Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 09-06-2019
Exécuté par idris (09-06-2019 15:33:51)
Exécuté depuis C:\Users\idris\OneDrive\Bureau
Windows 10 Home Version 1809 17763.529 (X64) (2019-05-27 17:38:37)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-810790054-4258613937-1329599453-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-810790054-4258613937-1329599453-503 - Limited - Disabled)
idris (S-1-5-21-810790054-4258613937-1329599453-1001 - Administrator - Enabled) => C:\Users\idris
Invité (S-1-5-21-810790054-4258613937-1329599453-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-810790054-4258613937-1329599453-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
ASUS GiftBox Service (HKLM-x32\...\{4701E5AB-AF91-4D40-8F18-358CC80E4E5B}) (Version: 3.2.1.0 - ASUSTeK COMPUTER INC.)
ASUS Hello (HKLM-x32\...\{D8CE1923-92A9-4036-817E-9E0D8AA2169B}) (Version: 1.1.4.0 - ASUSTeK COMPUTER INC.)
ASUS Sync Drivers (HKLM\...\{CD2D232E-26B4-4DD0-9D5E-B28977284176}) (Version: 2.3.7593 - Screenovate Technologies Ltd.)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.8.1 - ICEpower a/s)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 19.5.2378 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.58 - Piriform)
Discord (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\Discord) (Version: 0.0.305 - Discord Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FINAL FANTASY XIV ONLINE (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
FiveM (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\CitizenFX_FiveM) (Version: - The CitizenFX Collective)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.80 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Java 8 Update 211 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180211F0}) (Version: 8.0.2110.12 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 16.0 R8 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.0.36 - McAfee, Inc.)
Microsoft OneDrive (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\OneDriveSetup.exe) (Version: 19.070.0410.0007 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27027 (HKLM-x32\...\{fd9b6070-d13e-45dc-819b-41806bf45b6b}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Mozilla Firefox 67.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 67.0.1 (x64 fr)) (Version: 67.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 67.0.1 - Mozilla)
NVIDIA GeForce Experience 3.14.0.139 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Graphics Driver 398.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 398.35 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)
RSI Launcher 1.1.1 (HKLM\...\81bfc699-f883-50c7-b674-2483b6baae23) (Version: 1.1.1 - Cloud Imperium Games)
Spotify (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\Spotify) (Version: 1.1.7.13766.gf9dc3904 - Spotify AB)
SpyHunter 5 (HKLM-x32\...\SpyHunter5) (Version: 5.6.1.119 - EnigmaSoft Limited)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
WallpaperSuite (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\WallpaperSuite) (Version: 1.0.0.1 - WallpaperSuite)
WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Packages:
=========
ASUS GIFTBOX -> C:\Program Files\WindowsApps\B9ECED6F.ASUSGIFTBOX_3.1.7.0_x64__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
ASUS Keyboard Hotkeys -> C:\Program Files\WindowsApps\b9eced6f.asuskeyboardhotkeys_1.0.10.0_x86__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
ASUS Sync -> C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0 [2019-05-27] (Screenovate Technologies.)
Courrier et calendrier -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20174.0_x64__8wekyb3d8bbwe [2019-05-31] (Microsoft Corporation) [MS Ad]
eManual -> C:\Program Files\WindowsApps\b9eced6f.emanual_2.0.3.0_x86__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [2019-05-27] (LinkedIn)
McAfee Security -> C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_1.4.3.0_x64__wafk5atnkzcwy [2019-05-27] (McAfee Inc.)
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\microsoft.advertising.xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-05-27] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\microsoft.advertising.xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-05-27] (Microsoft Corporation) [MS Ad]
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.3.4032.0_x86__8wekyb3d8bbwe [2019-05-27] (Microsoft Studios) [MS Ad]
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-05-27] (Microsoft Corporation) [MS Ad]
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.0.15.0_x64__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.954.0_x64__56jybvy8sckqj [2019-05-27] (NVIDIA Corp.)
SmartAudio 2 -> C:\Program Files\WindowsApps\22094synapticsincorporate.smartaudio2_1.1.36.0_x86__qt57b6kdvhcfw [2019-05-27] (Synaptics Hong Kong Limited, Taiwan Branch (H.K.))
