Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 14-12-2020
Exécuté par quent (19-12-2020 18:27:58)
Exécuté depuis C:\Users\quent\Downloads
Windows 10 Home Version 20H2 19042.685 (X64) (2020-10-24 19:56:33)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-2749564263-2306086831-1143213442-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2749564263-2306086831-1143213442-503 - Limited - Disabled)
Famille (S-1-5-21-2749564263-2306086831-1143213442-1002 - Limited - Enabled) => C:\Users\Famille
Invité (S-1-5-21-2749564263-2306086831-1143213442-501 - Limited - Disabled)
quent (S-1-5-21-2749564263-2306086831-1143213442-1001 - Administrator - Enabled) => C:\Users\quent
WDAGUtilityAccount (S-1-5-21-2749564263-2306086831-1143213442-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Norton Security Ultra (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
FW: Bitdefender Pare-feu (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 25.0.1.177 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 25.0.10.52 - Bitdefender)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.240.30.1002 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.75 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 86.1.6938.201 - Piriform Software)
CCleaner Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1067.0 - Piriform Software) Hidden
CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.8904.01 - CyberLink Corp.)
Discord (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{33210BEC-CCE7-4CBB-AEA8-10529097CCBC}) (Version: 1.1.293.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.2.6.1027 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000070-0200-1036-84C8-B8D95FA3C8C3}) (Version: 20.70.0 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{7EBADAB6-B7AC-4560-85A7-FF345559F193}) (Version: 17.2.6.1027 - Intel Corporation)
Java 8 Update 271 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180271F0}) (Version: 8.0.2710.9 - Oracle Corporation)
KULT#100 Gaming Mouse (HKLM-x32\...\{1F62FD2A-129B-45AA-B328-2B5C06518058}) (Version: 1.00.0000 - KULT#100)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
LibreOffice 7.0.3.1 (HKLM\...\{3C4801FF-3D7B-4804-877E-3A322C00524C}) (Version: 7.0.3.1 - The Document Foundation)
Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{bb8ed0cf-b474-4f77-ab97-8ec90b19b7ea}) (Version: 20.80.1 - Intel Corporation)
Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.13426.20332 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.66 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{27B34E47-68AE-4802-822A-9F0C187AF84A}) (Version: 1.0.0.0 - Mojang)
Mises à jour NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA Pilote graphique 460.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 460.89 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.13426.20332 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.90.45798 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.158.1.1 - Overwolf Ltd.)
paint.net (HKLM\...\{B56F4594-AA51-450A-BBD0-2CE48675D33A}) (Version: 4.2.14 - dotPDN LLC)
Porofessor.gg (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Overwolf_pibhbkkgefgheeglaeemkkfjlhidhcedalapdggh) (Version: 2.5.82 - Overwolf app)
PredatorSense Service (HKLM\...\{BA94ACF1-7245-41B1-AAF7-2599AA1A4B09}) (Version: 3.00.3010 - Acer Incorporated)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.26.328.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8627 - Realtek Semiconductor Corp.)
Spotify (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Spotify) (Version: 1.1.48.625.g1c87c7f7 - Spotify AB)
STAR WARS™ Battlefront™ II (HKLM-x32\...\{8a882ce0-0c0b-4eb2-850c-28ebadab4f50}) (Version: - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 73.0 - Ubisoft)
WinRAR 5.91 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Packages:
=========
Acer Collection S -> C:\Program Files\WindowsApps\acerincorporated.acercollections_1.0.3004.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3022.0_x64__48frkmn4z8aw4 [2020-11-17] (Acer Incorporated)
ASTRONEER -> C:\Program Files\WindowsApps\SystemEraSoftworks.29415440E1269_1.17.89.0_x64__ftk5pbg2rayv2 [2020-12-17] (System Era Softworks)
Care Center S -> C:\Program Files\WindowsApps\acerincorporated.acercarecenters_4.0.3019.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
Deep Rock Galactic -> C:\Program Files\WindowsApps\CoffeeStainStudios.DeepRockGalactic_1.32.47811.0_x64__496a1srhmar9w [2020-12-17] (Coffee Stain Publishing)
Doom Eternal - PC -> C:\Program Files\WindowsApps\BethesdaSoftworks.DOOMEternal-PC_1.0.3.0_x64__3275kfvn8vcwc [2020-12-17] (Bethesda Softworks)
DOOM Eternal: Campaign -> C:\Program Files\WindowsApps\BethesdaSoftworks.DOOMEternalCampaignPC_1.0.1.0_x64__3275kfvn8vcwc [2020-12-17] (Bethesda Softworks)
Dropbox - offre promotionnelle -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2020-12-14] (Dropbox Inc.)
Extension Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-11-16] (Microsoft Corporation)
GoTrust ID -> C:\Program Files\WindowsApps\GOTrustTechnologyInc.GO-TrustAuthenticator_3.1.21.0_x64__0r04f53sqacg6 [2020-12-03] (GoTrustID Inc.)
