Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 28-02-2021
Exécuté par thoma (06-03-2021 15:56:35)
Exécuté depuis C:\Users\thoma\Downloads
Windows 10 Home Version 2004 19041.804 (X64) (2020-06-22 00:23:32)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-458995999-549699937-3878598887-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-458995999-549699937-3878598887-503 - Limited - Disabled)
Invité (S-1-5-21-458995999-549699937-3878598887-501 - Limited - Disabled)
thoma (S-1-5-21-458995999-549699937-3878598887-1002 - Administrator - Enabled) => C:\Users\thoma
WDAGUtilityAccount (S-1-5-21-458995999-549699937-3878598887-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
7-Zip 19.02 alpha (x64) (HKLM\...\7-Zip) (Version: 19.02 alpha - Igor Pavlov)
BrLauncher (HKLM-x32\...\{C661197A-6B93-4E37-9E3F-2A1DFCD64234}) (Version: 1.1.15.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{B556F816-FF4D-4BB6-9339-ED28639E2EF3}) (Version: 1.0.2.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{0648F446-BAE9-402F-9BEC-8B333959D8FB}) (Version: 1.2.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{A242EB06-0518-48A3-AF7A-5973BE9CAF7B}) (Version: 1.0.7.3 - Brother Industries Ltd.) Hidden
BrotherHelpInstaller (HKLM-x32\...\{4E461C2A-EC1C-46D1-AF5B-7FEFD0054AF8}) (Version: 1.0.0.0 - Brother) Hidden
BrSupportTools (HKLM-x32\...\{F8F9EB58-33BA-4FF8-80E7-66D87D2E0C3C}) (Version: 1.0.9.0 - Brother Industries Ltd.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)
ControlCenter4 (HKLM-x32\...\{9ADB625A-7F6D-4C48-9058-4767A55D5424}) (Version: 4.2.438.1 - Brother Insutries Ltd.) Hidden
DeviceDetect (HKLM-x32\...\{F805D16D-AB79-4DC7-A60F-436621995275}) (Version: 1.2.1.0 - Brother Industries Ltd.) Hidden
Discord (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\Discord) (Version: 0.0.309 - Discord Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Excel (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 88.0.4324.190 - Google LLC)
Greenshot 1.2.10.6 (HKLM\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HP Support Assistant (HKLM-x32\...\{54ECA61C-83AE-4EE3-A9F7-848155A33386}) (Version: 8.8.34.31 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{BD1E9869-3478-423A-8DC9-3F5639DFC6DB}) (Version: 12.19.48.1 - HP Inc.)
Java 8 Update 281 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180281F0}) (Version: 8.0.2810.9 - Oracle Corporation)
Java SE Development Kit 8 Update 111 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: - Logitech)
Microsoft 365 Apps for enterprise - fr-fr (HKLM\...\O365ProPlusRetail - fr-fr) (Version: 16.0.13127.21216 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.45 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.141.63 - )
Microsoft OneDrive (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\OneDriveSetup.exe) (Version: 21.016.0124.0003 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\Teams) (Version: 1.4.00.4167 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{99FAF70F-9B61-4AB0-9EC0-B31F98FFDC4A}) (Version: 2.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Mises à jour NVIDIA 38.0.6.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.6.0 - NVIDIA Corporation) Hidden
NetworkRepairTool (HKLM-x32\...\{4694AD3E-D4A2-4D98-9848-662A0475E872}) (Version: 1.2.11.0 - Brother Insutries Ltd.) Hidden
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29548709 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29548709 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.21.0.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.21.0.36 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA Pilote graphique 461.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 461.72 - NVIDIA Corporation)
NVIDIA USBC Driver 1.46.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.46.831.832 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13127.21216 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden
Outlook (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
Panneau de configuration NVIDIA 461.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 461.72 - NVIDIA Corporation) Hidden
PowerPoint (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.4.1015.100206 - Razer Inc.)
REDlauncher (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version: - GOG.com)
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
StatusMonitor (HKLM-x32\...\{86D16055-3C14-44C6-BCD7-5514B83BAD34}) (Version: 1.12.4.0 - Brother Insutries Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.22654 - Microsoft Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.7.7 - TeamViewer)
UsbRepairTool (HKLM-x32\...\{523276A4-5779-4105-9163-CA1CF94EC533}) (Version: 1.4.0.0 - Brother Insutries Ltd.) Hidden
WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Word (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
Packages:
=========
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.46.6.0_x86__kgqvnymyfvs32 [2020-10-06] (king.com)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.2.834.0_x64__v10z8vjag6ke6 [2021-02-11] (HP Inc.)
