07-09 21:32 - 2022-07-09 21:32 - 063197344 _____ (Molotov) C:\Users\GUY\Downloads\MolotovSetup-4.5.0 (1).exe
2022-07-09 21:27 - 2022-07-09 21:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-07-09 21:27 - 2022-07-09 21:27 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2022-07-06 08:54 - 2022-07-29 08:29 - 000000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForGUY.job
2022-07-06 08:54 - 2022-07-27 21:17 - 000002790 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForGUY
2022-07-06 08:20 - 2022-07-30 20:57 - 000002395 _____ C:\Users\GUY\Desktop\Personne 1 - Chrome.lnk
2022-07-06 07:25 - 2022-07-06 07:36 - 002877440 _____ C:\Users\GUY\Desktop\comptes analytiques 2020 JUILLET.xls
2022-07-06 07:12 - 2022-07-06 07:12 - 000023040 _____ C:\Users\GUY\Downloads\E1877824.xls
2022-07-05 22:15 - 2022-07-05 22:15 - 000000000 ____D C:\Users\GUY\AppData\LocalLow\Temp
2022-07-05 22:14 - 2022-07-18 08:02 - 000002365 _____ C:\Users\GUY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2022-07-05 15:00 - 2022-07-05 15:00 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2022-07-05 15:00 - 2022-07-05 15:00 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2022-07-05 14:59 - 2022-07-05 14:59 - 000002479 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002479 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002402 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2022-07-05 14:58 - 2022-07-20 06:25 - 000000000 ____D C:\Program Files\Microsoft Office
2022-07-05 14:58 - 2022-07-05 14:58 - 000000000 ____D C:\Program Files\Microsoft Office 15
2022-07-05 08:14 - 2022-07-05 10:50 - 345280512 _____ C:\Users\GUY\Downloads\ProPlus2021Retail (1).img
2022-07-05 08:08 - 2022-07-05 08:08 - 000000000 ____D C:\ProgramData\Piriform
2022-07-05 06:47 - 2022-07-05 22:14 - 000000000 ____D C:\Users\GUY\AppData\Local\SquirrelTemp
2022-07-05 06:47 - 2022-07-05 06:47 - 000000000 ____D C:\Users\GUY\AppData\Roaming\Teams
2022-07-04 15:14 - 2022-07-04 16:47 - 345280512 _____ C:\Users\GUY\Downloads\ProPlus2021Retail.img
2022-07-04 06:20 - 2022-07-04 06:20 - 000012969 _____ C:\Users\GUY\Downloads\Synthèse comptes Coleg et sections 2022.xlsx
2022-07-04 06:20 - 2022-07-04 06:20 - 000012969 _____ C:\Users\GUY\Downloads\Synthèse comptes Coleg et sections 2022 (1).xlsx
2022-07-04 06:19 - 2022-07-04 06:19 - 000013274 _____ C:\Users\GUY\Downloads\Etat financier au 30-06-2022.xlsx
2022-07-03 07:17 - 2022-07-03 07:19 - 127691824 _____ (AOMEI International Network Limited. ) C:\Users\GUY\Downloads\AOMEIBackupperStd.exe
2022-07-02 06:34 - 2022-07-02 06:34 - 000012800 _____ C:\Users\GUY\Downloads\E1837824.xls
2022-06-30 18:18 - 2022-07-08 07:11 - 000014432 _____ C:\Users\GUY\Desktop\CALENDRIER SCULPTURE 2022 2023.xlsx
2022-06-30 18:18 - 2022-07-04 21:14 - 000000000 ____D C:\Users\GUY\Desktop\sculpture enfants
2022-06-30 18:18 - 2022-07-04 19:29 - 000000000 ____D C:\Users\GUY\Desktop\whatsapp
2022-06-30 18:18 - 2022-06-30 18:18 - 000000000 ____D C:\Users\GUY\Desktop\SAUVEGARDE GENEA ADN
2022-06-30 18:18 - 2022-06-29 09:09 - 000046740 _____ C:\Users\GUY\Desktop\Copie de compte journalier coleg.xlsx
2022-06-30 18:18 - 2022-06-26 14:23 - 000250888 _____ C:\Users\GUY\Desktop\correction notre histoire.pdf
2022-06-30 18:18 - 2022-06-09 07:00 - 002201600 _____ C:\Users\GUY\Desktop\WhyNotWin11.exe
2022-06-30 18:18 - 2022-06-08 16:42 - 001667978 _____ C:\Users\GUY\Desktop\127052-notice camera ext.pdf
2022-06-30 18:18 - 2022-05-31 20:35 - 000021291 _____ C:\Users\GUY\Desktop\frais km.xlsx
2022-06-30 18:18 - 2022-05-31 13:33 - 000175869 _____ C:\Users\GUY\Desktop\Nael_BelmokhtarPagani_CV (2).PDF
2022-06-30 18:18 - 2022-05-18 17:03 - 000022966 _____ C:\Users\GUY\Desktop\LISTE PRESENT AG.xlsx
2022-06-30 18:18 - 2022-03-30 21:43 - 000012383 _____ C:\Users\GUY\Desktop\dates.xlsx
2022-06-30 18:18 - 2022-03-30 18:17 - 000023431 _____ C:\Users\GUY\Desktop\sortie vtt.xlsx
2022-06-30 18:18 - 2022-02-18 21:47 - 000016009 _____ C:\Users\GUY\Desktop\GENEA DAREAU REDUITE.xlsx
2022-06-30 18:18 - 2022-01-25 09:37 - 002750976 _____ C:\Users\GUY\Desktop\comptes analytiques 01.01.2022.xls
2022-06-30 18:18 - 2021-09-30 08:06 - 000010888 _____ C:\Users\GUY\Desktop\liste mail vtt coleg.xlsx
2022-06-30 18:18 - 2021-06-04 18:31 - 000001756 _____ C:\Users\GUY\Desktop\Heredis17 - Raccourci.lnk
2022-06-30 18:18 - 2020-04-04 18:22 - 000035704 _____ C:\Users\GUY\Desktop\liste genea2.xlsx
2022-06-30 18:18 - 2020-03-28 19:37 - 000060317 _____ C:\Users\GUY\Desktop\liste nom genea.xlsx
2022-06-30 18:14 - 2022-07-04 21:15 - 000000000 ____D C:\Users\GUY\Desktop\photos samsung au 06 04 2022
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\Recovered
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\mes recettes
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\luc
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\le-robert-correcteur-PC
2022-06-30 18:08 - 2022-06-30 18:09 - 000000000 ____D C:\Users\GUY\Desktop\GARMIN
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ___RD C:\Users\GUY\Desktop\COLEG
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\FRANCAIS GENEA
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\dossier notre histoire
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\cours nael
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\circuit vtt
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\cesu pagani
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\banque
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\adn geneanet
2022-06-30 18:05 - 2022-06-30 18:05 - 000000000 ____D C:\bureau2
2022-06-29 11:59 - 2022-06-29 11:59 - 000101032 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\mrcbt.sys
2022-06-29 11:59 - 2022-06-29 11:59 - 000075160 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\mrigflt.sys
2022-06-29 11:54 - 2022-06-29 11:54 - 000000000 ____D C:\Users\GUY\Downloads\Macrium
2022-06-29 11:53 - 2022-06-29 11:53 - 005635816 _____ (Paramount Software UK Ltd) C:\Users\GUY\Downloads\ReflectDLHT.exe
2022-06-29 07:59 - 2022-08-01 07:22 - 000000000 ____D C:\Program Files\CCleaner
2022-06-29 07:59 - 2022-07-29 19:54 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-06-29 07:59 - 2022-07-27 21:17 - 000002250 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - GUY
2022-06-29 07:59 - 2022-06-29 07:59 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2022-06-29 07:58 - 2022-06-29 07:59 - 049618184 _____ (Piriform Software Ltd) C:\Users\GUY\Downloads\ccsetup601.exe
2022-06-23 21:14 - 2022-06-23 21:17 - 000000000 ____D C:\Users\GUY\Downloads\captvty-2.9.8.3
2022-06-23 21:11 - 2022-06-23 21:12 - 071702030 _____ C:\Users\GUY\Downloads\captvty-2.9.8.3.zip
2022-06-23 21:11 - 2022-06-23 21:11 - 000000000 ____D C:\Users\GUY\Downloads\captvty-2.9.3.2
2022-06-23 21:09 - 2022-06-23 21:10 - 071685365 _____ C:\Users\GUY\Downloads\captvty-2.9.3.2.zip
2022-06-23 08:25 - 2022-06-23 08:25 - 000030353 _____ C:\Users\GUY\Downloads\labbeville.gpx
2022-06-17 12:09 - 2022-06-17 12:09 - 002002428 _____ C:\Users\GUY\Downloads\ordonance.pdf
2022-06-17 10:46 - 2022-07-30 17:54 - 000000000 ____D C:\Program Files (x86)\Avanquest
2022-06-17 10:46 - 2022-06-17 10:46 - 002530992 _____ (Avanquest) C:\Users\GUY\Downloads\Expert_PDF.exe
2022-06-17 10:41 - 2022-06-17 10:41 - 002032065 _____ C:\Users\GUY\Downloads\Certificat (dont arrêts de travail).pdf
2022-06-17 10:41 - 2022-06-17 10:41 - 002029328 _____ C:\Users\GUY\Downloads\Ordonnance de soins paramédicaux.pdf
2022-06-17 10:40 - 2022-06-17 10:40 - 002002020 _____ C:\Users\GUY\Downloads\Ordonnance de médicaments.pdf
