Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 22-09-2021 02
Exécuté par Bobo (administrateur) sur DESKTOP-LRB0SS4 (HP HP ENVY Laptop 13-ah0xxx) (25-09-2021 12:00:20)
Exécuté depuis C:\Users\Bobo\Desktop
Profils chargés: Bobo
Platform: Windows 10 Home Version 20H2 19042.1237 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\SysInfoCap.exe
(HP Inc.) C:\Program Files\WindowsApps\ad2f1837.hpthermalcontrol_1.9.31.0_x64__v10z8vjag6ke6\HpSystemManagement.exe
(HP Inc.) C:\Program Files\WindowsApps\ad2f1837.hpthermalcontrol_1.9.31.0_x64__v10z8vjag6ke6\Win32Process\HPCC.Bg.BackgroundApp.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_167a1a0325242e3d\aesm_service.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.549981c3f5f10_3.2108.25001.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20388.0_x64__8wekyb3d8bbwe\HxAccounts.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20388.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20388.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowsstore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(NortonLifeLock Inc. -> Broadcom) C:\Program Files\Norton Security\Engine\22.21.8.62\NortonSecurity.exe <2>
(NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.21.8.62\nsWscSvc.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [881440 2019-06-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKU\S-1-5-21-2516496672-807159482-223521202-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2344832 2021-09-17] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Tâches planifiées (Avec liste blanche) ============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {17B3E14E-1E49-450B-9889-CBBB5D845FDE} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139096 2021-09-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {19A2843D-231D-415C-B835-3488DC61DFA0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [7053768 2021-09-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {24480C60-26F5-4C31-BC0E-D898B7B24761} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Autofix => C:\Program Files\Norton Security\Engine\22.21.8.62\SymErr.exe [108752 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc)
Task: {35B79473-B545-4393-8635-B7533DF91FC4} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.21.8.62\WSCStub.exe [646520 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
Task: {3F2E0515-58D6-4C9C-82DF-64ACE304E534} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3977088 2021-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {762ADE06-3142-4200-BF13-E528A7E8DCB1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21857672 2021-09-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {7A8ECCA2-1774-445F-A357-86DCCA984219} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21857672 2021-09-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {7C3DAAF7-9E75-4868-B1D8-7667E20E7CBB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [7053768 2021-09-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {AE29F46F-739A-464C-BE35-294B75D84858} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-09-04] (Mozilla Corporation -> Mozilla Foundation)
Task: {E1947D09-22A1-4A85-BB1C-3EB38597B328} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Error Processor => C:\Program Files\Norton Security\Engine\22.21.8.62\SymErr.exe [108752 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc)
Task: {F3A1EF41-38B9-47D8-B1D5-8C1A074CE28F} - System32\Tasks\Norton AntiVirus Plus\Norton AntiVirus Error Analyzer => C:\Program Files\Norton Security\Engine\22.21.8.62\SymErr.exe [108752 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc)
Task: {F80EF91C-1969-4838-9568-57CAF1A3E262} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139096 2021-09-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {F9C06AB2-00AE-40DF-9A74-EB9984CEB5A1} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton AntiVirus\Upgrade.exe [2352488 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{96916de4-7d07-41a9-937b-7dd6c43d6377}: [DhcpNameServer] 192.168.43.1

FireFox:
========
FF DefaultProfile: 81gcj2hd.default
FF ProfilePath: C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\81gcj2hd.default [2021-09-15]
FF ProfilePath: C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release [2021-09-25]
FF Session Restore: Mozilla\Firefox\Profiles\wfve4zic.default-release -> est activé.
FF HomepageOverride: Mozilla\Firefox\Profiles\wfve4zic.default-release -> Enabled: nortonhomepage@symantec.com
FF NewTabOverride: Mozilla\Firefox\Profiles\wfve4zic.default-release -> Enabled: nortonhomepage@symantec.com
FF NewTabOverride: Mozilla\Firefox\Profiles\wfve4zic.default-release -> Disabled: nortonsafesearch_ul_2@symantec.com
FF Extension: (Norton Password Manager) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\idsafe@norton.com.xpi [2021-09-15]
FF Extension: (Norton Home Page) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\nortonhomepage@symantec.com.xpi [2021-09-15] [UpdateUrl:hxxps://static.nortoncdn.com/idscp/firefox/nsss/hp/updates.json]
FF Extension: (Norton Safe Search) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\nortonsafesearch_ul_2@symantec.com.xpi [2021-09-15] [UpdateUrl:hxxps://static.nortoncdn.com/idscp/firefox/nsss/ds_modified/updates.json]
FF Extension: (Norton Safe Web) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\nortonsafeweb@symantec.com.xpi [2021-09-15]
FF Extension: (Sahara Sand) - C:\Users\Bobo\AppData\Roaming\Mozilla\Firefox\Profiles\wfve4zic.default-release\Extensions\{2ddbcb89-c6c1-4c0e-a146-21ba9bcd99ef}.xpi [2021-09-16]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-09-15] (Microsoft Corporation -> Microsoft Corporation)

