Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-03-2023
Exécuté par 33603 (administrateur) sur ORDI-DU-BG (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X513EAN_S513EA) (06-03-2023 10:34:25)
Exécuté depuis C:\Users\33603\Desktop
Profils chargés: 33603
Plate-forme: Microsoft Windows 11 Famille Version 22H2 22621.1265 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOSD.exe
(ASUSTeK COMPUTER INC.) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy\ModuleDll\HWSettings\AsusOLEDShifter.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.3400.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\110.0.1587.63\msedgewebview2.exe <6>
(Deezer SA) C:\Program Files\WindowsApps\Deezer.62021768415AF_5.30.520.0_x86__q7m17pa7q8kj0\app\Deezer.exe <7>
(DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManager.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxEMN.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <48>
(Reason Cybersecurity Inc. -> Reason Cybersecurity Ltd.) C:\Program Files\ReasonLabs\Common\Client\v1.0.7\rsAppUI.exe <5>
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkRemote\AsusLinkRemote.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkNear\AsusLinkNear.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSystemAnalysis.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_6bfff1da475a22be\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e32ced29f236e322\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_9.74.15001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_9.74.15001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\Sgrm\SgrmBroker.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23012.167.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_be03f2dca68bf962\RtkAudUService64.exe <3>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2022-09-12] (Adobe Inc. -> )
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-05-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-05-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [EpicGamesLauncher] => C:\Téléchargements Internet\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32754128 2022-12-19] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [Discord] => C:\Users\33603\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4234600 2022-08-20] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [com.messenger] => "C:\Users\33603\AppData\Local\Programs\Messenger\Messenger.exe" messenger://openAtLogin (Pas de fichier)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [9250224 2022-09-16] (Lavasoft Software Canada Inc. -> Lavasoft)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [BakkesMod] => C:\Program Files\BakkesMod\BakkesMod.exe [15841792 2022-01-26] () [Fichier non signé]
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [MicrosoftEdgeAutoLaunch_1241707F67DA0C641CCD9DAFA148D161] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4243408 2023-03-02] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\110.0.5481.178\Installer\chrmstp.exe [2023-02-28] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0600DD45-FAF2-4131-A006-0B17509B9F78} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc
Task: {0A0D6762-0B22-41A9-A39E-9A6BD9923B80} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {0BC26CEB-7A98-4E29-9F6E-BF07031ABE37} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusUpdateChecker.exe [788104 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {1688BC1E-91DE-4843-8B1A-21843581956D} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusHotkey.exe [263784 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {1AC05F00-EA26-49C7-96A0-D13C0764A7FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {21D363FF-7E71-4542-8B3D-E1C4F1613561} - System32\Tasks\Opera scheduled Autoupdate 1663341212 => C:\Users\33603\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {41360349-C591-49BE-89EB-77ED0E605D15} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26294704 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {68F9F985-A16E-4339-93B2-983A72C08E60} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {694C54FA-09D6-4B43-BB36-37C8106F1EBC} - System32\Tasks\GoogleUpdateTaskMachineUA{8EA813B5-3F21-421C-80FD-9F0B5FC09A1D} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-15] (Google LLC -> Google LLC)
Task: {8DDAE245-806A-44EB-9F9E-CA9497D6456F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {9B38A408-E9E6-47FA-B7B4-601DF8D07CA7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7BBBAE9-8EC7-4B61-BCFE-1570960443F3} - System32\Tasks\GoogleUpdateTaskMachineCore{EB3EA06D-838F-43AC-96E6-BEB6238852A7} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-15] (Google LLC -> Google LLC)
Task: {A941D525-3C07-411F-AA9D-BF66A3C6DAC5} - System32\Tasks\Meta\Messenger-SL-Helper-S-1-5-21-1246909547-4082115136-1416965431-1001 => C:\Users\33603\AppData\Local\Programs\Messenger\MessengerHelper.exe [2054904 2022-11-10] (Facebook, Inc. -> Meta Platforms, Inc.)
Task: {B59D11A8-6A33-4900-92C0-D0980CBC2925} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_be03f2dca68bf962\RtkAudUService64.exe [3498472 2022-05-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C3C3CDD7-11C2-429F-91FC-358AEAD4D84F} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSystemAnalysis.exe [3606624 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {C856BEE8-4768-4E93-A150-5EA9C29C8166} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168840 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {D414A255-CA7E-4230-A457-2EF7954A05C6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4AF2B0A-D77F-4E1E-9961-2A5397B36FD5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26294704 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {DF0766DC-10C4-41C1-B323-CCC1A9550F2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Pas de fichier)
Task: {EF70826E-31A3-44E3-80DE-57E5F83A4160} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{48867d47-2131-44af-b7ce-1f002d71d39f}: [DhcpNameServer] 10.66.40.5
Tcpip\..\Interfaces\{824a5d7d-8d91-40df-afc6-2ce12a41492d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{ea1319eb-94f6-46bc-80d0-ea0f76860276}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Profile: C:\Users\33603\AppData\Local\Microsoft\Edge\User Data\Default [2023-02-10]
Edge StartupUrls: Default -> "hxxps://www.searchgoose.com/?path=chrome/newtab&u=a524dc6721c36d1f&subid=11118&channel=17"
Edge DefaultSearchURL: Default -> hxxps://www.search-fine.com/search?subid=11118&u=a524dc6721c36d1f&channel=17&keyword={searchTerms}
Edge DefaultSearchKeyword: Default -> google
Edge DefaultNewTabURL: Default -> hxxps://www.searchgoose.com/?path=chrome/newtab&u=a524dc6721c36d1f&subid=11118&channel=17
Edge DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}&language={language}&PC=U316
FireFox:
========
FF DefaultProfile: ukjj2nhx.default
FF ProfilePath: C:\Users\33603\AppData\Roaming\Zotero\Zotero\Profiles\ukjj2nhx.default [2023-02-23]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-12-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-12-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1246909547-4082115136-1416965431-1001: @3-update.avastbrowser.com/Avast Browser;version=3 -> C:\Users\33603\AppData\Local\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1246909547-4082115136-1416965431-1001: @3-update.avastbrowser.com/Avast Browser;version=9 -> C:\Users\33603\AppData\Local\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
Chrome:
=======
CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default [2022-09-17]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-09-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-17]
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-08-23]
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3 [2023-03-06]
CHR Notifications: Profile 3 -> hxxps://meet.google.com; hxxps://www.backmarket.fr
CHR HomePage: Profile 3 -> hxxps://?
CHR StartupUrls: Profile 3 -> "hxxps://?"
CHR Extension: (wanteeed) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\emnoomldgleagdjapdeckpmebokijail [2023-03-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-02-14]
CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2022-10-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-20]
CHR Extension: (Netflix Party is now Teleparty) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2023-02-28]
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\System Profile [2022-09-17]
CHR DefaultSearchKeyword: System Profile -> Google
CHR DefaultNewTabURL: System Profile -> hxxps://www.searchgoose.com/?path=chrome/newtab&u=a524dc6721c36d1f&subid=11118&channel=17
CHR DefaultSuggestURL: System Profile -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}&language={language}&PC=U316
Opera:
=======
OPR Profile: C:\Users\33603\AppData\Roaming\Opera Software\Opera Stable [2022-09-17]
OPR Extension: (Rich Hints Agent) - C:\Users\33603\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-09-16]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\33603\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-09-16]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\AsusAppService\AsusAppService.exe [1162376 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSLinkNear; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkNear\AsusLinkNear.exe [1320072 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 ASUSLinkRemote; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkRemote\AsusLinkRemote.exe [764504 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimization.exe [394344 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManager.exe [1113176 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSwitch\AsusSwitch.exe [635480 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSystemAnalysis.exe [3606624 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [791176 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12512256 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-09-16] (Lavasoft Software Canada Inc. -> )
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [241760 2022-04-29] (DTS, Inc. -> DTS Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [813032 2022-12-19] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029456 2022-08-28] (Epic Games Inc. -> Epic Games, Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\\AS\\IAS\\IntelAudioService.exe [532024 ] (Intel Corporation -> Intel)
S3 InventorySvc; C:\WINDOWS\system32\inventorysvc.dll [304480 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
R2 rsDNSClientSvc; C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe [585072 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsDNSResolver; C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe [10939248 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsDNSSvc; C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe [214384 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 SgrmBroker; C:\WINDOWS\system32\Sgrm\SgrmBroker.exe [414632 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TextInputManagementService; C:\WINDOWS\System32\TabSvc.dll [266240 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746728 2022-03-23] (Oracle Corporation -> Oracle Corporation)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-09-16] (Lavasoft Software Canada Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe [3191256 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe [133576 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 wuauserv; C:\WINDOWS\system32\wuauserv.dll [137600 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [565248 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AsusPTPDrv; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_314b5cb6bf57f471\AsusPTPFilter.sys [116712 2021-12-02] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSAIO.sys [46736 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusWmiAcpi.sys [45248 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2022-09-16] (Bitdefender SRL -> Bitdefender)
R2 bfs; C:\WINDOWS\system32\drivers\bfs.sys [91480 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 GenPass; C:\WINDOWS\System32\DriverStore\FileRepository\genpass.inf_amd64_bef88a423225ecdc\genpass.sys [62800 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_2546dafe2183e972\iaLPSS2_GPIO2_TGL.sys [131224 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_1308f85f1b0adf27\iaLPSS2_I2C_TGL.sys [204440 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_fc1ed3a5a1d514f2\iaLPSS2_SPI_TGL.sys [158352 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_cd8c3a141c1b1284\iaLPSS2_UART2_TGL.sys [313504 2021-07-19] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_d97909364d9908a5\IntcUSB.sys [892968 2022-06-02] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_19ceb7ce67a7cf8b\gna.sys [87200 2022-01-11] (Intel Corporation -> Intel Corporation)
R3 MpKsl81204ef7; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4FDB355E-CC6F-43B9-A7AB-6E7A9CCF0179}\MpKslDrv.sys [214280 2023-03-05] (Microsoft Windows -> Microsoft Corporation)
S0 pvscsi; C:\WINDOWS\System32\drivers\pvscsii.sys [45408 2022-05-07] (Microsoft Windows -> VMware, Inc.)