2022-06-17 06:41 - 2022-06-17 06:41 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-06-17 06:41 - 2022-06-17 06:41 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-06-17 06:40 - 2022-06-17 06:40 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-17 06:40 - 2022-06-17 06:40 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-17 06:40 - 2022-06-17 06:40 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-15 18:01 - 2022-07-27 21:17 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000003176 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002968 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002786 _____ C:\WINDOWS\system32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002500 _____ C:\WINDOWS\system32\Tasks\HPEA3JOBS
2022-06-15 08:51 - 2022-06-15 08:51 - 000000000 ___HD C:\ProgramData\CanonIJScan
2022-06-14 15:12 - 2022-06-14 15:12 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2022-06-14 06:24 - 2022-06-14 06:24 - 000040960 _____ C:\Users\GUY\Downloads\E1657824.xls
2022-06-13 18:33 - 2022-07-27 21:17 - 000002716 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-06-13 18:33 - 2022-06-13 18:33 - 000000000 ___RD C:\Users\Default\OneDrive
2022-06-13 18:32 - 2022-07-24 07:47 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-06-13 18:32 - 2022-07-18 20:53 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-13 18:14 - 2022-06-13 18:14 - 000044544 _____ C:\Users\GUY\Downloads\EXEMPLE 2022 2023 planning-excel-calendriergratuit.fr.xls
2022-06-13 17:49 - 2022-06-13 17:49 - 007970044 _____ C:\Users\GUY\Downloads\Hymne Breton.mp4
2022-06-09 06:58 - 2022-06-09 06:58 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11 (1).exe
2022-06-09 06:57 - 2022-06-09 06:57 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11.exe
2022-06-09 06:57 - 2022-06-09 06:57 - 000000000 ____D C:\Users\GUY\AppData\Local\WhyNotWin11
2022-06-09 06:50 - 2022-06-29 08:01 - 000000000 ____D C:\Users\GUY\AppData\Local\CrashDumps
2022-05-29 08:22 - 2022-05-29 08:22 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2022-05-29 08:16 - 2022-05-29 08:16 - 000000000 ____D C:\Users\GUY\AppData\Local\CEF
2022-05-29 08:14 - 2022-07-29 08:29 - 000000000 ____D C:\ProgramData\Avast Software
2022-05-29 08:14 - 2022-05-29 08:14 - 000267072 _____ (AVAST Software) C:\Users\GUY\Downloads\avast_premium_security_setup_online (1).exe
2022-05-29 08:13 - 2022-05-29 08:14 - 000267072 _____ (AVAST Software) C:\Users\GUY\Downloads\avast_premium_security_setup_online.exe
2022-05-27 11:16 - 2022-05-27 11:16 - 000188928 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-05-27 11:15 - 2022-05-27 11:15 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-22 21:03 - 2022-05-22 21:03 - 000000000 ___HD C:\OneDriveTemp
2022-05-22 21:02 - 2022-05-22 21:02 - 000000000 ____D C:\Users\GUY\AppData\Local\OneDrive
2022-05-22 21:02 - 2022-01-24 15:37 - 002749440 _____ C:\Users\GUY\Desktop\comptes analytiques 01.01.2022 - Copie.xls
2022-05-11 09:20 - 2022-05-11 09:20 - 000143937 _____ C:\Users\GUY\Downloads\cerfa_14952-03.pdf
2022-05-09 19:17 - 2022-05-09 19:17 - 000007361 _____ C:\Users\GUY\Documents\recapcomptableannuel.pdf
2022-05-09 19:12 - 2022-05-09 19:12 - 000000000 ___HD C:\ProgramData\CanonBJ
2022-05-09 19:11 - 2017-03-13 05:00 - 001302016 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMDR.DLL
2022-05-09 19:11 - 2017-02-27 09:14 - 000379392 _____ (CANON INC.) C:\WINDOWS\system32\CNC_DRL.dll
2022-05-09 19:11 - 2016-10-31 17:44 - 000089600 _____ C:\WINDOWS\system32\CNC1827D.TBL
2022-05-09 19:11 - 2016-10-26 11:32 - 000559616 _____ (CANON INC.) C:\WINDOWS\system32\CNC_DRC.dll
2022-05-09 19:11 - 2016-10-26 11:32 - 000273408 _____ (CANON INC.) C:\WINDOWS\system32\CNC_DRI.dll
2022-05-09 19:11 - 2008-08-25 18:02 - 000017920 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCA6.dll
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-01 08:44 - 2022-03-06 21:26 - 000000000 ____D C:\ProgramData\NVIDIA
2022-08-01 08:40 - 2022-03-06 21:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-08-01 08:40 - 2022-03-06 19:58 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-08-01 08:36 - 2022-03-15 08:40 - 000000000 ____D C:\Program Files (x86)\Google
2022-08-01 07:22 - 2017-09-02 01:57 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2022-08-01 07:19 - 2021-12-08 05:01 - 000000000 __SHD C:\Users\GUY\IntelGraphicsProfiles
2022-07-31 15:25 - 2022-03-06 19:58 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-07-31 09:11 - 2022-03-06 22:36 - 001841424 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-07-31 09:11 - 2022-03-06 20:15 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2022-07-31 09:11 - 2022-03-06 20:15 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2022-07-31 09:11 - 2022-03-06 19:50 - 000000000 ____D C:\WINDOWS\INF
2022-07-31 08:10 - 2022-03-06 21:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-07-31 08:10 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\ServiceState
2022-07-31 08:10 - 2021-12-07 23:03 - 000008192 ___SH C:\DumpStack.log.tmp
2022-07-31 08:09 - 2022-03-06 19:24 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-07-31 08:08 - 2022-03-07 22:19 - 000000000 ____D C:\Users\GUY\AppData\Local\HP
2022-07-31 08:08 - 2022-03-06 22:17 - 000000000 ____D C:\Users\GUY
2022-07-31 08:08 - 2017-09-02 01:57 - 000000000 ____D C:\ProgramData\HP
2022-07-31 08:08 - 2017-09-02 01:55 - 000000000 ____D C:\Program Files (x86)\HP
2022-07-31 08:08 - 2017-08-22 04:02 - 000000000 ___HD C:\hp
2022-07-31 08:07 - 2022-03-07 22:27 - 000000000 ____D C:\Users\GUY\AppData\Roaming\Hewlett-Packard
2022-07-31 08:07 - 2022-03-07 22:19 - 000000000 ____D C:\Users\GUY\AppData\Local\Hewlett-Packard
2022-07-31 08:07 - 2017-09-02 01:56 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2022-07-30 17:56 - 2022-03-07 22:23 - 000000000 ____D C:\ProgramData\Wondershare
2022-07-30 17:56 - 2022-03-07 22:23 - 000000000 ____D C:\Program Files\Wondershare
2022-07-30 17:55 - 2017-11-08 21:57 - 000000000 ____D C:\ProgramData\mcafee
2022-07-30 17:54 - 2022-03-07 00:29 - 000000000 ____D C:\Users\GUY\AppData\Roaming\WildTangent
2022-07-30 17:54 - 2017-11-08 21:54 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2022-07-30 17:51 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-07-30 17:50 - 2022-03-06 19:58 - 000000000 ___HD C:\Program Files\WindowsApps
2022-07-30 11:43 - 2022-01-28 13:58 - 000946376 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub_x64.exe
2022-07-30 11:43 - 2022-01-28 13:58 - 000794752 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub.exe
2022-07-30 11:43 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2022-07-30 11:37 - 2021-12-07 23:07 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-07-30 11:37 - 2021-12-07 23:07 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-07-29 08:30 - 2022-03-06 21:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-07-27 21:17 - 2022-03-15 08:40 - 000003594 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{2A612D6F-CEAB-4209-B31A-4687F3AB3241}
2022-07-27 21:17 - 2022-03-15 08:40 - 000003370 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{BC6CFF44-1F13-4AEA-87AC-B52A0F63B978}
2022-07-27 21:17 - 2022-03-07 00:41 - 000003070 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3826966309-3357619277-2409006239-1001
2022-07-27 21:17 - 2022-03-06 21:21 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-07-27 21:17 - 2022-03-06 21:21 - 000003394 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-07-24 07:44 - 2021-12-13 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
2022-07-21 14:45 - 2022-03-07 22:22 - 000000000 ____D C:\Users\GUY\AppData\Local\D3DSCache
