Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 10.04.2024
Exécuté par philo (administrateur) sur DESKTOP-2HS61H9 (Dell Inc. Inspiron 7590) (15-04-2024 12:28:02)
Exécuté depuis C:\Users\philo\OneDrive\Bureau\FRST64.exe
Profils chargés: philo
Plate-forme: Microsoft Windows 11 Professionnel Version 23H2 22631.3447 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe ->) (Rivet Networks LLC) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\RAPS.exe
(C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2024.403.300_x64__8wekyb3d8bbwe\olk.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe <15>
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <40>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2024.403.300_x64__8wekyb3d8bbwe\olk.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) () [Fichier non signé] C:\Program Files\Allway Sync\Bin\SyncService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\Fusion\FusionService.exe
(services.exe ->) (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_64d7fcfcde9b9c10\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e51f7a58015f231f\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e51f7a58015f231f\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_f629911085770af0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_f3c201b4c28c14d0\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\drivers\SessionService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_8e82c1189f2059c2\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a1020546271138b9\RtkAudUService64.exe <2>
(services.exe ->) (Rivet Networks) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe
(services.exe ->) (Rivet Networks) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
(services.exe ->) (Rivet Networks, LLC.) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Thales DIS CPL USA, Inc. -> Thales) C:\Program Files\SafeNet\Authentication\SAC\x64\SACSRV.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_b4d0b189ff2aba03\WavesSysSvc64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Development Company, L.P.) C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_152.1.1099.0_x64__v10z8vjag6ke6\HP.Smart.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.065.0331.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a1020546271138b9\RtkAudUService64.exe [1343072 2021-08-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_b4d0b189ff2aba03\WavesSvc64.exe [1774584 2021-02-18] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [DellMobileConnectWelcome] => C:\Program Files\Dell\DellMobileConnectDrivers\DellMobileConnectWelcome.exe [345848 2019-06-21] (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [SACMonitor] => C:\Program Files\SafeNet\Authentication\SAC\x64\SACMonitor.exe [661960 2022-11-14] (Thales DIS CPL USA, Inc. -> Thales)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1131488 2024-01-23] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [193544 2024-01-23] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306512 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [MicrosoftEdgeAutoLaunch_BE14427D90D0D5E6299E8072EDA3FF39] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-04-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [C:\Users\philo\AppData\Local\GoSign-Desktop\app-2.1.1\GoSignDesktop.exe] => C:\Users\philo\AppData\Local\GoSign-Desktop\Update.exe [1937920 2024-01-15] () [Fichier non signé]
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [C:\Users\philo\AppData\Local\InfoCert\GoSign Desktop\GoSignDesktop.exe] => C:\Users\philo\AppData\Local\InfoCert\GoSign Desktop\GoSignDesktop.exe [109739688 2024-02-16] (INFOCERT SPA -> InfoCert S.p.A.)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [11411360 2024-04-11] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Print\Monitors\HP C611 Status Monitor: C:\Windows\system32\hpinkstsC611LM.dll [333344 2013-05-06] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP CC11 Status Monitor: C:\Windows\system32\hpinkstsCC11LM.dll [391992 2019-03-15] (HP Inc -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\123.0.6312.122\Installer\chrmstp.exe [2024-04-12] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\philo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2023-03-14]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\philo\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [Fichier non signé]
Startup: C:\Users\philo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2024-02-15]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {1B05324D-ABB8-4184-AE14-7ACA59397BC9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {F13C5D64-EFCA-4D30-82C4-8AD9940FF36E} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {20DA3794-DCA2-41EE-BD43-B29DA8909936} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4434400 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {E088993F-C7EB-4CF1-A1B6-03E402853DA3} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [964448 2024-01-17] (Dell Inc -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {55896F48-F14B-4ED5-85DF-8045C24BC214} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem125.0.6407.0{2661D7C1-580E-4789-A688-A5C581859105} => C:\Program Files (x86)\Google\GoogleUpdater\125.0.6407.0\updater.exe [4782880 2024-04-08] (Google LLC -> Google LLC)
Task: {18F5FF43-BB8F-496C-AC4C-813094ED0B92} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28452976 2024-03-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F7E24C89-34F1-4091-9A17-C4848852962D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28452976 2024-03-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {6DFFB134-2EBA-42CF-BC15-644552C678FA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309696 2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {3F283690-2234-4954-A1C6-E01E5AF64A19} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309696 2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {E34261A6-A2C2-47E5-866E-FCB99B8955ED} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [168488 2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E98CD73-48DB-4315-A8C4-652AC0B3EC08} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {60CC6218-7F61-41F1-8B96-BCF95CFD69FF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CB156AC1-6E29-4F93-A843-238CCC6121BF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {50E0D295-3B21-415F-8106-B6B88136FF9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DBBF68D3-8EC1-46D0-B27E-AF00161D86AB} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {9EF2C7C1-DF9B-4A1B-B964-DEFDA67EF7CD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D484457D-08D8-499D-B491-5A16448EDF57} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3728752 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {71EDE61C-D8D5-4C63-B56F-99392FD4257D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648048 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {E2971887-A010-4E76-89F3-60691A920078} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {97D0933B-19FF-4075-A19D-3EBA516599FE} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAF76051-6498-46BD-BE87-D67E88EFF4BE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [590704 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A5FBD1CC-3A15-4112-B8A1-D9296E237B99} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A566DCD4-ECB5-46F4-94CB-1B78E8C5E1D7} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {93D0E2B0-CF33-4495-9168-248B6ABBEB78} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {A36FCD69-951B-4D6A-A77D-CBB831D145B4} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {16EA47EC-B44D-4A54-9890-DF0BC71210D5} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206496 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {84AAB0CA-54A4-435E-9EAF-DF3D99E12D66} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2113270933-1622261746-1565655607-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206496 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}: [DhcpDomain] home
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\143636F62784F64756C637D2745756374737: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\242757373756C6370214962707F627470266275656027596D26496: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\4554D4051402D4553554F4: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\45568707C61696E65646027457563747: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\6627565626F687F52756E656: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\75946494F534F4C455D4245535F534146454: [DhcpNameServer] 10.1.1.254 8.8.8.8 208.67.222.222
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\75946494F534F4C455D4245535F534146454: [DhcpDomain] hotspot.2isr.local
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\960586F6E65602465602D416E6F6E68272: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F52374548545: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F52374548545: [DhcpDomain] home
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F55374548545: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F55374548545: [DhcpDomain] home
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\F4F4245454025447167656025374: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\F4F4245454025447167656025374: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-15]
Edge DownloadDir: Default -> C:\Users\philo\Downloads
Edge Notifications: Default -> hxxps://book.lufthansa.com; hxxps://calendar.google.com; hxxps://connect.zoho.com; hxxps://crm.zoho.eu; hxxps://fr.shopping.rakuten.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://web.whatsapp.com; hxxps://www.manomano.fr; hxxps://www.paruvendu.fr
Edge Extension: (Email Finder - GetProspect) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bhbcbkonalnjkflmdkdodieehnmmeknp [2023-06-08]
Edge Extension: (Google Docs hors connexion) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-01]
Edge Extension: (Hunter - Extension Email Finder) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hgmhmanijnjhaffoampdlllchpolkdnj [2023-10-27]
Edge Extension: (Edge relevant text changes) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-09]
Edge Extension: (Evernote Web Clipper) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llhcnbijpnechllogkacbcjmkcgjbjfi [2024-03-04]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-04-11] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2024-01-23] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2024-01-23] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\S-1-5-21-2113270933-1622261746-1565655607-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\philo\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2113270933-1622261746-1565655607-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\philo\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default [2024-04-15]
CHR Notifications: Default -> hxxps://blog.comexplorer.com; hxxps://book.brusselsairlines.com; hxxps://book.lufthansa.com; hxxps://bookflights.austrian.com; hxxps://calendar.google.com; hxxps://crm.zoho.eu; hxxps://happydemics.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://one.zoho.eu; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://www.britishairways.com; hxxps://www.castorama.fr; hxxps://www.distrelec.fr; hxxps://www.evernote.com; hxxps://www.interflora.fr
CHR Extension: (Email Finder - GetProspect) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbcbkonalnjkflmdkdodieehnmmeknp [2023-06-12]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2020-05-27]
CHR Extension: (Adobe Acrobat : outils de modif., de conversion et de signature de PDF) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-04-11]
CHR Extension: (Google Docs hors connexion) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-01]
CHR Extension: (Hunter - Extension Email Finder) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmhmanijnjhaffoampdlllchpolkdnj [2023-11-08]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-22]
CHR Extension: (Evernote Web Clipper) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2024-03-10]
CHR Profile: C:\Users\philo\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-11-07]
CHR Profile: C:\Users\philo\AppData\Local\Google\Chrome\User Data\System Profile [2023-12-08]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944096 2024-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4555744 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BotkindSyncService; C:\Program Files\Allway Sync\Bin\SyncService.exe [262144 2019-08-06] () [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14221312 2024-03-29] (Microsoft Corporation -> Microsoft Corporation)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458128 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [159632 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [481680 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [57760 2023-12-20] (Dell Inc -> )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22224 2023-12-13] (Dell Inc -> Dell INC.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [50392 2024-01-27] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [159664 2023-12-22] (Dell Technologies Inc. -> Dell)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.065.0331.0002\FileSyncHelper.exe [3510704 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
R2 FusionService; C:\Program Files\Dell\Fusion\FusionService.exe [25336 2022-03-29] (Dell Inc -> Dell Inc.)