S3 RoutePolicy; C:\WINDOWS\System32\drivers\RoutePolicy.sys [98304 2022-05-07] (Microsoft Windows -> )
R3 rsDwf; C:\WINDOWS\system32\DRIVERS\rsDwf.sys [54144 2023-03-05] (Reason CyberSecurity Inc. -> Reason CyberSecurity Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [250608 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1046392 2022-03-22] (Oracle Corporation -> Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2023-02-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [473336 2023-02-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99576 2023-02-08] (Microsoft Windows -> Microsoft Corporation)
R2 wtd; C:\WINDOWS\System32\drivers\wtd.sys [118784 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-03-06 10:34 - 2023-03-06 10:34 - 000030726 _____ C:\Users\33603\Desktop\FRST.txt
2023-03-06 10:34 - 2023-03-06 10:34 - 000000000 ____D C:\FRST
2023-03-06 10:32 - 2023-03-06 10:32 - 002378752 _____ (Farbar) C:\Users\33603\Desktop\FRST64.exe
2023-03-06 10:31 - 2023-03-06 10:31 - 002080768 _____ (Farbar) C:\Users\33603\Desktop\FRST.exe
2023-03-04 08:29 - 2023-03-04 08:29 - 000288811 _____ C:\Users\33603\Downloads\TD-AlcoolAlcènes-SUJET.pdf
2023-02-28 09:45 - 2023-02-28 09:45 - 000810954 _____ C:\WINDOWS\system32\perfh00C.dat
2023-02-28 09:45 - 2023-02-28 09:45 - 000157390 _____ C:\WINDOWS\system32\perfc00C.dat
2023-02-23 09:22 - 2023-02-23 09:34 - 000000000 ____D C:\Users\33603\Zotero
2023-02-23 09:22 - 2023-02-23 09:31 - 000000000 ____D C:\Users\33603\AppData\Local\Zotero
2023-02-23 09:22 - 2023-02-23 09:22 - 000000000 ____D C:\Users\33603\AppData\Roaming\Zotero
2023-02-23 09:22 - 2023-02-23 09:22 - 000000000 ____D C:\Users\33603\AppData\Roaming\Mozilla
2023-02-23 09:21 - 2023-02-23 09:21 - 051466408 _____ (Mozilla) C:\Users\33603\Desktop\Zotero-6.0.22_setup.exe
2023-02-23 08:29 - 2023-02-23 08:29 - 002557941 _____ C:\Users\33603\Desktop\3_03 CM Illus recherches biblio .pdf
2023-02-22 22:36 - 2023-02-22 22:36 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2023-02-22 22:35 - 2023-02-22 22:35 - 000000020 ___SH C:\Users\33603\ntuser.ini
2023-02-22 22:33 - 2023-03-06 09:36 - 000003752 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474
2023-02-22 22:33 - 2023-03-02 20:15 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-02-22 22:33 - 2023-03-02 20:15 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-02-22 22:33 - 2023-02-28 09:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-02-22 22:33 - 2023-02-27 09:46 - 000003366 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2023-02-22 22:33 - 2023-02-22 22:33 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2023-02-22 22:33 - 2023-02-22 22:33 - 000011433 _____ C:\WINDOWS\diagerr.xml
2023-02-22 22:33 - 2023-02-22 22:33 - 000003610 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1663341212
2023-02-22 22:33 - 2023-02-22 22:33 - 000003594 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{8EA813B5-3F21-421C-80FD-9F0B5FC09A1D}
2023-02-22 22:33 - 2023-02-22 22:33 - 000003370 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{EB3EA06D-838F-43AC-96E6-BEB6238852A7}
2023-02-22 22:33 - 2023-02-22 22:33 - 000003116 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2023-02-22 22:33 - 2023-02-22 22:33 - 000003034 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2023-02-22 22:33 - 2023-02-22 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Meta
2023-02-22 22:33 - 2023-02-22 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Intel
2023-02-22 22:33 - 2023-02-22 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2023-02-22 22:32 - 2023-02-28 09:45 - 001803986 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-02-22 22:31 - 2023-02-28 09:45 - 000000000 ____D C:\Users\33603
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Voisinage réseau
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Voisinage d'impression
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Modèles
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Mes documents
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Menu Démarrer
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Documents\Mes vidéos
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Documents\Mes images
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Documents\Ma musique
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\AppData\Local\Historique
2023-02-22 22:30 - 2023-03-06 05:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-02-22 22:30 - 2023-02-22 22:34 - 000000000 ____D C:\Windows.old
2023-02-22 22:30 - 2023-02-22 22:30 - 000505368 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-02-22 22:30 - 2023-02-22 22:30 - 000000000 ____D C:\WINDOWS\system32\config\BFS
2023-02-22 22:29 - 2023-02-22 22:30 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2023-02-22 22:28 - 2023-02-22 22:29 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2023-02-22 22:28 - 2023-02-22 22:28 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files\Reference Assemblies
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files\MSBuild
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files (x86)\MSBuild
2023-02-22 22:23 - 2023-02-22 22:23 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2023-02-22 22:23 - 2023-02-22 22:23 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-02-22 22:23 - 2023-02-22 22:23 - 000000000 ____D C:\WINDOWS\addins
2023-02-22 19:42 - 2023-02-22 19:42 - 000058743 _____ C:\Users\33603\Desktop\Résultat G tour 1.pdf
2023-02-22 09:06 - 2023-02-22 09:06 - 000052068 _____ C:\Users\33603\Desktop\Tuto UE3.2 n°1.pdf
2023-02-19 15:41 - 2023-02-19 15:41 - 000045170 _____ C:\Users\33603\Desktop\Tuto-n1-UE6-Feuille-1.pdf
2023-02-19 13:28 - 2023-03-05 15:56 - 000054144 _____ (Reason CyberSecurity Inc.) C:\WINDOWS\system32\Drivers\rsDwf.sys
2023-02-19 10:43 - 2023-02-19 10:43 - 000435561 _____ C:\Users\33603\Desktop\Référent de stage.pdf
2023-02-19 10:38 - 2023-02-19 10:38 - 000031165 _____ C:\Users\33603\Desktop\Tuto-n1-UE6-LAS-RR-Feuille-1.pdf
2023-02-17 20:39 - 2023-02-22 22:35 - 000000000 ___DC C:\WINDOWS\Panther
2023-02-16 15:22 - 2023-02-16 15:23 - 000369515 _____ C:\Users\33603\Desktop\Sujet Blanc LAS RR.pdf
2023-02-16 09:30 - 2023-02-16 09:30 - 000190668 _____ C:\Users\33603\Desktop\Programme journée des métiers 2022.pdf
2023-02-15 18:33 - 2023-02-15 18:33 - 000000000 ____D C:\Users\33603\AppData\Roaming\ReasonLabs
2023-02-15 18:33 - 2023-02-15 18:33 - 000000000 ____D C:\ProgramData\ReasonLabs
2023-02-15 18:32 - 2023-02-15 18:33 - 000000000 ____D C:\Program Files\ReasonLabs
2023-02-15 08:10 - 2023-02-15 08:10 - 000000000 ___HD C:\$WinREAgent
2023-02-12 22:06 - 2023-02-12 22:06 - 000034784 _____ C:\Users\33603\Desktop\Tuto n°1 UE7 - Feuille 1 (2).pdf
2023-02-11 11:46 - 2023-02-11 11:46 - 000049654 _____ C:\Users\33603\Desktop\Tuto n°1 UE7 - Feuille 1 (1).pdf
2023-02-11 10:36 - 2023-02-11 10:36 - 000035790 _____ C:\Users\33603\Desktop\Tuto UE1 n°1 (1).pdf
2023-02-11 10:36 - 2023-02-11 10:36 - 000035222 _____ C:\Users\33603\Desktop\Tuto UE6 n°1 - Feuille 1 (1).pdf
2023-02-11 10:32 - 2023-02-11 10:32 - 000036176 _____ C:\Users\33603\Desktop\Tuto UE5 n°1 LASRR - Feuille 1.pdf
2023-02-10 15:44 - 2023-02-10 15:44 - 000783261 _____ C:\Users\33603\Desktop\ORGANIGRAMME UFR SVS Janvier 2023-1.pdf
2023-02-08 10:03 - 2023-02-08 10:03 - 000035790 _____ C:\Users\33603\Desktop\Tuto UE1 n°1.pdf
2023-02-05 21:57 - 2023-02-05 21:57 - 000035222 _____ C:\Users\33603\Desktop\Tuto UE6 n°1 - Feuille 1.pdf
2023-02-01 14:26 - 2023-01-25 14:56 - 001459674 _____ C:\Users\33603\Desktop\résultats semestre 1 session 1 (surligné en jaune ).pdf
2023-01-31 22:55 - 2023-01-31 23:09 - 3017888560 _____ C:\Users\33603\Downloads\twitter-2023-01-31-1e3bffb648479a3e5dcc458fea5022eb99270dd6a0ea3ab2bc8c82a39ab8eb80.zip
2023-01-30 14:41 - 2023-01-30 14:41 - 000236542 _____ C:\Users\33603\Desktop\uvsq-las-rr-planning-des-seances-et-colles-du-second-semestre-groupe-06-898.pdf
2023-01-23 22:00 - 2023-01-23 22:00 - 000153482 _____ C:\Users\33603\Desktop\Demande d'autorisation de stage.pdf
2023-01-23 12:47 - 2023-03-04 19:57 - 000000000 ____D C:\Parcoursup
2023-01-22 23:00 - 2023-01-22 23:00 - 001339872 _____ C:\Users\33603\Desktop\résultats semestre 1 session 1 (1).pdf
2023-01-20 16:26 - 2023-01-20 16:26 - 003087901 _____ C:\Users\33603\Desktop\Réunion MSanté 18.01.2023.pdf
2023-01-20 09:55 - 2023-01-20 09:55 - 000000230 _____ C:\Users\33603\Desktop\Lancer la réunion - Zoom.url
2023-01-18 17:51 - 2023-02-22 22:31 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2023-01-16 20:58 - 2023-03-04 08:25 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-01-04 18:55 - 2023-01-04 18:57 - 000000000 ____D C:\MAP RL
2023-01-04 18:55 - 2023-01-04 18:55 - 000000000 ____D C:\Program Files\Nouveau dossier
2023-01-04 18:51 - 2023-01-04 18:51 - 008167702 _____ C:\Users\33603\Downloads\BakkesModSetup (1).zip
2023-01-04 18:51 - 2022-01-26 01:37 - 008742195 _____ (BakkesMod ) C:\Program Files\BakkesModSetup.exe
2023-01-04 18:47 - 2023-01-04 18:51 - 000000879 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BakkesMod.lnk
2023-01-04 18:47 - 2023-01-04 18:51 - 000000000 ____D C:\Program Files\BakkesMod
2023-01-04 18:47 - 2023-01-04 18:47 - 000000000 ____D C:\Users\33603\AppData\Roaming\bakkesmod
2023-01-04 18:46 - 2023-01-04 18:46 - 008167702 _____ C:\Users\33603\Downloads\BakkesModSetup.zip
2023-01-04 18:43 - 2023-01-04 18:46 - 000000022 _____ C:\Users\33603\Downloads\BakkesModInjector.zip
2022-12-19 21:36 - 2022-12-19 21:36 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2022-12-19 18:39 - 2022-12-19 18:39 - 000000000 ___SH C:\Users\Public\Shared Files
