Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 15-07-2019 01
Exécuté par baptiste (24-07-2019 23:10:19)
Exécuté depuis C:\Users\fazil\Desktop
Windows 10 Home Version 1903 18362.239 (X64) (2019-07-17 02:29:17)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-1268238801-1154124454-151583812-500 - Administrator - Disabled)
baptiste (S-1-5-21-1268238801-1154124454-151583812-1001 - Administrator - Enabled) => C:\Users\fazil
DefaultAccount (S-1-5-21-1268238801-1154124454-151583812-503 - Limited - Disabled)
Invité (S-1-5-21-1268238801-1154124454-151583812-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1268238801-1154124454-151583812-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Pare-feu (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 19.012.20035 - Adobe Systems Incorporated)
Adobe Connect 9 Add-in (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Adobe Connect 9 Add-in) (Version: 11.9.980.387 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.8.2.476 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.223 - Adobe)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
ASUS Device Activation (HKLM-x32\...\{9C4B0706-9F9A-47BF-B417-0A111FC52B04}) (Version: 1.0.4.0 - ASUSTeK COMPUTER INC.)
ASUS GIFTBOX (HKLM-x32\...\ASUS GIFTBOX) (Version: 7.6.5 - ASUSTek Computer Inc)
ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.6.8 - ASUSTeK COMPUTER INC.)
ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.13 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.16.0002 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0048 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.1.19 - ICEpower a/s)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.25.59 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 23.0.22.104 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.15.189 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 23.0.8.665 - Bitdefender)
Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.60 - Piriform)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.3 - ASUSTek Computer Inc.)
Discord (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Discord) (Version: 0.0.305 - Discord Inc.)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.189.1 - Dropbox, Inc.) Hidden
f.lux (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Flux) (Version: - f.lux Software LLC)
GameFirst IV (HKLM-x32\...\{795A0031-3DD5-43F1-BCBA-AEBA756D0FBB}) (Version: 1.5.23 - ASUS) Hidden
GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.23) (Version: 1.5.23 - ASUS)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.5.0.6.1001 - Genesys Logic)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.142 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{fb610cea-ba50-4d4b-a717-cf025419035c}) (Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{A984B01A-6823-4C0F-8E83-BE08B3256209}) (Version: 18.1.1612.3253 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Java 8 Update 212 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180212F0}) (Version: 8.0.2120.10 - Oracle Corporation)
Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{0961a92c-ad83-40dd-a0fc-29ba41e5349d}) (Version: 20.50.3 - Intel Corporation)
Malwarebytes version 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\OneDriveSetup.exe) (Version: 19.103.0527.0003 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
NordVPN (HKLM-x32\...\{F4325B30-A8A0-4D09-B0DE-7CBB485A52D8}) (Version: 6.22.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.22.6) (Version: 6.22.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OpenOffice 4.1.6 (HKLM-x32\...\{50D70A8D-0503-4AA6-97EF-09849E9FB520}) (Version: 4.16.9790 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.11.27975 - Electronic Arts, Inc.)
Panneau de configuration NVIDIA 431.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 431.36 - NVIDIA Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.1.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.1.0 - VS Revo Group, Ltd.)
ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 1.0.12 - ASUS)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype version 8.44 (HKLM-x32\...\Skype_is1) (Version: 8.44 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Spotify) (Version: 1.1.10.540.gfcf0430f - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43835 - TeamViewer)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 50.0 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
Wakfu (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1F4715F1-86E7-4450-AA9A-13ADBF14BED1-2) (Version: - Ankama)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.2.6.547 - ASUS Cloud Corporation)
Windows Driver Package - ASUS (AsusPTPDrv) HIDClass (08/15/2016 11.0.0.13) (HKLM\...\A2DEE012DC7578575962E3ACBE995AE145C87914) (Version: 08/15/2016 11.0.0.13 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 9.1.0.5247 - Kingsoft Corp.)
