~ ZHPDiag v2025.2.2.2 Par Nicolas Coolman (2025/02/02)
~ Démarre par Bernard (Administrator)  (2025/02/15 01:28:44)
~ Assistance: https://forum.nicolascoolman.eu/
~ Blog: https://nicolascoolman.eu/
~ Facebook: https://www.facebook.com/nicolascoolman1
~ Etat de la version:  Version OK
~ Mode: Scanner
~ Rapport: C:\Users\Bernard\Desktop\ZHPDiag.txt
~ Rapport: C:\Users\Bernard\AppData\Roaming\ZHP\ZHPDiag.txt
~ UAC: Activate
~ Demarrage du système: Normal (Normal boot)
Windows 10 Home, 64-bit  (Build 19045)  =>.Microsoft Corporation

---\\ NAVIGATEURS INTERNET (3) - 0s
~ MFIE: Mozilla Firefox 135.0 (x64 fr)
~ MSIE: Internet Explorer v11.3636.19041.0
~ OBIE: Microsoft Edge v131.0.2903.51

---\\ INFORMATIONS SUR LES PRODUITS WINDOWS (8) - 0s
~ Windows Server License Manager Script : OK
~ Licence Script File Génération : OK
~ Windows(R) Operating System, RETAIL channel
Windows ID Activation : OK
~ Windows Partial Key : 8HVX7
Windows License : OK
~ Windows Remaining Initializations Number :  1001
Windows Automatic Updates : OK

---\\ LOGICIELS DE PROTECTION (2) - 1s
Windows Defender W10 (Deactivate) (Protection)
Malwarebytes version 5.2.6.163 v5.2.6.163 (Protection)

---\\ LOGICIELS D'OPTIMISATION (1) - 1s
~ CCleaner v6.27 (Optimisation)

---\\ INFORMATIONS SUR LE SYSTEME (18) - 2s
~ Operating System: AMD64 Family 23 Model 96 Stepping 1, AuthenticAMD
~ Operating System:  64-bit 
~ Boot mode: Normal (Normal boot)
System Restore: Activé (Enable)
System drive  has 505 GB (77%) free of 652 GB : OK  =>.Disk Space

---\\ INFORMATIONS MÉMOIRE (MEMORY INFORMATIONS)
~ Slots Total (Total Slots) : 4
~ Slots Utilisés (Used Slots) : 2
~ Slots Disponibles (Free Slots) : 2
~ Type de barrette (FormFactor): DIMM
~ Taille (Size) : 16 Go
~ Vitesse (Speed) : 2666~ Charge mémoire (Memory Usage) : 12%
~ RAM physique Total (Total Physical) : 31 Go : OK
~ RAM physique Disponible (Available Physical) : 27 Go
~ Total virtuelle (Total Virtual) : 63.37 Go
~ Disponible virtuelle (Available Virtual): 59.24 Go

---\\ MODE DE CONNEXION AU SYSTEME (3) - 0s
~ Computer Name: DESKTOP-KJA1D38
~ User Name: Bernard
~ Logged in as Administrator

---\\ ENUMERATION DES UNITES DE STOCKAGE (6) - 0s
~ Drive C: has 505 GB free of 652 GB
~ Drive D: has 1268 GB free of 2097 GB

---\\ ETAT DE LA COMMANDE TRIM
~ La commande TRIM est active (NTFS)
~ La commande TRIM est active (ReFS)

---\\ CARACTÉRISTIQUES PRINCIPALES DU DISQUE SYSTEME (33) - 15s
~ Model: ST3000VN007-2AH16M vSC60  (652 Gb )
~ Media Type: SSD Disque Fixe   ( Bus: SATA)

---\\ ATTRIBUTS GÉNÉRAUX DU DISQUE SYSTÈME
OK - N0 - Indicateur d'usure du périphérique de stockage (Storage Device Wear Indicator) (%):  0
OK - N1 - Temps de latence maximal de vidage (Maximum Flash latency) (ms): 0.052
OK - N2 - Temps de latence maximal d'écriture (Maximum write latency) (ms): 0.004
OK - N3 - Temps de latence maximal de lecture (Maximum read latency) (ms): 0.714
OK - N4 - Vitesse de rotation (Spindle Speed) (RPM): Unknown

---\\ PARAMÈTRES S.M.A.R.T. DU DISQUE SYSTÈME (Flag/Actuel/Maxi) [Seuil] [Valeur brute]
OK - 01 - Taux d'erreur de lecture (Raw Read Error Rate) - [15][81][64]   [44][22431]    
OK - 03 - Cellules de rechange disponibles (Available Spare Cells) - [3][95][94]   [0][0]    
OK - 04 - Nombre de démarrages/arrêts (Start/Stop Count) - [50][96][96]   [20][4164]    
OK - 05 - Nombre de secteurs réalloués (Reallocated Sector Count) - [51][100][100]   [10][0]    
OK - 07 - Taux d’erreur de recherche (Seek Error Rate) - [15][79][60]   [45][17845]    
OK - 09 - Heures de fonctionnement (Power-On Hours Count (POH) - [50][97][97]   [0][3187]    
OK - 0A - Spécifique Constructeur - [19][100][100]   [97][0]    
OK - 0C - Nombre de cycles en fonctionnement (Power Cycles Count) - [50][98][98]   [20][2577]    
OK - B8 - Nombre d'erreur de correction (Incorrectable Error Count) - [50][100][100]   [99][0]    
OK - BB - Nombre d'erreurs incorrigibles (Reported Uncorrectable Errors) - [50][100][100]   [0][0]    
OK - BC - Spécifique Constructeur - [50][100][100]   [0][0]    
OK - BD - Reported Uncorrectable Errors - [58][100][100]   [0][0]    
OK - BE - Temperature débit d'air (Temperature Airflow) - [34][77][64]   [40][23]    
OK - BF - Nombre d'erreurs résultant de chocs externes (G-Sense Error Rate) - [50][100][100]   [0][0]    
OK - C0 - Pertes de Puissance inattendues (Unexpected Power Loss Count) - [50][99][99]   [0][2102]    
OK - C1 - Cycles de charge/décharge (Load/Unload Cycle Count) - [50][92][92]   [0][17882]    
OK - C2 - Température interne actuelle (Temperature) - [34][23][40]   [0][23]    
OK - C5 - Nombre actuel d’ECC en attente (Current Pending ECC Count) - [18][100][100]   [0][0]    
OK - C6 - Total d'erreur incorrigibles (Uncorrectable Errors) - [16][100][100]   [0][0]    
OK - C7 - Nombre d'erreurs CRC Ultra-DMA (CRC Error Count) - [62][200][200]   [0][0]    
OK - F0 - Taux de transfert d'erreur (Transfer Error Rate) - [0][100][253]   [0][938]    
OK - F1 - Nombre total d'écriture Hôte (Total LBA Written, Lifetime Host Writes) - [0][100][253]   [0][9307]    

---\\ ETAT DU CENTRE DE SECURITE WINDOWS (7) - 0s
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies\Explorer] NoActiveDesktopChanges: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\policies\system] EnableLUA: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\NOHIDDEN] CheckedValue: Modified
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL] CheckedValue: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\Associations] Application: OK
[HKLM\Software\WOW6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] Shell: OK
[HKLM64\SYSTEM\CurrentControlSet\Services\COMSysApp] Type: OK

---\\ RECHERCHE PARTICULIERE DE FICHIERS GENERIQUES (26) - 1s
[MD5.725269DC9FA0536F9DA838A18D49DA4F] - 12/02/2025 - (.Microsoft Corporation - Explorateur Windows.) -- C:\WINDOWS\Explorer.exe [6088112]  =>.Microsoft®
[MD5.D28778D07C8F7CA59B7569E4EDA54512] - 24/08/2024 - (.Microsoft Corporation - Processus hôte Windows (Rundll32).) -- C:\WINDOWS\System32\rundll32.exe [89600] [Unsigned]  =>.Microsoft Corporation
[MD5.0474E5B7B2DD2E5239B8EED540441EF1] - 12/02/2025 - (.Microsoft Corporation - Application de démarrage de Windows.) -- C:\WINDOWS\System32\Wininit.exe [420624] [Unsigned]  =>.Microsoft Corporation
[MD5.274296DD489B42B6A9DA938950003C44] - 12/02/2025 - (.Microsoft Corporation - Extensions Internet pour Win32.) -- C:\WINDOWS\System32\wininet.dll [5045248] [Unsigned]  =>.Microsoft Corporation
[MD5.4E79357D0CC0EF9897239A9BFF18A87C] - 11/12/2024 - (.Microsoft Corporation - Application d’ouverture de session Windows.) -- C:\WINDOWS\System32\Winlogon.exe [947200] [Unsigned]  =>.Microsoft Corporation
[MD5.9E9B92A002EACFE2831EA4842C34C545] - 15/11/2024 - (.Microsoft Corporation - Bibliothèque de licences.) -- C:\WINDOWS\System32\sppcomapi.dll [316416] [Unsigned]  =>.Microsoft Corporation
[MD5.0797A5FE041E8E861F4BFE5DF0A35E6E] - 15/01/2025 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\System32\dnsapi.dll [821912]  =>.Microsoft®
[MD5.7C31C466DB21218EA7E17E9A1A2FE0F1] - 15/01/2025 - (.Microsoft Corporation - DNS DLL de l’API Client.) -- C:\WINDOWS\Syswow64\dnsapi.dll [583768]  =>.Microsoft®
[MD5.D53E552A333660F92E0A4B23F3475A1B] - 12/02/2025 - (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\WINDOWS\System32\wuaueng.dll [3433472] [Unsigned]  =>.Microsoft Corporation
[MD5.3996E9A5F0CC85E93AA7ADE49A892C5E] - 07/12/2019 - (.Microsoft Corporation - DLL client de l’API uilisateur de Windows m.) -- C:\WINDOWS\System32\fr-FR\user32.dll.mui [19968] [Unsigned]  =>.Microsoft Corporation
[MD5.AC50F3D80070A32DA06C6B20FA3A74FA] - 12/02/2025 - (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\AFD.sys [656888] [Unsigned]  =>.Microsoft Corporation
[MD5.81FF48994C82B1CA2C4EBD9C6C6683C4] - 24/08/2024 - (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys [31200] [Unsigned]  =>.Microsoft Corporation
[MD5.E53DE91C9330F0E17075C11CD0A7719A] - 24/08/2024 - (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\Cdfs.sys [100864] [Unsigned]  =>.Microsoft Corporation
[MD5.14D133579A5B1E08E336B7FE259CA85A] - 24/08/2024 - (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\Cdrom.sys [175616] [Unsigned]  =>.Microsoft Corporation
[MD5.BE6DCE5C9655A6DA501C46DA125B41A9] - 09/10/2024 - (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\DfsC.sys [154112] [Unsigned]  =>.Microsoft Corporation
[MD5.7E0352A6396756AD61CC755CAEDBD2D4] - 09/10/2024 - (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\HDAudBus.sys [138752] [Unsigned]  =>.Microsoft Corporation
[MD5.E4B36C6EAAAB703CBFECB92EE590FB31] - 07/12/2019 - (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys [118272] [Unsigned]  =>.Microsoft Corporation
[MD5.2954A20F0F0152E89FC459A11382C98A] - 24/08/2024 - (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\IpNat.sys [228352] [Unsigned]  =>.Microsoft Corporation
[MD5.6E4E7AE6A3C0E30C80A42B4F9E9DBCB9] - 09/10/2024 - (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\MRxSmb.sys [584696] [Unsigned]  =>.Microsoft Corporation
[MD5.09D0F16FB9555790DA934BDC2543E940] - 24/08/2024 - (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netBT.sys [341504] [Unsigned]  =>.Microsoft Corporation
[MD5.687EBF38CF2B13ABA54BCABFBD128EC4] - 12/02/2025 - (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys [2842096] [Unsigned]  =>.Microsoft Corporation
[MD5.138FDB1EBCB61287A645BD3B06DBED5E] - 07/12/2019 - (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\Parport.sys [109056] [Unsigned]  =>.Microsoft Corporation
[MD5.E8308FE2DB8DCD31A02CADD808819EDE] - 24/08/2024 - (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\Rasl2tp.sys [112640] [Unsigned]  =>.Microsoft Corporation
[MD5.360DD75AEDB512B0DD878A81BEE89BEF] - 24/08/2024 - (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys [170496] [Unsigned]  =>.Microsoft Corporation
[MD5.02577FC71C31F625B302566190AA1382] - 24/08/2024 - (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys [118752] [Unsigned]  =>.Microsoft Corporation
[MD5.484DC5AD718AE12B3AD99B511FABE088] - 24/08/2024 - (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys [431088] [Unsigned]  =>.Microsoft Corporation

---\\ LISTE DES SERVICES (Non désactivés) (89) - 2s
O23 - Service: ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY - ABBYY network license server.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe  =>.ABBYY SOLUTIONS LIMITED®
O23 - Service:  (AMD Crash Defender Service) . (.Advanced Micro Devices, Inc. - AMD Crash Defender Service.) - C:\WINDOWS\System32\amdfendrsr.exe [Unsigned]  =>.Advanced Micro Devices, Inc.
O23 - Service: C:\Windows\System32\inetsrv\iisres.dll (AppHostSvc) . (.Microsoft Corporation - IIS Application Host Helper Service.) - C:\Windows\System32\inetsrv\apphostsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\AudioEndpointBuilder.dll (AudioEndpointBuilder) . (.Microsoft Corporation - Générateur de points de terminaison du serv.) - C:\WINDOWS\System32\AudioEndpointBuilder.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\audiosrv.dll (Audiosrv) . (.Microsoft Corporation - Service Audio Windows.) - C:\WINDOWS\System32\Audiosrv.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\bfe.dll (BFE) . (.Microsoft Corporation - Moteur de filtrage de base.) - C:\WINDOWS\System32\bfe.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\qmgr.dll (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) - C:\WINDOWS\System32\qmgr.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\bisrv.dll (BrokerInfrastructure) . (.Microsoft Corporation - Process State Manager (PSM) Service.) - C:\WINDOWS\System32\psmsrv.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\cdpusersvc.dll (CDPUserSvc) . (.Microsoft Corporation - Composants utilisateur Microsoft (R) CDP.) - C:\WINDOWS\System32\CDPUserSvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service pour utilisateur de plateforme d’appareils connecté (CDPUserSvc_4f5f0) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe  =>.Microsoft®
O23 - Service: Microsoft Office Click-to-Run Service (ClickToRunSvc) . (.Microsoft Corporation - Microsoft Office Click-to-Run (SxS).) - C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe  =>.Microsoft®
O23 - Service: C:\Windows\System32\coremessaging.dll (CoreMessagingRegistrar) . (.Microsoft Corporation - Microsoft CoreMessaging Dll.) - C:\Windows\System32\coremessaging.dll  =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\cryptsvc.dll (CryptSvc) . (.Microsoft Corporation - Services de chiffrement.) - C:\WINDOWS\System32\cryptsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\debugregsvc.dll (debugregsvc) . (.Microsoft Corporation - Service d enregistrement de débogage.) - C:\WINDOWS\System32\debugregsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\das.dll (DeviceAssociationService) . (.Microsoft Corporation - Service d’association de périphérique.) - C:\WINDOWS\System32\das.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dhcpcore.dll (Dhcp) . (.Microsoft Corporation - Service client DHCP.) - C:\Windows\System32\dhcpcore.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\dispbroker.desktop.dll (DispBrokerDesktopSvc) . (.Microsoft Corporation - Courtier d'affichage du bureau.) - C:\WINDOWS\System32\DispBroker.Desktop.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\dnsapi.dll (Dnscache) . (.Microsoft Corporation - Service de résolution du cache DNS.) - C:\WINDOWS\System32\dnsrslvr.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\dusmsvc.dll (DusmSvc) . (.Microsoft Corporation - Service Consommation des données.) - C:\WINDOWS\System32\dusmsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wevtsvc.dll (EventLog) . (.Microsoft Corporation - Service journal des événements.) - C:\WINDOWS\System32\wevtsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: @comres.dll,-2450 (EventSystem) . (.Microsoft Corporation - COM+.) - C:\Windows\System32\es.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\FntCache.dll (FontCache) . (.Microsoft Corporation - Service de cache de police Windows.) - C:\WINDOWS\System32\FntCache.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\inetsrv\ftpres.dll (ftpsvc) . (.Microsoft Corporation - Protocol Handler for FTPSVC.) - C:\WINDOWS\system32\inetsrv\ftpsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Gaming Services (GamingServices) . (.Microsoft Corporation - GamingServices.) - C:\Program Files\WindowsApps\Microsoft.GamingServices_26.95.25001.0_x64__8wekyb3d8bbwe\GamingServices.exe  =>.Microsoft®
O23 - Service: Gaming Services (GamingServicesNet) . (.Microsoft Corporation - GamingServices.) - C:\Program Files\WindowsApps\Microsoft.GamingServices_26.95.25001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe  =>.Microsoft®
O23 - Service: @gpapi.dll,-112 (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) - C:\WINDOWS\System32\gpsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service d'hôte HV (HvHost) . (.Microsoft Corporation - Service d'hôte hyperviseur Microsoft.) - C:\WINDOWS\System32\hvhostsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\inetsrv\iisres.dll (IISADMIN) . (.Microsoft Corporation - Internet Information Services.) - C:\WINDOWS\system32\inetsrv\inetinfo.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\ikeext.dll (IKEEXT) . (.Microsoft Corporation - Extension IKE.) - C:\WINDOWS\System32\ikeext.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\iphlpsvc.dll (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) - C:\WINDOWS\System32\iphlpsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: KDService (KDService) . (.KYOCERA Document Solutions Inc. - KDService.) - C:\Program Files\KDService\bin\KDService.exe [Unsigned]  =>.KYOCERA Document Solutions Inc.
O23 - Service: C:\WINDOWS\System32\srvsvc.dll (LanmanServer) . (.Microsoft Corporation - DLL du service Serveur.) - C:\WINDOWS\System32\srvsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wkssvc.dll (LanmanWorkstation) . (.Microsoft Corporation - DLL du service Station de travail.) - C:\WINDOWS\System32\wkssvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\lsm.dll (LSM) . (.Microsoft Corporation - Service du gestionnaire de session locale.) - C:\WINDOWS\System32\lsm.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\moshost.dll (MapsBroker) . (.Microsoft Corporation - Gestionnaire des cartes téléchargées.) - C:\WINDOWS\System32\moshost.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Malwarebytes Service (MBAMService) . (.Malwarebytes - Malwarebytes Service.) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe  =>.Malwarebytes Inc.®
O23 - Service: C:\Windows\System32\FirewallAPI.dll (mpssvc) . (.Microsoft Corporation - Service de protection Microsoft.) - C:\WINDOWS\System32\mpssvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\iscsidsc.dll (MSiSCSI) . (.Microsoft Corporation - Service de découverte iSCSI.) - C:\WINDOWS\System32\iscsiexe.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: @mqutil.dll,-6102 (MSMQ) . (.Microsoft Corporation - Message Queuing Service.) - C:\WINDOWS\System32\mqsvc.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: @mqutil.dll,-6203 (MSMQTriggers) . (.Microsoft Corporation - Message Queuing Trigger Service.) - C:\WINDOWS\System32\mqtgsvc.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: GIGABYTE Adjust (MyService1) . (. - AdjustService.) - C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [Unsigned]
O23 - Service: C:\Windows\System32\netlogon.dll (Netlogon) . (.Microsoft Corporation - Local Security Authority Process.) - C:\WINDOWS\System32\lsass.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceMode (NetMsmqActivator) . (.Microsoft Corporation - SMSvcHost.exe.) - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe  =>.Microsoft®
O23 - Service: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceMode (NetPipeActivator) . (.Microsoft Corporation - SMSvcHost.exe.) - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe  =>.Microsoft®
O23 - Service: C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ServiceMode (NetTcpActivator) . (.Microsoft Corporation - SMSvcHost.exe.) - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe  =>.Microsoft®
O23 - Service: Service de partage de ports Net.Tcp (NetTcpPortSharing) . (.Microsoft Corporation - SMSvcHost.exe.) - C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe  =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\nlasvc.dll (NlaSvc) . (.Microsoft Corporation - Connaissance des emplacements réseau 2.) - C:\WINDOWS\System32\nlasvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\nsisvc.dll (nsi) . (.Microsoft Corporation - Serveur RPC de l’interface du magasin résea.) - C:\WINDOWS\System32\nsisvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\APHostRes.dll (OneSyncSvc) . (.Microsoft Corporation - Accounts Host Service.) - C:\WINDOWS\System32\APHostService.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Hôte de synchronisation_4f5f0 (OneSyncSvc_4f5f0) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe  =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\umpo.dll (Power) . (.Microsoft Corporation - Service d’alimentation en mode utilisateur.) - C:\WINDOWS\System32\umpo.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\profsvc.dll (ProfSvc) . (.Microsoft Corporation - ProfSvc.) - C:\WINDOWS\System32\profsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Gestionnaire des connexions automatiques d’accès à distance (RasAuto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) - C:\WINDOWS\System32\rasauto.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\rasmans.dll (RasMan) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) - C:\WINDOWS\System32\rasmans.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\RpcEpMap.dll (RpcEptMapper) . (.Microsoft Corporation - Mappeur de point de terminaison RPC.) - C:\WINDOWS\System32\RpcEpMap.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: @combase.dll,-5010 (RpcSs) . (.Microsoft Corporation - Distributed COM Services.) - C:\WINDOWS\System32\rpcss.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\schedsvc.dll (Schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) - C:\WINDOWS\System32\schedsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Sauvegarde Windows (SDRSVC) . (.Microsoft Corporation - Service de sauvegarde Microsoft® Windows.) - C:\WINDOWS\System32\SDRSVC.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\Sens.dll (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) - C:\WINDOWS\System32\sens.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\SgrmBroker.exe,-100 (SgrmBroker) . (.Microsoft Corporation - Service Broker du moniteur d´exécution Syst.) - C:\WINDOWS\System32\SgrmBroker.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\shsvcs.dll (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) - C:\Windows\System32\shsvcs.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\simptcp.dll (simptcp) . (.Microsoft Corporation - TCP/IP Services Application.) - C:\Windows\System32\TCPSVCS.EXE [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\spoolsv.exe,-1 (Spooler) . (.Microsoft Corporation - Application sous-système spouleur.) - C:\WINDOWS\System32\spoolsv.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sppsvc.exe,-101 (sppsvc) . (.Microsoft Corporation - Service de la plateforme de protection logi.) - C:\WINDOWS\System32\sppsvc.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wiaservc.dll (StiSvc) . (.Microsoft Corporation - Service de périphériques d’images fixes.) - C:\WINDOWS\System32\wiaservc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\StorSvc.dll (StorSvc) . (.Microsoft Corporation - Services de stockage.) - C:\WINDOWS\System32\storsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Fournisseur de cliché instantané de logiciel Microsoft (swprv) . (.Microsoft Corporation - Fournisseur logiciel du service Microsoft®.) - C:\WINDOWS\System32\swprv.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\sysmain.dll (SysMain) . (.Microsoft Corporation - Hôte de Service SysMain.) - C:\WINDOWS\System32\sysmain.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\system32\SystemEventsBrokerServer.dll (SystemEventsBroker) . (.Microsoft Corporation - Service Broker pour les événements système.) - C:\WINDOWS\System32\SystemEventsBrokerServer.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\themeservice.dll (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) - C:\WINDOWS\System32\themeservice.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\usermgr.dll (UserManager) . (.Microsoft Corporation - UserMgr.) - C:\WINDOWS\System32\usermgr.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\usosvc.dll (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) - C:\WINDOWS\System32\usosvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Disque virtuel (vds) . (.Microsoft Corporation - Service de disque virtuel.) - C:\WINDOWS\System32\vds.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service Pulsation Microsoft Hyper-V (vmicheartbeat) . (.Microsoft Corporation - Service de composants d'intégration d'ordin.) - C:\WINDOWS\System32\icsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service Échange de données Microsoft Hyper-V (vmickvpexchange) . (.Microsoft Corporation - Service de composants d'intégration d'ordin.) - C:\WINDOWS\System32\icsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service de virtualisation Bureau à distance Hyper-V (vmicrdv) . (.Microsoft Corporation - Service de composants d’intégration d’ordin.) - C:\WINDOWS\System32\icsvcext.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service Arrêt de l’invité Microsoft Hyper-V (vmicshutdown) . (.Microsoft Corporation - Service de composants d'intégration d'ordin.) - C:\WINDOWS\System32\icsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service Synchronisation date/heure Microsoft Hyper-V (vmictimesync) . (.Microsoft Corporation - Service de composants d'intégration d'ordin.) - C:\WINDOWS\System32\icsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service Hyper-V PowerShell Direct (vmicvmsession) . (.Microsoft Corporation - Service de composants d'intégration d'ordin.) - C:\WINDOWS\System32\icsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Requête du service VSS Microsoft Hyper-V (vmicvss) . (.Microsoft Corporation - Service de composants d’intégration d’ordin.) - C:\WINDOWS\System32\icsvcext.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\Windows\System32\inetsrv\iisres.dll (W3SVC) . (.Microsoft Corporation - IIS Web Admin Service.) - C:\Windows\System32\inetsrv\iisw3adm.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wcmsvc.dll (Wcmsvc) . (.Microsoft Corporation - DLL du service de gestion des connexions Wi.) - C:\WINDOWS\System32\wcmsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wbem\wmisvc.dll (Winmgmt) . (.Microsoft Corporation - WMI.) - C:\WINDOWS\System32\wbem\WMIsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\wpnservice.dll (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) - C:\WINDOWS\System32\WpnService.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\WpnUserService.dll (WpnUserService) . (.Microsoft Corporation - Service utilisateur de notifications Push W.) - C:\WINDOWS\System32\WpnUserService.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: Service utilisateur de notifications Push Windows_4f5f0 (WpnUserService_4f5f0) . (.Microsoft Corporation - Processus hôte pour les services Windows.) - C:\Windows\System32\svchost.exe  =>.Microsoft®
O23 - Service: C:\WINDOWS\System32\wscsvc.dll (wscsvc) . (.Microsoft Corporation - Service Centre de sécurité de Windows.) - C:\WINDOWS\System32\wscsvc.dll [Unsigned]  =>.Microsoft Corporation
O23 - Service: C:\WINDOWS\System32\SearchIndexer.exe,-103 (WSearch) . (.Microsoft Corporation - Indexeur Microsoft Windows Search.) - C:\Windows\System32\SearchIndexer.exe [Unsigned]  =>.Microsoft Corporation
O23 - Service: GIGABYTE Update Service (GigabyteUpdateService) . (.GIGA-BYTE TECHNOLOGY CO., LTD. - GIGABYTE Update Service.) - C:\WINDOWS\System32\GigabyteUpdateService.exe [Unsigned]  =>.GIGA-BYTE TECHNOLOGY CO., LTD.

