Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2023
Exécuté par SYU (administrateur) sur JB (HP HP Pavilion Gaming Laptop 15-ec2xxx) (17-09-2023 11:12:48)
Exécuté depuis C:\Users\SYU\Desktop\FRST64.exe
Profils chargés: SYU
Plate-forme: Microsoft Windows 11 Famille Version 22H2 22623.891 (X64) Langue: Français (France)
Navigateur par défaut: Brave
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.141\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.141\BraveCrashHandler64.exe
(C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe ->) (Express Vpn LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\expressvpnd\expressvpnd.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.23500.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\117.0.2045.31\msedgewebview2.exe <6>
(cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(DriverStore\FileRepository\u0393367.inf_amd64_6fba1387e8658583\B393268\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0393367.inf_amd64_6fba1387e8658583\B393268\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.35.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_1101.2309.0.0_x64__v10z8vjag6ke6\OmenCommandCenterApp\OmenCommandCenterBackground.exe
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <25>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\SYU\AppData\Local\Programs\Microsoft VS Code\Code.exe <8>
(HP Inc. -> ) C:\Program Files\HP\Overlay\OMENOverlay.exe
(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(SECOMN64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0393367.inf_amd64_6fba1387e8658583\B393268\atiesrxx.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (Express Vpn LLC -> ExpressVPN) C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_43e3600968234e87\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_e00420cc358cbd11\x64\OmenCap\OmenCap.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_e192e6f3fb1cfc71\RstMwService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForLinux_1.2.5.0_x64__8wekyb3d8bbwe\wslservice.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhmig.inf_amd64_f2b0ffb41c9691ca\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (QUALCOMM, Inc.) [Fichier non signé] C:\Program Files (x86)\QUALCOMM Incorporated\Qualcomm USB Drivers For Windows\DriverPackage\Qualcomm\Tools\qcmtusvc.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe <2>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> wondershare) C:\ProgramData\Wondershare\wsServices\WsidService.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_25.52334.606.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENLightStudio_1.0.37.0_x64__v10z8vjag6ke6\LightStudio-ui\LightStudio-background.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2336.7.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_25.52334.606.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\Overlay\OverlayHelper.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.23500.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(WindowsPowerShell\v1.0\powershell.exe ->) () [Fichier non signé] C:\Windows\svshost.exe
(WindowsPowerShell\v1.0\powershell.exe ->) (www.xmrig.com) [Fichier non signé] C:\Windows\DlHost.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe [1596800 2022-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [ExpressVPNNotificationService] => C:\Program Files (x86)\ExpressVPN\expressvpn-ui\ExpressVPNNotificationServiceStarter.exe [373600 2021-01-18] (Express Vpn LLC -> ExpressVPN)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-22] (Kilonova LLC -> )
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4374376 2023-07-28] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [com.evernote.Evernote] => C:\Users\SYU\AppData\Local\Programs\Evernote\Evernote.exe [166109760 2023-08-31] (Evernote Corporation -> Evernote Corporation)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [41584544 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [BingSvc] => C:\Users\SYU\AppData\Local\Microsoft\BingSvc\BingSvc.exe [6638496 2022-09-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [Discord] => C:\Users\SYU\AppData\Local\Discord\Update.exe [1525016 2023-02-13] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [611dd93a9b5c578be68b17d997792402] => "C:\Program Files\DVDFab\DVDFab 12\LiveUpdate.exe" --run_mode=background_check (Pas de fichier)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (Pas de fichier)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\Run: [MicrosoftEdgeAutoLaunch_3542F0B3C2763F5D8052F5BF8BE10B07] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4219448 2023-09-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\MountPoints2: {20ce8389-3fe7-11ee-ae56-14133381d284} - "D:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\MountPoints2: {31bb1631-2b7c-11ee-ae3f-16133381d285} - "E:\OnePlus_setup.exe" /s
HKU\S-1-5-21-3260349332-2736728831-3187818672-1001\...\MountPoints2: {b7a08570-ccb2-11ed-ade6-14133381d284} - "D:\OnePlus_setup.exe" /s
HKLM\Software\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\System32\Rundll32.exe C:\Windows\System32\mscories.dll,Install
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\117.1.58.127\Installer\chrmstp.exe [2023-09-17] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{89B4C1CD-B018-4511-B0A1-5476DBF70820}] -> C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\$McRebootA5E6DEAA56$.lnk [2023-09-16]
ShortcutTarget: $McRebootA5E6DEAA56$.lnk -> (Pas de fichier)