S2 GoogleUpdaterInternalService125.0.6407.0; C:\Program Files (x86)\Google\GoogleUpdater\125.0.6407.0\updater.exe [4782880 2024-04-08] (Google LLC -> Google LLC)
S2 GoogleUpdaterService125.0.6407.0; C:\Program Files (x86)\Google\GoogleUpdater\125.0.6407.0\updater.exe [4782880 2024-04-08] (Google LLC -> Google LLC)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [234968 2024-03-10] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.065.0331.0002\OneDriveUpdaterService.exe [3851168 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [56832 2022-07-28] (Rivet Networks, LLC.) [Fichier non signé]
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [56832 2022-07-28] (Rivet Networks, LLC.) [Fichier non signé]
R2 SACSrv; C:\Program Files\SafeNet\Authentication\SAC\x64\SACSRV.exe [128496 2022-11-14] (Thales DIS CPL USA, Inc. -> Thales)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522080 2024-04-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1623552 2022-07-28] (Rivet Networks) [Fichier non signé]
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2381824 2022-07-28] (Rivet Networks) [Fichier non signé]
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [159072 2024-01-17] (Dell Inc -> Dell Inc.)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256608 2022-06-29] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [17029944 2023-05-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_8e82c1189f2059c2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_8e82c1189f2059c2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [46640 2023-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 MpKsle090090b; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C236C53E-8023-4D53-B0F3-AA32452563ED}\MpKslDrv.sys [301336 2024-04-15] (Microsoft Windows -> Microsoft Corporation)
R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [167080 2022-07-28] (Intel Corporation -> Rivet Networks, LLC.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20936 2024-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601376 2024-04-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-10] (Microsoft Windows -> Microsoft Corporation)
S4 DBUtilDrv2; \SystemRoot\System32\drivers\DBUtilDrv2.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-15 12:28 - 2024-04-15 12:28 - 000037216 _____ C:\Users\philo\OneDrive\Bureau\FRST.txt
2024-04-15 12:25 - 2024-04-15 12:28 - 000000000 ___DC C:\FRST
2024-04-15 12:25 - 2024-04-15 12:25 - 002394112 _____ (Farbar) C:\Users\philo\OneDrive\Bureau\FRST64.exe
2024-04-15 12:18 - 2024-04-15 12:18 - 000244843 _____ C:\Users\philo\OneDrive\Bureau\ZHPDiag.txt
2024-04-15 12:09 - 2024-04-15 12:09 - 000000920 _____ C:\Users\philo\OneDrive\Bureau\ZHPSuite.lnk
2024-04-15 12:09 - 2024-04-15 12:09 - 000000000 ____D C:\Users\philo\AppData\Local\ZHP
2024-04-15 11:55 - 2024-04-15 11:55 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\Downloads\ZHPSuite.exe
2024-04-15 11:43 - 2024-04-15 11:43 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\OneDrive\Bureau\ZHPSuite.exe
2024-04-15 11:21 - 2024-04-15 11:21 - 000573348 _____ C:\Users\philo\Downloads\EMS Microscopy - CR Avril 2024.pdf
2024-04-15 09:25 - 2024-04-15 09:25 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-04-15 09:25 - 2024-04-15 09:25 - 000002077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-04-15 09:15 - 2024-04-15 09:15 - 000199918 _____ C:\Users\philo\Downloads\web2m-facture-f2024042076.pdf
2024-04-12 17:45 - 2024-04-12 17:45 - 000487488 _____ C:\Users\philo\Downloads\telechargement.zip
2024-04-11 18:56 - 2024-04-11 18:56 - 000810954 _____ C:\WINDOWS\system32\perfh00C.dat
2024-04-11 18:56 - 2024-04-11 18:56 - 000157390 _____ C:\WINDOWS\system32\perfc00C.dat
2024-04-11 10:30 - 2024-04-11 10:30 - 000043371 _____ C:\Users\philo\Downloads\Avis d’opération de virement 210324 .pdf
2024-04-11 09:50 - 2024-04-11 09:50 - 000557469 _____ C:\Users\philo\Downloads\AVENANT DE CONTRAT CL13451910.pdf
2024-04-11 09:24 - 2024-04-11 09:24 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-04-11 09:24 - 2024-04-11 09:24 - 000002182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-04-10 16:37 - 2024-04-10 16:39 - 000000000 __HDC C:\$WinREAgent
2024-04-09 14:52 - 2024-04-09 14:53 - 003936083 _____ C:\Users\philo\Downloads\Présentation SLS ACTIPARC 2024-VF.pdf
2024-04-05 10:14 - 2024-04-05 10:14 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-04-05 10:05 - 2024-04-05 10:05 - 000692728 _____ C:\Users\philo\Downloads\4035 272 26175x-110.pdf
2024-04-02 12:56 - 2024-04-02 12:56 - 000000000 ____D C:\Users\philo\AppData\Local\INetHistory
2024-04-02 12:53 - 2024-04-02 12:53 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2024-04-02 12:46 - 2024-04-02 12:46 - 000024320 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-02 12:45 - 2024-04-02 12:45 - 000024320 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-04-02 10:22 - 2024-04-02 10:22 - 000015631 _____ C:\Users\philo\Downloads\Base Prospects Cezame 2024_v2v2.xlsx
2024-03-29 16:09 - 2024-03-29 16:09 - 000020375 _____ C:\Users\philo\Downloads\Textes à valider-20240329T135535Z-001.zip
2024-03-25 10:49 - 2024-03-25 10:49 - 006079202 _____ C:\Users\philo\Downloads\TstGunFEG 1kV 4.0.jpeg
2024-03-21 16:10 - 2024-03-21 16:10 - 000075964 _____ C:\Users\philo\Downloads\INV_240318_2024-FRCIV000000181_RE17625_30315096_.pdf
2024-03-21 15:57 - 2024-03-21 15:57 - 000359694 _____ C:\Users\philo\Downloads\QT_20240321_IM2NP NNL600i Service Visite (002).pdf
2024-03-19 15:49 - 2024-03-19 15:49 - 001235376 _____ C:\Users\philo\Downloads\Mesures_BU.pdf.crdownload
2024-03-18 13:34 - 2024-03-18 13:34 - 000252317 _____ C:\Users\philo\Downloads\QT_20240318_IM2NP NNL600i FEG Change.pdf
2024-03-16 16:50 - 2024-03-16 16:50 - 000016988 _____ C:\Users\philo\Downloads\DUCS_022024.pdf
2024-03-16 16:50 - 2024-03-16 16:50 - 000016977 _____ C:\Users\philo\Downloads\DUCS_012024.pdf
2024-03-14 12:33 - 2024-03-14 12:33 - 000260592 _____ C:\Users\philo\Downloads\QT_20240125_Bosch Service Contract 2024_Discounted.pdf
2024-03-12 15:56 - 2024-03-12 15:56 - 000084108 _____ C:\Users\philo\Downloads\DOCUMENTS_9798150202 (1).pdf
2024-03-11 19:13 - 2024-03-11 19:14 - 002568675 _____ C:\Users\philo\Downloads\pa91u-1853215.pdf
2024-03-11 12:03 - 2024-03-11 12:04 - 000000022 _____ C:\Users\philo\Downloads\RE_ [Case_8751326] Parts quotation for Versa3D D9818 II 047aLK08022024 II 048aLK08022024 .zip
2024-03-06 16:34 - 2024-03-06 16:34 - 000000000 ____D C:\WINDOWS\{AA32861C-2C06-4CAE-BD98-45566E2627EC}
2024-03-06 12:11 - 2024-03-06 12:11 - 000864640 _____ C:\Users\philo\Downloads\DC Microscope analyzer.zip
2024-03-05 19:15 - 2024-03-05 19:15 - 000000000 ____D C:\Program Files (x86)\DummyDir
2024-03-05 15:33 - 2024-03-05 15:33 - 000604438 _____ C:\Users\philo\Downloads\150-002650x-130.pdf
2024-02-21 10:23 - 2024-02-21 10:23 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2024-02-20 12:18 - 2024-02-20 12:18 - 005798169 _____ C:\Users\philo\Downloads\293711193 PHILIPS _ FEI Strata DB235 2024-19-02--11-52-35-116.pdf
2024-02-20 12:10 - 2024-02-20 12:10 - 000002400 _____ C:\Users\philo\OneDrive\Bureau\GoSign Desktop.lnk