---\\ SERVICES NON MICROSOFT (SR=Démarré,SS=Stoppé) (86) - 5s
SR - Boot   [07/12/2019] [  107320]   (3ware) . (.LSI.) - C:\WINDOWS\System32\drivers\3ware.sys  =>.Microsoft®
SR - Auto   [14/05/2009] [  759048]  ABBYY FineReader 9.0 Sprint Licensing Service (ABBYY.Licensing.FineReader.Sprint.9.0) . (.ABBYY.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe  =>.ABBYY SOLUTIONS LIMITED®
SR - Boot   [07/12/2019] [ 1135416]   (ADP80XX) . (.PMC-Sierra.) - C:\WINDOWS\System32\drivers\ADP80XX.SYS  =>.Microsoft®
SR - Auto   [08/08/2022] [  623032]   (AMD Crash Defender Service) . (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\amdfendrsr.exe  =>.Advanced Micro Devices Inc.®
SS - Demand [08/08/2022] [  639880]   (AMD External Events Utility) . (.AMD.) - C:\Windows\System32\DriverStore\FileRepository\u0381941.inf_amd64_e1aaf87b06e2b6d9\B380668\atiesrxx.exe  =>.Advanced Micro Devices Inc.®
SR - Demand [08/08/2022] [  195016]  AMD Crash Defender Driver (amdfendr) . (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\drivers\amdfendr.sys  =>.Advanced Micro Devices Inc.®
SR - Demand [08/08/2022] [   54720]  AMD Crash Defender Manager (amdfendrmgr) . (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\drivers\amdfendrmgr.sys  =>.Advanced Micro Devices Inc.®
SR - Demand [30/10/2019] [   46040]  AMD GPIO Client Driver (amdgpio2) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio2.sys  =>.Advanced Micro Devices INC.®
SR - Demand [18/04/2019] [   24528]  AMD GPIO Client Driver (amdgpio3) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdgpio3.sys  =>.AMD PMP-PE CB Code Signer v20160415®
SR - Demand [07/12/2019] [   45568]  AMD I2C Controller Service (amdi2c) . (.Advanced Micro Devices, Inc.) - C:\WINDOWS\System32\drivers\amdi2c.sys [Unsigned]  =>.Advanced Micro Devices, Inc
SR - Boot   [07/12/2019] [   83256]   (amdsata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdsata.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  259384]   (amdsbs) . (.AMD Technologies Inc..) - C:\WINDOWS\System32\drivers\amdsbs.sys  =>.Microsoft®
SR - Demand [08/08/2022] [94358424]   (amdwddmg) . (.Advanced Micro Devices, Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0381941.inf_amd64_e1aaf87b06e2b6d9\B380668\amdkmdag.sys  =>.Advanced Micro Devices Inc.®
SR - Boot   [07/12/2019] [   26936]   (amdxata) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\amdxata.sys  =>.Microsoft®
SR - Demand [12/04/2024] [   38320]  ampa (ampa) . (.CHENGDU AOMEI Tech Co., Ltd..) - C:\Windows\System32\ampa.sys  =>.CHENGDU AOMEI Tech Co., Ltd.®
SR - Boot   [07/12/2019] [  131896]  Adaptec SAS/SATA-II RAID S (arcsas) . (.PMC-Sierra, Inc..) - C:\WINDOWS\System32\drivers\arcsas.sys  =>.Microsoft®
SR - Demand [22/07/2019] [  108152]  AMD Function Driver f (AtiHDAudioService) . (.Advanced Micro Devices.) - C:\WINDOWS\System32\drivers\AtihdWT6.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  533816]  QLogic Network Adapter VBD (b06bdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\bxvbda.sys  =>.Microsoft®
SR - Demand [07/12/2019] [    9728]  bcmfn2 Service (bcmfn2) . (...) - C:\WINDOWS\System32\drivers\bcmfn2.sys [Unsigned]  =>.Broadcom Corporation
SS - Demand [16/08/2024] [ 1086256]  CCleaner Performance Optimizer Service (CCleanerPerformanceOptimizerService) . (.Piriform Software Ltd.) - C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe {07A61ECFA74CC7B2CEB42035C772BE1D}.  =>.Piriform Software Ltd
SR - Boot   [07/12/2019] [  319800]   (cht4iscsi) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4sx64.sys  =>.Microsoft®
SR - Demand [07/12/2019] [ 1853752]  Chelsio Virtual Bus Driver (cht4vbd) . (.Chelsio Communications.) - C:\WINDOWS\System32\drivers\cht4vx64.sys  =>.Microsoft®
SR - Demand [12/04/2024] [   35760]  ddmdrv (ddmdrv) . (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\system32\ddmdrv.sys  =>.CHENGDU AOMEI Tech Co., Ltd.®
SS - Demand [06/11/2023] [  150640]  EasyTuneEngineService (EasyTuneEngineService) . (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe {4A042D7653FFB5CF06FB280A}.  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
SR - Boot   [07/12/2019] [ 3418936]  QLogic 10 Gigabit Ethernet Ada (ebdrv) . (.QLogic Corporation.) - C:\WINDOWS\System32\drivers\evbda.sys  =>.Microsoft®
SR - System [25/08/2024] [  158640]  Malwarebytes Anti-Exploit (ESProtectionDriver) . (.Malwarebytes.) - C:\WINDOWS\system32\drivers\mbae64.sys  =>.Microsoft®
SR - Demand [26/08/2024] [   52528]  gdrv3 (gdrv3) . (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\WINDOWS\System32\drivers\gdrv3.sys {4A042D7653FFB5CF06FB280A}.  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
SR - Boot   [07/12/2019] [   64312]   (HpSAMD) . (.Hewlett-Packard Company.) - C:\WINDOWS\System32\drivers\HpSAMD.sys  =>.Microsoft®
SS - Demand [13/12/2023] [  133232]  HwMonitorRecordService (HwmRecordService) . (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\SIV\HwmRecordService.exe {4A042D7653FFB5CF06FB280A}.  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
SR - Demand [07/12/2019] [   36352]  Intel Serial IO GPIO Controlle (iagpio) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iagpio.sys [Unsigned]  =>.Intel(R) Corporation
SR - Demand [07/12/2019] [   91136]  Intel(R) Serial IO I2C Host Cont (iai2c) . (.Intel(R) Corporation.) - C:\WINDOWS\System32\drivers\iai2c.sys [Unsigned]  =>.Intel(R) Corporation
SR - Demand [07/12/2019] [   79360]  Intel(R) S (iaLPSS2i_GPIO2) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [   93184]  In (iaLPSS2i_GPIO2_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [  112128]  Intel( (iaLPSS2i_GPIO2_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [   96256]  Intel( (iaLPSS2i_GPIO2_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [  171520]  Intel(R) Seria (iaLPSS2i_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [  175104]  Intel( (iaLPSS2i_I2C_BXT_P) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [  177152]  Intel(R) S (iaLPSS2i_I2C_CNL) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [  177664]  Intel(R) S (iaLPSS2i_I2C_GLK) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys [Unsigned]  =>.Intel Corporation
SR - Demand [07/12/2019] [   38128]  Intel(R) Serial IO (iaLPSSi_GPIO) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys  =>.Intel Corporation - Client Components Group®
SR - Demand [07/12/2019] [  113152]  Intel(R) Serial IO I (iaLPSSi_I2C) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys [Unsigned]  =>.Intel Corporation
SR - Boot   [07/12/2019] [  884752]  Intel Chipset SATA RAI (iaStorAVC) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorAVC.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  412176]  Intel RAID Controller Wi (iaStorV) . (.Intel Corporation.) - C:\WINDOWS\System32\drivers\iaStorV.sys  =>.Microsoft®
SR - Demand [07/12/2019] [  558904]  Mellanox InfiniBand Bus/A (ibbus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ibbus.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  172344]   (ItSas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\ItSas35i.sys  =>.Microsoft®
SR - Auto   [31/05/2022] [  514560]  KDService (KDService) . (.KYOCERA Document Solutions Inc..) - C:\Program Files\KDService\bin\KDService.exe [Unsigned]  =>.KYOCERA Document Solutions Inc.
SR - Demand [08/09/2018] [  243800]   (KeyScrambler) . (.QFX Software Corporation.) - C:\WINDOWS\System32\drivers\keyscrambler.sys  =>.QFX Software Corporation®
SS - Demand [03/09/2024] [  123320]  LibreOffice Maintenance Service (LibreOfficeMaintenance) . (.The Document Foundation.) - C:\Program Files\LibreOffice\program\update_service.exe {5FFBE1BC422D8BC2DAB2B379D64BEA1D}.  =>.The Document Foundation
SR - Boot   [07/12/2019] [  108856]   (LSI_SAS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  124216]   (LSI_SAS2i) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sas2i.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  135992]   (LSI_SAS3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\lsi_sas3i.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [   82744]   (LSI_SSS) . (.LSI Corporation.) - C:\WINDOWS\System32\drivers\lsi_sss.sys  =>.Microsoft®
SR - Boot   [14/02/2025] [  234072]  MBAMChameleon (mbamchameleon) . (.Malwarebytes.) - C:\WINDOWS\System32\Drivers\MbamChameleon.sys  =>.Microsoft®
SR - Boot   [25/08/2024] [   21480]  MbamElam (MbamElam) . (.Malwarebytes.) - C:\WINDOWS\System32\DRIVERS\MbamElam.sys  =>.Microsoft®
SR - Demand [15/02/2025] [  202856]  MBAMFarflt (MBAMFarflt) . (.Malwarebytes.) - C:\WINDOWS\system32\DRIVERS\farflt.sys  =>.Microsoft®
SR - Demand [15/02/2025] [   80448]  MBAMProtection (MBAMProtection) . (.Malwarebytes.) - C:\WINDOWS\System32\Drivers\mbam.sys  =>.Microsoft®
SR - Auto   [14/02/2025] [ 9483456]  Malwarebytes Service (MBAMService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe  =>.Malwarebytes Inc.®
SR - Demand [06/02/2025] [  239568]  MBAMSwissArmy (MBAMSwissArmy) . (.Malwarebytes.) - C:\WINDOWS\System32\Drivers\mbamswissarmy.sys  =>.Microsoft®
SR - Demand [15/02/2025] [  189776]  MBAMWebProtection (MBAMWebProtection) . (.Malwarebytes.) - C:\WINDOWS\system32\DRIVERS\mwac.sys  =>.Malwarebytes Inc.®
SS - Demand [21/12/2024] [ 2788304]  MBVpnTunnelService (MBVpnTunnelService) . (.Malwarebytes.) - C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe  =>.Malwarebytes Inc.®
SR - Boot   [07/12/2019] [   59704]   (megasas) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [   81720]   (megasas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\MegaSas2i.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  105480]   (megasas35i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\megasas35i.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  575800]   (megasr) . (.LSI Corporation, Inc..) - C:\WINDOWS\System32\drivers\megasr.sys  =>.Microsoft®
SR - Demand [07/12/2019] [ 1131320]  Mellanox ConnectX Bus E (mlx4_bus) . (.Mellanox.) - C:\WINDOWS\System32\drivers\mlx4_bus.sys  =>.Microsoft®
SR - Disabl [06/02/2025] [  278592]  Mozilla Maintenance Service (MozillaMaintenance) . (.Mozilla Foundation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe  =>.Mozilla Corporation®
SR - Boot   [07/12/2019] [   63800]   (mvumis) . (.Marvell Semiconductor, Inc..) - C:\WINDOWS\System32\drivers\mvumis.sys  =>.Microsoft®
SR - Auto   [08/04/2021] [   18944]  GIGABYTE Adjust (MyService1) . (...) - C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [Unsigned]
SR - Demand [07/12/2019] [  146232]  NetworkDirect Service (ndfltr) . (.Mellanox.) - C:\WINDOWS\System32\drivers\ndfltr.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  150328]   (nvraid) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvraid.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  166200]   (nvstor) . (.NVIDIA Corporation.) - C:\WINDOWS\System32\drivers\nvstor.sys  =>.Microsoft®
SS - Demand [06/12/2023] [  131184]  OCButtonService (OCButtonService) . (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe {4A042D7653FFB5CF06FB280A}.  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
SR - Boot   [07/12/2019] [   58680]   (percsas2i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas2i.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [   68408]   (percsas3i) . (.Avago Technologies.) - C:\WINDOWS\System32\drivers\percsas3i.sys  =>.Microsoft®
SS - Demand [14/08/2023] [  780312]  QFX Software Update Service (QFXUpdateService) . (.QFX Software Corporation.) - C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe  =>.QFX Software Corporation®
SR - Demand [21/02/2022] [ 1163096]  Realtek RT640 NT Driver (rt640x64) . (.Realtek.) - C:\WINDOWS\System32\drivers\rt640x64.sys  =>.Realtek Semiconductor Corp.®
SR - Boot   [07/12/2019] [   44856]   (SiSRaid2) . (.Silicon Integrated Systems Corp..) - C:\WINDOWS\System32\drivers\SiSRaid2.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [   81720]   (SiSRaid4) . (.Silicon Integrated Systems.) - C:\WINDOWS\System32\drivers\sisraid4.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  209720]   (SmartSAMD) . (.Microsemi Corportation.) - C:\WINDOWS\System32\drivers\SmartSAMD.sys  =>.Microsoft®
SS - Demand [09/10/2024] [ 1324032]  OpenSSH SSH Server (sshd) . (...) - C:\WINDOWS\System32\OpenSSH\sshd.exe [Unsigned]  =>.OpenBSD
SR - Boot   [07/12/2019] [   31032]   (stexstor) . (.Promise Technology, Inc..) - C:\WINDOWS\System32\drivers\stexstor.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  166712]   (vsmraid) . (.VIA Technologies Inc.,Ltd.) - C:\WINDOWS\System32\drivers\vsmraid.sys  =>.Microsoft®
SR - Boot   [07/12/2019] [  305464]  VIA StorX Storage RAID Co (VSTXRAID) . (.VIA Corporation.) - C:\WINDOWS\System32\drivers\vstxraid.sys  =>.Microsoft®
SR - Demand [07/12/2019] [   36152]  WinMad Service (WinMad) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winmad.sys  =>.Microsoft®
SR - Demand [07/12/2019] [   73016]  WinVerbs Service (WinVerbs) . (.Mellanox.) - C:\WINDOWS\System32\drivers\winverbs.sys  =>.Microsoft®
SR - Auto   [15/02/2025] [  878840]  GIGABYTE Update Service (GigabyteUpdateService) . (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\WINDOWS\System32\GigabyteUpdateService.exe {4A042D7653FFB5CF06FB280A}.  =>.GIGA-BYTE TECHNOLOGY CO., LTD.

---\\ TACHES PLANIFIEES EN AUTOMATIQUE (Registre) (16) - 5s
O38 - TASK: {2FCE3595-9DE5-4968-8D1D-A0DF08DE7487} [64Bits][\CCleanerCrashReporting] - (.Gen Digital Inc. All rights reserved. - CCleaner Bug Report.) -- C:\Program Files\CCleaner\CCleanerBugReport.exe  [5075248] 
O38 - TASK: {412650FF-25AE-456E-98A5-3E3A2A1F560C} [64Bits][\EasyTune] - (.GIGA-BYTE TECHNOLOGY CO., LTD. - etinit.) -- C:\Program Files (x86)\Gigabyte\EasyTune\etinit.exe  [17280]   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
O38 - TASK: {4D838BDB-BA78-4362-954C-B1491608562B} [64Bits][\SIV-VGA] - (.GIGA-BYTE TECHNOLOGY CO., LTD. - sensord.) -- C:\Program Files (x86)\Gigabyte\SIV\sensord.exe  [260208]   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
O38 - TASK: {4F69B7B3-7FA8-4CAB-93F5-52FE2311555A} [64Bits][\GraphicsCardEngine] - (.GIGA-BYTE TECHNOLOGY CO., LTD. - GraphicsCardEngineStarter.) -- C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngineStarter.exe  [237672]   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
O38 - TASK: {4F89779F-7DD7-4AF5-AF7C-DEA252FF2C3D} [64Bits][\CCleanerSkipUAC - Bernard] - (.Piriform Software Ltd - CCleaner.) -- C:\Program Files\CCleaner\CCleaner.exe  [39072560]   =>.Piriform Software Ltd
O38 - TASK: {5FC62B72-01D9-4633-949D-AAE2B3EA5C1A} [64Bits][\SIV] - (.GIGA-BYTE TECHNOLOGY CO., LTD. - thermald.) -- C:\Program Files (x86)\Gigabyte\SIV\thermald.exe  [392304]   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
O38 - TASK: {A9F6FCF1-05CF-4FEC-81C1-948F6E202FDE} [64Bits][\EasyTune 1] - (.GIGA-BYTE TECHNOLOGY CO., LTD. - etocfile.) -- C:\Program Files (x86)\Gigabyte\EasyTune\etocfile.exe  [20352]   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
O38 - TASK: {C74CA566-217E-456F-B827-9144560B520F} [64Bits][\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB] - (.Mozilla Foundation - La tâche Agent de navigateur par défaut eff.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe  [34880]   =>.Mozilla Foundation
C:\WINDOWS\System32\Tasks\CCleanerCrashReporting - (.Gen Digital Inc. All rights reserved..) -- C:\Program Files\CCleaner\CCleanerBugReport.exe  [1] 
C:\WINDOWS\System32\Tasks\EasyTune - (.GIGA-BYTE TECHNOLOGY CO., LTD..) -- C:\Program Files (x86)\Gigabyte\EasyTune\etinit.exe  []   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
C:\WINDOWS\System32\Tasks\SIV-VGA - (.GIGA-BYTE TECHNOLOGY CO., LTD..) -- C:\Program Files (x86)\Gigabyte\SIV\sensord.exe  []   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
C:\WINDOWS\System32\Tasks\GraphicsCardEngine - (.GIGA-BYTE TECHNOLOGY CO., LTD..) -- C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\GraphicsCardEngineStarter.exe  []   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
C:\WINDOWS\System32\Tasks\CCleanerSkipUAC - Bernard - (.Piriform Software Ltd.) -- C:\Program Files\CCleaner\CCleaner.exe  [$(Arg0)]   =>.Piriform Software Ltd
C:\WINDOWS\System32\Tasks\SIV - (.GIGA-BYTE TECHNOLOGY CO., LTD..) -- C:\Program Files (x86)\Gigabyte\SIV\thermald.exe  []   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
C:\WINDOWS\System32\Tasks\EasyTune 1 - (.GIGA-BYTE TECHNOLOGY CO., LTD..) -- C:\Program Files (x86)\Gigabyte\EasyTune\etocfile.exe  [--DeleteProfile]   =>.GIGA-BYTE TECHNOLOGY CO., LTD.
C:\WINDOWS\System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB - (.Mozilla Foundation.) -- C:\Program Files\Mozilla Firefox\default-browser-agent.exe  [do-task "308046B0AF4A39CB.do-task]   =>.Mozilla Foundation

---\\ APPLICATIONS LANCEES AU DÉMARRAGE DU SYSTÈME (14) - 0s
O4 - HKLM\..\Run: [SecurityHealth] . (.Microsoft Corporation - Windows Security notification icon.) -- C:\WINDOWS\system32\SecurityHealthSystray.exe [Unsigned]  =>.Microsoft Corporation
O4 - HKLM\..\Run: [Logitech Download Assistant] . (.Logitech - Logitech Download Assistant.) -- C:\Windows\System32\LogiLDA.dll [Unsigned]  =>.Logitech
O4 - HKCU\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE  =>.SEIKO EPSON Corporation®
O4 - HKUS\S-1-5-19\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive (32 bit) Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe  =>.Microsoft Corporation®
O4 - HKUS\S-1-5-20\..\Run: [OneDriveSetup] . (.Microsoft Corporation - Microsoft OneDrive (32 bit) Setup.) -- C:\Windows\SysWOW64\OneDriveSetup.exe  =>.Microsoft Corporation®
O4 - HKLM\..\Wow6432Node\Run: [FUFAXRCV] . (.SEIKO EPSON CORPORATION - Fax Reception.) -- C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [Unsigned]  =>.Seiko Epson Corporation
O4 - HKLM\..\Wow6432Node\Run: [FUFAXSTM] . (.SEIKO EPSON CORPORATION - Fax Transmission.) -- C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [Unsigned]  =>.Seiko Epson Corporation
O4 - HKLM\..\Wow6432Node\Run: [TeamsMachineInstaller] . (. - .) -- \Program Files\Teams Installer\Teams.exe
O4 - HKLM\..\Wow6432Node\Run: [KeyScrambler] . (.QFX Software Corporation - KeyScrambler.) -- C:\Program Files (x86)\KeyScrambler\keyscrambler.exe  =>.QFX Software Corporation®
O4 - HKLM\..\Wow6432Node\RunOnce: [PreRun] . (. - PreRun.) -- C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe  =>.GIGA-BYTE TECHNOLOGY CO., LTD.®
O4 - HKLM\..\Wow6432Node\RunOnce: [NSIS.Library.RegTool.v3] . (. - .) -- C:\Program Files (x86)\KeyScrambler\x64\NSIS.Library.RegTool.v3.{CB63AB4C-3A63-48CE-97D4-9F2A5F720A0D}.exe (.Not File.)  =>.SUP.Orphan
O4 - HKUS\S-1-5-19\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-20\..\StartupApproved\Run: [OneDriveSetup] . (. - .) -- 0x020000000000000000000000
O4 - HKUS\S-1-5-21-1823878557-1970803468-117618743-1089\..\Run: [EPLTarget\P0000000000000000] . (.SEIKO EPSON CORPORATION - EPSON Status Monitor 3.) -- C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE  =>.SEIKO EPSON Corporation®

---\\ PROCESSUS LANCES (12) - 2s
[MD5.6C0F47E4198896CA719601CC39EB01AD] - (.Advanced Micro Devices, Inc. - AMD Crash Defender Service.) -- C:\Windows\System32\amdfendrsr.exe [623032] [PID.692] [Unsigned]  =>.Advanced Micro Devices, Inc.
[MD5.B33CF4DE909A5B30F526D82053A63C8E] - (.ABBYY - ABBYY network license server.) -- C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe [759048] [PID.3612]  =>.ABBYY SOLUTIONS LIMITED®
[MD5.37DC8E7A548E0E1E71FAEED2D217A8FA] - (.KYOCERA Document Solutions Inc. - KDService.) -- C:\Program Files\KDService\bin\KDService.exe [514560] [PID.3696] [Unsigned]  =>.KYOCERA Document Solutions Inc.
[MD5.3F32B6F3A7E8A7978EDE3F7EAF014AD2] - (. - AdjustService.) -- C:\Program Files (x86)\Gigabyte\AppCenter\AdjustService.exe [18944] [PID.3724] [Unsigned]  =>.Gigabyte Technology, Inc.
[MD5.A021290BAC7FC1F0BCA62EF463065189] - (.GIGA-BYTE TECHNOLOGY CO., LTD. - GIGABYTE Update Service.) -- C:\Windows\System32\GigabyteUpdateService.exe [878840] [PID.3760] [Unsigned]  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
[MD5.BCF6C51DF794C13AB1FE0667A83F3F95] - (...) -- C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe [812024] [PID.7588]  =>.Microsoft®
[MD5.745FB6AC223C9BEF44106DD1E91677C6] - (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe [298760] [PID.10556]  =>.Malwarebytes Inc.®
[MD5.7FA30B0DE75D61B4E8E8734B2BB6CA6C] - (.SEIKO EPSON CORPORATION - Fax Reception.) -- C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXRCV.exe [495616] [PID.12564] [Unsigned]  =>.Seiko Epson Corporation
[MD5.E476F00C910C1A96978FB30859E10919] - (.SEIKO EPSON CORPORATION - Fax Transmission.) -- C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXSTM.exe [856064] [PID.12832] [Unsigned]  =>.Seiko Epson Corporation
[MD5.1B5E6026E494900F65383831BC803C2B] - (.QFX Software Corporation - KeyScrambler.) -- C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe [900120] [PID.12464]  =>.QFX Software Corporation®
[MD5.AEFB49CF90F761102B5537480A2F79C9] - (.QFX Software Corporation - KeyScrambler.) -- C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe [1147416] [PID.13332]  =>.QFX Software Corporation®
[MD5.3318127D905D91E65E1E24A6FF551641] - (.Nicolas Coolman - ZHPSuite.) -- C:\Users\impression 3d\Desktop\ZHPSuite.exe [3540168] [PID.7960] [Unsigned]  =>.Nicolas Coolman

---\\ FIREFOX, Plugins,Démarrage,Recherche,Extensions (40) - 5s
M0 - MFSP: prefs.js [Bernard - 7jzxga92.default-release] http://www.qwant.com/  =>.Legitimate
P2 - EXT FILE: (.Disconnect - Make the web faster, more private, and.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\2.0@disconnect.me.xpi [Unsigned]  =>.Disconnect
P2 - EXT FILE: (.Signal Spam.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\@addonsignalspam.xpi [Unsigned]  =>.Signal Spam
P2 - EXT FILE: (.Amazon Container - Amazon Container isolates your Amazon .) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\@contain-amzn.xpi [Unsigned]
P2 - EXT FILE: (.Facebook Container.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\@contain-facebook.xpi [Unsigned]  =>.Facebook Container
P2 - EXT FILE: (.Don't track me Google - Removes the annoying link-conversion a.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\dont-track-me-google@robwu.nl.xpi [Unsigned]
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [Unsigned]  =>.Mozilla Corporation
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [Unsigned]  =>.Mozilla Corporation
P2 - EXT FILE: (.DuckDuckGo Privacy Essentials - Privacy, simplified. Protect your data.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [Unsigned]  =>.DuckDuckGo Privacy Essentials
P2 - EXT FILE: (...) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\qwant-search-firefox@qwant.com.xpi [Unsigned]
P2 - EXT FILE: (.Mozilla Corporation.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\qwantcomforfirefox@jetpack.xpi [Unsigned]  =>.Mozilla Corporation
P2 - EXT FILE: (.uBlock Origin.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\uBlock0@raymondhill.net.xpi [Unsigned]  =>.uBlock Origin
P2 - EXT FILE: (.Flagfox.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [Unsigned]  =>.Flagfox
P2 - EXT FILE: (.Malwarebytes Browser Guard.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [Unsigned]  =>.Malwarebytes Browser Guard
P2 - EXT FILE: (.ClearURLs.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\{74145f27-f039-47ce-a470-a662b129930a}.xpi [Unsigned]
P2 - EXT FILE: (.Video DownloadHelper.) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [Unsigned]  =>.Video DownloadHelper
P2 - EXT FILE: (...) -- C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions\{d04b0b40-3dab-4f0b-97a6-04ec3eddbfb0}.xpi [Unsigned]
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\formautofill@mozilla.org.xpi  =>.Mozilla
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\pictureinpicture@mozilla.org.xpi  =>.Mozilla
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\screenshots@mozilla.org.xpi  =>.Mozilla
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\webcompat-reporter@mozilla.org.xpi  =>.Mozilla
P2 - EXT FILE: (.Mozilla - Firefox.) -- \Program Files\Mozilla Firefox\browser\features\webcompat@mozilla.org.xpi  =>.Mozilla
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\bookmarkbackups  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\crashes  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\datareporting  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extension-dnr
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extension-store  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extension-store-menus  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\extensions  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\features  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\gmp-gmpopenh264  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\gmp-widevinecdm  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\minidumps  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\saved-telemetry-pings  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\security_state  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\sessionstore-backups  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\settings  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\shader-cache  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\storage  =>Mozilla Corporation
C:\Users\Bernard\AppData\Roaming\Mozilla\Firefox\Profiles\7jzxga92.default-release\weave  =>Mozilla Corporation

---\\ INTERNET EXPLORER,Démarrage,Recherche,URLSearchHook (10) - 0s
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/  =>.Microsoft Corporation
R0 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/  =>.Microsoft Corporation
R1 - HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/  =>.Microsoft Corporation
R3 - URLSearchHook: (no name)[HKCU] - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} . (.Microsoft Corporation - Navigateur Internet.) (11.00.19041.5438 (WinBuild.160101.0800)) -- C:\Windows\System32\ieframe.dll  =>.Microsoft Corporation

---\\ MICROSOFT EDGE, Plugin,Favoris,Démarrage,Recherche,Extension (3) - 1s
E2 - GCE: Preference [Bernard][User Data\Default\Extensions] [ghbmnnjooekpmoecnnnilnnbdlolhkhi]   =>.Google Inc. {Docs hors connexion}
E2 - GCE: Preference [Bernard][User Data\Default\Extensions] [jmjflgjpcpepeafmmgdpfkogkghcpiha] Edge relevant text changes  =>.Legitimate
E2 - GCE: Preference [Bernard][User Data\Default\Local Extension Settings] [jdiccldimpdaibmpdkjnbmckianbfold]   =>.Microsoft Corporation

---\\ INTERNET EXPLORER,Proxy Management (6) - 0s
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0  =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,MigrateProxy = 1  =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,EnableHttp1_1 = 1  =>.Default.Value
R5 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyHttp1.1 = 1  =>.Default.Value
R5 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyEnable = 0  =>.Default.Value
R5 - HKLM\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet\ManualProxies []  =>.Microsoft

---\\ INTERNET EXPLORER,IniFiles, Autoloading Programs (3) - 0s
F2 - REG:system.ini: UserInit=
F2 - REG:system.ini: Shell=C:\WINDOWS\explorer.exe (.Microsoft Corporation.)  =>.Microsoft Corporation
F2 - REG:system.ini: VMApplet=

---\\ ETUDE DU FICHIER HOSTS (1) - 0s
~ Le fichier hôte est sain (The hosts file is clean) (1)

---\\ BROWSER HELPER OBJECT DE NAVIGATEUR (BHO) (4) - 0s
O2 - BHO: IEToEdge BHO [64Bits] - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} . (.Microsoft Corporation - IEToEdge BHO.) -- C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.51\BHO\ie_to_edge_bho_64.dll  =>.Microsoft®
O2 - BHO: Lync Click to Call BHO [64Bits] - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} . (.Microsoft Corporation - Skype for Business.) -- C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll  =>.Microsoft®
O2 - BHO: GBHO.BHO [64Bits] - {45d30484-7ded-43d9-957a-d2fd1f046511} . (...) -- mscoree.dll (.not file.)
O2 - BHO: Easy Photo Print [64Bits] - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} . (.SEIKO EPSON CORPORATION - Epson Easy Photo Print (TBL x64).) -- C:\Program Files (x86)\Epson Software\Easy Photo Print\EPTBL.dll [Unsigned]  =>.Seiko Epson Corporation

