Résultats d'analyse de  Farbar Recovery Scan Tool (FRST) (x64) Version: 25-09-2023
Exécuté par monique (administrateur) sur DESKTOP-VFVVDD9 (ASUSTeK COMPUTER INC. FX503VD) (29-09-2023 19:03:15)
Exécuté depuis C:\Users\moniq\Desktop\FRST64.exe
Profils chargés: monique
Plate-forme: Microsoft Windows 10 Famille Version 22H2 19045.3448 (X64) Langue: Français (France)
Navigateur par défaut: FF
Mode d'amorçage: Normal

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Media\DMedia.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe
(C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\HControl.exe
(C:\Program Files\iTop Easy Desktop\IEDService.exe ->) (ORANGE VIEW LIMITED -> iTop Inc.) C:\Program Files\iTop Easy Desktop\iEasyDesk.exe
(C:\Program Files\iTop Easy Desktop\IEDService.exe ->) (ORANGE VIEW LIMITED -> iTop Inc.) C:\Program Files\iTop Easy Desktop\IEDSearch.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxEM.exe
(explorer.exe ->) (CHENGDU YIWO Tech Development Co., Ltd. -> Easeus) C:\Program Files (x86)\EaseUS\ScreenShot\bin\easeus.screenshot.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <26>
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsLdrSrv.exe
(services.exe ->) (Glarysoft Ltd -> Glarysoft Ltd) C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_38cfab2b652e4701\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_ba273d0ffb93e225\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_c2ac023763d5d3ad\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_51f685305808e3a5\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_0570478011758f12\Intel_PIE_Service.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe
(services.exe ->) (ORANGE VIEW LIMITED -> iTop Inc.) C:\Program Files\iTop Easy Desktop\IEDService.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registre (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1903040 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [DoroServer] => C:\Program Files (x86)\DoroPDFWriter\DoroServer.exe [217088 2021-06-13] (the sz development) [Fichier non signé]
HKLM-x32\...\Run: [NoteBot] => C:\Program Files (x86)\NoteBot\StickyNotes.exe [61440 2019-01-18] (Federico Dossena) [Fichier non signé]
HKLM\...\Policies\Explorer: [NoAutoTrayNotify] 1
HKU\S-1-5-21-468318665-262346247-1813731518-1001\...\Run: [3A35E353FD62B50F2027CBF2B69CD1B20F06E6B6._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8 [4210112 2023-09-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-468318665-262346247-1813731518-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [52120 2023-04-14] (Glarysoft Ltd -> Glarysoft Ltd)
HKU\S-1-5-21-468318665-262346247-1813731518-1001\...\Run: [MicrosoftEdgeAutoLaunch_EBD1D1153615F1DAFE42826E251A298D] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4210112 2023-09-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-468318665-262346247-1813731518-1001\...\Run: [Screenshot] => C:\Program Files (x86)\EaseUS\ScreenShot\bin\easeus.screenshot.exe [2702864 2022-12-13] (CHENGDU YIWO Tech Development Co., Ltd. -> Easeus)
HKU\S-1-5-21-468318665-262346247-1813731518-1001\...\Policies\Explorer: [NoAutoTrayNotify] 1
HKU\S-1-5-21-468318665-262346247-1813731518-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\...\Print\Monitors\Doro PDF Writer Port: C:\Program Files (x86)\DoroPDFWriter\Doro.dll [677888 2020-11-27] () [Fichier non signé]
HKLM\...\Print\Monitors\HP c111 Status Monitor: C:\Windows\system32\hpinkstsc111LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\FxSound.lnk [2022-01-23]
ShortcutTarget: FxSound.lnk -> C:\Program Files\FxSound LLC\FxSound\FxSound.exe (FxSound, LLC -> FxSound LLC)
Startup: C:\Users\moniq\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Deskjet 1510 series.lnk [2020-03-22]
ShortcutAndArgument: Alertes de surveillance de l'encre - HP Deskjet 1510 series.lnk -> C:\WINDOWS\system32\RunDll32.exe => "C:\Program Files\HP\HP Deskjet 1510 series\bin\HPStatusBL.dll",RunDLLEntry SERIALNUMBER=CN4AM1N3V505YR;CONNECTION=USB;MONITOR=1;
BootExecute: autocheck autochk *  