Splendid -> C:\Program Files\WindowsApps\b9eced6f.splendid_1.0.14.0_x64__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{F7B8E2CA-97DF-4974-BDF1-3D93EDC93A5E}\InprocServer32 -> C:\Users\idris\AppData\Local\WallpaperSuite\WallpaperSuiteLib64.dll (WallpaperSuite) [Fichier non signé]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_6a98a50f359db1f6\nvshext.dll [2019-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2019-05-27 19:49 - 2019-02-02 19:42 - 000050176 _____ (Conexant Systems, Inc) [Fichier non signé] C:\WINDOWS\CxSvc\CxAudioSvc.exe
2018-07-13 14:52 - 2018-07-13 14:52 - 000114688 _____ (WallpaperSuite) [Fichier non signé] C:\Users\idris\AppData\Local\WallpaperSuite\WallpaperSuiteLib64.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Coffres-forts McAfee:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\DawnOfMan:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Elder Scrolls Online:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\embergarde:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\League of Legends:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\My Games:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Rockstar Games:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Starcraft:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2018-04-12 01:38 - 2019-06-07 22:34 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\idris\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\thumb-1920-735074.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_8ECDA67E0145D96BC6796B0C474B2344"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Steam"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{AC151351-96A1-4804-9298-5B6320BCFB37}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{7DC19D5A-6B4C-4CD0-B7F8-249CC276A81F}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{6E6C0F36-6394-4C89-AE1E-54F97FE6988F}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.3.5715.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe Pas de fichier
FirewallRules: [{B3FAD747-E8CE-4F4C-B3E0-DF27E6CB43DF}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.3.5715.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe Pas de fichier
FirewallRules: [{D96BCE22-E435-4BA7-A93F-C29DD6ACD5F4}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{C298DB49-E381-4CAE-A7AC-D710E9C86C23}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{8A6354B2-4B75-4B4E-9B22-5F77555EC21D}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{43EC1D38-6CD4-4E9C-9AD4-D69F9FA17586}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{18793204-BB12-4BFE-8AF0-80E4C91F9C20}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F6F53604-E8A2-4CBF-84A0-7C0F2D87F1BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C7AA9A33-23F3-4E33-A65B-3B04C2533245}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{743B7A97-EC62-4C80-951D-D1174B11F701}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BD583E24-8210-41B1-8B8B-93972C4B5C8F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7A948133-3659-4B4B-A06D-764395D750B1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16010.9126.2116.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe Pas de fichier
FirewallRules: [{29C70AFA-9326-44FD-83D8-909C569A416B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Pas de fichier
FirewallRules: [{EE9EACA8-71E6-4D16-B52E-2111C278FF0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Pas de fichier
FirewallRules: [{D77B3ED0-9058-4AB5-AD91-04621CFD0259}] => (Allow) D:\SteamLibrary\steamapps\downloading\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{BACD44C1-66AC-4FF9-85DC-79D696EA6B44}] => (Allow) D:\SteamLibrary\steamapps\downloading\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{34D72600-7512-436F-A0E2-601FF259A079}] => (Allow) D:\SteamLibrary\steamapps\downloading\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{EFDAAE53-4F89-4876-A536-48DC725F3596}] => (Allow) D:\SteamLibrary\steamapps\downloading\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A1548AF5-1CD1-4420-A4FD-3F207273B3E0}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Mordhau\Mordhau.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{F52656AA-CF79-4B79-924D-C88CEC072BD4}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Mordhau\Mordhau.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [TCP Query User{45644A2A-7F0B-4F5E-B775-34DA370100A3}C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe Pas de fichier
FirewallRules: [UDP Query User{FDE55BD1-77AA-4A20-B8AB-279314D1C761}C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe Pas de fichier
FirewallRules: [{E161C053-51F4-41B6-991A-63F31AEC8E50}] => (Allow) D:\GTA5.exe Pas de fichier
FirewallRules: [{3FBA551E-6773-4ED8-B46A-75C1360BBE52}] => (Allow) D:\GTA5.exe Pas de fichier