---\\ RACCOURCIS GLOBAL STARTUP (118) - 7s
O4 - GS\Desktop [Bernard]: Cycle lunaire 3.3.lnk . (...) C:\Program Files (x86)\Cycle lunaire 3.3\Cyclelunaire.exe   [Unsigned]
O4 - GS\Desktop [Bernard]: Documents - Pour .stl.lnk . (...) C:\Users\Bernard\Documents   [Unsigned]
O4 - GS\Desktop [Bernard]: Documents - Rac (2).lnk . (...) D:\FileHistory\Bernard\DESKTOP-0352P80\Data\C\Users\Bernard\Documents   [Unsigned]
O4 - GS\Desktop [Bernard]: Documents - Rac.lnk . (...) D:\Documents   [Unsigned]
O4 - GS\Desktop [Bernard]: QTranslate.lnk . (.QuestSoft - QTranslate.) C:\Program Files (x86)\QTranslate\QTranslate.exe   [Unsigned]  =>.QuestSoft
O4 - GS\Desktop [Bernard]: RevoUPort.exe - Raccourci.lnk . (.VS Revo Group - .) C:\Users\Bernard\Desktop\L O G I C I E L S\-----RevoUninstaller\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe   {0FAE00141B9F1625F78019F259FFFCDF}.  =>.VS Revo Group
O4 - GS\Desktop [Bernard]: SendTo - Raccourci.lnk . (...) C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\SendTo   [Unsigned]
O4 - GS\Desktop [Bernard]: T E L E C H A R G E M E N T S - Raccourci.lnk . (...) D:\Documents\T E L E C H A R G E M E N T S   [Unsigned]
O4 - GS\Desktop [Bernard]: XelitanPDF - Raccourci.lnk . (.Xelitan - Xelitan PDF Reader.) C:\Users\Bernard\Desktop\L O G I C I E L S\Xelitan pdf_reader_v19\XelitanPDF.exe   [Unsigned]
O4 - GS\Desktop [Bernard]: ___PHOTOS - Raccourci.lnk . (...) D:\Documents\___PHOTOS   [Unsigned]
O4 - GS\Quicklaunch [Bernard]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe    =>.Microsoft®
O4 - GS\sendTo [Bernard]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo   =>.Microsoft Corporation
O4 - GS\sendTo [Bernard]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo   =>.Microsoft Corporation
O4 - GS\sendTo [Bernard]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe    =>.Microsoft Corporation
O4 - GS\sendTo [Bernard]: VirusTotal.lnk . (...) C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe   [Unsigned]
O4 - GS\TaskBar [Bernard]: 123 Free Solitaire.lnk . (...) C:\Program Files (x86)\123 Free Solitaire\123FreeSolitaire.exe   {03D51297CFEFB4D3B30B9F5E3DB8D884}.
O4 - GS\TaskBar [Bernard]: Arrêt Windows.lnk . (.Microsoft Corporation - Outil d’arrêt et d’annotation Windows.) C:\Windows\System32\shutdown.exe -f -s -t 00   =>.Microsoft Corporation
O4 - GS\TaskBar [Bernard]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [Bernard]: EdgeBlock_x64 - Raccourci.lnk . (.www.sordum.org - Edge Blocker v1.9.) C:\Users\Bernard\Desktop\L O G I C I E L S\EdgeBlock_x64.exe   [Unsigned]  =>.www.sordum.org
O4 - GS\TaskBar [Bernard]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe    =>.Mozilla Corporation®
O4 - GS\TaskBar [Bernard]: Hearts.lnk . (.Microsoft Corporation - Exécutable du jeu Dame de pique.) C:\Program Files\Microsoft Games\Hearts\Hearts.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [Bernard]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [Bernard]: Publisher.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE    =>.Microsoft®
O4 - GS\TaskBar [Bernard]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [Bernard]: SpiderSolitaire.lnk . (.Microsoft Corporation - Exécutable du jeu Spider Solitaire.) C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [Bernard]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe    =>.VideoLAN®
O4 - GS\TaskBar [Bernard]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe    =>.Microsoft Corporation
O4 - GS\Programs [Bernard]: Okular Installer.lnk . (.Microsoft Corporation - Store Installer.) C:\Users\Bernard\Desktop\L O G I C I E L S\Okular\Okular Installer.exe   {330045F94DDCA9588216DC9E2D00010045F94D}.  =>.Microsoft Corporation
O4 - GS\Desktop [DevToolsUser]: Cycle lunaire 3.3.lnk . (...) C:\Program Files (x86)\Cycle lunaire 3.3\Cyclelunaire.exe   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: Documents - Pour .stl.lnk . (...) C:\Users\Bernard\Documents   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: Documents - Rac (2).lnk . (...) D:\FileHistory\Bernard\DESKTOP-0352P80\Data\C\Users\Bernard\Documents   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: Documents - Rac.lnk . (...) D:\Documents   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: QTranslate.lnk . (.QuestSoft - QTranslate.) C:\Program Files (x86)\QTranslate\QTranslate.exe   [Unsigned]  =>.QuestSoft
O4 - GS\Desktop [DevToolsUser]: RevoUPort.exe - Raccourci.lnk . (.VS Revo Group - .) C:\Users\Bernard\Desktop\L O G I C I E L S\-----RevoUninstaller\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe   {0FAE00141B9F1625F78019F259FFFCDF}.  =>.VS Revo Group
O4 - GS\Desktop [DevToolsUser]: SendTo - Raccourci.lnk . (...) C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\SendTo   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: T E L E C H A R G E M E N T S - Raccourci.lnk . (...) D:\Documents\T E L E C H A R G E M E N T S   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: XelitanPDF - Raccourci.lnk . (.Xelitan - Xelitan PDF Reader.) C:\Users\Bernard\Desktop\L O G I C I E L S\Xelitan pdf_reader_v19\XelitanPDF.exe   [Unsigned]
O4 - GS\Desktop [DevToolsUser]: ___PHOTOS - Raccourci.lnk . (...) D:\Documents\___PHOTOS   [Unsigned]
O4 - GS\Quicklaunch [DevToolsUser]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe    =>.Microsoft®
O4 - GS\sendTo [DevToolsUser]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo   =>.Microsoft Corporation
O4 - GS\sendTo [DevToolsUser]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo   =>.Microsoft Corporation
O4 - GS\sendTo [DevToolsUser]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe    =>.Microsoft Corporation
O4 - GS\sendTo [DevToolsUser]: VirusTotal.lnk . (...) C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe   [Unsigned]
O4 - GS\TaskBar [DevToolsUser]: 123 Free Solitaire.lnk . (...) C:\Program Files (x86)\123 Free Solitaire\123FreeSolitaire.exe   {03D51297CFEFB4D3B30B9F5E3DB8D884}.
O4 - GS\TaskBar [DevToolsUser]: Arrêt Windows.lnk . (.Microsoft Corporation - Outil d’arrêt et d’annotation Windows.) C:\Windows\System32\shutdown.exe -f -s -t 00   =>.Microsoft Corporation
O4 - GS\TaskBar [DevToolsUser]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [DevToolsUser]: EdgeBlock_x64 - Raccourci.lnk . (.www.sordum.org - Edge Blocker v1.9.) C:\Users\Bernard\Desktop\L O G I C I E L S\EdgeBlock_x64.exe   [Unsigned]  =>.www.sordum.org
O4 - GS\TaskBar [DevToolsUser]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe    =>.Mozilla Corporation®
O4 - GS\TaskBar [DevToolsUser]: Hearts.lnk . (.Microsoft Corporation - Exécutable du jeu Dame de pique.) C:\Program Files\Microsoft Games\Hearts\Hearts.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [DevToolsUser]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [DevToolsUser]: Publisher.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE    =>.Microsoft®
O4 - GS\TaskBar [DevToolsUser]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [DevToolsUser]: SpiderSolitaire.lnk . (.Microsoft Corporation - Exécutable du jeu Spider Solitaire.) C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [DevToolsUser]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe    =>.VideoLAN®
O4 - GS\TaskBar [DevToolsUser]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe    =>.Microsoft Corporation
O4 - GS\Programs [DevToolsUser]: Okular Installer.lnk . (.Microsoft Corporation - Store Installer.) C:\Users\Bernard\Desktop\L O G I C I E L S\Okular\Okular Installer.exe   {330045F94DDCA9588216DC9E2D00010045F94D}.  =>.Microsoft Corporation
O4 - GS\Desktop [impression 3d]: Cycle lunaire 3.3.lnk . (...) C:\Program Files (x86)\Cycle lunaire 3.3\Cyclelunaire.exe   [Unsigned]
O4 - GS\Desktop [impression 3d]: Documents - Pour .stl.lnk . (...) C:\Users\Bernard\Documents   [Unsigned]
O4 - GS\Desktop [impression 3d]: Documents - Rac (2).lnk . (...) D:\FileHistory\Bernard\DESKTOP-0352P80\Data\C\Users\Bernard\Documents   [Unsigned]
O4 - GS\Desktop [impression 3d]: Documents - Rac.lnk . (...) D:\Documents   [Unsigned]
O4 - GS\Desktop [impression 3d]: QTranslate.lnk . (.QuestSoft - QTranslate.) C:\Program Files (x86)\QTranslate\QTranslate.exe   [Unsigned]  =>.QuestSoft
O4 - GS\Desktop [impression 3d]: RevoUPort.exe - Raccourci.lnk . (.VS Revo Group - .) C:\Users\Bernard\Desktop\L O G I C I E L S\-----RevoUninstaller\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe   {0FAE00141B9F1625F78019F259FFFCDF}.  =>.VS Revo Group
O4 - GS\Desktop [impression 3d]: SendTo - Raccourci.lnk . (...) C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\SendTo   [Unsigned]
O4 - GS\Desktop [impression 3d]: T E L E C H A R G E M E N T S - Raccourci.lnk . (...) D:\Documents\T E L E C H A R G E M E N T S   [Unsigned]
O4 - GS\Desktop [impression 3d]: XelitanPDF - Raccourci.lnk . (.Xelitan - Xelitan PDF Reader.) C:\Users\Bernard\Desktop\L O G I C I E L S\Xelitan pdf_reader_v19\XelitanPDF.exe   [Unsigned]
O4 - GS\Desktop [impression 3d]: ___PHOTOS - Raccourci.lnk . (...) D:\Documents\___PHOTOS   [Unsigned]
O4 - GS\Quicklaunch [impression 3d]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe    =>.Microsoft®
O4 - GS\sendTo [impression 3d]: Destinataire de télécopie.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\Windows\System32\WFS.exe /SendTo   =>.Microsoft Corporation
O4 - GS\sendTo [impression 3d]: Fax Recipient.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe /SendTo   =>.Microsoft Corporation
O4 - GS\sendTo [impression 3d]: Transfert de fichiers Bluetooth.LNK . (.Microsoft Corporation - Transfère les fichiers entre l.) C:\Windows\System32\fsquirt.exe    =>.Microsoft Corporation
O4 - GS\sendTo [impression 3d]: VirusTotal.lnk . (...) C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe   [Unsigned]
O4 - GS\TaskBar [impression 3d]: 123 Free Solitaire.lnk . (...) C:\Program Files (x86)\123 Free Solitaire\123FreeSolitaire.exe   {03D51297CFEFB4D3B30B9F5E3DB8D884}.
O4 - GS\TaskBar [impression 3d]: Arrêt Windows.lnk . (.Microsoft Corporation - Outil d’arrêt et d’annotation Windows.) C:\Windows\System32\shutdown.exe -f -s -t 00   =>.Microsoft Corporation
O4 - GS\TaskBar [impression 3d]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [impression 3d]: EdgeBlock_x64 - Raccourci.lnk . (.www.sordum.org - Edge Blocker v1.9.) C:\Users\Bernard\Desktop\L O G I C I E L S\EdgeBlock_x64.exe   [Unsigned]  =>.www.sordum.org
O4 - GS\TaskBar [impression 3d]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe    =>.Mozilla Corporation®
O4 - GS\TaskBar [impression 3d]: Hearts.lnk . (.Microsoft Corporation - Exécutable du jeu Dame de pique.) C:\Program Files\Microsoft Games\Hearts\Hearts.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [impression 3d]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [impression 3d]: Publisher.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE    =>.Microsoft®
O4 - GS\TaskBar [impression 3d]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [impression 3d]: SpiderSolitaire.lnk . (.Microsoft Corporation - Exécutable du jeu Spider Solitaire.) C:\Program Files\Microsoft Games\SpiderSolitaire\SpiderSolitaire.exe    =>.Microsoft Corporation
O4 - GS\TaskBar [impression 3d]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe    =>.VideoLAN®
O4 - GS\TaskBar [impression 3d]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe    =>.Microsoft Corporation
O4 - GS\Programs [impression 3d]: Okular Installer.lnk . (.Microsoft Corporation - Store Installer.) C:\Users\Bernard\Desktop\L O G I C I E L S\Okular\Okular Installer.exe   {330045F94DDCA9588216DC9E2D00010045F94D}.  =>.Microsoft Corporation
O4 - GS\CommonDesktop [Public]: Bambu Studio.lnk . (.Bambu Research - BambuStudio.) C:\Program Files\Bambu Studio\bambu-studio.exe   {0B209295A54B188466AD7478}.
O4 - GS\CommonDesktop [Public]: CCleaner.lnk . (.Piriform Software Ltd - CCleaner.) C:\Program Files\CCleaner\CCleaner64.exe   {07A61ECFA74CC7B2CEB42035C772BE1D}.  =>.Piriform Software Ltd
O4 - GS\CommonDesktop [Public]: Epson Easy Photo Print.lnk . (.SEIKO EPSON CORPORATION - .) C:\Program Files (x86)\EPSON Software\Easy Photo Print\EPQuicker.exe   [Unsigned]  =>.Seiko Epson Corporation
O4 - GS\CommonDesktop [Public]: EPSON Scan.lnk . (.SEIKO EPSON CORP. - EPSON Scan.) C:\Windows\twain_32\escndv\escndv.exe    =>.SEIKO EPSON CORPORATION®
O4 - GS\CommonDesktop [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe    =>.Mozilla Corporation®
O4 - GS\CommonDesktop [Public]: LibreOffice 24.2.lnk . (.The Document Foundation - LibreOffice, la suite de produ.) C:\Program Files (x86)\LibreOffice\program\soffice.exe   [Unsigned]  =>.The Document Foundation
O4 - GS\CommonDesktop [Public]: Recuva.lnk . (.Piriform Software Ltd - Recuva.) C:\Program Files\Recuva\recuva64.exe    =>.PIRIFORM SOFTWARE LIMITED®
O4 - GS\CommonDesktop [Public]: VLC media player.lnk . (.VideoLAN - VLC media player.) C:\Program Files\VideoLAN\VLC\vlc.exe    =>.VideoLAN®
O4 - GS\Programs [Public]: Okular Installer.lnk . (.Microsoft Corporation - Store Installer.) C:\Users\Bernard\Desktop\L O G I C I E L S\Okular\Okular Installer.exe   {330045F94DDCA9588216DC9E2D00010045F94D}.  =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Math Input Panel.lnk . (.Microsoft Corporation - .) C:\Program Files (x86)\Common Files\Microsoft Shared\Ink\mip.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Notepad.lnk . (.Microsoft Corporation - Bloc-notes.) C:\WINDOWS\system32\notepad.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Paint.lnk . (.Microsoft Corporation - Paint.) C:\WINDOWS\system32\mspaint.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Quick Assist.lnk . (.Microsoft Corporation - Quick Assist.) C:\WINDOWS\system32\quickassist.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Remote Desktop Connection.lnk . (.Microsoft Corporation - Connexion Bureau à distance.) C:\WINDOWS\system32\mstsc.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Snipping Tool.lnk . (.Microsoft Corporation - Outil Capture d’écran.) C:\WINDOWS\system32\SnippingTool.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Fax and Scan.lnk . (.Microsoft Corporation - Microsoft Windows Fax and Scan.) C:\WINDOWS\system32\WFS.exe    =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Windows Media Player.lnk . (.Microsoft Corporation - Lecteur multimédia Windows.) C:\Program Files (x86)\Windows Media Player\wmplayer.exe /prefetch:1   =>.Microsoft Corporation
O4 - GS\Accessories [Public]: Wordpad.lnk . (.Microsoft Corporation - Application Windows Wordpad.) C:\Program Files (x86)\Windows NT\Accessories\wordpad.exe    =>.Microsoft Corporation
O4 - GS\SystemTools [Public]: Character Map.lnk . (.Microsoft Corporation - Table des caractères.) C:\WINDOWS\system32\charmap.exe    =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: 123 Free Solitaire.lnk . (...) C:\Program Files (x86)\123 Free Solitaire\123FreeSolitaire.exe   {03D51297CFEFB4D3B30B9F5E3DB8D884}.
O4 - GS\ProgramsCommon [Public]: Access.lnk . (.Microsoft Corporation - Microsoft Access.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSACCESS.EXE    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Excel.lnk . (.Microsoft Corporation - Microsoft Excel.) C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\firefox.exe    =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: Immersive Control Panel.lnk . (.Microsoft Corporation - Windows Control Panel.) C:\WINDOWS\System32\Control.exe    =>.Microsoft Corporation
O4 - GS\ProgramsCommon [Public]: Malwarebytes.lnk . (.Malwarebytes - .) C:\Program Files (x86)\Malwarebytes\Anti-Malware\Malwarebytes.exe   [Unsigned]  =>.Malwarebytes
O4 - GS\ProgramsCommon [Public]: Microsoft Edge.lnk . (.Microsoft Corporation - Microsoft Edge.) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Navigation privée de Firefox.lnk . (.Mozilla Corporation - Firefox.) C:\Program Files\Mozilla Firefox\private_browsing.exe    =>.Mozilla Corporation®
O4 - GS\ProgramsCommon [Public]: OneNote.lnk . (.Microsoft Corporation - Microsoft OneNote.) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Outlook (classic).lnk . (.Microsoft Corporation - Microsoft Outlook.) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: PowerPoint.lnk . (.Microsoft Corporation - Microsoft PowerPoint.) C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Publisher.lnk . (.Microsoft Corporation - Microsoft Publisher.) C:\Program Files (x86)\Microsoft Office\root\Office16\MSPUB.EXE    =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Sticky Notes (new).lnk . (.Microsoft Corporation - Microsoft OneNote.) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE /memoryWindow start   =>.Microsoft®
O4 - GS\ProgramsCommon [Public]: Visionneuse Microsoft PowerPoint .lnk . (...) C:\WINDOWS\Installer\{95140000-00AF-040C-0000-0000000FF1CE}\ppvwicon.exe    =>.Microsoft Corporation®
O4 - GS\ProgramsCommon [Public]: Word.lnk . (.Microsoft Corporation - Microsoft Word.) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE    =>.Microsoft®

---\\ MODIFICATION DOMAINE/ADRESSES (DNS) (3) - 0s
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.0.254  =>.Local IP Adress
O17 - HKLM\System\CCS\Services\Tcpip\..\{28e109b0-c3f7-49da-9273-469badf54479}: NameServer = 8.8.8.8,8.8.4.4  =>.France Google Cloud
O17 - HKLM\System\CCS\Services\Tcpip\..\{28e109b0-c3f7-49da-9273-469badf54479}: DhcpNameServer = 192.168.0.254  =>.Local IP Adress

---\\ PROTOCOLE ADDITIONNEL (23) - 1s
O18 - Handler: about [64Bits] - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: cdl [64Bits] - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: dvd [64Bits] - {12D51199-0DB5-46FE-A120-47A3D7D937CC} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: file [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: ftp [64Bits] - {79eac9e3-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: http [64Bits] - {79eac9e2-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: https [64Bits] - {79eac9e5-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: javascript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: local [64Bits] - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: mailto [64Bits] - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: mhtml [64Bits] - {05300401-BCBC-11d0-85E3-00C04FD85AB4} . (.Microsoft Corporation - Microsoft Internet Messaging API Resources.) -- C:\Windows\System32\inetcomm.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: mk [64Bits] - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} . (.Microsoft Corporation - Extensions OLE32 pour Win32.) -- C:\Windows\System32\urlmon.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: ms-its [64Bits] - {9D148291-B9C8-11D0-A4CC-0000F80149F6} . (.Microsoft Corporation - Microsoft® InfoTech Storage System Library.) -- C:\Windows\System32\itss.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: res [64Bits] - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: tv [64Bits] - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} . (.Microsoft Corporation - Contrôle ActiveX pour le flux vidéo.) -- C:\Windows\System32\MSVidCtl.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: vbscript [64Bits] - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} . (.Microsoft Corporation - Visionneuse HTML Microsoft (R).) -- C:\Windows\System32\mshtml.dll [Unsigned]  =>.Microsoft Corporation
O18 - Handler: windows.tbauth [64Bits] - {14654CA6-5711-491D-B89A-58E571679951} . (.Microsoft Corporation - TBAuth protocol handler.) -- C:\Windows\System32\tbauth.dll [Unsigned]  =>.Microsoft Corporation
O18 - Filter: application/octet-stream [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned]  =>.Microsoft Corporation
O18 - Filter: application/x-complus [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned]  =>.Microsoft Corporation
O18 - Filter: application/x-msdownload [64Bits] - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} . (.Microsoft Corporation - Microsoft .NET Runtime Execution Engine.) -- C:\Windows\System32\mscoree.dll [Unsigned]  =>.Microsoft Corporation
O18 - Filter: text/xml [64Bits] - {807583E5-5146-11D5-A672-00B0D022E945} . (.Microsoft Corporation - Microsoft Office XML MIME Filter.) -- C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\MSOXMLMF.DLL  =>.Microsoft®

---\\ REGISTRE AppInit_DLLs et Winlogon Notify (1) - 0s
O20 - Winlogon : UserInit . (.Microsoft Corporation - Application d’ouverture de session Userinit.) - C:\WINDOWS\system32\userinit.exe  =>.Microsoft Corporation

---\\ CLE DE REGISTRE EXPLORER StartupApproved (11) - 0s
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning  =>.Piriform Ltd
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:EPLTarget\P0000000000000000
[HKEY_USERS\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:CCleaner Smart Cleaning  =>.Piriform Ltd
[HKEY_USERS\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:EPLTarget\P0000000000000000
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:SecurityHealth  =>.Microsoft Corporation
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]:Logitech Download Assistant  =>.Logitech Inc.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:FUFAXSTM
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:EEventManager  =>.Epson/Seico
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:KeyScrambler  =>.QFX
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:FUFAXRCV
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32]:TeamsMachineInstaller

---\\ COMPOSANTS ACTIVESETUP INSTALLES (ASIC) (5) - 1s
O40 - ASIC: Microsoft Windows Media Player 12.0 [64Bits] - {22d6f312-b0f6-11d0-94ab-0080c74c7e95} . (.Microsoft Corporation - Windows Media Player Extension.) -- C:\Windows\System32\wmpdxm.dll [Unsigned]  =>.Microsoft Corporation
O40 - ASIC: Microsoft Windows Media Player [64Bits] - {6BF52A52-394A-11d3-B153-00C04F79FAA6} . (.Microsoft Corporation - Utilitaire d’installation du Lecteur Window.) -- C:\Windows\System32\unregmp2.exe [Unsigned]  =>.Microsoft Corporation
O40 - ASIC: Web Platform Customizations [64Bits] - {89820200-ECBD-11cf-8B85-00AA005B4383} . (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) -- C:\Windows\System32\ie4uinit.exe [Unsigned]  =>.Microsoft Corporation
O40 - ASIC: (no name) [64Bits] - {89B4C1CD-B018-4511-B0A1-5476DBF70820} . (.Microsoft Corporation - Microsoft .NET IE SECURITY REGISTRATION.) -- C:\Windows\System32\mscories.dll  =>.Microsoft®
O40 - ASIC: Microsoft Edge [64Bits] - {9459C573-B17A-45AE-9F64-1857B5D58CEE} . (.Microsoft Corporation - Microsoft Edge Installer.) -- C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.51\Installer\setup.exe  =>.Microsoft®

---\\ LOGICIELS INSTALLES (80) - 11s
O42 - Logiciel: @BIOS - (.GIGABYTE.) [HKLM][64Bits] -- {C9D46F25-5F9D-4E25-B24F-BC00E9EDF529} [Unsigned]  =>.Gigabyte (Hidden)
O42 - Logiciel: @BIOS - (.GIGABYTE.) [HKLM][64Bits] -- InstallShield_{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529} [Unsigned]  =>.Gigabyte
O42 - Logiciel: 123 Free Solitaire v12.1 - (.TreeCardGames.) [HKLM][64Bits] -- 123 Free Solitaire_is1 [Unsigned]  =>.TreeCardGames
O42 - Logiciel: 7-Zip 24.09 (x64) - (.Igor Pavlov.) [HKLM][64Bits] -- 7-Zip [Unsigned]  =>.Igor Pavlov
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- {F9000000-0018-0000-0000-074957833700} [Unsigned]  =>.ABBYY (Hidden)
O42 - Logiciel: ABBYY FineReader 9.0 Sprint - (.ABBYY.) [HKLM][64Bits] -- ABBYY FineReader 9.0 Sprint [Unsigned]  =>.ABBYY
O42 - Logiciel: AOMEI Partition Assistant 10.4.2 - (.AOMEI International Network Limited..) [HKLM][64Bits] -- {02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1 [Unsigned]  =>.AOMEI International Network Limited.
O42 - Logiciel: APP Center - (.Gigabyte.) [HKLM][64Bits] -- {D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D} [Unsigned]  =>.Gigabyte (Hidden)
O42 - Logiciel: APP Center - (.Gigabyte.) [HKLM][64Bits] -- InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D} [Unsigned]  =>.Gigabyte
O42 - Logiciel: Bambu Studio - (.Bambulab.) [HKLM][64Bits] -- Bambu Studio [Unsigned]
O42 - Logiciel: CCleaner - (.Piriform.) [HKLM][64Bits] -- CCleaner {07A61ECFA74CC7B2CEB42035C772BE1D}.  =>.Piriform
O42 - Logiciel: Cycle lunaire 3.3 - (..) [HKCU][64Bits] -- Cycle lunaire 3.3 [Unsigned]
O42 - Logiciel: Download Navigator - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {E728441A-7820-4B1C-87C9-DE7BE37B2953} [Unsigned]  =>.Seiko Epson Corporation
O42 - Logiciel: DownloadHelper CoApp - (.ACLAP.) [HKLM][64Bits] -- DownloadHelper CoApp [Unsigned]
O42 - Logiciel: EasyTune - (.GIGABYTE.) [HKLM][64Bits] -- {7F635314-EE21-4E4B-A68D-69AE70BA0E9B} [Unsigned]  =>.Gigabyte (Hidden)
O42 - Logiciel: EasyTune - (.GIGABYTE.) [HKLM][64Bits] -- InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B} {4A042D7653FFB5CF06FB280A}.  =>.Gigabyte
O42 - Logiciel: EasyTuneEngineService - (.GIGABYTE.) [HKLM][64Bits] -- {964575C3-5820-4642-A89A-754255B5EFE1} [Unsigned]  =>.Gigabyte (Hidden)
O42 - Logiciel: EasyTuneEngineService - (.GIGABYTE.) [HKLM][64Bits] -- InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1} {4A042D7653FFB5CF06FB280A}.  =>.Gigabyte
O42 - Logiciel: Epson Easy Photo Print 2 - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {FFF841F3-9A15-4F61-BD16-C19F132E5A27}  =>.SEIKO EPSON Corporation®
O42 - Logiciel: Epson Easy Photo Print Plug-in for PMB(Picture Motion Browser) - (.SEIKO EPSON CORPORATION2.) [HKLM][64Bits] -- {B2D55EB8-32C5-4B43-9006-9E97DECBA178} [Unsigned]  =>.Seiko Epson Corporation2
O42 - Logiciel: Epson Event Manager - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {8ED43F7E-A8F6-4898-AF11-B6158F2EDF94} [Unsigned]  =>.Seiko Epson Corporation
O42 - Logiciel: Epson FAX Utility - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A} [Unsigned]  =>.Seiko Epson Corporation
O42 - Logiciel: Epson PC-FAX Driver - (.Epson/Seico.) [HKLM][64Bits] -- EPSON PC-FAX Driver 2  =>.SEIKO EPSON Corporation®
O42 - Logiciel: Epson Print CD - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {D16A31F9-276D-4968-A753-FFEAC56995D0}  =>.Macrovision Corporation®
O42 - Logiciel: EPSON Printer Finder - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C} [Unsigned]  =>.Seiko Epson Corporation
O42 - Logiciel: EPSON PX830 Series Printer Uninstall - (.SEIKO EPSON Corporation.) [HKLM][64Bits] -- EPSON PX830 Series  =>.SEIKO EPSON CORPORATION®
O42 - Logiciel: EPSON Scan - (.Seiko Epson Corporation.) [HKLM][64Bits] -- EPSON Scanner  =>.SEIKO EPSON Corporation®
O42 - Logiciel: EpsonNet Print - (.SEIKO EPSON CORPORATION.) [HKLM][64Bits] -- {3E31400D-274E-4647-916C-2CACC3741799}  =>.Macrovision Corporation®
O42 - Logiciel: Filengrene - (.Filengrene.) [HKCU][64Bits] -- f8cb988894cd3b56 [Unsigned]
O42 - Logiciel: FreeCAD 0.21.2 - (.FreeCAD Team.) [HKLM][64Bits] -- FreeCAD0212 [Unsigned]  =>.FreeCAD Team
O42 - Logiciel: Gears 3D Printer - (.Jaume Dellunde.) [HKLM][64Bits] -- {FB508DA5-0309-481F-AB39-F98066868BDB} [Unsigned]
O42 - Logiciel: Guide d'utilisation EPSON PX830 Series - (.Epson/Seico.) [HKLM][64Bits] -- EPSON PX830 Series Useg [Unsigned]  =>.Epson/Seico
O42 - Logiciel: Guide réseau EPSON PX830 Series - (.Epson/Seico.) [HKLM][64Bits] -- EPSON PX830 Series Netg [Unsigned]  =>.Epson/Seico
O42 - Logiciel: KeyScrambler - (.QFX Software Corporation.) [HKLM][64Bits] -- KeyScrambler [Unsigned]  =>.QFX Software Corporation
O42 - Logiciel: Kyocera Product Library - (.KYOCERA Document Solutions Inc..) [HKLM][64Bits] -- Kyocera Product Library {02B8A4001198E56FC684DC99B1665C14}.  =>.KYOCERA Document Solutions Inc.
O42 - Logiciel: KYOCERA Status Monitor 5 - (.KYOCERA Document Solutions Inc..) [HKLM][64Bits] -- {24EE7F6D-C648-463f-9E71-DC5FD2258D17} [Unsigned]  =>.KYOCERA Document Solutions Inc.
O42 - Logiciel: LibreOffice 24.2.6.2 - (.The Document Foundation.) [HKLM][64Bits] -- {71DF60D4-1413-4463-8562-E9EA6B46518E} [Unsigned]  =>.The Document Foundation
O42 - Logiciel: Malwarebytes version 5.2.6.163 - (.Malwarebytes.) [HKLM][64Bits] -- {35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1  =>.Malwarebytes Inc.®
O42 - Logiciel: Microsoft Edge - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft Edge  =>.Microsoft®
O42 - Logiciel: Microsoft Edge WebView2 Runtime - (.Microsoft Corporation.) [HKLM][64Bits] -- Microsoft EdgeWebView  =>.Microsoft®
O42 - Logiciel: Microsoft Office Professional Plus 2021 - fr-fr - (.Microsoft Corporation.) [HKLM][64Bits] -- ProPlus2021Retail - fr-fr  =>.Microsoft®
O42 - Logiciel: Microsoft Update Health Tools - (.Microsoft Corporation.) [HKLM][64Bits] -- {1FC1A6C2-576E-489A-9B4A-92D21F542136} [Unsigned]  =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2005 Redistributable - (.Microsoft Corporation.) [HKLM][64Bits] -- {837b34e3-7c30-493c-8f6a-2b0f04e2912c} [Unsigned]  =>.Microsoft Corporation
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}  =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}  =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {37B8F9C7-03FB-3253-8781-2517C99D7C00} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {B175520C-86A2-35A7-8619-86DC379688B9} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 - (.Microsoft Corporation.) [HKLM][64Bits] -- {BD95A8CD-1D9F-35AD-981A-3E7925026EBB} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29617 - (.Microsoft Corporation.) [HKLM][64Bits] -- {16ae9fff-f228-4adf-b234-2e759ce8d1a9}  =>.Microsoft®
O42 - Logiciel: Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.21.27702 - (.Microsoft Corporation.) [HKLM][64Bits] -- {49697869-be8e-427d-81a0-c334d1d14950}  =>.Microsoft Corporation®
O42 - Logiciel: Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29617 - (.Microsoft Corporation.) [HKLM][64Bits] -- {0CC72BE4-AFF5-4F53-A0F6-BA2BCE66E1E0} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29617 - (.Microsoft Corporation.) [HKLM][64Bits] -- {682FC462-BA23-41F6-9141-BED5E81E35C7} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2019 X86 Additional Runtime - 14.21.27702 - (.Microsoft Corporation.) [HKLM][64Bits] -- {213668DB-2263-4E2D-ABB8-487FD539130E} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.21.27702 - (.Microsoft Corporation.) [HKLM][64Bits] -- {19F7E289-17B8-44EC-A099-927507B6F739} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Mozilla Firefox (x64 fr) - (.Mozilla.) [HKLM][64Bits] -- Mozilla Firefox 135.0 (x64 fr)  =>.Mozilla Corporation®
O42 - Logiciel: Mozilla Maintenance Service - (.Mozilla.) [HKLM][64Bits] -- MozillaMaintenanceService [Unsigned]  =>.Mozilla
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-0000-0000-0000000FF1CE} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Office 16 Click-to-Run Extensibility Component 64-bit Registration - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-00DD-0000-1000-0000000FF1CE} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Office 16 Click-to-Run Licensing Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008F-0000-1000-0000000FF1CE} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Office 16 Click-to-Run Localization Component - (.Microsoft Corporation.) [HKLM][64Bits] -- {90160000-008C-040C-0000-0000000FF1CE} [Unsigned]  =>.Microsoft Corporation (Hidden)
O42 - Logiciel: Python 3.8.2 (64-bit) - (.Python Software Foundation.) [HKCU][64Bits] -- {13ee6ab9-4dca-406c-bc3b-5d86391d39a1}  =>.Python Software Foundation®
O42 - Logiciel: Python 3.8.2 Core Interpreter (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {AD923240-0ACE-45C9-8749-05BF77AAE101} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python 3.8.2 Development Libraries (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {BDFB7011-0AB2-440F-8F00-32AF7A9ED1ED} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python 3.8.2 Documentation (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {65B0F976-5151-427E-95B4-2320DC64F91E} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python 3.8.2 Executables (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {A36C1168-60E6-42E4-93DB-6BE8C6DD9DD6} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python 3.8.2 pip Bootstrap (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {8EEE042B-6EAF-4171-BA6E-01319ED99DA8} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python 3.8.2 Standard Library (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {33F9B46C-EB19-4BB7-ABFA-F8C71B73E9A4} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python 3.8.2 Utility Scripts (64-bit) - (.Python Software Foundation.) [HKLM][64Bits] -- {52AB506A-EC3C-4060-9EBF-6A975994CB35} [Unsigned]  =>.Python Software Foundation (Hidden)
O42 - Logiciel: Python Launcher - (.Python Software Foundation.) [HKLM][64Bits] -- {AF12A465-EA47-447D-B6BF-2A82CDBE2F0E} [Unsigned]  =>.Python Software Foundation
O42 - Logiciel: QTranslate 6.10.0 - (.QuestSoft.) [HKLM][64Bits] -- QTranslate [Unsigned]  =>.QuestSoft
O42 - Logiciel: Recuva - (.Piriform.) [HKLM][64Bits] -- Recuva  =>.Piriform Software Ltd®
O42 - Logiciel: SIV - (.GIGABYTE.) [HKLM][64Bits] -- {AAA057C3-10DC-4EB9-A3D6-8208C1BB7411} [Unsigned]  =>.Gigabyte (Hidden)
O42 - Logiciel: SIV - (.GIGABYTE.) [HKLM][64Bits] -- InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411} {4A042D7653FFB5CF06FB280A}.  =>.Gigabyte
O42 - Logiciel: Smart Backup (x64) - (.GIGABYTE.) [HKLM][64Bits] -- {BC1FA5CF-A36F-4C61-9638-09D0B431B006} [Unsigned]  =>.Gigabyte
O42 - Logiciel: Update for x64-based Windows Systems (KB5001716) - (.Microsoft Corporation.) [HKLM][64Bits] -- {DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E} [Unsigned]  =>.Microsoft Corporation
O42 - Logiciel: VirusTotal Uploader 2.2 - (.VirusTotal.) [HKLM][64Bits] -- VTUploader [Unsigned]  =>.VirusTotal
O42 - Logiciel: Visionneuse Microsoft PowerPoint - (.Microsoft Corporation.) [HKLM][64Bits] -- {95140000-00AF-040C-0000-0000000FF1CE} [Unsigned]  =>.Microsoft Corporation
O42 - Logiciel: VLC media player - (.VideoLAN.) [HKLM][64Bits] -- VLC media player [Unsigned]  =>.VideoLAN
O42 - Logiciel: Windows 7 Games for Windows 11, 10 and 8 - (.http://winaero.com.) [HKLM][64Bits] -- Win7Games [Unsigned]  =>.http://winaero.com