==================== Tâches planifiées (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {ED0CCF6A-7AE9-48B9-B606-736B3147EEE0} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [19967504 2016-11-14] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {E9CCC383-6D35-42A5-AC82-FD4D8C6085A7} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124280 2017-07-28] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {42499F1D-39EF-4EF2-980A-729D4A51A578} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [124280 2017-07-28] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {E64B1890-0221-4BA2-9CFE-2BC02222FADC} - System32\Tasks\CCleanerCrashReporting => E:\09 Ccleaner & drivers\c cleaner\x64\CCleanerBugReport.exe  -> --product 90 --send dumps|report --path "E:\09 Ccleaner & drivers\c cleaner\LOG" --programpath "E:\09 Ccleaner & drivers\c cleaner" --configpath "E:\09 Ccleaner & drivers\c cleaner\Setup" --guid "a805ccb5-40e1-4006-83d0-025ccb87d776" --version "6.08.10255" --silent
Task: {28C5BDED-38D2-42EB-8651-F11E45E36B88} - System32\Tasks\CCleanerSkipUAC - monique => "D:\VOLANTE 16\09 Ccleaner\CCleaner Pro Portable\CCleaner.exe"  $(Arg0) (Pas de fichier)
Task: {573AA953-1C89-4B51-9514-B9A346A99EA7} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [5311304 2023-09-14] (Microsoft Windows -> Microsoft Corporation)
Task: {6CA84DB5-072D-4943-B524-3967B5984483} - System32\Tasks\GlaryUpdate 5 => C:\Program Files (x86)\Glary Utilities 5\CheckUpdate.exe [51608 2023-04-14] (Glarysoft Ltd -> Glarysoft Ltd)
Task: {B7EBDF76-495C-43AD-9912-20F39868A8CD} - System32\Tasks\HPCustParticipation HP Deskjet 1510 series => C:\Program Files\HP\HP Deskjet 1510 series\Bin\HPCustPartic.exe [5745672 2014-03-06] (Hewlett Packard -> Hewlett-Packard Co.)
Task: {001D23F1-8DF9-408E-BC80-8B3F59587328} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26913760 2023-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {126E519D-423F-44D8-8220-19AF9FB33EAF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26913760 2023-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1DE52FE-50EC-45E6-9F79-B7BD48832849} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158664 2023-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {B97C37BE-FE62-4171-895E-BEE2AFF59314} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158664 2023-09-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {8E1CD2A6-4E68-4B2E-B3F6-850E59F9C749} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [167864 2023-08-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {E2E5B7F8-5A96-430B-A42C-FF81D0CC5CF8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-09-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C132A65-38D3-4240-9240-9C8349325535} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-09-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {914B47F9-25A7-427C-A6F9-43FF0F751259} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-09-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AE0EDFFD-786D-4663-A115-763172329FB0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-09-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C51523EF-58D9-45AD-822F-BD0667E9DBCD} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-09-29] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {5091F4B9-C377-4502-9A32-2B54AD3DAEE2} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [717728 2023-09-29] (Mozilla Corporation -> Mozilla Foundation)
Task: {C3227021-6DBB-4B6B-B891-2444B6DEEA59} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [495040 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {8B84C670-9E4E-496B-9F16-3C7D5CB50535} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1704384 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C6EEA28A-A8E0-42A9-92DF-C40B11E44742} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [946112 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {482531B4-D80C-4450-8E70-26BFDD25A39F} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [649152 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AAB09AD1-B251-4624-A625-7CD0F563AA09} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [649152 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4636C134-52DB-4B41-B0D4-D0CD3B0E3612} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436672 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37B39F28-B8DA-4386-A23E-28FB3DEA6A35} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [732096 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5E9CBE85-5709-4336-8E17-DAC5E1D6C39B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [732096 2017-06-21] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {873D3090-EABE-4E16-B450-8487D7CF61A2} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-468318665-262346247-1813731518-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Pas de fichier)
Task: {87303B30-4A72-4E68-A223-F58D8570FB83} - System32\Tasks\RtHDVBg_CTPreset => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617880 2021-09-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {378C09AA-7798-4ABF-A659-D94E60F1D4F2} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617880 2021-09-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {6FA14826-0390-4CA5-BCAD-B3E5E4CB14CE} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617880 2021-09-10] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => E:\09 Ccleaner & drivers\c cleaner\x64\CCleanerBugReport.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{92ba0108-9ab0-4df4-8a1f-31047f36c710}: [NameServer] 1.1.1.1,1.0.0.1
Tcpip\..\Interfaces\{92ba0108-9ab0-4df4-8a1f-31047f36c710}: [DhcpNameServer] 192.168.1.1