2022-12-19 18:32 - 2022-12-19 18:32 - 000000000 ____D C:\Users\33603\AppData\Local\FortniteGame
2022-12-19 18:32 - 2022-12-19 18:32 - 000000000 ____D C:\Users\33603\AppData\Local\CrashReportClient
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-03-06 10:33 - 2022-09-12 18:45 - 000000000 ____D C:\Users\Public\Documents\Adobe
2023-03-06 10:33 - 2022-09-12 18:44 - 000000000 ____D C:\Program Files\Common Files\Adobe
2023-03-06 10:33 - 2022-09-12 18:44 - 000000000 ____D C:\Program Files\Adobe
2023-03-06 10:28 - 2022-04-01 23:04 - 000000000 ____D C:\Program Files (x86)\Google
2023-03-06 09:44 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-03-06 09:44 - 2022-04-01 23:00 - 000000000 ____D C:\Users\33603\AppData\Local\D3DSCache
2023-03-05 23:05 - 2022-04-01 23:00 - 000000000 __SHD C:\Users\33603\IntelGraphicsProfiles
2023-03-05 20:06 - 2022-09-08 23:02 - 000000000 ____D C:\Users\33603\AppData\Roaming\Messenger
2023-03-05 20:06 - 2022-09-08 23:02 - 000000000 ____D C:\Users\33603\AppData\Local\Messenger
2023-03-05 10:33 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-03-05 10:28 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-03-05 10:28 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-03-04 15:37 - 2020-11-21 13:43 - 000000000 ____D C:\Program Files\Microsoft Office
2023-03-04 12:30 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-03-04 08:25 - 2020-11-21 13:40 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-03-03 18:48 - 2022-04-01 23:00 - 000000000 ____D C:\Users\33603\AppData\Local\Packages
2023-03-03 16:04 - 2022-04-25 22:05 - 000000000 ____D C:\Users\33603\AppData\Roaming\obs-studio
2023-03-03 15:32 - 2022-10-16 15:39 - 000000000 ____D C:\OBS
2023-03-01 18:42 - 2022-04-13 17:56 - 000000000 ____D C:\Users\33603\AppData\Roaming\Telegram Desktop
2023-03-01 09:22 - 2022-11-18 15:40 - 002807248 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-03-01 09:22 - 2022-11-18 15:40 - 000243152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2023-03-01 09:22 - 2022-11-18 15:40 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-03-01 09:22 - 2022-11-18 15:40 - 000079328 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-03-01 09:22 - 2022-11-18 15:40 - 000062944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-03-01 09:21 - 2022-11-18 15:40 - 000476624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-03-01 09:21 - 2022-11-18 15:40 - 000198096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-03-01 09:21 - 2022-11-18 15:40 - 000165344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-02-28 09:55 - 2022-07-15 15:06 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-02-28 09:40 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ServiceState
2023-02-28 09:40 - 2021-10-06 18:56 - 000000000 ___HD C:\Intel
2023-02-28 09:40 - 2020-11-21 13:38 - 000012288 ___SH C:\DumpStack.log.tmp
2023-02-27 23:15 - 2022-05-07 06:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-02-27 09:57 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2023-02-26 10:42 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Globalization
2023-02-26 10:42 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
2023-02-26 10:42 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-02-25 19:41 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-02-25 19:41 - 2022-04-03 23:49 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-02-23 11:34 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\appcompat
2023-02-22 22:51 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-02-22 22:51 - 2022-04-01 23:02 - 000000000 ____D C:\ProgramData\Packages
2023-02-22 22:35 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-02-22 22:35 - 2021-10-06 17:58 - 000000000 __RHD C:\Users\Public\AccountPictures
2023-02-22 22:34 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-02-22 22:34 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows NT
2023-02-22 22:33 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows Defender
2023-02-22 22:33 - 2022-05-07 06:17 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-02-22 22:31 - 2022-09-27 17:32 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2023-02-22 22:31 - 2022-06-11 18:48 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-02-22 22:31 - 2022-06-06 11:12 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra
2023-02-22 22:31 - 2022-05-06 18:34 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2023-02-22 22:31 - 2022-04-26 21:42 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2023-02-22 22:31 - 2022-04-13 17:56 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2023-02-22 22:31 - 2022-04-02 11:19 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2023-02-22 22:30 - 2022-11-16 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2023-02-22 22:30 - 2022-09-16 17:21 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2023-02-22 22:30 - 2022-06-11 18:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2023-02-22 22:30 - 2022-05-10 09:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Connect CE
2023-02-22 22:30 - 2022-05-07 06:28 - 000000000 ____D C:\WINDOWS\Setup
2023-02-22 22:30 - 2022-05-07 06:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 __RHD C:\Users\Public\Libraries
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\spool
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-02-22 22:30 - 2022-05-06 18:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2023-02-22 22:30 - 2022-05-06 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2023-02-22 22:30 - 2022-04-25 22:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2023-02-22 22:30 - 2022-04-08 22:52 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.11
2023-02-22 22:30 - 2022-04-08 16:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2023-02-22 22:30 - 2021-10-06 18:07 - 000000000 ____D C:\WINDOWS\OEM
2023-02-22 22:30 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2023-02-22 22:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2023-02-22 22:29 - 2022-09-16 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2023-02-22 22:29 - 2022-05-05 20:09 - 000000000 ____D C:\WINDOWS\system32\DTS
2023-02-22 22:27 - 2022-05-07 06:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2023-02-22 22:27 - 2022-05-07 06:25 - 000076800 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2023-02-22 22:27 - 2022-05-07 06:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2023-02-22 22:27 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\WINDOWS\system32\opencl.dll
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\UUS
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemApps
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\setup
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\System
2023-02-22 22:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2023-02-22 22:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\MUI
2023-02-22 22:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\OCR
2023-02-22 22:23 - 2022-05-07 11:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-02-22 22:23 - 2022-05-07 11:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\winrm
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\WCN
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\slmgr
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\F12
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\dsc
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-02-15 08:05 - 2022-04-03 23:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-02-15 08:04 - 2022-04-03 23:34 - 149955784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-02-08 11:15 - 2020-11-21 13:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-02-06 17:53 - 2022-04-02 11:19 - 000000000 ____D C:\Users\33603\AppData\Roaming\discord
2023-02-06 17:23 - 2022-04-02 11:19 - 000000000 ____D C:\Users\33603\AppData\Local\Discord
==================== Fichiers à la racine de certains dossiers ========
2022-09-08 23:02 - 2022-09-08 23:02 - 049239368 _____ (Facebook, Inc.) C:\Users\33603\Messenger.159.0.0.23.221.exe
2023-01-04 18:51 - 2022-01-26 01:37 - 008742195 _____ (BakkesMod ) C:\Program Files\BakkesModSetup.exe
2022-05-10 09:27 - 2022-05-10 09:28 - 001041478 _____ () C:\Users\33603\AppData\Roaming\TI Connect CE-5.6.3.2278-Installation.log
2022-09-17 09:46 - 2022-09-17 09:46 - 000094208 _____ () C:\Users\33603\AppData\Local\Tempwd.tmp
==================== SigCheckExt =========================
2022-11-18 15:40 - 2023-03-01 09:22 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-01-04 18:51 - 2022-01-26 01:37 - 008742195 _____ (BakkesMod ) C:\Program Files\BakkesModSetup.exe
2023-03-06 10:31 - 2023-03-06 10:31 - 002080768 _____ (Farbar) C:\Users\33603\Desktop\FRST.exe
2023-03-06 10:32 - 2023-03-06 10:32 - 002378752 _____ (Farbar) C:\Users\33603\Desktop\FRST64.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{8a2ba132-26c6-11ec-b203-806e6f6e6963}
{8a2ba133-26c6-11ec-b203-806e6f6e6963}
{8a2ba134-26c6-11ec-b203-806e6f6e6963}
timeout 2
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
isolatedcontext Yes
default {current}
resumeobject {17d36d63-b2f8-11ed-86ac-92406cb71b7b}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {8a2ba132-26c6-11ec-b203-806e6f6e6963}
description UEFI:CD/DVD Drive
isolatedcontext Yes
Application logicielle (101fffff)
--------------------------------
identificateur {8a2ba133-26c6-11ec-b203-806e6f6e6963}
description UEFI:Removable Device
isolatedcontext Yes
