Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 28-03-2020
Exécuté par Olivier (29-03-2020 12:27:35)
Exécuté depuis C:\Users\Olivier\Desktop
Windows 10 Home Version 1903 18362.720 (X64) (2019-08-20 17:05:24)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-1398835985-718067912-1910963243-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1398835985-718067912-1910963243-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1398835985-718067912-1910963243-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-1398835985-718067912-1910963243-501 - Limited - Disabled)
Olivier (S-1-5-21-1398835985-718067912-1910963243-1001 - Administrator - Enabled) => C:\Users\Olivier
WDAGUtilityAccount (S-1-5-21-1398835985-718067912-1910963243-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.344 - Adobe)
ApoDispatchConfigurator (HKLM\...\{74D17F74-1A33-4A67-BCA6-EF37DAAC4A7E}) (Version: 2.3.101 - Nahimic) Hidden
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
AudioLaunchpadConfigurator (HKLM\...\{8B3FD998-D6D2-40D9-8660-DEB696969C01}) (Version: 2.3.101 - Nahimic) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bing Search Engine (HKLM-x32\...\{8BF66336-DB76-B2B6-6AF6-C236BA7611B6}) (Version: - )
BurnRecovery (HKLM-x32\...\{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1608.1201 - Application) Hidden
BurnRecovery (HKLM-x32\...\InstallShield_{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1608.1201 - Application)
CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform)
CheckDevicesConfigurator (HKLM\...\{9111FBC7-5E58-47E0-9A90-A10711098174}) (Version: 2.3.101 - Nahimic) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5913.59 - CyberLink Corp.)
Discord (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Dragon Eye(x64) (HKLM\...\{B746827A-3219-4EF8-8053-CEA5AEC12D33}) (Version: 0.0.2.3 - MSI) Hidden
Dragon Eye(x64) (HKLM-x32\...\Installshield_{B746827A-3219-4EF8-8053-CEA5AEC12D33}) (Version: 0.0.2.3 - MICRO-STAR INT'L,.LTD.)
EaseUS Partition Master 12.5 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
Epic Games Launcher (HKLM-x32\...\{A17FC61C-F723-4856-9116-3087712BCB11}) (Version: 1.1.167.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Everest Poker (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\EverestPoker.com) (Version: 1.1.1.35 - Everest Poker)
Gaming Center(x64) (HKLM\...\{551A2B0B-32DC-4CDC-BCEF-1E2FCE0557E7}) (Version: 0.0.1.44 - MSI) Hidden
Gaming Center(x64) (HKLM-x32\...\Installshield_{551A2B0B-32DC-4CDC-BCEF-1E2FCE0557E7}) (Version: 0.0.1.44 - MICRO-STAR INT'L,.LTD.)
Gila Gaming Mouse (HKLM-x32\...\{FB3A54A3-F867-456E-971F-712CC13DC830}}_is1) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
Intel(R) Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1025 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4526 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{25779f5d-6b0a-4e11-89e8-441b93c6ce2b}) (Version: 19.10.0 - Intel Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LauncherSetup (HKLM\...\{A2783539-069D-4B05-B54E-6F7391480171}) (Version: 2.3.101 - Nahimic) Hidden
Logitech Options (HKLM\...\LogiOptions) (Version: 8.10.154 - Logitech)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.12527.20278 - Microsoft Corporation)
Microsoft Office Famille et Étudiant 2016 - fr-fr (HKLM\...\HomeStudentRetail - fr-fr) (Version: 16.0.12527.20278 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{E15F69FA-660D-45CC-B28F-6CBC4CAD2091}) (Version: 1.0.0.0 - Mojang)
Mises à jour NVIDIA 38.0.2.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.2.0 - NVIDIA Corporation) Hidden
Mozilla Firefox 74.0 (x64 fr) (HKLM\...\Mozilla Firefox 74.0 (x64 fr)) (Version: 74.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 74.0 - Mozilla)
MSI Remind Manager (HKLM-x32\...\{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.10.1611.2301 - Micro-Star International Co., Ltd.) Hidden
MSI Remind Manager (HKLM-x32\...\InstallShield_{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.10.1611.2301 - Micro-Star International Co., Ltd.)
Music Manager (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\MusicManager) (Version: - Google, Inc.)
Nahimic 2 (HKLM-x32\...\{72832c4c-5eb6-4bcf-bba9-d481d067faec}) (Version: 2.3.1 - Nahimic)
Nahimic2UISetup (HKLM\...\{A98CC56E-48C6-4A47-AB6D-426AD02FA2FA}) (Version: 2.3.101 - Nahimic) Hidden
NahimicSettingsConfigurator (HKLM\...\{09F79770-7B53-4130-8EA7-AA6D5C9DC4AE}) (Version: 2.3.101 - Nahimic) Hidden
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.1.57 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.1.57 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA Pilote graphique 441.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.66 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.5.6040 - Electronic Arts, Inc.)
Panneau de configuration NVIDIA 441.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 441.66 - NVIDIA Corporation) Hidden
PhotoFiltre (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\PhotoFiltre) (Version: - )
PokerStars.fr (HKLM-x32\...\PokerStars.fr) (Version: - PokerStars.fr)
ProductDaemonSetup (HKLM\...\{65724399-BC95-4E90-A767-C83FF118F08A}) (Version: 2.3.101 - Nahimic) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7898 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30116 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)
scrabbleproB 1.1.7 (HKLM-x32\...\scrabbleproB_is1) (Version: - scrabblepro)
Search Powered by Yahoo! (HKLM-x32\...\{13B4FB74-4334-2AF4-F2B4-5A74223489F4}) (Version: - )
SonicMapperConfigurator (HKLM\...\{791D8A6B-4953-4FCB-8B24-2FC5D24B5995}) (Version: 2.3.101 - Nahimic) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlink (HKLM-x32\...\Streamlink) (Version: 1.2.0 - Streamlink)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.36215 - TeamViewer)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal)
Twitch (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
UIInstallUpgrade (HKLM\...\{93E5487F-1B37-48E6-A038-C6A90EC67B1A}) (Version: 2.3.101 - Nahimic) Hidden
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 43.1 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WTFast 4.0 (HKLM-x32\...\{12B4121D-5221-4AFC-9EDC-63B0CA139856}_is1) (Version: 4.0.7.692 - Initex & AAA Internet Publishing)
XSplit Gamecaster (HKLM-x32\...\{D3C9DBAA-5395-4971-A962-553C7DBEA423}) (Version: 2.8.1605.2355 - SplitmediaLabs)
Zoom (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\ZoomUMX) (Version: 4.3 - Zoom Video Communications, Inc.)