---\\ CLE DE REGISTRE SOFTWARE HKCU & HKLM (126) - 11s
HKLM\SOFTWARE\1D0EC6DE-4A80-4CC3-A335-E6E41C951198
HKLM\SOFTWARE\7-Zip  =>.Igor Pavlov
HKLM\SOFTWARE\AE Protection  =>.Legitimate
HKLM\SOFTWARE\AMD  =>.AMD
HKLM\SOFTWARE\AMDLOG
HKLM\SOFTWARE\Bambulab
HKLM\SOFTWARE\CVSM  =>.Legitimate
HKLM\SOFTWARE\DefaultUserEnvironment  =>.Microsoft Corporation
HKLM\SOFTWARE\EPSON  =>.EPSON
HKLM\SOFTWARE\EpsonNet  =>.Epson/Seico
HKLM\SOFTWARE\FreeCAD0212
HKLM\SOFTWARE\Gigabyte  =>.Gigabyte
HKLM\SOFTWARE\Google  =>.Google
HKLM\SOFTWARE\Intel  =>.Intel
HKLM\SOFTWARE\Khronos  =>.Khronos
HKLM\SOFTWARE\Kyocera
HKLM\SOFTWARE\Kyocera Mita  =>.Kyocera Mita
HKLM\SOFTWARE\LibreOffice  =>.LibreOffice
HKLM\SOFTWARE\Logishrd  =>.LogiShrd
HKLM\SOFTWARE\Malwarebytes  =>.Malwarebytes
HKLM\SOFTWARE\Mozilla  =>.Mozilla
HKLM\SOFTWARE\mozilla.org  =>.mozilla.org
HKLM\SOFTWARE\MozillaPlugins  =>.MozillaPlugins
HKLM\SOFTWARE\OBS Studio  =>.OBS Studio
HKLM\SOFTWARE\ODBC  =>.DB Connectivity Solutions
HKLM\SOFTWARE\OEM  =>.OEM
HKLM\SOFTWARE\OpenSSH  =>.OpenBSD
HKLM\SOFTWARE\Partner  =>.Google Inc.
HKLM\SOFTWARE\Piriform  =>.Piriform
HKLM\SOFTWARE\RegisteredApplications  =>.Microsoft Corporation
HKLM\SOFTWARE\The Document Foundation  =>.The Document Foundation
HKLM\SOFTWARE\TlntSPSvr
HKLM\SOFTWARE\VideoLAN  =>.VideoLan Team
HKLM\SOFTWARE\Windows  =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node  =>.Microsoft Corporation
HKLM\SOFTWARE\WOW6432Node\ABBYY  =>.ABBYY Software
HKLM\SOFTWARE\WOW6432Node\ActMask Virtual Printer SDK
HKLM\SOFTWARE\WOW6432Node\Aspell
HKLM\SOFTWARE\WOW6432Node\Chromium  =>.Chromium
HKLM\SOFTWARE\WOW6432Node\ComodoGroup  =>.ComodoGroup
HKLM\SOFTWARE\WOW6432Node\EPSON  =>.EPSON
HKLM\SOFTWARE\WOW6432Node\EpsonNet  =>.Epson/Seico
HKLM\SOFTWARE\WOW6432Node\FlexiPDF
HKLM\SOFTWARE\WOW6432Node\Gears3DPrinter
HKLM\SOFTWARE\WOW6432Node\Gigabyte  =>.Gigabyte
HKLM\SOFTWARE\WOW6432Node\Google  =>.Google
HKLM\SOFTWARE\WOW6432Node\Intel  =>.Intel
HKLM\SOFTWARE\WOW6432Node\Khronos  =>.Khronos
HKLM\SOFTWARE\WOW6432Node\Malwarebytes  =>.Malwarebytes
HKLM\SOFTWARE\WOW6432Node\Mozilla  =>.Mozilla
HKLM\SOFTWARE\WOW6432Node\MozillaPlugins  =>.MozillaPlugins
HKLM\SOFTWARE\WOW6432Node\NSIS.Library.RegTool.v3
HKLM\SOFTWARE\WOW6432Node\ODBC  =>.DB Connectivity Solutions
HKLM\SOFTWARE\WOW6432Node\Piriform  =>.Piriform
HKLM\SOFTWARE\WOW6432Node\Python  =>.Python
HKLM\SOFTWARE\WOW6432Node\QFX Software  =>.QFX Software
HKLM\SOFTWARE\WOW6432Node\SEIKO EPSON CORPORATION  =>.Epson/Seico
HKLM\SOFTWARE\WOW6432Node\SEIKO EPSON CORPORATION2  =>.Epson/Seico
HKLM\SOFTWARE\WOW6432Node\Sony Corporation  =>.Sony Corporation
HKLM\SOFTWARE\WOW6432Node\Virustotal  =>.VirusTotal
HKLM\SOFTWARE\WOW6432Node\RegisteredApplications  =>.Microsoft Corporation
HKCU\SOFTWARE\7-Zip  =>.Igor Pavlov
HKCU\SOFTWARE\ABBYY  =>.ABBYY Software
HKCU\SOFTWARE\AMD  =>.AMD
HKCU\SOFTWARE\AppDataLow  =>.Microsoft Corporation
HKCU\SOFTWARE\ATI  =>.ATI
HKCU\SOFTWARE\Chromium  =>.Chromium
HKCU\SOFTWARE\EPSON  =>.EPSON
HKCU\SOFTWARE\FreeCAD  =>.Open Source
HKCU\SOFTWARE\Gears3DPrinter
HKCU\SOFTWARE\Gigabyte  =>.Gigabyte
HKCU\SOFTWARE\Google  =>.Google
HKCU\SOFTWARE\IM Providers  =>.IM Providers
HKCU\SOFTWARE\Kyocera Document Solutions
HKCU\SOFTWARE\Kyocera Mita  =>.Kyocera Mita
HKCU\SOFTWARE\LogiShrd  =>.LogiShrd
HKCU\SOFTWARE\Malwarebytes  =>.Malwarebytes
HKCU\SOFTWARE\Mozilla  =>.Mozilla
HKCU\SOFTWARE\Netscape  =>.Netscape
HKCU\SOFTWARE\ODBC  =>.DB Connectivity Solutions
HKCU\SOFTWARE\Partition Assistant
HKCU\SOFTWARE\Piriform  =>.Piriform
HKCU\SOFTWARE\Python  =>.Python
HKCU\SOFTWARE\QFX Software  =>.QFX Software
HKCU\SOFTWARE\QtProject  =>.QtProject
HKCU\SOFTWARE\RegisteredApplications  =>.Microsoft Corporation
HKCU\SOFTWARE\SEIKO EPSON CORPORATION  =>.Epson/Seico
HKCU\SOFTWARE\The Document Foundation  =>.The Document Foundation
HKCU\SOFTWARE\WOW6432Node  =>.Microsoft Corporation
HKCU\SOFTWARE\ZHP  =>.Nicolas Coolman
HKCU\SOFTWARE\AppDataLow\Software  =>.Microsoft Corporation
HKU\.DEFAULT\SOFTWARE\AMD  =>.AMD
HKU\.DEFAULT\SOFTWARE\ATI  =>.ATI
HKU\.DEFAULT\SOFTWARE\Kyocera Mita  =>.Kyocera Mita
HKU\.DEFAULT\SOFTWARE\Malwarebytes  =>.Malwarebytes
HKU\.DEFAULT\SOFTWARE\Mozilla  =>.Mozilla
HKU\.DEFAULT\SOFTWARE\Piriform  =>.Piriform
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\7-Zip  =>.Igor Pavlov
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\ABBYY  =>.ABBYY Software
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\AMD  =>.AMD
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\AppDataLow  =>.Microsoft Corporation
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\ATI  =>.ATI
O43 - CFD: 02/09/2024 - [] D -- \Program Files\VideoLAN  =>.VideoLan Team
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Defender  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Mail  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Media Player  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Multimedia Platform  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows NT  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Photo Viewer  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Portable Devices  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Windows Security  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] SHD -- \Program Files\Windows Sidebar  =>.Microsoft Corporation
O43 - CFD: 14/02/2025 - [] D -- \Program Files\WindowsApps  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\WindowsPowerShell  =>.Microsoft Corporation
O43 - CFD: 27/08/2024 - [] D -- C:\Program Files (x86)\123 Free Solitaire  =>.TreeCardGames.com
O43 - CFD: 26/08/2024 - [] D -- C:\Program Files (x86)\ABBYY FineReader 9.0 Sprint  =>.ABBYY Software
O43 - CFD: 12/09/2024 - [] D -- C:\Program Files (x86)\AOMEI Partition Assistant  =>.AOMEI Tech Co
O43 - CFD: 07/02/2025 - [] D -- C:\Program Files (x86)\Common Files  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- C:\Program Files (x86)\Cycle lunaire 3.3 [Unsigned]
O43 - CFD: 26/08/2024 - [] D -- C:\Program Files (x86)\epson  =>.SEIKO EPSON CORPORATION®
O43 - CFD: 26/08/2024 - [] D -- C:\Program Files (x86)\EPSON Software  =>.Epson/Seico
O43 - CFD: 02/11/2024 - [] D -- C:\Program Files (x86)\Gears 3D Printer [Unsigned]
O43 - CFD: 26/08/2024 - [] D -- C:\Program Files (x86)\Gigabyte {4A042D7653FFB5CF06FB280A}.  =>.Gigabyte
O43 - CFD: 26/08/2024 - [] HD -- C:\Program Files (x86)\InstallShield Installation Information  =>.InstallShield
O43 - CFD: 10/10/2024 - [] D -- C:\Program Files (x86)\Internet Explorer  =>.Microsoft Corporation
O43 - CFD: 14/02/2025 - [] D -- C:\Program Files (x86)\KeyScrambler  =>.QFX Software
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Microsoft  =>.Microsoft Corporation
O43 - CFD: 07/02/2025 - [] D -- C:\Program Files (x86)\Microsoft Office  =>.Microsoft Corporation
O43 - CFD: 08/09/2024 - [] D -- C:\Program Files (x86)\Microsoft.NET  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- C:\Program Files (x86)\Mozilla Maintenance Service  =>.Mozilla
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\MSBuild  =>.Microsoft Corporation
O43 - CFD: 31/08/2024 - [] D -- C:\Program Files (x86)\MSECache  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\QTranslate [Unsigned]
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Reference Assemblies  =>.Microsoft Corporation
O43 - CFD: 02/09/2024 - [] D -- C:\Program Files (x86)\stinger
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\VirusTotalUploader2  =>.VirusTotal
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows Defender  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows Mail  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows Media Player  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows Multimedia Platform  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows NT  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows Photo Viewer  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Windows Portable Devices  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] SHD -- C:\Program Files (x86)\Windows Sidebar  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\WindowsPowerShell  =>.Microsoft Corporation
O43 - CFD: 27/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\123 Free Solitaire  =>.TreeCardGames.com
O43 - CFD: 02/02/2025 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip  =>.Igor Pavlov
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ABBYY FineReader 9.0 Sprint  =>.ABBYY Software
O43 - CFD: 25/08/2024 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility  =>.Microsoft Corporation
O43 - CFD: 12/02/2025 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories  =>.Microsoft Corporation
O43 - CFD: 12/02/2025 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools  =>.Administrative Tools
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Backupper  =>.AOMEI Tech Co
O43 - CFD: 28/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI Partition Assistant  =>.AOMEI Tech Co
O43 - CFD: 14/02/2025 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bambu Studio
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner  =>.Piriform Ltd
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EPSON  =>.EPSON
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epson Software  =>.Epson/Seico
O43 - CFD: 07/11/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeCAD 0.21
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games  =>.Microsoft Corporation
O43 - CFD: 02/11/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gears 3D Printer
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gigabyte  =>.Gigabyte
O43 - CFD: 25/08/2024 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IIS  =>.Microsoft Corporation
O43 - CFD: 14/02/2025 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyScrambler  =>.QFX Software
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kyocera
O43 - CFD: 08/09/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 24.2  =>.LibreOffice
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Maintenance  =>.Microsoft Corporation
O43 - CFD: 23/08/2024 - [0] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight  =>.Microsoft Corporation
O43 - CFD: 08/09/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva  =>.Piriform
O43 - CFD: 25/08/2024 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StartUp  =>.Microsoft Corporation
O43 - CFD: 12/02/2025 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools  =>.Microsoft Corporation
O43 - CFD: 02/09/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN  =>.VideoLan Team
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Kits  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] RD -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\ABBYY  =>.ABBYY Software
O43 - CFD: 28/08/2024 - [] D -- C:\ProgramData\AomeiBR  =>.AOMEI Technology
O43 - CFD: 13/09/2024 - [] D -- C:\ProgramData\AOMEIPA  =>.AOMEI Tech Co
O43 - CFD: 25/08/2024 - [] SHD -- C:\ProgramData\Application Data  =>.Microsoft Corporation
O43 - CFD: 12/09/2024 - [] D -- C:\ProgramData\boost_interprocess  =>.boost.org
O43 - CFD: 25/08/2024 - [] SHD -- C:\ProgramData\Bureau  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] SHD -- C:\ProgramData\Documents  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\EPSON  =>.EPSON
O43 - CFD: 06/02/2025 - [] D -- C:\ProgramData\KDService
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\Malwarebytes  =>.Malwarebytes
O43 - CFD: 25/08/2024 - [] SHD -- C:\ProgramData\Menu Démarrer  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] SD -- C:\ProgramData\Microsoft  =>.Microsoft Corporation
O43 - CFD: 09/11/2024 - [] D -- C:\ProgramData\Microsoft OneDrive  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] SHD -- C:\ProgramData\Modèles  =>.Microsoft Corporation
O43 - CFD: 15/02/2025 - [] D -- C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38  =>.Mozilla Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\Norton  =>.Symantec Corporation
O43 - CFD: 24/12/2024 - [] D -- C:\ProgramData\Package Cache  =>.Microsoft Corporation
O43 - CFD: 18/01/2025 - [] D -- C:\ProgramData\Packages  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- C:\ProgramData\Piriform  =>.Piriform
O43 - CFD: 08/09/2024 - [] D -- C:\ProgramData\QFX Software  =>.QFX Software
O43 - CFD: 15/02/2025 - [] D -- C:\ProgramData\regid.1991-06.com.microsoft  =>.Microsoft Corporation
O43 - CFD: 17/10/2024 - [] D -- C:\ProgramData\SoftMaker  =>.SoftMaker
O43 - CFD: 25/08/2024 - [0] D -- C:\ProgramData\SoftwareDistribution  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] D -- C:\ProgramData\ssh  =>.Microsoft Corporation
O43 - CFD: 17/10/2024 - [0] D -- C:\ProgramData\Temp  =>.Microsoft Corporation
O43 - CFD: 27/08/2024 - [] D -- C:\ProgramData\TreeCardGames  =>.TreeCardGames
O43 - CFD: 26/08/2024 - [] D -- C:\ProgramData\UDL  =>.Microsoft Corporation
O43 - CFD: 12/02/2025 - [] D -- C:\ProgramData\USOPrivate  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\USOShared  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\ProgramData\WindowsHolographicDevices  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- C:\Program Files (x86)\Common Files\ABBYY  =>.ABBYY Software
O43 - CFD: 07/02/2025 - [] D -- C:\Program Files (x86)\Common Files\DESIGNER  =>.Designer
O43 - CFD: 26/08/2024 - [] D -- C:\Program Files (x86)\Common Files\EPSON  =>.EPSON
O43 - CFD: 07/02/2025 - [] D -- C:\Program Files (x86)\Common Files\Microsoft Shared  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Common Files\Services  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Program Files (x86)\Common Files\System  =>.Microsoft Corporation
O43 - CFD: 17/10/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Aspell  =>.Aspell Dictionaries
O43 - CFD: 14/02/2025 - [] D -- C:\Users\Bernard\AppData\Roaming\BambuStudio
O43 - CFD: 02/09/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\CrystalIdea Software  =>.CrystalIdea Software
O43 - CFD: 29/12/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\cura
O43 - CFD: 23/09/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Epson  =>.EPSON
O43 - CFD: 07/11/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\FreeCAD  =>.FreeCAD
O43 - CFD: 26/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\InstallShield  =>.InstallShield
O43 - CFD: 07/09/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Kyocera
O43 - CFD: 08/09/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\LibreOffice  =>.LibreOffice
O43 - CFD: 06/02/2025 - [] SD -- C:\Users\Bernard\AppData\Roaming\Microsoft  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Mozilla  =>.Mozilla Corporation
O43 - CFD: 08/09/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\QFX Software  =>.QFX Software
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\QTranslate
O43 - CFD: 27/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\TreeCardGames  =>.TreeCardGames
O43 - CFD: 27/12/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\vlc  =>.VideoLan Team
O43 - CFD: 15/02/2025 - [] D -- C:\Users\Bernard\AppData\Roaming\ZHP  =>.Nicolas Coolman
O43 - CFD: 26/08/2024 - [] D -- C:\Users\Bernard\AppData\Local\ABBYY  =>.ABBYY Software
O43 - CFD: 26/08/2024 - [] D -- C:\Users\Bernard\AppData\Local\AMD  =>.AMD
O43 - CFD: 25/08/2024 - [] SHD -- C:\Users\Bernard\AppData\Local\Application Data  =>.Microsoft Corporation
O43 - CFD: 25/11/2024 - [] D -- C:\Users\Bernard\AppData\Local\Apps  =>.Microsoft Corporation
O43 - CFD: 17/10/2024 - [] D -- C:\Users\Bernard\AppData\Local\Aspell  =>.Aspell Dictionaries
O43 - CFD: 11/09/2024 - [] D -- C:\Users\Bernard\AppData\Local\Backup  =>.Symantec
O43 - CFD: 07/11/2024 - [] D -- C:\Users\Bernard\AppData\Local\cache  =>.Legitimate
O43 - CFD: 19/11/2024 - [] D -- C:\Users\Bernard\AppData\Local\CEF  =>.CEF
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Local\Comms  =>.Microsoft Corporation
O43 - CFD: 11/09/2024 - [] D -- C:\Users\Bernard\AppData\Local\ConnectedDevicesPlatform  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\CrashDumps  =>.Microsoft Corporation
O43 - CFD: 29/12/2024 - [] D -- C:\Users\Bernard\AppData\Local\cura
O43 - CFD: 14/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\D3DSCache  =>.Legitimate
O43 - CFD: 27/11/2024 - [0] D -- C:\Users\Bernard\AppData\Local\Deployment  =>.Microsoft Corporation
O43 - CFD: 19/12/2024 - [0] D -- C:\Users\Bernard\AppData\Local\Diagnostics  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\ElevatedDiagnostics  =>.Microsoft Corporation
O43 - CFD: 02/01/2025 - [] D -- C:\Users\Bernard\AppData\Local\FreeCAD  =>.FreeCAD
O43 - CFD: 25/08/2024 - [] SHD -- C:\Users\Bernard\AppData\Local\Historique  =>.Microsoft Corporation
O43 - CFD: 05/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\Malwarebytes  =>.Malwarebytes
O43 - CFD: 06/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\Microsoft  =>.Microsoft Corporation
O43 - CFD: 02/09/2024 - [] D -- C:\Users\Bernard\AppData\Local\Microsoft Games  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Local\Mozilla  =>.Mozilla Corporation
O43 - CFD: 05/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\okular
O43 - CFD: 06/09/2024 - [] D -- C:\Users\Bernard\AppData\Local\OneDrive  =>.Microsoft Corporation
O43 - CFD: 24/12/2024 - [] D -- C:\Users\Bernard\AppData\Local\Package Cache  =>.Microsoft Corporation
O43 - CFD: 11/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\Packages  =>.Microsoft Corporation
O43 - CFD: 24/12/2024 - [] D -- C:\Users\Bernard\AppData\Local\pip  =>.Python
O43 - CFD: 26/10/2024 - [] D -- C:\Users\Bernard\AppData\Local\PlaceholderTileLogoFolder  =>.Microsoft Corporation
O43 - CFD: 17/10/2024 - [] D -- C:\Users\Bernard\AppData\Local\Programs  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Local\Publishers  =>.Microsoft Corporation
O43 - CFD: 09/09/2024 - [] D -- C:\Users\Bernard\AppData\Local\SquirrelTemp  =>.Squirrels
O43 - CFD: 15/02/2025 - [] D -- C:\Users\Bernard\AppData\Local\Temp  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] SHD -- C:\Users\Bernard\AppData\Local\Temporary Internet Files  =>.Microsoft Corporation
O43 - CFD: 12/09/2024 - [] D -- C:\Users\Bernard\AppData\Local\VirtualStore  =>.Microsoft Corporation
O43 - CFD: 17/12/2024 - [] D -- C:\Users\Bernard\AppData\Local\VS Revo Group  =>.VS Revo Group
O43 - CFD: 22/01/2025 - [] D -- C:\Users\Bernard\AppData\Local\ZHP  =>.Nicolas Coolman
O43 - CFD: 17/10/2024 - [0] D -- C:\Users\Bernard\AppData\Local\Programs\Common  =>.Microsoft Corporation
O43 - CFD: 19/03/2024 - [] D -- C:\Users\Bernard\AppData\LocalLow\AMD  =>.AMD
O43 - CFD: 05/02/2025 - [] D -- C:\Users\Bernard\AppData\LocalLow\IGDump
O43 - CFD: 12/09/2024 - [] SD -- C:\Users\Bernard\AppData\LocalLow\Microsoft  =>.Microsoft Corporation
O43 - CFD: 21/04/2024 - [0] D -- C:\Users\Bernard\AppData\LocalLow\Mozilla  =>.Mozilla Corporation
O43 - CFD: 22/01/2025 - [0] D -- C:\Users\Bernard\AppData\LocalLow\Temp  =>.Microsoft Corporation
O43 - CFD: 17/09/2024 - [] D -- C:\Users\Bernard\Desktop\F I L S
O43 - CFD: 17/06/2024 - [] D -- C:\Users\Bernard\Desktop\F O U R N I S S E U R S
O43 - CFD: 23/01/2025 - [] RD -- C:\Users\Bernard\Desktop\Icônes M U
O43 - CFD: 08/01/2025 - [] D -- C:\Users\Bernard\Desktop\L O G I C I E L S
O43 - CFD: 31/12/2024 - [] D -- C:\Users\Bernard\Desktop\Pignon vicking HE600 bas - 3683209
O43 - CFD: 25/08/2024 - [] RD -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] RD -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools  =>.Administrative Tools
O43 - CFD: 30/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cycle lunaire 3.3
O43 - CFD: 26/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\EPSON Software  =>.Epson/Seico
O43 - CFD: 25/11/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Filengrene
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance  =>.Microsoft Corporation
O43 - CFD: 24/12/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.8  =>.Python
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTranslate
O43 - CFD: 25/08/2024 - [] RD -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] RD -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools  =>.Microsoft Corporation
O43 - CFD: 11/07/2024 - [0] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TomTom  =>.TomTom
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VirusTotal Uploader 2.2  =>.VirusTotal
O43 - CFD: 25/08/2024 - [] D -- C:\Users\Bernard\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] SHD -- \Users\Default\AppData\Local\Application Data  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] SHD -- \Users\Default\AppData\Local\Historique  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- \Users\Default\AppData\Local\Kyocera
O43 - CFD: 08/09/2024 - [] D -- \Users\Default\AppData\Local\Microsoft  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] D -- \Users\Default\AppData\Local\Temp  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] SHD -- \Users\Default\AppData\Local\Temporary Internet Files  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] SHD -- \Users\Default User\AppData\Local\Application Data  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] SHD -- \Users\Default User\AppData\Local\Historique  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- \Users\Default User\AppData\Local\Kyocera
O43 - CFD: 08/09/2024 - [] D -- \Users\Default User\AppData\Local\Microsoft  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] D -- \Users\Default User\AppData\Local\Temp  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] SHD -- \Users\Default User\AppData\Local\Temporary Internet Files  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\AMD  =>.AMD
O43 - CFD: 26/08/2024 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Malwarebytes  =>.Malwarebytes
O43 - CFD: 08/09/2024 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Local\Microsoft  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- C:\WINDOWS\System32\Config\systemprofile\AppData\Roaming\Microsoft  =>.Microsoft Corporation

---\\ ShellIconOverlayIdentifiers (SIOI) (1) - 0s
O106 - SIOI:  [EnhancedStorageShell] - {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}. (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned]  =>.Microsoft Corporation

---\\ RACCOURCIS DES MENUS CONTEXTUELS (SCMH) (23) - 0s
O108 - CMH1: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll [Unsigned]  =>.Igor Pavlov
O108 - CMH1: ModernSharing [64Bits] - {e2bf9676-5f8f-435c-97eb-11607a5bedf7} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH1: Open With [64Bits] - {09799AFB-AD67-11d1-ABCD-00C04FC30936} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH1: Open With EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH1: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH1: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH2: OpenContainingFolderMenu [64Bits] - {37ea3a21-7493-4208-a011-7f9ea79ce9f5} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH3: CopyAsPathMenu [64Bits] - {f3d06e7c-1e45-4a26-847e-f9fcdee59be0} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH3: MBAMShlExt [64Bits] - {57CE581A-0CB6-4266-9CA0-19364C90A0B3} . (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll  =>.Malwarebytes Inc.®
O108 - CMH3: SendTo [64Bits] - {7BA4C740-9E81-11CF-99D3-00AA004AE837} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH4: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll [Unsigned]  =>.Igor Pavlov
O108 - CMH4: EncryptionMenu [64Bits] - {A470F8CF-A1E8-4f65-8335-227475AA5C46} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH4: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH4: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH5: New [64Bits] - {D969A300-E7FF-11d0-A93B-00A0C90F2719} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH5: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH5: WorkFolders [64Bits] - {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} . (.Microsoft Corporation - Extension d’environnement de Dossiers de tr.) -- C:\Windows\System32\WorkfoldersShell.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH6: 7-Zip [64Bits] - {23170F69-40C1-278A-1000-000100020000} . (.Igor Pavlov - 7-Zip Shell Extension.) -- C:\Program Files\7-Zip\7-zip.dll [Unsigned]  =>.Igor Pavlov
O108 - CMH6: Library Location [64Bits] - {3dad6c5d-2167-4cae-9914-f99e41c12cfa} . (.Microsoft Corporation - DLL commune du shell Windows.) -- C:\Windows\System32\shell32.dll  =>.Microsoft®
O108 - CMH6: MBAMShlExt [64Bits] - {57CE581A-0CB6-4266-9CA0-19364C90A0B3} . (.Malwarebytes - Malwarebytes.) -- C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll  =>.Malwarebytes Inc.®
O108 - CMH6: PintoStartScreen [64Bits] - {470C0EBD-5D73-4d58-9CED-E91E22E23282} . (.Microsoft Corporation - Programme de résolution d’applications.) -- C:\Windows\System32\appresolver.dll  =>.Microsoft®
O108 - CMH7: EnhancedStorageShell [64Bits] - {2854F705-3548-414C-A113-93E27C808C85} . (.Microsoft Corporation - DLL d’extension d’environnement de stockage.) -- C:\Windows\System32\EhStorShell.dll [Unsigned]  =>.Microsoft Corporation
O108 - CMH7: Sharing [64Bits] - {f81e9010-6ea4-11ce-a7ff-00aa003ca9f6} . (.Microsoft Corporation - Extensions de l’interpréteur de commandes p.) -- C:\Windows\System32\ntshrui.dll [Unsigned]  =>.Microsoft Corporation

---\\ IMAGE FILE EXECUTION OPTIONS (IFEO) (12) - 1s
O50 - IFEO:C:\WINDOWS\System32\ie4uinit.exe - (.Microsoft Corporation - Utilitaire d'initialisation d'Internet Expl.) [MitigationOptions\\256] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\ieUnatt.exe - (.Microsoft Corporation - Outil d’installation sans assistance d’IE 7.) [MitigationOptions\\256] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\MRT.exe - (.Microsoft Corporation - Outil de suppression de logiciels malveilla.) [CFGOptions\\1] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\msfeedssync.exe - (.Microsoft Corporation - Microsoft Feeds Synchronization.) [MitigationOptions\\256] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\mshta.exe - (.Microsoft Corporation - Hôte des applications HTML de Microsoft(R).) [MitigationOptions\\256] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\PresentationHost.exe - (.Microsoft Corporation - Windows Presentation Foundation Host.) [MitigationOptions\\1118481] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\PrintIsolationHost.exe - (.Microsoft Corporation - PrintIsolationHost.) [MitigationOptions\\2097152] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\runtimebroker.exe - (.Microsoft Corporation - Runtime Broker.) [MitigationOptions\\4294967296] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\spoolsv.exe - (.Microsoft Corporation - Application sous-système spouleur.) [MitigationOptions\\2097152] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\Windows\System32\svchost.exe - (.Microsoft Corporation - Processus hôte pour les services Windows.) [MinimumStackCommitInBytes\\32768]  =>.Microsoft®
O50 - IFEO:C:\WINDOWS\System32\vmcompute.exe - (.Microsoft Corporation - Service de calcul hôte Hyper-V.) [UseFilter\\1] [Unsigned]  =>.Microsoft Corporation
O50 - IFEO:C:\WINDOWS\System32\vmwp.exe - (.Microsoft Corporation - Processus de travail de l’ordinateur virtue.) [UseFilter\\1] [Unsigned]  =>.Microsoft Corporation