Application logicielle (101fffff)
--------------------------------
identificateur {8a2ba134-26c6-11ec-b203-806e6f6e6963}
description UEFI:Network Device
isolatedcontext Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {13fcb2c0-ccb1-11ec-b213-744ca198c45c}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{13fcb2c1-ccb1-11ec-b213-744ca198c45c}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{13fcb2c1-ccb1-11ec-b213-744ca198c45c}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 11
locale fr-FR
inherit {bootloadersettings}
recoverysequence {17d36d65-b2f8-11ed-86ac-92406cb71b7b}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {17d36d63-b2f8-11ed-86ac-92406cb71b7b}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {17d36d65-b2f8-11ed-86ac-92406cb71b7b}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{17d36d66-b2f8-11ed-86ac-92406cb71b7b}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{17d36d66-b2f8-11ed-86ac-92406cb71b7b}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Installation de Windows
-----------------------
identificateur {7254a080-1510-4e85-ac0f-e7fb3d444736}
device ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{13fcb2c2-ccb1-11ec-b213-744ca198c45c}
custom:11000083 partition=C:
path \windows\system32\winload.efi
description Windows Rollback
locale fr-FR
bootstatfilepath \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
inherit {bootloadersettings}
restartonfailure Yes
isolatedcontext Yes
osdevice ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{13fcb2c2-ccb1-11ec-b213-744ca198c45c}
custom:21000152 partition=C:
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {13fcb2bd-ccb1-11ec-b213-744ca198c45c}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {13fcb2c0-ccb1-11ec-b213-744ca198c45c}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {17d36d63-b2f8-11ed-86ac-92406cb71b7b}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {17d36d65-b2f8-11ed-86ac-92406cb71b7b}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
isolatedcontext Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
isolatedcontext Yes
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
isolatedcontext Yes
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
isolatedcontext Yes
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
isolatedcontext Yes
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
isolatedcontext Yes
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
isolatedcontext Yes
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
isolatedcontext Yes
Options de p‚riph‚rique
-----------------------
identificateur {13fcb2c1-ccb1-11ec-b213-744ca198c45c}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {13fcb2c2-ccb1-11ec-b213-744ca198c45c}
description Windows Setup
isolatedcontext Yes
ramdisksdidevice partition=C:
ramdisksdipath \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {17d36d66-b2f8-11ed-86ac-92406cb71b7b}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par 33603 (administrateur) sur ORDI-DU-BG (ASUSTeK COMPUTER INC. VivoBook_ASUSLaptop X513EAN_S513EA) (06-03-2023 10:34:25)
Exécuté depuis C:\Users\33603\Desktop
Profils chargés: 33603
Plate-forme: Microsoft Windows 11 Famille Version 22H2 22621.1265 (X64) Langue: Français (France)
Navigateur par défaut: Chrome
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOSD.exe
(ASUSTeK COMPUTER INC.) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy\ModuleDll\HWSettings\AsusOLEDShifter.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.3400.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\110.0.1587.63\msedgewebview2.exe <6>
(Deezer SA) C:\Program Files\WindowsApps\Deezer.62021768415AF_5.30.520.0_x86__q7m17pa7q8kj0\app\Deezer.exe <7>
(DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimization.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimizationStartupTask.exe
(DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManager.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManagerAgent.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxEMN.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.152\GoogleCrashHandler64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <48>
(Reason Cybersecurity Inc. -> Reason Cybersecurity Ltd.) C:\Program Files\ReasonLabs\Common\Client\v1.0.7\rsAppUI.exe <5>
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkRemote\AsusLinkRemote.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\AsusAppService\AsusAppService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkNear\AsusLinkNear.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimization.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManager.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSwitch\AsusSwitch.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSystemAnalysis.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Windows\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe
(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_617efc0299240684\igfxCUIServiceN.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_897ea327b3fe52f7\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorvd.inf_amd64_a5ea1b1d8db1527e\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_6bfff1da475a22be\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e32ced29f236e322\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Lavasoft Software Canada Inc. -> ) C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_9.74.15001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_9.74.15001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\Sgrm\SgrmBroker.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe
(services.exe ->) (Reason Cybersecurity Inc. -> Reason Software Company Inc.) C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23012.167.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_be03f2dca68bf962\RtkAudUService64.exe <3>
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2022-09-12] (Adobe Inc. -> )
HKU\S-1-5-19\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-05-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\Run: [OneDriveSetup] => C:\Windows\System32\OneDriveSetup.exe [50312608 2022-05-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [EpicGamesLauncher] => C:\Téléchargements Internet\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32754128 2022-12-19] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [Discord] => C:\Users\33603\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4234600 2022-08-20] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [com.messenger] => "C:\Users\33603\AppData\Local\Programs\Messenger\Messenger.exe" messenger://openAtLogin (Pas de fichier)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe [9250224 2022-09-16] (Lavasoft Software Canada Inc. -> Lavasoft)
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [BakkesMod] => C:\Program Files\BakkesMod\BakkesMod.exe [15841792 2022-01-26] () [Fichier non signé]
HKU\S-1-5-21-1246909547-4082115136-1416965431-1001\...\Run: [MicrosoftEdgeAutoLaunch_1241707F67DA0C641CCD9DAFA148D161] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4243408 2023-03-02] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\110.0.5481.178\Installer\chrmstp.exe [2023-02-28] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
==================== Tâches planifiées (Avec liste blanche) ============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0600DD45-FAF2-4131-A006-0B17509B9F78} - System32\Tasks\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser => %windir%\system32\sc.exe start InventorySvc
Task: {0A0D6762-0B22-41A9-A39E-9A6BD9923B80} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => C:\WINDOWS\system32\MusNotification.exe /RunOnAC RebootDialog (Pas de fichier)
Task: {0BC26CEB-7A98-4E29-9F6E-BF07031ABE37} - System32\Tasks\ASUS Update Checker 2.0 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusUpdateChecker.exe [788104 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {1688BC1E-91DE-4843-8B1A-21843581956D} - System32\Tasks\ASUS Optimization 36D18D69AFC3 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusHotkey.exe [263784 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {1AC05F00-EA26-49C7-96A0-D13C0764A7FE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {21D363FF-7E71-4542-8B3D-E1C4F1613561} - System32\Tasks\Opera scheduled Autoupdate 1663341212 => C:\Users\33603\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Pas de fichier)
Task: {41360349-C591-49BE-89EB-77ED0E605D15} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26294704 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {68F9F985-A16E-4339-93B2-983A72C08E60} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {694C54FA-09D6-4B43-BB36-37C8106F1EBC} - System32\Tasks\GoogleUpdateTaskMachineUA{8EA813B5-3F21-421C-80FD-9F0B5FC09A1D} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-15] (Google LLC -> Google LLC)
Task: {8DDAE245-806A-44EB-9F9E-CA9497D6456F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {9B38A408-E9E6-47FA-B7B4-601DF8D07CA7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7BBBAE9-8EC7-4B61-BCFE-1570960443F3} - System32\Tasks\GoogleUpdateTaskMachineCore{EB3EA06D-838F-43AC-96E6-BEB6238852A7} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [168632 2022-07-15] (Google LLC -> Google LLC)
Task: {A941D525-3C07-411F-AA9D-BF66A3C6DAC5} - System32\Tasks\Meta\Messenger-SL-Helper-S-1-5-21-1246909547-4082115136-1416965431-1001 => C:\Users\33603\AppData\Local\Programs\Messenger\MessengerHelper.exe [2054904 2022-11-10] (Facebook, Inc. -> Meta Platforms, Inc.)