Packages:
=========
Afterglow -> C:\Program Files\WindowsApps\PerformanceDesignedProduc.Afterglow_1.0.28.0_x64__xgavg6chk0qcj [2018-06-29] (Performance Designed Products LLC)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1.671.0_x64__v10z8vjag6ke6 [2020-02-06] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-25] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-25] (Microsoft Corporation) [MS Ad]
Microsoft News: les actualités à ne pas manquer -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.14.3002.0_x64__8wekyb3d8bbwe [2020-02-12] (Microsoft Studios)
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-1398835985-718067912-1910963243-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Olivier\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1398835985-718067912-1910963243-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Olivier\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2018-01-01 22:44 - 2013-01-16 10:06 - 000061952 _____ () [Fichier non signé] C:\Program Files (x86)\Genius\Gila\HidDevice.dll
2017-10-13 20:38 - 2016-09-27 17:21 - 000363520 _____ () [Fichier non signé] C:\WINDOWS\SYSTEM32\APOMgr64.DLL
2017-10-13 20:38 - 2016-09-27 17:23 - 000089600 _____ () [Fichier non signé] C:\WINDOWS\SYSTEM32\CmdRtr64.DLL
2017-10-13 20:30 - 2012-06-09 20:20 - 000196096 _____ (Alexander Roshal) [Fichier non signé] C:\Program Files (x86)\WinRAR\rarext64.dll
2020-02-26 00:53 - 2020-02-26 00:53 - 001740288 ____T (Chromium.) [Fichier non signé] C:\Program Files (x86)\Chromium\Update\1.3.99.0\chromiumpdate.dll
2011-01-20 12:07 - 2011-01-20 12:07 - 000098304 _____ (Highresolution Enterprises) [Fichier non signé] C:\Program Files\WMIHook\WMIHookBtnFn\InpOut32.dll
2018-01-01 22:44 - 2011-09-06 02:41 - 000143360 _____ (Holtek ) [Fichier non signé] C:\Program Files (x86)\Genius\Gila\HIDApi.dll
2015-06-24 02:00 - 2015-06-24 02:00 - 000562688 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2015-06-24 02:00 - 2015-06-24 02:00 - 000285696 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
==================== Alternate Data Streams (Avec liste blanche) ========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\Olivier\Application Data:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Olivier\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [482]
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer sites de confiance/sensibles ==========
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-07-16 13:47 - 2018-01-05 16:19 - 000000826 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\Streamlink\bin
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\Control Panel\Desktop\\Wallpaper -> c:\users\olivier\pictures\721216.jpg
DNS Servers: 192.168.0.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\Run32: => "Discord"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "MusicManager"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "Discord"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{EBC7A52C-2288-414E-BCAE-C5BFF2A2293D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{F5A199F3-DFFF-485B-8F01-FF52F1E51BF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{A037648E-B957-44E2-BC92-72FF0CC0D029}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{6CC66920-EC67-4D27-96DA-6D8389505631}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{3FA5FB32-8131-421B-B449-BDC1949EC217}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C264A59F-73AD-40E5-BC7F-8A4F0C790180}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{0004DC2B-B32C-4EC7-89A7-CA892504F36D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{3E6FA113-E6B0-4D62-891D-A3E754584810}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{8A5FCF7F-C6FC-4523-9DC7-8341E457EB86}] => (Allow) C:\Users\Olivier\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C2EF5F12-A9E4-4B45-BC2A-698B731A2215}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{B2C82DBD-3F13-440A-AE1C-40B17DCA70B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [UDP Query User{9883C8EC-6879-42C6-AECF-C7EE492DB978}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{F85B4507-7C4A-4C9C-9799-E20494ECABD7}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{F95F9DC6-2A06-4FB4-B9C6-A9BBF1CE30A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{C4442323-1AD9-4806-8487-13C32DF59302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{D6A64345-6E62-4ED9-A551-3C14603290CC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{18B2E97D-D924-4FBC-B44D-9B10740B8D11}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{043A06D0-0409-4628-9515-38795E208623}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{C69BBC14-D019-44B7-8504-6BB1B625FAE3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{07308B2D-BE68-489D-A28B-2DB203193D2D}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{EB28FD35-0C90-4030-A60F-EDBFD9B7B065}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{3781BBFF-7BCA-44EC-8D3A-929E06DDBDF0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Fichier non signé]
FirewallRules: [{2E566A17-E3F8-40C2-8A51-8BBA3E7049EE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Fichier non signé]
FirewallRules: [{9F8F4AD8-2D01-455B-9B52-8432BEDE1D73}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TPH\TPH.exe () [Fichier non signé]
FirewallRules: [{AE9756D1-03B1-40FE-BA79-7FD5727D594D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TPH\TPH.exe () [Fichier non signé]
FirewallRules: [{0C34566D-881D-420F-860C-38C7B379367A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3B59823B-EB17-423E-84E3-507743643850}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{0F21009D-A8CF-488A-AA07-85C24B726D6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Fichier non signé]
FirewallRules: [{DA6A722C-D94E-4291-BBEE-EE35A6C796FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Fichier non signé]
FirewallRules: [{470A2698-FEB1-4B66-A6CD-3055F19DCCA6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect.exe () [Fichier non signé]
FirewallRules: [{3BE67D60-60CC-4977-83AE-09385D2B2E01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect.exe () [Fichier non signé]
FirewallRules: [{8C84ADE2-B4FB-4602-9564-81F03D489BB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cave Story+\CaveStory+.exe () [Fichier non signé]
FirewallRules: [{33C79BEF-D688-42D2-B3BB-6B4511BE2EAF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cave Story+\CaveStory+.exe () [Fichier non signé]
FirewallRules: [{B6E9DB5E-43CE-4BF8-836F-2D7B1E20CC7A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII-2\FFXiii2Launcher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{CEA49DDE-8520-4F2A-A968-DDFBC1C1EE3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII-2\FFXiii2Launcher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{74555ACC-FB4B-4D07-B461-FD798423F062}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe (Slightly Mad Studios Ltd) [Fichier non signé]
FirewallRules: [{1D13B911-F707-4AF0-B975-FB82870B78FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe (Slightly Mad Studios Ltd) [Fichier non signé]
FirewallRules: [{47B02C02-E960-4F81-AAF7-3B896285DDBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{501E5AB2-F7DF-4971-A1D5-D0A648CCA1A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{DB545C66-74C7-464D-9C11-3847A2B7C9FF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{E7F004CB-5BB1-4ED8-BC54-448A9EB08A0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{38020EA0-3318-41F6-93A5-B389D630B6F2}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{B2087CBB-ACCA-4D4B-BD9C-B5A9F2CD9E53}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{9F0CF67C-2946-4429-87DB-B8F82686DA30}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{13EBB8A8-38A6-4912-A016-4817658F482D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{6027BCA4-0A1C-416D-8618-43DC25C063F7}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{E8EDCD97-5F13-41BB-9BFF-F0FEB68596A3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{EABA4B3E-4693-4D2C-B740-35A1B1B6F78A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prominence Poker\Prominence\Binaries\Win64\Prominence-Win64-Shipping.exe (505 Games) [Fichier non signé]
FirewallRules: [{E3916B09-5871-4401-A0B3-C6D22BA75F00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prominence Poker\Prominence\Binaries\Win64\Prominence-Win64-Shipping.exe (505 Games) [Fichier non signé]