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9179528 2021-09-10] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.170.0822.0002\FileSyncHelper.exe [3254656 2021-09-17] (Microsoft Corporation -> Microsoft Corporation)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\AppHelperCap.exe [744000 2021-08-09] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\DiagsCap.exe [742976 2021-08-09] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\NetworkCap.exe [742992 2021-08-09] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_a12b4806152ca26b\x64\SysInfoCap.exe [742992 2021-08-09] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe [489584 2021-06-18] (HP Inc. -> HP Inc.)
R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.21.8.62\NortonSecurity.exe [343336 2021-09-02] (NortonLifeLock Inc. -> Broadcom)
R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.21.8.62\nsWscSvc.exe [1058664 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.170.0822.0002\OneDriveUpdaterService.exe [3716992 2021-09-17] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\NisSrv.exe [2772856 2021-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MsMpEng.exe [136640 2021-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.21.8.62\Definitions\BASHDefs\20210921.014\BHDrvx64.sys [2018776 2021-09-14] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 ccSet_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\ccSetx64.sys [192256 2021-09-02] (Symantec Corporation -> Symantec Corporation)
R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [516168 2021-01-22] (Symantec Corporation -> Broadcom)
R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [153672 2021-09-15] (Symantec Corporation -> Broadcom)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [23960 2018-07-06] (HP Inc. -> HP Inc.)
R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.21.8.62\Definitions\IPSDefs\20210924.061\IDSvia64.sys [1480128 2021-09-15] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S3 nsvst_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\nsvst.sys [56080 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
R3 SRTSP; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\SRTSP64.SYS [892616 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 SRTSPX; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\SRTSPX64.SYS [48848 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R0 SymEFASI; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\SYMEFASI64.SYS [2059968 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
S0 SymELAM; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\SymELAM.sys [31992 2021-09-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)
R3 SymEvent; C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS [93120 2021-09-15] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.21.8.62\SymPlatform\SymEvnt.sys [712432 2021-06-16] (Symantec Corporation -> Symantec Corporation)
R1 SymIRON; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\Ironx64.SYS [319192 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)
R1 SymNetS; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\symnets.sys [575344 2021-09-02] (Symantec Corporation -> Symantec Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2021-09-14] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [433384 2021-09-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-09-14] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)
S3 wpCtrlDrv_NGC; C:\WINDOWS\System32\drivers\NGCx64\1615080.03E\wpCtrlDrv.sys [1015760 2021-09-02] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Trois mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2021-09-25 12:00 - 2021-09-25 12:00 - 000017406 _____ C:\Users\Bobo\Desktop\FRST.txt
2021-09-25 11:59 - 2021-09-25 12:00 - 000000000 ____D C:\FRST
2021-09-25 11:58 - 2021-09-25 11:59 - 002304512 _____ (Farbar) C:\Users\Bobo\Desktop\FRST64.exe
2021-09-25 11:53 - 2021-09-25 11:53 - 000232848 _____ C:\Users\Bobo\Desktop\ZHPDiag.txt
2021-09-25 11:50 - 2021-09-25 11:53 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\ZHP
2021-09-25 11:50 - 2021-09-25 11:50 - 000000864 _____ C:\Users\Bobo\Desktop\ZHPSuite.lnk
2021-09-25 11:50 - 2021-09-25 11:50 - 000000000 ____D C:\Users\Bobo\AppData\Local\ZHP
2021-09-25 11:48 - 2021-09-25 11:48 - 000000000 ____D C:\WINDOWS\system32\Tasks\Remediation
2021-09-25 11:46 - 2021-09-25 11:45 - 003476120 _____ (Nicolas Coolman) C:\Users\Bobo\Desktop\ZHPSuite.exe
2021-09-23 07:22 - 2021-09-23 07:22 - 000000000 ____D C:\WINDOWS\system32\N360_BACKUP
2021-09-21 18:47 - 2021-09-21 18:47 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-09-20 15:19 - 2021-09-20 15:19 - 000000000 ____D C:\Users\Bobo\AppData\Local\ElevatedDiagnostics
2021-09-19 21:32 - 2021-09-24 21:22 - 000000000 ____D C:\Program Files (x86)\SMADAV
2021-09-19 21:32 - 2021-09-24 21:20 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Smadav
2021-09-19 21:32 - 2021-09-19 21:32 - 000000000 __SHD C:\[Smad-Cage]
2021-09-19 21:31 - 2021-09-19 21:31 - 006152448 _____ (Smadsoft ) C:\Users\Bobo\Downloads\smadav2021rev1462.exe
2021-09-17 23:25 - 2021-09-17 23:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\Agent Activation Runtime
2021-09-17 20:00 - 2021-09-17 20:00 - 036174008 _____ (Piriform Software Ltd) C:\Users\Bobo\Downloads\ccsetup585.exe
2021-09-17 19:56 - 2021-09-19 21:28 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2021-09-17 19:45 - 2021-09-17 19:45 - 000000000 ____D C:\Users\Bobo\Documents\Modèles Office personnalisés
2021-09-17 16:29 - 2021-09-17 16:30 - 000000000 ____D C:\Users\Bobo\Documents\COURS
2021-09-17 00:37 - 2021-09-22 15:20 - 000000000 ____D C:\Users\Bobo\Documents\Entretient
2021-09-16 22:10 - 2021-09-16 22:10 - 000000000 ____D C:\Program Files\Common Files\AV
2021-09-15 22:45 - 2021-09-24 20:35 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton AntiVirus Plus
2021-09-15 22:43 - 2021-09-15 22:43 - 000093120 _____ (Broadcom) C:\WINDOWS\system32\Drivers\SYMEVENT64x86.SYS
2021-09-15 22:43 - 2021-09-15 22:43 - 000010235 _____ C:\WINDOWS\system32\Drivers\SYMEVENT64x86.CAT
2021-09-15 22:43 - 2021-09-15 22:43 - 000003376 _____ C:\WINDOWS\system32\Tasks\Norton WSC Integration
2021-09-15 22:43 - 2021-09-15 22:43 - 000002311 _____ C:\Users\Public\Desktop\Norton Security.lnk
2021-09-15 22:43 - 2021-09-15 22:43 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2021-09-15 22:42 - 2021-09-15 22:43 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2021-09-15 22:42 - 2021-09-15 22:42 - 000000000 ____D C:\WINDOWS\system32\Drivers\NGCx64
2021-09-15 22:42 - 2021-09-15 22:42 - 000000000 ____D C:\Program Files\Norton Security
2021-09-15 22:41 - 2021-09-15 22:41 - 000000000 ____D C:\ProgramData\NortonInstaller
2021-09-15 22:41 - 2021-09-15 22:41 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2021-09-15 22:32 - 2021-09-15 22:45 - 000000000 ____D C:\ProgramData\Norton