2022-07-20 06:36 - 2022-03-15 08:41 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-07-19 07:06 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2022-07-18 07:35 - 2022-03-06 21:17 - 000519152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\SystemResources
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\setup
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-07-18 06:53 - 2022-03-06 19:28 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-07-18 06:39 - 2022-03-06 21:23 - 003010560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-07-17 19:25 - 2022-03-07 07:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-07-17 19:20 - 2022-03-07 07:51 - 146546848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-07-10 06:00 - 2022-03-07 00:30 - 000000000 ____D C:\Users\GUY\AppData\Local\Packages
2022-07-09 22:41 - 2022-04-09 16:25 - 000000000 ____D C:\Users\GUY\AppData\Roaming\molotov
2022-07-05 16:15 - 2022-03-07 00:29 - 000000000 ____D C:\Users\GUY\AppData\Local\ConnectedDevicesPlatform
2022-07-05 16:14 - 2017-03-18 05:53 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-07-05 15:00 - 2022-03-06 19:58 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-07-04 21:15 - 2021-12-08 16:02 - 000000000 ____D C:\Users\GUY\Desktop\photos tel au 24 12 2020
2022-07-04 21:14 - 2022-03-07 02:19 - 000000000 ____D C:\Users\GUY\AppData\Local\PlaceholderTileLogoFolder
2022-07-04 21:14 - 2021-12-08 16:02 - 000000000 ____D C:\Users\GUY\Desktop\photo pour mon histoire
==================== Fichiers à la racine de certains dossiers ========
2022-07-29 08:52 - 2022-07-29 08:52 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\ZHPSuite.exe
==================== SigCheckExt =========================
2017-11-08 21:40 - 2017-08-11 07:46 - 001291912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 000690504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 023084816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 012133296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 001008816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 000578240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 018812888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 009983688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2022-07-29 08:52 - 2022-07-29 08:52 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\ZHPSuite.exe
2022-07-29 19:56 - 2022-07-31 16:18 - 002370048 _____ (Farbar) C:\Users\GUY\Desktop\FRST64.exe
2022-06-30 18:18 - 2022-06-09 07:00 - 002201600 _____ C:\Users\GUY\Desktop\WhyNotWin11.exe
2022-01-28 13:58 - 2022-07-30 11:43 - 000794752 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub.exe
2022-01-28 13:58 - 2022-07-30 11:43 - 000946376 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub_x64.exe
2022-07-30 18:03 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPCleaner.exe
2022-07-29 08:32 - 2022-07-29 08:32 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPSuite (2).exe
2022-06-09 06:58 - 2022-06-09 06:58 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11 (1).exe
2022-06-09 06:57 - 2022-06-09 06:57 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11.exe
2022-07-30 18:02 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPCleaner.exe
2022-07-17 19:32 - 2022-07-17 19:32 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite (1).exe
2022-07-17 19:24 - 2022-07-17 19:24 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{bf65cfdb-5c4d-11ec-994a-9cda3eef37d7}
{b5d4e059-c50b-11e7-a919-48ba4e4d097a}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {615697f8-9d7f-11ec-8a30-afe9693cf1d2}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {b5d4e059-c50b-11e7-a919-48ba4e4d097a}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {bf65cfdb-5c4d-11ec-994a-9cda3eef37d7}
description Internal Hard Disk or Solid State Disk
Chargeur de d‚marrage Windows
-----------------------------
identificateur {300b3d27-e573-11ea-99fd-48ba4e4d097a}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{300b3d28-e573-11ea-99fd-48ba4e4d097a}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride PushButtonReset
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{300b3d28-e573-11ea-99fd-48ba4e4d097a}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {300b3d27-e573-11ea-99fd-48ba4e4d097a}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {615697f8-9d7f-11ec-8a30-afe9693cf1d2}
nx OptIn
bootmenupolicy Standard
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {615697f8-9d7f-11ec-8a30-afe9693cf1d2}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {300b3d27-e573-11ea-99fd-48ba4e4d097a}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {300b3d28-e573-11ea-99fd-48ba4e4d097a}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par GUY (administrateur) sur LAPTOP-T2950B60 (HP HP Pavilion Notebook) (01-08-2022 08:42:01)
Exécuté depuis C:\Users\GUY\Desktop
Profils chargés: GUY
Plate-forme: Microsoft Windows 10 Professionnel Version 21H2 19044.1826 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\igfxEM.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\dptf_helper.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Piriform Software Ltd -> Piriform Software Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP Inc. -> HP) C:\Windows\System32\hpservice.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki130350.inf_amd64_696b7c6764071b63\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-08-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\windows\system32\nvspcap64.dll [1922496 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [701984 2017-07-13] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324600 2017-04-25] (HP Inc. -> HP)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [125477704 2022-02-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-3826966309-3357619277-2409006239-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2640272 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3826966309-3357619277-2409006239-1001\...\Run: [MicrosoftEdgeAutoLaunch_17C6FEB9FBF36316A636E0943B5B4964] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601840 2022-07-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3826966309-3357619277-2409006239-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [37054552 2022-07-18] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\...\Windows x64\Print Processors\Canon TS3100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDR.DLL [482816 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS3100 series: C:\windows\system32\CNMLMDR.DLL [1302016 2017-03-13] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\103.0.5060.134\Installer\chrmstp.exe [2022-07-20] (Google LLC -> Google LLC)
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {02CC1873-7EC9-41DA-A9CA-E809EAF0CCFB} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Pas de fichier <==== ATTENTION
Task: {035FF11C-5C38-4943-9E3C-A75059FE8C94} - \HP\HP CoolSense\HP CoolSense Start at Logon -> Pas de fichier <==== ATTENTION
Task: {083DBA8B-E747-4D91-BA9C-288CE8509F31} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {09E12619-95AF-4082-9260-6BD31402D23F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Pas de fichier)
Task: {10B7744A-B55A-45F2-BD37-47BE56B68AC4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [946112 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1AF927D0-5896-4986-BD9F-F9901392E122} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Pas de fichier <==== ATTENTION
Task: {26297EC5-0587-4EA4-9FF8-9F88F7C7B2D1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [107368 2017-04-07] (HP Inc. -> HP Inc.)