Edge: 
=======
Edge Extension: (Pas de nom) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [non trouvé(e)]
Edge Extension: (Pas de nom) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [non trouvé(e)]
Edge Extension: (Pas de nom) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [non trouvé(e)]
Edge Extension: (Pas de nom) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [non trouvé(e)]
Edge DefaultProfile: Default
Edge Profile: C:\Users\moniq\AppData\Local\Microsoft\Edge\User Data\Default [2023-08-21]
Edge Notifications: Default -> hxxps://www.ohmymag.com
Edge Extension: (Edge relevant text changes) - C:\Users\moniq\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-08-08]

FireFox:
========
FF DefaultProfile: wqdo38pa.default
FF ProfilePath: C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\wqdo38pa.default [2023-01-23]
FF ProfilePath: C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release [2023-09-29]
FF Extension: (I don't care about cookies) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2023-09-27]
FF Extension: (Google Translator for Firefox) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\translator@zoli.bod.xpi [2019-05-30]
FF Extension: (uBlock Origin) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\uBlock0@raymondhill.net.xpi [2023-09-28]
FF Extension: (Worldwide Radio) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\worldwide@radio.xpi [2022-01-15]
FF Extension: (Weather) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\{a79a9c4c-9c3f-4bf4-9e58-6574cc0b7ecb}.xpi [2021-07-03]
FF Extension: (Firefox B) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\{ac40163c-8804-4dad-90fc-e25ebd6e9a57}.xpi [2023-01-21]
FF Extension: (Simple Space Stars) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\{b721610c-33d1-498d-b94c-73209c43bbc6}.xpi [2019-06-12]
FF Extension: (Read Aloud: A Text to Speech Voice Reader) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\{ddc62400-f22d-4dd3-8b4a-05837de53c2e}.xpi [2023-09-21]
FF Extension: (Mandala 1 by Tersin@) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\{e1b6dce8-8107-475e-b056-266fe702fcf0}.xpi [2019-05-26]
FF Extension: (Dark Fox) - C:\Users\moniq\AppData\Roaming\Mozilla\Firefox\Profiles\6lh65fve.default-release\Extensions\{e7fe4ffe-f256-4f85-906d-072fdd698585}.xpi [2022-05-02]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-08-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.15 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-08-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.18 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2022-10-25] (VideoLAN -> VideoLAN)

==================== Services (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S4 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [127864 2017-07-28] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
S4 ASUSGamingControlService; C:\Program Files\ASUSTeK COMPUTER INC\ASUS Gaming Control Service\AsusGamingControlService.exe [21464 2017-10-02] (ASUSTeK Computer Inc. -> ASUSTeK COMPUTER INC.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11817040 2023-09-16] (Microsoft Corporation -> Microsoft Corporation)
R2 GUBootService; C:\Program Files (x86)\Common Files\Glarysoft\StartupManager\1.0\GUBootService.exe [889232 2023-03-03] (Glarysoft Ltd -> Glarysoft Ltd)
S3 GUPMService; C:\Program Files (x86)\Glary Utilities 5\GUPMService.exe [76696 2023-04-14] (Glarysoft Ltd -> Glarysoft Ltd)
R2 iTopEasyDesktopService; C:\Program Files\iTop Easy Desktop\IEDService.exe [3157248 2023-08-10] (ORANGE VIEW LIMITED -> iTop Inc.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [17845048 2023-08-07] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe [3116904 2023-09-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe [133584 2023-09-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WiseBootAssistant; C:\Users\moniq\Desktop\extraire ici\wize care\wize cari portable\Wise Care 365\BootTime.exe [658224 2021-08-26] (Lespeed Technology Co., Ltd -> WiseCleaner.com)
S4 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_39f6d2586ed0b7d9\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_39f6d2586ed0b7d9\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S4 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"

