cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 21-03-2020
Ran by Megaport (22-03-2020 00:19:58)
Running from C:\Users\Megaport\Desktop
Windows 10 Pro Version 1909 18363.720 (X64) (2019-09-24 12:37:44)
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-324578539-1889461791-3590773609-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-324578539-1889461791-3590773609-503 - Limited - Disabled)
Guest (S-1-5-21-324578539-1889461791-3590773609-501 - Limited - Disabled)
Megaport (S-1-5-21-324578539-1889461791-3590773609-1001 - Administrator - Enabled) => C:\Users\Megaport
WDAGUtilityAccount (S-1-5-21-324578539-1889461791-3590773609-504 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

AIDA64 Extreme v5.20 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.20 - FinalWire Ltd.)
AMD Ryzen Master (HKLM\...\AMD Ryzen Master) (Version: 2.1.0.1424 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{72ADA61A-C86E-4954-8B2B-1CDDC30D2F88}) (Version: 2.01.15.2138 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.01.15.2138 - Advanced Micro Devices, Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlestate Games Launcher 0.9.3.1057 (HKLM-x32\...\{B0FDA062-7581-4D67-B085-C4E7C358037F}_is1) (Version: 0.9.3.1057 - Battlestate Games)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform)
Core Temp 1.15.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.15.1 - ALCPU)
CPUID CPU-Z 1.91 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.91 - CPUID, Inc.)
de4dot (HKLM\...\{231DE347-3FBC-4C99-A5A9-3D5FD77BCDA4}) (Version: 3.1.41592 - de4dot@gmail.com) Hidden
de4dot 3.1.41592 - hxxps://github.com/Robert-McGinley/de4dot-Installer (HKLM-x32\...\de4dot 3.1.41592) (Version: 3.1.41592 - de4dot@gmail.com)
Discord (HKU\S-1-5-21-324578539-1889461791-3590773609-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Eazfuscator.NET (HKLM-x32\...\{13F6767A-1234-43F8-AD97-D6B3F12755CA}) (Version: 2019.4.389 - Gapotchenko)
ENE IO Driver (HKLM-x32\...\{D0512FFD-6194-4D2E-967E-25B82A3322FF}) (Version: 2.0.8 - ENE TECHNOLOGY INC.) Hidden
ENE RGB HAL (HKLM\...\{87316426-A33E-41E9-942B-968E928A9A47}) (Version: 1.00.10 - Ene Tech.) Hidden
ENE RGB HAL (HKLM-x32\...\{9f93601b-15ea-4e69-8d7c-dfa0f29ae04e}) (Version: 1.00.10 - Ene Tech.) Hidden
Escape from Tarkov (HKLM-x32\...\EscapeFromTarkov) (Version: 0.12.4.6297 - Battlestate Games)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
JetBoost (HKLM-x32\...\JetBoost_is1) (Version: 2.0.0 - BlueSprig)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: - Logitech)
Memory Cleaner 2.60 (HKLM\...\MemClean) (Version: 2.60 - KoshyJohn.com)
Microsoft OneDrive (HKU\S-1-5-21-324578539-1889461791-3590773609-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0008 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mises à jour NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation) Hidden
Motorola CoreScanner Driver (64bit) (HKLM\...\{3403A1B5-9028-4B76-8A7B-04CB4C9A4817}) (Version: 2.03.0002 - Motorola Solutions, Inc) Hidden
Motorola CoreScanner Driver (64bit) (HKLM-x32\...\InstallShield_{3403A1B5-9028-4B76-8A7B-04CB4C9A4817}) (Version: 2.03.0002 - Motorola Solutions, Inc)
MSI Afterburner 4.6.2 (HKLM-x32\...\Afterburner) (Version: 4.6.2 - MSI Co., LTD)
MSI Fast Boot (HKLM-x32\...\{0F212E7A-65EB-4668-A8D7-749026A64F8E}_is1) (Version: 1.0.1.12 - MSI)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.97 - MSI)
MSI Kombustor 4.1.3.0 (64-bit) (HKLM\...\{F3D3CC6B-9AD7-4F43-8C69-40D5902FDC5C}}_is1) (Version: - MSI / Geeks3D)
MSI X Boost (HKLM-x32\...\{515143BB-7A11-4D85-B941-D520AAAA099C}_is1) (Version: 1.0.0.18 - MSI)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA Pilote graphique 442.59 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 442.59 - NVIDIA Corporation)
NVIDIA USBC Driver 1.1.27.831 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.1.27.831 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 9.7.0.16 - Bitsum)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 2.0.1.0 - Advanced Micro Devices, Inc.) Hidden
Quick CPU (HKLM-x32\...\{41F4C8EE-903D-4EB5-B6EB-75413BF496DE}) (Version: 3.0.1.0 - CoderBag)
Resource Hacker Version 5.1.7 (HKLM-x32\...\ResourceHacker_is1) (Version: - )
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.3.8497 - TeamViewer)
WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)