2021-09-15 22:32 - 2021-09-15 22:32 - 000001389 _____ C:\Users\Bobo\Desktop\Norton Installation Files.lnk
2021-09-15 22:32 - 2021-09-15 22:32 - 000000000 ____D C:\Users\Public\Downloads\Norton
2021-09-15 22:31 - 2021-09-15 22:32 - 003806720 _____ (NortonLifeLock Inc.) C:\Users\Bobo\Downloads\NAVPlusDownloader.exe
2021-09-15 22:05 - 2021-09-24 21:26 - 000000000 ____D C:\ProgramData\Mozilla
2021-09-15 22:05 - 2021-09-24 21:25 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Mozilla
2021-09-15 22:05 - 2021-09-15 22:05 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-09-15 22:05 - 2021-09-15 22:05 - 000000993 _____ C:\Users\Public\Desktop\Firefox.lnk
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Mozilla
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\Mozilla
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-09-15 22:05 - 2021-09-15 22:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-15 22:04 - 2021-09-15 22:04 - 000333160 _____ (Mozilla) C:\Users\Bobo\Downloads\Firefox Installer.exe
2021-09-15 21:58 - 2021-09-15 21:58 - 000000000 ____D C:\Users\Bobo\AppData\Local\OneDrive
2021-09-15 18:33 - 2021-09-15 18:33 - 000000000 ___HD C:\$WinREAgent
2021-09-15 18:30 - 2021-09-15 18:30 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-15 18:30 - 2021-09-15 18:30 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-15 18:30 - 2021-09-15 18:30 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-15 18:30 - 2021-09-15 18:30 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-15 18:30 - 2021-09-15 18:30 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-15 18:30 - 2021-09-15 18:30 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-09-15 18:30 - 2021-09-15 18:30 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-09-15 18:30 - 2021-09-15 18:30 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-09-15 18:30 - 2021-09-15 18:30 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-15 18:30 - 2021-09-15 18:30 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-15 18:30 - 2021-09-15 18:30 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-09-15 18:29 - 2021-09-15 18:29 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-15 18:29 - 2021-09-15 18:29 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-15 18:29 - 2021-09-15 18:29 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-09-15 18:29 - 2021-09-15 18:29 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-09-15 18:29 - 2021-09-15 18:29 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-09-15 18:29 - 2021-09-15 18:29 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-15 18:29 - 2021-09-15 18:29 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-15 18:29 - 2021-09-15 18:29 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-15 18:29 - 2021-09-15 18:29 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-09-15 18:24 - 2021-09-15 18:24 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-15 16:48 - 2021-09-15 16:48 - 000000000 ____D C:\Users\Bobo\AppData\Local\CEF
2021-09-15 16:43 - 2021-09-15 18:13 - 000000000 ____D C:\ProgramData\Avast Software
2021-09-15 16:17 - 2021-09-15 16:17 - 000232168 _____ (AVAST Software) C:\Users\Bobo\Downloads\avast_free_antivirus_setup_online.exe
2021-09-15 16:15 - 2021-09-15 16:15 - 005794408 _____ (McAfee, LLC) C:\Users\Bobo\Downloads\mcafee_trial_setup_433.0207.3617_key.exe
2021-09-15 16:15 - 2021-09-15 16:15 - 000910056 _____ (McAfee, LLC) C:\Users\Bobo\Downloads\Non confirmé 933967.crdownload
2021-09-15 15:34 - 2021-09-15 17:09 - 000000140 _____ C:\WINDOWS\Reimage.ini
2021-09-15 15:29 - 2021-09-15 15:29 - 000586224 _____ (Reimage) C:\Users\Bobo\Downloads\ReimageRepair.exe
2021-09-15 15:29 - 2021-09-15 15:29 - 000586224 _____ (Reimage) C:\Users\Bobo\Downloads\ReimageRepair (1).exe
2021-09-15 01:08 - 2021-09-17 19:56 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2021-09-15 01:08 - 2021-09-17 19:56 - 000002170 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-15 01:08 - 2021-09-15 01:08 - 000000000 ___RD C:\Users\Default\OneDrive
2021-09-15 01:07 - 2021-09-15 01:07 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Entreprise.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002472 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002445 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002433 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000002395 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-09-15 01:07 - 2021-09-15 01:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office
2021-09-15 01:07 - 2021-09-15 01:07 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2021-09-15 00:50 - 2021-09-15 00:50 - 001458285 _____ C:\Users\Bobo\Downloads\NOTICEEUINFORMATIQUEIMPORTANT.pdf
2021-09-15 00:49 - 2021-09-21 18:03 - 000000000 ____D C:\Program Files\Microsoft Office
2021-09-15 00:49 - 2021-09-15 00:49 - 000000000 ____D C:\Program Files\Microsoft Office 15
2021-09-14 23:55 - 2021-09-14 23:55 - 000126895 _____ C:\Users\Bobo\Downloads\Etudiant sollicitant une APS en recherche d'emploi.pdf
2021-09-14 23:43 - 2021-09-14 23:43 - 000048700 _____ C:\Users\Bobo\Downloads\AttestationDroits.pdf
2021-09-14 23:27 - 2021-09-14 23:27 - 000316141 _____ C:\Users\Bobo\Downloads\IPSSI-EISI-Mamadou_SOW.pdf
2021-09-14 22:05 - 2021-09-14 22:05 - 000367647 _____ C:\Users\Bobo\Downloads\AMOA.docx.pdf
2021-09-14 22:05 - 2021-09-14 22:05 - 000000000 ____D C:\Users\Bobo\Documents\CV
2021-09-14 21:35 - 2021-09-14 21:35 - 000154672 _____ C:\Users\Bobo\Downloads\AMOA.pdf.121797043.pdf
2021-09-14 21:27 - 2021-09-23 07:13 - 000000000 ____D C:\Users\Bobo\AppData\Local\D3DSCache
2021-09-14 20:29 - 2021-09-14 20:29 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-09-14 20:29 - 2021-09-14 20:29 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-09-14 20:28 - 2021-09-14 20:28 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-09-14 20:28 - 2021-09-14 20:28 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-09-14 20:28 - 2021-09-14 20:28 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 001864192 _____ (The ICU Project) C:\WINDOWS\SysWOW64\icu.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 001687040 _____ C:\WINDOWS\system32\libcrypto.