Task: {26841DAE-DDA2-4E81-A1F8-EC02F9C3A00D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {28851344-A7B6-4968-AD3A-A9707155BA51} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1714112 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {338C36B3-DD33-4353-B72F-9B4543222BEE} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-07-18] (Piriform Software Ltd -> Piriform)
Task: {3E598940-F103-40E5-AABD-0B59B1505F30} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Pas de fichier <==== ATTENTION
Task: {3E609910-2FA4-4C35-B360-7D2033B6D6AE} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145312 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B6926D3-D490-4D93-82CE-D109F1D1BC80} - \Microsoft\Windows\WindowsUpdate\sih -> Pas de fichier <==== ATTENTION
Task: {54A4983F-29C2-4862-8A34-BB520DC2AACA} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [647616 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {54F79B2B-8210-4E74-AF55-08374CE30423} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {55880B32-5C65-40F2-BE45-229D8A069460} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3826966309-3357619277-2409006239-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214168 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5C8D15C0-7D4E-49B4-8607-D447D64E2482} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Pas de fichier <==== ATTENTION
Task: {5CAB92B9-0CC9-41E5-916B-B383191D7680} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378864 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F9C6A08-C4BE-462B-9EFE-189A4F94DDA9} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8414664 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {7072963F-3763-4E9F-A1F5-DE9703BAE827} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> Pas de fichier <==== ATTENTION
Task: {7F42794C-D380-4FA1-9A30-8543A16EA431} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Pas de fichier)
Task: {8153A1C7-2EE0-4778-880C-A7C8540F3986} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {85E0B423-D128-49EE-9091-42D0D32A8D19} - System32\Tasks\HPCeeScheduleForGUY => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {8D9E1849-6C42-4C34-BA6F-B2FA9A2A23E3} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64416 2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {9123AFDB-D5E7-4A50-8822-EB29980DB592} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436672 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9934F3EF-C11B-43E9-A49D-BAAA3E304F6B} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [717248 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {99F7F2A5-F11B-4C7F-B97D-62EDB32D1076} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {9C8FBD9F-24F0-4A1C-BCA5-84D3D09DAD23} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8414664 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {A33E2794-1BFA-47E2-A4A1-716848908E11} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214168 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {A4E48E2D-611F-4BBF-9656-D681F85416DD} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [717248 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF96C4E3-0A7B-4C56-8E73-608CA53F4FDE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B69BCFCE-7A18-4540-90CB-2086F2607EDD} - \Hewlett-Packard\HP Support Assistant\Product Configurator -> Pas de fichier <==== ATTENTION
Task: {BB0C5477-8F27-4AF9-93F2-951BFC43A7CA} - System32\Tasks\GoogleUpdateTaskMachineCore{BC6CFF44-1F13-4AEA-87AC-B52A0F63B978} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-15] (Google LLC -> Google LLC)
Task: {C204BF28-658A-4654-84E7-075EF6519B60} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [647616 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C23E6B28-C6DF-4029-AFC5-24A502F1CA98} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-08-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {C3B91D4B-CC30-4828-932F-165D86462F7A} - System32\Tasks\GoogleUpdateTaskMachineUA{2A612D6F-CEAB-4209-B31A-4687F3AB3241} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-03-15] (Google LLC -> Google LLC)
Task: {C9D9ECBA-482E-40D9-8FB7-7492BD062BD3} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145312 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2FF3B50-0489-4B98-A40A-36379748AAC4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [625512 2017-04-06] (HP Inc. -> HP Inc.)
Task: {D63B5C67-4D6A-424B-83A8-B3B70A5353FD} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Pas de fichier <==== ATTENTION
Task: {DECFF11B-DCE4-4650-80F1-A2985A9C8EBB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN79QBW197 => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /ForDevice:CN79QBW197 (Pas de fichier)
Task: {EBB6B05D-E104-4B13-B28A-073263323192} - \Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install -> Pas de fichier <==== ATTENTION
Task: {F343A2EE-B93B-4B1D-95DF-074064BD380A} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Pas de fichier)
Task: {F57B7352-5FFF-408A-89FE-42654BC3CDA0} - System32\Tasks\CCleanerSkipUAC - GUY => C:\Program Files\CCleaner\CCleaner.exe [31101528 2022-07-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {FF3E94A4-3DB9-4626-8D21-FBCFB75E5A7B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForGUY.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{ae31b12f-125a-4e2b-905f-7309e5cfc909}: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{f449613a-d3e9-4a59-a585-d36b2790b698}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Profile: C:\Users\GUY\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-01]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\GUY\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2022-07-31]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-08] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Default [2022-08-01]
CHR Extension: (Google Docs hors connexion) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-19]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-15]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-07-24]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-07-30]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-07-06]
CHR Extension: (Google Docs hors connexion) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-06]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-06]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2 [2022-07-24]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-07-07]
CHR Extension: (Google Docs hors connexion) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-07-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\GUY\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-07]
CHR Profile: C:\Users\GUY\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-24]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1081432 2022-07-18] (Piriform Software Ltd -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111288 2022-07-20] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.141.0703.0002\FileSyncHelper.exe [3387808 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [223904 2022-05-29] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1077752 2016-09-28] (HP Inc. -> HP)