FirewallRules: [UDP Query User{E23A5582-7AA1-43AF-A089-8608091AC2C6}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{46D60D5C-0E11-4465-851D-5B7268F2FA5D}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C7899C31-70C0-464C-9DCB-7666B2BB3664}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange - Before the Storm\Life is Strange - Before the Storm.exe () [Fichier non signé]
FirewallRules: [{C3EC56D0-68B0-486A-A641-C8822944F872}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange - Before the Storm\Life is Strange - Before the Storm.exe () [Fichier non signé]
FirewallRules: [{51B06BF0-5F79-4067-AAB5-A7E44DEDB3F1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe (Bohemia Interactive a.s. -> Bohemia Interactive)
FirewallRules: [{BD85137E-CDA8-47E2-ACB1-0A708F1C8B33}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe (Bohemia Interactive a.s. -> Bohemia Interactive)
FirewallRules: [{D200CE7E-0251-437C-9BB4-9C3CD434905A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe () [Fichier non signé]
FirewallRules: [{1C65BF07-536F-4444-9BF2-5A1C5934E2B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe () [Fichier non signé]
FirewallRules: [{554FE34E-CDF2-4D1F-A962-1087A19AEC02}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{8C948997-D1DE-4695-B854-3DB6BB181D17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{BD325753-6663-42C5-A0E0-D0F10DA35ED8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{7446C02B-E9C9-41F7-B0C9-9F416B2287D7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [UDP Query User{3EC59D1F-77DD-435E-B0FC-C4217DF26F43}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe () [Fichier non signé]
FirewallRules: [TCP Query User{641A5605-857C-4492-9F1A-AB29ED882175}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe () [Fichier non signé]
FirewallRules: [{92D73F81-6181-4364-89F6-DE107827FB13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Fichier non signé]
FirewallRules: [{B506EA3E-FE58-48BC-9546-CF7F1FBE7720}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Fichier non signé]
FirewallRules: [{BDDB7631-55B0-4C50-AB0E-FE4FAFB0C53F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2637B25B-DAFE-4F6C-944D-3C9D3F9B206D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{320DB52D-32B6-478A-A4E6-A8F94EAC3EBD}] => (Allow) C:\program files\wmihook\wmihookbtnfn\meSIOCtrl.exe (Micro-Star International CO., LTD. -> MICRO-STAR INT'L,.LTD.)
FirewallRules: [{68718F50-0B09-499D-9199-3A5C2369A55C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{4D794091-E822-47A6-BC72-DE29DD0D050C}] => (Allow) C:\Program Files (x86)\WTFast\WTFast.exe (AAA Internet Publishing, Inc. -> AAA Internet Publishing, Inc.)
FirewallRules: [{9EA79D12-E48E-4753-A6B6-08EF29B28D41}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Wireless Connectivity Solutions -> )
FirewallRules: [{2A68457B-037E-45E0-9A1C-9944E62E8CDD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B5B53BB4-29D6-494C-B2D0-47A89326CB52}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CAA9758C-C99E-41D4-87C8-68140A7BA18C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{57BB8D22-6C46-4C75-8FC7-EFC039BE64FE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F89E6E59-3D3D-4E38-8D0A-671EFF13DF58}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{287E9335-FD06-47A6-9D29-87844F420632}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [TCP Query User{648477C9-2873-486A-A3C6-B21AE50D549D}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{8FA773F9-EF0D-468C-849E-C471CF5ED2BA}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [TCP Query User{417107FD-8F79-4D5E-BE34-264BD14F7D52}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [UDP Query User{347677F8-CEFA-498A-8AB9-62D7EB0D37EC}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [TCP Query User{7F68A063-D09C-4E59-9D80-135748CA1FAF}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{EB6FF59D-4613-4957-A491-C3B40A89C2AB}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [{1532068C-C9BA-4639-8A35-11630303CCE6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles Ultimate\Pixel Puzzles Ultimate.exe (DL Softworks ) [Fichier non signé]
FirewallRules: [{E53170F6-81BF-4EA9-812F-CB3EBAF910F3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles Ultimate\Pixel Puzzles Ultimate.exe (DL Softworks ) [Fichier non signé]
FirewallRules: [{7D9ADD18-17D0-409C-94F7-9CDF028FA638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles 2 - Birds\Pixel Puzzles 2 - Birds.exe (Decaying Logic ) [Fichier non signé]
FirewallRules: [{3164EC1E-C6CD-4434-978D-361CE4584428}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles 2 - Birds\Pixel Puzzles 2 - Birds.exe (Decaying Logic ) [Fichier non signé]
FirewallRules: [TCP Query User{615C7702-EDCB-49E3-B6A0-F6D6CFE67B8C}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [UDP Query User{3AF0D518-F65F-4E08-A62D-027AD9961A90}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [{453AA920-7DAC-43D2-BBD6-B4AE417ED65E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect64.exe () [Fichier non signé]
FirewallRules: [{E66AE401-107D-4AFD-9E2B-02EB8B30CB71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect64.exe () [Fichier non signé]
FirewallRules: [{D15C5F7D-EF79-4117-B88C-5A9CD63FDD0F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1DB6A1B7-CD5A-4B4A-AB41-55CCD6AE95DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C6AB6972-7995-4F1C-AFBA-47F7B99D6D68}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B2ED2F17-7B4F-493D-A180-F5F6CB011568}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{876AE0F8-4F4C-4700-881F-4F82650B5C0C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C7B5CBE8-BA60-4B00-92EF-13BF4580021E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{5EADA9D6-2495-4387-A924-7DEB2B1CFAE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{A5EA3E7A-D5F2-406C-AE39-14C10F195B07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{B458DEDB-55D4-4FEB-B398-10F6BA3977D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [TCP Query User{BB7FF847-A680-45CD-B691-53DC33EBADE6}C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [UDP Query User{570526EB-4059-408A-B49C-90E5D1AD22FF}C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{65304EA2-EEB8-48A0-A46E-41BE2508CB3D}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{559A71DA-5206-46CB-A77A-59428971C0D0}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{D9689296-3364-4AC1-9FC7-50B2572DDC3F}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [{CDD62101-61AD-478E-850F-E13CCB5F4BCE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\RocketLeague.exe (Psyonix, Inc. -> Psyonix LLC)
FirewallRules: [{CFE85ADD-5EC4-47AE-A149-0DA646ADFFCA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\RocketLeague.exe (Psyonix, Inc. -> Psyonix LLC)
FirewallRules: [{1FE1500A-390E-487E-BC11-65097773BBDA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{FC421B5D-B295-4222-B8AA-6F9ED42E1DCA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5E49F6C1-6B6B-4539-9228-115A7265FDF8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
==================== Points de restauration =========================
12-03-2020 14:45:03 Windows Update
21-03-2020 23:00:56 Point de contrôle planifié
23-03-2020 22:52:49 Installed Minecraft Launcher
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (03/29/2020 12:27:22 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4672,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 12:06:08 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5124,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 11:21:31 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4700,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 11:07:57 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3476,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 11:00:38 AM) (Source: Chromium Update) (EventID: 1) (User: AUTORITE NT)
Description: Event-ID 1
Error: (03/29/2020 10:49:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante LogiOptionsMgr.exe, version : 8.10.154.0, horodatage : 0x5e3b6a94
Nom du module défaillant : LogiOptionsMgr.exe, version : 8.10.154.0, horodatage : 0x5e3b6a94
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000089483
ID du processus défaillant : 0xec8
Heure de début de l’application défaillante : 0x01d605a6fa973f32
Chemin d’accès de l’application défaillante : C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
Chemin d’accès du module défaillant: C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
ID de rapport : 94d45b29-5e6f-44a5-a490-4da1893c2f3f
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (03/29/2020 10:49:35 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Users\Olivier\AppData\Local\chromium\Application\chrome.exe ».