===================== Pilotes (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AiCharger; C:\WINDOWS\system32\DRIVERS\AiCharger.sys [29312 2016-11-14] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R3 AsusPTPDrv; C:\WINDOWS\System32\drivers\AsusPTPFilter.sys [112336 2019-10-02] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
R1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
R3 FXVAD; C:\WINDOWS\system32\drivers\fxvad.sys [326656 2022-01-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R1 GUBootStartup; C:\WINDOWS\System32\drivers\GUBootStartup.sys [45056 2023-03-10] (Microsoft Windows Hardware Compatibility Publisher -> Glarysoft Ltd)
R3 HIDSwitch; C:\WINDOWS\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
R3 iaLPSS2_GPIO2; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_skl.inf_amd64_2a35efc43f1a612e\iaLPSS2_GPIO2_ICL.sys [132872 2020-04-28] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_skl.inf_amd64_363c7132639e12a6\iaLPSS2_I2C_ICL.sys [200456 2020-04-28] (Intel Corporation -> Intel Corporation)
R2 iTopEDFileFilter; C:\Program Files\iTop Easy Desktop\iTopEDFileFilter.sys [64168 2022-10-11] (ORANGE VIEW LIMITED -> iTop Inc.)
R3 MpKsl2dda11dd; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{380EBB36-56E2-4AA7-B06A-BE968E438760}\MpKslDrv.sys [263560 2023-09-29] (Microsoft Windows -> Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-26] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
R3 RSP2STOR; C:\WINDOWS\system32\DRIVERS\RtsP2Stor.sys [347224 2020-05-25] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-09-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [572712 2023-09-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105872 2023-09-28] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Trois mois (créés) (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2023-09-29 19:03 - 2023-09-29 19:04 - 000026437 _____ C:\Users\moniq\Desktop\FRST.txt
2023-09-29 19:02 - 2023-09-29 19:02 - 000205554 _____ C:\Users\moniq\Desktop\ZHPDiag.txt
2023-09-29 18:52 - 2023-09-29 18:52 - 000000867 _____ C:\Users\moniq\Desktop\ZHPSuite.lnk
2023-09-29 18:51 - 2023-09-29 19:03 - 000000000 ____D C:\FRST
2023-09-29 18:48 - 2023-09-29 18:48 - 002382848 _____ (Farbar) C:\Users\moniq\Desktop\FRST64.exe
2023-09-29 18:45 - 2023-09-29 18:46 - 003511456 _____ (Nicolas Coolman) C:\Users\moniq\Desktop\ZHPSuite.exe
2023-09-29 18:26 - 2023-09-29 18:26 - 000411518 _____ C:\Users\moniq\Downloads\ordonnance du 26 juin 2023067.pdf
2023-09-29 18:26 - 2023-09-29 18:26 - 000333347 _____ C:\Users\moniq\Downloads\jardinier de Mme Cazal075.pdf
2023-09-29 18:26 - 2023-09-29 18:26 - 000311100 _____ C:\Users\moniq\Downloads\facture bois monique 2023093.pdf
2023-09-29 18:26 - 2023-09-29 18:26 - 000185965 _____ C:\Users\moniq\Downloads\carte vitale Monique.pdf
2023-09-29 18:26 - 2023-09-29 18:26 - 000047202 _____ C:\Users\moniq\Downloads\devis garrigue.pdf