Grounded -> C:\Program Files\WindowsApps\Microsoft.Maine_1.5.3.0_x64__8wekyb3d8bbwe [2020-12-17] (Microsoft Studios)
Man of Medan -> C:\Program Files\WindowsApps\NAMCOBANDAIGamesInc.ManofMedanGamePass_1.0.23.0_x64__gdy2aq6ez762w [2020-12-17] (BANDAI NAMCO Entertainment Inc.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-12-14] (Microsoft Studios) [MS Ad]
Minecraft Dungeons -> C:\Program Files\WindowsApps\Microsoft.Lovika_1.7.3.0_x64__8wekyb3d8bbwe [2020-12-17] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-10-24] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.959.0_x64__56jybvy8sckqj [2020-12-18] (NVIDIA Corp.)
PhotoDirector for acer -> C:\Program Files\WindowsApps\cyberlinkcorp.ac.photodirectorforacerdesktop_8.0.5229.0_x64__ypz87dpxkv292 [2020-10-24] (CYBERLINK COM CORP)
PowerDirector for acer -> C:\Program Files\WindowsApps\cyberlinkcorp.ac.powerdirectorforacerdesktop_14.0.4304.0_x64__ypz87dpxkv292 [2020-10-24] (CYBERLINK COM CORP)
PredatorSense_DT_V30 -> C:\Program Files\WindowsApps\AcerIncorporated.PredatorSenseDTV30_3.0.3010.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
QuickAccess -> C:\Program Files\WindowsApps\AcerIncorporated.QuickAccess_3.0.3017.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.2.169.0_x64__dt26b99r8h8gj [2020-10-24] (Realtek Semiconductor Corp)
User Experience Improvement Program -> C:\Program Files\WindowsApps\AcerIncorporated.UserExperienceImprovementProgram_4.0.3106.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-03-19] () [Fichier non signé] [Fichier en cours d'utilisation]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-03-19] () [Fichier non signé] [Fichier en cours d'utilisation]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvaei.inf_amd64_3dcd652b7fe0f6b7\nvshext.dll [2020-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\quent\Desktop\Ornikar.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gcbfdkgdehbcllhglllmfkdhcpfcbjka
ShortcutWithArgument: C:\Users\quent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Ornikar.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gcbfdkgdehbcllhglllmfkdhcpfcbjka
==================== Modules chargés (Avec liste blanche) =============
2019-05-15 16:16 - 2019-05-15 16:16 - 000050176 _____ () [Fichier non signé] C:\Program Files\Acer\PredatorSense Service\CMUOT_ACER.dll
2019-05-15 16:16 - 2019-05-15 16:16 - 000019456 _____ () [Fichier non signé] C:\Program Files\Acer\PredatorSense Service\hidapi.dll
2019-03-19 16:57 - 2019-03-19 16:57 - 000126976 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsServiceApi.dll
2020-12-01 03:47 - 2020-12-01 03:47 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\LIBEAY32.dll
2020-12-01 03:47 - 2020-12-01 03:47 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\ssleay32.dll
2020-12-01 03:47 - 2020-12-01 03:47 - 001611264 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 005487104 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Core.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 005841920 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Gui.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 001179136 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Network.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 000146432 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 005089792 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 000184832 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\.DEFAULT -> DefaultScope {02D76476-CC9B-465C-A022-B6521394D98D} URL =
SearchScopes: HKU\.DEFAULT -> {92700BF9-6281-4322-B144-F11281CFD086} URL =
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_271\bin\ssv.dll [2020-12-16] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_271\bin\jp2ssv.dll [2020-12-16] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-10-26] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 05:49 - 2020-12-19 17:54 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\quent\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\dio josuke.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\Run: => "BdVpnApp"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "EADM"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{A34C9525-CC5F-4734-B4BC-D17A9801DBEF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{64DC9E99-7461-4540-9AB5-B7A683597185}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{27BBA3D3-BAA3-4BAF-9400-878CFE3C3F0F}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{C739C70D-C06C-4B77-B2CD-9AAB36F23622}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{37D835B5-7B8A-411E-B4D4-7FB375A55970}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1494BAB6-7DE3-4E38-B3CD-D912DC4FCF0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{8FE18707-B2FB-4F65-8335-0E5E23B3DF4B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{CF01529B-0605-427F-8F58-BB2706055081}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [{DC1D115D-BA76-44A7-88A0-A2503EF0FD45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [{B53CE544-79C3-4986-AD7B-DA710BAA1C77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{A7DA03D6-2FFB-4698-80B0-BAAC196B0D0B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{CD7C1C88-C609-49B9-B60B-36331E13FC23}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_Vulkan.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{14609B15-AB81-4C8A-A144-AB0522C1358C}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_Vulkan.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{A86CBE4D-6C8E-4744-BB79-560937FB3CCA}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{6A998CF4-EEAD-481A-97BD-B8D25F498658}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{A9E3D6CF-7B0F-4BCB-A318-0EBFCADABAF3}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{562447DF-7196-4632-A455-47B22FFD4A20}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{9D5DC1E7-6898-4631-9F01-E284244BFFDA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{2B7F77F5-9CAF-4A81-BFBD-760D1344C158}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A9B0F18D-7875-4F89-8A6A-21D7BBD1921B}] => (Allow) D:\SteamLibrary\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{C299E81E-6B64-491A-A2E1-827D1713C8F2}] => (Allow) D:\SteamLibrary\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{7C75F8F0-310C-4DEB-AA55-270E10275618}] => (Allow) D:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé]