2024-02-20 12:10 - 2024-02-20 12:10 - 000000000 ____D C:\Users\philo\AppData\Local\InfoCert
2024-02-19 12:27 - 2024-02-19 12:27 - 000033011 _____ C:\Users\philo\Downloads\comptes.xlsx
2024-02-15 12:13 - 2024-02-15 12:13 - 000270130 _____ C:\Users\philo\Downloads\Detector types and application QuantaFEGx50.pdf
2024-02-05 13:49 - 2024-02-05 13:49 - 000018190 _____ C:\Users\philo\Downloads\Extrait de comptes Compte 08938 000205488 01 C_C Eurocompte PRO Confort ELECTRON MICROSCOPY SERVICES au 2020-12-31.pdf
2024-02-05 13:48 - 2024-02-05 13:48 - 000018475 _____ C:\Users\philo\Downloads\Extrait de comptes Compte 08938 000205488 01 C_C Eurocompte PRO Confort ELECTRON MICROSCOPY SERVICES au 2021-02-01.pdf
2024-02-05 13:44 - 2024-02-05 13:44 - 000055442 _____ C:\Users\philo\Downloads\Facture de commissions Compte 08938 000205488 01 C_C Eurocompte PRO Confort ELECTRON MICROSCOPY SERVICES au 2024-02-03.pdf
2024-01-31 16:28 - 2024-01-31 16:28 - 000835968 _____ C:\Users\philo\Downloads\024 EMS (jauge PKR 251).pdf
2024-01-28 14:08 - 2024-01-28 14:08 - 000003952 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2024-01-28 14:01 - 2024-01-29 11:32 - 000000000 ____D C:\ProgramData\SupportAssistDbBackup
2024-01-25 16:17 - 2024-01-25 16:17 - 000045296 _____ C:\Users\philo\Downloads\SampleInvoice.pdf
2024-01-25 10:50 - 2024-01-25 10:50 - 000084108 _____ C:\Users\philo\Downloads\DOCUMENTS_9798150202.pdf
2024-01-23 13:15 - 2024-01-23 13:21 - 000001247 _____ C:\Users\philo\OneDrive\Bureau\xT 2022.lnk
2024-01-23 12:00 - 2024-01-23 12:00 - 000001406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2024-01-22 15:37 - 2024-01-22 15:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeNet
2024-01-22 15:37 - 2024-01-22 15:37 - 000000000 ____D C:\Program Files\SafeNet
2024-01-22 15:21 - 2024-01-22 15:21 - 000000000 ____D C:\ProgramData\Gemalto
2024-01-17 19:32 - 2024-01-17 19:32 - 000000000 ____D C:\Users\philo\AppData\Roaming\fei
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-15 12:29 - 2019-08-31 06:14 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2024-04-15 12:26 - 2019-09-09 14:31 - 000000000 ____D C:\Users\philo\AppData\Roaming\Microsoft\Excel
2024-04-15 12:25 - 2019-08-31 06:14 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-15 12:24 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-04-15 12:22 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-15 12:18 - 2023-11-06 13:40 - 000000000 ____D C:\Users\philo\AppData\Roaming\ZHP
2024-04-15 12:14 - 2019-09-06 18:06 - 000000000 ___RD C:\Users\philo\OneDrive
2024-04-15 12:05 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-15 11:58 - 2019-09-06 18:10 - 000000000 ____D C:\Users\philo\AppData\Roaming\Microsoft\Word
2024-04-15 11:53 - 2019-09-06 18:04 - 000000000 ____D C:\Users\philo\AppData\Local\Packages
2024-04-15 11:23 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-04-15 11:20 - 2023-03-20 13:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-04-15 11:20 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-04-15 11:20 - 2019-08-31 06:11 - 000000000 ____D C:\ProgramData\Goodix
2024-04-15 09:39 - 2023-03-20 14:46 - 000000000 ____D C:\Users\philo\AppData\Local\D3DSCache
2024-04-15 09:14 - 2024-01-15 16:39 - 000000000 ____D C:\Users\philo\AppData\Roaming\GoSign Desktop
2024-04-15 09:14 - 2024-01-15 16:39 - 000000000 ____D C:\Users\philo\.gosign
2024-04-15 09:13 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-04-15 09:13 - 2020-06-16 09:52 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-15 09:12 - 2019-09-06 18:04 - 000000000 __SHD C:\Users\philo\IntelGraphicsProfiles
2024-04-12 17:52 - 2019-09-06 19:40 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-04-11 18:56 - 2023-03-20 13:50 - 001803986 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-04-11 18:55 - 2023-03-20 13:53 - 000004178 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{D4F464B5-E979-4805-A57E-78B43B665732}
2024-04-11 18:51 - 2023-10-21 21:34 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-11 18:51 - 2023-03-20 13:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-04-11 18:51 - 2022-06-29 16:47 - 000000000 ____D C:\Program Files\TeamViewer
2024-04-11 18:51 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-04-11 18:51 - 2019-08-31 06:07 - 000000000 ____D C:\Intel
2024-04-11 14:23 - 2022-05-07 07:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-04-11 14:20 - 2023-03-20 13:43 - 000475896 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-04-11 14:20 - 2021-05-02 15:50 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-04-11 14:19 - 2023-10-17 09:52 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-04-11 09:24 - 2023-03-20 13:53 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2113270933-1622261746-1565655607-1001
2024-04-10 16:44 - 2019-09-10 23:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-04-10 16:43 - 2019-09-10 23:06 - 192651728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-04-10 16:42 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-04-10 16:41 - 2023-03-20 13:44 - 003213824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-04-10 15:52 - 2022-04-06 16:15 - 000000000 ____D C:\Program Files\dotnet
2024-04-10 15:52 - 2019-08-31 06:11 - 000000000 ____D C:\ProgramData\Package Cache
2024-04-10 09:55 - 2019-08-31 06:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-04-05 14:06 - 2023-11-20 19:17 - 000000000 ____D C:\Users\philo\OneDrive\Documents\COURS BASSE
2024-04-05 10:16 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-04-05 10:16 - 2019-08-31 06:27 - 000000000 ____D C:\Program Files\Microsoft Office
2024-04-05 09:46 - 2023-03-20 13:53 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-05 09:46 - 2023-03-20 13:53 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-04-02 13:10 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-02 12:53 - 2022-05-07 12:35 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-03-30 17:24 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2024-03-18 16:25 - 2019-09-09 14:35 - 000000000 ____D C:\Users\philo\AppData\Roaming\Microsoft\PowerPoint
2024-03-18 13:35 - 2022-06-23 11:10 - 000000000 ____D C:\Users\philo\AppData\Roaming\com.adobe.dunamis
==================== Fichiers à la racine de certains dossiers ========
2020-05-15 15:28 - 2022-02-03 19:52 - 000001456 _____ () C:\Users\philo\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2023-11-08 11:24 - 2023-11-08 11:24 - 000000000 _____ () C:\Users\philo\AppData\Local\oobelibMkey.log
2019-11-12 15:58 - 2020-03-09 16:25 - 000001023 _____ () C:\Users\philo\AppData\Local\OSMOZ.xml
2022-03-10 17:25 - 2022-03-10 17:25 - 000007600 _____ () C:\Users\philo\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2024-04-15 12:25 - 2024-04-15 12:25 - 002394112 _____ (Farbar) C:\Users\philo\OneDrive\Bureau\FRST64.exe
2024-04-15 11:43 - 2024-04-15 11:43 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\OneDrive\Bureau\ZHPSuite.exe
2024-04-15 11:55 - 2024-04-15 11:55 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de démarrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{db6b8cff-c895-11ed-8d9b-806e6f6e6963}
timeout 0
Gestionnaire de démarrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