R2 hpsrv; C:\windows\system32\Hpservice.exe [38752 2016-09-26] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc. -> HP Inc.)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.141.0703.0002\OneDriveUpdaterService.exe [3827616 2022-07-18] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6232176 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-07-29] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]
S2 HPJumpStartBridge; "c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe" [X]
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
S2 WildTangentHelper; "C:\Program Files (x86)\WildTangent Games\Integration\WildTangentHelperService.exe" [X]
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [287744 2022-02-21] (Microsoft Corporation) [Fichier non signé]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [154112 2021-12-14] (Microsoft Corporation) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [159864 2021-06-29] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 MpKslcce3dcf2; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{20FD9980-D6EA-4DBC-A404-082EDC6DE1FF}\MpKslDrv.sys [141576 2022-07-31] (Microsoft Windows -> Microsoft Corporation)
S3 NVSWCFilter; C:\WINDOWS\System32\drivers\nvswcfilter.sys [26560 2017-08-11] (NVIDIA Corporation -> Windows (R) Win 7 DDK provider)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [65144 2021-06-29] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-07-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-07-29] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-07-29] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [37280 2021-11-23] (HP Inc. -> HP)
U3 aspnet_state; pas de ImagePath
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-01 08:42 - 2022-08-01 08:42 - 000026574 _____ C:\Users\GUY\Desktop\FRST.txt
2022-08-01 08:21 - 2022-08-01 08:21 - 000361901 _____ C:\Users\GUY\Desktop\ZHPDiag.html
2022-08-01 08:21 - 2022-08-01 08:21 - 000296107 _____ C:\Users\GUY\Desktop\ZHPDiag.txt
2022-07-31 09:33 - 2022-07-31 09:32 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Desktop\MBSetup (2).exe
2022-07-31 09:32 - 2022-07-31 09:32 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup (3).exe
2022-07-31 09:31 - 2022-07-31 09:32 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup (2).exe
2022-07-31 08:08 - 2022-07-31 08:08 - 000000000 ____D C:\Users\GUY\AppData\Local\mbam
2022-07-31 08:02 - 2022-07-31 08:07 - 000000000 ____D C:\AdwCleaner
2022-07-31 07:58 - 2022-07-31 07:58 - 008551608 _____ (Malwarebytes) C:\Users\GUY\Desktop\adwcleaner_8.3.2.exe
2022-07-30 21:08 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Desktop\MBSetup.exe
2022-07-30 21:08 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Desktop\MBSetup (1).exe
2022-07-30 21:06 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup.exe
2022-07-30 21:06 - 2022-07-30 21:06 - 002556344 _____ (Malwarebytes) C:\Users\GUY\Downloads\MBSetup (1).exe
2022-07-30 18:05 - 2022-07-30 18:05 - 000000880 _____ C:\Users\GUY\Desktop\ZHPCleaner.lnk
2022-07-30 18:03 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPCleaner.exe
2022-07-30 18:02 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPCleaner.exe
2022-07-30 17:53 - 2022-07-30 17:53 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2022-07-30 11:42 - 2022-07-30 11:42 - 001036172 _____ C:\Users\GUY\Downloads\Wub (2).zip
2022-07-30 11:40 - 2022-07-30 11:43 - 000000142 _____ C:\Users\GUY\Downloads\Wub (1).zip
2022-07-29 20:00 - 2022-08-01 08:42 - 000000000 ____D C:\FRST
2022-07-29 19:56 - 2022-07-31 16:18 - 002370048 _____ (Farbar) C:\Users\GUY\Desktop\FRST64.exe
2022-07-29 09:04 - 2022-07-29 09:04 - 000000000 ____D C:\Users\GUY\Documents\Nouveau dossier
2022-07-29 08:52 - 2022-07-29 08:52 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\ZHPSuite.exe
2022-07-29 08:32 - 2022-08-01 08:21 - 000000000 ____D C:\Users\GUY\AppData\Roaming\ZHP
2022-07-29 08:32 - 2022-07-31 15:28 - 000000870 _____ C:\Users\GUY\Desktop\ZHPSuite.lnk
2022-07-29 08:32 - 2022-07-30 18:05 - 000000000 ____D C:\Users\GUY\AppData\Local\ZHP
2022-07-29 08:32 - 2022-07-29 08:32 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPSuite (2).exe
2022-07-19 07:05 - 2022-07-19 07:05 - 000000000 ____D C:\Users\GUY\Downloads\Wub
2022-07-19 07:04 - 2022-07-19 07:04 - 001036134 _____ C:\Users\GUY\Downloads\Wub.zip
2022-07-18 06:41 - 2022-07-18 06:41 - 000693248 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2022-07-18 06:41 - 2022-07-18 06:41 - 000470528 _____ (curl, hxxps://curl.se/) C:\WINDOWS\SysWOW64\curl.exe
2022-07-18 06:41 - 2022-07-18 06:41 - 000152064 _____ C:\WINDOWS\system32\EsclProtocol.dll
2022-07-18 06:41 - 2022-07-18 06:41 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mode.com
2022-07-18 06:41 - 2022-07-18 06:41 - 000018944 _____ C:\WINDOWS\SysWOW64\WsdProviderUtil.dll
2022-07-18 06:41 - 2022-07-18 06:41 - 000017920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tree.com
2022-07-18 06:41 - 2022-07-18 06:41 - 000012800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\chcp.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000530944 _____ (curl, hxxps://curl.se/) C:\WINDOWS\system32\curl.exe
2022-07-18 06:40 - 2022-07-18 06:40 - 000270848 _____ C:\WINDOWS\system32\EsclScan.dll
2022-07-18 06:40 - 2022-07-18 06:40 - 000061952 _____ C:\WINDOWS\system32\printticketvalidation.dll
2022-07-18 06:40 - 2022-07-18 06:40 - 000057344 _____ C:\WINDOWS\system32\APMonUI.dll
2022-07-18 06:40 - 2022-07-18 06:40 - 000033280 _____ (Microsoft Corporation) C:\WINDOWS\system32\mode.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000020992 _____ (Microsoft Corporation) C:\WINDOWS\system32\tree.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000014848 _____ (Microsoft Corporation) C:\WINDOWS\system32\chcp.com
2022-07-18 06:40 - 2022-07-18 06:40 - 000011811 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-07-18 06:39 - 2022-07-18 06:39 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-07-18 06:39 - 2022-07-18 06:39 - 000640512 _____ C:\WINDOWS\system32\SettingSyncDownloadHelper.dll
2022-07-18 06:39 - 2022-07-18 06:39 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-07-18 06:39 - 2022-07-18 06:39 - 000024576 _____ C:\WINDOWS\system32\WsdProviderUtil.dll
2022-07-17 19:32 - 2022-07-17 19:32 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite (1).exe
2022-07-17 19:26 - 2022-07-17 19:26 - 000000000 ___HD C:\$WinREAgent
2022-07-17 19:24 - 2022-07-17 19:24 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite.exe
2022-07-14 19:17 - 2022-07-14 19:17 - 000000000 ____D C:\Users\GUY\Documents\Modèles Office personnalisés
2022-07-14 07:29 - 2022-07-26 18:51 - 000216885 _____ C:\Users\GUY\Documents\Duplicate Cleaner log.txt
2022-07-14 07:28 - 2022-07-14 07:28 - 006239168 _____ (DigitalVolcano Software Ltd) C:\Users\GUY\Downloads\DuplicateCleanerFree4_setup.exe
2022-07-10 06:00 - 2022-07-10 06:00 - 000004608 _____ C:\Users\GUY\Downloads\export_10_07_2022_06_00_18.xls