---\\ LISTE DES PILOTES DU SYSTEME (452) - 10s
O58 - SDL:2019/12/07 10:07:53 A . (.Microsoft Corporation - 1394 OpenHCI Driver.) -- C:\WINDOWS\System32\drivers\1394ohci.sys   [266240] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.LSI - LSI 3ware SCSI Storport Driver.) -- C:\WINDOWS\System32\drivers\3ware.sys   [107320]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:02 A . (.Microsoft Corporation - Pilote ACPI pour NT.) -- C:\WINDOWS\System32\drivers\acpi.sys   [816608]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Microsoft Corporation - ACPI Devices Driver.) -- C:\WINDOWS\System32\drivers\AcpiDev.sys   [23040] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - ACPIEx Driver.) -- C:\WINDOWS\System32\drivers\acpiex.sys   [139792]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - ACPI Processor Aggregator Device Driver.) -- C:\WINDOWS\System32\drivers\acpipagr.sys   [14336] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - ACPI Power Metering Driver.) -- C:\WINDOWS\System32\drivers\acpipmi.sys   [18432] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - ACPI Wake Alarm.) -- C:\WINDOWS\System32\drivers\acpitime.sys   [16384] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:49 A . (.Microsoft Corporation - Audio KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\Acx01000.sys   [694272] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.PMC-Sierra - PMC-Sierra Storport Driver For SPC8x6G SAS.) -- C:\WINDOWS\System32\drivers\adp80xx.sys   [1135416]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - Pilote de fonction connexe pour WinSock.) -- C:\WINDOWS\System32\drivers\afd.sys   [656888]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:03 A . (.Microsoft Corporation - AF_UNIX socket provider.) -- C:\WINDOWS\System32\drivers\afunix.sys   [44032] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - Gestionnaire d'appels RAS Agile Vpn Minipor.) -- C:\WINDOWS\System32\drivers\agilevpn.sys   [115200] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:17 A . (.Microsoft Corporation - Application Compatibility Cache.) -- C:\WINDOWS\System32\drivers\ahcache.sys   [305152] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2022/08/08 04:30:44 A . (.Advanced Micro Devices, Inc. - AMD Crash Defender.) -- C:\WINDOWS\System32\drivers\amdfendr.sys   [195016]  =>.Advanced Micro Devices Inc.®
O58 - SDL:2022/08/08 04:30:46 A . (.Advanced Micro Devices, Inc. - AMD Crash Defender Manager Driver.) -- C:\WINDOWS\System32\drivers\amdfendrmgr.sys   [54720]  =>.Advanced Micro Devices Inc.®
O58 - SDL:2019/10/30 22:42:42 A . (.Advanced Micro Devices, Inc - AMD GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\amdgpio2.sys   [46040]  =>.Advanced Micro Devices INC.®
O58 - SDL:2019/04/18 12:44:20 A . (.Advanced Micro Devices, Inc - AMD GPIO Driver.) -- C:\WINDOWS\System32\drivers\amdgpio3.sys   [24528]  =>.AMD PMP-PE CB Code Signer v20160415®
O58 - SDL:2019/12/07 10:07:47 A . (.Advanced Micro Devices, Inc - AMD I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\amdi2c.sys   [45568] [Unsigned]  =>.Advanced Micro Devices, Inc
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdk8.sys   [210400]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\amdppm.sys   [214512]  =>.Microsoft®
O58 - SDL:2019/06/27 09:14:58 A . (.Advanced Micro Devices, Inc. - amdpsp sys.) -- C:\WINDOWS\System32\drivers\amdpsp.sys   [138064]  =>.Advanced Micro Devices, Inc.®
O58 - SDL:2019/12/07 10:07:53 A . (.Advanced Micro Devices - AHCI 1.3 Device Driver.) -- C:\WINDOWS\System32\drivers\amdsata.sys   [83256]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.AMD Technologies Inc. - AMD Technology AHCI Compatible Controller D.) -- C:\WINDOWS\System32\drivers\amdsbs.sys   [259384]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Advanced Micro Devices - Storage Filter Driver.) -- C:\WINDOWS\System32\drivers\amdxata.sys   [26936]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:20 A . (.Microsoft Corporation - AppID Driver.) -- C:\WINDOWS\System32\drivers\appid.sys   [211440]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:20 A . (.Microsoft Corporation - Applocker Filter.) -- C:\WINDOWS\System32\drivers\applockerfltr.sys   [18432] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.PMC-Sierra, Inc. - Adaptec SAS RAID WS03 Driver.) -- C:\WINDOWS\System32\drivers\arcsas.sys   [131896]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:07 A . (.Microsoft Corporation - MS Remote Access serial network driver.) -- C:\WINDOWS\System32\drivers\asyncmac.sys   [31232] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - ATAPI IDE Miniport Driver.) -- C:\WINDOWS\System32\drivers\atapi.sys   [31200]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - ATAPI Driver Extension.) -- C:\WINDOWS\System32\drivers\ataport.sys   [225256]  =>.Microsoft®
O58 - SDL:2019/07/22 08:48:08 A . (.Advanced Micro Devices - AMD High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\AtihdWT6.sys   [108152]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:41 A . (.Microsoft Corporation - BAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\bam.sys   [78136]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Battery Class Driver.) -- C:\WINDOWS\System32\drivers\battc.sys   [41272]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:47 A . (. - BCM Function 2 Device Driver.) -- C:\WINDOWS\System32\drivers\bcmfn2.sys   [9728] [Unsigned]  =>.Broadcom Corporation
O58 - SDL:2019/12/07 10:09:00 A . (.Microsoft Corporation - BEEP Driver.) -- C:\WINDOWS\System32\drivers\beep.sys   [10240] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/09/12 00:27:57 A . (.Microsoft Corporation - Windows Bind Filter Driver.) -- C:\WINDOWS\System32\drivers\bindflt.sys   [152544]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:51 A . (.Microsoft Corporation - NT Lan Manager Datagram Receiver Driver.) -- C:\WINDOWS\System32\drivers\bowser.sys   [117760] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/12/11 14:35:37 A . (.Microsoft Corporation - MAC Bridge Driver.) -- C:\WINDOWS\System32\drivers\bridge.sys   [129536] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Microsoft Corporation - Microsoft Bluetooth Audio Multiprofile Mana.) -- C:\WINDOWS\System32\drivers\BtaMPM.sys   [36352] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - Bluetooth A2DP Driver.) -- C:\WINDOWS\System32\drivers\BthA2dp.sys   [282624] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Extension de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthenum.sys   [113664] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - Bluetooth Hands-Free Audio and Call Control.) -- C:\WINDOWS\System32\drivers\BthHfEnum.sys   [148992] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Bluetooth Transport Extensibility Miniport.) -- C:\WINDOWS\System32\drivers\BthMini.SYS   [45568] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Bluetooth Communications Driver.) -- C:\WINDOWS\System32\drivers\bthmodem.sys   [76800] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de bus Bluetooth.) -- C:\WINDOWS\System32\drivers\bthport.sys   [1570304] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de Miniport Bluetooth.) -- C:\WINDOWS\System32\drivers\BTHUSB.SYS   [110592] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - VHD BTT Filter Driver.) -- C:\WINDOWS\System32\drivers\bttflt.sys   [43832]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Button Converter Driver.) -- C:\WINDOWS\System32\drivers\buttonconverter.sys   [44032] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.QLogic Corporation - QLogic Gigabit Ethernet VBD.) -- C:\WINDOWS\System32\drivers\bxvbda.sys   [533816]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:47 A . (.Microsoft Corporation - Charge Arbiration Driver.) -- C:\WINDOWS\System32\drivers\CAD.sys   [66576]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:46 A . (.Microsoft Corporation - CD-ROM File System Driver.) -- C:\WINDOWS\System32\drivers\cdfs.sys   [100864] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:41 A . (.Microsoft Corporation - SCSI CD-ROM Driver.) -- C:\WINDOWS\System32\drivers\cdrom.sys   [175616] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:26 A . (.Microsoft Corporation - Event Aggregation Kernel Mode Library.) -- C:\WINDOWS\System32\drivers\CEA.sys   [82312]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - Chelsio iSCSI Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\cht4dx64.sys   [144184]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - Chelsio iSCSI VMiniport Driver.) -- C:\WINDOWS\System32\drivers\cht4sx64.sys   [319800]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - VF library for Chelsio ® T5/T6 Chipset.) -- C:\WINDOWS\System32\drivers\cht4vfx.sys   [28672] [Unsigned]  =>.Chelsio Communications
O58 - SDL:2019/12/07 10:07:54 A . (.Chelsio Communications - Virtual Bus Driver for Chelsio ® T5/T6 Chip.) -- C:\WINDOWS\System32\drivers\cht4vx64.sys   [1853752]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:29 A . (...) -- C:\WINDOWS\System32\drivers\cimfs.sys   [95232] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Consumer IR Class Driver for eHome.) -- C:\WINDOWS\System32\drivers\circlass.sys   [52224] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:14 A . (.Microsoft Corporation - SCSI Class System Dll.) -- C:\WINDOWS\System32\drivers\Classpnp.sys   [446456]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:12 A . (.Microsoft Corporation - Cloud Files Mini Filter Driver.) -- C:\WINDOWS\System32\drivers\cldflt.sys   [505856] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - Common Log File System Driver.) -- C:\WINDOWS\System32\drivers\clfs.sys   [425464]  =>.Microsoft®
O58 - SDL:2025/01/15 16:37:37 A . (.Microsoft Corporation - CLIP Service.) -- C:\WINDOWS\System32\drivers\ClipSp.sys   [1107952]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Control Method Battery Driver.) -- C:\WINDOWS\System32\drivers\CmBatt.sys   [36864] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Noyau Gestionnaire de configuration Configu.) -- C:\WINDOWS\System32\drivers\cmimcext.sys   [44024]  =>.Microsoft®
O58 - SDL:2025/01/15 16:37:40 A . (.Microsoft Corporation - Kernel Cryptography, Next Generation.) -- C:\WINDOWS\System32\drivers\cng.sys   [747600]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:37 A . (.Microsoft Corporation - CNG Hardware Assist algorithm provider.) -- C:\WINDOWS\System32\drivers\cnghwassist.sys   [40968]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:29 A . (.Microsoft Corporation - Console Driver.) -- C:\WINDOWS\System32\drivers\condrv.sys   [58336]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Crash Dump Driver.) -- C:\WINDOWS\System32\drivers\crashdmp.sys   [102880]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:26 A . (.Microsoft Corporation - DAM Kernel Driver.) -- C:\WINDOWS\System32\drivers\dam.sys   [107000]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - Xbox Device Authentication Driver.) -- C:\WINDOWS\System32\drivers\devauthe.sys   [47104] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/10/09 11:38:56 A . (.Microsoft Corporation - DFS Namespace Client Driver.) -- C:\WINDOWS\System32\drivers\dfsc.sys   [154112] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - PnP Disk Driver.) -- C:\WINDOWS\System32\drivers\disk.sys   [101856]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Crash Dump Disk Driver.) -- C:\WINDOWS\System32\drivers\Diskdump.sys   [41344]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Boot Over USB Dump Driver.) -- C:\WINDOWS\System32\drivers\Dmpusbstor.sys   [20480] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:57 A . (.Microsoft Corporation - Mémoire dynamique.) -- C:\WINDOWS\System32\drivers\dmvsc.sys   [59192]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmk.sys   [97792] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - Microsoft Trusted Audio Drivers.) -- C:\WINDOWS\System32\drivers\drmkaud.sys   [17360]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:39 A . (.Microsoft Corporation - ATAPI Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpata.sys   [40832]  =>.Microsoft®
O58 - SDL:2025/01/15 16:37:55 A . (.Microsoft Corporation - Bitlocker Drive Encryption Crashdump Filter.) -- C:\WINDOWS\System32\drivers\dumpfve.sys   [94840]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - SD Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsd.sys   [203232]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - SD Host Controller Crashdump Port Driver.) -- C:\WINDOWS\System32\drivers\dumpsdport.sys   [32768] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Storport Dump Driver.) -- C:\WINDOWS\System32\drivers\Dumpstorport.sys   [38384]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:06 A . (.Microsoft Corporation - DirectX Graphics Kernel.) -- C:\WINDOWS\System32\drivers\dxgkrnl.sys   [3815408]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:06 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms1.sys   [456160]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:06 A . (.Microsoft Corporation - DirectX Graphics MMS.) -- C:\WINDOWS\System32\drivers\dxgmms2.sys   [896992]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:47 A . (.Microsoft Corporation - Enhanced Storage Class driver for IEEE 1667.) -- C:\WINDOWS\System32\drivers\EhStorClass.sys   [96232]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Microsoft driver for storage devices suppor.) -- C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys   [124728]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Error Device Driver.) -- C:\WINDOWS\System32\drivers\errdev.sys   [15872] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.QLogic Corporation - QLogic 10 GigE VBD.) -- C:\WINDOWS\System32\drivers\evbda.sys   [3418936]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Microsoft Extended FAT File System.) -- C:\WINDOWS\System32\drivers\exfat.sys   [419296]  =>.Microsoft®
O58 - SDL:2025/02/15 01:25:41 A . (.Malwarebytes - Malwarebytes Anti-Ransomware Protection.) -- C:\WINDOWS\System32\drivers\farflt.sys   [202856]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Fast FAT File System Driver.) -- C:\WINDOWS\System32\drivers\fastfat.sys   [428016]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Floppy Disk Controller Driver.) -- C:\WINDOWS\System32\drivers\fdc.sys   [34816] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - Windows sandboxing and encryption filter.) -- C:\WINDOWS\System32\drivers\filecrypt.sys   [59392] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:46 A . (.Microsoft Corporation - FileInfo Filter Driver.) -- C:\WINDOWS\System32\drivers\fileinfo.sys   [94736]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:46 A . (.Microsoft Corporation - File Trace Filter Driver.) -- C:\WINDOWS\System32\drivers\filetrace.sys   [40448] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Floppy Driver.) -- C:\WINDOWS\System32\drivers\flpydisk.sys   [28672] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/12/11 14:35:26 A . (.Microsoft Corporation - Gestionnaire de filtres de système de fichi.) -- C:\WINDOWS\System32\drivers\fltMgr.sys   [435696]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:49 A . (.Microsoft Corporation - File System Dependency Manager Mini Filter.) -- C:\WINDOWS\System32\drivers\fsdepends.sys   [71152]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - File System Recognizer Driver.) -- C:\WINDOWS\System32\drivers\fs_rec.sys   [33592]  =>.Microsoft®
O58 - SDL:2025/01/15 16:37:55 A . (.Microsoft Corporation - BitLocker Drive Encryption Driver.) -- C:\WINDOWS\System32\drivers\fvevol.sys   [813064]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - FWP/IPsec Kernel-Mode API.) -- C:\WINDOWS\System32\drivers\FWPKCLNT.SYS   [503784]  =>.Microsoft®
O58 - SDL:2024/08/26 23:54:06 N . (.GIGA-BYTE TECHNOLOGY CO., LTD. - GIGA-BYTE Nonpnp Driver.) -- C:\WINDOWS\System32\drivers\gdrv3.sys   [52528] {4A042D7653FFB5CF06FB280A}.  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
O58 - SDL:2019/12/07 10:08:05 A . (.Microsoft Corporation - GPU Energy Kernel Driver.) -- C:\WINDOWS\System32\drivers\gpuenergydrv.sys   [8704] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/10/09 11:38:45 A . (.Microsoft Corporation - High Definition Audio Bus Driver.) -- C:\WINDOWS\System32\drivers\hdaudbus.sys   [138752] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - High Definition Audio Function Driver.) -- C:\WINDOWS\System32\drivers\HdAudio.sys   [430080] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Hid Battery Driver.) -- C:\WINDOWS\System32\drivers\hidbatt.sys   [39440]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de miniport Bluetooth pour les périp.) -- C:\WINDOWS\System32\drivers\hidbth.sys   [120320] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Bibliothèque Hid Class.) -- C:\WINDOWS\System32\drivers\hidclass.sys   [233472] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - I2C HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidi2c.sys   [57344] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - HID Button over Interrupt Driver.) -- C:\WINDOWS\System32\drivers\hidinterrupt.sys   [55824]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Infrared Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidir.sys   [48640] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\drivers\hidparse.sys   [46080] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - SPI HID Miniport Driver.) -- C:\WINDOWS\System32\drivers\hidspi.sys   [104448] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - HidSpi KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\HidSpiCx.sys   [92160] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\drivers\hidusb.sys   [44032] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:03 A . (.Microsoft Corporation - Network driver for proxying traffic.) -- C:\WINDOWS\System32\drivers\hnswfpdriver.sys   [22400]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Hewlett-Packard Company - Smart Array SAS/SATA Controller Media Drive.) -- C:\WINDOWS\System32\drivers\HpSAMD.sys   [64312]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:21 A . (.Microsoft Corporation - HTTP Pile du protocole.) -- C:\WINDOWS\System32\drivers\http.sys   [1584624]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:43 A . (.Microsoft Corporation - Hyper-V Crashdump.) -- C:\WINDOWS\System32\drivers\hvcrash.sys   [36208]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:30 A . (.Microsoft Corporation - Hypervisor Boot Driver.) -- C:\WINDOWS\System32\drivers\hvservice.sys   [96248]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:01 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider.) -- C:\WINDOWS\System32\drivers\hvsocket.sys   [149480]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:02 A . (.Microsoft Corporation - Microsoft Hyper-V Socket Provider Control D.) -- C:\WINDOWS\System32\drivers\hvsocketcontrol.sys   [37352]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:45 A . (.Microsoft Corporation - Hardware Policy Driver.) -- C:\WINDOWS\System32\drivers\hwpolicy.sys   [34288]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:57 A . (.Microsoft Corporation - Microsoft VMBus Synthetic Keyboard Driver.) -- C:\WINDOWS\System32\drivers\hyperkbd.sys   [27448]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:43 A . (.Microsoft Corporation - Microsoft VMBus Video Device Miniport Drive.) -- C:\WINDOWS\System32\drivers\HyperVideo.sys   [42880]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Pilote de port i8042.) -- C:\WINDOWS\System32\drivers\i8042prt.sys   [118272] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel(R) Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iagpio.sys   [36352] [Unsigned]  =>.Intel(R) Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel(R) Corporation - Intel(R) Serial IO I2C Driver.) -- C:\WINDOWS\System32\drivers\iai2c.sys   [91136] [Unsigned]  =>.Intel(R) Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys   [79360] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_BXT_P.sys   [93184] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_CNL.sys   [112128] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO GPIO Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2_GLK.sys   [96256] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys   [171520] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_BXT_P.sys   [175104] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_CNL.sys   [177152] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:47 A . (.Intel Corporation - Intel(R) Serial IO I2C Driver v2.) -- C:\WINDOWS\System32\drivers\iaLPSS2i_I2C_GLK.sys   [177664] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.Intel Corporation - Intel(R) Serial IO GPIO Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys   [38128]  =>.Intel Corporation - Client Components Group®
O58 - SDL:2019/12/07 10:07:50 A . (.Intel Corporation - Intel(R) Serial IO I2C Controller Driver.) -- C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys   [113152] [Unsigned]  =>.Intel Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Intel Corporation - Intel(R) Rapid Storage Technology driver (i.) -- C:\WINDOWS\System32\drivers\iaStorAVC.sys   [884752]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Intel Corporation - Intel Matrix Storage Manager driver - x64.) -- C:\WINDOWS\System32\drivers\iaStorV.sys   [412176]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - InfiniBand Fabric Bus Driver.) -- C:\WINDOWS\System32\drivers\ibbus.sys   [558904]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:29 A . (.Microsoft Corporation - Indirect displays kernel-mode filter driver.) -- C:\WINDOWS\System32\drivers\IndirectKmd.sys   [47104] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Intel PCI IDE Driver.) -- C:\WINDOWS\System32\drivers\intelide.sys   [20976]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:41 A . (.Microsoft Corporation - Intel Power Engine Plugin.) -- C:\WINDOWS\System32\drivers\intelpep.sys   [420504]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:47 A . (.Microsoft Corporation - Intel Power Limit Driver.) -- C:\WINDOWS\System32\drivers\intelpmax.sys   [30720] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\intelppm.sys   [234992]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:41 A . (.Microsoft Corporation - Intel Telemetry Driver.) -- C:\WINDOWS\System32\drivers\IntelTA.sys   [27784]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:45 A . (.Microsoft Corporation - Filtre de contrôle de taux d’E/S.) -- C:\WINDOWS\System32\drivers\iorate.sys   [58328]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - IP FILTER DRIVER.) -- C:\WINDOWS\System32\drivers\ipfltdrv.sys   [91648] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - PILOT IPMI WMI.) -- C:\WINDOWS\System32\drivers\IPMIDrv.sys   [118752]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:29 A . (.Microsoft Corporation - IP Network Address Translator.) -- C:\WINDOWS\System32\drivers\ipnat.sys   [228352] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - IPT Driver.) -- C:\WINDOWS\System32\drivers\ipt.sys   [59704]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de bus PNP ISA.) -- C:\WINDOWS\System32\drivers\isapnp.sys   [24040]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - Avago SAS Gen3.5 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\ItSas35i.sys   [172344]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Pilote de la classe Clavier.) -- C:\WINDOWS\System32\drivers\kbdclass.sys   [71480]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Pilote de filtre clavier HID.) -- C:\WINDOWS\System32\drivers\kbdhid.sys   [46592] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Microsoft Kernel Debugger Network Miniport.) -- C:\WINDOWS\System32\drivers\kdnic.sys   [33296]  =>.Microsoft®
O58 - SDL:2018/09/08 07:15:56 A . (.QFX Software Corporation - KeyScrambler Keyboard Encryption Driver.) -- C:\WINDOWS\System32\drivers\keyscrambler.sys   [243800]  =>.QFX Software Corporation®
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Network Power Dependency Broker.) -- C:\WINDOWS\System32\drivers\KNetPwrDepBroker.sys   [32256] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/10/09 11:38:58 A . (.Microsoft Corporation - Kernel CSA Library.) -- C:\WINDOWS\System32\drivers\ks.sys   [457216] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/01/15 16:37:40 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecdd.sys   [150008]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:12 A . (.Microsoft Corporation - Kernel Security Support Provider Interface.) -- C:\WINDOWS\System32\drivers\ksecpkg.sys   [185320]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:17 A . (.Microsoft Corporation - Kernel Streaming WOW Thunk Service.) -- C:\WINDOWS\System32\drivers\ksthunk.sys   [37376] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:03 A . (.Microsoft Corporation - Network driver for bridging packets between.) -- C:\WINDOWS\System32\drivers\l2bridge.sys   [59880]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:55 A . (.Microsoft Corporation - Link-Layer Topology Mapper I/O Driver.) -- C:\WINDOWS\System32\drivers\lltdio.sys   [72704] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation - LSI Fusion-MPT SAS Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas.sys   [108856]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation - LSI SAS Gen2 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas2i.sys   [124216]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - Avago SAS Gen3 Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sas3i.sys   [135992]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation - LSI SSS PCIe/Flash Driver (StorPort).) -- C:\WINDOWS\System32\drivers\lsi_sss.sys   [82744]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:24 A . (.Microsoft Corporation - Pilote de filtre de virtualisation de fichi.) -- C:\WINDOWS\System32\drivers\luafv.sys   [147968] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:02 A . (.Microsoft Corporation - LX Core.) -- C:\WINDOWS\System32\drivers\lxcore.sys   [1134064]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:02 A . (.Microsoft Corporation - LXSS.) -- C:\WINDOWS\System32\drivers\lxss.sys   [16872]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - MA-USB Host Controller Driver.) -- C:\WINDOWS\System32\drivers\mausbhost.sys   [537608]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - MA-USB IP Driver.) -- C:\WINDOWS\System32\drivers\mausbip.sys   [64016]  =>.Microsoft®
O58 - SDL:2024/08/25 23:22:26 A . (.Malwarebytes - Malwarebytes Anti-Exploit.) -- C:\WINDOWS\System32\drivers\mbae64.sys   [158640]  =>.Microsoft®
O58 - SDL:2025/02/15 01:25:42 A . (.Malwarebytes - Malwarebytes Real-Time Protection.) -- C:\WINDOWS\System32\drivers\mbam.sys   [80448]  =>.Microsoft®
O58 - SDL:2025/02/14 19:47:07 A . (.Malwarebytes - Malwarebytes Chameleon.) -- C:\WINDOWS\System32\drivers\MbamChameleon.sys   [234072]  =>.Microsoft®
O58 - SDL:2024/08/25 23:22:25 A . (.Malwarebytes - Malwarebytes Early Launch Anti-Malware Driv.) -- C:\WINDOWS\System32\drivers\MbamElam.sys   [21480]  =>.Microsoft®
O58 - SDL:2025/02/06 03:19:46 A . (.Malwarebytes - Malwarebytes SwissArmy.) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys   [239568]  =>.Microsoft®
O58 - SDL:2024/12/11 14:35:01 A . (.Microsoft Corporation - Windows Mobile Broadband Class Extension.) -- C:\WINDOWS\System32\drivers\MbbCx.sys   [399360] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:00 A . (.Microsoft Corporation - Medium changer class driver.) -- C:\WINDOWS\System32\drivers\mcd.sys   [25088] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas.sys   [59704]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\MegaSas2i.sys   [81720]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\megasas35i.sys   [105480]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.LSI Corporation, Inc. - LSI MegaRAID Software RAID Driver.) -- C:\WINDOWS\System32\drivers\megasr.sys   [575800]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - Pilote de transport Microsoft Bluetooth Avr.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys   [66048] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Legacy Bluetooth LE Bus Enumerator.) -- C:\WINDOWS\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys   [106496] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - MLX4 Bus Driver.) -- C:\WINDOWS\System32\drivers\mlx4_bus.sys   [1131320]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:48 A . (.Microsoft Corporation - MMCSS Driver.) -- C:\WINDOWS\System32\drivers\mmcss.sys   [53248] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:00 A . (.Microsoft Corporation - Pilote de périphérique modem.) -- C:\WINDOWS\System32\drivers\modem.sys   [47104] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:41 A . (.Microsoft Corporation - Monitor Driver.) -- C:\WINDOWS\System32\drivers\monitor.sys   [83456] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Pilote de la classe Souris.) -- C:\WINDOWS\System32\drivers\mouclass.sys   [67600]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Pilote de filtre souris HID.) -- C:\WINDOWS\System32\drivers\mouhid.sys   [35328] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - Gestionnaire des points de montage.) -- C:\WINDOWS\System32\drivers\mountmgr.sys   [110392]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:33 A . (.Microsoft Corporation - Microsoft Protection Service Driver.) -- C:\WINDOWS\System32\drivers\mpsdrv.sys   [80896] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/01/15 16:37:53 A . (.Microsoft Corporation - Message Queuing Device Driver.) -- C:\WINDOWS\System32\drivers\mqac.sys   [190976] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:02 A . (.Microsoft Corporation - Windows NT WebDav Minirdr.) -- C:\WINDOWS\System32\drivers\mrxdav.sys   [165888] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/10/09 11:38:56 A . (.Microsoft Corporation - Minirdr SMB Windows NT.) -- C:\WINDOWS\System32\drivers\mrxsmb.sys   [584696]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:15 A . (.Microsoft Corporation - Longhorn SMB Downlevel SubRdr.) -- C:\WINDOWS\System32\drivers\mrxsmb10.sys   [307712] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Longhorn SMB 2.0 Redirector.) -- C:\WINDOWS\System32\drivers\mrxsmb20.sys   [264160]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - Mailslot driver.) -- C:\WINDOWS\System32\drivers\msfs.sys   [44048]  =>.Microsoft®
O58 - SDL:2024/09/12 00:27:51 A . (.Microsoft Corporation - GPIO Class Extension Driver.) -- C:\WINDOWS\System32\drivers\msgpioclx.sys   [185840]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - GPIO Button Driver.) -- C:\WINDOWS\System32\drivers\msgpiowin32.sys   [56120]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:36 A . (.Microsoft Corporation - Pass-through HID to KMDF Filter Driver.) -- C:\WINDOWS\System32\drivers\mshidkmdf.sys   [8192] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:16 A . (.Microsoft Corporation - Pilote direct pour interface HID-UMDF.) -- C:\WINDOWS\System32\drivers\mshidumdf.sys   [12288] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:36 A . (.Microsoft Corporation - Hardware Notification Class Extension Drive.) -- C:\WINDOWS\System32\drivers\mshwnclx.sys   [30208] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - ISA Driver.) -- C:\WINDOWS\System32\drivers\msisadrv.sys   [21480]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Microsoft iSCSI Initiator Driver.) -- C:\WINDOWS\System32\drivers\msiscsi.sys   [294256]  =>.Microsoft®
O58 - SDL:2024/10/09 11:38:58 A . (.Microsoft Corporation - MS KS Server.) -- C:\WINDOWS\System32\drivers\mskssrv.sys   [38400] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:05 A . (.Microsoft Corporation - Pilote de protocole LLDP (Link Layer Discov.) -- C:\WINDOWS\System32\drivers\mslldp.sys   [78848] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:58 A . (.Microsoft Corporation - MS Proxy Clock.) -- C:\WINDOWS\System32\drivers\mspclock.sys   [11264] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:58 A . (.Microsoft Corporation - MS Proxy Quality Manager.) -- C:\WINDOWS\System32\drivers\mspqm.sys   [11264] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:43 A . (.Microsoft Corporation - Windows QUIC Driver.) -- C:\WINDOWS\System32\drivers\msquic.sys   [323440]  =>.Microsoft®
O58 - SDL:2024/10/09 11:38:55 A . (.Microsoft Corporation - Kernel Remote Procedure Call Provider.) -- C:\WINDOWS\System32\drivers\msrpc.sys   [379248]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - System Management BIOS Driver.) -- C:\WINDOWS\System32\drivers\mssmbios.sys   [47928]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:58 A . (.Microsoft Corporation - WDM Tee/Communication Transform Filter.) -- C:\WINDOWS\System32\drivers\mstee.sys   [12288] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.Microsoft Corporation - Pilote HID multipoint Microsoft.) -- C:\WINDOWS\System32\drivers\MTConfig.sys   [17920] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Pilote de fournisseur UNC multiples.) -- C:\WINDOWS\System32\drivers\mup.sys   [134624]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Marvell Semiconductor, Inc. - Marvell Flash Controller Driver.) -- C:\WINDOWS\System32\drivers\mvumis.sys   [63800]  =>.Microsoft®
O58 - SDL:2025/02/15 01:25:40 A . (.Malwarebytes - Malwarebytes Web Protection.) -- C:\WINDOWS\System32\drivers\mwac.sys   [189776]  =>.Malwarebytes Inc.®
O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - NetworkDirect Support Filter Driver.) -- C:\WINDOWS\System32\drivers\ndfltr.sys   [146232]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - NDIS (Network Driver Interface Specificatio.) -- C:\WINDOWS\System32\drivers\ndis.sys   [1478648]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:48 A . (.Microsoft Corporation - Microsoft NDIS Packet Capture Filter Driver.) -- C:\WINDOWS\System32\drivers\ndiscap.sys   [54272] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:02 A . (.Microsoft Corporation - Microsoft Network Adapter Multiplexor.) -- C:\WINDOWS\System32\drivers\NdisImPlatform.sys   [135168] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - NDIS 3.0 connection wrapper driver.) -- C:\WINDOWS\System32\drivers\ndistapi.sys   [28672] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - Pilote d’E/S du mode utilisateur NDIS.) -- C:\WINDOWS\System32\drivers\ndisuio.sys   [70656] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:05 A . (.Microsoft Corporation - Énumérateur de cartes réseau virtuelles Mic.) -- C:\WINDOWS\System32\drivers\NdisVirtualBus.sys   [23040] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - MS PPP Framing Driver (Strong Encryption).) -- C:\WINDOWS\System32\drivers\ndiswan.sys   [208384] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:48 A . (.Microsoft Corporation - RDMA Sample Driver.) -- C:\WINDOWS\System32\drivers\NDKPing.sys   [72720]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - NDIS Proxy.) -- C:\WINDOWS\System32\drivers\ndproxy.sys   [93696] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:33 A . (.Microsoft Corporation - Windows Network Data Usage Monitoring Drive.) -- C:\WINDOWS\System32\drivers\Ndu.sys   [131584] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:46 A . (.Microsoft Corporation - Network Adapter Class Extension for WDF.) -- C:\WINDOWS\System32\drivers\NetAdapterCx.sys   [210944] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:04 A . (.Microsoft Corporation - NetBIOS interface driver.) -- C:\WINDOWS\System32\drivers\netbios.sys   [64312]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:02 A . (.Microsoft Corporation - MBT Transport driver.) -- C:\WINDOWS\System32\drivers\netbt.sys   [341504] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - Network I/O Subsystem.) -- C:\WINDOWS\System32\drivers\netio.sys   [613896]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:43 A . (.Microsoft Corporation - Miniport NDIS virtuel.) -- C:\WINDOWS\System32\drivers\netvsc.sys   [303992]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:14 A . (.Microsoft Corporation - NPFS Driver.) -- C:\WINDOWS\System32\drivers\npfs.sys   [94712]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Named pipe service triggers.) -- C:\WINDOWS\System32\drivers\npsvctrig.sys   [27648] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:46 A . (.Microsoft Corporation - NSI Proxy.) -- C:\WINDOWS\System32\drivers\nsiproxy.sys   [48640] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:14 A . (.Microsoft Corporation - Pilote du système de fichiers NT.) -- C:\WINDOWS\System32\drivers\ntfs.sys   [2842096]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:58 A . (.Microsoft Corporation - NTOS extension host driver.) -- C:\WINDOWS\System32\drivers\ntosext.sys   [20792]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - NULL Driver.) -- C:\WINDOWS\System32\drivers\null.sys   [7680] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Pilote de périphérique NVDIMM.) -- C:\WINDOWS\System32\drivers\nvdimm.sys   [168464]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) RAID Driver.) -- C:\WINDOWS\System32\drivers\nvraid.sys   [150328]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.NVIDIA Corporation - NVIDIA® nForce(TM) Sata Performance Driver.) -- C:\WINDOWS\System32\drivers\nvstor.sys   [166200]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:15 A . (.Microsoft Corporation - Pilote de miniport WiFi natif.) -- C:\WINDOWS\System32\drivers\nwifi.sys   [758784] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:02 A . (.Microsoft Corporation - Plan 9 redirector.) -- C:\WINDOWS\System32\drivers\p9rdr.sys   [94704]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:26 A . (.Microsoft Corporation - Planificateur de paquets QoS.) -- C:\WINDOWS\System32\drivers\pacer.sys   [162784]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Pilote de port parallèle.) -- C:\WINDOWS\System32\drivers\parport.sys   [109056] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:46 A . (.Microsoft Corporation - Partition driver.) -- C:\WINDOWS\System32\drivers\partmgr.sys   [184704]  =>.Microsoft®
O58 - SDL:2024/08/23 15:32:32 A . (.Microsoft Corporation - Pass thru parser.) -- C:\WINDOWS\System32\drivers\passthruparser.sys   [39440]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:02 A . (.Microsoft Corporation - Énumérateur Plug-and-Play PCI pour NT.) -- C:\WINDOWS\System32\drivers\pci.sys   [479728]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Generic PCI IDE Bus Driver.) -- C:\WINDOWS\System32\drivers\pciide.sys   [17896]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - PCI IDE Bus Driver Extension.) -- C:\WINDOWS\System32\drivers\pciidex.sys   [57832]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Pilote de bus PCMCIA.) -- C:\WINDOWS\System32\drivers\pcmcia.sys   [127800]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:42 A . (.Microsoft Corporation - Performance Counters for Windows Driver.) -- C:\WINDOWS\System32\drivers\pcw.sys   [60272]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Power Dependency Coordinator Driver.) -- C:\WINDOWS\System32\drivers\pdc.sys   [162272]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:50 A . (.Microsoft Corporation - Protected Environment Authentication and Au.) -- C:\WINDOWS\System32\drivers\PEAuth.sys   [823296] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas2i.sys   [58680]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Avago Technologies - MEGASAS RAID Controller Driver for Windows.) -- C:\WINDOWS\System32\drivers\percsas3i.sys   [68408]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:57 A . (.Microsoft Corporation - Pilote du moniteur de paquets.) -- C:\WINDOWS\System32\drivers\PktMon.sys   [131560]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de mémoire persistante.) -- C:\WINDOWS\System32\drivers\pmem.sys   [142304]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Pilote mémoire Plug and Play.) -- C:\WINDOWS\System32\drivers\pnpmem.sys   [17408] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:36 A . (.Microsoft Corporation - Port Device Class Configuration Filter Driv.) -- C:\WINDOWS\System32\drivers\portcfg.sys   [27136] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - Port Class (Class Driver for Port/Miniport.) -- C:\WINDOWS\System32\drivers\portcls.sys   [388608] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/11/15 01:11:35 A . (.Microsoft Corporation - Windows Projected File System FS Filter Dri.) -- C:\WINDOWS\System32\drivers\prjflt.sys   [254472]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Processor Device Driver.) -- C:\WINDOWS\System32\drivers\processr.sys   [219504]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:33 A . (.Microsoft Corporation - Time Travel Debugging Process Launch Monito.) -- C:\WINDOWS\System32\drivers\ProcLaunchMon.sys   [43448]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:03 A . (.Microsoft Corporation - Analyseur de disque dur virtuel de proxy.) -- C:\WINDOWS\System32\drivers\pvhdparser.sys   [62448]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:05 A . (.Microsoft Corporation - Pilote du support de Microsoft Quality Wind.) -- C:\WINDOWS\System32\drivers\qwavedrv.sys   [53248] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - RAM Disk Driver.) -- C:\WINDOWS\System32\drivers\ramdisk.sys   [42296]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:04 A . (.Microsoft Corporation - RAS Automatic Connection Driver.) -- C:\WINDOWS\System32\drivers\rasacd.sys   [20480] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - RAS L2TP mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\rasl2tp.sys   [112640] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - RAS PPPoE mini-port/call-manager driver.) -- C:\WINDOWS\System32\drivers\raspppoe.sys   [89088] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - Peer-to-Peer Tunneling Protocol.) -- C:\WINDOWS\System32\drivers\raspptp.sys   [105984] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - RAS SSTP Miniport Call Manager.) -- C:\WINDOWS\System32\drivers\rassstp.sys   [87552] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Pilote du sous-système de mise en mémoire t.) -- C:\WINDOWS\System32\drivers\rdbss.sys   [459248]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Microsoft RDP Bus Device driver.) -- C:\WINDOWS\System32\drivers\rdpbus.sys   [28672] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:57 A . (.Microsoft Corporation - Redirecteur de périphérique de Microsoft RD.) -- C:\WINDOWS\System32\drivers\rdpdr.sys   [170496] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/11/15 01:11:34 A . (.Microsoft Corporation - Microsoft RDP Video Miniport driver.) -- C:\WINDOWS\System32\drivers\rdpvideominiport.sys   [32776]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:54 A . (.Microsoft Corporation - ReadyBoost Driver.) -- C:\WINDOWS\System32\drivers\rdyboost.sys   [297784]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:11 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\WINDOWS\System32\drivers\refs.sys   [2007032]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:11 A . (.Microsoft Corporation - Pilote du système de fichiers ReFS NT.) -- C:\WINDOWS\System32\drivers\refsv1.sys   [993800]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Bluetooth RFCOMM Driver.) -- C:\WINDOWS\System32\drivers\rfcomm.sys   [213504] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:44 A . (.Microsoft Corporation - Microsoft RemoteFX VM Transport.) -- C:\WINDOWS\System32\drivers\RfxVmt.sys   [8192] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - ResourceHub Proxy Driver.) -- C:\WINDOWS\System32\drivers\rhproxy.sys   [115712] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:29 A . (.Microsoft Corporation - Reliable Multicast Transport.) -- C:\WINDOWS\System32\drivers\rmcast.sys   [165376] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:07 A . (.Microsoft Corporation - Remote NDIS Miniport.) -- C:\WINDOWS\System32\drivers\RNDISMP.sys   [37376] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:51 A . (.Microsoft Corporation - Legacy Non-Pnp Modem Device Driver.) -- C:\WINDOWS\System32\drivers\rootmdm.sys   [13824] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:55 A . (.Microsoft Corporation - Link-Layer Topology Responder Driver for ND.) -- C:\WINDOWS\System32\drivers\rspndr.sys   [89088] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2022/02/21 14:33:00 A . (.Realtek - Realtek 8125/8136/8168/8169 NDIS 6.40 64-bi.) -- C:\WINDOWS\System32\drivers\rt640x64.sys   [1163096]  =>.Realtek Semiconductor Corp.®
O58 - SDL:2019/12/07 10:08:09 A . (.Realtek - Realtek PCIe GBE Family Controller Flight.) -- C:\WINDOWS\System32\drivers\rteth.sys   [48640] [Unsigned]  =>.Realtek
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - SBP-2 Protocol Driver.) -- C:\WINDOWS\System32\drivers\sbp2port.sys   [119272]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:50 A . (.Microsoft Corporation - Pilote de filtre de lecteur de carte à puce.) -- C:\WINDOWS\System32\drivers\scfilter.sys   [44032] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de bus de mémoire de classe stockage.) -- C:\WINDOWS\System32\drivers\scmbus.sys   [159728]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:51 A . (.Microsoft Corporation - SCSI Port Driver.) -- C:\WINDOWS\System32\drivers\scsiport.sys   [189296]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - Pilote du bus numérique sécurisé (SD).) -- C:\WINDOWS\System32\drivers\sdbus.sys   [312800]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - SDF Reflector.) -- C:\WINDOWS\System32\drivers\SDFRd.sys   [35128]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:49 A . (.Microsoft Corporation - SD Host Controller Port Driver.) -- C:\WINDOWS\System32\drivers\sdport.sys   [106472]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de classe de stockage SD.) -- C:\WINDOWS\System32\drivers\sdstor.sys   [105328]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:36 A . (.Microsoft Corporation - Serial Class Extension.) -- C:\WINDOWS\System32\drivers\SerCx.sys   [86328]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:36 A . (.Microsoft Corporation - Serial Class Extension V2.) -- C:\WINDOWS\System32\drivers\SerCx2.sys   [173072]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Serial Port Enumerator.) -- C:\WINDOWS\System32\drivers\serenum.sys   [27648] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Pilote de périphérique série.) -- C:\WINDOWS\System32\drivers\serial.sys   [90624] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Pilote de filtre souris série.) -- C:\WINDOWS\System32\drivers\sermouse.sys   [29184] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - SCSI Floppy Driver.) -- C:\WINDOWS\System32\drivers\sfloppy.sys   [19456] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:33 A . (.Microsoft Corporation - System Guard Runtime Monitor Agent Driver.) -- C:\WINDOWS\System32\drivers\SgrmAgent.sys   [88080]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Silicon Integrated Systems Corp. - SiS RAID Stor Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid2.sys   [44856]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Silicon Integrated Systems - SiS AHCI Stor-Miniport Driver.) -- C:\WINDOWS\System32\drivers\sisraid4.sys   [81720]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - Sleep Study Helper.) -- C:\WINDOWS\System32\drivers\SleepStudyHelper.sys   [38200]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Microsemi Corportation - Storport Miniport Driver for SmartRAID/Smar.) -- C:\WINDOWS\System32\drivers\SmartSAMD.sys   [209720]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:09 A . (.Microsoft Corporation - Smart Card Driver Library.) -- C:\WINDOWS\System32\drivers\smclib.sys   [21504] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Storage Spaces Dump Driver.) -- C:\WINDOWS\System32\drivers\spacedump.sys   [220128]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:34 A . (.Microsoft Corporation - Storage Spaces Parser.) -- C:\WINDOWS\System32\drivers\spaceparser.sys   [26624] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Storage Spaces Driver.) -- C:\WINDOWS\System32\drivers\spaceport.sys   [682864]  =>.Microsoft®
O58 - SDL:2019/12/07 15:52:56 A . (.Microsoft Corporation - Holographic Spatial Graph Filter.) -- C:\WINDOWS\System32\drivers\SpatialGraphFilter.sys   [90936]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - SPB Class Extension.) -- C:\WINDOWS\System32\drivers\SpbCx.sys   [90096]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:15 A . (.Microsoft Corporation - Server driver.) -- C:\WINDOWS\System32\drivers\srv.sys   [445440] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Pilote de serveur SMB 2.0.) -- C:\WINDOWS\System32\drivers\srv2.sys   [792064] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:47 A . (.Microsoft Corporation - Server Network driver.) -- C:\WINDOWS\System32\drivers\srvnet.sys   [318976] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.Promise Technology, Inc. - Promise SuperTrak EX Series Driver for Wind.) -- C:\WINDOWS\System32\drivers\stexstor.sys   [31032]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - MS AHCI Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storahci.sys   [187376]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Microsoft NVM Express Storport Miniport Dri.) -- C:\WINDOWS\System32\drivers\stornvme.sys   [165232]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Microsoft Storage Port Driver.) -- C:\WINDOWS\System32\drivers\storport.sys   [725488]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - Filtre de qualité de service de stockage.) -- C:\WINDOWS\System32\drivers\storqosflt.sys   [94176]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - MS UFS Storport Miniport Driver.) -- C:\WINDOWS\System32\drivers\storufs.sys   [66528]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:43 A . (.Microsoft Corporation - Storage VSC Driver.) -- C:\WINDOWS\System32\drivers\storvsc.sys   [45424]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - Pilote du fournisseur de services de virtua.) -- C:\WINDOWS\System32\drivers\storvsp.sys   [184288]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:00 A . (.Microsoft Corporation - WDM CODEC Class Device Driver 2.0.) -- C:\WINDOWS\System32\drivers\stream.sys   [82432] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:44 A . (.Microsoft Corporation - Microsoft RemoteFX Synth3D Video VSC.) -- C:\WINDOWS\System32\drivers\Synth3dVsc.sys   [6656] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:09:00 A . (.Microsoft Corporation - SCSI Tape Class Driver.) -- C:\WINDOWS\System32\drivers\tape.sys   [33280] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:52 A . (.Microsoft Corporation - Export driver for kernel mode TPM API.) -- C:\WINDOWS\System32\drivers\tbs.sys   [32736]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - Pilote TCP/IP.) -- C:\WINDOWS\System32\drivers\tcpip.sys   [2993120]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:02 A . (.Microsoft Corporation - TCP/IP Registry Compatibility Driver.) -- C:\WINDOWS\System32\drivers\tcpipreg.sys   [56320] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - TDI Wrapper.) -- C:\WINDOWS\System32\drivers\tdi.sys   [39736]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:41 A . (.Microsoft Corporation - TDI Translation Driver.) -- C:\WINDOWS\System32\drivers\tdx.sys   [118752]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Terminal Server Input Driver.) -- C:\WINDOWS\System32\drivers\terminpt.sys   [41272]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:15 A . (.Microsoft Corporation - Kernel Transaction Manager Driver.) -- C:\WINDOWS\System32\drivers\tm.sys   [146936]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de périphérique TPM.) -- C:\WINDOWS\System32\drivers\tpm.sys   [259456]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - Pilote de filtre pour concentrateur USB du.) -- C:\WINDOWS\System32\drivers\TsUsbFlt.sys   [66560] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:41 A . (.Microsoft Corporation - Remote Desktop Generic USB Driver.) -- C:\WINDOWS\System32\drivers\TsUsbGD.sys   [37888] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:02 A . (.Microsoft Corporation - Pilote d’interface de tunnel Microsoft.) -- C:\WINDOWS\System32\drivers\tunnel.sys   [129024] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Microsoft Uasp Driver.) -- C:\WINDOWS\System32\drivers\uaspstor.sys   [83824]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - USB Connector Manager KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmCx.sys   [160256] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:37 A . (.Microsoft Corporation - UCM-TCPCI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmTcpciCx.sys   [188416] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - UCM-UCSI ACPI Client Driver.) -- C:\WINDOWS\System32\drivers\UcmUcsiAcpiClient.sys   [36864] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - UCM-UCSI KMDF Class Extension.) -- C:\WINDOWS\System32\drivers\UcmUcsiCx.sys   [113152] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/12/11 14:35:02 A . (.Microsoft Corporation - User Choice Protection Driver.) -- C:\WINDOWS\System32\drivers\UCPD.sys   [86016] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - USB Controller Extension.) -- C:\WINDOWS\System32\drivers\Ucx01000.sys   [259896]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:09 A . (.Microsoft Corporation - "udecx.DRIVER".) -- C:\WINDOWS\System32\drivers\Udecx.sys   [52736] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:00 A . (.Microsoft Corporation - UDF File System Driver.) -- C:\WINDOWS\System32\drivers\udfs.sys   [345088] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:30 A . (.Microsoft Corporation - USB Function Driver Class Extension.) -- C:\WINDOWS\System32\drivers\ufx01000.sys   [325608]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - UFX Synopsys Client Driver.) -- C:\WINDOWS\System32\drivers\ufxsynopsys.sys   [169440]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Generic pass-through driver.) -- C:\WINDOWS\System32\drivers\umpass.sys   [15360] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:37 A . (.Microsoft Corporation - USB Role-Switch Class Extension.) -- C:\WINDOWS\System32\drivers\urscx01000.sys   [76304]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:07 A . (.Microsoft Corporation - Remote NDIS USB Driver.) -- C:\WINDOWS\System32\drivers\usb8023.sys   [24064] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:02 A . (.Microsoft Corporation - USB Audio Class Driver.) -- C:\WINDOWS\System32\drivers\USBAUDIO.sys   [216576] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - Microsoft USB Audio Class 2.0 Driver.) -- C:\WINDOWS\System32\drivers\usbaudio2.sys   [260608] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:41 A . (.Microsoft Corporation - Universal Serial Bus Camera Driver.) -- C:\WINDOWS\System32\drivers\USBCAMD2.sys   [40448] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - USB Common Class Generic Parent Driver.) -- C:\WINDOWS\System32\drivers\usbccgp.sys   [191968]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:50 A . (.Microsoft Corporation - USB Consumer IR Driver for eHome.) -- C:\WINDOWS\System32\drivers\usbcir.sys   [107520] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Universal Serial Bus Driver.) -- C:\WINDOWS\System32\drivers\usbd.sys   [34176]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - EHCI eUSB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbehci.sys   [87408]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de concentrateur USB par défaut.) -- C:\WINDOWS\System32\drivers\usbhub.sys   [527344]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de concentrateur USB3.) -- C:\WINDOWS\System32\drivers\USBHUB3.SYS   [649696]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - OHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbohci.sys   [30208] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:37 A . (...) -- C:\WINDOWS\System32\drivers\UsbPmApi.sys   [53248] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de port USB 1.1 & 2.0.) -- C:\WINDOWS\System32\drivers\usbport.sys   [474592]  =>.Microsoft®
O58 - SDL:2024/10/09 11:38:45 A . (.Microsoft Corporation - USB Printer driver.) -- C:\WINDOWS\System32\drivers\usbprint.sys   [43008] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - USB Serial Driver.) -- C:\WINDOWS\System32\drivers\usbser.sys   [81408] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote de classe de stockage de masse USB.) -- C:\WINDOWS\System32\drivers\USBSTOR.SYS   [139632]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - UHCI USB Miniport Driver.) -- C:\WINDOWS\System32\drivers\usbuhci.sys   [39424] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote XHCI USB.) -- C:\WINDOWS\System32\drivers\USBXHCI.SYS   [620512]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Virtual Drive Root Enumerator.) -- C:\WINDOWS\System32\drivers\vdrvroot.sys   [67384]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - Extension du vérificateur de pilotes.) -- C:\WINDOWS\System32\drivers\VerifierExt.sys   [347448]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:03 A . (.Microsoft Corporation - Microsoft Azure VFP Extension.) -- C:\WINDOWS\System32\drivers\vfpext.sys   [1501184] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:02 A . (.Microsoft Corporation - VHD Miniport Driver.) -- C:\WINDOWS\System32\drivers\vhdmp.sys   [832008]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:03 A . (.Microsoft Corporation - Native VHD parser.) -- C:\WINDOWS\System32\drivers\vhdparser.sys   [52080]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Virtual HID Framework (VHF) Driver.) -- C:\WINDOWS\System32\drivers\vhf.sys   [47616] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:43 A . (.Microsoft Corporation - Microsoft Hyper-V Virtualization Infrastruc.) -- C:\WINDOWS\System32\drivers\Vid.sys   [642936]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - Video Port Driver.) -- C:\WINDOWS\System32\drivers\videoprt.sys   [47104] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:18:01 A . (.Microsoft Corporation - Hyper-V VMBus KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmcl.sys   [119280]  =>.Microsoft®
O58 - SDL:2024/08/24 00:18:02 A . (.Microsoft Corporation - Hyper-V VMBus Root KMCL.) -- C:\WINDOWS\System32\drivers\vmbkmclr.sys   [130032]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:14 A . (.Microsoft Corporation - Pilote enfant de bus VMBus sous Microsoft H.) -- C:\WINDOWS\System32\drivers\vmbus.sys   [169440]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:57 A . (.Microsoft Corporation - Microsoft VMBus HID Miniport.) -- C:\WINDOWS\System32\drivers\VMBusHID.sys   [36664]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:44 A . (.Microsoft Corporation - Pilote racine de bus VMBus sous Microsoft H.) -- C:\WINDOWS\System32\drivers\vmbusr.sys   [259544]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:57 A . (.Microsoft Corporation - Virtual Machine Generation Counter.) -- C:\WINDOWS\System32\drivers\vmgencounter.sys   [23864]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:57 A . (.Microsoft Corporation - Virtual Machine Guest Infrastructure Driver.) -- C:\WINDOWS\System32\drivers\vmgid.sys   [19768]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:57 A . (.Microsoft Corporation - Microsoft S3 Emulated Device Cap Driver.) -- C:\WINDOWS\System32\drivers\vms3cap.sys   [18960]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:30 A . (.Microsoft Corporation - VMSWITCH Proxy Driver.) -- C:\WINDOWS\System32\drivers\VmsProxy.sys   [52232]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:30 A . (.Microsoft Corporation - VmSwitch NIC Proxy Driver.) -- C:\WINDOWS\System32\drivers\VmsProxyHNic.sys   [40416]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:43 A . (.Microsoft Corporation - Pilote de filtre de stockage virtuel.) -- C:\WINDOWS\System32\drivers\vmstorfl.sys   [55272]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:30 A . (.Microsoft Corporation - Fournisseur de services de virtualisation d.) -- C:\WINDOWS\System32\drivers\vmswitch.sys   [2496504]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Pilote du gestionnaire de volumes.) -- C:\WINDOWS\System32\drivers\volmgr.sys   [92136]  =>.Microsoft®
O58 - SDL:2019/12/07 10:09:37 A . (.Microsoft Corporation - Pilote d’extension du gestionnaire de volum.) -- C:\WINDOWS\System32\drivers\volmgrx.sys   [389432]  =>.Microsoft®
O58 - SDL:2024/08/24 00:17:08 A . (.Microsoft Corporation - Pilote de cliché instantané du volume.) -- C:\WINDOWS\System32\drivers\volsnap.sys   [431088]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:53 A . (.Microsoft Corporation - Volume driver.) -- C:\WINDOWS\System32\drivers\volume.sys   [16696]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:44 A . (.Microsoft Corporation - Virtual PCI Bus.) -- C:\WINDOWS\System32\drivers\vpci.sys   [91504]  =>.Microsoft®
O58 - SDL:2024/08/24 00:15:44 A . (.Microsoft Corporation - Virtual PCI VSP Driver.) -- C:\WINDOWS\System32\drivers\vpcivsp.sys   [207216]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.VIA Technologies Inc.,Ltd - VIA RAID DRIVER FOR AMD-X86-64.) -- C:\WINDOWS\System32\drivers\vsmraid.sys   [166712]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.VIA Corporation - VIA StorX RAID Controller Driver.) -- C:\WINDOWS\System32\drivers\VSTXRAID.SYS   [305464]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:13 A . (.Microsoft Corporation - Virtual Wireless Bus Driver.) -- C:\WINDOWS\System32\drivers\vwifibus.sys   [29184] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:55 A . (.Microsoft Corporation - Virtual WiFi Filter Driver.) -- C:\WINDOWS\System32\drivers\vwififlt.sys   [77824] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:13 A . (.Microsoft Corporation - Virtual WiFi Miniport Driver.) -- C:\WINDOWS\System32\drivers\vwifimp.sys   [50688] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:53 A . (.Microsoft Corporation - Pilote de tablette Wacom à stylet série.) -- C:\WINDOWS\System32\drivers\wacompen.sys   [31232] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:17:05 A . (.Microsoft Corporation - MS Remote Access and Routing ARP Driver.) -- C:\WINDOWS\System32\drivers\wanarp.sys   [93184] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:05 A . (.Microsoft Corporation - Watchdog Driver.) -- C:\WINDOWS\System32\drivers\watchdog.sys   [74752] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:29 A . (.Microsoft Corporation - Windows Container Isolation FS Filter Drive.) -- C:\WINDOWS\System32\drivers\wcifs.sys   [210416]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:29 A . (.Microsoft Corporation - Windows Container Name Virtualization FS Fi.) -- C:\WINDOWS\System32\drivers\wcnfs.sys   [93184] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:15 A . (.Microsoft Corporation - Microsoft antimalware boot driver.) -- C:\WINDOWS\System32\drivers\WdBoot.sys   [46688]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:46 A . (.Microsoft Corporation - Runtime de l’infrastructure de pilotes en m.) -- C:\WINDOWS\System32\drivers\Wdf01000.sys   [829808]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:15 A . (.Microsoft Corporation - Microsoft antimalware file system filter dr.) -- C:\WINDOWS\System32\drivers\WdFilter.sys   [350136]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:46 A . (.Microsoft Corporation - Kernel Mode Driver Framework Loader.) -- C:\WINDOWS\System32\drivers\WdfLdr.sys   [60288]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:15 A . (.Microsoft Corporation - WDI Driver Framework Driver.) -- C:\WINDOWS\System32\drivers\WdiWiFi.sys   [967168] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:39 A . (.Microsoft Corporation - WDM Companion Filter.) -- C:\WINDOWS\System32\drivers\WdmCompanionFilter.sys   [23560]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:16 A . (.Microsoft Corporation - Windows Defender Network Stream Filter.) -- C:\WINDOWS\System32\drivers\WdNisDrv.sys   [54200]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:44 A . (.Microsoft Corporation - Windows Error Reporting Kernel Driver.) -- C:\WINDOWS\System32\drivers\werkernel.sys   [54664]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:08 A . (.Microsoft Corporation - WFP NDIS 6.30 Lightweight Filter Driver.) -- C:\WINDOWS\System32\drivers\wfplwfs.sys   [181768]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:40 A . (.Microsoft Corporation - Wim file system Driver.) -- C:\WINDOWS\System32\drivers\wimmount.sys   [40928]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:37 A . (.Microsoft Corporation - Windows Trusted Runtime Interface Driver.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys   [76984]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Windows Trusted Runtime Service Proxy Drive.) -- C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys   [18920]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:34 A . (.Microsoft Corporation - Windows Hypervisor Interface Driver.) -- C:\WINDOWS\System32\drivers\winhv.sys   [42504]  =>.Microsoft®
O58 - SDL:2024/11/15 01:11:30 A . (.Microsoft Corporation - Windows Hypervisor Root Interface Driver.) -- C:\WINDOWS\System32\drivers\winhvr.sys   [100320]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - Kernel WinMad.) -- C:\WINDOWS\System32\drivers\winmad.sys   [36152]  =>.Microsoft®
O58 - SDL:2025/02/12 12:04:03 A . (.Microsoft Corporation - Pilote NAT Windows.) -- C:\WINDOWS\System32\drivers\winnat.sys   [266752] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:56 A . (.Microsoft Corporation - Windows WinUSB Class Driver.) -- C:\WINDOWS\System32\drivers\winusb.sys   [107008] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:07:54 A . (.Mellanox - Kernel WinVerbs.) -- C:\WINDOWS\System32\drivers\winverbs.sys   [73016]  =>.Microsoft®
O58 - SDL:2019/12/07 10:07:54 A . (.Microsoft Corporation - Windows Management Interface for ACPI.) -- C:\WINDOWS\System32\drivers\wmiacpi.sys   [19456] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - WMILIB WMI support library Dll.) -- C:\WINDOWS\System32\drivers\wmilib.sys   [19472]  =>.Microsoft®
O58 - SDL:2024/08/24 00:16:40 A . (.Microsoft Corporation - Filtre de superposition Windows.) -- C:\WINDOWS\System32\drivers\wof.sys   [235376]  =>.Microsoft®
O58 - SDL:2019/12/07 15:52:58 A . (.Microsoft Corporation - Windows Portable Device Upper Class Filter.) -- C:\WINDOWS\System32\drivers\WpdUpFltr.sys   [32568]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:49 A . (.Microsoft Corporation - WPP Trace Recorder.) -- C:\WINDOWS\System32\drivers\WppRecorder.sys   [43832]  =>.Microsoft®
O58 - SDL:2019/12/07 10:08:41 A . (.Microsoft Corporation - Couche IFS Winsock2.) -- C:\WINDOWS\System32\drivers\ws2ifsl.sys   [25088] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:56 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFPf.sys   [136192] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:56 A . (.Microsoft Corporation - Windows Driver Foundation - User-mode Drive.) -- C:\WINDOWS\System32\drivers\WUDFRd.sys   [315904] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - Game Input Protocol Driver.) -- C:\WINDOWS\System32\drivers\xboxgip.sys   [340480] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:40 A . (.Microsoft Corporation - XINPUT filter driver for HID.) -- C:\WINDOWS\System32\drivers\xinputhid.sys   [61952] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/04/12 19:59:02 A . (...) -- C:\WINDOWS\System32\ampa.sys   [38320]  =>.CHENGDU AOMEI Tech Co., Ltd.®
O58 - SDL:2024/04/12 19:57:24 A . (...) -- C:\WINDOWS\System32\ddmdrv.sys   [35760]  =>.CHENGDU AOMEI Tech Co., Ltd.®
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Hid Class Library.) -- C:\WINDOWS\System32\hidclass.sys   [233472] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - Hid Parsing Library.) -- C:\WINDOWS\System32\hidparse.sys   [46080] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:15:42 A . (.Microsoft Corporation - USB Miniport Driver for Input Devices.) -- C:\WINDOWS\System32\hidusb.sys   [44032] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:09 A . (.Microsoft Corporation - Multi-User Win32 Driver.) -- C:\WINDOWS\System32\win32k.sys   [598016] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:07 A . (.Microsoft Corporation - Pilote du noyau Base Win32k.) -- C:\WINDOWS\System32\win32kbase.sys   [2913792] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:09 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\System32\win32kfull.sys   [3809792] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/08/24 00:16:27 A . (.Microsoft Corporation - Win32k non session driver.) -- C:\WINDOWS\System32\win32kns.sys   [30208] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2024/04/12 19:59:02 A . (...) -- C:\WINDOWS\SysWOW64\ampa.sys   [38320]  =>.CHENGDU AOMEI Tech Co., Ltd.®
O58 - SDL:2025/02/12 12:04:22 A . (.Microsoft Corporation - Multi-User Win32 Driver.) -- C:\WINDOWS\SysWOW64\win32k.sys   [330240] [Unsigned]  =>.Microsoft Corporation
O58 - SDL:2025/02/12 12:04:22 A . (.Microsoft Corporation - Full/Desktop Win32k Kernel Driver.) -- C:\WINDOWS\SysWOW64\win32kfull.sys   [2767872] [Unsigned]  =>.Microsoft Corporation