isolatedcontext Yes
default {current}
resumeobject {63e10121-c714-11ed-b34a-958a3d406932}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {db6b8cff-c895-11ed-8d9b-806e6f6e6963}
device partition=\Device\HarddiskVolume1
path \EFI\Boot\BootX64.efi
description UEFI: KBG40ZNS512G NVMe TOSHIBA 512GB, Partition 1
isolatedcontext Yes
Chargeur de démarrage Windows
-----------------------------
identificateur {09c405cc-9ec4-11e5-9b46-5ce0c5654d7a}
device ramdisk=[\Device\HarddiskVolume6]\sources\sos.wim,{492933ee-cd0d-11e1-9b66-d4bed91b7fc5}
path \windows\system32\winload.efi
description Dell SupportAssist
locale en-US
inherit {bootloadersettings}
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume6]\sources\sos.wim,{492933ee-cd0d-11e1-9b66-d4bed91b7fc5}
systemroot \Windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de démarrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 11
locale fr-FR
inherit {bootloadersettings}
recoverysequence {63e10123-c714-11ed-b34a-958a3d406932}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {63e10121-c714-11ed-b34a-958a3d406932}
nx OptIn
bootmenupolicy Standard
bootstatuspolicy DisplayAllFailures
Chargeur de démarrage Windows
-----------------------------
identificateur {63e10123-c714-11ed-b34a-958a3d406932}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{63e10124-c714-11ed-b34a-958a3d406932}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{63e10124-c714-11ed-b34a-958a3d406932}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre à partir de la mise en veille prolongée
-------------------------------------------------
identificateur {63e10121-c714-11ed-b34a-958a3d406932}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {63e10123-c714-11ed-b34a-958a3d406932}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de mémoire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics mémoire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
isolatedcontext Yes
Paramètres EMS
--------------
identificateur {emssettings}
bootems No
isolatedcontext Yes
Paramètres du débogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
isolatedcontext Yes
Erreurs de mémoire RAM
----------------------
identificateur {badmemory}
isolatedcontext Yes
Paramètres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
isolatedcontext Yes
Paramètres du chargeur de démarrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
isolatedcontext Yes
Paramètres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
isolatedcontext Yes
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Paramètres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
isolatedcontext Yes
Options de périphérique
-----------------------
identificateur {492933ee-cd0d-11e1-9b66-d4bed91b7fc5}
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume6
ramdisksdipath \sources\boot.sdi
Options de périphérique
-----------------------
identificateur {63e10124-c714-11ed-b34a-958a3d406932}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================
Exécuté par philo (administrateur) sur DESKTOP-2HS61H9 (Dell Inc. Inspiron 7590) (15-04-2024 12:28:02)
Exécuté depuis C:\Users\philo\OneDrive\Bureau\FRST64.exe
Profils chargés: philo
Plate-forme: Microsoft Windows 11 Professionnel Version 23H2 22631.3447 (X64) Langue: Français (France)
Navigateur par défaut: Edge
Mode d'amorçage: Normal
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe ->) (Rivet Networks LLC) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\RAPS.exe
(C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2024.403.300_x64__8wekyb3d8bbwe\olk.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.97\msedgewebview2.exe <15>
(DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxEM.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <40>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2024.403.300_x64__8wekyb3d8bbwe\olk.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) () [Fichier non signé] C:\Program Files\Allway Sync\Bin\SyncService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\Fusion\FusionService.exe
(services.exe ->) (Dell Inc -> Dell INC.) C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_7208949846a9b9dc\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_64d7fcfcde9b9c10\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9cf4db1a1fd1b22d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e51f7a58015f231f\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e51f7a58015f231f\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_f629911085770af0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_f3c201b4c28c14d0\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\drivers\SessionService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_8e82c1189f2059c2\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a1020546271138b9\RtkAudUService64.exe <2>
(services.exe ->) (Rivet Networks) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe
(services.exe ->) (Rivet Networks) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe
(services.exe ->) (Rivet Networks, LLC.) [Fichier non signé] C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Thales DIS CPL USA, Inc. -> Thales) C:\Program Files\SafeNet\Authentication\SAC\x64\SACSRV.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_b4d0b189ff2aba03\WavesSysSvc64.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Development Company, L.P.) C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_152.1.1099.0_x64__v10z8vjag6ke6\HP.Smart.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.065.0331.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\prevhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
==================== Registre (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_a1020546271138b9\RtkAudUService64.exe [1343072 2021-08-26] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo8de.inf_amd64_b4d0b189ff2aba03\WavesSvc64.exe [1774584 2021-02-18] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [DellMobileConnectWelcome] => C:\Program Files\Dell\DellMobileConnectDrivers\DellMobileConnectWelcome.exe [345848 2019-06-21] (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [SACMonitor] => C:\Program Files\SafeNet\Authentication\SAC\x64\SACMonitor.exe [661960 2022-11-14] (Thales DIS CPL USA, Inc. -> Thales)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1131488 2024-01-23] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [193544 2024-01-23] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [3306512 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [MicrosoftEdgeAutoLaunch_BE14427D90D0D5E6299E8072EDA3FF39] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063800 2024-04-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [C:\Users\philo\AppData\Local\GoSign-Desktop\app-2.1.1\GoSignDesktop.exe] => C:\Users\philo\AppData\Local\GoSign-Desktop\Update.exe [1937920 2024-01-15] () [Fichier non signé]
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [C:\Users\philo\AppData\Local\InfoCert\GoSign Desktop\GoSignDesktop.exe] => C:\Users\philo\AppData\Local\InfoCert\GoSign Desktop\GoSignDesktop.exe [109739688 2024-02-16] (INFOCERT SPA -> InfoCert S.p.A.)