FirewallRules: [{B47236C1-349E-4532-9278-BEFAAF31FE82}] => (Allow) D:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé]
FirewallRules: [{EDEA32C0-76C9-430D-91C8-294B2BF39728}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{618F95AF-22B0-4EE1-B1E2-761F745C2E0E}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{2701C394-A054-4F1A-AB11-A4CA45300E0F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D6BDEDA5-0614-4EA7-A3DB-7AEFB7C28926}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3EC9D3EE-0786-48B6-A7FC-48A67C5C5331}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A5CEEBF7-18D2-4972-A305-1CC420F51B9B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EA05F727-70F7-4447-85F2-D47299465629}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Fichier non signé]
FirewallRules: [{A778003A-7991-48AE-AC42-ABF5CD8085BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Fichier non signé]
FirewallRules: [{E657BEC0-5660-45E4-B203-FE5BF9158F5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lego Star Wars III - The Clone Wars\LEGOCloneWars.exe (LucasArts) [Fichier non signé]
FirewallRules: [{D0BE05CF-1F2C-42F7-8631-578C9EC2A6C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lego Star Wars III - The Clone Wars\LEGOCloneWars.exe (LucasArts) [Fichier non signé]
FirewallRules: [{1D2E24D0-E280-41AF-AFB4-A01270E86183}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Agrou\Agrou.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{4F0658D0-8DF2-48AA-86D2-368F7201BF34}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Agrou\Agrou.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{93273DD9-BF16-44F6-9CE6-8F93CD7DAA86}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6F1C3B8E-6BD2-4DDB-8ABF-7767207E446B}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{9FE865ED-ED8E-440D-A874-5FA95AEF8222}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{851A24C2-43B4-404A-839B-CB98AF838450}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{7C9B643A-624F-4615-932E-6B79BD6D0E23}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2DBE3EDD-A33F-4677-B5D4-4D2AED1FBEC0}] => (Allow) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{5B76E852-B926-4C8C-906A-B67F9B46D418}] => (Allow) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{50298E09-8BB5-4292-A697-A2C63A7DEDF9}] => (Block) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{3554E6BB-12DF-4AA7-B308-28339BAC963E}] => (Block) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D4EABB63-5431-4BEF-9393-A39A41600ABD}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe (Piriform Software Ltd -> Piriform Software)
FirewallRules: [{1B068EDB-ACF2-415B-8D5A-A286837953A5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D270D6CA-A3C1-4994-A221-D0B15617AE81}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1AA3F464-32F1-4EBE-ABE1-875868DACB36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{077E4DE7-28D7-4D8C-AF29-0E7C463D0753}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{5778C919-FF1A-4101-A725-53B6E25B834C}C:\users\quent\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\quent\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{F2375A30-845E-42B3-A5ED-A3A318F5DB03}C:\users\quent\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\quent\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
==================== Points de restauration =========================
16-12-2020 17:28:37 Point de contrôle planifié
17-12-2020 15:08:49 AdwCleaner_BeforeCleaning_17/12/2020_15:08:48
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (12/19/2020 03:00:23 PM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x305; CorrelationId: {6E1A4C46-4BEA-4270-B394-D46320FD4D79}
Error: (12/19/2020 10:56:45 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-I3EH5KH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (12/19/2020 10:56:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante AUDIODG.EXE, version : 10.0.19041.662, horodatage : 0xbbe81701
Nom du module défaillant : MBAPO264.dll, version : 2.0.0.36, horodatage : 0x5cc7fde1
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000006f21a
ID du processus défaillant : 0x2c9c
Heure de début de l’application défaillante : 0x01d6d5eca88e4986
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\AUDIODG.EXE
Chemin d’accès du module défaillant: C:\WINDOWS\System32\MBAPO264.dll
ID de rapport : e201943e-eb2d-4c65-a6dd-9838a8659197
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (12/19/2020 10:53:55 AM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Erreur lors de la mise à jour du statut vers SECURITY_PRODUCT_STATE_SNOOZED.
Error: (12/18/2020 11:00:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante AUDIODG.EXE, version : 10.0.19041.662, horodatage : 0xbbe81701
Nom du module défaillant : MBAPO264.dll, version : 2.0.0.36, horodatage : 0x5cc7fde1
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000070701
ID du processus défaillant : 0x3098
Heure de début de l’application défaillante : 0x01d6d5891b740f7c
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\AUDIODG.EXE
Chemin d’accès du module défaillant: C:\WINDOWS\System32\MBAPO264.dll
ID de rapport : 56e0cdf9-d37a-4273-97b6-6a98a87d6a90
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (12/18/2020 11:00:25 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center n'a pas pu valider l'appelant. Erreur %1.