Assembly dépendant 63.0.3233.0,language="*",type="win32",version="63.0.3233.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (03/29/2020 10:49:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Users\Olivier\AppData\Local\chromium\Application\chrome.exe ».
Assembly dépendant 63.0.3233.0,language="*",type="win32",version="63.0.3233.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Erreurs système:
=============
Error: (03/29/2020 12:00:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 5ème fois.
Error: (03/29/2020 11:59:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 4ème fois.
Error: (03/29/2020 11:00:38 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 3ème fois.
Error: (03/29/2020 10:59:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 2ème fois.
Error: (03/29/2020 10:52:17 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 1ème fois.
Error: (03/29/2020 10:49:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Origin Web Helper Service n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (03/29/2020 10:49:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (45000 millisecondes) a été atteint lors de l’attente de la connexion du service Origin Web Helper Service.
Error: (03/29/2020 10:48:23 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 03:14:48 le 29/03/2020 n’était pas prévu.
Windows Defender:
===================================
Date: 2020-03-29 11:01:23.143
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Unwaders.A!ml&threatid=242872&enterprise=0
Nom : Program:Win32/Unwaders.A!ml
ID : 242872
Gravité : Grave
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_C:\Users\Olivier\AppData\Roaming\6d32fdf7416d45702e0d18be9ffe7458\Kodedume.exe; file:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5204BB9E-1917-4ECB-A082-AA9E1063A5A2}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}; taskscheduler:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : Unknown
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:43.190
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Unwaders.A!ml&threatid=242872&enterprise=0
Nom : Program:Win32/Unwaders.A!ml
ID : 242872
Gravité : Grave
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_C:\Users\Olivier\AppData\Roaming\6d32fdf7416d45702e0d18be9ffe7458\Kodedume.exe; file:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5204BB9E-1917-4ECB-A082-AA9E1063A5A2}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}; taskscheduler:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : Unknown
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:36.058
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Unwaders.A!ml&threatid=242872&enterprise=0
Nom : Program:Win32/Unwaders.A!ml
ID : 242872
Gravité : Grave
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_C:\Users\Olivier\AppData\Roaming\6d32fdf7416d45702e0d18be9ffe7458\Kodedume.exe; file:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5204BB9E-1917-4ECB-A082-AA9E1063A5A2}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}; taskscheduler:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : Unknown
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:26.544
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nom : Program:Win32/Wacapew.C!ml
ID : 265744
Gravité : Moyenne
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_c:\programdata\{8c30b00c-a418-c874-fc40-e05c14a83884}\lodecer.exe; process:_pid:10048,ProcessStart:132299460069553331
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\PROGRA~3\{8C30B~1\lodecer.exe
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:07.787
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nom : Program:Win32/Wacapew.C!ml
ID : 265744
Gravité : Moyenne
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_c:\programdata\{8c30b00c-a418-c874-fc40-e05c14a83884}\lodecer.exe; process:_pid:10048,ProcessStart:132299460069553331
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Windows\SysWOW64\cmd.exe
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
CodeIntegrity:
===================================
Date: 2020-03-29 01:32:17.639
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-29 01:32:17.636
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-28 17:06:43.564
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.
Date: 2020-03-28 17:06:43.509
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.
Date: 2020-03-27 03:07:02.586
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.
Date: 2020-03-27 03:07:02.575
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.
Date: 2020-03-26 17:18:41.869
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.
Date: 2020-03-26 17:18:41.814
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. 5.10 01/04/2017
Carte mère: Micro-Star International Co., Ltd. MS-B0901
Processeur: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz
Pourcentage de mémoire utilisée: 51%
Mémoire physique - RAM - totale: 8139.14 MB
Mémoire physique - RAM - disponible: 3953.71 MB
Mémoire virtuelle totale: 16843.14 MB
Mémoire virtuelle disponible: 10298.88 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:912.5 GB) (Free:134.07 GB) NTFS
\\?\Volume{218a2c85-0077-44eb-9048-b95540b106a2}\ (WINRE) (Fixed) (Total:0.78 GB) (Free:0.76 GB) NTFS
\\?\Volume{f4737f9a-a72a-4fc9-9ac9-aaa744ec39e9}\ (BIOS_RVY) (Fixed) (Total:18.01 GB) (Free:0.28 GB) NTFS
\\?\Volume{9ccdb1b8-d556-4b70-8727-8c43d21110f7}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 7F781736)
Partition: GPT.
==================== Fin de Addition.txt =======================
Exécuté par Olivier (29-03-2020 12:27:35)
Exécuté depuis C:\Users\Olivier\Desktop
Windows 10 Home Version 1903 18362.720 (X64) (2019-08-20 17:05:24)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-1398835985-718067912-1910963243-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1398835985-718067912-1910963243-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1398835985-718067912-1910963243-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-1398835985-718067912-1910963243-501 - Limited - Disabled)
Olivier (S-1-5-21-1398835985-718067912-1910963243-1001 - Administrator - Enabled) => C:\Users\Olivier
WDAGUtilityAccount (S-1-5-21-1398835985-718067912-1910963243-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.344 - Adobe)
ApoDispatchConfigurator (HKLM\...\{74D17F74-1A33-4A67-BCA6-EF37DAAC4A7E}) (Version: 2.3.101 - Nahimic) Hidden
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version: - Ubisoft)
AudioLaunchpadConfigurator (HKLM\...\{8B3FD998-D6D2-40D9-8660-DEB696969C01}) (Version: 2.3.101 - Nahimic) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bing Search Engine (HKLM-x32\...\{8BF66336-DB76-B2B6-6AF6-C236BA7611B6}) (Version: - )
BurnRecovery (HKLM-x32\...\{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1608.1201 - Application) Hidden
BurnRecovery (HKLM-x32\...\InstallShield_{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1608.1201 - Application)
CCleaner (HKLM\...\CCleaner) (Version: 5.65 - Piriform)
CheckDevicesConfigurator (HKLM\...\{9111FBC7-5E58-47E0-9A90-A10711098174}) (Version: 2.3.101 - Nahimic) Hidden
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.5913.59 - CyberLink Corp.)