FirewallRules: [{4050C2F7-687D-4C9E-BBDE-22C991A79126}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{2E82D9BA-A60B-4DDA-91F2-1915F7E44EF4}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [TCP Query User{FA3981C1-406D-4279-A4C6-13399CAC0620}C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{A11EB6C0-A54B-4CF9-B4BD-237FF0FF515A}C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{493042C2-0B49-4F57-A388-4AE1797E7E3F}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{C8635871-2B55-4D6F-9488-3FFDB6A030C3}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{94AD22F2-C05C-43F4-B117-50932938CF1A}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{B63EF6DB-2525-435A-92DC-DCE4776A9758}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{AEBE0A7F-8661-4777-B422-FA4CC367A080}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{78106A43-039D-40C1-9CCC-43193FC0D492}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{4EED9B44-0614-4165-B79B-882B2195821F}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [{CFE5CD17-A29E-458E-BA77-88E01448077F}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [{926D172F-EDB8-41EF-BA2B-317F376C1919}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{4822E4BD-C2DA-4E0D-9F6F-15C2A3EFFC86}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{EF985FFE-F244-44A3-BFB3-AA235B7AD22B}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [{F6CFC3AB-D889-479B-85C4-D6C489B21A8C}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [TCP Query User{DB981938-37BB-4A58-99AF-9001F5FBE0F1}C:\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{97AF0A0A-699F-43A9-9586-C15A6A6560A4}C:\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{24A33D68-BDFD-413D-A1EB-ABB8E2BFEC89}D:\logiciel\runtime\jre-x64\bin\javaw.exe] => (Allow) D:\logiciel\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{1E6C2877-8997-453F-B36A-C3B375C2FB17}D:\logiciel\runtime\jre-x64\bin\javaw.exe] => (Allow) D:\logiciel\runtime\jre-x64\bin\javaw.exe
FirewallRules: [TCP Query User{D108ECC3-0E8E-4B2C-990B-65E7F269F59C}D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe] => (Allow) D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe (Phoenix Labs -> Phoenix Labs)
FirewallRules: [UDP Query User{9BADDDB8-D250-4C85-93D7-825F9EE434DE}D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe] => (Allow) D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe (Phoenix Labs -> Phoenix Labs)
FirewallRules: [{B57C00F0-A1EC-4BE1-B4A3-82F545013531}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{328EE873-8596-4A79-8F2A-8F693AEF98AA}] => (Allow) C:\Users\idris\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) [Fichier non signé]
FirewallRules: [{081D9F0E-22DE-4958-A3F7-B94907F03AD0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11629.20214.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0A2B3917-A121-4A94-938C-0DF3991199D1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7DE494C5-230B-462A-B781-170110B8BF92}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5AB07494-EE55-434C-888D-3A9FBAA9E721}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Fishing Planet\FishingPlanet.exe () [Fichier non signé]
FirewallRules: [{86E7FF48-9C0E-47AD-8F2A-E075BAB138D9}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Fishing Planet\FishingPlanet.exe () [Fichier non signé]
FirewallRules: [{4BFD9B71-6FB0-4D56-9A14-22E4F0DA6460}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{01DC088B-37A9-442F-84FC-A5F9FE088282}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
==================== Points de restauration =========================
04-06-2019 17:59:05 Point de contrôle planifié
07-06-2019 21:25:50 Driver Tonic
09-06-2019 02:17:51 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (06/09/2019 03:21:50 PM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:16:51 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:13:33 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:12:52 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:12:21 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:11:09 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:10:30 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:09:42 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Erreurs système:
=============
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Windows Defender:
===================================
Date: 2019-06-03 13:35:16.779
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {4F60AB28-AA2B-473D-B48C-EBF28A7164BB}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-03 03:06:14.981
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {0839E987-9298-4709-B169-1A33E23A15BD}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-03 02:59:37.530
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {C9419E6C-E92E-4015-A708-A7686EE6138A}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-03 00:12:49.857
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {12AAF392-CB0E-4ECE-B0AD-52F7BEDB8E2A}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-05-31 23:56:43.862
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {EC5B93F8-639C-49B6-B2FD-1392D27F31D8}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-08 02:49:08.803
Description:
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature :
Version précédente de la signature : 1.295.284.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.16000.6
Code d’erreur : 0x80070643
Description de l’erreur : Erreur irrécupérable lors de l’installation.