XSplit Gamecaster (HKLM-x32\...\{9E8A3821-032E-4230-9C12-C14D3FC8685E}) (Version: 2.8.1605.2342 - SplitmediaLabs)
Packages:
=========
@{Microsoft.SeaofThieves_2.84.5822.2_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SeaofThieves/Resources/PackageName} -> C:\Program Files\WindowsApps\Microsoft.SeaofThieves_2.84.5822.2_x64__8wekyb3d8bbwe [2019-07-17] (0)
Courrier et calendrier -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-07-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-03] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-03] (Microsoft Corporation) [MS Ad]
Microsoft News: les actualités à ne pas manquer -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-22] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.6132.0_x64__8wekyb3d8bbwe [2019-06-17] (Microsoft Studios) [MS Ad]
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-22] (Microsoft Corporation) [MS Ad]
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-1268238801-1154124454-151583812-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-90BBB26A5A1F} -> [Creative Cloud Files] => C:\Users\fazil\Creative Cloud Files [2017-09-25 22:34]
CustomCLSID: HKU\S-1-5-21-1268238801-1154124454-151583812-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) [Fichier non signé]
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) [Fichier non signé]
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) [Fichier non signé]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2326} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSContextMenu.dll [2015-12-24] (ASUS Cloud Corporation -> ASUS Cloud Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-07-03] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2017-09-18 09:15 - 2017-09-18 09:15 - 001937408 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\ffmpeg.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 000079360 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\libegl.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 002177536 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\libglesv2.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 003561984 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\node.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000125440 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000027648 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2019-01-21 13:55 - 2019-01-21 13:55 - 000251392 _____ () [Fichier non signé] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2015-12-24 09:31 - 2015-12-24 09:31 - 000075264 _____ (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe
2015-04-22 15:59 - 2015-04-22 15:59 - 001489920 _____ (ASUS Cloud Corporation.) [Fichier non signé] C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 001676288 _____ (ASUS TeK Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ApplyLUT.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000178176 _____ (ASUS TeK Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\GenLUT.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000054784 _____ (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
2016-01-19 15:51 - 2016-01-19 15:51 - 001616160 _____ (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\APRP\aprp.exe
2016-05-24 14:44 - 2016-05-24 14:44 - 000165888 _____ (ASUSTeK Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ColorU.dll
2016-03-18 13:03 - 2016-03-18 13:03 - 000008704 _____ (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2016-12-01 00:34 - 2016-06-14 22:01 - 001298640 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé] C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxinput.dll
2016-12-01 00:34 - 2016-06-14 22:01 - 001767944 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé] C:\WINDOWS\system32\nvspcap64.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 073507840 _____ (The NWJS Community) [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\nw.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 000124928 _____ (The NWJS Community) [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\nw_elf.dll
2017-10-16 17:51 - 2017-10-16 17:51 - 001548288 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\LIBEAY32.dll
2017-10-16 17:51 - 2017-10-16 17:51 - 000395776 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\ssleay32.dll
2017-10-16 17:51 - 2018-01-20 10:22 - 001611264 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 005487104 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Core.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 005841920 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Gui.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 001177600 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Network.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 005089792 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 000184832 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123simsen.com -> www.123simsen.com
Il y a 7944 plus de sites.
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2015-10-30 09:24 - 2019-07-24 09:00 - 000454656 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
Il y a 15606 plus de lignes.
2017-07-17 13:13 - 2017-07-24 15:17 - 000000509 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
168.137.161 tvb6e4b84e2685.mshome.net # 2017 7 1 24 11 13 44 2
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\fazil\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\cosmos-1866820.jpg
DNS Servers: 89.2.0.1 - 89.2.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.