Packages:
=========
Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-12-09] (Microsoft Corporation)
DTS Sound Unbound -> C:\Program Files\WindowsApps\DTSInc.DTSSoundUnbound_2020.1.34.0_x64__t5j2fzbtdg37r [2020-03-13] (DTS, Inc.)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-09-24] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-01-31] (Microsoft Studios) [MS Ad]
MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20503.0_x64__8wekyb3d8bbwe [2020-03-06] (Microsoft Corporation) [MS Ad]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2019-11-28] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.3.180.0_x64__dt26b99r8h8gj [2019-11-28] (Realtek Semiconductor Corp)

==================== Custom CLSID (Whitelisted): ==============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_87086da927dcdf63\nvshext.dll [2020-03-05] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Whitelisted) ====================

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)

ShortcutWithArgument: C:\Users\Megaport\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default

==================== Loaded Modules (Whitelisted) =============

2020-03-13 20:29 - 2020-03-13 20:29 - 096130048 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\libcef.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000117760 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\libEGL.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 004342784 _____ () [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\libGLESv2.dll
2020-01-06 00:08 - 2015-06-23 16:41 - 000082432 _____ (Fintek) [File not signed] C:\Program Files (x86)\MSI\Gaming APP\Lib\FintekUSBDll.dll
2019-09-24 13:04 - 2019-09-24 13:04 - 000113152 _____ (Microsoft Corporation) [File not signed] C:\Windows\WinSxS\amd64_microsoft.vc80.atl_1fc8b3b9a1e18e3b_8.0.50727.762_none_ca3f79d486b08636\ATL80.DLL
2014-05-21 08:39 - 2014-05-21 08:39 - 000143360 _____ (Motorola Solutions, Inc.) [File not signed] C:\Program Files\Motorola Scanner\Common\RSMDriverProvider.dll
2014-05-21 08:39 - 2014-05-21 08:39 - 000413184 _____ (Motorola Solutions, Inc.) [File not signed] C:\Program Files\Motorola Scanner\Common\symbscnr.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000760832 _____ (The Chromium Authors) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\chrome_elf.dll
2020-03-13 20:28 - 2020-03-13 20:28 - 000047104 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\audio\qtaudio_windows.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000026112 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\imageformats\qgif.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000027136 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\imageformats\qico.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000243712 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\imageformats\qjpeg.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000223744 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\imageformats\qmng.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000020992 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\imageformats\qsvg.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000332288 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\imageformats\qtiff.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 001140224 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\platforms\qwindows.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000041984 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtGraphicalEffects\qtgraphicaleffectsplugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQml\Models.2\modelsplugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQuick.2\qtquick2plugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000084480 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQuick\Controls.2\qtquickcontrols2plugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000267776 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQuick\Controls\qtquickcontrolsplugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000071680 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQuick\Layouts\qquicklayoutsplugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000211456 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQuick\Templates.2\qtquicktemplates2plugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000014848 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\qml\QtQuick\Window.2\windowplugin.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 004943360 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Core.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 005022208 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Gui.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000626176 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Multimedia.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000877056 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Network.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 002908672 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Qml.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 003078656 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Quick.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000096256 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5QuickControls2.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000681472 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5QuickTemplates2.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000259072 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Svg.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 004718080 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Widgets.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000439296 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5WinExtras.dll
2020-03-13 20:29 - 2020-03-13 20:29 - 000159232 _____ (The Qt Company Ltd.) [File not signed] C:\Program Files (x86)\Battle.net\Battle.net.11914\Qt5Xml.dll