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-09-14 20:28 - 2021-09-14 20:28 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-09-14 20:28 - 2021-09-14 20:28 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-09-14 20:28 - 2021-09-14 20:28 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-09-14 20:28 - 2021-09-14 20:28 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000468440 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-09-14 20:28 - 2021-09-14 20:28 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-09-14 20:28 - 2021-09-14 20:28 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-09-14 20:28 - 2021-09-14 20:28 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-09-14 20:28 - 2021-09-14 20:28 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-09-14 20:28 - 2021-09-14 20:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-09-14 20:28 - 2021-09-14 20:28 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-09-14 20:28 - 2021-09-14 20:28 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2021-09-14 20:28 - 2021-09-14 20:28 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-09-14 20:28 - 2021-09-14 20:28 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-09-14 18:48 - 2021-09-14 18:48 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-09-14 18:48 - 2021-09-14 18:48 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-09-14 18:48 - 2021-09-14 18:48 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2021-09-14 18:48 - 2021-09-14 18:48 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-09-14 18:48 - 2021-09-14 18:48 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-09-14 18:48 - 2021-09-14 18:48 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2021-09-14 18:48 - 2021-09-14 18:48 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-09-14 18:48 - 2021-09-14 18:48 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2021-09-14 18:48 - 2021-09-14 18:48 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2021-09-14 18:48 - 2021-09-14 18:48 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2021-09-14 18:47 - 2021-09-14 18:47 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000657464 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-09-14 18:47 - 2021-09-14 18:47 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-09-14 18:47 - 2021-09-14 18:47 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-09-14 18:47 - 2021-09-14 18:47 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-09-14 18:46 - 2021-09-14 18:46 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-09-14 18:46 - 2021-09-14 18:46 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2021-09-14 18:46 - 2021-09-14 18:46 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-09-14 18:46 - 2021-09-14 18:46 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-09-14 18:46 - 2021-09-14 18:46 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-09-14 18:46 - 2021-09-14 18:46 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-09-14 18:46 - 2021-09-14 18:46 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-09-14 18:33 - 2021-09-14 18:33 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-09-14 18:29 - 2021-09-14 18:29 - 005708193 _____ C:\Users\Bobo\Downloads\CV-20210914T162904Z-001.zip
2021-09-14 18:22 - 2021-09-17 16:17 - 000000000 ____D C:\Users\Bobo\AppData\Local\PlaceholderTileLogoFolder
2021-09-14 18:19 - 2021-09-14 18:19 - 000000000 ____D C:\Users\Bobo\AppData\Local\Comms
2021-09-14 15:54 - 2021-09-17 20:03 - 000000000 ____D C:\WINDOWS\Panther
2021-09-14 15:53 - 2021-09-14 15:53 - 000000000 ____D C:\WINDOWS\system32\Intel
2021-09-14 15:53 - 2021-09-14 15:53 - 000000000 ____D C:\WINDOWS\system32\cAVS
2021-09-14 15:51 - 2021-09-20 15:26 - 000756416 _____ C:\WINDOWS\system32\perfh00C.dat
2021-09-14 15:51 - 2021-09-20 15:26 - 000142186 _____ C:\WINDOWS\system32\perfc00C.dat
2021-09-14 15:51 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2021-09-14 15:51 - 2021-09-14 15:51 - 000351124 _____ C:\WINDOWS\system32\perfi00C.dat
2021-09-14 15:51 - 2021-09-14 15:51 - 000040694 _____ C:\WINDOWS\system32\perfd00C.dat
2021-09-14 15:51 - 2021-09-14 15:51 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\sysprep
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\MailContactsCalendarSync
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\FxsTmp
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\fr
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\0409
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\winrm
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\WCN
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\slmgr
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\MailContactsCalendarSync
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\fr
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\0409
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\Setup
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\OCR
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\DigitalLocker
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\addins
2021-09-14 15:51 - 2021-09-14 15:51 - 000000000 ____D C:\ProgramData\ssh
2021-09-14 15:51 - 2021-09-14 15:02 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-09-14 15:49 - 2021-09-25 11:51 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-09-14 15:49 - 2021-09-24 21:30 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-09-14 15:49 - 2021-09-23 07:20 - 000000000 ____D C:\WINDOWS\system32\config\systemprofile
2021-09-14 15:49 - 2021-09-20 15:20 - 000000000 ____D C:\WINDOWS\ServiceState
2021-09-14 15:49 - 2021-09-19 21:32 - 000000000 ___RD C:\Program Files (x86)
2021-09-14 15:49 - 2021-09-19 21:31 - 000000000 ____D C:\WINDOWS\appcompat
2021-09-14 15:49 - 2021-09-19 02:13 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-09-14 15:49 - 2021-09-17 20:06 - 000000000 ___HD C:\Program Files\WindowsApps
2021-09-14 15:49 - 2021-09-15 22:43 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\SystemResources
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\Provisioning
2021-09-14 15:49 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-09-14 15:49 - 2021-09-15 01:07 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-09-14 15:49 - 2021-09-14 20:54 - 000000000 ____D C:\Program Files\Windows Defender
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\setup
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\Keywords
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\config\TxR
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\Com
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\IME
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\Program Files\Common Files\System
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-09-14 15:49 - 2021-09-14 20:43 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2021-09-14 15:49 - 2021-09-14 18:22 - 000000000 ____D C:\ProgramData\USOPrivate
2021-09-14 15:49 - 2021-09-14 15:54 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-09-14 15:49 - 2021-09-14 15:51 - 000000000 ___SD C:\WINDOWS\system32\dsc
2021-09-14 15:49 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2021-09-14 15:49 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\system32\MUI
2021-09-14 15:49 - 2021-09-14 15:51 - 000000000 ____D C:\WINDOWS\Help
2021-09-14 15:49 - 2021-09-14 15:51 - 000000000 ____D C:\Program Files (x86)\Windows NT
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 __SHD C:\Program Files\Windows Sidebar
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 __SHD C:\Program Files (x86)\Windows Sidebar