MSCONFIG\Services: dbupdate => 2
MSCONFIG\Services: dbupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: Kingsoft_WPS_UpdateService => 2
MSCONFIG\Services: LogMeIn => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: PlexUpdateService => 2
MSCONFIG\Services: ROGGamingCenterService => 3
MSCONFIG\Services: SDScannerService => 2
MSCONFIG\Services: SDUpdateService => 2
MSCONFIG\Services: SDWSCService => 2
MSCONFIG\Services: SkypeUpdate => 2
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "LogMeIn GUI"
HKLM\...\StartupApproved\Run: => "BdVpnApp"
HKLM\...\StartupApproved\Run: => "UMonit"
HKLM\...\StartupApproved\Run32: => "AsInstCD"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Plex Media Server"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Spybot-S&D Cleaning"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "NordVPN"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{0BA80DB2-2A05-4FCF-902F-B135C7A9AF4F}] => (Allow) G:\SteamLibrary\steamapps\common\CastlevaniaLoS\bin\CastlevaniaLoSUE.exe Pas de fichier
FirewallRules: [{5073F3A6-7FDC-47DF-B36A-B94741494571}] => (Allow) G:\SteamLibrary\steamapps\common\CastlevaniaLoS\bin\CastlevaniaLoSUE.exe Pas de fichier
FirewallRules: [{5E24407C-4583-42C9-A0BE-7D716FE935F5}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C8787C21-39D8-40C3-B5FD-36AEC22A7AFE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3E7167ED-5144-4DFC-B8BE-94F3C0200F63}] => (Allow) C:\Users\fazil\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{CB02DB74-8589-488D-AE69-B8504F939D07}] => (Allow) C:\Users\fazil\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{1B98C526-9AA7-4BAB-B3A0-234940C99706}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Points de restauration =========================
24-07-2019 22:57:39 Revo Uninstaller's restore point - Spybot - Search & Destroy
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (07/24/2019 11:03:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme ShellExperienceHost.exe version 10.0.18362.145 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintenance.
ID de processus : 3db4
Heure de début : 01d54260acfe1d90
Heure d'arrêt : 4294967295
Chemin d'accès à l'application : C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
ID de rapport : 7c3063f4-e1e7-45b0-a867-98a21e6f0352
Nom complet du package défectueux : Microsoft.Windows.ShellExperienceHost_10.0.18362.145_neutral_neutral_cw5n1h2txyewy
ID de l'application relative à un package défectueux : App
Type de blocage : Quiesce
Error: (07/24/2019 11:03:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Microsoft.Photos.exe version 2019.19051.16210.0 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintenance.
ID de processus : 3fa0
Heure de début : 01d542600c72dfd7
Heure d'arrêt : 4294967295
Chemin d'accès à l'application : C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19051.16210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
ID de rapport :
Nom complet du package défectueux : Microsoft.Windows.Photos_2019.19051.16210.0_x64__8wekyb3d8bbwe
ID de l'application relative à un package défectueux : App
Type de blocage : Quiesce
Error: (07/24/2019 10:57:39 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005, Accès refusé.
.
Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.
Opération :
Données du rédacteur en cours de collecte
Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID d’instance du rédacteur: {fa5ee804-f1c4-4e83-a52d-a3ea9d3e2718}
Error: (07/24/2019 02:13:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante mbamtray.exe, version : 3.1.0.1838, horodatage : 0x5d13b12f
Nom du module défaillant : Qt5Core.dll, version : 5.11.1.0, horodatage : 0x5cba0161
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0018dc19
ID du processus défaillant : 0x150c
Heure de début de l’application défaillante : 0x01d5420bf348c105
Chemin d’accès de l’application défaillante : C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Chemin d’accès du module défaillant: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
ID de rapport : eb3850f8-2852-4e6d-851d-f40a02047683
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (07/23/2019 10:49:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x00000000000002b7
ID du processus défaillant : 0x34f4
Heure de début de l’application défaillante : 0x01d541980c228b96
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 07153bc3-e576-428e-b6aa-db2824edcb6f
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Error: (07/23/2019 10:49:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000477
ID du processus défaillant : 0x3a04
Heure de début de l’application défaillante : 0x01d541980c3b9303
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 0619168e-f462-472f-ba22-1276f53f7da1
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Error: (07/23/2019 10:48:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000204
ID du processus défaillant : 0x3a04
Heure de début de l’application défaillante : 0x01d541980c3b9303
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 0e4b9d65-7abe-4521-be92-9bc290e13284
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Error: (07/23/2019 10:48:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x00000000000000d0
ID du processus défaillant : 0x34f4
Heure de début de l’application défaillante : 0x01d541980c228b96
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 0d802364-a332-40ba-8e48-2bb80057f3e4
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Erreurs système:
=============
Error: (07/24/2019 11:05:18 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Le service Bitdefender Virus Shield ne s’est pas fermé correctement après avoir reçu une commande d’anticipation de fermeture.