CodeIntegrity:
===================================
Date: 2019-06-08 18:14:19.835
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 18:14:19.824
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 18:14:19.780
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 18:14:19.732
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.389
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.387
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.378
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.360
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. X570ZD.305 11/27/2018
Motherboard: ASUSTeK COMPUTER INC. X570ZD
Processeur: AMD Ryzen 5 2500U with Radeon Vega Mobile Gfx
Pourcentage de mémoire utilisée: 69%
Mémoire physique - RAM - totale: 7112.48 MB
Mémoire physique - RAM - disponible: 2190.13 MB
Mémoire virtuelle totale: 15304.48 MB
Mémoire virtuelle disponible: 7878.29 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:237.42 GB) (Free:171.68 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:286.23 GB) NTFS
\\?\Volume{79d574bc-8cdf-4d87-bc97-0dba6fb62d76}\ (RECOVERY) (Fixed) (Total:0.78 GB) (Free:0.37 GB) NTFS
\\?\Volume{941f7e65-ed0d-4ea6-a4ad-e853f806e146}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: BE3CA05C)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 9D156FFE)
Partition: GPT.
==================== Fin de Addition.txt ============================
Exécuté par idris (09-06-2019 15:33:51)
Exécuté depuis C:\Users\idris\OneDrive\Bureau
Windows 10 Home Version 1809 17763.529 (X64) (2019-05-27 17:38:37)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-810790054-4258613937-1329599453-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-810790054-4258613937-1329599453-503 - Limited - Disabled)
idris (S-1-5-21-810790054-4258613937-1329599453-1001 - Administrator - Enabled) => C:\Users\idris
Invité (S-1-5-21-810790054-4258613937-1329599453-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-810790054-4258613937-1329599453-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
ASUS GiftBox Service (HKLM-x32\...\{4701E5AB-AF91-4D40-8F18-358CC80E4E5B}) (Version: 3.2.1.0 - ASUSTeK COMPUTER INC.)
ASUS Hello (HKLM-x32\...\{D8CE1923-92A9-4036-817E-9E0D8AA2169B}) (Version: 1.1.4.0 - ASUSTeK COMPUTER INC.)
ASUS Sync Drivers (HKLM\...\{CD2D232E-26B4-4DD0-9D5E-B28977284176}) (Version: 2.3.7593 - Screenovate Technologies Ltd.)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.8.1 - ICEpower a/s)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 19.5.2378 - AVAST Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.58 - Piriform)
Discord (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\Discord) (Version: 0.0.305 - Discord Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FINAL FANTASY XIV ONLINE (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
FiveM (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\CitizenFX_FiveM) (Version: - The CitizenFX Collective)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.80 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Java 8 Update 211 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180211F0}) (Version: 8.0.2110.12 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 16.0 R8 - McAfee, Inc.)
McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.0.36 - McAfee, Inc.)
Microsoft OneDrive (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\OneDriveSetup.exe) (Version: 19.070.0410.0007 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27027 (HKLM-x32\...\{fd9b6070-d13e-45dc-819b-41806bf45b6b}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.13.26020 (HKLM-x32\...\{5c045b7f-e561-4794-91f8-c6cda0893107}) (Version: 14.13.26020.0 - Microsoft Corporation)
Mozilla Firefox 67.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 67.0.1 (x64 fr)) (Version: 67.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 67.0.1 - Mozilla)
NVIDIA GeForce Experience 3.14.0.139 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.14.0.139 - NVIDIA Corporation)
NVIDIA Graphics Driver 398.35 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 398.35 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.4.1 - Rockstar Games)
RSI Launcher 1.1.1 (HKLM\...\81bfc699-f883-50c7-b674-2483b6baae23) (Version: 1.1.1 - Cloud Imperium Games)
Spotify (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\Spotify) (Version: 1.1.7.13766.gf9dc3904 - Spotify AB)
SpyHunter 5 (HKLM-x32\...\SpyHunter5) (Version: 5.6.1.119 - EnigmaSoft Limited)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
WallpaperSuite (HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\WallpaperSuite) (Version: 1.0.0.1 - WallpaperSuite)
WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Packages:
=========
ASUS GIFTBOX -> C:\Program Files\WindowsApps\B9ECED6F.ASUSGIFTBOX_3.1.7.0_x64__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
ASUS Keyboard Hotkeys -> C:\Program Files\WindowsApps\b9eced6f.asuskeyboardhotkeys_1.0.10.0_x86__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
ASUS Sync -> C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0 [2019-05-27] (Screenovate Technologies.)
