Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 4.02.2019
Exécuté par hlafuma (04-02-2019 16:21:44) Run:1
Exécuté depuis C:\Users\hlafuma\Downloads
Profils chargés: hlafuma (Profils disponibles: hlafuma & ADMIN)
Mode d'amorçage: Normal
==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{75C811EE-308B-4124-AAE7-88A1325239AC}C:\programdata\battle.net\agent\agent.6160\agent.exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{1ED001F3-A00D-4F8D-93DA-DE6589E5FF5A}C:\programdata\battle.net\agent\agent.6160\agent.exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{DFD1341B-00AC-4448-A1CA-F6C41C9247CA}D:\babyware\babyware.exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{6A198D38-D28E-421E-A315-E387FA8845A4}D:\babyware\babyware.exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{0183B1E7-280E-4AC0-8427-C8B648B61C03}F:\telechargement\paradoxip_locate_v1.66.exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{17E9E3F6-67B5-460C-9798-D17ED9CBD8D7}F:\telechargement\paradoxip_locate_v1.66.exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{B24384CA-ACAA-413D-A082-28C61EF486FA}F:\telechargement\paradoxip_locate_v1.66 (1).exe
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{4D574530-5433-412C-BF14-C6EACC555703}F:\telechargement\paradoxip_locate_v1.66 (1).exe
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
C:\Users\Famille Bambach\AppData\Local\Google\Chrome\User Data\Default\File System\000
C:\Users\Famille Bambach\AppData\Local\Google\Chrome\User Data\Default\File System\001
DeleteKey: HKEY_USERS\S-1-5-21-975513106-3625791840-409370715-1001\Software\csastats
DeleteKey: HKCU\Software\csastats
Task: {68ECF79B-000B-4C33-AFF3-2F7B0113651F} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier
FirewallRules: [UDP Query User{75C811EE-308B-4124-AAE7-88A1325239AC}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.6160\agent.exe Pas de fichier
FirewallRules: [TCP Query User{1ED001F3-A00D-4F8D-93DA-DE6589E5FF5A}C:\programdata\battle.net\agent\agent.6160\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.6160\agent.exe Pas de fichier
FirewallRules: [TCP Query User{DFD1341B-00AC-4448-A1CA-F6C41C9247CA}D:\babyware\babyware.exe] => (Allow) D:\babyware\babyware.exe Pas de fichier
FirewallRules: [UDP Query User{6A198D38-D28E-421E-A315-E387FA8845A4}D:\babyware\babyware.exe] => (Allow) D:\babyware\babyware.exe Pas de fichier
FirewallRules: [TCP Query User{713F2F19-E328-446B-8EC4-112784A1C926}D:\civ6\steamapps\common\7 days to die\7daystodie.exe] => (Allow) D:\civ6\steamapps\common\7 days to die\7daystodie.exe Pas de fichier
FirewallRules: [UDP Query User{25D1B4CF-3EAE-45FC-88C8-AB5BDAB9379A}D:\civ6\steamapps\common\7 days to die\7daystodie.exe] => (Allow) D:\civ6\steamapps\common\7 days to die\7daystodie.exe Pas de fichier
EmptyTemp:

*****************

Le Point de restauration a été créé avec succès.
Processus fermé avec succès.
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe => restauré(es) avec succès
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => non trouvé(e)
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{75C811EE-308B-4124-AAE7-88A1325239AC}C:\programdata\battle.net\agent\agent.6160\agent.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1ED001F3-A00D-4F8D-93DA-DE6589E5FF5A}C:\programdata\battle.net\agent\agent.6160\agent.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DFD1341B-00AC-4448-A1CA-F6C41C9247CA}D:\babyware\babyware.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6A198D38-D28E-421E-A315-E387FA8845A4}D:\babyware\babyware.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{0183B1E7-280E-4AC0-8427-C8B648B61C03}F:\telechargement\paradoxip_locate_v1.66.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{17E9E3F6-67B5-460C-9798-D17ED9CBD8D7}F:\telechargement\paradoxip_locate_v1.66.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B24384CA-ACAA-413D-A082-28C61EF486FA}F:\telechargement\paradoxip_locate_v1.66 (1).exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4D574530-5433-412C-BF14-C6EACC555703}F:\telechargement\paradoxip_locate_v1.66 (1).exe" => non trouvé(e)
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => non trouvé(e)
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => non trouvé(e)
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => non trouvé(e)
"C:\Users\Famille Bambach\AppData\Local\Google\Chrome\User Data\Default\File System\000" => non trouvé(e)
"C:\Users\Famille Bambach\AppData\Local\Google\Chrome\User Data\Default\File System\001" => non trouvé(e)
"HKEY_USERS\S-1-5-21-975513106-3625791840-409370715-1001\Software\csastats" => non trouvé(e)
"HKCU\Software\csastats" => non trouvé(e)
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68ECF79B-000B-4C33-AFF3-2F7B0113651F}" => non trouvé(e)
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\UNP\RunCampaignManager" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{75C811EE-308B-4124-AAE7-88A1325239AC}C:\programdata\battle.net\agent\agent.6160\agent.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{1ED001F3-A00D-4F8D-93DA-DE6589E5FF5A}C:\programdata\battle.net\agent\agent.6160\agent.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{DFD1341B-00AC-4448-A1CA-F6C41C9247CA}D:\babyware\babyware.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{6A198D38-D28E-421E-A315-E387FA8845A4}D:\babyware\babyware.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{713F2F19-E328-446B-8EC4-112784A1C926}D:\civ6\steamapps\common\7 days to die\7daystodie.exe" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{25D1B4CF-3EAE-45FC-88C8-AB5BDAB9379A}D:\civ6\steamapps\common\7 days to die\7daystodie.exe" => non trouvé(e)

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 25858545 B
Java, Flash, Steam htmlcache => 2021 B
Windows/system/drivers => 23138431309 B
Edge => 0 B
Chrome => 13058519 B
Firefox => 1121540404 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 16711 B
systemprofile32 => 66356 B
LocalService => 0 B
NetworkService => 127416 B
admin.CF => 996271 B
hlafuma => 602764958 B
ADMIN => 301329741 B

RecycleBin => 0 B
EmptyTemp: => 23.5 GB données temporaires supprimées.

================================


Le système a dû redémarrer.

==== Fin de Fixlog 16:28:04 ====