2023-09-29 18:26 - 2023-09-29 18:26 - 000032956 _____ C:\Users\moniq\Downloads\facture lampadaire.pdf
2023-09-27 08:51 - 2023-09-27 08:51 - 000838590 _____ C:\Users\moniq\Downloads\chèque bois 2023.pdf
2023-09-25 19:12 - 2023-09-25 19:12 - 000678770 _____ C:\Users\moniq\Downloads\résultat visite cardio du 25 septembre 2023.pdf
2023-09-24 09:21 - 2023-09-24 09:21 - 003157363 _____ C:\Users\moniq\Downloads\prise de sang 23 sept 2023.pdf
2023-09-18 09:08 - 2023-09-25 19:07 - 000000000 ____D C:\Users\moniq\Documents\échange avec AI
2023-09-16 09:05 - 2023-09-16 09:05 - 000511130 _____ C:\Users\moniq\Downloads\ordonnance 13.09.23.pdf
2023-09-16 09:03 - 2023-09-16 09:03 - 000773698 _____ C:\Users\moniq\Downloads\avis dégrèvemet taxe foncière.pdf
2023-09-14 11:35 - 2023-09-14 11:35 - 000000000 ___HD C:\$WinREAgent
2023-09-13 17:06 - 2023-09-13 17:06 - 000003446 _____ C:\WINDOWS\SysWOW64\pubfreeware.ini
2023-08-31 09:17 - 2023-08-31 09:17 - 000522440 _____ C:\Users\moniq\Downloads\certificat ramonage 2023.pdf
2023-08-29 11:53 - 2023-08-31 09:19 - 000000000 ____D C:\Users\moniq\Desktop\barbecue Monique
2023-08-21 17:32 - 2023-08-21 17:33 - 000000000 ____D C:\Users\moniq\Desktop\jeff
2023-08-20 20:05 - 2023-08-20 20:05 - 000032947 _____ C:\Users\moniq\Desktop\épanchement pleural.odt
2023-08-20 18:05 - 2023-08-20 18:05 - 000027770 _____ C:\Users\moniq\Downloads\Sans nom 1.odt
2023-08-20 09:24 - 2023-08-20 09:24 - 000017352 _____ C:\Users\moniq\Downloads\un holter.odt
2023-08-13 20:25 - 2023-08-13 20:25 - 012457824 _____ C:\Users\moniq\Downloads\VID-20220118-WA00031-1-2.mp4
2023-08-13 20:13 - 2023-08-13 20:13 - 007825207 _____ C:\Users\moniq\Downloads\Etoile realisee par Eiffage brill e depuis le 11 deěcembre 2021 2.mp4
2023-08-13 20:13 - 2023-08-13 20:13 - 000000179 _____ C:\Users\moniq\Downloads\Portion de message joint
2023-08-13 19:58 - 2023-08-13 19:58 - 000000000 ____D C:\Users\moniq\Desktop\FAUSTINE
2023-08-05 18:55 - 2023-08-05 18:55 - 000014214 _____ C:\Users\moniq\Downloads\inspection générale..odt
2023-07-30 11:49 - 2023-07-30 11:49 - 000016925 _____ C:\Users\moniq\Downloads\Tranches de poitrine fraiche au miel pour plancha.odt
2023-07-20 19:08 - 2023-07-20 19:15 - 000030640 _____ C:\Users\moniq\Downloads\EPAULE DE CHEVREUIL AU CHOUX.odt
2023-07-17 20:03 - 2023-09-29 08:08 - 000111742 _____ C:\WINDOWS\system32\MetroAppCache.ini
2023-07-16 19:00 - 2023-07-16 19:01 - 000001102 _____ C:\Users\moniq\Desktop\paella 2023.lnk
2023-07-14 13:21 - 2023-09-17 15:27 - 000604440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-07-06 10:27 - 2023-07-06 10:27 - 000639659 _____ C:\Users\moniq\Downloads\ordonnance ophtalmo.pdf
2023-07-05 20:02 - 2023-07-05 20:04 - 000000000 ____D C:\Users\moniq\Desktop\sortie  canigou
2023-07-02 09:31 - 2023-08-21 17:34 - 000000000 ____D C:\Users\moniq\AppData\Local\Outils_Windows