Courrier et calendrier -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20174.0_x64__8wekyb3d8bbwe [2019-05-31] (Microsoft Corporation) [MS Ad]
eManual -> C:\Program Files\WindowsApps\b9eced6f.emanual_2.0.3.0_x86__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [2019-05-27] (LinkedIn)
McAfee Security -> C:\Program Files\WindowsApps\5A894077.McAfeeSecurity_1.4.3.0_x64__wafk5atnkzcwy [2019-05-27] (McAfee Inc.)
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\microsoft.advertising.xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-05-27] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\microsoft.advertising.xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-05-27] (Microsoft Corporation) [MS Ad]
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.3.4032.0_x86__8wekyb3d8bbwe [2019-05-27] (Microsoft Studios) [MS Ad]
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.11629.20214.0_x86__8wekyb3d8bbwe [2019-06-07] (Microsoft Corporation)
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.28.10351.0_x64__8wekyb3d8bbwe [2019-05-27] (Microsoft Corporation) [MS Ad]
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_2.0.15.0_x64__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.954.0_x64__56jybvy8sckqj [2019-05-27] (NVIDIA Corp.)
SmartAudio 2 -> C:\Program Files\WindowsApps\22094synapticsincorporate.smartaudio2_1.1.36.0_x86__qt57b6kdvhcfw [2019-05-27] (Synaptics Hong Kong Limited, Taiwan Branch (H.K.))
Splendid -> C:\Program Files\WindowsApps\b9eced6f.splendid_1.0.14.0_x64__qmba6cd70vzyy [2019-05-27] (ASUSTeK COMPUTER INC.)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-810790054-4258613937-1329599453-1001_Classes\CLSID\{F7B8E2CA-97DF-4974-BDF1-3D93EDC93A5E}\InprocServer32 -> C:\Users\idris\AppData\Local\WallpaperSuite\WallpaperSuiteLib64.dll (WallpaperSuite) [Fichier non signé]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvami.inf_amd64_6a98a50f359db1f6\nvshext.dll [2019-05-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-06-07] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => c:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2018-01-25] (McAfee, Inc. -> McAfee, Inc.)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2019-05-27 19:49 - 2019-02-02 19:42 - 000050176 _____ (Conexant Systems, Inc) [Fichier non signé] C:\WINDOWS\CxSvc\CxAudioSvc.exe
2018-07-13 14:52 - 2018-07-13 14:52 - 000114688 _____ (WallpaperSuite) [Fichier non signé] C:\Users\idris\AppData\Local\WallpaperSuite\WallpaperSuiteLib64.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Coffres-forts McAfee:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\DawnOfMan:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Elder Scrolls Online:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\embergarde:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\League of Legends:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\My Games:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Rockstar Games:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
AlternateDataStreams: C:\Users\idris\OneDrive\Documents\Starcraft:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2018-04-12 01:38 - 2019-06-07 22:34 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\idris\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\thumb-1920-735074.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_8ECDA67E0145D96BC6796B0C474B2344"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-810790054-4258613937-1329599453-1001\...\StartupApproved\Run: => "Steam"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{AC151351-96A1-4804-9298-5B6320BCFB37}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{7DC19D5A-6B4C-4CD0-B7F8-249CC276A81F}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.)