Task: {B59D11A8-6A33-4900-92C0-D0980CBC2925} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_be03f2dca68bf962\RtkAudUService64.exe [3498472 2022-05-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C3C3CDD7-11C2-429F-91FC-358AEAD4D84F} - System32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474 => C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSystemAnalysis.exe [3606624 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {C856BEE8-4768-4E93-A150-5EA9C29C8166} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168840 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Pas de fichier)
Task: {D414A255-CA7E-4230-A457-2EF7954A05C6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144280 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4AF2B0A-D77F-4E1E-9961-2A5397B36FD5} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26294704 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {DF0766DC-10C4-41C1-B323-CCC1A9550F2E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MpCmdRun.exe [1592184 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => C:\WINDOWS\system32\MusNotification.exe (Pas de fichier)
Task: {EF70826E-31A3-44E3-80DE-57E5F83A4160} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => C:\WINDOWS\system32\MusNotification.exe /RunOnBattery RebootDialog (Pas de fichier)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{48867d47-2131-44af-b7ce-1f002d71d39f}: [DhcpNameServer] 10.66.40.5
Tcpip\..\Interfaces\{824a5d7d-8d91-40df-afc6-2ce12a41492d}: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{ea1319eb-94f6-46bc-80d0-ea0f76860276}: [DhcpNameServer] 192.168.1.254
Edge:
=======
Edge Profile: C:\Users\33603\AppData\Local\Microsoft\Edge\User Data\Default [2023-02-10]
Edge StartupUrls: Default -> "hxxps://www.searchgoose.com/?path=chrome/newtab&u=a524dc6721c36d1f&subid=11118&channel=17"
Edge DefaultSearchURL: Default -> hxxps://www.search-fine.com/search?subid=11118&u=a524dc6721c36d1f&channel=17&keyword={searchTerms}
Edge DefaultSearchKeyword: Default -> google
Edge DefaultNewTabURL: Default -> hxxps://www.searchgoose.com/?path=chrome/newtab&u=a524dc6721c36d1f&subid=11118&channel=17
Edge DefaultSuggestURL: Default -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}&language={language}&PC=U316
FireFox:
========
FF DefaultProfile: ukjj2nhx.default
FF ProfilePath: C:\Users\33603\AppData\Roaming\Zotero\Zotero\Profiles\ukjj2nhx.default [2023-02-23]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-12-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-12-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-1246909547-4082115136-1416965431-1001: @3-update.avastbrowser.com/Avast Browser;version=3 -> C:\Users\33603\AppData\Local\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
FF Plugin HKU\S-1-5-21-1246909547-4082115136-1416965431-1001: @3-update.avastbrowser.com/Avast Browser;version=9 -> C:\Users\33603\AppData\Local\AVAST Software\Browser\Update\1.8.1206.2\npAvastBrowserUpdate3.dll [Pas de fichier]
Chrome:
=======
CHR DefaultProfile: Profile 3
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default [2022-09-17]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2022-09-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-09-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-17]
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-08-23]
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3 [2023-03-06]
CHR Notifications: Profile 3 -> hxxps://meet.google.com; hxxps://www.backmarket.fr
CHR HomePage: Profile 3 -> hxxps://?
CHR StartupUrls: Profile 3 -> "hxxps://?"
CHR Extension: (wanteeed) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\emnoomldgleagdjapdeckpmebokijail [2023-03-03]
CHR Extension: (Google Docs hors connexion) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-02-14]
CHR Extension: (Bouton Enregistrer Pinterest) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\gpdjojdkbbmdfjfahjcgigfpmkopogic [2022-10-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-08-20]
CHR Extension: (Netflix Party is now Teleparty) - C:\Users\33603\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2023-02-28]
CHR Profile: C:\Users\33603\AppData\Local\Google\Chrome\User Data\System Profile [2022-09-17]
CHR DefaultSearchKeyword: System Profile -> Google
CHR DefaultNewTabURL: System Profile -> hxxps://www.searchgoose.com/?path=chrome/newtab&u=a524dc6721c36d1f&subid=11118&channel=17
CHR DefaultSuggestURL: System Profile -> hxxps://www.bing.com/osjson.aspx?query={searchTerms}&language={language}&PC=U316
Opera:
=======
OPR Profile: C:\Users\33603\AppData\Roaming\Opera Software\Opera Stable [2022-09-17]
OPR Extension: (Rich Hints Agent) - C:\Users\33603\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-09-16]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\33603\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-09-16]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AsusAppService; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\AsusAppService\AsusAppService.exe [1162376 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSLinkNear; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkNear\AsusLinkNear.exe [1320072 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
R2 ASUSLinkRemote; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSLinkRemote\AsusLinkRemote.exe [764504 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSOptimization; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusOptimization.exe [394344 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSoftwareManager; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSoftwareManager\AsusSoftwareManager.exe [1113176 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSwitch; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSwitch\AsusSwitch.exe [635480 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemAnalysis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSystemAnalysis.exe [3606624 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 ASUSSystemDiagnosis; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemDiagnosis\AsusSystemDiagnosis.exe [791176 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12512256 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [3413424 2022-09-16] (Lavasoft Software Canada Inc. -> )
R2 DtsApo4Service; C:\WINDOWS\System32\DTS\PC\APO4x\DtsApo4Service.exe [241760 2022-04-29] (DTS, Inc. -> DTS Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [813032 2022-12-19] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029456 2022-08-28] (Epic Games Inc. -> Epic Games, Inc.)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_06dd582276d3f601\\AS\\IAS\\IntelAudioService.exe [532024 ] (Intel Corporation -> Intel)
S3 InventorySvc; C:\WINDOWS\system32\inventorysvc.dll [304480 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
R2 rsDNSClientSvc; C:\Program Files\ReasonLabs\DNS\rsDNSClientSvc.exe [585072 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsDNSResolver; C:\Program Files\ReasonLabs\DNS\rsDNSResolver.exe [10939248 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 rsDNSSvc; C:\Program Files\ReasonLabs\DNS\rsDNSSvc.exe [214384 2023-03-05] (Reason Cybersecurity Inc. -> Reason Software Company Inc.)