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 __RSD C:\WINDOWS\Media
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 __RHD C:\Users\Public\Libraries
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\Nui
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___SD C:\WINDOWS\SysWOW64\Configuration
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___SD C:\WINDOWS\system32\Nui
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___SD C:\WINDOWS\system32\Configuration
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___SD C:\WINDOWS\Downloaded Program Files
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___RD C:\WINDOWS\Offline Web Pages
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ___HD C:\WINDOWS\LanguageOverlayCache
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Web
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\WaaS
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Vss
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\tracing
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\TAPI
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\SMI
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\ras
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\NDF
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Msdtc
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Ipmi
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\InputMethod
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\IME
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\icsxml
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicyUsers
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\Bthprops
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SysWOW64\AppLocker
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SystemApps
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\winevt
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ti-et
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ta-lk
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ta-in
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\si-lk
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ras
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ProximityToast
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\PointOfService
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\osa-Osge-001
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\my-mm
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\Ipmi
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\InputMethod
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\IME
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\icsxml
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ias
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\GroupPolicyUsers
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\GroupPolicy
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ff-Adlm-SN
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\DriverState
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\downlevel
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\ContainerSettingsProviders
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\config\RegBack
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\config\Journal
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\Bthprops
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\am-et
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\System
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SKB
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\security
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\schemas
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\SchCache
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Resources
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\rescache
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Registration
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\PLA
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Performance
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\ModemLogs
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\L2Schemas
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\InputMethod
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\IdentityCRL
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Globalization
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\GameBarPresenceWriter
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Cursors
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Containers
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\Branding
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\ProgramData\WindowsHolographicDevices
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\ProgramData\USOShared
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files\Windows Security
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files\Windows Portable Devices
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files\ModifiableWindowsApps
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files\Common Files\Services
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2021-09-14 15:49 - 2021-09-14 15:49 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2021-09-14 15:49 - 2021-09-14 15:48 - 000215943 _____ C:\WINDOWS\SysWOW64\dssec.dat
2021-09-14 15:49 - 2021-09-14 15:48 - 000215943 _____ C:\WINDOWS\system32\dssec.dat
2021-09-14 15:49 - 2021-09-14 15:48 - 000020908 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2021-09-14 15:49 - 2021-09-14 15:48 - 000017635 _____ C:\WINDOWS\system32\Drivers\etc\services
2021-09-14 15:49 - 2021-09-14 15:48 - 000003683 _____ C:\WINDOWS\system32\Drivers\etc\lmhosts.sam
2021-09-14 15:49 - 2021-09-14 15:48 - 000003103 _____ C:\WINDOWS\SysWOW64\mmc.exe.config
2021-09-14 15:49 - 2021-09-14 15:48 - 000003103 _____ C:\WINDOWS\system32\mmc.exe.config
2021-09-14 15:49 - 2021-09-14 15:48 - 000001358 _____ C:\WINDOWS\system32\Drivers\etc\protocol
2021-09-14 15:49 - 2021-09-14 15:48 - 000000858 _____ C:\WINDOWS\system32\DefaultQuestions.json
2021-09-14 15:49 - 2021-09-14 15:48 - 000000741 _____ C:\WINDOWS\SysWOW64\NOISE.DAT
2021-09-14 15:49 - 2021-09-14 15:48 - 000000741 _____ C:\WINDOWS\system32\NOISE.DAT
2021-09-14 15:49 - 2021-09-14 15:48 - 000000407 _____ C:\WINDOWS\system32\Drivers\etc\networks
2021-09-14 15:49 - 2021-09-14 15:48 - 000000219 _____ C:\WINDOWS\system.ini
2021-09-14 15:49 - 2021-09-14 15:48 - 000000092 _____ C:\WINDOWS\win.ini
2021-09-14 15:49 - 2021-09-14 15:02 - 000000000 ____D C:\WINDOWS\system32\spool
2021-09-14 15:49 - 2021-09-14 15:01 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-09-14 15:49 - 2021-09-14 15:00 - 000000000 ____D C:\Program Files\Windows NT
2021-09-14 15:48 - 2021-09-23 07:22 - 000000000 ____D C:\WINDOWS\INF
2021-09-14 15:46 - 2021-09-15 18:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-09-14 15:45 - 2021-09-20 15:19 - 099352576 _____ C:\WINDOWS\system32\config\SOFTWARE