Discord (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Dragon Eye(x64) (HKLM\...\{B746827A-3219-4EF8-8053-CEA5AEC12D33}) (Version: 0.0.2.3 - MSI) Hidden
Dragon Eye(x64) (HKLM-x32\...\Installshield_{B746827A-3219-4EF8-8053-CEA5AEC12D33}) (Version: 0.0.2.3 - MICRO-STAR INT'L,.LTD.)
EaseUS Partition Master 12.5 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS)
Epic Games Launcher (HKLM-x32\...\{A17FC61C-F723-4856-9116-3087712BCB11}) (Version: 1.1.167.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Everest Poker (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\EverestPoker.com) (Version: 1.1.1.35 - Everest Poker)
Gaming Center(x64) (HKLM\...\{551A2B0B-32DC-4CDC-BCEF-1E2FCE0557E7}) (Version: 0.0.1.44 - MSI) Hidden
Gaming Center(x64) (HKLM-x32\...\Installshield_{551A2B0B-32DC-4CDC-BCEF-1E2FCE0557E7}) (Version: 0.0.1.44 - MICRO-STAR INT'L,.LTD.)
Gila Gaming Mouse (HKLM-x32\...\{FB3A54A3-F867-456E-971F-712CC13DC830}}_is1) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.99.0 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
Intel(R) Chipset Device Software (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.6.0.1025 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4526 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{7FADF1ED-241A-4F82-B8FD-19BD0A82FFA0}) (Version: 19.11.1639.0649 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{25779f5d-6b0a-4e11-89e8-441b93c6ce2b}) (Version: 19.10.0 - Intel Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LauncherSetup (HKLM\...\{A2783539-069D-4B05-B54E-6F7391480171}) (Version: 2.3.101 - Nahimic) Hidden
Logitech Options (HKLM\...\LogiOptions) (Version: 8.10.154 - Logitech)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.12527.20278 - Microsoft Corporation)
Microsoft Office Famille et Étudiant 2016 - fr-fr (HKLM\...\HomeStudentRetail - fr-fr) (Version: 16.0.12527.20278 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{E15F69FA-660D-45CC-B28F-6CBC4CAD2091}) (Version: 1.0.0.0 - Mojang)
Mises à jour NVIDIA 38.0.2.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.2.0 - NVIDIA Corporation) Hidden
Mozilla Firefox 74.0 (x64 fr) (HKLM\...\Mozilla Firefox 74.0 (x64 fr)) (Version: 74.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 74.0 - Mozilla)
MSI Remind Manager (HKLM-x32\...\{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.10.1611.2301 - Micro-Star International Co., Ltd.) Hidden
MSI Remind Manager (HKLM-x32\...\InstallShield_{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.10.1611.2301 - Micro-Star International Co., Ltd.)
Music Manager (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\MusicManager) (Version: - Google, Inc.)
Nahimic 2 (HKLM-x32\...\{72832c4c-5eb6-4bcf-bba9-d481d067faec}) (Version: 2.3.1 - Nahimic)
Nahimic2UISetup (HKLM\...\{A98CC56E-48C6-4A47-AB6D-426AD02FA2FA}) (Version: 2.3.101 - Nahimic) Hidden
NahimicSettingsConfigurator (HKLM\...\{09F79770-7B53-4130-8EA7-AA6D5C9DC4AE}) (Version: 2.3.101 - Nahimic) Hidden
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.1.57 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.1.57 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA Pilote graphique 441.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.66 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.5.6040 - Electronic Arts, Inc.)
Panneau de configuration NVIDIA 441.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 441.66 - NVIDIA Corporation) Hidden
PhotoFiltre (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\PhotoFiltre) (Version: - )
PokerStars.fr (HKLM-x32\...\PokerStars.fr) (Version: - PokerStars.fr)
ProductDaemonSetup (HKLM\...\{65724399-BC95-4E90-A767-C83FF118F08A}) (Version: 2.3.101 - Nahimic) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7898 - Realtek Semiconductor Corp.)
Realtek USB 2.0 Card Reader (HKLM-x32\...\{96AE7E41-E34E-47D0-AC07-1091A8127911}) (Version: 6.1.7100.30116 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)
scrabbleproB 1.1.7 (HKLM-x32\...\scrabbleproB_is1) (Version: - scrabblepro)
Search Powered by Yahoo! (HKLM-x32\...\{13B4FB74-4334-2AF4-F2B4-5A74223489F4}) (Version: - )
SonicMapperConfigurator (HKLM\...\{791D8A6B-4953-4FCB-8B24-2FC5D24B5995}) (Version: 2.3.101 - Nahimic) Hidden
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlink (HKLM-x32\...\Streamlink) (Version: 1.2.0 - Streamlink)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.2.36215 - TeamViewer)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal)
Twitch (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
UIInstallUpgrade (HKLM\...\{93E5487F-1B37-48E6-A038-C6A90EC67B1A}) (Version: 2.3.101 - Nahimic) Hidden
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 43.1 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WTFast 4.0 (HKLM-x32\...\{12B4121D-5221-4AFC-9EDC-63B0CA139856}_is1) (Version: 4.0.7.692 - Initex & AAA Internet Publishing)
XSplit Gamecaster (HKLM-x32\...\{D3C9DBAA-5395-4971-A962-553C7DBEA423}) (Version: 2.8.1605.2355 - SplitmediaLabs)
Zoom (HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\ZoomUMX) (Version: 4.3 - Zoom Video Communications, Inc.)