R2 SgrmBroker; C:\WINDOWS\system32\Sgrm\SgrmBroker.exe [414632 2022-05-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TextInputManagementService; C:\WINDOWS\System32\TabSvc.dll [266240 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746728 2022-03-23] (Oracle Corporation -> Oracle Corporation)
R2 WCAssistantService; C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe [22960 2022-09-16] (Lavasoft Software Canada Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe [3191256 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe [133576 2023-02-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 wuauserv; C:\WINDOWS\system32\wuauserv.dll [137600 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [565248 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AsusPTPDrv; C:\WINDOWS\System32\DriverStore\FileRepository\asusptpfilter.inf_amd64_314b5cb6bf57f471\AsusPTPFilter.sys [116712 2021-12-02] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R3 AsusSAIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSSystemAnalysis\AsusSAIO.sys [46736 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R1 ATKWMIACPIIO; C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_0100494bef227dd5\ASUSOptimization\AsusWmiAcpi.sys [45248 2022-12-07] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [367096 2022-09-16] (Bitdefender SRL -> Bitdefender)
R2 bfs; C:\WINDOWS\system32\drivers\bfs.sys [91480 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 GenPass; C:\WINDOWS\System32\DriverStore\FileRepository\genpass.inf_amd64_bef88a423225ecdc\genpass.sys [62800 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R3 iaLPSS2_GPIO2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_tgl.inf_amd64_2546dafe2183e972\iaLPSS2_GPIO2_TGL.sys [131224 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_tgl.inf_amd64_1308f85f1b0adf27\iaLPSS2_I2C_TGL.sys [204440 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_tgl.inf_amd64_fc1ed3a5a1d514f2\iaLPSS2_SPI_TGL.sys [158352 2021-07-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_TGL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_tgl.inf_amd64_cd8c3a141c1b1284\iaLPSS2_UART2_TGL.sys [313504 2021-07-19] (Intel Corporation -> Intel Corporation)
R0 iaStorVD; C:\WINDOWS\System32\drivers\iaStorVD.sys [1544912 2021-08-26] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_d97909364d9908a5\IntcUSB.sys [892968 2022-06-02] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_19ceb7ce67a7cf8b\gna.sys [87200 2022-01-11] (Intel Corporation -> Intel Corporation)
R3 MpKsl81204ef7; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{4FDB355E-CC6F-43B9-A7AB-6E7A9CCF0179}\MpKslDrv.sys [214280 2023-03-05] (Microsoft Windows -> Microsoft Corporation)
S0 pvscsi; C:\WINDOWS\System32\drivers\pvscsii.sys [45408 2022-05-07] (Microsoft Windows -> VMware, Inc.)
S3 RoutePolicy; C:\WINDOWS\System32\drivers\RoutePolicy.sys [98304 2022-05-07] (Microsoft Windows -> )
R3 rsDwf; C:\WINDOWS\system32\DRIVERS\rsDwf.sys [54144 2023-03-05] (Reason CyberSecurity Inc. -> Reason CyberSecurity Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [250608 2022-03-22] (Oracle Corporation -> Oracle Corporation)
R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1046392 2022-03-22] (Oracle Corporation -> Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2023-02-08] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [473336 2023-02-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99576 2023-02-08] (Microsoft Windows -> Microsoft Corporation)
R2 wtd; C:\WINDOWS\System32\drivers\wtd.sys [118784 2023-02-22] (Microsoft Windows -> Microsoft Corporation)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-03-06 10:34 - 2023-03-06 10:34 - 000030726 _____ C:\Users\33603\Desktop\FRST.txt
2023-03-06 10:34 - 2023-03-06 10:34 - 000000000 ____D C:\FRST
2023-03-06 10:32 - 2023-03-06 10:32 - 002378752 _____ (Farbar) C:\Users\33603\Desktop\FRST64.exe
2023-03-06 10:31 - 2023-03-06 10:31 - 002080768 _____ (Farbar) C:\Users\33603\Desktop\FRST.exe
2023-03-04 08:29 - 2023-03-04 08:29 - 000288811 _____ C:\Users\33603\Downloads\TD-AlcoolAlcènes-SUJET.pdf
2023-02-28 09:45 - 2023-02-28 09:45 - 000810954 _____ C:\WINDOWS\system32\perfh00C.dat
2023-02-28 09:45 - 2023-02-28 09:45 - 000157390 _____ C:\WINDOWS\system32\perfc00C.dat
2023-02-23 09:22 - 2023-02-23 09:34 - 000000000 ____D C:\Users\33603\Zotero
2023-02-23 09:22 - 2023-02-23 09:31 - 000000000 ____D C:\Users\33603\AppData\Local\Zotero
2023-02-23 09:22 - 2023-02-23 09:22 - 000000000 ____D C:\Users\33603\AppData\Roaming\Zotero
2023-02-23 09:22 - 2023-02-23 09:22 - 000000000 ____D C:\Users\33603\AppData\Roaming\Mozilla
2023-02-23 09:21 - 2023-02-23 09:21 - 051466408 _____ (Mozilla) C:\Users\33603\Desktop\Zotero-6.0.22_setup.exe
2023-02-23 08:29 - 2023-02-23 08:29 - 002557941 _____ C:\Users\33603\Desktop\3_03 CM Illus recherches biblio .pdf
2023-02-22 22:36 - 2023-02-22 22:36 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2023-02-22 22:35 - 2023-02-22 22:35 - 000000020 ___SH C:\Users\33603\ntuser.ini
2023-02-22 22:33 - 2023-03-06 09:36 - 000003752 _____ C:\WINDOWS\system32\Tasks\AsusSystemAnalysis_754F3273-0563-4F20-B12F-826510B07474
2023-02-22 22:33 - 2023-03-02 20:15 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-02-22 22:33 - 2023-03-02 20:15 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-02-22 22:33 - 2023-02-28 09:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-02-22 22:33 - 2023-02-27 09:46 - 000003366 _____ C:\WINDOWS\system32\Tasks\RtkAudUService64_BG
2023-02-22 22:33 - 2023-02-22 22:33 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2023-02-22 22:33 - 2023-02-22 22:33 - 000011433 _____ C:\WINDOWS\diagerr.xml
2023-02-22 22:33 - 2023-02-22 22:33 - 000003610 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1663341212
2023-02-22 22:33 - 2023-02-22 22:33 - 000003594 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{8EA813B5-3F21-421C-80FD-9F0B5FC09A1D}
2023-02-22 22:33 - 2023-02-22 22:33 - 000003370 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{EB3EA06D-838F-43AC-96E6-BEB6238852A7}
2023-02-22 22:33 - 2023-02-22 22:33 - 000003116 _____ C:\WINDOWS\system32\Tasks\ASUS Update Checker 2.0
2023-02-22 22:33 - 2023-02-22 22:33 - 000003034 _____ C:\WINDOWS\system32\Tasks\ASUS Optimization 36D18D69AFC3
2023-02-22 22:33 - 2023-02-22 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Meta
2023-02-22 22:33 - 2023-02-22 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Intel
2023-02-22 22:33 - 2023-02-22 22:33 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2023-02-22 22:32 - 2023-02-28 09:45 - 001803986 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-02-22 22:31 - 2023-02-28 09:45 - 000000000 ____D C:\Users\33603
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Voisinage réseau
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Voisinage d'impression
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Modèles
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Mes documents
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Menu Démarrer
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Documents\Mes vidéos
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Documents\Mes images
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\Documents\Ma musique
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2023-02-22 22:31 - 2023-02-22 22:31 - 000000000 _SHDL C:\Users\33603\AppData\Local\Historique
2023-02-22 22:30 - 2023-03-06 05:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-02-22 22:30 - 2023-02-22 22:34 - 000000000 ____D C:\Windows.old
2023-02-22 22:30 - 2023-02-22 22:30 - 000505368 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-02-22 22:30 - 2023-02-22 22:30 - 000000000 ____D C:\WINDOWS\system32\config\BFS
2023-02-22 22:29 - 2023-02-22 22:30 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2023-02-22 22:28 - 2023-02-22 22:29 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2023-02-22 22:28 - 2023-02-22 22:28 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files\Reference Assemblies
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files\MSBuild
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2023-02-22 22:24 - 2023-02-22 22:24 - 000000000 ____D C:\Program Files (x86)\MSBuild
2023-02-22 22:23 - 2023-02-22 22:23 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2023-02-22 22:23 - 2023-02-22 22:23 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-02-22 22:23 - 2023-02-22 22:23 - 000000000 ____D C:\WINDOWS\addins
2023-02-22 19:42 - 2023-02-22 19:42 - 000058743 _____ C:\Users\33603\Desktop\Résultat G tour 1.pdf
2023-02-22 09:06 - 2023-02-22 09:06 - 000052068 _____ C:\Users\33603\Desktop\Tuto UE3.2 n°1.pdf