FirewallRules: [{6E6C0F36-6394-4C89-AE1E-54F97FE6988F}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.3.5715.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe Pas de fichier
FirewallRules: [{B3FAD747-E8CE-4F4C-B3E0-DF27E6CB43DF}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.3.5715.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe Pas de fichier
FirewallRules: [{D96BCE22-E435-4BA7-A93F-C29DD6ACD5F4}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{C298DB49-E381-4CAE-A7AC-D710E9C86C23}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{8A6354B2-4B75-4B4E-9B22-5F77555EC21D}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{43EC1D38-6CD4-4E9C-9AD4-D69F9FA17586}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{18793204-BB12-4BFE-8AF0-80E4C91F9C20}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F6F53604-E8A2-4CBF-84A0-7C0F2D87F1BA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C7AA9A33-23F3-4E33-A65B-3B04C2533245}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{743B7A97-EC62-4C80-951D-D1174B11F701}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BD583E24-8210-41B1-8B8B-93972C4B5C8F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7A948133-3659-4B4B-A06D-764395D750B1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16010.9126.2116.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe Pas de fichier
FirewallRules: [{29C70AFA-9326-44FD-83D8-909C569A416B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Pas de fichier
FirewallRules: [{EE9EACA8-71E6-4D16-B52E-2111C278FF0A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe Pas de fichier
FirewallRules: [{D77B3ED0-9058-4AB5-AD91-04621CFD0259}] => (Allow) D:\SteamLibrary\steamapps\downloading\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{BACD44C1-66AC-4FF9-85DC-79D696EA6B44}] => (Allow) D:\SteamLibrary\steamapps\downloading\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{34D72600-7512-436F-A0E2-601FF259A079}] => (Allow) D:\SteamLibrary\steamapps\downloading\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{EFDAAE53-4F89-4876-A536-48DC725F3596}] => (Allow) D:\SteamLibrary\steamapps\downloading\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A1548AF5-1CD1-4420-A4FD-3F207273B3E0}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Mordhau\Mordhau.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{F52656AA-CF79-4B79-924D-C88CEC072BD4}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Mordhau\Mordhau.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [TCP Query User{45644A2A-7F0B-4F5E-B775-34DA370100A3}C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe Pas de fichier
FirewallRules: [UDP Query User{FDE55BD1-77AA-4A20-B8AB-279314D1C761}C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe] => (Allow) C:\users\idris\appdata\local\fivem\fivem.app\cache\subprocess\fivem_gtaprocess.exe Pas de fichier
FirewallRules: [{E161C053-51F4-41B6-991A-63F31AEC8E50}] => (Allow) D:\GTA5.exe Pas de fichier
FirewallRules: [{3FBA551E-6773-4ED8-B46A-75C1360BBE52}] => (Allow) D:\GTA5.exe Pas de fichier
FirewallRules: [{4050C2F7-687D-4C9E-BBDE-22C991A79126}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{2E82D9BA-A60B-4DDA-91F2-1915F7E44EF4}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [TCP Query User{FA3981C1-406D-4279-A4C6-13399CAC0620}C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{A11EB6C0-A54B-4CF9-B4BD-237FF0FF515A}C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\windows.old\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{493042C2-0B49-4F57-A388-4AE1797E7E3F}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{C8635871-2B55-4D6F-9488-3FFDB6A030C3}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{94AD22F2-C05C-43F4-B117-50932938CF1A}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{B63EF6DB-2525-435A-92DC-DCE4776A9758}] => (Allow) D:\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{AEBE0A7F-8661-4777-B422-FA4CC367A080}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{78106A43-039D-40C1-9CCC-43193FC0D492}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{4EED9B44-0614-4165-B79B-882B2195821F}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [{CFE5CD17-A29E-458E-BA77-88E01448077F}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [{926D172F-EDB8-41EF-BA2B-317F376C1919}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{4822E4BD-C2DA-4E0D-9F6F-15C2A3EFFC86}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe (FUNCOM OSLO AS -> BattlEye Innovations)
FirewallRules: [{EF985FFE-F244-44A3-BFB3-AA235B7AD22B}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [{F6CFC3AB-D889-479B-85C4-D6C489B21A8C}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe (FUNCOM OSLO AS -> Funcom Oslo AS)
FirewallRules: [TCP Query User{DB981938-37BB-4A58-99AF-9001F5FBE0F1}C:\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{97AF0A0A-699F-43A9-9586-C15A6A6560A4}C:\users\idris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\idris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{24A33D68-BDFD-413D-A1EB-ABB8E2BFEC89}D:\logiciel\runtime\jre-x64\bin\javaw.exe] => (Allow) D:\logiciel\runtime\jre-x64\bin\javaw.exe
FirewallRules: [UDP Query User{1E6C2877-8997-453F-B36A-C3B375C2FB17}D:\logiciel\runtime\jre-x64\bin\javaw.exe] => (Allow) D:\logiciel\runtime\jre-x64\bin\javaw.exe
FirewallRules: [TCP Query User{D108ECC3-0E8E-4B2C-990B-65E7F269F59C}D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe] => (Allow) D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe (Phoenix Labs -> Phoenix Labs)