Error: (12/18/2020 11:00:11 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-I3EH5KH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (12/18/2020 10:59:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante AUDIODG.EXE, version : 10.0.19041.662, horodatage : 0xbbe81701
Nom du module défaillant : MBAPO264.dll, version : 2.0.0.36, horodatage : 0x5cc7fde1
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000070704
ID du processus défaillant : 0x2d00
Heure de début de l’application défaillante : 0x01d6d58917a9338d
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\AUDIODG.EXE
Chemin d’accès du module défaillant: C:\WINDOWS\System32\MBAPO264.dll
ID de rapport : b1b1bc57-464c-4227-9450-fd8f0384c461
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (12/19/2020 10:52:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service ACCSvc n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (12/19/2020 10:52:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service MBAMChameleon n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (12/19/2020 10:52:01 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 02:55:11 le 19/12/2020 n’était pas prévu.
Error: (12/19/2020 10:51:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORITE NT)
Description: 3221225684Une erreur irrécupérable s’est produite pendant le traitement des données de restauration.
Error: (12/18/2020 10:59:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service ACCSvc n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (12/18/2020 10:58:35 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-I3EH5KH)
Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/18/2020 10:58:35 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-I3EH5KH)
Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/18/2020 10:27:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service ACCSvc n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
CodeIntegrity:
===================================
Date: 2020-12-14 18:22:44.5040000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.158.1.1\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-13 02:35:53.1060000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.158.1.1\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-12 17:46:42.8840000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.158.1.1\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-11 12:31:00.0010000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-09 17:05:28.4750000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-05 02:27:11.3390000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-03 21:55:26.0080000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-03 21:55:24.1820000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. R01-C1 04/08/2020
Carte mère: Acer Predator PO3-600(DCH)
Processeur: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz
Pourcentage de mémoire utilisée: 76%
Mémoire physique - RAM - totale: 8109.98 MB
Mémoire physique - RAM - disponible: 1885.27 MB
Mémoire virtuelle totale: 18861.98 MB
Mémoire virtuelle disponible: 7490.77 MB
==================== Lecteurs ================================
Drive c: (Acer) (Fixed) (Total:237.35 GB) (Free:56.35 GB) NTFS
Drive d: (Data) (Fixed) (Total:931.51 GB) (Free:385.53 GB) NTFS
\\?\Volume{aa210a93-8b8a-4c51-bea9-73de0df745ae}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.48 GB) NTFS
\\?\Volume{61c29726-62d5-2f87-c58a-65acd647c816}\ () (Fixed) (Total:1.66 GB) (Free:0 GB) NTFS
\\?\Volume{35380adb-d079-f43e-43e8-7e1cbc44ad8a}\ () (Fixed) (Total:3.23 GB) (Free:0 GB) NTFS
\\?\Volume{7c819527-ab86-3b0a-49f0-7467be31bf7b}\ () (Fixed) (Total:55.8 GB) (Free:0 GB) NTFS
\\?\Volume{5988497b-609b-bc1e-6f0f-7749883e5760}\ () (Fixed) (Total:68.75 GB) (Free:0 GB) NTFS
\\?\Volume{1328b3ac-8c6f-6da6-c181-f5c0b4ef9ef3}\ () (Fixed) (Total:3.82 GB) (Free:0 GB) NTFS
\\?\Volume{20af4153-6165-f2c6-b7d0-0c6f65a43426}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS
\\?\Volume{97f9452e-7892-4274-8b34-0b379e45014f}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 4D2B77F3)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: 3CD69A44)
Partition: GPT.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 2.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 3.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 4.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 5.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 6.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 7.
==================== Fin de Addition.txt =======================
Exécuté par quent (19-12-2020 18:27:58)
Exécuté depuis C:\Users\quent\Downloads
Windows 10 Home Version 20H2 19042.685 (X64) (2020-10-24 19:56:33)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-2749564263-2306086831-1143213442-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2749564263-2306086831-1143213442-503 - Limited - Disabled)
Famille (S-1-5-21-2749564263-2306086831-1143213442-1002 - Limited - Enabled) => C:\Users\Famille
Invité (S-1-5-21-2749564263-2306086831-1143213442-501 - Limited - Disabled)
quent (S-1-5-21-2749564263-2306086831-1143213442-1001 - Administrator - Enabled) => C:\Users\quent
WDAGUtilityAccount (S-1-5-21-2749564263-2306086831-1143213442-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Norton Security Ultra (Enabled - Up to date) {A2708B76-6835-6565-CB96-694212954A75}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
FW: Bitdefender Pare-feu (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 25.0.1.177 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 25.0.10.52 - Bitdefender)
BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.240.30.1002 - BlueStack Systems, Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.75 - Piriform)
CCleaner Browser (HKLM-x32\...\CCleaner Browser) (Version: 86.1.6938.201 - Piriform Software)
CCleaner Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1067.0 - Piriform Software) Hidden
CyberLink PowerDVD 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.8904.01 - CyberLink Corp.)