2023-02-19 15:41 - 2023-02-19 15:41 - 000045170 _____ C:\Users\33603\Desktop\Tuto-n1-UE6-Feuille-1.pdf
2023-02-19 13:28 - 2023-03-05 15:56 - 000054144 _____ (Reason CyberSecurity Inc.) C:\WINDOWS\system32\Drivers\rsDwf.sys
2023-02-19 10:43 - 2023-02-19 10:43 - 000435561 _____ C:\Users\33603\Desktop\Référent de stage.pdf
2023-02-19 10:38 - 2023-02-19 10:38 - 000031165 _____ C:\Users\33603\Desktop\Tuto-n1-UE6-LAS-RR-Feuille-1.pdf
2023-02-17 20:39 - 2023-02-22 22:35 - 000000000 ___DC C:\WINDOWS\Panther
2023-02-16 15:22 - 2023-02-16 15:23 - 000369515 _____ C:\Users\33603\Desktop\Sujet Blanc LAS RR.pdf
2023-02-16 09:30 - 2023-02-16 09:30 - 000190668 _____ C:\Users\33603\Desktop\Programme journée des métiers 2022.pdf
2023-02-15 18:33 - 2023-02-15 18:33 - 000000000 ____D C:\Users\33603\AppData\Roaming\ReasonLabs
2023-02-15 18:33 - 2023-02-15 18:33 - 000000000 ____D C:\ProgramData\ReasonLabs
2023-02-15 18:32 - 2023-02-15 18:33 - 000000000 ____D C:\Program Files\ReasonLabs
2023-02-15 08:10 - 2023-02-15 08:10 - 000000000 ___HD C:\$WinREAgent
2023-02-12 22:06 - 2023-02-12 22:06 - 000034784 _____ C:\Users\33603\Desktop\Tuto n°1 UE7 - Feuille 1 (2).pdf
2023-02-11 11:46 - 2023-02-11 11:46 - 000049654 _____ C:\Users\33603\Desktop\Tuto n°1 UE7 - Feuille 1 (1).pdf
2023-02-11 10:36 - 2023-02-11 10:36 - 000035790 _____ C:\Users\33603\Desktop\Tuto UE1 n°1 (1).pdf
2023-02-11 10:36 - 2023-02-11 10:36 - 000035222 _____ C:\Users\33603\Desktop\Tuto UE6 n°1 - Feuille 1 (1).pdf
2023-02-11 10:32 - 2023-02-11 10:32 - 000036176 _____ C:\Users\33603\Desktop\Tuto UE5 n°1 LASRR - Feuille 1.pdf
2023-02-10 15:44 - 2023-02-10 15:44 - 000783261 _____ C:\Users\33603\Desktop\ORGANIGRAMME UFR SVS Janvier 2023-1.pdf
2023-02-08 10:03 - 2023-02-08 10:03 - 000035790 _____ C:\Users\33603\Desktop\Tuto UE1 n°1.pdf
2023-02-05 21:57 - 2023-02-05 21:57 - 000035222 _____ C:\Users\33603\Desktop\Tuto UE6 n°1 - Feuille 1.pdf
2023-02-01 14:26 - 2023-01-25 14:56 - 001459674 _____ C:\Users\33603\Desktop\résultats semestre 1 session 1 (surligné en jaune ).pdf
2023-01-31 22:55 - 2023-01-31 23:09 - 3017888560 _____ C:\Users\33603\Downloads\twitter-2023-01-31-1e3bffb648479a3e5dcc458fea5022eb99270dd6a0ea3ab2bc8c82a39ab8eb80.zip
2023-01-30 14:41 - 2023-01-30 14:41 - 000236542 _____ C:\Users\33603\Desktop\uvsq-las-rr-planning-des-seances-et-colles-du-second-semestre-groupe-06-898.pdf
2023-01-23 22:00 - 2023-01-23 22:00 - 000153482 _____ C:\Users\33603\Desktop\Demande d'autorisation de stage.pdf
2023-01-23 12:47 - 2023-03-04 19:57 - 000000000 ____D C:\Parcoursup
2023-01-22 23:00 - 2023-01-22 23:00 - 001339872 _____ C:\Users\33603\Desktop\résultats semestre 1 session 1 (1).pdf
2023-01-20 16:26 - 2023-01-20 16:26 - 003087901 _____ C:\Users\33603\Desktop\Réunion MSanté 18.01.2023.pdf
2023-01-20 09:55 - 2023-01-20 09:55 - 000000230 _____ C:\Users\33603\Desktop\Lancer la réunion - Zoom.url
2023-01-18 17:51 - 2023-02-22 22:31 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2023-01-16 20:58 - 2023-03-04 08:25 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-01-04 18:55 - 2023-01-04 18:57 - 000000000 ____D C:\MAP RL
2023-01-04 18:55 - 2023-01-04 18:55 - 000000000 ____D C:\Program Files\Nouveau dossier
2023-01-04 18:51 - 2023-01-04 18:51 - 008167702 _____ C:\Users\33603\Downloads\BakkesModSetup (1).zip
2023-01-04 18:51 - 2022-01-26 01:37 - 008742195 _____ (BakkesMod ) C:\Program Files\BakkesModSetup.exe
2023-01-04 18:47 - 2023-01-04 18:51 - 000000879 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BakkesMod.lnk
2023-01-04 18:47 - 2023-01-04 18:51 - 000000000 ____D C:\Program Files\BakkesMod
2023-01-04 18:47 - 2023-01-04 18:47 - 000000000 ____D C:\Users\33603\AppData\Roaming\bakkesmod
2023-01-04 18:46 - 2023-01-04 18:46 - 008167702 _____ C:\Users\33603\Downloads\BakkesModSetup.zip
2023-01-04 18:43 - 2023-01-04 18:46 - 000000022 _____ C:\Users\33603\Downloads\BakkesModInjector.zip
2022-12-19 21:36 - 2022-12-19 21:36 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2022-12-19 18:39 - 2022-12-19 18:39 - 000000000 ___SH C:\Users\Public\Shared Files
2022-12-19 18:32 - 2022-12-19 18:32 - 000000000 ____D C:\Users\33603\AppData\Local\FortniteGame
2022-12-19 18:32 - 2022-12-19 18:32 - 000000000 ____D C:\Users\33603\AppData\Local\CrashReportClient
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2023-03-06 10:33 - 2022-09-12 18:45 - 000000000 ____D C:\Users\Public\Documents\Adobe
2023-03-06 10:33 - 2022-09-12 18:44 - 000000000 ____D C:\Program Files\Common Files\Adobe
2023-03-06 10:33 - 2022-09-12 18:44 - 000000000 ____D C:\Program Files\Adobe
2023-03-06 10:28 - 2022-04-01 23:04 - 000000000 ____D C:\Program Files (x86)\Google
2023-03-06 09:44 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-03-06 09:44 - 2022-04-01 23:00 - 000000000 ____D C:\Users\33603\AppData\Local\D3DSCache
2023-03-05 23:05 - 2022-04-01 23:00 - 000000000 __SHD C:\Users\33603\IntelGraphicsProfiles
2023-03-05 20:06 - 2022-09-08 23:02 - 000000000 ____D C:\Users\33603\AppData\Roaming\Messenger
2023-03-05 20:06 - 2022-09-08 23:02 - 000000000 ____D C:\Users\33603\AppData\Local\Messenger
2023-03-05 10:33 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-03-05 10:28 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-03-05 10:28 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-03-04 15:37 - 2020-11-21 13:43 - 000000000 ____D C:\Program Files\Microsoft Office
2023-03-04 12:30 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-03-04 08:25 - 2020-11-21 13:40 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-03-03 18:48 - 2022-04-01 23:00 - 000000000 ____D C:\Users\33603\AppData\Local\Packages
2023-03-03 16:04 - 2022-04-25 22:05 - 000000000 ____D C:\Users\33603\AppData\Roaming\obs-studio
2023-03-03 15:32 - 2022-10-16 15:39 - 000000000 ____D C:\OBS
2023-03-01 18:42 - 2022-04-13 17:56 - 000000000 ____D C:\Users\33603\AppData\Roaming\Telegram Desktop
2023-03-01 09:22 - 2022-11-18 15:40 - 002807248 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-03-01 09:22 - 2022-11-18 15:40 - 000243152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2023-03-01 09:22 - 2022-11-18 15:40 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-03-01 09:22 - 2022-11-18 15:40 - 000079328 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-03-01 09:22 - 2022-11-18 15:40 - 000062944 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-03-01 09:21 - 2022-11-18 15:40 - 000476624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-03-01 09:21 - 2022-11-18 15:40 - 000198096 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-03-01 09:21 - 2022-11-18 15:40 - 000165344 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-02-28 09:55 - 2022-07-15 15:06 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-02-28 09:40 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ServiceState
2023-02-28 09:40 - 2021-10-06 18:56 - 000000000 ___HD C:\Intel
2023-02-28 09:40 - 2020-11-21 13:38 - 000012288 ___SH C:\DumpStack.log.tmp
2023-02-27 23:15 - 2022-05-07 06:17 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-02-27 09:57 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2023-02-26 10:42 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Globalization
2023-02-26 10:42 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
2023-02-26 10:42 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-02-25 19:41 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-02-25 19:41 - 2022-04-03 23:49 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-02-23 11:34 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\appcompat
2023-02-22 22:51 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-02-22 22:51 - 2022-04-01 23:02 - 000000000 ____D C:\ProgramData\Packages
2023-02-22 22:35 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-02-22 22:35 - 2021-10-06 17:58 - 000000000 __RHD C:\Users\Public\AccountPictures
2023-02-22 22:34 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-02-22 22:34 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows NT
2023-02-22 22:33 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Windows Defender
2023-02-22 22:33 - 2022-05-07 06:17 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-02-22 22:31 - 2022-09-27 17:32 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2023-02-22 22:31 - 2022-06-11 18:48 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-02-22 22:31 - 2022-06-06 11:12 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GeoGebra