---\\ ASSOCIATION Shell Spawning (9) - 1s
O67 - Shell Spawning: <.bat> <batfile>[HKLM\..\open\Command] (...) -- "%1" %*  =>.Default.Value
O67 - Shell Spawning: <.cpl> <cplfile>[HKLM\..\cplopen\Command] (.Microsoft Corporation - Windows Control Panel.) -- C:\Windows\System32\control.exe [Unsigned]  =>.Microsoft Corporation
O67 - Shell Spawning: <.cmd> <cmdfile>[HKLM\..\open\Command] (...) -- "%1" %*  =>.Default.Value
O67 - Shell Spawning: <.com> <comfile>[HKLM\..\open\Command] (...) -- "%1" %*  =>.Default.Value
O67 - Shell Spawning: <.evt> <evtfile>[HKLM\..\open\Command] (.Microsoft Corporation - Lanceur du composant logiciel enfichable Ob.) -- C:\Windows\System32\eventvwr.exe [Unsigned]  =>.Microsoft Corporation
O67 - Shell Spawning: <.exe> <exefile>[HKLM\..\open\Command] (...) -- "%1" %*  =>.Default.Value
O67 - Shell Spawning: <.js> <JSFile>[HKLM\..\open\Command] (...) -- C:\Windows\System32\WScript.exe "%1" %*  =>.Default.Value
O67 - Shell Spawning: <.reg> <regfile>[HKLM\..\open\Command] (.Microsoft Corporation - Éditeur du Registre.) -- C:\Windows\regedit.exe [Unsigned]  =>.Microsoft Corporation
O67 - Shell Spawning: <.scr> <scrfile>[HKLM\..\open\Command] (...) -- "%1" /S  =>.Default.Value