==================== Tâches planifiées (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0D9FE9F9-7743-4A0B-927E-C277EEC03222} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-06-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {CB2883C1-2520-4DC8-BE81-3E6F5B37A94D} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-06-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {1C076E2C-7C3A-4F9C-AB71-B7E2FE7C0ECE} - System32\Tasks\AMDScoSupportTypeUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-06-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {59959272-1761-4528-B6DA-28CD4379A8E4} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{7939D69E-2861-4D56-AE2C-995C7E9A5329} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2022-12-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {76C58A69-9FCC-4612-851F-7731D23E40F8} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{2118A937-45C2-4D67-9606-20DF74DF2825} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2022-12-06] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {60263A9C-6373-4A66-A355-FB2459123D0C} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {B6A41AE0-5384-4340-BE32-7203B3D8B2FC} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "d62ffcc5-22a6-4cad-88c1-65cfe23c42de" --version "6.15.10623" --silent
Task: {0BF093B8-7410-49E1-ACD6-003240A3F142} - System32\Tasks\CCleanerSkipUAC - SYU => C:\Program Files\CCleaner\CCleaner.exe [34687904 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {7DB3638C-E137-4BB9-947C-3A787856E11D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2023-01-22] (Google Inc -> Google LLC)
Task: {0D6B5B62-9650-423E-B015-9D30A8E26817} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2023-01-22] (Google Inc -> Google LLC)
Task: {E656FD31-C500-41FB-A83C-137343B5EDF7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2023-08-25] (HP Inc. -> HP Inc.)
Task: {9E1761BF-A958-4EB6-8DB9-C049239500EF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-08-25] (HP Inc. -> HP Inc.)
Task: {EEC96620-C8A5-4F07-A36A-E05A8BA0C29B} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145904 2023-08-25] (HP Inc. -> HP Inc.)
Task: {6151C15A-F7F2-4D9E-8D2F-9CF1BA2DFFE4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1145904 2023-08-25] (HP Inc. -> HP Inc.)
Task: {1E55F50D-1480-4BE7-AD81-D2B36CC4D19A} - System32\Tasks\HP\Consent Manager Launcher => C:\windows\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {9026E894-4AB3-4E96-AA70-B762A14579C5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26913760 2023-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {DEE9657C-A876-452C-B390-43FDE3E1DB9E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26913760 2023-09-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {66CE6981-8075-496C-A484-34E391111E11} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158664 2023-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {417850CC-9925-4106-A341-F65B605BECAC} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158664 2023-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {3670D503-DDF7-437B-A768-2202203A0D7C} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [167864 2023-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {86F24322-0457-4A86-B3D8-558745200F83} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [450560 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy Bypass -WindowStyle Hidden -File C:\WINDOWS\mid.ps1
Task: {B0469F30-EE4B-43B8-8052-B082FFAFDD5B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Pas de fichier)
Task: {97AB7E37-BEA7-4D33-A694-BFE2C1A0E93C} - System32\Tasks\Microsoft\Windows\WaaSMedic\MaintenanceWork => {72566E27-1ABB-4EB3-B4F0-EB431CB1CB32}
Task: {36C785BC-C15D-47D5-8EB2-CE4C6FE13C20} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {22E5B375-5B82-4DFE-AEC5-461A5FC40154} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {488E7C24-2E60-4856-8C70-2EA41732A345} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2DEF85D1-09FF-4E8F-BA15-AF8BDDD6176A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MpCmdRun.exe [1596304 2023-08-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0DD9033E-27B0-4440-B97A-8302A0685662} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2023-06-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {7EB0CBE1-EAC9-46DE-A97C-71DC8BF455AE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [724384 2023-07-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {F8814E24-0119-4700-A7AB-642FD94B2CF5} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [450560 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy ByPass -WindowStyle Hidden C:\Users\SYU\AppData\Roaming\Winsoft\core.ps1
Task: {F7363460-772B-4B66-B63A-4ED3A2F7CFF3} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [804312 2022-11-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {820F572D-7E11-482E-97F5-DAB0B2C26728} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2023-07-13] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {9BDCC746-B8D1-4C20-97B6-7B472AD31305} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-07-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {6B7BB847-C8AB-49EF-BC8D-F097EC3271B1} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A4C56ACB-B2D7-47C4-B436-0DEC7155C9F8} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7B3A0873-259F-4B6B-A900-9B5B0F698CA1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DFFABFAA-995D-4AC6-8F57-70B2EA6BB288} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {67C8CEC3-3360-48DE-9FFA-3196367E20B3} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AA33BA29-459B-40E1-83AF-A05CDD7156D6} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {017A8351-83A5-4B50-9C12-A3A2ECC8C087} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-07-13] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {47BF1FC7-B971-404B-8C82-405B0381E4FF} - System32\Tasks\OmenInstallMonitor => C:\Program Files\HP\OmenInstallMonitor\OmenInstallMonitor.exe [58352 2023-09-12] (HP Inc. -> HP Inc.)
Task: {65A0E09A-E74C-4D8C-A4F9-630B6F36FDAC} - System32\Tasks\OmenOverlay => C:\Program Files\HP\Overlay\OverlayHelper.exe [59888 2023-09-12] (HP Inc. -> HP Inc.)
Task: {7D0553F9-124B-4C8E-B3A7-1B75A0FE03AD} - System32\Tasks\SystemOptimizer => C:\Program Files\HP\SystemOptimizer\SystemOptimizer.exe [149488 2023-09-12] (HP Inc. -> HP Inc.)
Task: {BBBE1995-C110-43D2-9F4C-9351E316280F} - System32\Tasks\ViGEmBus_Updater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBus_Updater.exe [1117096 2022-09-27] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{1858365f-02ec-4f86-a67a-080de63f92b1}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{2cd3fc36-f9af-4d47-9d61-7a90be2f63b6}: [NameServer] 1.1.1.1,1.0.0.1,192.168.0.254
Tcpip\..\Interfaces\{4d63233b-c813-41f6-92e4-6a0155c508b4}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{9cef0c7d-ae7a-4df3-9a50-e1032710931e}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{c438fcbc-db66-4898-9400-06a722549673}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{ed1919c4-fd48-4783-8d5a-4c85e8bfbcec}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{fbba5fcb-81ca-44da-8d88-65bef4dd5195}: [DhcpNameServer] 192.168.0.254

Edge:
=======
Edge Profile: C:\Users\SYU\AppData\Local\Microsoft\Edge\User Data\Default [2023-09-16]
Edge Notifications: Default -> hxxps://www.tiktok.com
Edge Extension: (Google Docs hors connexion) - C:\Users\SYU\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-31]
Edge Extension: (Edge relevant text changes) - C:\Users\SYU\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]

FireFox:
========
FF DefaultProfile: 1ef90wqv.default
FF ProfilePath: C:\Users\SYU\AppData\Roaming\Mozilla\Firefox\Profiles\1ef90wqv.default [2023-02-17]
FF ProfilePath: C:\Users\SYU\AppData\Roaming\Mozilla\Firefox\Profiles\3p4csa2l.default-release [2023-09-08]
FF Extension: (Language: English (US)) - C:\Users\SYU\AppData\Roaming\Mozilla\Firefox\Profiles\3p4csa2l.default-release\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2023-07-27]
FF Extension: (Video DownloadHelper) - C:\Users\SYU\AppData\Roaming\Mozilla\Firefox\Profiles\3p4csa2l.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-07-19]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-07-31] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR Profile: C:\Users\SYU\AppData\Local\Google\Chrome\User Data\Default [2023-09-08]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (McAfee® WebAdvisor) - C:\Users\SYU\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2023-02-10]
CHR HKLM\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam]
CHR HKLM-x32\...\Chrome\Extension: [pbjikboenpfhbbejgkoklgkhjpfogcam]

Brave:
=======
BRA Profile: C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-09-17]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Google Traduction) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2023-06-01]
BRA Extension: (change-language) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cofdbpoegempjloogbagkncekinflcnj [2023-09-06]
BRA Extension: (Dark Reader) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2023-08-13]
BRA Extension: (Google Docs hors connexion) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-23]
BRA Extension: (Wappalyzer - Technology profiler) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2023-08-17]
BRA Extension: (Smart Color Picker) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ilifjbbjhbgkhgabebllmlcldfdgopfl [2023-07-24]
BRA Extension: (Brave Ad Block Updater (Exception-exceptions (plaintext))) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2023-09-15]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-09-15]
BRA Extension: (Brave NTP background images) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2023-08-18]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2023-09-17]
BRA Extension: (Brave Ads Resources) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\bgifagoclclhhoflocdefiklgodpihog [2023-07-30]
BRA Extension: (Wallet Data Files Updater) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-09-12]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2023-09-17]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2023-03-28]
BRA Extension: (Brave Ad Block Updater (AdGuard Français (plaintext))) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\flnkmpokemfpaajmiimmjeiandgoodgg [2023-09-15]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-09-16]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2022-12-06]
BRA Extension: (Brave Ads Resources) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\ijgkfgmfiinppefbonemjidmkhgbonei [2023-07-30]
BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-09-17]
BRA Extension: (Brave NTP sponsored images) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\lcenblphbmngnohghkhpojmpflebkcpd [2023-09-16]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2023-09-14]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\SYU\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-09-14]