HKU\S-1-5-21-2113270933-1622261746-1565655607-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [11411360 2024-04-11] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Print\Monitors\HP C611 Status Monitor: C:\Windows\system32\hpinkstsC611LM.dll [333344 2013-05-06] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP CC11 Status Monitor: C:\Windows\system32\hpinkstsCC11LM.dll [391992 2019-03-15] (HP Inc -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\123.0.6312.122\Installer\chrmstp.exe [2024-04-12] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\philo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2023-03-14]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\philo\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [Fichier non signé]
Startup: C:\Users\philo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Envoyer à OneNote.lnk [2024-02-15]
ShortcutTarget: Envoyer à OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {1B05324D-ABB8-4184-AE14-7ACA59397BC9} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1547208 2024-01-31] (Adobe Inc. -> Adobe Inc.)
Task: {F13C5D64-EFCA-4D30-82C4-8AD9940FF36E} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {20DA3794-DCA2-41EE-BD43-B29DA8909936} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4434400 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {E088993F-C7EB-4CF1-A1B6-03E402853DA3} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [964448 2024-01-17] (Dell Inc -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {55896F48-F14B-4ED5-85DF-8045C24BC214} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem125.0.6407.0{2661D7C1-580E-4789-A688-A5C581859105} => C:\Program Files (x86)\Google\GoogleUpdater\125.0.6407.0\updater.exe [4782880 2024-04-08] (Google LLC -> Google LLC)
Task: {18F5FF43-BB8F-496C-AC4C-813094ED0B92} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28452976 2024-03-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {F7E24C89-34F1-4091-9A17-C4848852962D} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28452976 2024-03-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {6DFFB134-2EBA-42CF-BC15-644552C678FA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309696 2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {3F283690-2234-4954-A1C6-E01E5AF64A19} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309696 2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {E34261A6-A2C2-47E5-866E-FCB99B8955ED} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [168488 2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E98CD73-48DB-4315-A8C4-652AC0B3EC08} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {60CC6218-7F61-41F1-8B96-BCF95CFD69FF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CB156AC1-6E29-4F93-A843-238CCC6121BF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {50E0D295-3B21-415F-8106-B6B88136FF9A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MpCmdRun.exe [1654168 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DBBF68D3-8EC1-46D0-B27E-AF00161D86AB} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {9EF2C7C1-DF9B-4A1B-B964-DEFDA67EF7CD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [781680 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D484457D-08D8-499D-B491-5A16448EDF57} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3728752 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {71EDE61C-D8D5-4C63-B56F-99392FD4257D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [648048 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {E2971887-A010-4E76-89F3-60691A920078} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {97D0933B-19FF-4075-A19D-3EBA516599FE} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [849264 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAF76051-6498-46BD-BE87-D67E88EFF4BE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [590704 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A5FBD1CC-3A15-4112-B8A1-D9296E237B99} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A566DCD4-ECB5-46F4-94CB-1B78E8C5E1D7} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {93D0E2B0-CF33-4495-9168-248B6ABBEB78} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {A36FCD69-951B-4D6A-A77D-CBB831D145B4} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [876912 2019-04-03] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\/noshim
Task: {16EA47EC-B44D-4A54-9890-DF0BC71210D5} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206496 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {84AAB0CA-54A4-435E-9EAF-DF3D99E12D66} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2113270933-1622261746-1565655607-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4206496 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}: [DhcpDomain] home
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\143636F62784F64756C637D2745756374737: [DhcpNameServer] 10.188.0.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\242757373756C6370214962707F627470266275656027596D26496: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\4554D4051402D4553554F4: [DhcpNameServer] 8.8.8.8 8.8.4.4
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\45568707C61696E65646027457563747: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\6627565626F687F52756E656: [DhcpNameServer] 212.27.40.240 212.27.40.241
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\75946494F534F4C455D4245535F534146454: [DhcpNameServer] 10.1.1.254 8.8.8.8 208.67.222.222
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\75946494F534F4C455D4245535F534146454: [DhcpDomain] hotspot.2isr.local
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\960586F6E65602465602D416E6F6E68272: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F52374548545: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F52374548545: [DhcpDomain] home
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F55374548545: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\C496675626F687D214736343F55374548545: [DhcpDomain] home
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\F4F4245454025447167656025374: [DhcpNameServer] 192.168.10.1
Tcpip\..\Interfaces\{11e2009d-8308-4cb4-b7ee-2cef74127b5e}\F4F4245454025447167656025374: [DhcpDomain] home
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-15]
Edge DownloadDir: Default -> C:\Users\philo\Downloads
Edge Notifications: Default -> hxxps://book.lufthansa.com; hxxps://calendar.google.com; hxxps://connect.zoho.com; hxxps://crm.zoho.eu; hxxps://fr.shopping.rakuten.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://web.whatsapp.com; hxxps://www.manomano.fr; hxxps://www.paruvendu.fr
Edge Extension: (Email Finder - GetProspect) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bhbcbkonalnjkflmdkdodieehnmmeknp [2023-06-08]
Edge Extension: (Google Docs hors connexion) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-01]
Edge Extension: (Hunter - Extension Email Finder) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hgmhmanijnjhaffoampdlllchpolkdnj [2023-10-27]
Edge Extension: (Edge relevant text changes) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-09]
Edge Extension: (Evernote Web Clipper) - C:\Users\philo\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\llhcnbijpnechllogkacbcjmkcgjbjfi [2024-03-04]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-04-11] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2024-01-23] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2024-01-23] (Adobe Inc. -> Adobe Systems)
FF Plugin HKU\S-1-5-21-2113270933-1622261746-1565655607-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\philo\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2113270933-1622261746-1565655607-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\philo\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default [2024-04-15]
CHR Notifications: Default -> hxxps://blog.comexplorer.com; hxxps://book.brusselsairlines.com; hxxps://book.lufthansa.com; hxxps://bookflights.austrian.com; hxxps://calendar.google.com; hxxps://crm.zoho.eu; hxxps://happydemics.com; hxxps://mail.google.com; hxxps://meet.google.com; hxxps://one.zoho.eu; hxxps://web.skype.com; hxxps://web.whatsapp.com; hxxps://www.britishairways.com; hxxps://www.castorama.fr; hxxps://www.distrelec.fr; hxxps://www.evernote.com; hxxps://www.interflora.fr
CHR Extension: (Email Finder - GetProspect) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhbcbkonalnjkflmdkdodieehnmmeknp [2023-06-12]
CHR Extension: (Videostream for Google Chromecast™) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnciopoikihiagdjbjpnocolokfelagl [2020-05-27]
CHR Extension: (Adobe Acrobat : outils de modif., de conversion et de signature de PDF) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-04-11]
CHR Extension: (Google Docs hors connexion) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-01]
CHR Extension: (Hunter - Extension Email Finder) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgmhmanijnjhaffoampdlllchpolkdnj [2023-11-08]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-22]
CHR Extension: (Evernote Web Clipper) - C:\Users\philo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pioclpoplcdbaefihamjohnefbikjilc [2024-03-10]
CHR Profile: C:\Users\philo\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-11-07]
CHR Profile: C:\Users\philo\AppData\Local\Google\Chrome\User Data\System Profile [2023-12-08]
==================== Services (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-01-31] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944096 2024-01-23] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4555744 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 BotkindSyncService; C:\Program Files\Allway Sync\Bin\SyncService.exe [262144 2019-08-06] () [Fichier non signé]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14221312 2024-03-29] (Microsoft Corporation -> Microsoft Corporation)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458128 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [159632 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [481680 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [57760 2023-12-20] (Dell Inc -> )
R2 Dell SupportAssist Remediation; C:\Program Files\Dell\SARemediation\agent\DellSupportAssistRemedationService.exe [22224 2023-12-13] (Dell Inc -> Dell INC.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [50392 2024-01-27] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [159664 2023-12-22] (Dell Technologies Inc. -> Dell)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.065.0331.0002\FileSyncHelper.exe [3510704 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
R2 FusionService; C:\Program Files\Dell\Fusion\FusionService.exe [25336 2022-03-29] (Dell Inc -> Dell Inc.)