2022-07-09 21:32 - 2022-07-09 21:32 - 063197344 _____ (Molotov) C:\Users\GUY\Downloads\MolotovSetup-4.5.0 (1).exe
2022-07-09 21:27 - 2022-07-09 21:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2022-07-09 21:27 - 2022-07-09 21:27 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2022-07-06 08:54 - 2022-07-29 08:29 - 000000356 _____ C:\WINDOWS\Tasks\HPCeeScheduleForGUY.job
2022-07-06 08:54 - 2022-07-27 21:17 - 000002790 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForGUY
2022-07-06 08:20 - 2022-07-30 20:57 - 000002395 _____ C:\Users\GUY\Desktop\Personne 1 - Chrome.lnk
2022-07-06 07:25 - 2022-07-06 07:36 - 002877440 _____ C:\Users\GUY\Desktop\comptes analytiques 2020 JUILLET.xls
2022-07-06 07:12 - 2022-07-06 07:12 - 000023040 _____ C:\Users\GUY\Downloads\E1877824.xls
2022-07-05 22:15 - 2022-07-05 22:15 - 000000000 ____D C:\Users\GUY\AppData\LocalLow\Temp
2022-07-05 22:14 - 2022-07-18 08:02 - 000002365 _____ C:\Users\GUY\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2022-07-05 15:00 - 2022-07-05 15:00 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2022-07-05 15:00 - 2022-07-05 15:00 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2022-07-05 14:59 - 2022-07-05 14:59 - 000002479 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002479 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002452 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000002402 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2022-07-05 14:59 - 2022-07-05 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2022-07-05 14:58 - 2022-07-20 06:25 - 000000000 ____D C:\Program Files\Microsoft Office
2022-07-05 14:58 - 2022-07-05 14:58 - 000000000 ____D C:\Program Files\Microsoft Office 15
2022-07-05 08:14 - 2022-07-05 10:50 - 345280512 _____ C:\Users\GUY\Downloads\ProPlus2021Retail (1).img
2022-07-05 08:08 - 2022-07-05 08:08 - 000000000 ____D C:\ProgramData\Piriform
2022-07-05 06:47 - 2022-07-05 22:14 - 000000000 ____D C:\Users\GUY\AppData\Local\SquirrelTemp
2022-07-05 06:47 - 2022-07-05 06:47 - 000000000 ____D C:\Users\GUY\AppData\Roaming\Teams
2022-07-04 15:14 - 2022-07-04 16:47 - 345280512 _____ C:\Users\GUY\Downloads\ProPlus2021Retail.img
2022-07-04 06:20 - 2022-07-04 06:20 - 000012969 _____ C:\Users\GUY\Downloads\Synthèse comptes Coleg et sections 2022.xlsx
2022-07-04 06:20 - 2022-07-04 06:20 - 000012969 _____ C:\Users\GUY\Downloads\Synthèse comptes Coleg et sections 2022 (1).xlsx
2022-07-04 06:19 - 2022-07-04 06:19 - 000013274 _____ C:\Users\GUY\Downloads\Etat financier au 30-06-2022.xlsx
2022-07-03 07:17 - 2022-07-03 07:19 - 127691824 _____ (AOMEI International Network Limited. ) C:\Users\GUY\Downloads\AOMEIBackupperStd.exe
2022-07-02 06:34 - 2022-07-02 06:34 - 000012800 _____ C:\Users\GUY\Downloads\E1837824.xls
2022-06-30 18:18 - 2022-07-08 07:11 - 000014432 _____ C:\Users\GUY\Desktop\CALENDRIER SCULPTURE 2022 2023.xlsx
2022-06-30 18:18 - 2022-07-04 21:14 - 000000000 ____D C:\Users\GUY\Desktop\sculpture enfants
2022-06-30 18:18 - 2022-07-04 19:29 - 000000000 ____D C:\Users\GUY\Desktop\whatsapp
2022-06-30 18:18 - 2022-06-30 18:18 - 000000000 ____D C:\Users\GUY\Desktop\SAUVEGARDE GENEA ADN
2022-06-30 18:18 - 2022-06-29 09:09 - 000046740 _____ C:\Users\GUY\Desktop\Copie de compte journalier coleg.xlsx
2022-06-30 18:18 - 2022-06-26 14:23 - 000250888 _____ C:\Users\GUY\Desktop\correction notre histoire.pdf
2022-06-30 18:18 - 2022-06-09 07:00 - 002201600 _____ C:\Users\GUY\Desktop\WhyNotWin11.exe
2022-06-30 18:18 - 2022-06-08 16:42 - 001667978 _____ C:\Users\GUY\Desktop\127052-notice camera ext.pdf
2022-06-30 18:18 - 2022-05-31 20:35 - 000021291 _____ C:\Users\GUY\Desktop\frais km.xlsx
2022-06-30 18:18 - 2022-05-31 13:33 - 000175869 _____ C:\Users\GUY\Desktop\Nael_BelmokhtarPagani_CV (2).PDF
2022-06-30 18:18 - 2022-05-18 17:03 - 000022966 _____ C:\Users\GUY\Desktop\LISTE PRESENT AG.xlsx
2022-06-30 18:18 - 2022-03-30 21:43 - 000012383 _____ C:\Users\GUY\Desktop\dates.xlsx
2022-06-30 18:18 - 2022-03-30 18:17 - 000023431 _____ C:\Users\GUY\Desktop\sortie vtt.xlsx
2022-06-30 18:18 - 2022-02-18 21:47 - 000016009 _____ C:\Users\GUY\Desktop\GENEA DAREAU REDUITE.xlsx
2022-06-30 18:18 - 2022-01-25 09:37 - 002750976 _____ C:\Users\GUY\Desktop\comptes analytiques 01.01.2022.xls
2022-06-30 18:18 - 2021-09-30 08:06 - 000010888 _____ C:\Users\GUY\Desktop\liste mail vtt coleg.xlsx
2022-06-30 18:18 - 2021-06-04 18:31 - 000001756 _____ C:\Users\GUY\Desktop\Heredis17 - Raccourci.lnk
2022-06-30 18:18 - 2020-04-04 18:22 - 000035704 _____ C:\Users\GUY\Desktop\liste genea2.xlsx
2022-06-30 18:18 - 2020-03-28 19:37 - 000060317 _____ C:\Users\GUY\Desktop\liste nom genea.xlsx
2022-06-30 18:14 - 2022-07-04 21:15 - 000000000 ____D C:\Users\GUY\Desktop\photos samsung au 06 04 2022
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\Recovered
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\mes recettes
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\luc
2022-06-30 18:14 - 2022-06-30 18:14 - 000000000 ____D C:\Users\GUY\Desktop\le-robert-correcteur-PC
2022-06-30 18:08 - 2022-06-30 18:09 - 000000000 ____D C:\Users\GUY\Desktop\GARMIN
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ___RD C:\Users\GUY\Desktop\COLEG
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\FRANCAIS GENEA
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\dossier notre histoire
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\cours nael
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\circuit vtt
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\cesu pagani
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\banque
2022-06-30 18:08 - 2022-06-30 18:08 - 000000000 ____D C:\Users\GUY\Desktop\adn geneanet
2022-06-30 18:05 - 2022-06-30 18:05 - 000000000 ____D C:\bureau2
2022-06-29 11:59 - 2022-06-29 11:59 - 000101032 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\mrcbt.sys
2022-06-29 11:59 - 2022-06-29 11:59 - 000075160 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\mrigflt.sys
2022-06-29 11:54 - 2022-06-29 11:54 - 000000000 ____D C:\Users\GUY\Downloads\Macrium
2022-06-29 11:53 - 2022-06-29 11:53 - 005635816 _____ (Paramount Software UK Ltd) C:\Users\GUY\Downloads\ReflectDLHT.exe
2022-06-29 07:59 - 2022-08-01 07:22 - 000000000 ____D C:\Program Files\CCleaner
2022-06-29 07:59 - 2022-07-29 19:54 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-06-29 07:59 - 2022-07-27 21:17 - 000002250 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - GUY
2022-06-29 07:59 - 2022-06-29 07:59 - 000000870 _____ C:\Users\Public\Desktop\CCleaner.lnk
2022-06-29 07:58 - 2022-06-29 07:59 - 049618184 _____ (Piriform Software Ltd) C:\Users\GUY\Downloads\ccsetup601.exe
2022-06-23 21:14 - 2022-06-23 21:17 - 000000000 ____D C:\Users\GUY\Downloads\captvty-2.9.8.3
2022-06-23 21:11 - 2022-06-23 21:12 - 071702030 _____ C:\Users\GUY\Downloads\captvty-2.9.8.3.zip
2022-06-23 21:11 - 2022-06-23 21:11 - 000000000 ____D C:\Users\GUY\Downloads\captvty-2.9.3.2
2022-06-23 21:09 - 2022-06-23 21:10 - 071685365 _____ C:\Users\GUY\Downloads\captvty-2.9.3.2.zip