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-09-24] (Apple Inc. -> Apple Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2022-12-06] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174968 2022-12-06] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveVpnService; C:\Program Files\BraveSoftware\Brave-Browser\Application\117.1.58.127\brave_vpn_helper.exe [3246104 2023-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
S3 BraveVpnWireguardService; C:\Program Files\BraveSoftware\Brave-Browser\Application\117.1.58.127\BraveVpnWireguardService\brave_vpn_wireguard_service.exe [11059224 2023-09-16] (Brave Software, Inc. -> Brave Software, Inc.)
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1074080 2023-08-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11817040 2023-09-01] (Microsoft Corporation -> Microsoft Corporation)
R2 DFWSIDService; C:\ProgramData\Wondershare\wsServices\WsidService.exe [3950832 2023-08-25] (Wondershare Technology Group Co.,Ltd -> wondershare)
R2 ExpressVPNService; C:\Program Files (x86)\ExpressVPN\bootstrap\amd64\nssm.exe [437088 2021-01-18] (Express Vpn LLC -> ExpressVPN)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\AppHelperCap.exe [888768 2023-07-24] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\DiagsCap.exe [887184 2023-07-24] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\NetworkCap.exe [883136 2023-07-24] (HP Inc. -> HP Inc.)
R2 HPOmenCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_e00420cc358cbd11\x64\OmenCap\OmenCap.exe [755656 2023-03-16] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_965dbdfb871959a5\x64\SysInfoCap.exe [887744 2023-07-24] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_43e3600968234e87\x64\TouchpointAnalyticsClientService.exe [497744 2023-08-02] (HP Inc. -> HP Inc.)
S2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_dd6a7ef14d856351\AS\IAS\IntelAudioService.exe [539816 2021-09-01] (Intel Corporation -> Intel)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9286168 2023-09-10] (Malwarebytes Inc. -> Malwarebytes)
R2 qcmtusvc; C:\Program Files (x86)\QUALCOMM Incorporated\Qualcomm USB Drivers For Windows\DriverPackage\Qualcomm\Tools\qcmtusvc.exe [83456 2015-07-09] (QUALCOMM, Inc.) [Fichier non signé]
R2 SECOMNService; C:\WINDOWS\System32\SECOMN64.exe [760776 2022-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Sound Research, Corp.)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16907576 2023-03-09] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\NisSrv.exe [3121008 2023-08-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe [133688 2023-08-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\117.1.58.127\elevation_service.exe" [X]
S2 ElevationService; C:\ProgramData\Wondershare\wsServices\ElevationService.exe [X]
S3 GamesAppService; "C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe" [X]
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhmig.inf_amd64_f2b0ffb41c9691ca\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvhmig.inf_amd64_f2b0ffb41c9691ca\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S2 WirelessBackupService; C:\Program Files (x86)\Wondershare\drfone\Addins\Recovery\WirelessBackupService.exe [X]
S2 Wondershare InstallAssist; C:\ProgramData\Wondershare\Service\InstallAssistService.exe [X]