---\\ MENU DE DÉMARRAGE INTERNET (8) - 0s
O68 - StartMenuInternet: <Firefox-308046B0AF4A39CB> <Mozilla Firefox> [64Bits][HKLM\..\Shell\open\Command] (.Mozilla Corporation - Firefox.) -- C:\Program Files\Mozilla Firefox\firefox.exe   =>.Mozilla Corporation®
O68 - StartMenuInternet: <Microsoft Edge> <Microsoft Edge> [64Bits][HKLM\..\Shell\open\Command] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe   =>.Microsoft®
O68 - StartMenuInternet: <Firefox-308046B0AF4A39CB> <Mozilla Firefox> [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe  =>.Mozilla Corporation
O68 - StartMenuInternet: <Microsoft Edge> <Microsoft Edge> [64Bits][HKLM\..\InstallInfo\ShowIconsCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe  =>.Microsoft Corporation
O68 - StartMenuInternet: <Firefox-308046B0AF4A39CB> <Mozilla Firefox> [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe  =>.Mozilla Corporation
O68 - StartMenuInternet: <Microsoft Edge> <Microsoft Edge> [64Bits][HKLM\..\InstallInfo\ReinstallCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe  =>.Microsoft Corporation
O68 - StartMenuInternet: <Firefox-308046B0AF4A39CB> <Mozilla Firefox> [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Mozilla Corporation - Firefox Helper.) -- C:\Program Files\Mozilla Firefox\uninstall\helper.exe  =>.Mozilla Corporation
O68 - StartMenuInternet: <Microsoft Edge> <Microsoft Edge> [64Bits][HKLM\..\InstallInfo\HideIconsCommand] (.Microsoft Corporation - Microsoft Edge.) -- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe  =>.Microsoft Corporation

---\\ RECHERCHE D'INFECTION SUR NAVIGATEURS (1) - 27s
O69 - SBI: SearchScopes [HKLM] [64Bits]{0633EE93-D776-472f-A0FF-E1416B8B2E3A} [DefaultScope] - (@ieframe.dll,-12512) - http://www.bing.com/  =>.Bing.com

---\\ ENUMERE LES SERVICES DÉMARRES PAR Svchost (54) - 2s
O83 - Search Svchost Services: CertPropSvc (CertPropSvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\WINDOWS\System32\certprop.dll   [222208] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: SCPolicySvc (SCPolicySvc) . (.Microsoft Corporation - Service de propagation de certificats de ca.) -- C:\Windows\System32\certprop.dll   [222208] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: lanmanserver (lanmanserver) . (.Microsoft Corporation - DLL du service Serveur.) -- C:\Windows\System32\srvsvc.dll   [305152] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: gpsvc (gpsvc) . (.Microsoft Corporation - Client de stratégie de groupe.) -- C:\Windows\System32\gpsvc.dll   [1342464] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: IKEEXT (IKEEXT) . (.Microsoft Corporation - Extension IKE.) -- C:\Windows\System32\IKEEXT.DLL   [1049088] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: iphlpsvc (iphlpsvc) . (.Microsoft Corporation - Service offrant une connectivité IPv6 sur u.) -- C:\Windows\System32\iphlpsvc.dll   [841216] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: seclogon (seclogon) . (.Microsoft Corporation - DLL de service d’ouverture de session secon.) -- C:\Windows\System32\seclogon.dll   [32768] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: msiscsi (msiscsi) . (.Microsoft Corporation - Service de découverte iSCSI.) -- C:\Windows\System32\iscsiexe.dll   [161792] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: EapHost (EapHost) . (.Microsoft Corporation - Service EAPHost Microsoft.) -- C:\Windows\System32\eapsvc.dll   [112640] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: schedule (schedule) . (.Microsoft Corporation - Service du Planificateur de tâches.) -- C:\Windows\System32\schedsvc.dll   [854016] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: winmgmt (winmgmt) . (.Microsoft Corporation - WMI.) -- C:\Windows\System32\wbem\WMIsvc.dll   [243712] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: ProfSvc (ProfSvc) . (.Microsoft Corporation - ProfSvc.) -- C:\Windows\System32\profsvc.dll   [488448] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: SessionEnv (SessionEnv) . (.Microsoft Corporation - Service Configuration des services Bureau à.) -- C:\Windows\System32\SessEnv.dll   [549888] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: wercplsupport (wercplsupport) . (.Microsoft Corporation - Rapports de problèmes.) -- C:\Windows\System32\wercplsupport.dll   [132608] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: InstallService (InstallService) . (.Microsoft Corporation - InstallService.) -- C:\Windows\System32\InstallService.dll   [2549760] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: PushToInstall (PushToInstall) . (.Microsoft Corporation - PushToInstall.) -- C:\Windows\System32\PushToInstall.dll   [344064] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: TroubleshootingSvc (TroubleshootingSvc) . (.Microsoft Corporation - MitigationClient.) -- C:\Windows\System32\MitigationClient.dll   [512512] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: LxpSvc (LxpSvc) . (.Microsoft Corporation - Fournit une prise en charge de l'infrastruc.) -- C:\Windows\System32\LanguageOverlayServer.dll   [410112] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: DmEnrollmentSvc (DmEnrollmentSvc) . (.Microsoft Corporation - DLL Windows Management Service.) -- C:\Windows\System32\Windows.Internal.Management.dll   [1144832] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: XblGameSave (XblGameSave) . (.Microsoft Corporation - Xbox Live Game Save Service.) -- C:\Windows\System32\XblGameSave.dll   [1291264] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: shpamsvc (shpamsvc) . (.Microsoft Corporation - SharedPC.AccountManager.) -- C:\Windows\System32\Windows.SharedPC.AccountManager.dll   [223744] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: WManSvc (WManSvc) . (.Microsoft Corporation - DLL du Service de gestion de Windows.) -- C:\Windows\System32\Windows.Management.Service.dll   [860672] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: XblAuthManager (XblAuthManager) . (.Microsoft Corporation - Xbox Live Auth Manager.) -- C:\Windows\System32\XblAuthManager.dll   [1049088] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: AppInfo (AppInfo) . (.Microsoft Corporation - Service Informations d’application.) -- C:\Windows\System32\appinfo.dll   [217600] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: NaturalAuthentication (NaturalAuthentication) . (.Microsoft Corporation - Service d’authentification naturelle.) -- C:\Windows\System32\NaturalAuth.dll   [454656] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: BDESVC (BDESVC) . (.Microsoft Corporation - Service BDE.) -- C:\Windows\System32\bdesvc.dll   [559104] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: NetSetupSvc (NetSetupSvc) . (.Microsoft Corporation - Service Configuration du réseau.) -- C:\Windows\System32\NetSetupSvc.dll   [329216] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: wlidsvc (wlidsvc) . (.Microsoft Corporation - Service de compte Microsoft®.) -- C:\Windows\System32\wlidsvc.dll   [2256896] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: UserManager (UserManager) . (.Microsoft Corporation - UserMgr.) -- C:\Windows\System32\usermgr.dll   [1486848] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: NcaSvc (NcaSvc) . (.Microsoft Corporation - Service Assistant Connectivité réseau Micro.) -- C:\Windows\System32\NcaSvc.dll   [171520] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: Themes (Themes) . (.Microsoft Corporation - DLL du service des thèmes Windows Shell.) -- C:\Windows\System32\themeservice.dll   [70656] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: XboxGipSvc (XboxGipSvc) . (.Microsoft Corporation - Xbox Gip Management Service.) -- C:\Windows\System32\XboxGipSvc.dll   [72704] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: TokenBroker (TokenBroker) . (.Microsoft Corporation - Broker à jetons.) -- C:\Windows\System32\TokenBroker.dll   [1531392] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: lfsvc (lfsvc) . (.Microsoft Corporation - Service de géolocalisation.) -- C:\Windows\System32\lfsvc.dll   [48640] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: Rasauto (Rasauto) . (.Microsoft Corporation - Gestionnaire de numérotation automatique d’.) -- C:\Windows\System32\rasauto.dll   [111616] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: Rasman (Rasman) . (.Microsoft Corporation - Gestionnaire des connexions d’accès à dista.) -- C:\Windows\System32\rasmans.dll   [1015296] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: Remoteaccess (Remoteaccess) . (.Microsoft Corporation - Gestionnaire d’interface dynamique.) -- C:\Windows\System32\mprdim.dll   [552448] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: SENS (SENS) . (.Microsoft Corporation - Service de notification d’événements systèm.) -- C:\Windows\System32\Sens.dll   [77824] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: Sharedaccess (Sharedaccess) . (.Microsoft Corporation - Composants de l’application d’assistance à.) -- C:\Windows\System32\ipnathlp.dll   [658944] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: Tapisrv (Tapisrv) . (.Microsoft Corporation - Serveur de téléphonie Microsoft® Windows(TM.) -- C:\Windows\System32\tapisrv.dll   [323072] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: wuauserv (wuauserv) . (.Microsoft Corporation - Agent de mise à jour automatique Windows Up.) -- C:\Windows\System32\wuaueng.dll   [3433472] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: BITS (BITS) . (.Microsoft Corporation - Service de transfert intelligent en arrière.) -- C:\Windows\System32\qmgr.dll   [1481728] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: ShellHWDetection (ShellHWDetection) . (.Microsoft Corporation - Dll des services Windows Shell.) -- C:\Windows\System32\shsvcs.dll   [283648] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: dmwappushservice (dmwappushservice) . (.Microsoft Corporation - dmwappushsvc.) -- C:\Windows\System32\dmwappushsvc.dll   [58880] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: wisvc (wisvc) . (.Microsoft Corporation - Paramètres de vol.) -- C:\Windows\System32\flightsettings.dll   [1050080]  =>.Microsoft®
O83 - Search Svchost Services: WpnService (WpnService) . (.Microsoft Corporation - Service du système de notifications Push Wi.) -- C:\Windows\System32\WpnService.dll   [245760] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: DcSvc (DcSvc) . (.Microsoft Corporation - dcsvc.) -- C:\Windows\System32\dcsvc.dll   [999424] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: XboxNetApiSvc (XboxNetApiSvc) . (.Microsoft Corporation - Xbox Live Networking Service.) -- C:\Windows\System32\XboxNetApiSvc.dll   [1295360] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: UsoSvc (UsoSvc) . (.Microsoft Corporation - Mettre à jour la session du service Orchest.) -- C:\Windows\System32\usosvc.dll   [576512] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: DsmSvc (DsmSvc) . (.Microsoft Corporation - Gestionnaire d’installation de périphérique.) -- C:\Windows\System32\DeviceSetupManager.dll   [295936] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: hns (hns) . (.Microsoft Corporation - Service de réseau hôte.) -- C:\Windows\System32\HostNetSvc.dll   [3404288] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: LxssManager (LxssManager) . (.Microsoft Corporation - Service de gestion LXSS.) -- C:\Windows\System32\lxss\LxssManager.dll   [962048] [Unsigned]  =>.Microsoft Corporation
O83 - Search Svchost Services: nvagent (nvagent) . (.Microsoft Corporation - Agent de virtualisation de réseau..) -- C:\Windows\System32\NvAgent.dll   [42976]  =>.Microsoft®
O83 - Search Svchost Services: browser (browser) . (.Microsoft Corporation - DLL du service Explorateur d’ordinateurs.) -- C:\Windows\System32\browser.dll   [140800] [Unsigned]  =>.Microsoft Corporation

---\\ LISTE DES EXCEPTIONS PAREFEU WINDOWS (14) - 1s
O87 - FAEL: "IIS-WebServerRole-FTP-Passive-In-TCP" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.)  =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-989" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.)  =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-990" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.)  =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-Out-TCP-20" [Out-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.)  =>.SUP.Orphan
O87 - FAEL: "IIS-WebServerRole-FTP-In-TCP-21" [In-None-P6-FALSE] .(...) -- %windir%\system32\svchost.exe [Unsigned] (.not file.)  =>.SUP.Orphan
O87 - FAEL: "OpenSSH-Server-In-TCP" [In-None-P6-TRUE] .(...) -- C:\WINDOWS\system32\OpenSSH\sshd.exe [Unsigned]  =>.Mark Saeger
O87 - FAEL: "{00031372-60AB-4A9C-B50E-7C6ADE7880A2}" [In-None-P6-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe  =>.Microsoft®
O87 - FAEL: "{68CE6E57-C2FC-4144-BE59-3C153CCA802F}" [Out-None-P6-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe  =>.Microsoft®
O87 - FAEL: "{F5E28049-05A1-46C6-B35D-464D1A2C8216}" [In-None-P17-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe  =>.Microsoft®
O87 - FAEL: "{8EDF23E4-E700-4F69-AD79-533680154176}" [Out-None-P17-TRUE] .(.Skype Technologies S.A. - Skype.) -- C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe  =>.Microsoft®
O87 - FAEL: "TCP Query User{5FB8D96A-683B-4525-8269-8E1B2393FA7D}C:\program files\videolan\vlc\vlc.exe" [In-None-P6-TRUE] .(.VideoLAN - VLC media player.) -- C:\program files\videolan\vlc\vlc.exe  =>.VideoLAN®
O87 - FAEL: "UDP Query User{9C007A0A-34EB-4457-BE34-7D93FCB32B7F}C:\program files\videolan\vlc\vlc.exe" [In-None-P17-TRUE] .(.VideoLAN - VLC media player.) -- C:\program files\videolan\vlc\vlc.exe  =>.VideoLAN®
O87 - FAEL: "TCP Query User{A14FD38A-8A05-42F0-B151-48237FF63A7A}C:\program files\bambu studio\bambu-studio.exe" [In-None-P6-TRUE] .(.Bambu Research - BambuStudio.) -- C:\program files\bambu studio\bambu-studio.exe {0B209295A54B188466AD7478}.
O87 - FAEL: "UDP Query User{C660C3BB-BBDB-4EC7-9A91-5DA15E2538D6}C:\program files\bambu studio\bambu-studio.exe" [In-None-P17-TRUE] .(.Bambu Research - BambuStudio.) -- C:\program files\bambu studio\bambu-studio.exe {0B209295A54B188466AD7478}.

---\\ CODES PRODUITS LOGICIELS (43) - 2s
O90 - PUC: "0000009F810000000000709475387300" [HKLM] . (.ABBYY FineReader 9.0 Sprint.) -- C:\WINDOWS\Installer\{F9000000-0018-0000-0000-074957833700}\ARPPRODUCTICON.exe  =>.ABBYY Software
O90 - PUC: "00004159FA00C0400000000000F01FEC" [HKLM] . (.Visionneuse Microsoft PowerPoint.)  =>.Microsoft Corporation
O90 - PUC: "00006109C80000000000000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Extensibility Component.)  =>.Microsoft Corporation
O90 - PUC: "00006109C800C0400000000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Localization Component.)  =>.Microsoft Corporation
O90 - PUC: "00006109DD0000000100000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Extensibility Component 64-bit Registration.)  =>.Microsoft Corporation
O90 - PUC: "00006109F80000000100000000F01FEC" [HKLM] . (.Office 16 Click-to-Run Licensing Component.)  =>.Microsoft Corporation
O90 - PUC: "264CF28632AB6F141914EB5D8EE1537C" [HKLM] . (.Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29617.)  =>.Microsoft Corporation
O90 - PUC: "2C6A1CF1E675A984B9A4292DF1451263" [HKLM] . (.Microsoft Update Health Tools.)  =>.Microsoft Corporation
O90 - PUC: "3C575469028524648AA95724555BFE1E" [HKLM] . (.EasyTuneEngineService.) -- C:\WINDOWS\Installer\{964575C3-5820-4642-A89A-754255B5EFE1}\ARPPRODUCTICON.exe  =>.Gigabyte Technology, Inc.
O90 - PUC: "3C750AAACD019BE43A6D28801CBB4711" [HKLM] . (.SIV.) -- C:\WINDOWS\Installer\{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}\ARPPRODUCTICON.exe
O90 - PUC: "3D0DCE8B80EA19846B7C239FB657BEC6" [HKLM] . (.EPSON Printer Finder.) -- C:\WINDOWS\Installer\{B8ECD0D3-AE08-4891-B6C7-32F96B75EB6C}\ARPPRODUCTICON.exe  =>.Epson/Seico
O90 - PUC: "3e43b73803c7c394f8a6b2f0402e19c2" [HKLM] . (.Microsoft Visual C++ 2005 Redistributable.)  =>.bl.org
O90 - PUC: "413536F712EEB4E46AD896EA07ABE0B9" [HKLM] . (.EasyTune.) -- C:\WINDOWS\Installer\{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}\ARPPRODUCTICON.exe  =>.Gigabyte Technology, Inc.
O90 - PUC: "4D06FD173141364458269EAEB66415E8" [HKLM] . (.LibreOffice 24.2.6.2.) -- C:\WINDOWS\Installer\{71DF60D4-1413-4463-8562-E9EA6B46518E}\soffice.ico  =>.Open Source
O90 - PUC: "4EB27CC05FFA35F40A6FABB2EC661E0E" [HKLM] . (.Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29617.)  =>.Microsoft Corporation
O90 - PUC: "52F64D9CD9F552E42BF4CB009EDE5F92" [HKLM] . (.@BIOS.) -- C:\WINDOWS\Installer\{C9D46F25-5F9D-4E25-B24F-BC00E9EDF529}\ARPPRODUCTICON.exe
O90 - PUC: "564A21FA74AED7446BFBA228DCEBF2E0" [HKLM] . (.Python Launcher.) -- C:\WINDOWS\Installer\{AF12A465-EA47-447D-B6BF-2A82CDBE2F0E}\ARPIcon  =>.Python
O90 - PUC: "5AD805BF9030F184BA939F086668B8BD" [HKLM] . (.Gears 3D Printer.) -- C:\WINDOWS\Installer\{FB508DA5-0309-481F-AB39-F98066868BDB}\Print.ico
O90 - PUC: "7C9F8B73BF303523781852719CD9C700" [HKLM] . (.Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030.)  =>.Microsoft Corporation
O90 - PUC: "910A08ADB3C4AAD4CA1A96737DACFAE9" [HKLM] . (.Update for x64-based Windows Systems (KB5001716).)
O90 - PUC: "982E7F918B71CE440A992957706B7F93" [HKLM] . (.Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.21.27702.)  =>.Microsoft Corporation
O90 - PUC: "A9EEB05D6CE085A4FB0953DB6C6D94D5" [HKLM] . (.APP Center.) -- C:\WINDOWS\Installer\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}\ARPPRODUCTICON.exe
O90 - PUC: "BD8663123622D2E4BA8B84F75D9331E0" [HKLM] . (.Microsoft Visual C++ 2019 X86 Additional Runtime - 14.21.27702.)  =>.Microsoft Corporation
O90 - PUC: "C025571B2A687A53689168CD7369889B" [HKLM] . (.Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030.)  =>.Microsoft Corporation
O90 - PUC: "C3AEB2FCAE628F23AAB933F1E743AB79" [HKLM] . (.Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030.)  =>.Microsoft Corporation
O90 - PUC: "DC8A59DBF9D1DA5389A1E3975220E6BB" [HKLM] . (.Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030.)  =>.Microsoft Corporation
O90 - PUC: "E7F34DE86F8A8984FA116B51F8E2FD49" [HKLM] . (.Epson Event Manager.) -- C:\WINDOWS\Installer\{8ED43F7E-A8F6-4898-AF11-B6158F2EDF94}\icon.exe  =>.Western Digital Technologies
O90 - PUC: "042329DAECA09C54789450FB77AA1E10" [HKCU] . (.Python 3.8.2 Core Interpreter (64-bit).)  =>.Python
O90 - PUC: "1107BFDB2BA0F044F80023FAA7E91DDE" [HKCU] . (.Python 3.8.2 Development Libraries (64-bit).)  =>.Python
O90 - PUC: "679F0B561515E724594B3202CD469FE1" [HKCU] . (.Python 3.8.2 Documentation (64-bit).)  =>.Python
O90 - PUC: "8611C63A6E064E2439BDB68E6CDDD96D" [HKCU] . (.Python 3.8.2 Executables (64-bit).)  =>.bl.org
O90 - PUC: "A144827E0287C1B4789CEDB73EB79235" [HKCU] . (.Download Navigator.) -- %APPDATA%\Microsoft\Installer\{E728441A-7820-4B1C-87C9-DE7BE37B2953}\icon.ico
O90 - PUC: "A605BA25C3CE0604E9FBA6799549BC53" [HKCU] . (.Python 3.8.2 Utility Scripts (64-bit).)  =>.Python
O90 - PUC: "B240EEE8FAE61714ABE61013E99DD98A" [HKCU] . (.Python 3.8.2 pip Bootstrap (64-bit).)  =>.Python
O90 - PUC: "C64B9F3391BE7BB4BAAF8F7CB1379E4A" [HKCU] . (.Python 3.8.2 Standard Library (64-bit).)  =>.Python
O90 - PUC: "042329DAECA09C54789450FB77AA1E10" [HKU] . (.Python 3.8.2 Core Interpreter (64-bit).)  =>.Python
O90 - PUC: "1107BFDB2BA0F044F80023FAA7E91DDE" [HKU] . (.Python 3.8.2 Development Libraries (64-bit).)  =>.Python
O90 - PUC: "679F0B561515E724594B3202CD469FE1" [HKU] . (.Python 3.8.2 Documentation (64-bit).)  =>.Python
O90 - PUC: "8611C63A6E064E2439BDB68E6CDDD96D" [HKU] . (.Python 3.8.2 Executables (64-bit).)  =>.bl.org
O90 - PUC: "A144827E0287C1B4789CEDB73EB79235" [HKU] . (.Download Navigator.) -- %APPDATA%\Microsoft\Installer\{E728441A-7820-4B1C-87C9-DE7BE37B2953}\icon.ico
O90 - PUC: "A605BA25C3CE0604E9FBA6799549BC53" [HKU] . (.Python 3.8.2 Utility Scripts (64-bit).)  =>.Python
O90 - PUC: "B240EEE8FAE61714ABE61013E99DD98A" [HKU] . (.Python 3.8.2 pip Bootstrap (64-bit).)  =>.Python
O90 - PUC: "C64B9F3391BE7BB4BAAF8F7CB1379E4A" [HKU] . (.Python 3.8.2 Standard Library (64-bit).)  =>.Python

---\\ PACKAGES WINDOWS INSTALLER (18) - 2s
[MD5.99E4E92644A8B4E97BDE4163BC441D00] [WIS][2024/09/08 16:55:19] (.The Document Foundation - LibreOffice 24.2.) -- C:\WINDOWS\Installer\12ef0d.msi  [364830720]  =>.The Document Foundation
[MD5.B8D2DAB7260CF556D4142837578377B7] [WIS][2024/08/26 17:59:52] (.Gigabyte.) -- C:\WINDOWS\Installer\19b1c.msi   [26258944]  =>.Gigabyte
[MD5.4C0591D1568B3015DF04D7818987621A] [WIS][2020/02/25 23:34:50] (.Python Software Foundation - Python 3.8.2 Core Interpreter (64-bit).) -- C:\WINDOWS\Installer\1a65c4.msi  [1589248]  =>.Python Software Foundation
[MD5.FA7C44D46AEDB49FBBD66B44FCD32A41] [WIS][2020/02/25 23:35:10] (.Python Software Foundation - Python 3.8.2 Development Libraries (64-bit).) -- C:\WINDOWS\Installer\1a65c9.msi  [270336]  =>.Python Software Foundation
[MD5.F881F0A9684F481D4D1BDF4010D6F96E] [WIS][2020/02/25 23:35:20] (.Python Software Foundation - Python 3.8.2 Executables (64-bit).) -- C:\WINDOWS\Installer\1a65ce.msi  [495616]  =>.Python Software Foundation
[MD5.35957720D0E79E3FA5AB359CE287A188] [WIS][2020/02/25 23:35:44] (.Python Software Foundation - Python 3.8.2 Standard Library (64-bit).) -- C:\WINDOWS\Installer\1a65d3.msi  [7819264]  =>.Python Software Foundation
[MD5.A57FBA22DFEE9E4742A9595C9D75FFFA] [WIS][2020/02/25 23:35:18] (.Python Software Foundation - Python 3.8.2 Documentation (64-bit).) -- C:\WINDOWS\Installer\1a65d8.msi  [8540160]  =>.Python Software Foundation
[MD5.C1E9F54010384B9FD09D399FE7433D14] [WIS][2020/02/25 23:37:04] (.Python Software Foundation - Python 3.8.2 Utility Scripts (64-bit).) -- C:\WINDOWS\Installer\1a65dd.msi  [208896]  =>.Python Software Foundation
[MD5.4440E8927390C40D9AEE43AB48BAFEDB] [WIS][2020/02/25 23:32:12] (.Python Software Foundation - Python Launcher.) -- C:\WINDOWS\Installer\1a65e7.msi  [598016]  =>.Python Software Foundation
[MD5.2FBD67AD14E75D135B78D76E71305580] [WIS][2020/02/25 23:36:16] (.Python Software Foundation - Python 3.8.2 pip Bootstrap (64-bit).) -- C:\WINDOWS\Installer\1a65ec.msi  [253952]  =>.Python Software Foundation
[MD5.B2D2B95D4A1458AFC0DFEE41E341AEF5] [WIS][2024/08/26 18:16:40] (.GIGABYTE.) -- C:\WINDOWS\Installer\28333.msi   [12584960]  =>.GIGABYTE
[MD5.BC32398DA9B4DEFA7CB251E0BA234AC9] [WIS][2024/08/26 18:16:55] (.GIGABYTE.) -- C:\WINDOWS\Installer\28336.msi   [30392832]  =>.GIGABYTE
[MD5.04EC31D281B9B167839E85907FAE4DBB] [WIS][2024/08/26 18:17:04] (.GIGABYTE.) -- C:\WINDOWS\Installer\28339.msi   [17020416]  =>.GIGABYTE
[MD5.6C3103D5103D49501AFE84C1F7900A9B] [WIS][2024/08/26 18:17:17] (.GIGABYTE.) -- C:\WINDOWS\Installer\2833c.msi   [32943616]  =>.GIGABYTE
[MD5.FE06A935E1ABAC5A1254E165AC68830B] [WIS][2011/06/29 11:10:02] (.SEIKO EPSON CORPORATION - Download Navigator.) -- C:\WINDOWS\Installer\37e2d32.msi  [1204224]  =>.SEIKO EPSON CORPORATION
[MD5.23034549FED8C33245B8FD2A2EB3E842] [WIS][2011/02/06 00:57:56] (.SEIKO EPSON CORPORATION - Epson Event Manager.) -- C:\WINDOWS\Installer\37e2d37.msi  [19707392]  =>.SEIKO EPSON CORPORATION
[MD5.AA9D0A4DE1056EC806AB889C76E78B2D] [WIS][2024/08/26 17:46:47] (.SEIKO EPSON CORPORATION - EPSON Printer Finder.) -- C:\WINDOWS\Installer\3904eac.msi  [4668928]  =>.SEIKO EPSON CORPORATION
[MD5.446B6F1470703F5E0AF17DA1D3D11A9F] [WIS][2024/02/28 01:45:12] (.Jaume Dellunde - Gears 3D Printer.) -- C:\WINDOWS\Installer\403d23.msi  [1056768]