2022-06-23 08:25 - 2022-06-23 08:25 - 000030353 _____ C:\Users\GUY\Downloads\labbeville.gpx
2022-06-17 12:09 - 2022-06-17 12:09 - 002002428 _____ C:\Users\GUY\Downloads\ordonance.pdf
2022-06-17 10:46 - 2022-07-30 17:54 - 000000000 ____D C:\Program Files (x86)\Avanquest
2022-06-17 10:46 - 2022-06-17 10:46 - 002530992 _____ (Avanquest) C:\Users\GUY\Downloads\Expert_PDF.exe
2022-06-17 10:41 - 2022-06-17 10:41 - 002032065 _____ C:\Users\GUY\Downloads\Certificat (dont arrêts de travail).pdf
2022-06-17 10:41 - 2022-06-17 10:41 - 002029328 _____ C:\Users\GUY\Downloads\Ordonnance de soins paramédicaux.pdf
2022-06-17 10:40 - 2022-06-17 10:40 - 002002020 _____ C:\Users\GUY\Downloads\Ordonnance de médicaments.pdf
2022-06-17 06:41 - 2022-06-17 06:41 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-06-17 06:41 - 2022-06-17 06:41 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-06-17 06:40 - 2022-06-17 06:40 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-17 06:40 - 2022-06-17 06:40 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-17 06:40 - 2022-06-17 06:40 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-15 18:01 - 2022-07-27 21:17 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000003176 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002968 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002956 _____ C:\WINDOWS\system32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002838 _____ C:\WINDOWS\system32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002786 _____ C:\WINDOWS\system32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-15 18:01 - 2022-07-27 21:17 - 000002500 _____ C:\WINDOWS\system32\Tasks\HPEA3JOBS
2022-06-15 08:51 - 2022-06-15 08:51 - 000000000 ___HD C:\ProgramData\CanonIJScan
2022-06-14 15:12 - 2022-06-14 15:12 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2022-06-14 06:24 - 2022-06-14 06:24 - 000040960 _____ C:\Users\GUY\Downloads\E1657824.xls
2022-06-13 18:33 - 2022-07-27 21:17 - 000002716 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-06-13 18:33 - 2022-06-13 18:33 - 000000000 ___RD C:\Users\Default\OneDrive
2022-06-13 18:32 - 2022-07-24 07:47 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-06-13 18:32 - 2022-07-18 20:53 - 000002177 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-13 18:14 - 2022-06-13 18:14 - 000044544 _____ C:\Users\GUY\Downloads\EXEMPLE 2022 2023 planning-excel-calendriergratuit.fr.xls
2022-06-13 17:49 - 2022-06-13 17:49 - 007970044 _____ C:\Users\GUY\Downloads\Hymne Breton.mp4
2022-06-09 06:58 - 2022-06-09 06:58 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11 (1).exe
2022-06-09 06:57 - 2022-06-09 06:57 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11.exe
2022-06-09 06:57 - 2022-06-09 06:57 - 000000000 ____D C:\Users\GUY\AppData\Local\WhyNotWin11
2022-06-09 06:50 - 2022-06-29 08:01 - 000000000 ____D C:\Users\GUY\AppData\Local\CrashDumps
2022-05-29 08:22 - 2022-05-29 08:22 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2022-05-29 08:16 - 2022-05-29 08:16 - 000000000 ____D C:\Users\GUY\AppData\Local\CEF
2022-05-29 08:14 - 2022-07-29 08:29 - 000000000 ____D C:\ProgramData\Avast Software
2022-05-29 08:14 - 2022-05-29 08:14 - 000267072 _____ (AVAST Software) C:\Users\GUY\Downloads\avast_premium_security_setup_online (1).exe
2022-05-29 08:13 - 2022-05-29 08:14 - 000267072 _____ (AVAST Software) C:\Users\GUY\Downloads\avast_premium_security_setup_online.exe
2022-05-27 11:16 - 2022-05-27 11:16 - 000188928 _____ C:\WINDOWS\system32\uwfcfgmgmt.dll
2022-05-27 11:15 - 2022-05-27 11:15 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-22 21:03 - 2022-05-22 21:03 - 000000000 ___HD C:\OneDriveTemp
2022-05-22 21:02 - 2022-05-22 21:02 - 000000000 ____D C:\Users\GUY\AppData\Local\OneDrive
2022-05-22 21:02 - 2022-01-24 15:37 - 002749440 _____ C:\Users\GUY\Desktop\comptes analytiques 01.01.2022 - Copie.xls
2022-05-11 09:20 - 2022-05-11 09:20 - 000143937 _____ C:\Users\GUY\Downloads\cerfa_14952-03.pdf
2022-05-09 19:17 - 2022-05-09 19:17 - 000007361 _____ C:\Users\GUY\Documents\recapcomptableannuel.pdf
2022-05-09 19:12 - 2022-05-09 19:12 - 000000000 ___HD C:\ProgramData\CanonBJ
2022-05-09 19:11 - 2017-03-13 05:00 - 001302016 _____ (CANON INC.) C:\WINDOWS\system32\CNMLMDR.DLL
2022-05-09 19:11 - 2017-02-27 09:14 - 000379392 _____ (CANON INC.) C:\WINDOWS\system32\CNC_DRL.dll
2022-05-09 19:11 - 2016-10-31 17:44 - 000089600 _____ C:\WINDOWS\system32\CNC1827D.TBL
2022-05-09 19:11 - 2016-10-26 11:32 - 000559616 _____ (CANON INC.) C:\WINDOWS\system32\CNC_DRC.dll
2022-05-09 19:11 - 2016-10-26 11:32 - 000273408 _____ (CANON INC.) C:\WINDOWS\system32\CNC_DRI.dll
2022-05-09 19:11 - 2008-08-25 18:02 - 000017920 _____ (CANON INC.) C:\WINDOWS\system32\CNHMCA6.dll
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2022-08-01 08:44 - 2022-03-06 21:26 - 000000000 ____D C:\ProgramData\NVIDIA
2022-08-01 08:40 - 2022-03-06 21:17 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-08-01 08:40 - 2022-03-06 19:58 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-08-01 08:36 - 2022-03-15 08:40 - 000000000 ____D C:\Program Files (x86)\Google
2022-08-01 07:22 - 2017-09-02 01:57 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2022-08-01 07:19 - 2021-12-08 05:01 - 000000000 __SHD C:\Users\GUY\IntelGraphicsProfiles
2022-07-31 15:25 - 2022-03-06 19:58 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-07-31 09:11 - 2022-03-06 22:36 - 001841424 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-07-31 09:11 - 2022-03-06 20:15 - 000794488 _____ C:\WINDOWS\system32\perfh00C.dat
2022-07-31 09:11 - 2022-03-06 20:15 - 000150602 _____ C:\WINDOWS\system32\perfc00C.dat
2022-07-31 09:11 - 2022-03-06 19:50 - 000000000 ____D C:\WINDOWS\INF
2022-07-31 08:10 - 2022-03-06 21:21 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-07-31 08:10 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\ServiceState
2022-07-31 08:10 - 2021-12-07 23:03 - 000008192 ___SH C:\DumpStack.log.tmp
2022-07-31 08:09 - 2022-03-06 19:24 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-07-31 08:08 - 2022-03-07 22:19 - 000000000 ____D C:\Users\GUY\AppData\Local\HP
2022-07-31 08:08 - 2022-03-06 22:17 - 000000000 ____D C:\Users\GUY
2022-07-31 08:08 - 2017-09-02 01:57 - 000000000 ____D C:\ProgramData\HP
2022-07-31 08:08 - 2017-09-02 01:55 - 000000000 ____D C:\Program Files (x86)\HP
2022-07-31 08:08 - 2017-08-22 04:02 - 000000000 ___HD C:\hp
2022-07-31 08:07 - 2022-03-07 22:27 - 000000000 ____D C:\Users\GUY\AppData\Roaming\Hewlett-Packard
2022-07-31 08:07 - 2022-03-07 22:19 - 000000000 ____D C:\Users\GUY\AppData\Local\Hewlett-Packard
2022-07-31 08:07 - 2017-09-02 01:56 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2022-07-30 17:56 - 2022-03-07 22:23 - 000000000 ____D C:\ProgramData\Wondershare
2022-07-30 17:56 - 2022-03-07 22:23 - 000000000 ____D C:\Program Files\Wondershare
2022-07-30 17:55 - 2017-11-08 21:57 - 000000000 ____D C:\ProgramData\mcafee
2022-07-30 17:54 - 2022-03-07 00:29 - 000000000 ____D C:\Users\GUY\AppData\Roaming\WildTangent