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AirModeBtn; C:\WINDOWS\System32\drivers\AirModeBtn.sys [49680 2022-10-16] (LG Electronics Inc. -> LG Electroncis)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [25584 2023-06-13] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R2 AMDRyzenMasterDriverV20; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2023-06-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_54807f69fe156f14\amdsafd.sys [113088 2023-04-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0393367.inf_amd64_6fba1387e8658583\B393268\amdkmdag.sys [99599752 2023-07-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [135296 2020-11-27] (Alcorlink Corp. -> )
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 expressvpnsplittunnel; C:\Program Files (x86)\ExpressVPN\splittunnel\expressvpnsplittunnel.sys [37024 2021-01-18] (ExprsVPN LLC -> ExpressVPN)
R3 expressvpnwintun; C:\WINDOWS\System32\drivers\expressvpn-wintun.sys [46824 2021-01-18] (Express VPN International Ltd. -> ExpressVPN)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [218456 2023-04-16] (Microsoft Windows -> Microsoft Corporation)
S3 HidHide; C:\WINDOWS\System32\drivers\HidHide.sys [66584 2022-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
R3 HPOmenCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_326f2e1d16385daf\x64\hpomencustomcapdriver.sys [23888 2020-04-21] (HP Inc. -> HP Inc.)
R3 HpqKbFiltr; C:\WINDOWS\System32\drivers\HpqKbFiltr64.sys [37112 2022-10-16] (Hewlett-Packard Company -> Hewlett-Packard Company)
R2 HpReadHWData; C:\WINDOWS\system32\drivers\HpReadHWData.sys [52176 2023-08-16] (HP Inc. -> Windows (R) Win 7 DDK provider)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-05-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-01-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-03-20] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MpKslad8950d0; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0F5B6AE0-BD8B-4319-8BA2-4F25F22E79D0}\MpKslDrv.sys [222464 2023-09-01] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
R1 rtf64; C:\WINDOWS\system32\DRIVERS\rtf64x64.sys [62352 2019-03-20] (Realtek Semiconductor Corp. -> Realtek)
S3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [54632 2021-03-30] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_0096; C:\WINDOWS\System32\drivers\RzDev_0096.sys [55688 2020-10-08] (Razer USA Ltd. -> Razer Inc)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [76832 2022-09-30] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tapexpressvpn; C:\WINDOWS\System32\drivers\tapexpressvpn.sys [52904 2021-01-18] (ExprsVPN LLC -> The OpenVPN Project)
R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [249400 2022-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [94208 2023-04-16] (Microsoft Windows -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55872 2023-08-31] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [574872 2023-08-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2023-08-31] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Trois mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2023-09-17 11:12 - 2023-09-17 11:13 - 000041962 _____ C:\Users\SYU\Desktop\FRST.txt
2023-09-17 11:12 - 2023-09-17 11:13 - 000000000 ____D C:\FRST
2023-09-17 11:08 - 2023-09-17 11:08 - 002382848 _____ (Farbar) C:\Users\SYU\Desktop\FRST64.exe
2023-09-16 10:38 - 2023-09-16 10:38 - 000809500 _____ C:\WINDOWS\system32\perfh00C.dat
2023-09-16 10:38 - 2023-09-16 10:38 - 000156952 _____ C:\WINDOWS\system32\perfc00C.dat
2023-09-15 18:16 - 2023-09-15 18:57 - 000000000 ____D C:\Users\SYU\Downloads\[ CourseMega.com ] Udemy - Standing Eight Brocades Qigong with Dr. Yang, Jwing-Ming
2023-09-15 16:34 - 2023-09-17 10:15 - 000384162 _____ C:\Users\SYU\Desktop\ZHPDiag.txt
2023-09-15 16:34 - 2023-09-15 16:34 - 000671902 _____ C:\Users\SYU\Desktop\ZHPDiag.html
2023-09-15 16:19 - 2023-09-15 16:19 - 003511456 _____ (Nicolas Coolman) C:\Users\SYU\ZHPSuite.exe
2023-09-15 13:43 - 2023-09-17 10:15 - 000000000 ____D C:\Users\SYU\AppData\Roaming\ZHP
2023-09-15 13:43 - 2023-09-17 10:02 - 000000733 _____ C:\Users\SYU\Desktop\ZHPSuite.lnk
2023-09-15 13:43 - 2023-09-15 13:43 - 000000000 ____D C:\Users\SYU\AppData\Local\ZHP
2023-09-15 10:35 - 2023-09-16 10:31 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2023-09-14 11:13 - 2023-09-14 11:13 - 030700568 _____ (Adlice Software ) C:\Users\SYU\Desktop\UCheck_setup.exe
2023-09-14 10:56 - 2023-09-14 10:56 - 047609808 _____ (Adlice Software ) C:\Users\SYU\Desktop\RogueKiller_setup.exe
2023-09-14 10:48 - 2023-09-14 10:54 - 000001387 _____ C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2023-09-14 10:48 - 2023-09-14 10:48 - 000000000 ____D C:\Users\SYU\AppData\Local\ESET
2023-09-13 11:04 - 2023-09-13 11:04 - 000123612 _____ C:\Users\SYU\Desktop\Engie facture moins 3 mois.pdf
2023-09-13 10:58 - 2023-09-13 10:58 - 001755082 _____ C:\Users\SYU\Desktop\facture_freemobile_johan bray.pdf
2023-09-12 15:08 - 2023-09-12 15:08 - 000003780 _____ C:\WINDOWS\system32\Tasks\OmenInstallMonitor
2023-09-12 15:08 - 2023-09-12 15:08 - 000003720 _____ C:\WINDOWS\system32\Tasks\OmenOverlay
2023-09-08 12:25 - 2023-09-08 12:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2023-09-08 12:25 - 2023-09-08 12:25 - 000000000 ____D C:\Program Files\Common Files\Apple
2023-09-06 20:54 - 2023-09-06 20:54 - 000000218 _____ C:\Users\SYU\AppData\Local\recently-used.xbel
2023-09-06 16:09 - 2023-09-07 14:09 - 000000792 _____ C:\Users\SYU\Desktop\Migration SEO.txt
2023-09-02 10:54 - 2023-09-02 10:54 - 000001206 _____ C:\Users\SYU\Desktop\facture johan bray 28 aout.yaml
2023-09-01 17:48 - 2023-09-01 17:52 - 000000000 ____D C:\Users\SYU\AppData\Roaming\ArmoredCore6
2023-09-01 17:48 - 2023-09-01 17:48 - 000002331 _____ C:\WINDOWS\system32\Drivers\etc\hosts.rollback
2023-09-01 17:48 - 2023-01-22 17:29 - 000000027 _____ C:\WINDOWS\system32\Drivers\etc\hosts.backup
2023-09-01 15:47 - 2023-09-01 15:47 - 000001965 _____ C:\Users\Public\Desktop\Armored Core 6 - Bonus.lnk
2023-09-01 15:47 - 2023-09-01 15:47 - 000001723 _____ C:\Users\Public\Desktop\Armored Core 6 - Fires of Rubicon.lnk
2023-09-01 15:47 - 2023-09-01 15:47 - 000000000 ____D C:\Games
2023-08-31 10:37 - 2023-09-04 08:17 - 000000000 ____D C:\Users\SYU\Desktop\CHINA
2023-08-29 09:31 - 2023-08-29 09:31 - 000001761 _____ C:\Users\SYU\Desktop\numerology.txt
2023-08-28 16:24 - 2023-08-28 16:24 - 000094459 _____ C:\Users\SYU\Desktop\attestation paiement caf.pdf
2023-08-28 16:20 - 2023-08-28 16:20 - 000373557 _____ C:\Users\SYU\Desktop\Urssaf-demande-acre-autoentrepreneur_signed.pdf
2023-08-28 16:07 - 2023-08-28 16:07 - 000175951 _____ C:\Users\SYU\Desktop\attestation_des_periodes_inscription.pdf
2023-08-28 16:06 - 2023-08-28 16:06 - 000074741 _____ C:\Users\SYU\Desktop\avis_de_situation.pdf
2023-08-28 13:36 - 2023-08-28 13:36 - 000000020 ___SH C:\Users\defaultuser100000.jb\ntuser.ini
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Voisinage réseau
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Voisinage d'impression
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Modèles
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Mes documents
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Menu Démarrer
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Documents\Mes vidéos
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Documents\Mes images
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\Documents\Ma musique
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 _SHDL C:\Users\defaultuser100000.jb\AppData\Local\Historique
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ___SD C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\SystemCertificates
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ___SD C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Protect
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ___SD C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Crypto
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ___SD C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Credentials
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Windows
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Vault
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Spelling
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\VirtualStore
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\SoundResearch
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\Packages
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\OGH
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\NVIDIA Corporation
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\NVIDIA
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\Malwarebytes
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\D3DSCache
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\ConnectedDevicesPlatform
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Local\AMD
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb\ansel
2023-08-28 13:36 - 2023-08-28 13:36 - 000000000 ____D C:\Users\defaultuser100000.jb
2023-08-28 13:36 - 2022-12-06 12:51 - 000000000 ____D C:\Users\defaultuser100000.jb\AppData\Roaming\Microsoft\Network
2023-08-24 13:56 - 2023-08-24 13:56 - 000011364 _____ C:\Users\SYU\Downloads\png2jpg.zip
2023-08-23 03:34 - 2023-08-23 03:34 - 000040982 _____ C:\WINDOWS\mid.bin
2023-08-22 18:18 - 2023-07-07 10:31 - 081837568 _____ C:\WINDOWS\svshost.exe
2023-08-22 18:18 - 2023-07-03 07:59 - 008251392 _____ (www.xmrig.com) C:\WINDOWS\DlHost.exe
2023-08-22 18:18 - 2023-06-10 23:29 - 000000202 _____ C:\WINDOWS\bb.bat
2023-08-22 18:18 - 2023-06-10 16:55 - 000000020 _____ C:\WINDOWS\key
2023-08-22 18:18 - 2023-06-09 21:26 - 000000821 _____ C:\WINDOWS\mid.ps1
2023-08-22 18:18 - 2023-06-03 22:02 - 000014544 _____ (OpenLibSys.org) C:\WINDOWS\WinRing0x64.sys
2023-08-21 11:08 - 2023-08-21 11:08 - 000360886 _____ C:\Users\SYU\Desktop\modele de resiliation assurance CE mobile.pdf
2023-08-19 17:48 - 2023-08-19 17:48 - 000000000 ____D C:\Program Files (x86)\QUALCOMM Incorporated
2023-08-19 16:56 - 2023-08-19 18:35 - 000032327 _____ C:\ToolLog.txt