==================== Alternate Data Streams (Whitelisted) ========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\Megaport\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\Megaport\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]

==================== Safe Mode (Whitelisted) ==================

==================== Association (Whitelisted) =================

==================== Internet Explorer trusted/restricted ==========

==================== Hosts content: =========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2019-03-19 05:49 - 2019-12-12 13:43 - 000000826 _____ C:\Windows\system32\drivers\etc\hosts

==================== Other Areas ===========================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Gapotchenko\Eazfuscator.NET;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Process Lasso\;
HKU\S-1-5-21-324578539-1889461791-3590773609-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 8.8.8.8 - 8.8.4.4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(If an entry is included in the fixlist, it will be removed.)

MSCONFIG\Services: AdvancedSystemCareService13 => 2
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: CoreScanner => 2
MSCONFIG\Services: Megaport Languagetool => 2
MSCONFIG\Services: MSI_FastBoot => 2
MSCONFIG\Services: ScnSrvc => 2
MSCONFIG\Services: Steam Client Service => 3
HKLM\...\StartupApproved\Run: => "SecurityHealth"
HKLM\...\StartupApproved\Run32: => "Fast Boot"
HKU\S-1-5-21-324578539-1889461791-3590773609-1001\...\StartupApproved\Run: => "OneDrive"

==================== FirewallRules (Whitelisted) ================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{8F46E678-8ED9-4181-820D-11C896E53FB6}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{138E683A-E0C2-4A40-B493-A5C362A1549B}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{0FD59F70-A724-4CBD-A89E-CF7B3345DE8E}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{FACBFC88-CCF9-44F3-95BE-7277BBB4FD54}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{CC86148E-1BC8-47E3-8FD9-7FEB22B9F24F}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{6618DBD8-5773-425B-BC0F-1E9D5E531E5D}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{F3F5A406-C2DB-462E-84D3-DC4F56AF8B84}] => (Allow) C:\Program Files (x86)\SteamLibrary\steamapps\common\Rust\Rust.exe (Facepunch Studios Ltd -> Epic Games, Inc)
FirewallRules: [{29680F5B-6677-429E-95D9-D831DAA1EA74}] => (Allow) C:\Program Files (x86)\SteamLibrary\steamapps\common\Rust\Rust.exe (Facepunch Studios Ltd -> Epic Games, Inc)
FirewallRules: [TCP Query User{FB6026A1-FEB8-47D6-89FB-87E764675F09}D:\program files (x86)\dofus sydoria\client\sydoria.exe] => (Allow) D:\program files (x86)\dofus sydoria\client\sydoria.exe () [File not signed]
FirewallRules: [UDP Query User{62093BA4-0133-4ECC-97A9-5B76B1934525}D:\program files (x86)\dofus sydoria\client\sydoria.exe] => (Allow) D:\program files (x86)\dofus sydoria\client\sydoria.exe () [File not signed]
FirewallRules: [{D9B4070D-5528-42CA-9B85-38C16B62D09A}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{EBF14F58-1377-4A1F-BFEB-D2F74B69D98E}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{CF23B475-0057-4EFF-81CC-36470EB40036}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{1719E5B2-027A-488D-BAE0-9E454DC31E04}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [TCP Query User{D3B81E8B-DE3B-437E-BE7F-0E7330862720}D:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [UDP Query User{FFA45768-10C8-4853-B293-98ECFC05894B}D:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe (Bluehole, Inc. -> Bluehole GinnoGames, Inc.)