Discord (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Epic Games Launcher (HKLM-x32\...\{33210BEC-CCE7-4CBB-AEA8-10529097CCBC}) (Version: 1.1.293.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 17.2.6.1027 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000070-0200-1036-84C8-B8D95FA3C8C3}) (Version: 20.70.0 - Intel Corporation)
Intel® Optane™ Pinning Explorer Extensions (HKLM\...\{7EBADAB6-B7AC-4560-85A7-FF345559F193}) (Version: 17.2.6.1027 - Intel Corporation)
Java 8 Update 271 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180271F0}) (Version: 8.0.2710.9 - Oracle Corporation)
KULT#100 Gaming Mouse (HKLM-x32\...\{1F62FD2A-129B-45AA-B328-2B5C06518058}) (Version: 1.00.0000 - KULT#100)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
LibreOffice 7.0.3.1 (HKLM\...\{3C4801FF-3D7B-4804-877E-3A322C00524C}) (Version: 7.0.3.1 - The Document Foundation)
Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{bb8ed0cf-b474-4f77-ab97-8ec90b19b7ea}) (Version: 20.80.1 - Intel Corporation)
Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.13426.20332 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.66 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )
Microsoft SQL Server Compact 4.0 SP1 x64 ENU (HKLM\...\{78909610-D229-459C-A936-25D92283D3FD}) (Version: 4.0.8876.1 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{27B34E47-68AE-4802-822A-9F0C187AF84A}) (Version: 1.0.0.0 - Mojang)
Mises à jour NVIDIA 38.0.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.5.0 - NVIDIA Corporation) Hidden
MotioninJoy Gamepad tool 0.7.1001 (HKLM\...\{330DAC67-5B62-452A-A0E4-6B4A5923940F}_is1) (Version: 0.7.1001 - www.motioninjoy.com)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA Pilote graphique 460.89 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 460.89 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20332 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.13426.20332 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.90.45798 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.158.1.1 - Overwolf Ltd.)
paint.net (HKLM\...\{B56F4594-AA51-450A-BBD0-2CE48675D33A}) (Version: 4.2.14 - dotPDN LLC)
Porofessor.gg (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Overwolf_pibhbkkgefgheeglaeemkkfjlhidhcedalapdggh) (Version: 2.5.82 - Overwolf app)
PredatorSense Service (HKLM\...\{BA94ACF1-7245-41B1-AAF7-2599AA1A4B09}) (Version: 3.00.3010 - Acer Incorporated)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.26.328.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8627 - Realtek Semiconductor Corp.)
Spotify (HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\Spotify) (Version: 1.1.48.625.g1c87c7f7 - Spotify AB)
STAR WARS™ Battlefront™ II (HKLM-x32\...\{8a882ce0-0c0b-4eb2-850c-28ebadab4f50}) (Version: - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 73.0 - Ubisoft)
WinRAR 5.91 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Packages:
=========
Acer Collection S -> C:\Program Files\WindowsApps\acerincorporated.acercollections_1.0.3004.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3022.0_x64__48frkmn4z8aw4 [2020-11-17] (Acer Incorporated)
ASTRONEER -> C:\Program Files\WindowsApps\SystemEraSoftworks.29415440E1269_1.17.89.0_x64__ftk5pbg2rayv2 [2020-12-17] (System Era Softworks)
Care Center S -> C:\Program Files\WindowsApps\acerincorporated.acercarecenters_4.0.3019.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
Deep Rock Galactic -> C:\Program Files\WindowsApps\CoffeeStainStudios.DeepRockGalactic_1.32.47811.0_x64__496a1srhmar9w [2020-12-17] (Coffee Stain Publishing)
Doom Eternal - PC -> C:\Program Files\WindowsApps\BethesdaSoftworks.DOOMEternal-PC_1.0.3.0_x64__3275kfvn8vcwc [2020-12-17] (Bethesda Softworks)
DOOM Eternal: Campaign -> C:\Program Files\WindowsApps\BethesdaSoftworks.DOOMEternalCampaignPC_1.0.1.0_x64__3275kfvn8vcwc [2020-12-17] (Bethesda Softworks)
Dropbox - offre promotionnelle -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2020-12-14] (Dropbox Inc.)
Extension Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2017.39121.36610.0_x64__8wekyb3d8bbwe [2020-11-16] (Microsoft Corporation)
GoTrust ID -> C:\Program Files\WindowsApps\GOTrustTechnologyInc.GO-TrustAuthenticator_3.1.21.0_x64__0r04f53sqacg6 [2020-12-03] (GoTrustID Inc.)