2023-08-19 16:56 - 2023-08-19 16:56 - 000000000 ____D C:\temp
2023-08-19 13:57 - 2023-09-17 09:18 - 000003080 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate
2023-08-18 15:20 - 2023-08-18 15:24 - 000000000 ____D C:\Users\SYU\Bibliothèque calibre
2023-08-18 15:20 - 2023-08-18 15:24 - 000000000 ____D C:\Users\SYU\AppData\Roaming\calibre
2023-08-18 15:20 - 2023-08-18 15:20 - 000000000 ____D C:\Users\SYU\AppData\Roaming\calibre-ebook.com
2023-08-18 15:20 - 2023-08-18 15:20 - 000000000 ____D C:\Users\SYU\AppData\Local\calibre-cache
2023-08-18 15:19 - 2023-08-18 15:19 - 000001060 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2023-08-18 15:18 - 2023-08-18 15:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2023-08-18 15:18 - 2023-08-18 15:19 - 000000000 ____D C:\Program Files\Calibre2
2023-08-18 15:04 - 2023-08-18 15:04 - 000631811 _____ C:\Users\SYU\Downloads\Emmanuel Marseille - Numérologie évolutive-S'éveiller à sa vraie nature-2015.epub
2023-08-18 15:02 - 2023-08-18 15:03 - 011308490 _____ C:\Users\SYU\Downloads\Le Grand Livre de la Numerologie - François NOTTER pdf-fr.pdf
2023-08-17 23:24 - 2023-09-17 10:45 - 000001653 _____ C:\Users\SYU\Desktop\Workflow.txt
2023-08-15 21:34 - 2023-08-15 21:34 - 000000000 ____D C:\Users\SYU\AppData\Roaming\com.adobe.dunamis
2023-08-15 21:31 - 2023-09-05 15:20 - 000001236 _____ C:\Users\Public\Desktop\Adobe Premiere Pro.lnk
2023-08-15 21:31 - 2023-08-15 21:31 - 000003710 _____ C:\WINDOWS\system32\Tasks\MSI Task Host - Detect_Monitor
2023-08-15 21:30 - 2023-08-15 21:30 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Winsoft
2023-08-15 16:31 - 2023-08-15 16:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2023-08-15 16:31 - 2023-08-15 16:31 - 000000000 ____D C:\Program Files\VS Revo Group
2023-08-15 16:24 - 2023-08-15 16:26 - 000000000 ____D C:\Users\SYU\Downloads\Adobe Premiere Pro 2023 v23.6.0.65 repack
2023-08-15 13:03 - 2023-08-15 13:03 - 126161578 _____ C:\Users\SYU\Downloads\sf6 kim.mp4
2023-08-15 10:27 - 2023-08-15 10:27 - 008329204 _____ C:\Users\SYU\Downloads\Play.ht - Untitled.zip
2023-08-13 22:05 - 2023-08-13 22:05 - 000000000 ____D C:\Users\SYU\Desktop\BAZOOKA-pr-smol-dev-_7hqey
2023-08-13 22:03 - 2023-08-13 22:03 - 000022313 _____ C:\Users\SYU\Downloads\BAZOOKA-pr-smol-dev-_7hqey.zip
2023-08-13 09:48 - 2023-08-13 09:48 - 081113188 _____ (Giuseppe Penone ) C:\Users\SYU\Downloads\cherrytree_1.0.0.0_win64_setup.exe
2023-08-09 10:48 - 2023-08-09 10:53 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.11
2023-08-07 17:56 - 2023-08-07 17:56 - 000000000 ____D C:\Users\SYU\Documents\factures
2023-08-03 15:22 - 2023-08-03 15:22 - 000000000 ____D C:\ProgramData\Piriform
2023-07-29 15:09 - 2023-07-29 15:09 - 000000000 ____D C:\Users\SYU\Documents\VST3 Presets
2023-07-29 15:09 - 2023-07-29 15:09 - 000000000 ____D C:\Users\SYU\Documents\Steinberg
2023-07-29 15:04 - 2023-07-29 15:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steinberg Library Manager
2023-07-29 15:03 - 2023-07-29 15:09 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Steinberg
2023-07-29 15:03 - 2023-07-29 15:05 - 000000000 ____D C:\ProgramData\Steinberg
2023-07-29 15:03 - 2023-07-29 15:04 - 000000000 ____D C:\Program Files\Steinberg
2023-07-29 15:03 - 2023-07-29 15:03 - 000002106 _____ C:\Users\SYU\Desktop\Cubase 12.lnk
2023-07-29 15:03 - 2023-07-29 15:03 - 000000000 ____D C:\Users\SYU\AppData\Roaming\VST XMLs
2023-07-29 15:03 - 2023-07-29 15:03 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steinberg Cubase 12
2023-07-29 14:59 - 2023-07-29 14:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TEAM R2R
2023-07-29 14:59 - 2023-07-29 14:59 - 000000000 ____D C:\Program Files\TEAM R2R
2023-07-29 14:59 - 2023-07-29 14:59 - 000000000 ____D C:\Program Files\Common Files\Steinberg
2023-07-29 14:02 - 2023-07-29 14:03 - 000000000 ____D C:\Users\SYU\Downloads\Steinberg Cubase Pro 12 v12.0.52-R2R
2023-07-27 22:39 - 2023-07-27 22:39 - 000012570 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E09.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:39 - 2023-07-27 22:39 - 000012550 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E13.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:39 - 2023-07-27 22:39 - 000012550 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E11.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:39 - 2023-07-27 22:39 - 000012550 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E10.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:39 - 2023-07-27 22:39 - 000012530 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E12.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:38 - 2023-07-27 22:38 - 000012610 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E08.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:38 - 2023-07-27 22:38 - 000012590 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E07.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:38 - 2023-07-27 22:38 - 000012590 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E06.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:38 - 2023-07-27 22:38 - 000012590 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E05.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:38 - 2023-07-27 22:38 - 000012590 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E04.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:38 - 2023-07-27 22:38 - 000012590 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E03.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:37 - 2023-07-27 22:37 - 000012630 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E02.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:36 - 2023-07-27 22:36 - 000012610 _____ C:\Users\SYU\Downloads\Baki.Hanma.S02E01.MULTI.1080p.WEB.DDP5.1.x264-TFA.torrent
2023-07-27 22:33 - 2023-08-27 14:29 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-07-26 15:49 - 2023-07-26 15:49 - 004270782 _____ C:\Users\SYU\Downloads\RASHIDOOO BGM MOD-556-1-0-1690208118.zip
2023-07-26 09:13 - 2023-07-26 09:17 - 000000000 ____D C:\Users\SYU\anaconda3
2023-07-25 17:05 - 2023-07-25 17:05 - 000000000 _____ C:\Users\SYU\2.0'
2023-07-24 17:46 - 2023-07-24 17:46 - 000000000 ____D C:\Users\SYU\.insightface
2023-07-24 17:28 - 2023-07-24 17:28 - 000000000 ____D C:\Users\SYU\.ifnude
2023-07-21 19:59 - 2023-07-21 19:59 - 000000000 ____D C:\Users\SYU\Documents\usb
2023-07-21 19:18 - 2023-07-21 19:26 - 000000000 ____D C:\Users\SYU\dwhelper
2023-07-21 19:17 - 2023-07-21 19:18 - 000000000 ____D C:\Program Files\net.downloadhelper.coapp
2023-07-21 13:25 - 2023-07-21 13:25 - 000203897 _____ C:\Users\SYU\Documents\attestation achat s21 ultra.pdf
2023-07-20 13:22 - 2023-09-15 10:41 - 000000000 ____D C:\Users\SYU\AppData\Local\AMD_Common
2023-07-20 13:05 - 2023-07-20 13:05 - 000003518 _____ C:\WINDOWS\system32\Tasks\AMDScoSupportTypeUpdate
2023-07-20 13:05 - 2023-07-20 13:05 - 000003484 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate
2023-07-20 13:05 - 2023-07-20 13:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2023-07-20 13:04 - 2023-07-20 13:04 - 000002622 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask
2023-07-20 13:04 - 2023-07-20 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition
2023-07-20 13:02 - 2023-07-05 20:57 - 001592712 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 001592712 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000949680 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000832904 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000832904 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000721288 _____ C:\WINDOWS\system32\hiprt0200064.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000715184 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000715184 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000668584 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000668584 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000653128 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000653128 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000596360 _____ C:\WINDOWS\system32\GameManager64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000539056 _____ C:\WINDOWS\system32\libsmi_guest.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000531888 _____ C:\WINDOWS\system32\libsmi_host.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000525704 _____ C:\WINDOWS\system32\atieah64.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000492424 _____ C:\WINDOWS\system32\EEURestart.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000463240 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000449928 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000394632 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2023-07-20 13:02 - 2023-07-05 20:57 - 000256432 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000216968 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000200416 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000197000 _____ C:\WINDOWS\system32\mantle64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000186248 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000176008 _____ C:\WINDOWS\system32\mantleaxl64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000174000 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000163272 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000155976 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000153480 _____ C:\WINDOWS\SysWOW64\mantle32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000145520 _____ C:\WINDOWS\system32\atidxx64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000137608 _____ C:\WINDOWS\SysWOW64\mantleaxl32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000137136 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000132528 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000125704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000108424 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2023-07-20 13:02 - 2023-07-05 20:57 - 000064904 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 089135536 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 011746704 _____ C:\WINDOWS\system32\amdsmi.exe