S2 GoogleUpdaterInternalService125.0.6407.0; C:\Program Files (x86)\Google\GoogleUpdater\125.0.6407.0\updater.exe [4782880 2024-04-08] (Google LLC -> Google LLC)
S2 GoogleUpdaterService125.0.6407.0; C:\Program Files (x86)\Google\GoogleUpdater\125.0.6407.0\updater.exe [4782880 2024-04-08] (Google LLC -> Google LLC)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [234968 2024-03-10] (HP Inc. -> HP Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.065.0331.0002\OneDriveUpdaterService.exe [3851168 2024-04-11] (Microsoft Corporation -> Microsoft Corporation)
R2 RAPSService; C:\Program Files\Rivet Networks\SmartByte\RAPSService.exe [56832 2022-07-28] (Rivet Networks, LLC.) [Fichier non signé]
S3 RNDBWM; C:\Program Files\Rivet Networks\SmartByte\RNDBWMService.exe [56832 2022-07-28] (Rivet Networks, LLC.) [Fichier non signé]
R2 SACSrv; C:\Program Files\SafeNet\Authentication\SAC\x64\SACSRV.exe [128496 2022-11-14] (Thales DIS CPL USA, Inc. -> Thales)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522080 2024-04-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SmartByte Analytics Service; C:\Program Files\Rivet Networks\SmartByte\SmartByteAnalyticsService.exe [1623552 2022-07-28] (Rivet Networks) [Fichier non signé]
R2 SmartByte Network Service x64; C:\Program Files\Rivet Networks\SmartByte\SmartByteNetworkService.exe [2381824 2022-07-28] (Rivet Networks) [Fichier non signé]
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [159072 2024-01-17] (Dell Inc -> Dell Inc.)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256608 2022-06-29] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [17029944 2023-05-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\NisSrv.exe [3199648 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24030.9-0\MsMpEng.exe [133576 2024-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_8e82c1189f2059c2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_8e82c1189f2059c2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Pilotes (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [46640 2023-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 MpKsle090090b; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C236C53E-8023-4D53-B0F3-AA32452563ED}\MpKslDrv.sys [301336 2024-04-15] (Microsoft Windows -> Microsoft Corporation)
R3 SmbCoSvc; C:\WINDOWS\system32\DRIVERS\SmbCo10X64.sys [167080 2022-07-28] (Intel Corporation -> Rivet Networks, LLC.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20936 2024-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601376 2024-04-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105760 2024-04-10] (Microsoft Windows -> Microsoft Corporation)
S4 DBUtilDrv2; \SystemRoot\System32\drivers\DBUtilDrv2.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Trois mois (créés) (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-15 12:28 - 2024-04-15 12:28 - 000037216 _____ C:\Users\philo\OneDrive\Bureau\FRST.txt
2024-04-15 12:25 - 2024-04-15 12:28 - 000000000 ___DC C:\FRST
2024-04-15 12:25 - 2024-04-15 12:25 - 002394112 _____ (Farbar) C:\Users\philo\OneDrive\Bureau\FRST64.exe
2024-04-15 12:18 - 2024-04-15 12:18 - 000244843 _____ C:\Users\philo\OneDrive\Bureau\ZHPDiag.txt
2024-04-15 12:09 - 2024-04-15 12:09 - 000000920 _____ C:\Users\philo\OneDrive\Bureau\ZHPSuite.lnk
2024-04-15 12:09 - 2024-04-15 12:09 - 000000000 ____D C:\Users\philo\AppData\Local\ZHP
2024-04-15 11:55 - 2024-04-15 11:55 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\Downloads\ZHPSuite.exe
2024-04-15 11:43 - 2024-04-15 11:43 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\OneDrive\Bureau\ZHPSuite.exe
2024-04-15 11:21 - 2024-04-15 11:21 - 000573348 _____ C:\Users\philo\Downloads\EMS Microscopy - CR Avril 2024.pdf
2024-04-15 09:25 - 2024-04-15 09:25 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-04-15 09:25 - 2024-04-15 09:25 - 000002077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-04-15 09:15 - 2024-04-15 09:15 - 000199918 _____ C:\Users\philo\Downloads\web2m-facture-f2024042076.pdf
2024-04-12 17:45 - 2024-04-12 17:45 - 000487488 _____ C:\Users\philo\Downloads\telechargement.zip
2024-04-11 18:56 - 2024-04-11 18:56 - 000810954 _____ C:\WINDOWS\system32\perfh00C.dat
2024-04-11 18:56 - 2024-04-11 18:56 - 000157390 _____ C:\WINDOWS\system32\perfc00C.dat
2024-04-11 10:30 - 2024-04-11 10:30 - 000043371 _____ C:\Users\philo\Downloads\Avis d’opération de virement 210324 .pdf
2024-04-11 09:50 - 2024-04-11 09:50 - 000557469 _____ C:\Users\philo\Downloads\AVENANT DE CONTRAT CL13451910.pdf
2024-04-11 09:24 - 2024-04-11 09:24 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-04-11 09:24 - 2024-04-11 09:24 - 000002182 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-04-10 16:37 - 2024-04-10 16:39 - 000000000 __HDC C:\$WinREAgent
2024-04-09 14:52 - 2024-04-09 14:53 - 003936083 _____ C:\Users\philo\Downloads\Présentation SLS ACTIPARC 2024-VF.pdf
2024-04-05 10:14 - 2024-04-05 10:14 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-04-05 10:05 - 2024-04-05 10:05 - 000692728 _____ C:\Users\philo\Downloads\4035 272 26175x-110.pdf
2024-04-02 12:56 - 2024-04-02 12:56 - 000000000 ____D C:\Users\philo\AppData\Local\INetHistory
2024-04-02 12:53 - 2024-04-02 12:53 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2024-04-02 12:46 - 2024-04-02 12:46 - 000024320 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-04-02 12:45 - 2024-04-02 12:45 - 000024320 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-04-02 10:22 - 2024-04-02 10:22 - 000015631 _____ C:\Users\philo\Downloads\Base Prospects Cezame 2024_v2v2.xlsx
2024-03-29 16:09 - 2024-03-29 16:09 - 000020375 _____ C:\Users\philo\Downloads\Textes à valider-20240329T135535Z-001.zip
2024-03-25 10:49 - 2024-03-25 10:49 - 006079202 _____ C:\Users\philo\Downloads\TstGunFEG 1kV 4.0.jpeg
2024-03-21 16:10 - 2024-03-21 16:10 - 000075964 _____ C:\Users\philo\Downloads\INV_240318_2024-FRCIV000000181_RE17625_30315096_.pdf
2024-03-21 15:57 - 2024-03-21 15:57 - 000359694 _____ C:\Users\philo\Downloads\QT_20240321_IM2NP NNL600i Service Visite (002).pdf
2024-03-19 15:49 - 2024-03-19 15:49 - 001235376 _____ C:\Users\philo\Downloads\Mesures_BU.pdf.crdownload
2024-03-18 13:34 - 2024-03-18 13:34 - 000252317 _____ C:\Users\philo\Downloads\QT_20240318_IM2NP NNL600i FEG Change.pdf
2024-03-16 16:50 - 2024-03-16 16:50 - 000016988 _____ C:\Users\philo\Downloads\DUCS_022024.pdf
2024-03-16 16:50 - 2024-03-16 16:50 - 000016977 _____ C:\Users\philo\Downloads\DUCS_012024.pdf
2024-03-14 12:33 - 2024-03-14 12:33 - 000260592 _____ C:\Users\philo\Downloads\QT_20240125_Bosch Service Contract 2024_Discounted.pdf