Error: (07/24/2019 11:04:46 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/24/2019 11:04:45 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/24/2019 01:22:06 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Les clichés instantanés du volume C: ont été annulés car le stockage du cliché instantané n’a pas pu s’agrandir en raison d’une limite utilisateur.
Error: (07/23/2019 08:42:24 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/23/2019 08:42:24 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/23/2019 08:42:24 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/23/2019 08:19:22 PM) (Source: DCOM) (EventID: 10000) (User: PC-DE-BAPTISTE)
Description: Impossible de démarrer un serveur DCOM : {0358B920-0AC7-461F-98F4-58E32CD89148}. L’erreur
« 2147942767 »
s’est produite lors du démarrage de la commande :
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
CodeIntegrity:
===================================
Date: 2019-07-24 23:06:37.893
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-24 23:06:37.869
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-24 23:06:02.453
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-07-23 20:43:14.484
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-07-23 20:43:07.041
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-23 20:43:06.519
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-23 19:58:44.406
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-23 19:58:44.203
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. GL502VS.201 09/07/2016
Motherboard: ASUSTeK COMPUTER INC. GL502VS
Processeur: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
Pourcentage de mémoire utilisée: 63%
Mémoire physique - RAM - totale: 8127.9 MB
Mémoire physique - RAM - disponible: 2966.61 MB
Mémoire virtuelle totale: 14271.9 MB
Mémoire virtuelle disponible: 6833.25 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:118.48 GB) (Free:30.24 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:926.69 GB) NTFS
\\?\Volume{200ba6be-1d87-4fb9-b34c-05b2c63f05e5}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS
\\?\Volume{a3bb3899-5022-4885-904e-e40a1d80e435}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 83F15F5C)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 932DE19C)
Partition: GPT.
==================== Fin de Addition.txt ============================
Exécuté par baptiste (24-07-2019 23:10:19)
Exécuté depuis C:\Users\fazil\Desktop
Windows 10 Home Version 1903 18362.239 (X64) (2019-07-17 02:29:17)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-1268238801-1154124454-151583812-500 - Administrator - Disabled)
baptiste (S-1-5-21-1268238801-1154124454-151583812-1001 - Administrator - Enabled) => C:\Users\fazil
DefaultAccount (S-1-5-21-1268238801-1154124454-151583812-503 - Limited - Disabled)
Invité (S-1-5-21-1268238801-1154124454-151583812-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1268238801-1154124454-151583812-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318}
AS: Spybot - Search and Destroy (Enabled - Out of date) {4C1D9672-63FE-5C90-371E-8FDA591C5B75}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5}
FW: Bitdefender Pare-feu (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 19.012.20035 - Adobe Systems Incorporated)
Adobe Connect 9 Add-in (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Adobe Connect 9 Add-in) (Version: 11.9.980.387 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.8.2.476 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.223 - Adobe)
Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.)
ASUS Device Activation (HKLM-x32\...\{9C4B0706-9F9A-47BF-B417-0A111FC52B04}) (Version: 1.0.4.0 - ASUSTeK COMPUTER INC.)
ASUS GIFTBOX (HKLM-x32\...\ASUS GIFTBOX) (Version: 7.6.5 - ASUSTek Computer Inc)
ASUS HiPost (HKLM-x32\...\{04768366-F421-4BA5-8423-B84F644B5249}) (Version: 1.0.6 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.6.8 - ASUSTeK COMPUTER INC.)
ASUS PTP Driver (HKLM-x32\...\{7618E419-9124-4E6C-9AF4-487A6DDEC1C5}) (Version: 11.0.13 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.16.0002 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.7 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0048 - ASUS)
AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.1.19 - ICEpower a/s)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 21.0.25.59 - Bitdefender)
Bitdefender Device Management (HKLM\...\Bitdefender Device Management) (Version: 23.0.22.104 - Bitdefender)
Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 22.0.15.189 - Bitdefender)
Bitdefender VPN (HKLM\...\Bitdefender VPN) (Version: 23.0.8.665 - Bitdefender)
Canon MP250 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP250_series) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.60 - Piriform)
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.3 - ASUSTek Computer Inc.)