2023-02-22 22:31 - 2022-05-06 18:34 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2023-02-22 22:31 - 2022-04-26 21:42 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2023-02-22 22:31 - 2022-04-13 17:56 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2023-02-22 22:31 - 2022-04-02 11:19 - 000000000 ____D C:\Users\33603\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2023-02-22 22:30 - 2022-11-16 16:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2023-02-22 22:30 - 2022-09-16 17:21 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2023-02-22 22:30 - 2022-06-11 18:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2023-02-22 22:30 - 2022-05-10 09:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TI Connect CE
2023-02-22 22:30 - 2022-05-07 06:28 - 000000000 ____D C:\WINDOWS\Setup
2023-02-22 22:30 - 2022-05-07 06:24 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 __RHD C:\Users\Public\Libraries
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\spool
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2023-02-22 22:30 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-02-22 22:30 - 2022-05-06 18:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2023-02-22 22:30 - 2022-05-06 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2023-02-22 22:30 - 2022-04-25 22:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2023-02-22 22:30 - 2022-04-08 22:52 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.11
2023-02-22 22:30 - 2022-04-08 16:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2023-02-22 22:30 - 2021-10-06 18:07 - 000000000 ____D C:\WINDOWS\OEM
2023-02-22 22:30 - 2021-06-05 13:10 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2023-02-22 22:30 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2023-02-22 22:29 - 2022-09-16 16:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2023-02-22 22:29 - 2022-05-05 20:09 - 000000000 ____D C:\WINDOWS\system32\DTS
2023-02-22 22:27 - 2022-05-07 06:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2023-02-22 22:27 - 2022-05-07 06:25 - 000076800 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2023-02-22 22:27 - 2022-05-07 06:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2023-02-22 22:27 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\WINDOWS\system32\opencl.dll
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\UUS
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemApps
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\setup
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-02-22 22:27 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\System
2023-02-22 22:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2023-02-22 22:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\MUI
2023-02-22 22:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\OCR
2023-02-22 22:23 - 2022-05-07 11:31 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-02-22 22:23 - 2022-05-07 11:31 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\winrm
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\WCN
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\slmgr
2023-02-22 22:23 - 2022-05-07 11:23 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\F12
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\dsc
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-02-22 22:23 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-02-15 08:05 - 2022-04-03 23:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-02-15 08:04 - 2022-04-03 23:34 - 149955784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-02-08 11:15 - 2020-11-21 13:38 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-02-06 17:53 - 2022-04-02 11:19 - 000000000 ____D C:\Users\33603\AppData\Roaming\discord
2023-02-06 17:23 - 2022-04-02 11:19 - 000000000 ____D C:\Users\33603\AppData\Local\Discord
==================== Fichiers à la racine de certains dossiers ========
2022-09-08 23:02 - 2022-09-08 23:02 - 049239368 _____ (Facebook, Inc.) C:\Users\33603\Messenger.159.0.0.23.221.exe
2023-01-04 18:51 - 2022-01-26 01:37 - 008742195 _____ (BakkesMod ) C:\Program Files\BakkesModSetup.exe
2022-05-10 09:27 - 2022-05-10 09:28 - 001041478 _____ () C:\Users\33603\AppData\Roaming\TI Connect CE-5.6.3.2278-Installation.log
2022-09-17 09:46 - 2022-09-17 09:46 - 000094208 _____ () C:\Users\33603\AppData\Local\Tempwd.tmp
==================== SigCheckExt =========================
2022-11-18 15:40 - 2023-03-01 09:22 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-01-04 18:51 - 2022-01-26 01:37 - 008742195 _____ (BakkesMod ) C:\Program Files\BakkesModSetup.exe
2023-03-06 10:31 - 2023-03-06 10:31 - 002080768 _____ (Farbar) C:\Users\33603\Desktop\FRST.exe
2023-03-06 10:32 - 2023-03-06 10:32 - 002378752 _____ (Farbar) C:\Users\33603\Desktop\FRST64.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de d‚marrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{8a2ba132-26c6-11ec-b203-806e6f6e6963}
{8a2ba133-26c6-11ec-b203-806e6f6e6963}
{8a2ba134-26c6-11ec-b203-806e6f6e6963}
timeout 2
Gestionnaire de d‚marrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
isolatedcontext Yes
default {current}
resumeobject {17d36d63-b2f8-11ed-86ac-92406cb71b7b}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {8a2ba132-26c6-11ec-b203-806e6f6e6963}
description UEFI:CD/DVD Drive
isolatedcontext Yes
Application logicielle (101fffff)
--------------------------------
identificateur {8a2ba133-26c6-11ec-b203-806e6f6e6963}
description UEFI:Removable Device
isolatedcontext Yes
Application logicielle (101fffff)
--------------------------------
identificateur {8a2ba134-26c6-11ec-b203-806e6f6e6963}
description UEFI:Network Device
isolatedcontext Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {13fcb2c0-ccb1-11ec-b213-744ca198c45c}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{13fcb2c1-ccb1-11ec-b213-744ca198c45c}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{13fcb2c1-ccb1-11ec-b213-744ca198c45c}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de d‚marrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 11
locale fr-FR
inherit {bootloadersettings}
recoverysequence {17d36d65-b2f8-11ed-86ac-92406cb71b7b}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {17d36d63-b2f8-11ed-86ac-92406cb71b7b}
nx OptIn
bootmenupolicy Standard
Chargeur de d‚marrage Windows
-----------------------------
identificateur {17d36d65-b2f8-11ed-86ac-92406cb71b7b}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{17d36d66-b2f8-11ed-86ac-92406cb71b7b}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{17d36d66-b2f8-11ed-86ac-92406cb71b7b}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Installation de Windows
-----------------------
identificateur {7254a080-1510-4e85-ac0f-e7fb3d444736}
device ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{13fcb2c2-ccb1-11ec-b213-744ca198c45c}
custom:11000083 partition=C:
path \windows\system32\winload.efi
description Windows Rollback
locale fr-FR
bootstatfilepath \$WINDOWS.~BT\Sources\SafeOS\bootstat.dat
inherit {bootloadersettings}
restartonfailure Yes
isolatedcontext Yes
osdevice ramdisk=[C:]\$WINDOWS.~BT\Sources\SafeOS\winre.wim,{13fcb2c2-ccb1-11ec-b213-744ca198c45c}
custom:21000152 partition=C:
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {13fcb2bd-ccb1-11ec-b213-744ca198c45c}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {13fcb2c0-ccb1-11ec-b213-744ca198c45c}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur {17d36d63-b2f8-11ed-86ac-92406cb71b7b}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {17d36d65-b2f8-11ed-86ac-92406cb71b7b}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de m‚moire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics m‚moire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
isolatedcontext Yes
ParamŠtres EMS
--------------
identificateur {emssettings}
bootems No
isolatedcontext Yes
ParamŠtres du d‚bogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
isolatedcontext Yes
Erreurs de m‚moire RAM
----------------------
identificateur {badmemory}
isolatedcontext Yes
ParamŠtres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
isolatedcontext Yes
ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
isolatedcontext Yes
ParamŠtres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
isolatedcontext Yes
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
ParamŠtres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
isolatedcontext Yes
Options de p‚riph‚rique
-----------------------
identificateur {13fcb2c1-ccb1-11ec-b213-744ca198c45c}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {13fcb2c2-ccb1-11ec-b213-744ca198c45c}
description Windows Setup
isolatedcontext Yes
ramdisksdidevice partition=C:
ramdisksdipath \$WINDOWS.~BT\Sources\SafeOS\boot.sdi
Options de p‚riph‚rique
-----------------------
identificateur {17d36d66-b2f8-11ed-86ac-92406cb71b7b}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================