2024-03-12 15:56 - 2024-03-12 15:56 - 000084108 _____ C:\Users\philo\Downloads\DOCUMENTS_9798150202 (1).pdf
2024-03-11 19:13 - 2024-03-11 19:14 - 002568675 _____ C:\Users\philo\Downloads\pa91u-1853215.pdf
2024-03-11 12:03 - 2024-03-11 12:04 - 000000022 _____ C:\Users\philo\Downloads\RE_ [Case_8751326] Parts quotation for Versa3D D9818 II 047aLK08022024 II 048aLK08022024 .zip
2024-03-06 16:34 - 2024-03-06 16:34 - 000000000 ____D C:\WINDOWS\{AA32861C-2C06-4CAE-BD98-45566E2627EC}
2024-03-06 12:11 - 2024-03-06 12:11 - 000864640 _____ C:\Users\philo\Downloads\DC Microscope analyzer.zip
2024-03-05 19:15 - 2024-03-05 19:15 - 000000000 ____D C:\Program Files (x86)\DummyDir
2024-03-05 15:33 - 2024-03-05 15:33 - 000604438 _____ C:\Users\philo\Downloads\150-002650x-130.pdf
2024-02-21 10:23 - 2024-02-21 10:23 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2024-02-20 12:18 - 2024-02-20 12:18 - 005798169 _____ C:\Users\philo\Downloads\293711193 PHILIPS _ FEI Strata DB235 2024-19-02--11-52-35-116.pdf
2024-02-20 12:10 - 2024-02-20 12:10 - 000002400 _____ C:\Users\philo\OneDrive\Bureau\GoSign Desktop.lnk
2024-02-20 12:10 - 2024-02-20 12:10 - 000000000 ____D C:\Users\philo\AppData\Local\InfoCert
2024-02-19 12:27 - 2024-02-19 12:27 - 000033011 _____ C:\Users\philo\Downloads\comptes.xlsx
2024-02-15 12:13 - 2024-02-15 12:13 - 000270130 _____ C:\Users\philo\Downloads\Detector types and application QuantaFEGx50.pdf
2024-02-05 13:49 - 2024-02-05 13:49 - 000018190 _____ C:\Users\philo\Downloads\Extrait de comptes Compte 08938 000205488 01 C_C Eurocompte PRO Confort ELECTRON MICROSCOPY SERVICES au 2020-12-31.pdf
2024-02-05 13:48 - 2024-02-05 13:48 - 000018475 _____ C:\Users\philo\Downloads\Extrait de comptes Compte 08938 000205488 01 C_C Eurocompte PRO Confort ELECTRON MICROSCOPY SERVICES au 2021-02-01.pdf
2024-02-05 13:44 - 2024-02-05 13:44 - 000055442 _____ C:\Users\philo\Downloads\Facture de commissions Compte 08938 000205488 01 C_C Eurocompte PRO Confort ELECTRON MICROSCOPY SERVICES au 2024-02-03.pdf
2024-01-31 16:28 - 2024-01-31 16:28 - 000835968 _____ C:\Users\philo\Downloads\024 EMS (jauge PKR 251).pdf
2024-01-28 14:08 - 2024-01-28 14:08 - 000003952 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2024-01-28 14:01 - 2024-01-29 11:32 - 000000000 ____D C:\ProgramData\SupportAssistDbBackup
2024-01-25 16:17 - 2024-01-25 16:17 - 000045296 _____ C:\Users\philo\Downloads\SampleInvoice.pdf
2024-01-25 10:50 - 2024-01-25 10:50 - 000084108 _____ C:\Users\philo\Downloads\DOCUMENTS_9798150202.pdf
2024-01-23 13:15 - 2024-01-23 13:21 - 000001247 _____ C:\Users\philo\OneDrive\Bureau\xT 2022.lnk
2024-01-23 12:00 - 2024-01-23 12:00 - 000001406 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2024-01-22 15:37 - 2024-01-22 15:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SafeNet
2024-01-22 15:37 - 2024-01-22 15:37 - 000000000 ____D C:\Program Files\SafeNet
2024-01-22 15:21 - 2024-01-22 15:21 - 000000000 ____D C:\ProgramData\Gemalto
2024-01-17 19:32 - 2024-01-17 19:32 - 000000000 ____D C:\Users\philo\AppData\Roaming\fei
==================== Trois mois (modifiés) ==================
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2024-04-15 12:29 - 2019-08-31 06:14 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2024-04-15 12:26 - 2019-09-09 14:31 - 000000000 ____D C:\Users\philo\AppData\Roaming\Microsoft\Excel
2024-04-15 12:25 - 2019-08-31 06:14 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-15 12:24 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-04-15 12:22 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-15 12:18 - 2023-11-06 13:40 - 000000000 ____D C:\Users\philo\AppData\Roaming\ZHP
2024-04-15 12:14 - 2019-09-06 18:06 - 000000000 ___RD C:\Users\philo\OneDrive
2024-04-15 12:05 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-15 11:58 - 2019-09-06 18:10 - 000000000 ____D C:\Users\philo\AppData\Roaming\Microsoft\Word
2024-04-15 11:53 - 2019-09-06 18:04 - 000000000 ____D C:\Users\philo\AppData\Local\Packages
2024-04-15 11:23 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-04-15 11:20 - 2023-03-20 13:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-04-15 11:20 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-04-15 11:20 - 2019-08-31 06:11 - 000000000 ____D C:\ProgramData\Goodix
2024-04-15 09:39 - 2023-03-20 14:46 - 000000000 ____D C:\Users\philo\AppData\Local\D3DSCache
2024-04-15 09:14 - 2024-01-15 16:39 - 000000000 ____D C:\Users\philo\AppData\Roaming\GoSign Desktop
2024-04-15 09:14 - 2024-01-15 16:39 - 000000000 ____D C:\Users\philo\.gosign
2024-04-15 09:13 - 2022-05-07 07:22 - 000000000 ____D C:\WINDOWS\INF
2024-04-15 09:13 - 2020-06-16 09:52 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-15 09:12 - 2019-09-06 18:04 - 000000000 __SHD C:\Users\philo\IntelGraphicsProfiles
2024-04-12 17:52 - 2019-09-06 19:40 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-04-11 18:56 - 2023-03-20 13:50 - 001803986 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-04-11 18:55 - 2023-03-20 13:53 - 000004178 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{D4F464B5-E979-4805-A57E-78B43B665732}
2024-04-11 18:51 - 2023-10-21 21:34 - 000012288 ___SH C:\DumpStack.log.tmp
2024-04-11 18:51 - 2023-03-20 13:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-04-11 18:51 - 2022-06-29 16:47 - 000000000 ____D C:\Program Files\TeamViewer
2024-04-11 18:51 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ServiceState
2024-04-11 18:51 - 2019-08-31 06:07 - 000000000 ____D C:\Intel
2024-04-11 14:23 - 2022-05-07 07:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-04-11 14:20 - 2023-03-20 13:43 - 000475896 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-04-11 14:20 - 2021-05-02 15:50 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-04-11 14:19 - 2023-10-17 09:52 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SystemResources
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-04-11 14:19 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-04-11 09:24 - 2023-03-20 13:53 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2113270933-1622261746-1565655607-1001
2024-04-10 16:44 - 2019-09-10 23:06 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-04-10 16:43 - 2019-09-10 23:06 - 192651728 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-04-10 16:42 - 2022-05-07 07:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-04-10 16:41 - 2023-03-20 13:44 - 003213824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-04-10 15:52 - 2022-04-06 16:15 - 000000000 ____D C:\Program Files\dotnet
2024-04-10 15:52 - 2019-08-31 06:11 - 000000000 ____D C:\ProgramData\Package Cache