Grounded -> C:\Program Files\WindowsApps\Microsoft.Maine_1.5.3.0_x64__8wekyb3d8bbwe [2020-12-17] (Microsoft Studios)
Man of Medan -> C:\Program Files\WindowsApps\NAMCOBANDAIGamesInc.ManofMedanGamePass_1.0.23.0_x64__gdy2aq6ez762w [2020-12-17] (BANDAI NAMCO Entertainment Inc.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-12-14] (Microsoft Studios) [MS Ad]
Minecraft Dungeons -> C:\Program Files\WindowsApps\Microsoft.Lovika_1.7.3.0_x64__8wekyb3d8bbwe [2020-12-17] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-10-24] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.959.0_x64__56jybvy8sckqj [2020-12-18] (NVIDIA Corp.)
PhotoDirector for acer -> C:\Program Files\WindowsApps\cyberlinkcorp.ac.photodirectorforacerdesktop_8.0.5229.0_x64__ypz87dpxkv292 [2020-10-24] (CYBERLINK COM CORP)
PowerDirector for acer -> C:\Program Files\WindowsApps\cyberlinkcorp.ac.powerdirectorforacerdesktop_14.0.4304.0_x64__ypz87dpxkv292 [2020-10-24] (CYBERLINK COM CORP)
PredatorSense_DT_V30 -> C:\Program Files\WindowsApps\AcerIncorporated.PredatorSenseDTV30_3.0.3010.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
QuickAccess -> C:\Program Files\WindowsApps\AcerIncorporated.QuickAccess_3.0.3017.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.2.169.0_x64__dt26b99r8h8gj [2020-10-24] (Realtek Semiconductor Corp)
User Experience Improvement Program -> C:\Program Files\WindowsApps\AcerIncorporated.UserExperienceImprovementProgram_4.0.3106.0_x64__48frkmn4z8aw4 [2020-10-24] (Acer Incorporated)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-03-19] () [Fichier non signé] [Fichier en cours d'utilisation]
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Program Files\Intel\OptaneShellExtensions\OptaneShellExt.dll [2019-03-19] () [Fichier non signé] [Fichier en cours d'utilisation]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvaei.inf_amd64_3dcd652b7fe0f6b7\nvshext.dll [2020-12-12] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\quent\Desktop\Ornikar.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gcbfdkgdehbcllhglllmfkdhcpfcbjka
ShortcutWithArgument: C:\Users\quent\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Ornikar.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gcbfdkgdehbcllhglllmfkdhcpfcbjka
==================== Modules chargés (Avec liste blanche) =============
2019-05-15 16:16 - 2019-05-15 16:16 - 000050176 _____ () [Fichier non signé] C:\Program Files\Acer\PredatorSense Service\CMUOT_ACER.dll
2019-05-15 16:16 - 2019-05-15 16:16 - 000019456 _____ () [Fichier non signé] C:\Program Files\Acer\PredatorSense Service\hidapi.dll
2019-03-19 16:57 - 2019-03-19 16:57 - 000126976 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\Intel\OptaneShellExtensions\iaStorAfsServiceApi.dll
2020-12-01 03:47 - 2020-12-01 03:47 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\LIBEAY32.dll
2020-12-01 03:47 - 2020-12-01 03:47 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\ssleay32.dll
2020-12-01 03:47 - 2020-12-01 03:47 - 001611264 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 005487104 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Core.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 005841920 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Gui.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 001179136 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Network.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 000146432 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 005089792 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2020-12-16 15:38 - 2020-12-01 03:47 - 000184832 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://acer17win10.msn.com/?pc=ACTE
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE
SearchScopes: HKU\.DEFAULT -> DefaultScope {02D76476-CC9B-465C-A022-B6521394D98D} URL =
SearchScopes: HKU\.DEFAULT -> {92700BF9-6281-4322-B144-F11281CFD086} URL =
BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_271\bin\ssv.dll [2020-12-16] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_271\bin\jp2ssv.dll [2020-12-16] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-10-26] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2020-11-13] (Bitdefender SRL -> Bitdefender)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 05:49 - 2020-12-19 17:54 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\quent\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\dio josuke.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\Run: => "BdVpnApp"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2749564263-2306086831-1143213442-1001\...\StartupApproved\Run: => "EADM"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{A34C9525-CC5F-4734-B4BC-D17A9801DBEF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{64DC9E99-7461-4540-9AB5-B7A683597185}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{27BBA3D3-BAA3-4BAF-9400-878CFE3C3F0F}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{C739C70D-C06C-4B77-B2CD-9AAB36F23622}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{37D835B5-7B8A-411E-B4D4-7FB375A55970}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1494BAB6-7DE3-4E38-B3CD-D912DC4FCF0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{8FE18707-B2FB-4F65-8335-0E5E23B3DF4B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{CF01529B-0605-427F-8F58-BB2706055081}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [{DC1D115D-BA76-44A7-88A0-A2503EF0FD45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [{B53CE544-79C3-4986-AD7B-DA710BAA1C77}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{A7DA03D6-2FFB-4698-80B0-BAAC196B0D0B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{CD7C1C88-C609-49B9-B60B-36331E13FC23}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_Vulkan.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{14609B15-AB81-4C8A-A144-AB0522C1358C}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_Vulkan.