2021-09-14 15:45 - 2021-09-20 15:19 - 079691776 _____ C:\WINDOWS\system32\config\SYSTEM
2021-09-14 15:45 - 2021-09-20 15:19 - 000786432 _____ C:\WINDOWS\system32\config\DEFAULT
2021-09-14 15:45 - 2021-09-20 15:19 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-09-14 15:45 - 2021-09-20 15:19 - 000065536 _____ C:\WINDOWS\system32\config\SAM
2021-09-14 15:45 - 2021-09-20 15:19 - 000032768 _____ C:\WINDOWS\system32\config\SECURITY
2021-09-14 15:45 - 2021-09-15 22:44 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-09-14 15:45 - 2021-09-15 19:49 - 000000000 ____D C:\WINDOWS\servicing
2021-09-14 15:45 - 2021-09-14 15:49 - 000000000 ____D C:\WINDOWS\system32\SMI
2021-09-14 15:06 - 2021-09-15 01:08 - 000000000 ___RD C:\Users\Bobo\OneDrive
2021-09-14 15:05 - 2021-09-14 15:05 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\HP
2021-09-14 15:05 - 2021-09-14 15:05 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2021-09-14 15:04 - 2021-09-24 21:20 - 000000000 __SHD C:\Users\Bobo\IntelGraphicsProfiles
2021-09-14 15:04 - 2021-09-20 15:26 - 001681370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-09-14 15:04 - 2021-09-17 20:06 - 000000000 ____D C:\Users\Bobo\AppData\Local\Packages
2021-09-14 15:04 - 2021-09-14 18:28 - 000000000 ____D C:\ProgramData\Packages
2021-09-14 15:04 - 2021-09-14 18:23 - 000000000 ____D C:\Users\Bobo\AppData\Local\Publishers
2021-09-14 15:04 - 2021-09-14 15:05 - 000000000 ____D C:\Users\Bobo\AppData\Local\Intel
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 __RHD C:\Users\Public\AccountPictures
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ___RD C:\Users\Bobo\3D Objects
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Synaptics
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Roaming\Adobe
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\LocalLow\Intel
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Local\VirtualStore
2021-09-14 15:04 - 2021-09-14 15:04 - 000000000 ____D C:\Users\Bobo\AppData\Local\ConnectedDevicesPlatform
2021-09-14 15:03 - 2021-09-14 15:06 - 000000000 ____D C:\Users\Bobo
2021-09-14 15:03 - 2021-09-14 15:03 - 000000020 ___SH C:\Users\Bobo\ntuser.ini
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Voisinage réseau
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Voisinage d'impression
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Modèles
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Mes documents
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Menu Démarrer
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Documents\Mes vidéos
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Documents\Mes images
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\Documents\Ma musique
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:03 - 2021-09-14 15:03 - 000000000 _SHDL C:\Users\Bobo\AppData\Local\Historique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Mes vidéos
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Mes images
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Public\Documents\Ma musique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Voisinage réseau
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Voisinage d'impression
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Modèles
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Mes documents
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Menu Démarrer
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Mes vidéos
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Mes images
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\Documents\Ma musique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default\AppData\Local\Historique
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\Default User
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Users\All Users
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Modèles
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programmes
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Menu Démarrer
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\ProgramData\Bureau
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Program Files\Fichiers communs
2021-09-14 15:00 - 2021-09-14 15:00 - 000000000 _SHDL C:\Documents and Settings
2021-09-14 14:57 - 2021-09-20 15:20 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-09-14 14:57 - 2021-09-20 15:20 - 000000000 ____D C:\Intel
2021-09-14 14:57 - 2021-09-14 20:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-09-14 14:57 - 2021-09-14 18:22 - 000000000 ____D C:\ProgramData\HP
2021-09-14 14:57 - 2021-09-14 15:00 - 000000000 ____D C:\ProgramData\Intel
2021-09-14 14:57 - 2021-09-14 14:57 - 000000037 _____ C:\WINDOWS\system32\Drivers\RtkR0Log.dat
2021-09-14 14:57 - 2021-09-14 14:57 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin
2021-09-14 14:57 - 2019-02-26 23:33 - 000014220 _____ C:\WINDOWS\system32\Drivers\Gen3pKey1.dat
2021-09-14 14:57 - 2019-02-18 20:05 - 000010324 _____ C:\WINDOWS\system32\Drivers\Gen3pKey.dat
2021-09-14 14:57 - 2017-12-08 18:11 - 000001304 _____ C:\WINDOWS\system32\Drivers\RTKAMPI.Dat
2021-09-14 14:57 - 2017-11-09 19:10 - 000017232 _____ C:\WINDOWS\system32\Drivers\RTSPKPT.dat
2021-09-14 14:56 - 2021-09-25 11:35 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-09-14 14:56 - 2021-09-20 15:20 - 000008192 ___SH C:\DumpStack.log.tmp
2021-09-14 14:56 - 2021-09-15 19:50 - 000439128 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-09-14 14:56 - 2021-09-14 14:56 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-09-14 14:19 - 2021-09-14 15:54 - 000000000 ___HD C:\$SysReset
2021-09-13 23:54 - 2021-09-13 23:54 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2021-09-13 23:54 - 2021-09-13 23:54 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2021-09-13 23:54 - 2021-09-13 23:54 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2021-09-13 23:54 - 2021-09-13 23:54 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2021-09-13 23:54 - 2021-09-13 23:54 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2021-09-13 23:54 - 2021-09-13 23:54 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2021-09-13 23:54 - 2021-09-13 23:54 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2021-09-13 23:54 - 2021-09-13 23:54 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 004227116 ____N C:\WINDOWS\system32\DefaultHrtfs.bin
2021-09-13 23:53 - 2021-09-13 23:53 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2021-09-13 23:53 - 2021-09-13 23:53 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2021-09-13 23:53 - 2021-09-13 23:53 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2021-09-13 23:53 - 2021-09-13 23:53 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2021-09-13 23:53 - 2021-09-13 23:53 - 000064552 _____ C:\WINDOWS\system32\umpdc.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000047472 _____ C:\WINDOWS\SysWOW64\umpdc.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2021-09-13 23:53 - 2021-09-13 23:53 - 000029696 _____ (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000025088 _____ (The ICU Project) C:\WINDOWS\system32\icuin.dll