==================== Trois mois (modifiés) ==================

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2023-09-29 19:02 - 2020-10-27 10:02 - 000000000 ____D C:\Users\moniq\AppData\Roaming\ZHP
2023-09-29 18:52 - 2020-10-30 18:55 - 000000000 ____D C:\Users\moniq\AppData\Local\ZHP
2023-09-29 18:28 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-09-29 18:25 - 2022-02-16 17:43 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-09-29 18:17 - 2021-05-22 19:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-09-29 09:54 - 2019-05-26 16:16 - 000000000 ____D C:\Users\moniq\AppData\Local\D3DSCache
2023-09-29 09:11 - 2023-01-18 10:04 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-09-29 09:11 - 2019-05-25 16:50 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-09-29 08:08 - 2023-03-21 20:44 - 000000000 ____D C:\Users\moniq\AppData\Roaming\EaseUS ScreenShot
2023-09-28 15:30 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-09-28 15:30 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-09-28 14:08 - 2019-10-24 14:28 - 000000000 ____D C:\Users\moniq\AppData\Roaming\AIMP
2023-09-28 08:07 - 2020-09-27 09:51 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-09-27 08:22 - 2023-01-22 10:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2023-09-27 08:22 - 2019-05-25 16:43 - 000001280 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2023-09-27 08:06 - 2020-09-27 09:54 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-09-27 08:06 - 2020-09-27 09:54 - 000002282 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-09-26 18:06 - 2020-09-27 09:55 - 000000000 ____D C:\ProgramData\Packages
2023-09-17 18:45 - 2021-05-22 19:26 - 001770906 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-09-17 18:45 - 2019-12-07 16:49 - 000792842 _____ C:\WINDOWS\system32\perfh00C.dat
2023-09-17 18:45 - 2019-12-07 16:49 - 000149972 _____ C:\WINDOWS\system32\perfc00C.dat
2023-09-17 18:45 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-09-17 18:39 - 2019-06-09 16:02 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2023-09-17 18:38 - 2022-09-17 08:50 - 000000000 ____D C:\Program Files\iTop Easy Desktop
2023-09-17 18:38 - 2021-05-22 19:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-09-17 18:38 - 2020-09-02 17:13 - 000008192 ___SH C:\DumpStack.log.tmp
2023-09-17 18:38 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-09-17 18:38 - 2017-11-22 21:30 - 000000000 ___HD C:\Intel
2023-09-17 15:41 - 2019-05-25 16:23 - 000000000 ____D C:\Users\moniq\AppData\Local\Packages
2023-09-17 15:39 - 2022-09-17 08:50 - 000000955 _____ C:\Users\Public\Desktop\iTop Easy Desktop.lnk
2023-09-17 15:39 - 2022-09-17 08:50 - 000000000 ____D C:\Users\moniq\AppData\Local\iTop Easy Desktop
2023-09-17 15:39 - 2022-09-17 08:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTop Easy Desktop
2023-09-17 15:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-09-17 15:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-09-17 15:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-09-17 15:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-09-17 15:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-09-17 15:24 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-09-17 15:24 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-09-17 15:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-09-17 15:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-09-17 15:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-09-16 08:45 - 2017-11-22 22:06 - 000000000 ____D C:\Program Files\Microsoft Office
2023-09-14 12:09 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-09-14 11:59 - 2021-05-22 19:14 - 003014144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-09-13 17:18 - 2019-05-25 18:38 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-09-13 17:15 - 2019-05-25 18:38 - 177941912 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-09-13 16:26 - 2022-12-22 23:24 - 000000000 ____D C:\ProgramData\ProductData
2023-09-13 16:21 - 2021-05-22 17:00 - 000000000 ____D C:\Users\moniq
2023-09-09 09:18 - 2019-07-10 12:01 - 000000000 ____D C:\Users\moniq\AppData\Local\CrashDumps
2023-09-08 08:53 - 2019-05-25 16:50 - 000000000 ____D C:\Users\moniq\AppData\LocalLow\Mozilla
2023-08-30 12:07 - 2020-08-21 11:12 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

==================== Fichiers à la racine de certains dossiers ========

2019-05-25 16:24 - 2020-05-16 16:19 - 000000219 _____ () C:\Users\moniq\AppData\Roaming\sp_data.sys

==================== SigCheckExt =========================

2023-09-29 18:48 - 2023-09-29 18:48 - 002382848 _____ (Farbar) C:\Users\moniq\Desktop\FRST64.exe
2023-09-29 18:45 - 2023-09-29 18:46 - 003511456 _____ (Nicolas Coolman) C:\Users\moniq\Desktop\ZHPSuite.exe

==================== SigCheck ============================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)


==================== BCD ================================

Gestionnaire de démarrage du microprogramme
-------------------------------------------
identificateur          {fwbootmgr}
displayorder            {bootmgr}
                        {8a4aae80-d004-11e7-9585-2cfda13ed027}
                        {8a4aae81-d004-11e7-9585-2cfda13ed027}
                        {8a4aae82-d004-11e7-9585-2cfda13ed027}
                        {8a4aae83-d004-11e7-9585-2cfda13ed027}
timeout                 2