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{A86CBE4D-6C8E-4744-BB79-560937FB3CCA}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{6A998CF4-EEAD-481A-97BD-B8D25F498658}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{A9E3D6CF-7B0F-4BCB-A318-0EBFCADABAF3}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{562447DF-7196-4632-A455-47B22FFD4A20}] => (Allow) D:\SteamLibrary\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{9D5DC1E7-6898-4631-9F01-E284244BFFDA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{2B7F77F5-9CAF-4A81-BFBD-760D1344C158}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A9B0F18D-7875-4F89-8A6A-21D7BBD1921B}] => (Allow) D:\SteamLibrary\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{C299E81E-6B64-491A-A2E1-827D1713C8F2}] => (Allow) D:\SteamLibrary\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{7C75F8F0-310C-4DEB-AA55-270E10275618}] => (Allow) D:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé]
FirewallRules: [{B47236C1-349E-4532-9278-BEFAAF31FE82}] => (Allow) D:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé]
FirewallRules: [{EDEA32C0-76C9-430D-91C8-294B2BF39728}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{618F95AF-22B0-4EE1-B1E2-761F745C2E0E}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{2701C394-A054-4F1A-AB11-A4CA45300E0F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D6BDEDA5-0614-4EA7-A3DB-7AEFB7C28926}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3EC9D3EE-0786-48B6-A7FC-48A67C5C5331}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A5CEEBF7-18D2-4972-A305-1CC420F51B9B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{EA05F727-70F7-4447-85F2-D47299465629}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Fichier non signé]
FirewallRules: [{A778003A-7991-48AE-AC42-ABF5CD8085BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SpeedRunners\SpeedRunners.exe (DoubleDutch Games) [Fichier non signé]
FirewallRules: [{E657BEC0-5660-45E4-B203-FE5BF9158F5C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lego Star Wars III - The Clone Wars\LEGOCloneWars.exe (LucasArts) [Fichier non signé]
FirewallRules: [{D0BE05CF-1F2C-42F7-8631-578C9EC2A6C8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lego Star Wars III - The Clone Wars\LEGOCloneWars.exe (LucasArts) [Fichier non signé]
FirewallRules: [{1D2E24D0-E280-41AF-AFB4-A01270E86183}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Agrou\Agrou.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{4F0658D0-8DF2-48AA-86D2-368F7201BF34}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Agrou\Agrou.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{93273DD9-BF16-44F6-9CE6-8F93CD7DAA86}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6F1C3B8E-6BD2-4DDB-8ABF-7767207E446B}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{9FE865ED-ED8E-440D-A874-5FA95AEF8222}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{851A24C2-43B4-404A-839B-CB98AF838450}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Business Tour\BusinessTour.exe () [Fichier non signé]
FirewallRules: [{7C9B643A-624F-4615-932E-6B79BD6D0E23}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2DBE3EDD-A33F-4677-B5D4-4D2AED1FBEC0}] => (Allow) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{5B76E852-B926-4C8C-906A-B67F9B46D418}] => (Allow) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{50298E09-8BB5-4292-A697-A2C63A7DEDF9}] => (Block) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{3554E6BB-12DF-4AA7-B308-28339BAC963E}] => (Block) C:\Program Files (x86)\Overwolf\0.158.1.1\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D4EABB63-5431-4BEF-9393-A39A41600ABD}] => (Allow) C:\Program Files (x86)\CCleaner Browser\Application\CCleanerBrowser.exe (Piriform Software Ltd -> Piriform Software)
FirewallRules: [{1B068EDB-ACF2-415B-8D5A-A286837953A5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D270D6CA-A3C1-4994-A221-D0B15617AE81}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{1AA3F464-32F1-4EBE-ABE1-875868DACB36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{077E4DE7-28D7-4D8C-AF29-0E7C463D0753}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{5778C919-FF1A-4101-A725-53B6E25B834C}C:\users\quent\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\quent\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{F2375A30-845E-42B3-A5ED-A3A318F5DB03}C:\users\quent\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\quent\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
==================== Points de restauration =========================
16-12-2020 17:28:37 Point de contrôle planifié
17-12-2020 15:08:49 AdwCleaner_BeforeCleaning_17/12/2020_15:08:48
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (12/19/2020 03:00:23 PM) (Source: Microsoft Office 16) (EventID: 2011) (User: )
Description: Office Subscription licensing exception: Error Code: 0x305; CorrelationId: {6E1A4C46-4BEA-4270-B394-D46320FD4D79}
Error: (12/19/2020 10:56:45 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-I3EH5KH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (12/19/2020 10:56:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante AUDIODG.EXE, version : 10.0.19041.662, horodatage : 0xbbe81701
Nom du module défaillant : MBAPO264.dll, version : 2.0.0.36, horodatage : 0x5cc7fde1
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000006f21a
ID du processus défaillant : 0x2c9c
Heure de début de l’application défaillante : 0x01d6d5eca88e4986
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\AUDIODG.EXE
Chemin d’accès du module défaillant: C:\WINDOWS\System32\MBAPO264.dll
ID de rapport : e201943e-eb2d-4c65-a6dd-9838a8659197
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (12/19/2020 10:53:55 AM) (Source: SecurityCenter) (EventID: 16) (User: )
Description: Erreur lors de la mise à jour du statut vers SECURITY_PRODUCT_STATE_SNOOZED.