2021-09-13 23:53 - 2021-09-13 23:53 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2021-09-02 00:20 - 2021-05-06 23:25 - 048047288 _____ (Intel Corporation) C:\WINDOWS\system32\IntelSSTPreprocStreamer.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 001686184 _____ (Intel Corporation) C:\WINDOWS\system32\MultiChannelWoV.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 000877752 _____ (Intel Corporation) C:\WINDOWS\system32\IntelWovSDK.dll
2021-09-02 00:20 - 2021-05-06 23:25 - 000507064 _____ (Intel Corporation) C:\WINDOWS\system32\MultichannelWoVCfg.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 005570328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 003733936 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTKSpeechPP2.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 003732872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTKSpeechPP.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 001126552 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2021-09-02 00:20 - 2019-06-20 06:37 - 000482120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2021-09-02 00:20 - 2019-06-20 03:37 - 000881440 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe
2021-09-02 00:20 - 2019-06-20 03:37 - 000821328 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2021-09-02 00:20 - 2019-06-20 03:37 - 000215032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 019840776 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPRes.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 004313864 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnh.exe
2021-09-02 00:05 - 2019-12-04 02:16 - 000812296 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 000769288 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000383240 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPEnhService.exe
2021-09-02 00:05 - 2019-12-04 02:16 - 000275720 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2021-09-02 00:05 - 2019-12-04 02:16 - 000064264 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynRMIHID.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000049416 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2021-09-02 00:05 - 2019-12-04 02:16 - 000048904 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF.sys
2021-09-02 00:03 - 2021-05-06 23:25 - 000852760 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcOED.sys
2021-09-02 00:03 - 2021-05-06 22:52 - 000243016 _____ C:\WINDOWS\system32\Drivers\dsp_fw_release.bin
2021-09-02 00:03 - 2021-05-06 22:52 - 000012288 _____ C:\WINDOWS\system32\Drivers\dsp_fw_release_7CAD0808-AB10-CD23-EF45-12AB34CD56EF.bin
2021-09-01 22:55 - 2019-06-20 03:32 - 006861904 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys
2021-09-01 22:55 - 2019-06-20 03:23 - 032896202 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2021-08-12 19:49 - 2020-09-11 11:36 - 000305992 _____ C:\WINDOWS\system32\libmfxhw64.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000254520 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000171472 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2021-08-12 19:49 - 2020-09-11 11:36 - 000146752 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 026676016 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 013519664 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 001790192 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001790192 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001386224 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001386224 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-08-12 19:49 - 2020-09-11 11:35 - 001096800 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 001096800 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000949856 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000949856 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000507696 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000462640 _____ C:\WINDOWS\system32\ze_loader.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000370480 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-08-12 19:49 - 2020-09-11 11:35 - 000148784 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2021-08-12 18:52 - 2019-04-09 00:44 - 000271360 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\IntcAudioBus.sys
2021-06-28 19:58 - 2021-06-28 19:58 - 002583592 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_dcap_quoteverify.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 002244136 _____ (Intel Corporation) C:\WINDOWS\system32\qve.signed.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000805408 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_quote_ex.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000804896 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_epid.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000800296 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_launch.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000702504 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_quote_ex.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000701496 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_epid.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000696376 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_launch.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000446496 _____ (Intel Corporation) C:\WINDOWS\system32\qe3.signed.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000170040 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_dcap_ql.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000128040 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_urts.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000107048 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_urts.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000070176 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_enclave_common.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000058408 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_enclave_common.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000055848 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_platform.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000049704 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_platform.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000039968 _____ (Intel Corporation) C:\WINDOWS\system32\sgx_uae_service.dll
2021-06-28 19:58 - 2021-06-28 19:58 - 000038456 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\sgx_uae_service.dll
2021-06-28 19:57 - 2021-06-28 19:57 - 000454688 _____ (Intel Corporation) C:\WINDOWS\system32\pce.signed.dll