Packages:
=========
Afterglow -> C:\Program Files\WindowsApps\PerformanceDesignedProduc.Afterglow_1.0.28.0_x64__xgavg6chk0qcj [2018-06-29] (Performance Designed Products LLC)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_110.1.671.0_x64__v10z8vjag6ke6 [2020-02-06] (HP Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-25] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-25] (Microsoft Corporation) [MS Ad]
Microsoft News: les actualités à ne pas manquer -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.14.3002.0_x64__8wekyb3d8bbwe [2020-02-12] (Microsoft Studios)
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-1398835985-718067912-1910963243-1001_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\Olivier\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-1398835985-718067912-1910963243-1001_Classes\CLSID\{E9E7529D-7F09-410B-AF2A-CC154473B19C}\InprocServer32 -> C:\Users\Olivier\AppData\Local\Google\Update\1.3.35.452\psuser_64.dll (Google LLC -> Google LLC)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2012-06-09] (Alexander Roshal) [Fichier non signé]
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2018-01-01 22:44 - 2013-01-16 10:06 - 000061952 _____ () [Fichier non signé] C:\Program Files (x86)\Genius\Gila\HidDevice.dll
2017-10-13 20:38 - 2016-09-27 17:21 - 000363520 _____ () [Fichier non signé] C:\WINDOWS\SYSTEM32\APOMgr64.DLL
2017-10-13 20:38 - 2016-09-27 17:23 - 000089600 _____ () [Fichier non signé] C:\WINDOWS\SYSTEM32\CmdRtr64.DLL
2017-10-13 20:30 - 2012-06-09 20:20 - 000196096 _____ (Alexander Roshal) [Fichier non signé] C:\Program Files (x86)\WinRAR\rarext64.dll
2020-02-26 00:53 - 2020-02-26 00:53 - 001740288 ____T (Chromium.) [Fichier non signé] C:\Program Files (x86)\Chromium\Update\1.3.99.0\chromiumpdate.dll
2011-01-20 12:07 - 2011-01-20 12:07 - 000098304 _____ (Highresolution Enterprises) [Fichier non signé] C:\Program Files\WMIHook\WMIHookBtnFn\InpOut32.dll
2018-01-01 22:44 - 2011-09-06 02:41 - 000143360 _____ (Holtek ) [Fichier non signé] C:\Program Files (x86)\Genius\Gila\HIDApi.dll
2015-06-24 02:00 - 2015-06-24 02:00 - 000562688 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2015-06-24 02:00 - 2015-06-24 02:00 - 000285696 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
==================== Alternate Data Streams (Avec liste blanche) ========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\Olivier\Application Data:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Olivier\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [482]
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer sites de confiance/sensibles ==========
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-07-16 13:47 - 2018-01-05 16:19 - 000000826 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\Streamlink\bin
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\Control Panel\Desktop\\Wallpaper -> c:\users\olivier\pictures\721216.jpg
DNS Servers: 192.168.0.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\Run32: => "Discord"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "Google Update"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "MusicManager"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-1398835985-718067912-1910963243-1001\...\StartupApproved\Run: => "Discord"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{EBC7A52C-2288-414E-BCAE-C5BFF2A2293D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{F5A199F3-DFFF-485B-8F01-FF52F1E51BF5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{A037648E-B957-44E2-BC92-72FF0CC0D029}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{6CC66920-EC67-4D27-96DA-6D8389505631}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{3FA5FB32-8131-421B-B449-BDC1949EC217}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{C264A59F-73AD-40E5-BC7F-8A4F0C790180}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{0004DC2B-B32C-4EC7-89A7-CA892504F36D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{3E6FA113-E6B0-4D62-891D-A3E754584810}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH -> TeamViewer GmbH)
FirewallRules: [{8A5FCF7F-C6FC-4523-9DC7-8341E457EB86}] => (Allow) C:\Users\Olivier\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C2EF5F12-A9E4-4B45-BC2A-698B731A2215}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{B2C82DBD-3F13-440A-AE1C-40B17DCA70B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [UDP Query User{9883C8EC-6879-42C6-AECF-C7EE492DB978}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{F85B4507-7C4A-4C9C-9799-E20494ECABD7}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [{F95F9DC6-2A06-4FB4-B9C6-A9BBF1CE30A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{C4442323-1AD9-4806-8487-13C32DF59302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{D6A64345-6E62-4ED9-A551-3C14603290CC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{18B2E97D-D924-4FBC-B44D-9B10740B8D11}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{043A06D0-0409-4628-9515-38795E208623}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{C69BBC14-D019-44B7-8504-6BB1B625FAE3}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{07308B2D-BE68-489D-A28B-2DB203193D2D}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{EB28FD35-0C90-4030-A60F-EDBFD9B7B065}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{3781BBFF-7BCA-44EC-8D3A-929E06DDBDF0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Fichier non signé]
FirewallRules: [{2E566A17-E3F8-40C2-8A51-8BBA3E7049EE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Fichier non signé]
FirewallRules: [{9F8F4AD8-2D01-455B-9B52-8432BEDE1D73}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TPH\TPH.exe () [Fichier non signé]
FirewallRules: [{AE9756D1-03B1-40FE-BA79-7FD5727D594D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TPH\TPH.exe () [Fichier non signé]
FirewallRules: [{0C34566D-881D-420F-860C-38C7B379367A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{3B59823B-EB17-423E-84E3-507743643850}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{0F21009D-A8CF-488A-AA07-85C24B726D6F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Fichier non signé]
FirewallRules: [{DA6A722C-D94E-4291-BBEE-EE35A6C796FC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForestVR.exe () [Fichier non signé]
FirewallRules: [{470A2698-FEB1-4B66-A6CD-3055F19DCCA6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect.exe () [Fichier non signé]
FirewallRules: [{3BE67D60-60CC-4977-83AE-09385D2B2E01}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect.exe () [Fichier non signé]
FirewallRules: [{8C84ADE2-B4FB-4602-9564-81F03D489BB3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cave Story+\CaveStory+.exe () [Fichier non signé]
FirewallRules: [{33C79BEF-D688-42D2-B3BB-6B4511BE2EAF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cave Story+\CaveStory+.exe () [Fichier non signé]
FirewallRules: [{B6E9DB5E-43CE-4BF8-836F-2D7B1E20CC7A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII-2\FFXiii2Launcher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{CEA49DDE-8520-4F2A-A968-DDFBC1C1EE3C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII-2\FFXiii2Launcher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{74555ACC-FB4B-4D07-B461-FD798423F062}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe (Slightly Mad Studios Ltd) [Fichier non signé]
FirewallRules: [{1D13B911-F707-4AF0-B975-FB82870B78FB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\pCars\pCARS64.exe (Slightly Mad Studios Ltd) [Fichier non signé]
FirewallRules: [{47B02C02-E960-4F81-AAF7-3B896285DDBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{501E5AB2-F7DF-4971-A1D5-D0A648CCA1A8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe (SQUARE ENIX) [Fichier non signé]
FirewallRules: [{DB545C66-74C7-464D-9C11-3847A2B7C9FF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{E7F004CB-5BB1-4ED8-BC54-448A9EB08A0E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{38020EA0-3318-41F6-93A5-B389D630B6F2}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{B2087CBB-ACCA-4D4B-BD9C-B5A9F2CD9E53}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{9F0CF67C-2946-4429-87DB-B8F82686DA30}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{13EBB8A8-38A6-4912-A016-4817658F482D}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{6027BCA4-0A1C-416D-8618-43DC25C063F7}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{E8EDCD97-5F13-41BB-9BFF-F0FEB68596A3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{EABA4B3E-4693-4D2C-B740-35A1B1B6F78A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prominence Poker\Prominence\Binaries\Win64\Prominence-Win64-Shipping.exe (505 Games) [Fichier non signé]
FirewallRules: [{E3916B09-5871-4401-A0B3-C6D22BA75F00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prominence Poker\Prominence\Binaries\Win64\Prominence-Win64-Shipping.exe (505 Games) [Fichier non signé]