Discord (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Discord) (Version: 0.0.305 - Discord Inc.)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.189.1 - Dropbox, Inc.) Hidden
f.lux (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Flux) (Version: - f.lux Software LLC)
GameFirst IV (HKLM-x32\...\{795A0031-3DD5-43F1-BCBA-AEBA756D0FBB}) (Version: 1.5.23 - ASUS) Hidden
GameFirst IV (HKLM-x32\...\GameFirst IV 1.5.23) (Version: 1.5.23 - ASUS)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.5.0.6.1001 - Genesys Logic)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 75.0.3770.142 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.11 - Google LLC) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{fb610cea-ba50-4d4b-a717-cf025419035c}) (Version: 10.1.1.13 - Intel(R) Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1519.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{A984B01A-6823-4C0F-8E83-BE08B3256209}) (Version: 18.1.1612.3253 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
Java 8 Update 171 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180171F0}) (Version: 8.0.1710.11 - Oracle Corporation)
Java 8 Update 212 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180212F0}) (Version: 8.0.2120.10 - Oracle Corporation)
Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{0961a92c-ad83-40dd-a0fc-29ba41e5349d}) (Version: 20.50.3 - Intel Corporation)
Malwarebytes version 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
Microsoft OneDrive (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\OneDriveSetup.exe) (Version: 19.103.0527.0003 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.15.26706 (HKLM-x32\...\{95ac1cfa-f4fb-4d1b-8912-7f9d5fbb140d}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.15.26706 (HKLM-x32\...\{7e9fae12-5bbf-47fb-b944-09c49e75c061}) (Version: 14.15.26706.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
NordVPN (HKLM-x32\...\{F4325B30-A8A0-4D09-B0DE-7CBB485A52D8}) (Version: 6.22.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.22.6) (Version: 6.22.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OpenOffice 4.1.6 (HKLM-x32\...\{50D70A8D-0503-4AA6-97EF-09849E9FB520}) (Version: 4.16.9790 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.11.27975 - Electronic Arts, Inc.)
Panneau de configuration NVIDIA 431.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 431.36 - NVIDIA Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8581 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.1.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.1.0 - VS Revo Group, Ltd.)
ROG Gaming Center (HKLM-x32\...\{CC182DBF-FC67-4F79-9930-6A2682E60BDD}) (Version: 1.0.12 - ASUS)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype version 8.44 (HKLM-x32\...\Skype_is1) (Version: 8.44 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\Spotify) (Version: 1.1.10.540.gfcf0430f - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43835 - TeamViewer)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 50.0 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
Wakfu (HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1F4715F1-86E7-4450-AA9A-13ADBF14BED1-2) (Version: - Ankama)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.2.6.547 - ASUS Cloud Corporation)
Windows Driver Package - ASUS (AsusPTPDrv) HIDClass (08/15/2016 11.0.0.13) (HKLM\...\A2DEE012DC7578575962E3ACBE995AE145C87914) (Version: 08/15/2016 11.0.0.13 - ASUS)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.2.2 - ASUSTeK COMPUTER INC.)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
WPS Office for ASUS (HKLM-x32\...\Kingsoft Office) (Version: 9.1.0.5247 - Kingsoft Corp.)