2024-04-10 09:55 - 2019-08-31 06:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-04-05 14:06 - 2023-11-20 19:17 - 000000000 ____D C:\Users\philo\OneDrive\Documents\COURS BASSE
2024-04-05 10:16 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-04-05 10:16 - 2019-08-31 06:27 - 000000000 ____D C:\Program Files\Microsoft Office
2024-04-05 09:46 - 2023-03-20 13:53 - 000003690 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-05 09:46 - 2023-03-20 13:53 - 000003566 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-04-02 13:10 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-04-02 12:53 - 2022-05-07 12:35 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\Provisioning
2024-04-02 12:53 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-03-30 17:24 - 2022-05-07 07:24 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2024-03-18 16:25 - 2019-09-09 14:35 - 000000000 ____D C:\Users\philo\AppData\Roaming\Microsoft\PowerPoint
2024-03-18 13:35 - 2022-06-23 11:10 - 000000000 ____D C:\Users\philo\AppData\Roaming\com.adobe.dunamis
==================== Fichiers à la racine de certains dossiers ========
2020-05-15 15:28 - 2022-02-03 19:52 - 000001456 _____ () C:\Users\philo\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
2023-11-08 11:24 - 2023-11-08 11:24 - 000000000 _____ () C:\Users\philo\AppData\Local\oobelibMkey.log
2019-11-12 15:58 - 2020-03-09 16:25 - 000001023 _____ () C:\Users\philo\AppData\Local\OSMOZ.xml
2022-03-10 17:25 - 2022-03-10 17:25 - 000007600 _____ () C:\Users\philo\AppData\Local\Resmon.ResmonCfg
==================== SigCheckExt =========================
2024-04-15 12:25 - 2024-04-15 12:25 - 002394112 _____ (Farbar) C:\Users\philo\OneDrive\Bureau\FRST64.exe
2024-04-15 11:43 - 2024-04-15 11:43 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\OneDrive\Bureau\ZHPSuite.exe
2024-04-15 11:55 - 2024-04-15 11:55 - 003538592 _____ (Nicolas Coolman) C:\Users\philo\Downloads\ZHPSuite.exe
==================== SigCheck ============================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
==================== BCD ================================
Gestionnaire de démarrage du microprogramme
-------------------------------------------
identificateur {fwbootmgr}
displayorder {bootmgr}
{db6b8cff-c895-11ed-8d9b-806e6f6e6963}
timeout 0
Gestionnaire de démarrage Windows
---------------------------------
identificateur {bootmgr}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
isolatedcontext Yes
default {current}
resumeobject {63e10121-c714-11ed-b34a-958a3d406932}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30
Application logicielle (101fffff)
--------------------------------
identificateur {db6b8cff-c895-11ed-8d9b-806e6f6e6963}
device partition=\Device\HarddiskVolume1
path \EFI\Boot\BootX64.efi
description UEFI: KBG40ZNS512G NVMe TOSHIBA 512GB, Partition 1
isolatedcontext Yes
Chargeur de démarrage Windows
-----------------------------
identificateur {09c405cc-9ec4-11e5-9b46-5ce0c5654d7a}
device ramdisk=[\Device\HarddiskVolume6]\sources\sos.wim,{492933ee-cd0d-11e1-9b66-d4bed91b7fc5}
path \windows\system32\winload.efi
description Dell SupportAssist
locale en-US
inherit {bootloadersettings}
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume6]\sources\sos.wim,{492933ee-cd0d-11e1-9b66-d4bed91b7fc5}
systemroot \Windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Chargeur de démarrage Windows
-----------------------------
identificateur {current}
device partition=C:
path \WINDOWS\system32\winload.efi
description Windows 11
locale fr-FR
inherit {bootloadersettings}
recoverysequence {63e10123-c714-11ed-b34a-958a3d406932}
displaymessageoverride Recovery
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
osdevice partition=C:
systemroot \WINDOWS
resumeobject {63e10121-c714-11ed-b34a-958a3d406932}
nx OptIn
bootmenupolicy Standard
bootstatuspolicy DisplayAllFailures
Chargeur de démarrage Windows
-----------------------------
identificateur {63e10123-c714-11ed-b34a-958a3d406932}
device ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{63e10124-c714-11ed-b34a-958a3d406932}
path \windows\system32\winload.efi
description Windows Recovery Environment
locale fr-FR
inherit {bootloadersettings}
displaymessage Recovery
isolatedcontext Yes
osdevice ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{63e10124-c714-11ed-b34a-958a3d406932}
systemroot \windows
nx OptIn
bootmenupolicy Standard
winpe Yes
Reprendre à partir de la mise en veille prolongée
-------------------------------------------------
identificateur {63e10121-c714-11ed-b34a-958a3d406932}
device partition=C:
path \WINDOWS\system32\winresume.efi
description Windows Resume Application
locale fr-FR
inherit {resumeloadersettings}
recoverysequence {63e10123-c714-11ed-b34a-958a3d406932}
recoveryenabled Yes
isolatedcontext Yes
allowedinmemorysettings 0x15000075
filedevice partition=C:
custom:21000026 partition=C:
filepath \hiberfil.sys
bootmenupolicy Standard
debugoptionenabled No
Testeur de mémoire Windows
--------------------------
identificateur {memdiag}
device partition=\Device\HarddiskVolume1
path \EFI\Microsoft\Boot\memtest.efi
description Diagnostics mémoire Windows
locale fr-FR
inherit {globalsettings}
badmemoryaccess Yes
isolatedcontext Yes
Paramètres EMS
--------------
identificateur {emssettings}
bootems No
isolatedcontext Yes
Paramètres du débogueur
-----------------------
identificateur {dbgsettings}
debugtype Local
isolatedcontext Yes
Erreurs de mémoire RAM
----------------------
identificateur {badmemory}
isolatedcontext Yes
Paramètres globaux
------------------
identificateur {globalsettings}
inherit {dbgsettings}
{emssettings}
{badmemory}
isolatedcontext Yes
Paramètres du chargeur de démarrage
-----------------------------------
identificateur {bootloadersettings}
inherit {globalsettings}
{hypervisorsettings}
isolatedcontext Yes
Paramètres de l'hyperviseur
-------------------
identificateur {hypervisorsettings}
isolatedcontext Yes
hypervisordebugtype Serial
hypervisordebugport 1
hypervisorbaudrate 115200
Paramètres du chargeur de reprise
---------------------------------
identificateur {resumeloadersettings}
inherit {globalsettings}
isolatedcontext Yes
Options de périphérique
-----------------------
identificateur {492933ee-cd0d-11e1-9b66-d4bed91b7fc5}
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume6
ramdisksdipath \sources\boot.sdi
Options de périphérique
-----------------------
identificateur {63e10124-c714-11ed-b34a-958a3d406932}
description Windows Recovery
isolatedcontext Yes
ramdisksdidevice partition=\Device\HarddiskVolume4
ramdisksdipath \Recovery\WindowsRE\boot.sdi
==================== Fin de FRST.txt ========================