FirewallRules: [{AFE54530-D418-4BEA-A5DF-376B4BF80C9C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{786E5DEB-58E0-4A4D-BEB7-BF216D5268E9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2FD25D18-211D-44D1-A1AE-EB200E3F8BBA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6E175591-DCBC-41D4-8445-5221FA934E94}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C0622A18-5AB8-40F8-8B75-91776EAF7C6B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{94BA8049-567E-47EB-B1D1-AB17533D6053}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{22C9EEFC-D709-4F97-A392-3C7CF2F78F48}D:\program files (x86)\call of\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\program files (x86)\call of\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [UDP Query User{8B732A71-AD4B-4C58-B722-9EF7F1BFCDF4}D:\program files (x86)\call of\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\program files (x86)\call of\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [{1C94E3E6-EBBD-48C8-9DB4-8261E0A3C2C2}] => (Allow) C:\Program Files (x86)\EFT\EscapeFromTarkov.exe No File
FirewallRules: [{6BD95256-8776-4BF3-8407-7BA1F24CF574}] => (Allow) C:\Program Files (x86)\EFT\EscapeFromTarkov.exe No File
FirewallRules: [{7F697280-91CF-4F5A-A74B-38126A123BBF}] => (Allow) C:\Program Files (x86)\EFT\EscapeFromTarkov.exe No File
FirewallRules: [{DA9EBA32-9BA0-4931-898C-0B8ACA39DA62}] => (Allow) C:\Program Files (x86)\EFT\EscapeFromTarkov.exe No File
FirewallRules: [{93453ACB-DD58-4589-9E48-38DE4F9C5F92}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{10B89E0C-6559-4026-9266-52610983E5C4}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{897B5548-2DC1-41CE-91A4-4E13A896A627}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{FBC87EEF-9C38-4234-BD53-0E2789C3409C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{0A9E35CF-B62C-46F0-9B2E-8B117E3FDA0E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{CD2CA765-491E-4E26-A12B-E35E5D0D0473}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (Battlestate Games Ltd -> Battlestate Games)
FirewallRules: [{C6C810EB-5633-478C-BEED-7C17FFFCC25D}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (Battlestate Games Ltd -> Battlestate Games)
FirewallRules: [{6A35F468-B017-4BBF-8F0C-E20D2EBAA334}] => (Allow) C:\Battlestate Games\BsgLauncher\natives_blob.exe No File
FirewallRules: [{356813F7-4781-467A-81D2-C1FF6866ABC8}] => (Allow) C:\Battlestate Games\BsgLauncher\natives_blob.exe No File
FirewallRules: [{CB01908B-1C82-4C10-BC12-14F312156E5D}] => (Allow) C:\Battlestate Games\BsgLauncher\natives_blob.exe No File
FirewallRules: [{23B1E0B2-6E57-47DC-856A-2DC01B5E5B9C}] => (Allow) C:\Battlestate Games\BsgLauncher\natives_blob.exe No File
FirewallRules: [{958D2FA6-B404-404A-AD66-20D56C0CA25F}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (Battlestate Games Ltd -> Battlestate Games)
FirewallRules: [{04F5FA46-F9DE-4600-96D0-8E5093D4CF13}] => (Allow) C:\Battlestate Games\BsgLauncher\BsgLauncher.exe (Battlestate Games Ltd -> Battlestate Games)

==================== Restore Points =========================


==================== Faulty Device Manager Devices ============


==================== Event log errors: ========================

Could not start eventlog service, could not read events.

Le service Journal d'�v�nements Windows d�marre.
Le service Journal d'�v�nements Windows n'a pas pu �tre lanc�.

Une erreur syst�me s'est produite.

L'erreur syst�me 3 s'est produite.

Le chemin d'acc�s sp�cifi� est introuvable.


==================== Memory info ===========================

BIOS: American Megatrends Inc. 1.00 07/25/2019
Motherboard: Micro-Star International Co., Ltd. A320M-A PRO (MS-7C51)
Processor: AMD Ryzen 5 2600 Six-Core Processor
Percentage of memory in use: 20%
Total physical RAM: 16335.19 MB
Available physical RAM: 13046.82 MB
Total Virtual: 96335.19 MB
Available Virtual: 90070.3 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:223 GB) (Free:115.19 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:658.66 GB) NTFS

\\?\Volume{f9d545f6-0000-0000-0000-100000000000}\ (System Reserved) (Fixed) (Total:0.57 GB) (Free:0.17 GB) NTFS

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: EFF5B33B)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: F9D545F6)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)

==================== End of Addition.txt =======================

Publicité


Signaler le contenu de ce document

Publicité