XSplit Gamecaster (HKLM-x32\...\{9E8A3821-032E-4230-9C12-C14D3FC8685E}) (Version: 2.8.1605.2342 - SplitmediaLabs)
Packages:
=========
@{Microsoft.SeaofThieves_2.84.5822.2_x64__8wekyb3d8bbwe?ms-resource://Microsoft.SeaofThieves/Resources/PackageName} -> C:\Program Files\WindowsApps\Microsoft.SeaofThieves_2.84.5822.2_x64__8wekyb3d8bbwe [2019-07-17] (0)
Courrier et calendrier -> C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.11629.20316.0_x64__8wekyb3d8bbwe [2019-07-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-02-03] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-02-03] (Microsoft Corporation) [MS Ad]
Microsoft News: les actualités à ne pas manquer -> C:\Program Files\WindowsApps\Microsoft.BingNews_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-22] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.4.6132.0_x64__8wekyb3d8bbwe [2019-06-17] (Microsoft Studios) [MS Ad]
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.31.11905.0_x64__8wekyb3d8bbwe [2019-07-22] (Microsoft Corporation) [MS Ad]
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-1268238801-1154124454-151583812-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-90BBB26A5A1F} -> [Creative Cloud Files] => C:\Users\fazil\Creative Cloud Files [2017-09-25 22:34]
CustomCLSID: HKU\S-1-5-21-1268238801-1154124454-151583812-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ShellIconOverlayIdentifiers: [!AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7191} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) [Fichier non signé]
ShellIconOverlayIdentifiers: [!AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D809} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) [Fichier non signé]
ShellIconOverlayIdentifiers: [!AsusWSShellExt_U] -> {1C5AB7B1-0B38-4EC4-9093-7FD277E2AF4E} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll [2015-04-22] (ASUS Cloud Corporation.) [Fichier non signé]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2326} => C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSContextMenu.dll [2015-12-24] (ASUS Cloud Corporation -> ASUS Cloud Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-07-03] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] (Adobe Systems Incorporated -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (win.rar GmbH -> Alexander Roshal)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2017-09-18 09:15 - 2017-09-18 09:15 - 001937408 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\ffmpeg.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 000079360 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\libegl.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 002177536 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\libglesv2.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 003561984 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\node.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000125440 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000027648 _____ () [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2019-01-21 13:55 - 2019-01-21 13:55 - 000251392 _____ () [Fichier non signé] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2015-12-24 09:31 - 2015-12-24 09:31 - 000075264 _____ (ASUS Cloud Corporation) [Fichier non signé] C:\Program Files (x86)\ASUS\WebStorage\2.2.6.547\AsusWSWinService.exe
2015-04-22 15:59 - 2015-04-22 15:59 - 001489920 _____ (ASUS Cloud Corporation.) [Fichier non signé] C:\Program Files (x86)\Common Files\AWS\2.2.6.547\ASUSWSShellExt64.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 001676288 _____ (ASUS TeK Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ApplyLUT.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000178176 _____ (ASUS TeK Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\GenLUT.dll
2016-05-24 14:44 - 2016-05-24 14:44 - 000054784 _____ (ASUS) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ACMON.exe
2016-01-19 15:51 - 2016-01-19 15:51 - 001616160 _____ (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\APRP\aprp.exe
2016-05-24 14:44 - 2016-05-24 14:44 - 000165888 _____ (ASUSTeK Computer Inc.) [Fichier non signé] C:\Program Files (x86)\ASUS\Splendid\ColorU.dll
2016-03-18 13:03 - 2016-03-18 13:03 - 000008704 _____ (Intel Corporation) [Fichier non signé] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2016-12-01 00:34 - 2016-06-14 22:01 - 001298640 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé] C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxinput.dll
2016-12-01 00:34 - 2016-06-14 22:01 - 001767944 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Fichier non signé] C:\WINDOWS\system32\nvspcap64.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 073507840 _____ (The NWJS Community) [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\nw.dll
2017-09-18 09:15 - 2017-09-18 09:15 - 000124928 _____ (The NWJS Community) [Fichier non signé] C:\Program Files (x86)\ASUS\Giftbox\nw_elf.dll
2017-10-16 17:51 - 2017-10-16 17:51 - 001548288 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\LIBEAY32.dll
2017-10-16 17:51 - 2017-10-16 17:51 - 000395776 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Origin\ssleay32.dll
2017-10-16 17:51 - 2018-01-20 10:22 - 001611264 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 005487104 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Core.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 005841920 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Gui.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 001177600 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Network.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 005089792 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2017-10-16 17:51 - 2018-01-20 10:23 - 000184832 _____ (The Qt Company Ltd) [Fichier non signé] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\123simsen.com -> www.123simsen.com
Il y a 7944 plus de sites.