FirewallRules: [UDP Query User{9BADDDB8-D250-4C85-93D7-825F9EE434DE}D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe] => (Allow) D:\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe (Phoenix Labs -> Phoenix Labs)
FirewallRules: [{B57C00F0-A1EC-4BE1-B4A3-82F545013531}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{328EE873-8596-4A79-8F2A-8F693AEF98AA}] => (Allow) C:\Users\idris\AppData\Local\Chromium\Application\chrome.exe (The Chromium Authors) [Fichier non signé]
FirewallRules: [{081D9F0E-22DE-4958-A3F7-B94907F03AD0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.11629.20214.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{0A2B3917-A121-4A94-938C-0DF3991199D1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7DE494C5-230B-462A-B781-170110B8BF92}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5AB07494-EE55-434C-888D-3A9FBAA9E721}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Fishing Planet\FishingPlanet.exe () [Fichier non signé]
FirewallRules: [{86E7FF48-9C0E-47AD-8F2A-E075BAB138D9}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Fishing Planet\FishingPlanet.exe () [Fichier non signé]
FirewallRules: [{4BFD9B71-6FB0-4D56-9A14-22E4F0DA6460}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
FirewallRules: [{01DC088B-37A9-442F-84FC-A5F9FE088282}] => (Allow) D:\SteamLibrary\steamapps\downloading\steamapps\common\Path of Exile\PathOfExileSteam.exe (Grinding Gear Games Limited -> )
==================== Points de restauration =========================
04-06-2019 17:59:05 Point de contrôle planifié
07-06-2019 21:25:50 Driver Tonic
09-06-2019 02:17:51 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (06/09/2019 03:21:50 PM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:16:51 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:13:33 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:12:52 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:12:21 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:11:09 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:10:30 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Error: (06/09/2019 03:09:42 AM) (Source: AVLogEvent) (EventID: 5002) (User: AUTORITE NT)
Description: McShield failed to start.
Error Code:a7f40220
Erreurs système:
=============
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Error: (06/09/2019 03:32:43 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-GGQ4F2P9)
Description: Impossible de démarrer un serveur DCOM : {DC7EF8E1-824F-4110-AB43-1604DA9B4F40} en tant que NT Authority/System. L’erreur
« 0 »
s’est produite lors du démarrage de la commande :
C:\PROGRA~1\McAfee\MfeAV\MFEAvSvc.exe -Embedding
Windows Defender:
===================================
Date: 2019-06-03 13:35:16.779
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {4F60AB28-AA2B-473D-B48C-EBF28A7164BB}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-03 03:06:14.981
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {0839E987-9298-4709-B169-1A33E23A15BD}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-03 02:59:37.530
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {C9419E6C-E92E-4015-A708-A7686EE6138A}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-03 00:12:49.857
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {12AAF392-CB0E-4ECE-B0AD-52F7BEDB8E2A}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-05-31 23:56:43.862
Description:
L’analyse Antivirus Windows Defender a été arrêtée avant la fin.
ID de l’analyse : {EC5B93F8-639C-49B6-B2FD-1392D27F31D8}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2019-06-08 02:49:08.803
Description:
Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures.
Nouvelle version de la signature :
Version précédente de la signature : 1.295.284.0
Source de mise à jour : Serveur Microsoft Update
Type de signature : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.16000.6
Code d’erreur : 0x80070643
Description de l’erreur : Erreur irrécupérable lors de l’installation.
CodeIntegrity:
===================================
Date: 2019-06-08 18:14:19.835
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 18:14:19.824
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 18:14:19.780
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 18:14:19.732
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.389
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.387
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\wsc_proxy.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.378
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-06-08 17:32:40.360
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. X570ZD.305 11/27/2018
Motherboard: ASUSTeK COMPUTER INC. X570ZD
Processeur: AMD Ryzen 5 2500U with Radeon Vega Mobile Gfx
Pourcentage de mémoire utilisée: 69%
Mémoire physique - RAM - totale: 7112.48 MB
Mémoire physique - RAM - disponible: 2190.13 MB
Mémoire virtuelle totale: 15304.48 MB
Mémoire virtuelle disponible: 7878.29 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:237.42 GB) (Free:171.68 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:286.23 GB) NTFS
\\?\Volume{79d574bc-8cdf-4d87-bc97-0dba6fb62d76}\ (RECOVERY) (Fixed) (Total:0.78 GB) (Free:0.37 GB) NTFS
\\?\Volume{941f7e65-ed0d-4ea6-a4ad-e853f806e146}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: BE3CA05C)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 9D156FFE)
Partition: GPT.
==================== Fin de Addition.txt ============================