==================== Trois mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)


==================== SigCheckExt =========================

2021-09-25 11:58 - 2021-09-25 11:59 - 002304512 _____ (Farbar) C:\Users\Bobo\Desktop\FRST64.exe
2021-09-25 11:46 - 2021-09-25 11:45 - 003476120 _____ (Nicolas Coolman) C:\Users\Bobo\Desktop\ZHPSuite.exe

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)


==================== BCD ================================

Gestionnaire de d‚marrage Windows
---------------------------------
identificateur          {bootmgr}
device                  partition=\Device\HarddiskVolume1
description             Windows Boot Manager
locale                  fr-FR
inherit                 {globalsettings}
default                 {current}
resumeobject            {37659898-1563-11ec-899e-ab4d9aa93883}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.exe
description             Windows 10
locale                  fr-FR
inherit                 {bootloadersettings}
recoverysequence        {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
displaymessageoverride  Recovery
recoveryenabled         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {37659898-1563-11ec-899e-ab4d9aa93883}
nx                      OptIn
bootmenupolicy          Standard

Chargeur de d‚marrage Windows
-----------------------------
identificateur          {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
device                  ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
path                    \windows\system32\winload.exe
description             Windows Recovery Environment
locale                  fr-fr
inherit                 {bootloadersettings}
displaymessage          Recovery
displaymessageoverride  PushButtonReset
osdevice                ramdisk=[\Device\HarddiskVolume3]\Recovery\WindowsRE\Winre.wim,{f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Reprendre … partir de la mise en veille prolong‚e
-------------------------------------------------
identificateur          {37659898-1563-11ec-899e-ab4d9aa93883}
device                  partition=C:
path                    \WINDOWS\system32\winresume.exe
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {f6074317-fb8f-11eb-bbab-d41ca87f7f3e}
recoveryenabled         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Testeur de m‚moire Windows
--------------------------
identificateur          {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \boot\memtest.exe
description             Diagnostics m‚moire Windows
locale                  fr-FR
inherit                 {globalsettings}
badmemoryaccess         Yes

ParamŠtres EMS
--------------
identificateur          {emssettings}
bootems                 No

ParamŠtres du d‚bogueur
-----------------------
identificateur          {dbgsettings}
debugtype               Local

Erreurs de m‚moire RAM
----------------------
identificateur          {badmemory}

ParamŠtres globaux
------------------
identificateur          {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

ParamŠtres du chargeur de d‚marrage
-----------------------------------
identificateur          {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

ParamŠtres de l'hyperviseur
-------------------
identificateur          {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

ParamŠtres du chargeur de reprise
---------------------------------
identificateur          {resumeloadersettings}
inherit                 {globalsettings}

Options de p‚riph‚rique
-----------------------
identificateur          {f6074318-fb8f-11eb-bbab-d41ca87f7f3e}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume3
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

==================== Fin de FRST.txt ========================