FirewallRules: [UDP Query User{E23A5582-7AA1-43AF-A089-8608091AC2C6}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{46D60D5C-0E11-4465-851D-5B7268F2FA5D}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{C7899C31-70C0-464C-9DCB-7666B2BB3664}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange - Before the Storm\Life is Strange - Before the Storm.exe () [Fichier non signé]
FirewallRules: [{C3EC56D0-68B0-486A-A641-C8822944F872}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Life is Strange - Before the Storm\Life is Strange - Before the Storm.exe () [Fichier non signé]
FirewallRules: [{51B06BF0-5F79-4067-AAB5-A7E44DEDB3F1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe (Bohemia Interactive a.s. -> Bohemia Interactive)
FirewallRules: [{BD85137E-CDA8-47E2-ACB1-0A708F1C8B33}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe (Bohemia Interactive a.s. -> Bohemia Interactive)
FirewallRules: [{D200CE7E-0251-437C-9BB4-9C3CD434905A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe () [Fichier non signé]
FirewallRules: [{1C65BF07-536F-4444-9BF2-5A1C5934E2B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe () [Fichier non signé]
FirewallRules: [{554FE34E-CDF2-4D1F-A962-1087A19AEC02}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{8C948997-D1DE-4695-B854-3DB6BB181D17}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{BD325753-6663-42C5-A0E0-D0F10DA35ED8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{7446C02B-E9C9-41F7-B0C9-9F416B2287D7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [UDP Query User{3EC59D1F-77DD-435E-B0FC-C4217DF26F43}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe () [Fichier non signé]
FirewallRules: [TCP Query User{641A5605-857C-4492-9F1A-AB29ED882175}C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\7 days to die\7daystodie.exe () [Fichier non signé]
FirewallRules: [{92D73F81-6181-4364-89F6-DE107827FB13}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Fichier non signé]
FirewallRules: [{B506EA3E-FE58-48BC-9546-CF7F1FBE7720}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\7 Days To Die\7dLauncher.exe () [Fichier non signé]
FirewallRules: [{BDDB7631-55B0-4C50-AB0E-FE4FAFB0C53F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2637B25B-DAFE-4F6C-944D-3C9D3F9B206D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{320DB52D-32B6-478A-A4E6-A8F94EAC3EBD}] => (Allow) C:\program files\wmihook\wmihookbtnfn\meSIOCtrl.exe (Micro-Star International CO., LTD. -> MICRO-STAR INT'L,.LTD.)
FirewallRules: [{68718F50-0B09-499D-9199-3A5C2369A55C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{4D794091-E822-47A6-BC72-DE29DD0D050C}] => (Allow) C:\Program Files (x86)\WTFast\WTFast.exe (AAA Internet Publishing, Inc. -> AAA Internet Publishing, Inc.)
FirewallRules: [{9EA79D12-E48E-4753-A6B6-08EF29B28D41}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation-Wireless Connectivity Solutions -> )
FirewallRules: [{2A68457B-037E-45E0-9A1C-9944E62E8CDD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B5B53BB4-29D6-494C-B2D0-47A89326CB52}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CAA9758C-C99E-41D4-87C8-68140A7BA18C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{57BB8D22-6C46-4C75-8FC7-EFC039BE64FE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F89E6E59-3D3D-4E38-8D0A-671EFF13DF58}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{287E9335-FD06-47A6-9D29-87844F420632}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [TCP Query User{648477C9-2873-486A-A3C6-B21AE50D549D}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{8FA773F9-EF0D-468C-849E-C471CF5ED2BA}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [TCP Query User{417107FD-8F79-4D5E-BE34-264BD14F7D52}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [UDP Query User{347677F8-CEFA-498A-8AB9-62D7EB0D37EC}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [TCP Query User{7F68A063-D09C-4E59-9D80-135748CA1FAF}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{EB6FF59D-4613-4957-A491-C3B40A89C2AB}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [{1532068C-C9BA-4639-8A35-11630303CCE6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles Ultimate\Pixel Puzzles Ultimate.exe (DL Softworks ) [Fichier non signé]
FirewallRules: [{E53170F6-81BF-4EA9-812F-CB3EBAF910F3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles Ultimate\Pixel Puzzles Ultimate.exe (DL Softworks ) [Fichier non signé]
FirewallRules: [{7D9ADD18-17D0-409C-94F7-9CDF028FA638}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles 2 - Birds\Pixel Puzzles 2 - Birds.exe (Decaying Logic ) [Fichier non signé]
FirewallRules: [{3164EC1E-C6CD-4434-978D-361CE4584428}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Pixel Puzzles 2 - Birds\Pixel Puzzles 2 - Birds.exe (Decaying Logic ) [Fichier non signé]
FirewallRules: [TCP Query User{615C7702-EDCB-49E3-B6A0-F6D6CFE67B8C}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [UDP Query User{3AF0D518-F65F-4E08-A62D-027AD9961A90}C:\program files (x86)\black desert online\bin64\blackdesert64.exe] => (Allow) C:\program files (x86)\black desert online\bin64\blackdesert64.exe (PearlAbyss Corp. -> )
FirewallRules: [{453AA920-7DAC-43D2-BBD6-B4AE417ED65E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect64.exe () [Fichier non signé]
FirewallRules: [{E66AE401-107D-4AFD-9E2B-02EB8B30CB71}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Prison Architect\Prison Architect64.exe () [Fichier non signé]
FirewallRules: [{D15C5F7D-EF79-4117-B88C-5A9CD63FDD0F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1DB6A1B7-CD5A-4B4A-AB41-55CCD6AE95DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C6AB6972-7995-4F1C-AFBA-47F7B99D6D68}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B2ED2F17-7B4F-493D-A180-F5F6CB011568}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{876AE0F8-4F4C-4700-881F-4F82650B5C0C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C7B5CBE8-BA60-4B00-92EF-13BF4580021E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{5EADA9D6-2495-4387-A924-7DEB2B1CFAE9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{A5EA3E7A-D5F2-406C-AE39-14C10F195B07}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{B458DEDB-55D4-4FEB-B398-10F6BA3977D9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [TCP Query User{BB7FF847-A680-45CD-B691-53DC33EBADE6}C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [UDP Query User{570526EB-4059-408A-B49C-90E5D1AD22FF}C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe] => (Block) C:\program files (x86)\steam\steamapps\common\rocketleague\binaries\win64\rocketleague.exe (Psyonix, LLC) [Fichier non signé]
FirewallRules: [{65304EA2-EEB8-48A0-A46E-41BE2508CB3D}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{559A71DA-5206-46CB-A77A-59428971C0D0}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{D9689296-3364-4AC1-9FC7-50B2572DDC3F}C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe
FirewallRules: [{CDD62101-61AD-478E-850F-E13CCB5F4BCE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\RocketLeague.exe (Psyonix, Inc. -> Psyonix LLC)
FirewallRules: [{CFE85ADD-5EC4-47AE-A149-0DA646ADFFCA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\RocketLeague.exe (Psyonix, Inc. -> Psyonix LLC)
FirewallRules: [{1FE1500A-390E-487E-BC11-65097773BBDA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{FC421B5D-B295-4222-B8AA-6F9ED42E1DCA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5E49F6C1-6B6B-4539-9228-115A7265FDF8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
==================== Points de restauration =========================
12-03-2020 14:45:03 Windows Update
21-03-2020 23:00:56 Point de contrôle planifié
23-03-2020 22:52:49 Installed Minecraft Launcher
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (03/29/2020 12:27:22 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4672,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 12:06:08 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (5124,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 11:21:31 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4700,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 11:07:57 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3476,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Error: (03/29/2020 11:00:38 AM) (Source: Chromium Update) (EventID: 1) (User: AUTORITE NT)
Description: Event-ID 1
Error: (03/29/2020 10:49:42 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante LogiOptionsMgr.exe, version : 8.10.154.0, horodatage : 0x5e3b6a94
Nom du module défaillant : LogiOptionsMgr.exe, version : 8.10.154.0, horodatage : 0x5e3b6a94
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000089483
ID du processus défaillant : 0xec8
Heure de début de l’application défaillante : 0x01d605a6fa973f32
Chemin d’accès de l’application défaillante : C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
Chemin d’accès du module défaillant: C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
ID de rapport : 94d45b29-5e6f-44a5-a490-4da1893c2f3f
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (03/29/2020 10:49:35 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Users\Olivier\AppData\Local\chromium\Application\chrome.exe ».