2023-07-20 13:02 - 2023-07-05 20:56 - 004375472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 004179848 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 002176392 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 001701048 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 001378312 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 001304968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 001029552 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000933768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000791472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000761224 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000668592 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000558472 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000553256 _____ C:\WINDOWS\system32\amdmiracast.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000532400 _____ C:\WINDOWS\system32\dgtrayicon.exe
2023-07-20 13:02 - 2023-07-05 20:56 - 000461232 _____ C:\WINDOWS\system32\amdlogum.exe
2023-07-20 13:02 - 2023-07-05 20:56 - 000422320 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000351152 _____ C:\WINDOWS\system32\clinfo.exe
2023-07-20 13:02 - 2023-07-05 20:56 - 000165784 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000155984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000128392 _____ C:\WINDOWS\system32\amdxc64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000125744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000118920 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000103856 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000041392 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2023-07-20 13:02 - 2023-07-05 20:56 - 000038280 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2023-07-20 13:02 - 2023-07-05 20:55 - 105764744 _____ C:\WINDOWS\system32\amd_comgr.dll
2023-07-20 13:02 - 2023-07-05 20:55 - 016633776 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll
2023-07-20 13:02 - 2023-07-05 20:55 - 000166832 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2023-07-20 13:02 - 2023-07-05 20:55 - 000140216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2023-07-20 13:02 - 2023-07-05 20:55 - 000135600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2023-07-20 13:02 - 2023-06-26 20:10 - 002965456 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\AMDBugReportTool.exe
2023-07-20 13:01 - 2023-07-05 19:53 - 103832568 _____ C:\WINDOWS\system32\amdxc64.so
2023-07-20 13:01 - 2023-07-05 19:53 - 031938072 _____ C:\WINDOWS\system32\hiprt02000_amd.hipfb
2023-07-20 13:01 - 2023-07-05 19:53 - 023302232 _____ C:\WINDOWS\system32\hiprt02000_nv.fatbin
2023-07-20 13:01 - 2023-07-05 19:53 - 002433848 _____ C:\WINDOWS\system32\oro_compiled_kernels.hipfb
2023-07-20 13:01 - 2023-07-05 19:53 - 002000584 _____ C:\WINDOWS\system32\oro_compiled_kernels.fatbin
2023-07-20 11:07 - 2023-07-20 11:07 - 000000000 ____D C:\Users\SYU\ansel
2023-07-20 11:04 - 2023-07-20 11:04 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2023-07-20 11:04 - 2023-07-20 11:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2023-07-20 11:04 - 2023-07-13 06:45 - 002904632 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2023-07-20 11:04 - 2023-07-13 06:45 - 002234920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2023-07-20 11:04 - 2023-07-13 06:45 - 001297464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2023-07-20 11:04 - 2023-07-13 06:45 - 000169512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2023-07-20 11:04 - 2023-07-13 06:45 - 000148520 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2023-07-20 11:00 - 2023-07-13 06:45 - 000059928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2023-07-20 10:58 - 2023-07-14 05:57 - 001226760 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-07-20 10:58 - 2023-07-14 05:54 - 000933896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2023-07-20 10:58 - 2023-07-14 05:54 - 000669168 _____ C:\WINDOWS\system32\nvofapi64.dll
2023-07-20 10:58 - 2023-07-14 05:54 - 000503776 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2023-07-20 10:58 - 2023-07-14 05:53 - 059075088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2023-07-20 10:58 - 2023-07-14 05:53 - 002167816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2023-07-20 10:58 - 2023-07-14 05:53 - 001622048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2023-07-20 10:58 - 2023-07-14 05:53 - 001538072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2023-07-20 10:58 - 2023-07-14 05:53 - 001195016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2023-07-20 10:58 - 2023-07-14 05:53 - 000992272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2023-07-20 10:58 - 2023-07-14 05:53 - 000776712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2023-07-20 10:58 - 2023-07-14 05:53 - 000769048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 014520816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 012066272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 006190576 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 005844960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 005550576 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 003482592 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2023-07-20 10:58 - 2023-07-14 05:52 - 000459272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2023-07-20 10:58 - 2023-07-14 05:51 - 000852960 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2023-07-20 10:58 - 2023-07-14 05:50 - 006738040 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2023-07-20 10:58 - 2023-07-13 06:45 - 000108142 _____ C:\WINDOWS\system32\nvinfo.pb
2023-07-20 09:16 - 2023-07-20 13:16 - 000000000 ____D C:\AMD
2023-07-20 09:16 - 2023-07-20 09:16 - 000000000 ____D C:\Users\SYU\AppData\Roaming\AMD
2023-07-20 09:16 - 2023-07-20 09:16 - 000000000 ____D C:\Users\SYU\AppData\Local\setup
2023-07-20 09:16 - 2023-07-20 09:16 - 000000000 ____D C:\Program Files (x86)\AMD
2023-07-20 09:08 - 2023-07-20 09:08 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Cybelsoft
2023-07-20 09:07 - 2023-07-20 09:07 - 011598058 _____ C:\Users\SYU\Downloads\DriversCloudx64_11_2_8_0.zip
2023-07-20 08:16 - 2023-07-20 08:16 - 000000000 ____D C:\Users\SYU\AppData\Roaming\StreamUpdate
2023-07-19 21:15 - 2023-07-19 21:15 - 000008031 _____ C:\Users\SYU\Downloads\L'énergie sexuelle masculine.torrent
2023-07-19 17:08 - 2023-07-19 17:08 - 000000000 ____D C:\Users\SYU\AppData\Roaming\LiveUpdate
2023-07-19 17:08 - 2023-07-19 17:08 - 000000000 ____D C:\Users\SYU\AppData\Roaming\9728
2023-07-19 17:07 - 2023-07-20 08:53 - 000000000 ____D C:\Users\SYU\AppData\Roaming\DVDFab
2023-07-19 17:07 - 2023-07-19 17:08 - 000000000 ____D C:\Users\SYU\Documents\LiveUpdate
2023-07-19 17:07 - 2023-07-19 17:07 - 000000171 _____ C:\Users\SYU\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2023-07-19 17:07 - 2023-07-19 17:07 - 000000000 ____D C:\ProgramData\boost_interprocess
2023-07-19 16:14 - 2023-09-16 18:33 - 000000000 ____D C:\ProgramData\Wondershare
2023-07-19 16:14 - 2023-09-08 12:25 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2023-07-19 16:14 - 2023-07-19 16:14 - 000000016 _____ C:\ProgramData\mntemp
2023-07-19 15:53 - 2023-07-19 15:53 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Apple Computer
2023-07-19 15:47 - 2023-09-08 12:25 - 000000000 ____D C:\ProgramData\Apple
2023-07-19 15:47 - 2023-07-19 15:47 - 000000000 ____D C:\Users\SYU\AppData\LocalLow\Apple Computer
2023-07-19 15:47 - 2023-07-19 15:47 - 000000000 ____D C:\Users\SYU\AppData\Local\Apple
2023-07-19 10:25 - 2023-08-01 13:00 - 000000000 ____D C:\Users\SYU\Documents\SF6 MODDING
2023-07-19 08:52 - 2023-07-19 08:52 - 000037945 _____ C:\Users\SYU\Downloads\Adobe_Premiere_Pro_2020_v14.3_TNT.dmg.torrent
2023-07-18 16:24 - 2023-07-21 13:36 - 000001718 _____ C:\Users\SYU\Desktop\automatic1111.lnk
2023-07-17 19:31 - 2023-07-29 15:08 - 000000000 ____D C:\Users\SYU\Documents\skyzo
2023-07-17 09:50 - 2023-07-17 09:50 - 000000020 _____ C:\Users\SYU\.lesshst
2023-07-13 13:44 - 2023-07-13 13:44 - 001107553 _____ C:\Users\SYU\Downloads\Copie de johan cv 2023 meta.zip
2023-07-05 08:35 - 2023-07-05 08:35 - 001160891 _____ C:\Users\SYU\Downloads\johan cv 2023 meta.zip
2023-07-04 17:06 - 2022-09-30 05:24 - 000050720 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ss_conn_usb_driver2.sys
2023-07-04 12:26 - 2023-07-04 12:26 - 000000000 ____D C:\Users\SYU\AppData\Local\pip
2023-07-04 12:21 - 2023-07-26 09:24 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10
2023-07-04 11:56 - 2023-07-04 11:56 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Anaconda3 (64-bit)
2023-07-04 11:45 - 2023-07-04 11:47 - 000000000 ____D C:\Users\SYU\pytorch
2023-07-04 11:35 - 2023-07-04 11:40 - 000000000 _____ C:\Users\SYU\py
2023-07-04 11:19 - 2023-07-04 11:19 - 000000000 ____D C:\a1111
2023-07-01 22:30 - 2023-07-01 22:30 - 000002794 _____ C:\Users\SYU\Desktop\TikTok.lnk
2023-06-30 20:03 - 2023-08-08 11:51 - 000000000 ____D C:\Users\SYU\Desktop\cv meta
2023-06-29 18:38 - 2023-06-29 18:38 - 000714293 _____ C:\Users\SYU\Documents\screen mail.psd
2023-06-26 13:59 - 2023-06-26 13:59 - 000856504 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Device.dll
2023-06-26 13:59 - 2023-06-26 13:59 - 000061368 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Platform.dll
2023-06-26 11:15 - 2023-06-29 08:55 - 000000000 ____D C:\Users\SYU\Desktop\Avangard ai
2023-06-25 11:35 - 2023-07-23 17:06 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Telegram Desktop
2023-06-25 11:35 - 2023-06-25 11:35 - 000001033 _____ C:\Users\SYU\Desktop\Telegram.lnk
2023-06-25 11:35 - 2023-06-25 11:35 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop
2023-06-22 23:32 - 2023-08-16 21:38 - 000052176 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\HpReadHWData.sys
2023-06-22 23:32 - 2023-06-22 23:32 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_HpReadHWData_01011.Wdf
2023-06-22 23:20 - 2023-06-22 23:21 - 000000000 ____D C:\Users\defaultuser100000