Gestionnaire de démarrage Windows
---------------------------------
identificateur          {bootmgr}
device                  partition=\Device\HarddiskVolume1
path                    \EFI\Microsoft\Boot\bootmgfw.efi
description             Windows Boot Manager
locale                  fr-FR
inherit                 {globalsettings}
default                 {current}
resumeobject            {1d944d6f-7f8c-11e9-b966-8d4e8d894ddc}
displayorder            {current}
toolsdisplayorder       {memdiag}
timeout                 30

Application logicielle (101fffff)
--------------------------------
identificateur          {8a4aae80-d004-11e7-9585-2cfda13ed027}
device                  partition=\Device\HarddiskVolume1
path                    \EFI\Microsoft\Boot\bootmgfw.efi
description             Windows Boot Manager

Application logicielle (101fffff)
--------------------------------
identificateur          {8a4aae81-d004-11e7-9585-2cfda13ed027}
description             UEFI:CD/DVD Drive

Application logicielle (101fffff)
--------------------------------
identificateur          {8a4aae82-d004-11e7-9585-2cfda13ed027}
description             UEFI:Removable Device

Application logicielle (101fffff)
--------------------------------
identificateur          {8a4aae83-d004-11e7-9585-2cfda13ed027}
description             UEFI:Network Device

Chargeur de démarrage Windows
-----------------------------
identificateur          {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.efi
description             Windows 10
locale                  fr-FR
inherit                 {bootloadersettings}
recoverysequence        {1d944d72-7f8c-11e9-b966-8d4e8d894ddc}
displaymessageoverride  Recovery
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {1d944d6f-7f8c-11e9-b966-8d4e8d894ddc}
nx                      OptIn
bootmenupolicy          Standard

Chargeur de démarrage Windows
-----------------------------
identificateur          {1d944d72-7f8c-11e9-b966-8d4e8d894ddc}
device                  ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{1d944d73-7f8c-11e9-b966-8d4e8d894ddc}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  fr-FR
inherit                 {bootloadersettings}
displaymessage          Recovery
osdevice                ramdisk=[\Device\HarddiskVolume4]\Recovery\WindowsRE\Winre.wim,{1d944d73-7f8c-11e9-b966-8d4e8d894ddc}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

Reprendre à partir de la mise en veille prolongée
-------------------------------------------------
identificateur          {1d944d6f-7f8c-11e9-b966-8d4e8d894ddc}
device                  partition=C:
path                    \WINDOWS\system32\winresume.efi
description             Windows Resume Application
locale                  fr-FR
inherit                 {resumeloadersettings}
recoverysequence        {1d944d72-7f8c-11e9-b966-8d4e8d894ddc}
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
filedevice              partition=C:
filepath                \hiberfil.sys
bootmenupolicy          Standard
debugoptionenabled      No

Testeur de mémoire Windows
--------------------------
identificateur          {memdiag}
device                  partition=\Device\HarddiskVolume1
path                    \EFI\Microsoft\Boot\memtest.efi
description             Diagnostics mémoire Windows
locale                  fr-FR
inherit                 {globalsettings}
badmemoryaccess         Yes

Paramètres EMS
--------------
identificateur          {emssettings}
bootems                 No

Paramètres du débogueur
-----------------------
identificateur          {dbgsettings}
debugtype               Local

Erreurs de mémoire RAM
----------------------
identificateur          {badmemory}

Paramètres globaux
------------------
identificateur          {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}

Paramètres du chargeur de démarrage
-----------------------------------
identificateur          {bootloadersettings}
inherit                 {globalsettings}
                        {hypervisorsettings}

Paramètres de l'hyperviseur
-------------------
identificateur          {hypervisorsettings}
hypervisordebugtype     Serial
hypervisordebugport     1
hypervisorbaudrate      115200

Paramètres du chargeur de reprise
---------------------------------
identificateur          {resumeloadersettings}
inherit                 {globalsettings}

Options de périphérique
-----------------------
identificateur          {1d944d73-7f8c-11e9-b966-8d4e8d894ddc}
description             Windows Recovery
ramdisksdidevice        partition=\Device\HarddiskVolume4
ramdisksdipath          \Recovery\WindowsRE\boot.sdi

==================== Fin de FRST.txt ========================