Assembly dépendant 63.0.3233.0,language="*",type="win32",version="63.0.3233.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (03/29/2020 10:49:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Users\Olivier\AppData\Local\chromium\Application\chrome.exe ».
Assembly dépendant 63.0.3233.0,language="*",type="win32",version="63.0.3233.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Erreurs système:
=============
Error: (03/29/2020 12:00:28 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 5ème fois.
Error: (03/29/2020 11:59:06 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 4ème fois.
Error: (03/29/2020 11:00:38 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 3ème fois.
Error: (03/29/2020 10:59:09 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 2ème fois.
Error: (03/29/2020 10:52:17 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Chromium Update Service (chromium) s’est terminé de façon inattendue pour la 1ème fois.
Error: (03/29/2020 10:49:13 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Origin Web Helper Service n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (03/29/2020 10:49:13 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (45000 millisecondes) a été atteint lors de l’attente de la connexion du service Origin Web Helper Service.
Error: (03/29/2020 10:48:23 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 03:14:48 le 29/03/2020 n’était pas prévu.
Windows Defender:
===================================
Date: 2020-03-29 11:01:23.143
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Unwaders.A!ml&threatid=242872&enterprise=0
Nom : Program:Win32/Unwaders.A!ml
ID : 242872
Gravité : Grave
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_C:\Users\Olivier\AppData\Roaming\6d32fdf7416d45702e0d18be9ffe7458\Kodedume.exe; file:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5204BB9E-1917-4ECB-A082-AA9E1063A5A2}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}; taskscheduler:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : Unknown
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:43.190
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Unwaders.A!ml&threatid=242872&enterprise=0
Nom : Program:Win32/Unwaders.A!ml
ID : 242872
Gravité : Grave
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_C:\Users\Olivier\AppData\Roaming\6d32fdf7416d45702e0d18be9ffe7458\Kodedume.exe; file:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5204BB9E-1917-4ECB-A082-AA9E1063A5A2}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}; taskscheduler:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : Unknown
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:36.058
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Unwaders.A!ml&threatid=242872&enterprise=0
Nom : Program:Win32/Unwaders.A!ml
ID : 242872
Gravité : Grave
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_C:\Users\Olivier\AppData\Roaming\6d32fdf7416d45702e0d18be9ffe7458\Kodedume.exe; file:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}->(UTF-16LE); regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5204BB9E-1917-4ECB-A082-AA9E1063A5A2}; regkey:_HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}; taskscheduler:_C:\Windows\System32\Tasks\Kodedume\{6D32FDF7-416D-4570-2E0D-18BE9FFE7458}
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : Unknown
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:26.544
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nom : Program:Win32/Wacapew.C!ml
ID : 265744
Gravité : Moyenne
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_c:\programdata\{8c30b00c-a418-c874-fc40-e05c14a83884}\lodecer.exe; process:_pid:10048,ProcessStart:132299460069553331
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\PROGRA~3\{8C30B~1\lodecer.exe
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
Date: 2020-03-29 11:00:07.787
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Program:Win32/Wacapew.C!ml&threatid=265744&enterprise=0
Nom : Program:Win32/Wacapew.C!ml
ID : 265744
Gravité : Moyenne
Catégorie : Logiciel potentiellement non désiré
Chemin : file:_c:\programdata\{8c30b00c-a418-c874-fc40-e05c14a83884}\lodecer.exe; process:_pid:10048,ProcessStart:132299460069553331
Origine de la détection : Ordinateur local
Type de détection : Chemin rapide
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Windows\SysWOW64\cmd.exe
Version de la veille de sécurité : AV: 1.313.328.0, AS: 1.313.328.0, NIS: 1.313.328.0
Version du moteur : AM: 1.1.16900.4, NIS: 1.1.16900.4
CodeIntegrity:
===================================
Date: 2020-03-29 01:32:17.639
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-29 01:32:17.636
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\RuntimeBroker.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Microsoft signing level requirements.
Date: 2020-03-28 17:06:43.564
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.
Date: 2020-03-28 17:06:43.509
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.
Date: 2020-03-27 03:07:02.586
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.
Date: 2020-03-27 03:07:02.575
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.
Date: 2020-03-26 17:18:41.869
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2DevProps.dll that did not meet the Store signing level requirements.
Date: 2020-03-26 17:18:41.814
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe) attempted to load \Device\HarddiskVolume3\Program Files\Nahimic\Nahimic2\UserInterface\x64\Nahimic2OSD.dll that did not meet the Store signing level requirements.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. 5.10 01/04/2017
Carte mère: Micro-Star International Co., Ltd. MS-B0901
Processeur: Intel(R) Core(TM) i5-7400 CPU @ 3.00GHz
Pourcentage de mémoire utilisée: 51%
Mémoire physique - RAM - totale: 8139.14 MB
Mémoire physique - RAM - disponible: 3953.71 MB
Mémoire virtuelle totale: 16843.14 MB
Mémoire virtuelle disponible: 10298.88 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:912.5 GB) (Free:134.07 GB) NTFS
\\?\Volume{218a2c85-0077-44eb-9048-b95540b106a2}\ (WINRE) (Fixed) (Total:0.78 GB) (Free:0.76 GB) NTFS
\\?\Volume{f4737f9a-a72a-4fc9-9ac9-aaa744ec39e9}\ (BIOS_RVY) (Fixed) (Total:18.01 GB) (Free:0.28 GB) NTFS
\\?\Volume{9ccdb1b8-d556-4b70-8727-8c43d21110f7}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 7F781736)
Partition: GPT.
==================== Fin de Addition.txt =======================