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2015-10-30 09:24 - 2019-07-24 09:00 - 000454656 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
Il y a 15606 plus de lignes.
2017-07-17 13:13 - 2017-07-24 15:17 - 000000509 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
168.137.161 tvb6e4b84e2685.mshome.net # 2017 7 1 24 11 13 44 2
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\fazil\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\cosmos-1866820.jpg
DNS Servers: 89.2.0.1 - 89.2.0.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.
MSCONFIG\Services: dbupdate => 2
MSCONFIG\Services: dbupdatem => 3
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: Kingsoft_WPS_UpdateService => 2
MSCONFIG\Services: LogMeIn => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: PlexUpdateService => 2
MSCONFIG\Services: ROGGamingCenterService => 3
MSCONFIG\Services: SDScannerService => 2
MSCONFIG\Services: SDUpdateService => 2
MSCONFIG\Services: SDWSCService => 2
MSCONFIG\Services: SkypeUpdate => 2
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run: => "LogMeIn GUI"
HKLM\...\StartupApproved\Run: => "BdVpnApp"
HKLM\...\StartupApproved\Run: => "UMonit"
HKLM\...\StartupApproved\Run32: => "AsInstCD"
HKLM\...\StartupApproved\Run32: => "SDTray"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "APSDaemon"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Plex Media Server"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Spybot-S&D Cleaning"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-1268238801-1154124454-151583812-1001\...\StartupApproved\Run: => "NordVPN"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{0BA80DB2-2A05-4FCF-902F-B135C7A9AF4F}] => (Allow) G:\SteamLibrary\steamapps\common\CastlevaniaLoS\bin\CastlevaniaLoSUE.exe Pas de fichier
FirewallRules: [{5073F3A6-7FDC-47DF-B36A-B94741494571}] => (Allow) G:\SteamLibrary\steamapps\common\CastlevaniaLoS\bin\CastlevaniaLoSUE.exe Pas de fichier
FirewallRules: [{5E24407C-4583-42C9-A0BE-7D716FE935F5}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{C8787C21-39D8-40C3-B5FD-36AEC22A7AFE}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3E7167ED-5144-4DFC-B8BE-94F3C0200F63}] => (Allow) C:\Users\fazil\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{CB02DB74-8589-488D-AE69-B8504F939D07}] => (Allow) C:\Users\fazil\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{1B98C526-9AA7-4BAB-B3A0-234940C99706}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Points de restauration =========================
24-07-2019 22:57:39 Revo Uninstaller's restore point - Spybot - Search & Destroy
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (07/24/2019 11:03:28 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme ShellExperienceHost.exe version 10.0.18362.145 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintenance.
ID de processus : 3db4
Heure de début : 01d54260acfe1d90
Heure d'arrêt : 4294967295
Chemin d'accès à l'application : C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
ID de rapport : 7c3063f4-e1e7-45b0-a867-98a21e6f0352
Nom complet du package défectueux : Microsoft.Windows.ShellExperienceHost_10.0.18362.145_neutral_neutral_cw5n1h2txyewy
ID de l'application relative à un package défectueux : App
Type de blocage : Quiesce
Error: (07/24/2019 11:03:25 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Microsoft.Photos.exe version 2019.19051.16210.0 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintenance.
ID de processus : 3fa0
Heure de début : 01d542600c72dfd7
Heure d'arrêt : 4294967295
Chemin d'accès à l'application : C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2019.19051.16210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
ID de rapport :
Nom complet du package défectueux : Microsoft.Windows.Photos_2019.19051.16210.0_x64__8wekyb3d8bbwe
ID de l'application relative à un package défectueux : App
Type de blocage : Quiesce
Error: (07/24/2019 10:57:39 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005, Accès refusé.
.
Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.