---\\ FEATURE CONTROL. (206) - 0s
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ACTIVEX_REPURPOSEDETECTION]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ADDON_MANAGEMENT]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:infopath.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BEHAVIORS]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_INPUT_PROMPTS]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMAGE]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMAGE]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMAGE]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_IMG]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_OBJECT]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_LMZ_SCRIPT]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION]:msoasb.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_IE_SHELLEXECUTE_CALLS]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_IE_SHELLEXECUTE_CALLS]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_IE_SHELLEXECUTE_CALLS]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_LEGACY_COMPRESSION]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPfewgsrv.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGUI.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPGuiIT.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLgPad.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:SAPLOGON.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:Scale_for_R3.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_MK_PROTOCOL]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:ieuser.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_SQM_UPLOAD_FOR_APP]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_TELNET_PROTOCOL]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DISABLE_UNICODE_HANDLE_CLOSING_CALLBACK]:YahooMusicEngine.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_DOCUMENT_COMPATIBLE_MODE]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:devenv.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:dexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:helppane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ENABLE_SCRIPT_PASTE_URLACTION_IF_PROMPT]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FEEDS]:msfeedssync.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_FORCE_ADDR_AND_STATUS]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_HTTP_USERNAME_PASSWORD_DISABLE]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IGNORE_XML_PROLOG]:msiexec.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:cs.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:waol.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_IMAGING_USE_ART]:wm.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_INTERNET_SHELL_FOLDERS]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DISPPARAMS]:helppane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LEGACY_DLCONTROL_BEHAVIORS]:wlmail.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPER1_0SERVER]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:mspub.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:outlook.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:onenote.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:winword.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:powerpnt.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:excel.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MAXCONNECTIONSPERSERVER]:msaccess.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_HANDLING]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MIME_SNIFFING]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:mshta.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:outlook.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_MSHTML_AUTOLOAD_IEFRAME]:sidebar.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_OBJECT_CACHING]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_PROTOCOL_LOCKDOWN]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RELEASE_CALLBACK_ON_STOP_BINDING]:communicator.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ABOUT_PROTOCOL_IE7]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_ACTIVEXINSTALL]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:msimn.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:winmail.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_FILEDOWNLOAD]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_OBJECT_DATA_ATTRIBUTE]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_RESTRICT_RES_TO_LMZ]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SAFE_BINDTOOBJECT]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SECURITYBAND]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHIM_MSHELP_COMBINE]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SHOW_APP_PROTOCOL_WARN_DIALOG]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SSLUX]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:msimn.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:outlook.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_SUBDOWNLOAD_LOCKDOWN]:winmail.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_UNC_SAVEDFILECHECK]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:infopath.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:winword.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:powerpnt.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_USE_WINDOWEDSELECTCONTROL]:excel.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VALIDATE_NAVIGATE_URL]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_VIEWLINKEDWEBOC_IS_UNSAFE]:HelpPane.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:mspub.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:outlook.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:onenote.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:winword.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:powerpnt.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:msoasb.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:excel.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_ENABLE_HTTP2]:msaccess.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_MOVESIZECHILD]:msn.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WEBOC_POPUPMANAGEMENT]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_WINDOW_RESTRICTIONS]:LICLUA.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_XSSFILTER]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:explorer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:iexplore.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:PresentationHost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:prevhost.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:wmplayer.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:VSTOInstaller.exe  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:OSPPREARM.EXE  =>.Legitimate
[HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_ZONE_ELEVATION]:LICLUA.EXE  =>.Legitimate

---\\ OBSERVATEURS des évènements (92) - 22s

Application.Error: CertEnroll (80)
~Numéro: 36089
~Date: 02/15/2025 01:25:43 AM
~ID: 86
~Description: WORKGROUP\DESKTOP-KJA1D38$https://AMD-KeyId-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azure.net/templates/Aik/scepGetCACapsGetCACaps: Not Found{"Message":"The authority \"amd-keyid-52fb59e29aa83a962fb9eef0fe5b4811de6b751e.microsoftaik.azu
~Suggestion: Aucune

Application.Error: VSS (81)
~Numéro: 36020
~Date: 02/15/2025 01:05:48 AM
~ID: 8193
~Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours. .
~Suggestion: Utiliser la procédure de reconstruction du VSS

Application.Error: Application Error (9)
~Numéro: 35099
~Date: 02/12/2025 01:09:58 PM
~ID: 1000
~Description: Nom de l’application défaillante KDService.exe, version : 1.1.55.18, horodatage : 0x596d7b44 Nom du module défaillant : KERNELBASE.dll, version : 10.0.19041.5486, horodatage : 0x09ce69c7 Code d’exception : 0xe0434352 Décalage d’erreur : 0x00000000000
~Suggestion: Réparer ou réinstaller l'application.

Application.Error: .NET Runtime (7)
~Numéro: 35098
~ID: 1026
~Description: Application : KDService.exeVersion du Framework : v4.0.30319Description : le processus a été arrêté en raison d'une exception non gérée.Informations sur l'exception : System.InvalidOperationException   à System.ServiceModel.Channels.CommunicationObje
~Suggestion: Essayer d'installer la dernière version de l'application ou du dernier correctif

Application.Warning: Microsoft-Windows-RestartManager (10)
~Numéro: 33902
~Date: 02/06/2025 06:47:44 PM
~ID: 10010
~Description: Impossible de redémarrer l’application « C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE » (pid 2948) - 1.
~Suggestion: Redémarrer manuellement l'application ou le service

Application.Error: WAS-LA (1)
~Numéro: 33624
~Date: 02/06/2025 03:58:54 AM
~ID: 7005
~Description: Le protocole 'net.pipe' de l'adaptateur de l'écouteur a tenté de communiquer avec le service d'activation des processus Windows et a échoué. L'adaptateur de l'écouteur est désormais en mauvais état. Cause : cela peut résulter de problèmes liés au man

Application.Error: Firefox Default Browser Agent (12)
~Numéro: 33565
~Date: 02/06/2025 01:54:35 AM
~ID: 1140
~Description: 0x80110474 in mozilla::default_agent::RegisterTask:92

Application.Warning: Windows Search Service (3)
~Numéro: 31265
~Date: 01/22/2025 06:19:38 PM
~ID: 3023
~Description: Impossible de démarrer l’analyse car toutes les sources de contenu ont été exclues par des règles de chemin d’accès au site ou supprimées de la configuration de l’index.Contexte : Application , Catalogue SystemIndexDétails :	(HRESULT : 0x1) (0x000000

Application.Warning: ESENT (2)
~Numéro: 31248
~Date: 01/22/2025 06:03:42 PM
~ID: 636
~Description: qmgr.dll (12372,D,35) QmgrDatabaseInstance: Le fichier de mappage de vidage « C:\ProgramData\Microsoft\Network\Downloader\qmgr.jfm » sera supprimé. Motif : ReadHdrFailed.

System.Warning: DCOM (137)
~Numéro: 67738
~Date: 02/15/2025 01:27:41 AM
~ID: 10016
~Description: propres à l’applicationLocalExécutionWindows.SecurityCenter.WscDataProtectionNon disponibleAUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
~Suggestion: Vérifier les autorisations pour l'accès DCOM

System.Error: Service Control Manager (125)
~Numéro: 67735
~Date: 02/15/2025 01:27:40 AM
~ID: 7001
~Description: Le service Service Synchronisation date/heure Microsoft Hyper-V dépend du service Pilote d’infrastructure invité Microsoft Hyper-V qui n’a pas pu démarrer en raison de l’erreur :  %%31

System.Error: Microsoft-Windows-TPM-WMI (55)
~Numéro: 67729
~Date: 02/15/2025 01:27:38 AM
~ID: 1796
~Description: La mise à jour du démarrage sécurisé n’a pas pu mettre à jour une variable de démarrage sécurisé avec l'erreur -2147020471. Pour plus d'informations, veuillez consulter https://go.microsoft.com/fwlink/?linkid=2169931

System.Warning: MSiSCSI (43)
~Numéro: 67720
~Date: 02/15/2025 01:25:42 AM
~ID: 121
~Description: L’exception de pare-feu qui autorise la fonctionnalité de client iSNS (Internet Storage Name Server) n’est pas activée. La fonctionnalité de client iSNS n’est pas disponible.

System.Error: NETLOGON (39)
~Numéro: 67712
~Date: 02/15/2025 01:25:38 AM
~ID: 3095
~Description: Cet ordinateur est configuré en tant que membre d’un groupe de travail, et non en tant que membre d’un domaine. Il n’est pas nécessaire d’exécuter le service Accès réseau dans cette configuration.

System.Warning: Microsoft-Windows-DNS-Client (3)
~Numéro: 67624
~Date: 02/15/2025 01:16:43 AM
~ID: 1014
~Description: La résolution du nom api.msn.com a expiré lorsqu’aucun des serveurs DNS configurés n’a répondu.
~Suggestion: https://social.technet.microsoft.com/wiki/contents/articles/3336.event-id-1014-microsoft-windows-dns-client.aspx

System.Warning: Ntfs (1)
~Numéro: 66369
~Date: 02/14/2025 08:52:40 AM
~ID: 50
~Description: {L'écriture différée a échoué} Windows n'a pas pu enregistrer les données du fichier . Les données ont été perdues. Cette erreur peut être due à une panne de votre matériel ou de votre connexion réseau. Essayez d'enregistrer ce fichier à un autre emp

System.Error: Microsoft-Windows-WindowsUpdateClient (1)
~Numéro: 64782
~Date: 02/11/2025 01:10:23 AM
~ID: 20
~Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.
~Suggestion: http://kb.eventtracker.com/evtpass/evtpages/EventId_20_Microsoft-Windows-WindowsUpdateClient_63351.asp

---\\ SCAN ADDITIONNEL (47) - 7s
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\AppData\Local\Microsoft\OneDrive\19.043.0304.0013\FileSyncConfig.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\AppData\Local\Microsoft\OneDrive\21.220.1024.0005\FileSyncConfig.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\-----RevoUninstaller\RevoUninstaller_Portable\RevoUPort.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\LibreOfficePortable\LibreOfficeWriterPortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Libre Office\LibreOfficePortable_24.2.3_MultilingualStandard.paf.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Libre Office\LibreOfficePortable\LibreOfficeWriterPortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\V L C\vlc-3.0.21-win64\vlc-3.0.21\vlc.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Malwarebyte\MBSetup(1).exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\CCleaner\ccsetup622\CCleaner64.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24072.111.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\hddb-4.4.0.x64.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Power point Wiever\PowerPointViewer-1.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\V L C\vlc-3.0.21-win64.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:D:\Documents\T E L E C H A R G E M E N T S\stinger32 (2023_12_23 01_15_28 UTC).exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\AppData\Local\Temp\WinGet\XPDM1ZW6815MQM.3.0.16\dab29a2e-f388-4271-9bb2-b043ff9d21b3_0cff2d41a69d72de30607b8fc09da90e352393e154a342efcddb91e06b3a2147.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\AppData\Local\Microsoft\OneDrive\OneDrive.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Libre Office\LibreOfficePortable\LibreOfficeDrawPortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Libre Office\LibreOfficePortable\LibreOfficeBasePortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Libre Office\LibreOfficePortable\LibreOfficePortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\Libre Office\LibreOfficePortable\LibreOfficeCalcPortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\Libre Office Portable\LibreOfficePortable_24.2.3_MultilingualStandard.paf.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\Libre Office Portable\LibreOfficePortable\LibreOfficeWriterPortable.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\winkey.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\Icônes moins utilisées\winkey.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24081.102.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11100.16009.0_x64__8wekyb3d8bbwe\Photos.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\FreeCAD-0.21.2-WIN-x64-installer-1.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:D:\Documents\T E L E C H A R G E M E N T S\7-ZipPortable_24.08.paf.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\7 Zip\7-ZipPortable_24.08.paf.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\IoBit Unlocker\unlocker-setup.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24111.82.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\LOG Aomei à installer début janvier\PhotoStampRemover\PhotoStampRemover\PhotoStampRemover_Setup_pt77.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\UltiMaker-Cura-5.9.0-win64-X64.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\L O G I C I E L S\UltiMaker-Cura-5.9.0-win64-X64\UltiMaker-Cura-5.9.0-win64-X64.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\FRST64.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\ZHPSuite.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:C:\Users\Bernard\Desktop\kprm_2.18.exe  =>.SUP.Orphan.Compatibility
[HKCU\SOFTWARE\MICROSOFT\Windows NT\CurrentVersion\AppCompatFlags\Compatibility Assistant\Store]:F:\rcsetup154.exe  =>.SUP.Orphan.Compatibility
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe.FriendlyAppName =>.Unsigned  =>.Unsigned
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Bernard\Desktop\FRST64.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Bernard\Desktop\FRST64.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
[HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\users\bernard\appdata\roaming\bambustudio\cameratools\ffmpeg.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1823878557-1970803468-117618743-1089\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Program Files (x86)\VirusTotalUploader2\VirusTotalUploader2.2.exe.FriendlyAppName =>.Unsigned  =>.Unsigned
[HKU\S-1-5-21-1823878557-1970803468-117618743-1089\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Bernard\Desktop\FRST64.exe.FriendlyAppName  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1823878557-1970803468-117618743-1089\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\Users\Bernard\Desktop\FRST64.exe.ApplicationCompany  =>.SUP.Orphan.MUICache
[HKU\S-1-5-21-1823878557-1970803468-117618743-1089\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache]:C:\users\bernard\appdata\roaming\bambustudio\cameratools\ffmpeg.exe.FriendlyAppName  =>.SUP.Orphan.MUICache

---\\ RECAPITULATIF DES ELEMENTS TROUVES (5) - 0s
https://nicolascoolman.eu/2017/09/12/origine-lignes-orphelines/  =>.SUP.Orphan
https://nicolascoolman.eu/forum/Topic/warning-eventlogapp-evenement-dapplication/  =>Warning.EventLogApp
https://nicolascoolman.eu/forum/Topic/warning-eventlogsys-evenement-systeme/  =>Warning.EventLogSys
https://nicolascoolman.eu/forum/Topic/logiciels-potentiellement-superflus-lps/  =>.SUP.Orphan.Compatibility
https://nicolascoolman.eu/forum/Topic/2024/08/26/muicache-cle-de-registre/  =>.SUP.Orphan.MUICache

---\\ NUMEROS DE SÉRIE
[00A657F778B31AE523D667131718D16EB2] [05/02/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\MBAMCore_b.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [05/02/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\MBAMCore_b.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [05/02/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\MBAMCore_b.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [05/12/2024] (.Malwarebytes Inc..) - C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [14/02/2025] (.Malwarebytes Inc..) - C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [14/02/2025] (.Malwarebytes Inc..) - C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [14/11/2024] (.Malwarebytes Inc..) - C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mb5uns.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [15/02/2025] (.Malwarebytes Inc..) - C:\WINDOWS\system32\DRIVERS\mwac.sys  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [21/12/2024] (.Malwarebytes Inc..) - C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\ig.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\ig.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\MBAMCore.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\sample.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\ig.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\ig.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\MBAMCore.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\sample.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\MBAMCore.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\sample.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\ig.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\ig.exe  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\MBAMCore.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\lkg_db\sample.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\MBAMCore.dll  =>.Malwarebytes Inc.
[00A657F778B31AE523D667131718D16EB2] [31/01/2025] (.Malwarebytes Inc..) - C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Malwarebytes\MBAMService\sample.dll  =>.Malwarebytes Inc.
[01EAB87B37173553ADA09907253C884B] [21/02/2022] (.Realtek Semiconductor Corp..) - C:\WINDOWS\System32\drivers\rt640x64.sys  =>.Realtek Semiconductor Corp.
[02B8A4001198E56FC684DC99B1665C14] [31/05/2022] (.KYOCERA Document Solutions Inc..) - C:\Program Files\Kyocera\KmUninstall.exe  =>.Not verified
[033ED5EDA065D1B8C91DFCF92A6C9BD8] [24/12/2024] (.Python Software Foundation.) - C:\Users\Bernard\AppData\Local\Package Cache\{13ee6ab9-4dca-406c-bc3b-5d86391d39a1}\python-3.8.2-amd64.exe  =>.Python Software Foundation
[036939C475D53C1D70992DB8A87EB7D3] [26/08/2024] (.Macrovision Corporation.) - C:\Program Files (x86)\InstallShield Installation Information\{3E31400D-274E-4647-916C-2CACC3741799}\ENPSETUP.exe  =>.Macrovision Corporation
[036939C475D53C1D70992DB8A87EB7D3] [31/08/2007] (.Macrovision Corporation.) - C:\Program Files (x86)\InstallShield Installation Information\{D16A31F9-276D-4968-A753-FFEAC56995D0}\setup.exe  =>.Macrovision Corporation
[03D51297CFEFB4D3B30B9F5E3DB8D884] [09/06/2022] (.TreeCardGames srl.) - C:\Program Files (x86)\123 Free Solitaire\123FreeSolitaire.exe  =>.Not verified
[0407ABB64E9990180789EACB81F5F914] [30/10/2023] (.VideoLAN.) - C:\Program Files\VideoLAN\VLC\vlc.exe  =>.VideoLAN
[0575E1F7EC9BD8A67A3F6189C63E97BB] [22/05/2024] (.PIRIFORM SOFTWARE LIMITED.) - C:\Program Files\Recuva\recuva64.exe  =>.PIRIFORM SOFTWARE LIMITED
[068033EE736CDDF17B241B41E65EF935] [22/05/2024] (.Piriform Software Ltd.) - C:\Program Files\Recuva\uninst.exe  =>.Piriform Software Ltd
[0737B0D0DCDCAB8D78D2F40CB122F93F] [06/02/2025] (.Mozilla Corporation.) - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe  =>.Mozilla Corporation
[0737B0D0DCDCAB8D78D2F40CB122F93F] [06/02/2025] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\firefox.exe  =>.Mozilla Corporation
[0737B0D0DCDCAB8D78D2F40CB122F93F] [06/02/2025] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\private_browsing.exe  =>.Mozilla Corporation
[0737B0D0DCDCAB8D78D2F40CB122F93F] [06/02/2025] (.Mozilla Corporation.) - C:\Program Files\Mozilla Firefox\uninstall\helper.exe  =>.Mozilla Corporation
[07A61ECFA74CC7B2CEB42035C772BE1D] [16/08/2024] (.Gen Digital Inc..) - C:\Program Files\CCleaner\CCleaner64.exe  =>.Not verified
[07A61ECFA74CC7B2CEB42035C772BE1D] [16/08/2024] (.Gen Digital Inc..) - C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe  =>.Not verified
[07A61ECFA74CC7B2CEB42035C772BE1D] [16/08/2024] (.Gen Digital Inc..) - C:\Program Files\CCleaner\uninst.exe  =>.Not verified
[0B209295A54B188466AD7478] [15/11/2024] (.Shenzhen Tuozhu Technology Co., Ltd..) - \Program Files\Bambu Studio\bambu-studio.exe  =>.Not verified
[0B209295A54B188466AD7478] [15/11/2024] (.Shenzhen Tuozhu Technology Co., Ltd..) - C:\Program Files\Bambu Studio\bambu-studio.exe  =>.Not verified
[0FAE00141B9F1625F78019F259FFFCDF] [17/12/2024] (.VS REVO GROUP OOD.) - C:\Users\Bernard\Desktop\L O G I C I E L S\-----RevoUninstaller\RevoUninstaller_Portable\RevoUninstaller_Portable\RevoUPort.exe  =>.Not verified
[1885B7E188D8FAFD38A43D48967D7488] [30/10/2019] (.Advanced Micro Devices INC..) - C:\WINDOWS\System32\drivers\amdgpio2.sys  =>.Advanced Micro Devices INC.
[197125ACD31C9C82FF88F388] [08/09/2018] (.QFX Software Corporation.) - C:\WINDOWS\System32\drivers\keyscrambler.sys  =>.QFX Software Corporation
[28736D0D296789512BAC66CCE86C4A00] [12/04/2024] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\Windows\System32\ampa.sys  =>.CHENGDU AOMEI Tech Co., Ltd.
[28736D0D296789512BAC66CCE86C4A00] [12/04/2024] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\system32\ddmdrv.sys  =>.CHENGDU AOMEI Tech Co., Ltd.
[28736D0D296789512BAC66CCE86C4A00] [12/04/2024] (.CHENGDU AOMEI Tech Co., Ltd..) - C:\WINDOWS\SysWOW64\ampa.sys  =>.CHENGDU AOMEI Tech Co., Ltd.
[2F7A25FAD4E4CD1F5D5F97D3A9F85AC8] [09/03/2011] (.SEIKO EPSON Corporation.) - C:\WINDOWS\system32\spool\DRIVERS\x64\3\EFXIJRMV.exe  =>.SEIKO EPSON Corporation
[2F7A25FAD4E4CD1F5D5F97D3A9F85AC8] [12/10/2010] (.SEIKO EPSON Corporation.) - C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe  =>.SEIKO EPSON Corporation
[2F7A25FAD4E4CD1F5D5F97D3A9F85AC8] [26/08/2024] (.SEIKO EPSON Corporation.) - C:\Program Files (x86)\epson\escndv\setup\setup.exe  =>.SEIKO EPSON Corporation
[2F7A25FAD4E4CD1F5D5F97D3A9F85AC8] [31/01/2011] (.SEIKO EPSON Corporation.) - C:\Program Files (x86)\InstallShield Installation Information\{FFF841F3-9A15-4F61-BD16-C19F132E5A27}\setup.exe  =>.SEIKO EPSON Corporation
[33000003DE6C778D9215F2E1960000000003DE] [05/02/2025] (.Skype Software Sarl.) - C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.136.3202.0_x64__kzf8qxf38zg5c\Skype\Skype.exe  =>.Not verified
[3FF751C4F9F14B4911FA2C5FEC0083C9] [14/05/2009] (.ABBYY SOLUTIONS LIMITED.) - C:\Program Files (x86)\Common Files\ABBYY\FineReaderSprint\9.00\Licensing\NetworkLicenseServer.exe  =>.ABBYY SOLUTIONS LIMITED
[4A042D7653FFB5CF06FB280A] [06/11/2023] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\EasyTuneEngineService.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [06/12/2023] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\EasyTuneEngineService\OcButtonService.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [13/12/2023] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\SIV\HwmConsole.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [13/12/2023] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\SIV\HwmRecordService.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [15/02/2025] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\WINDOWS\System32\GigabyteUpdateService.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [18/04/2024] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\InstallShield Installation Information\{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}\setup.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [18/04/2024] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\InstallShield Installation Information\{964575C3-5820-4642-A89A-754255B5EFE1}\setup.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [18/04/2024] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\InstallShield Installation Information\{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}\setup.exe  =>.Not verified
[4A042D7653FFB5CF06FB280A] [26/08/2024] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\WINDOWS\System32\drivers\gdrv3.sys  =>.Not verified
[535091E6CAB13AF393B51EAD0825F627] [08/08/2022] (.Advanced Micro Devices Inc..) - C:\WINDOWS\System32\amdfendrsr.exe  =>.Advanced Micro Devices Inc.
[535091E6CAB13AF393B51EAD0825F627] [08/08/2022] (.Advanced Micro Devices Inc..) - C:\WINDOWS\System32\drivers\amdfendr.sys  =>.Advanced Micro Devices Inc.
[535091E6CAB13AF393B51EAD0825F627] [08/08/2022] (.Advanced Micro Devices Inc..) - C:\WINDOWS\System32\drivers\amdfendrmgr.sys  =>.Advanced Micro Devices Inc.
[535091E6CAB13AF393B51EAD0825F627] [08/08/2022] (.Advanced Micro Devices Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0381941.inf_amd64_e1aaf87b06e2b6d9\B380668\amdkmdag.sys  =>.Advanced Micro Devices Inc.
[535091E6CAB13AF393B51EAD0825F627] [08/08/2022] (.Advanced Micro Devices Inc..) - C:\Windows\System32\DriverStore\FileRepository\u0381941.inf_amd64_e1aaf87b06e2b6d9\B380668\atiesrxx.exe  =>.Advanced Micro Devices Inc.
[5A0BEAB17315E822D0450F87293E3B8F] [23/03/2024] (.SEIKO EPSON CORPORATION.) - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IINSHOE.EXE  =>.SEIKO EPSON CORPORATION
[5C689B877816AEFFB17C54B08E755785] [26/02/2016] (.GIGA-BYTE TECHNOLOGY CO., LTD..) - C:\Program Files (x86)\Gigabyte\AppCenter\PreRun.exe  =>.GIGA-BYTE TECHNOLOGY CO., LTD.
[5FFBE1BC422D8BC2DAB2B379D64BEA1D] [03/09/2024] (.The Document Foundation.) - C:\Program Files\LibreOffice\program\update_service.exe  =>.Not verified
[610AF5D800060000004C] [18/04/2019] (.AMD PMP-PE CB Code Signer v20160415.) - C:\WINDOWS\System32\drivers\amdgpio3.sys  =>.AMD PMP-PE CB Code Signer v20160415
[72DCD35B1DBBF28F0F9848EC766A1BDF] [27/06/2019] (.Advanced Micro Devices, Inc..) - C:\WINDOWS\System32\drivers\amdpsp.sys  =>.Advanced Micro Devices, Inc.
[7524DBFE413001B3B345768A4F60DF46] [23/03/2024] (.SEIKO EPSON Corporation.) - C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_IATIHOE.EXE  =>.SEIKO EPSON Corporation
[7AF1E5B8826150A78A17269C] [14/08/2023] (.QFX Software Corporation.) - C:\Program Files (x86)\KeyScrambler\keyscrambler.exe  =>.QFX Software Corporation
[7AF1E5B8826150A78A17269C] [14/08/2023] (.QFX Software Corporation.) - C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe  =>.QFX Software Corporation
[7AF1E5B8826150A78A17269C] [14/08/2023] (.QFX Software Corporation.) - C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe  =>.QFX Software Corporation
[7DF14DBB3F0B294012D094E3EA840697] [04/09/2012] (.SEIKO EPSON CORPORATION.) - C:\Program Files (x86)\epson\escndv\escndv.exe  =>.SEIKO EPSON CORPORATION
[7DF14DBB3F0B294012D094E3EA840697] [04/09/2012] (.SEIKO EPSON CORPORATION.) - C:\Windows\twain_32\escndv\escndv.exe  =>.SEIKO EPSON CORPORATION

~ Unselected Options: 
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Chromium  =>.Chromium
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\EPSON  =>.EPSON
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\FreeCAD  =>.Open Source
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Gears3DPrinter
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Gigabyte  =>.Gigabyte
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Google  =>.Google
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\IM Providers  =>.IM Providers
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Kyocera Document Solutions
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Kyocera Mita  =>.Kyocera Mita
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\LogiShrd  =>.LogiShrd
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Malwarebytes  =>.Malwarebytes
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Mozilla  =>.Mozilla
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Netscape  =>.Netscape
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\ODBC  =>.DB Connectivity Solutions
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Partition Assistant
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Piriform  =>.Piriform
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\Python  =>.Python
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\QFX Software  =>.QFX Software
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\QtProject  =>.QtProject
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\RegisteredApplications  =>.Microsoft Corporation
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\SEIKO EPSON CORPORATION  =>.Epson/Seico
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\The Document Foundation  =>.The Document Foundation
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\WOW6432Node  =>.Microsoft Corporation
HKU\S-1-5-21-1823878557-1970803468-117618743-1089\SOFTWARE\ZHP  =>.Nicolas Coolman

---\\ PACKAGES (3) - 0s
C:\Program Files (x86)\WindowsApps\KDEe.V.Okular_23.801.1522.0_x64__7vt06qxq7ptv8 - (..) [][Okular]
C:\Program Files (x86)\WindowsApps\MicrosoftWindows.UndockedDevKit_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy - (.Microsoft Corporation.) [][UDK Package]  =>Microsoft Corporation
C:\Program Files (x86)\WindowsApps\NcsiUwpApp_1000.19041.4239.0_neutral_neutral_8wekyb3d8bbwe - (.Microsoft.) [][NcsiUwpApp]  =>Microsoft

---\\ CONTENU DES DOSSIERS PROGRAMMES (226) - 4s
O43 - CFD: 06/02/2025 - [] D -- \Program Files\7-Zip  =>.Igor Pavlov
O43 - CFD: 25/08/2024 - [] D -- \Program Files\AMD  =>.AMD
O43 - CFD: 14/02/2025 - [] D -- \Program Files\Bambu Studio {0B209295A54B188466AD7478}.
O43 - CFD: 14/02/2025 - [] D -- \Program Files\CCleaner  =>.Piriform Ltd
O43 - CFD: 17/10/2024 - [] D -- \Program Files\Common Files  =>.Microsoft Corporation
O43 - CFD: 14/12/2024 - [] D -- \Program Files\DownloadHelper CoApp [Unsigned]
O43 - CFD: 26/08/2024 - [] D -- \Program Files\EpsonNet  =>.Epson/Seico
O43 - CFD: 25/08/2024 - [] SHD -- \Program Files\Fichiers communs  =>.Microsoft Corporation
O43 - CFD: 07/11/2024 - [] D -- \Program Files\FreeCAD 0.21 [Unsigned]
O43 - CFD: 26/08/2024 - [] D -- \Program Files\Gigabyte [Unsigned]  =>.Gigabyte
O43 - CFD: 10/10/2024 - [] D -- \Program Files\Internet Explorer  =>.Microsoft Corporation
O43 - CFD: 26/08/2024 - [] D -- \Program Files\KDService [Unsigned]
O43 - CFD: 26/08/2024 - [] D -- \Program Files\Kyocera [Unsigned]
O43 - CFD: 08/09/2024 - [] D -- \Program Files\LibreOffice  =>.LibreOffice
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Malwarebytes  =>.Malwarebytes
O43 - CFD: 26/08/2024 - [] RD -- \Program Files\Microsoft Games  =>.Microsoft Corporation
O43 - CFD: 08/09/2024 - [] D -- \Program Files\Microsoft Office 15  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Microsoft Update Health Tools  =>.Microsoft Corporation
O43 - CFD: 25/08/2024 - [0] D -- \Program Files\ModifiableWindowsApps  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- \Program Files\Mozilla Firefox  =>.Mozilla
O43 - CFD: 25/08/2024 - [] D -- \Program Files\MSBuild  =>.Microsoft Corporation
O43 - CFD: 06/02/2025 - [] D -- \Program Files\Recuva  =>.Piriform
O43 - CFD: 25/08/2024 - [] D -- \Program Files\Reference Assemblies  =>.Microsoft Corporation
O43 - CFD: 13/10/2024 - [] D -- \Program Files\RUXIM  =>.Microsoft®
O43 - CFD: 25/08/2024 - [0] HD -- \Program Files\Uninstall Information  =>.Microsoft Corporation
~ End of the scan, 16503 items in 03mn28s (2182)(0)