2022-07-30 17:54 - 2017-11-08 21:54 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2022-07-30 17:51 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-07-30 17:50 - 2022-03-06 19:58 - 000000000 ___HD C:\Program Files\WindowsApps
2022-07-30 11:43 - 2022-01-28 13:58 - 000946376 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub_x64.exe
2022-07-30 11:43 - 2022-01-28 13:58 - 000794752 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub.exe
2022-07-30 11:43 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2022-07-30 11:37 - 2021-12-07 23:07 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-07-30 11:37 - 2021-12-07 23:07 - 000002287 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-07-29 08:30 - 2022-03-06 21:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-07-27 21:17 - 2022-03-15 08:40 - 000003594 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{2A612D6F-CEAB-4209-B31A-4687F3AB3241}
2022-07-27 21:17 - 2022-03-15 08:40 - 000003370 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{BC6CFF44-1F13-4AEA-87AC-B52A0F63B978}
2022-07-27 21:17 - 2022-03-07 00:41 - 000003070 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3826966309-3357619277-2409006239-1001
2022-07-27 21:17 - 2022-03-06 21:21 - 000003618 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-07-27 21:17 - 2022-03-06 21:21 - 000003394 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-07-24 07:44 - 2021-12-13 17:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
2022-07-21 14:45 - 2022-03-07 22:22 - 000000000 ____D C:\Users\GUY\AppData\Local\D3DSCache
2022-07-20 06:36 - 2022-03-15 08:41 - 000002252 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-07-19 07:06 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2022-07-18 07:35 - 2022-03-06 21:17 - 000519152 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ___RD C:\WINDOWS\PrintDialog
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\SystemResources
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\setup
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\ShellExperiences
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\ShellComponents
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-07-18 07:34 - 2022-03-06 19:58 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-07-18 06:53 - 2022-03-06 19:28 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-07-18 06:39 - 2022-03-06 21:23 - 003010560 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-07-17 19:25 - 2022-03-07 07:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-07-17 19:20 - 2022-03-07 07:51 - 146546848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-07-10 06:00 - 2022-03-07 00:30 - 000000000 ____D C:\Users\GUY\AppData\Local\Packages
2022-07-09 22:41 - 2022-04-09 16:25 - 000000000 ____D C:\Users\GUY\AppData\Roaming\molotov
2022-07-05 16:15 - 2022-03-07 00:29 - 000000000 ____D C:\Users\GUY\AppData\Local\ConnectedDevicesPlatform
2022-07-05 16:14 - 2017-03-18 05:53 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-07-05 15:00 - 2022-03-06 19:58 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2022-07-04 21:15 - 2021-12-08 16:02 - 000000000 ____D C:\Users\GUY\Desktop\photos tel au 24 12 2020
2022-07-04 21:14 - 2022-03-07 02:19 - 000000000 ____D C:\Users\GUY\AppData\Local\PlaceholderTileLogoFolder
2022-07-04 21:14 - 2021-12-08 16:02 - 000000000 ____D C:\Users\GUY\Desktop\photo pour mon histoire
==================== Fichiers à la racine de certains dossiers ========
2022-07-29 08:52 - 2022-07-29 08:52 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\ZHPSuite.exe
==================== SigCheckExt =========================
2017-11-08 21:40 - 2017-08-11 07:46 - 001291912 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 000690504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvfatbinaryLoader.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 023084816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 012133296 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvptxJitCompiler.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 001008816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 000578240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 018812888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2017-11-08 21:40 - 2017-08-11 07:46 - 009983688 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll
2022-07-29 08:52 - 2022-07-29 08:52 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\ZHPSuite.exe
2022-07-29 19:56 - 2022-07-31 16:18 - 002370048 _____ (Farbar) C:\Users\GUY\Desktop\FRST64.exe
2022-06-30 18:18 - 2022-06-09 07:00 - 002201600 _____ C:\Users\GUY\Desktop\WhyNotWin11.exe
2022-01-28 13:58 - 2022-07-30 11:43 - 000794752 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub.exe
2022-01-28 13:58 - 2022-07-30 11:43 - 000946376 _____ (www.sordum.org) C:\Users\GUY\Desktop\Wub_x64.exe
2022-07-30 18:03 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPCleaner.exe
2022-07-29 08:32 - 2022-07-29 08:32 - 003489008 _____ (Nicolas Coolman) C:\Users\GUY\Desktop\ZHPSuite (2).exe
2022-06-09 06:58 - 2022-06-09 06:58 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11 (1).exe
2022-06-09 06:57 - 2022-06-09 06:57 - 002201600 _____ C:\Users\GUY\Downloads\WhyNotWin11.exe
2022-07-30 18:02 - 2022-07-30 18:03 - 003302640 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPCleaner.exe
2022-07-17 19:32 - 2022-07-17 19:32 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite (1).exe
2022-07-17 19:24 - 2022-07-17 19:24 - 003487984 _____ (Nicolas Coolman) C:\Users\GUY\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{bf65cfdb-5c4d-11ec-994a-9cda3eef37d7}
{b5d4e059-c50b-11e7-a919-48ba4e4d097a}
timeout 0
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {615697f8-9d7f-11ec-8a30-afe9693cf1d2}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {b5d4e059-c50b-11e7-a919-48ba4e4d097a}
description EFI USB Device
Application logicielle (101fffff)
--------------------------------
identificateur {bf65cfdb-5c4d-11ec-994a-9cda3eef37d7}
description Internal Hard Disk or Solid State Disk
Chargeur de d‚marrage Windows
-----------------------------
identificateur {300b3d27-e573-11ea-99fd-48ba4e4d097a}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{300b3d28-e573-11ea-99fd-48ba4e4d097a}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
displaymessageoverride PushButtonReset
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{300b3d28-e573-11ea-99fd-48ba4e4d097a}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 10
locale fr-FR
inherit {bootloadersettings}
recoverysequence {300b3d27-e573-11ea-99fd-48ba4e4d097a}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {615697f8-9d7f-11ec-8a30-afe9693cf1d2}
nx OptIn
bootmenupolicy Standard
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {615697f8-9d7f-11ec-8a30-afe9693cf1d2}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {300b3d27-e573-11ea-99fd-48ba4e4d097a}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
Options de p‚riph‚rique
-----------------------
identificateur {300b3d28-e573-11ea-99fd-48ba4e4d097a}
description Windows Recovery
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================