==================== Trois mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2023-09-17 10:53 - 2022-12-06 12:36 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-09-17 10:52 - 2021-08-20 07:44 - 000000000 ____D C:\Program Files\Microsoft Office
2023-09-17 10:46 - 2023-01-22 07:41 - 000000000 ____D C:\Program Files (x86)\Google
2023-09-17 10:44 - 2022-12-06 20:51 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Code
2023-09-17 09:37 - 2022-12-06 12:36 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-17 09:18 - 2023-03-04 11:22 - 000003112 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner
2023-09-17 09:18 - 2022-12-06 12:45 - 000000000 ____D C:\ProgramData\NVIDIA
2023-09-17 09:18 - 2022-12-06 12:36 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-17 09:17 - 2023-05-10 13:22 - 000000000 ____D C:\Users\SYU\AppData\Local\Malwarebytes
2023-09-17 09:17 - 2022-12-06 18:54 - 000002369 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2023-09-17 09:17 - 2022-12-06 12:44 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-17 09:17 - 2022-12-06 12:36 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-16 18:57 - 2022-12-06 12:44 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-16 18:33 - 2021-11-30 10:04 - 000000000 ____D C:\ProgramData\McAfee
2023-09-16 18:10 - 2022-12-06 18:51 - 000000000 ____D C:\Users\SYU\AppData\Local\D3DSCache
2023-09-16 10:38 - 2022-12-06 12:55 - 001829086 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-09-16 10:38 - 2022-12-06 12:36 - 000000000 ____D C:\WINDOWS\INF
2023-09-16 10:35 - 2023-01-22 20:07 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2023-09-16 10:31 - 2023-03-15 11:54 - 000000000 ____D C:\Program Files\TeamViewer
2023-09-16 10:31 - 2022-12-07 13:55 - 000000000 ____D C:\Users\SYU\AppData\Local\OGH
2023-09-16 10:31 - 2022-12-06 12:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-09-16 10:31 - 2022-12-06 12:44 - 000012288 ___SH C:\DumpStack.log.tmp
2023-09-16 10:31 - 2022-12-06 12:36 - 000000000 ____D C:\WINDOWS\ServiceState
2023-09-16 10:30 - 2022-12-06 12:33 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-09-15 18:02 - 2022-12-08 17:22 - 000000000 ____D C:\Users\SYU\AppData\Roaming\deluge
2023-09-15 18:02 - 2022-12-08 17:14 - 000000000 ____D C:\Users\SYU\Documents\torrents
2023-09-15 17:53 - 2022-12-13 18:25 - 000000000 ____D C:\Users\SYU\AppData\Roaming\vlc
2023-09-15 16:19 - 2022-12-06 18:47 - 000000000 ____D C:\Users\SYU
2023-09-15 10:50 - 2022-12-06 20:51 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2023-09-15 10:32 - 2022-12-08 22:20 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-09-15 10:30 - 2022-12-08 22:20 - 177941912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-09-15 10:29 - 2022-12-06 12:34 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-09-14 11:17 - 2022-12-09 16:32 - 000000000 ____D C:\Users\SYU\AppData\Local\CrashDumps
2023-09-13 19:17 - 2022-12-06 20:59 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Evernote
2023-09-12 15:37 - 2022-12-16 11:41 - 000000000 ____D C:\Users\SYU\Documents\ADMINISTRATIF
2023-09-12 15:08 - 2022-12-06 12:41 - 000000000 ____D C:\Program Files\HP
2023-09-12 15:07 - 2022-12-07 13:55 - 000003756 _____ C:\WINDOWS\system32\Tasks\SystemOptimizer
2023-09-12 09:45 - 2022-12-19 22:02 - 000000000 ____D C:\XboxGames
2023-09-12 09:40 - 2022-12-19 22:02 - 002688512 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-09-12 09:40 - 2022-12-19 22:02 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-09-12 09:40 - 2022-12-19 22:02 - 000210536 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-09-12 09:40 - 2022-12-19 22:02 - 000181864 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-09-12 09:40 - 2022-12-19 22:02 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-09-12 09:40 - 2022-12-19 22:02 - 000095848 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-09-12 09:40 - 2022-12-19 22:02 - 000075368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-09-10 14:13 - 2022-12-06 12:36 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-09-09 11:47 - 2022-12-06 18:52 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3260349332-2736728831-3187818672-1001
2023-09-09 11:47 - 2022-12-06 18:52 - 000003350 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3260349332-2736728831-3187818672-1001
2023-09-09 11:47 - 2022-12-06 18:52 - 000002422 _____ C:\Users\SYU\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-09-08 14:51 - 2023-02-17 17:46 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-09-07 14:19 - 2023-04-15 18:58 - 000000000 ____D C:\Users\SYU\AppData\Local\RKKB
2023-09-05 16:49 - 2022-12-06 18:51 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Adobe
2023-09-04 19:23 - 2023-03-02 18:50 - 000000000 ____D C:\Users\SYU\AppData\Roaming\discord
2023-09-04 19:02 - 2023-03-02 18:50 - 000000000 ____D C:\Users\SYU\AppData\Local\Discord
2023-09-04 15:26 - 2022-12-06 20:59 - 000000000 ____D C:\Users\SYU\AppData\Local\evernote-client-updater
2023-09-03 20:55 - 2023-02-26 12:17 - 000000000 ____D C:\Users\SYU\AppData\Roaming\obs-studio
2023-09-03 08:41 - 2023-02-27 17:25 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2023-09-02 16:49 - 2022-12-06 20:46 - 000000000 ____D C:\Program Files (x86)\Steam
2023-09-01 18:36 - 2022-12-09 16:33 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Goldberg SteamEmu Saves
2023-09-01 17:47 - 2023-01-22 20:07 - 000000000 ___HD C:\WINDOWS\msdownld.tmp
2023-09-01 17:47 - 2023-01-22 20:07 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2023-09-01 14:42 - 2022-12-06 12:50 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2023-08-31 13:34 - 2023-01-07 23:31 - 000000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecsTier2
2023-08-31 08:43 - 2021-06-25 20:10 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-08-29 08:56 - 2023-04-16 12:24 - 000000000 ____D C:\Users\SYU\AppData\Roaming\Hyper
2023-08-28 11:08 - 2023-03-08 17:14 - 000000000 ____D C:\Users\SYU\Desktop\RDBUREAU
2023-08-27 14:29 - 2023-02-17 17:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-08-27 14:29 - 2023-01-22 07:41 - 000000760 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job
2023-08-27 14:29 - 2023-01-22 07:41 - 000000000 ____D C:\Program Files\CCleaner
2023-08-23 16:58 - 2023-02-17 17:46 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-08-22 07:00 - 2023-01-22 07:41 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-08-22 07:00 - 2023-01-22 07:41 - 000003476 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting

==================== Fichiers à la racine de certains dossiers ========

2023-09-15 16:19 - 2023-09-15 16:19 - 003511456 _____ (Nicolas Coolman) C:\Users\SYU\ZHPSuite.exe
2023-07-19 17:07 - 2023-07-19 17:07 - 000000171 _____ () C:\Users\SYU\AppData\Roaming\822f02e4-9e9a-4077-a765-71edfca16ad0
2023-02-25 15:17 - 2023-03-07 22:53 - 000208896 _____ () C:\Users\SYU\AppData\Roaming\emp.bin
2022-12-30 13:56 - 2022-12-30 13:56 - 000000015 _____ () C:\Users\SYU\AppData\Roaming\obs-virtualcam.txt
2023-09-06 20:54 - 2023-09-06 20:54 - 000000218 _____ () C:\Users\SYU\AppData\Local\recently-used.xbel
2022-12-08 16:15 - 2022-12-08 16:15 - 000000003 _____ () C:\Users\SYU\AppData\Local\updater.log
2022-12-08 16:15 - 2022-12-08 16:15 - 000000424 _____ () C:\Users\SYU\AppData\Local\UserProducts.xml

==================== SigCheckExt =========================

2006-12-02 00:37 - 2006-12-02 00:37 - 000904704 _____ (Microsoft Corporation) C:\msdia80.dll
2020-12-02 05:41 - 2020-12-02 05:41 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dref9.dll
2022-12-19 22:02 - 2023-09-12 09:40 - 000483328 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2021-11-30 10:03 - 2021-06-03 17:29 - 000378880 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtBWCtrl.dll
2021-11-30 10:03 - 2019-04-03 00:49 - 000118784 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtFDrvIOCtrl.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000246272 _____ C:\WINDOWS\system32\rtvcvfw64.dll
2021-11-30 10:03 - 2017-09-01 00:22 - 002216448 _____ (TODO: ) C:\WINDOWS\system32\wlanCliDLL.dll
2023-08-22 18:18 - 2023-07-03 07:59 - 008251392 _____ (www.xmrig.com) C:\WINDOWS\DlHost.exe
2023-08-22 18:18 - 2023-07-07 10:31 - 081837568 _____ C:\WINDOWS\svshost.exe
2020-11-25 20:37 - 2020-11-25 20:37 - 000332800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D2D1Debug2.dll
2020-06-23 17:54 - 2020-06-23 17:54 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11sdklayers.dll
2020-06-23 17:54 - 2020-06-23 17:54 - 000698368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_1sdklayers.dll
2020-06-23 17:54 - 2020-06-23 17:54 - 000936960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11_2sdklayers.dll
2020-12-02 05:14 - 2020-12-02 05:14 - 000376832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dref9.dll
2012-09-28 21:45 - 2012-09-28 21:45 - 000247296 _____ C:\WINDOWS\SysWOW64\rtvcvfw32.dll
2023-09-15 16:19 - 2023-09-15 16:19 - 003511456 _____ (Nicolas Coolman) C:\Users\SYU\ZHPSuite.exe
2023-09-17 11:08 - 2023-09-17 11:08 - 002382848 _____ (Farbar) C:\Users\SYU\Desktop\FRST64.exe
2023-08-13 09:48 - 2023-08-13 09:48 - 081113188 _____ (Giuseppe Penone ) C:\Users\SYU\Downloads\cherrytree_1.0.0.0_win64_setup.exe

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)


==================== BCD ================================

Gestionnaire de démarrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{1a14d574-51b2-11ec-ad92-806e6f6e6963}
{7259c71e-62bb-11ed-ae08-806e6f6e6963}
timeout 0

Gestionnaire de démarrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
isolatedcontext Yes
flightsigning Yes
default {current}
resumeobject {89e4ea0f-7552-11ed-81de-999fe23d6b46}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Application logicielle (101fffff)
--------------------------------
identificateur {1a14d574-51b2-11ec-ad92-806e6f6e6963}
device partition=\Device\HarddiskVolume1
description Internal Hard Disk
isolatedcontext Yes

Application logicielle (101fffff)
--------------------------------
identificateur {7259c71e-62bb-11ed-ae08-806e6f6e6963}
description USB Drive (UEFI)
isolatedcontext Yes

Chargeur de démarrage Windows
-----------------------------
identificateur {0e1a5004-4195-11ed-81b2-819716d69ca8}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{0e1a5005-4195-11ed-81b2-819716d69ca8}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{0e1a5005-4195-11ed-81b2-819716d69ca8}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes

Chargeur de démarrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 11
locale fr-FR
inherit {bootloadersettings}
recoverysequence {0e1a5004-4195-11ed-81b2-819716d69ca8}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {89e4ea0f-7552-11ed-81de-999fe23d6b46}
nx OptIn
bootmenupolicy Standard
hypervisorlaunchtype Auto

Reprendre à partir de la mise en veille prolongée
-------------------------------------------------
identificateur {89e4ea0f-7552-11ed-81de-999fe23d6b46}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {0e1a5004-4195-11ed-81b2-819716d69ca8}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No

Testeur de mémoire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics mémoire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
isolatedcontext Yes

Paramètres EMS
--------------
identificateur {emssettings}
bootems No
isolatedcontext Yes

Paramètres du débogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
isolatedcontext Yes

Erreurs de mémoire RAM
----------------------
identificateur {badmemory}
isolatedcontext Yes

Paramètres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
isolatedcontext Yes

Paramètres du chargeur de démarrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
isolatedcontext Yes

Paramètres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
isolatedcontext Yes
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200

Paramètres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
isolatedcontext Yes

Options de périphérique
-----------------------
identificateur {0e1a5005-4195-11ed-81b2-819716d69ca8}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi

==================== Fin de FRST.txt ========================