Error: (12/18/2020 11:00:50 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante AUDIODG.EXE, version : 10.0.19041.662, horodatage : 0xbbe81701
Nom du module défaillant : MBAPO264.dll, version : 2.0.0.36, horodatage : 0x5cc7fde1
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000070701
ID du processus défaillant : 0x3098
Heure de début de l’application défaillante : 0x01d6d5891b740f7c
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\AUDIODG.EXE
Chemin d’accès du module défaillant: C:\WINDOWS\System32\MBAPO264.dll
ID de rapport : 56e0cdf9-d37a-4273-97b6-6a98a87d6a90
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (12/18/2020 11:00:25 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Security Center n'a pas pu valider l'appelant. Erreur %1.
Error: (12/18/2020 11:00:11 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-I3EH5KH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (12/18/2020 10:59:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante AUDIODG.EXE, version : 10.0.19041.662, horodatage : 0xbbe81701
Nom du module défaillant : MBAPO264.dll, version : 2.0.0.36, horodatage : 0x5cc7fde1
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000070704
ID du processus défaillant : 0x2d00
Heure de début de l’application défaillante : 0x01d6d58917a9338d
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\AUDIODG.EXE
Chemin d’accès du module défaillant: C:\WINDOWS\System32\MBAPO264.dll
ID de rapport : b1b1bc57-464c-4227-9450-fd8f0384c461
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (12/19/2020 10:52:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service ACCSvc n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (12/19/2020 10:52:01 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service MBAMChameleon n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (12/19/2020 10:52:01 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 02:55:11 le 19/12/2020 n’était pas prévu.
Error: (12/19/2020 10:51:52 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORITE NT)
Description: 3221225684Une erreur irrécupérable s’est produite pendant le traitement des données de restauration.
Error: (12/18/2020 10:59:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service ACCSvc n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (12/18/2020 10:58:35 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-I3EH5KH)
Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/18/2020 10:58:35 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-I3EH5KH)
Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/18/2020 10:27:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service ACCSvc n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
CodeIntegrity:
===================================
Date: 2020-12-14 18:22:44.5040000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.158.1.1\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-13 02:35:53.1060000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.158.1.1\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-12 17:46:42.8840000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.158.1.1\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-11 12:31:00.0010000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-09 17:05:28.4750000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-05 02:27:11.3390000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-03 21:55:26.0080000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
Date: 2020-12-03 21:55:24.1820000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Users\quent\AppData\Local\Discord\app-0.0.308\Discord.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Overwolf\0.157.2.17\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. R01-C1 04/08/2020
Carte mère: Acer Predator PO3-600(DCH)
Processeur: Intel(R) Core(TM) i5-9400F CPU @ 2.90GHz
Pourcentage de mémoire utilisée: 76%
Mémoire physique - RAM - totale: 8109.98 MB
Mémoire physique - RAM - disponible: 1885.27 MB
Mémoire virtuelle totale: 18861.98 MB
Mémoire virtuelle disponible: 7490.77 MB
==================== Lecteurs ================================
Drive c: (Acer) (Fixed) (Total:237.35 GB) (Free:56.35 GB) NTFS
Drive d: (Data) (Fixed) (Total:931.51 GB) (Free:385.53 GB) NTFS
\\?\Volume{aa210a93-8b8a-4c51-bea9-73de0df745ae}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.48 GB) NTFS
\\?\Volume{61c29726-62d5-2f87-c58a-65acd647c816}\ () (Fixed) (Total:1.66 GB) (Free:0 GB) NTFS
\\?\Volume{35380adb-d079-f43e-43e8-7e1cbc44ad8a}\ () (Fixed) (Total:3.23 GB) (Free:0 GB) NTFS
\\?\Volume{7c819527-ab86-3b0a-49f0-7467be31bf7b}\ () (Fixed) (Total:55.8 GB) (Free:0 GB) NTFS
\\?\Volume{5988497b-609b-bc1e-6f0f-7749883e5760}\ () (Fixed) (Total:68.75 GB) (Free:0 GB) NTFS
\\?\Volume{1328b3ac-8c6f-6da6-c181-f5c0b4ef9ef3}\ () (Fixed) (Total:3.82 GB) (Free:0 GB) NTFS
\\?\Volume{20af4153-6165-f2c6-b7d0-0c6f65a43426}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS
\\?\Volume{97f9452e-7892-4274-8b34-0b379e45014f}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 4D2B77F3)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: 3CD69A44)
Partition: GPT.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 2.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 3.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 4.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 5.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 6.
Attempted reading MBR returned 0 bytes.
Could not read MBR for disk 7.
==================== Fin de Addition.txt =======================