Opération :
Données du rédacteur en cours de collecte
Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID d’instance du rédacteur: {fa5ee804-f1c4-4e83-a52d-a3ea9d3e2718}
Error: (07/24/2019 02:13:00 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante mbamtray.exe, version : 3.1.0.1838, horodatage : 0x5d13b12f
Nom du module défaillant : Qt5Core.dll, version : 5.11.1.0, horodatage : 0x5cba0161
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0018dc19
ID du processus défaillant : 0x150c
Heure de début de l’application défaillante : 0x01d5420bf348c105
Chemin d’accès de l’application défaillante : C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
Chemin d’accès du module défaillant: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
ID de rapport : eb3850f8-2852-4e6d-851d-f40a02047683
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (07/23/2019 10:49:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x00000000000002b7
ID du processus défaillant : 0x34f4
Heure de début de l’application défaillante : 0x01d541980c228b96
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 07153bc3-e576-428e-b6aa-db2824edcb6f
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Error: (07/23/2019 10:49:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000477
ID du processus défaillant : 0x3a04
Heure de début de l’application défaillante : 0x01d541980c3b9303
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 0619168e-f462-472f-ba22-1276f53f7da1
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Error: (07/23/2019 10:48:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x0000000000000204
ID du processus défaillant : 0x3a04
Heure de début de l’application défaillante : 0x01d541980c3b9303
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 0e4b9d65-7abe-4521-be92-9bc290e13284
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Error: (07/23/2019 10:48:58 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.18362.1, horodatage : 0xceb8cbe1
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000409
Décalage d’erreur : 0x00000000000000d0
ID du processus défaillant : 0x34f4
Heure de début de l’application défaillante : 0x01d541980c228b96
Chemin d’accès de l’application défaillante : C:\Windows\System32\MicrosoftEdgeCP.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 0d802364-a332-40ba-8e48-2bb80057f3e4
Nom complet du package défaillant : Microsoft.MicrosoftEdge_44.18362.1.0_neutral__8wekyb3d8bbwe
ID de l’application relative au package défaillant : MicrosoftEdge
Erreurs système:
=============
Error: (07/24/2019 11:05:18 PM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Le service Bitdefender Virus Shield ne s’est pas fermé correctement après avoir reçu une commande d’anticipation de fermeture.
Error: (07/24/2019 11:04:46 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/24/2019 11:04:45 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/24/2019 01:22:06 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Les clichés instantanés du volume C: ont été annulés car le stockage du cliché instantané n’a pas pu s’agrandir en raison d’une limite utilisateur.
Error: (07/23/2019 08:42:24 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/23/2019 08:42:24 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/23/2019 08:42:24 PM) (Source: DCOM) (EventID: 10010) (User: PC-DE-BAPTISTE)
Description: Le serveur {D7FD466D-F6CF-4C8E-86DD-12E9B0FDAE48} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (07/23/2019 08:19:22 PM) (Source: DCOM) (EventID: 10000) (User: PC-DE-BAPTISTE)
Description: Impossible de démarrer un serveur DCOM : {0358B920-0AC7-461F-98F4-58E32CD89148}. L’erreur
« 2147942767 »
s’est produite lors du démarrage de la commande :
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
CodeIntegrity:
===================================
Date: 2019-07-24 23:06:37.893
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-24 23:06:37.869
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-24 23:06:02.453
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-07-23 20:43:14.484
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2019-07-23 20:43:07.041
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-23 20:43:06.519
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-23 19:58:44.406
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2019-07-23 19:58:44.203
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. GL502VS.201 09/07/2016
Motherboard: ASUSTeK COMPUTER INC. GL502VS
Processeur: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
Pourcentage de mémoire utilisée: 63%
Mémoire physique - RAM - totale: 8127.9 MB
Mémoire physique - RAM - disponible: 2966.61 MB
Mémoire virtuelle totale: 14271.9 MB
Mémoire virtuelle disponible: 6833.25 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:118.48 GB) (Free:30.24 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:926.69 GB) NTFS
\\?\Volume{200ba6be-1d87-4fb9-b34c-05b2c63f05e5}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS
\\?\Volume{a3bb3899-5022-4885-904e-e40a1d80e435}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: 83F15F5C)
Partition: GPT.
========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 932DE19C)
Partition: GPT.
==================== Fin de Addition.txt ============================