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.2.0_neutral__8xx8rvfyw5nnt [2020-05-04] (Instagram)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe [2020-10-06] (Microsoft Studios) [MS Ad]
Votre téléphone -> C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20091.84.0_x64__8wekyb3d8bbwe [2020-10-06] (Microsoft Corporation)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-458995999-549699937-3878598887-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\thoma\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20289.5\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [Fichier non signé]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [Fichier non signé]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2021-02-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [Fichier non signé]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm --app-url=hxxps://excel.office.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb --app-url=hxxps://outlook.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf --app-url=hxxps://powerpoint.office.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi --app-url=hxxps://word.office.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Modules chargés (Avec liste blanche) =============
2009-02-27 16:38 - 2009-02-27 16:38 - 000139264 _____ () [Fichier non signé] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2019-12-01 18:57 - 2005-04-22 13:36 - 000143360 _____ () [Fichier non signé] C:\WINDOWS\system32\BrSNMP64.dll
2014-11-13 18:55 - 2014-11-13 18:55 - 000461824 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\BrMonitor.dll
2010-09-29 17:07 - 2010-09-29 17:07 - 000180224 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\BroSNMP.dll
2011-02-28 11:32 - 2011-02-28 11:32 - 000208896 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\Brother\BrFirmUpdateCheck.dll
2013-10-10 21:55 - 2013-10-10 21:55 - 002040320 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\Brother\BrStMonWRes.dll
2019-12-01 18:57 - 2013-03-08 15:44 - 000087040 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\WINDOWS\system32\BrNetSti.dll
==================== Alternate Data Streams (Avec liste blanche) ========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\thoma\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\thoma\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE trusted site: HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\sharepoint.com -> hxxps://auvencecom-myfiles.sharepoint.com
IE trusted site: HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 05:49 - 2021-01-12 15:13 - 000000850 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 ft.failyv.com
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-458995999-549699937-3878598887-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\thoma\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\187719.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\Run32: => "BrHelp"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "Synapse3"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "Web Companion"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [UDP Query User{3A8C1BEC-73A2-4E31-8BDA-AC0A4E27FD73}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [TCP Query User{63FD01D6-EF09-4210-AB43-6FF7AA2ACD9A}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [{DD337A3A-F104-4CA1-9602-FE408095FEEF}] => (Allow) LPort=1688
FirewallRules: [UDP Query User{67D396DC-807F-4275-A533-8E824C7800D2}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [TCP Query User{961BB187-4A36-4DF9-97C5-2E6AEAD7CE22}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [{87101AB6-B87F-4AF9-B8DE-62EC2583D9C5}] => (Allow) LPort=54925
FirewallRules: [{87150B4D-637C-4B0A-9103-204D520386C3}] => (Allow) C:\Riot Games\PBE\LeagueClient.exe (Riot Games, Inc. -> )
FirewallRules: [{277E6564-30D6-436E-B65D-EC64AA80B3E9}] => (Allow) C:\Riot Games\PBE\LeagueClient.exe (Riot Games, Inc. -> )
FirewallRules: [{310E77A0-83CD-4A00-8170-107169918BD2}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => Pas de fichier
FirewallRules: [{828AD217-3B88-40D4-AC34-A64368D94310}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => Pas de fichier
FirewallRules: [UDP Query User{0F3F4EAE-468F-41DD-966D-102546F6D2DD}C:\programdata\thoma\blitz\current\blitz.exe] => (Allow) C:\programdata\thoma\blitz\current\blitz.exe (Swift Media Entertainment, Inc. -> Blitz Inc.)
FirewallRules: [TCP Query User{D26E10AF-EF66-4CCC-BEF4-771267E9CE9F}C:\programdata\thoma\blitz\current\blitz.exe] => (Allow) C:\programdata\thoma\blitz\current\blitz.exe (Swift Media Entertainment, Inc. -> Blitz Inc.)
FirewallRules: [{7421FA65-AB07-4FC0-B820-5C6FCB261DE2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{E5798FED-9A6A-422A-A4A6-1A697C72C905}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C74DBEB1-6494-4B9E-B5E8-D40C57822C58}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{91369619-585A-481D-B4CA-18D0EF027D49}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{84D57E3A-1ECD-499E-98A0-58A237B55EAA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B91C8AF4-3344-4884-A665-A4938B7C4F7C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{2DC9A5D8-2A75-4344-BAAA-A64A0AD6EF60}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe => Pas de fichier
FirewallRules: [TCP Query User{5264D597-247C-4567-B1D8-9A0215D19EAA}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe => Pas de fichier
FirewallRules: [{056887DA-4282-4660-B669-1ED4FDB7D997}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{4F7982B4-6778-451F-ADE4-4D9B3C1E1A48}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{D58F3B3A-F1FF-43B3-8AF8-0C2B57761B1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B9ACCD09-59E2-4E55-BE29-6989342397CB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3591359F-30C9-4931-A0A1-76CE48DC5702}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9750AFFB-914F-4B49-AA6F-EA220FC23226}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{AB536384-C425-435A-B0BE-8D4F3C776240}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{13887CCD-847D-402A-B552-EF63D73ADB4D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{417902DB-C50F-4EE1-8E78-713615C72B48}D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe] => (Allow) D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe (Firaxis Games) [Fichier non signé]
FirewallRules: [UDP Query User{C6AA60E0-5688-4FFC-A858-169AA5D41E23}D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe] => (Allow) D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe (Firaxis Games) [Fichier non signé]
FirewallRules: [{9D35E13A-97AE-4FE9-92E0-8079A8638573}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1A9CB49C-BCE9-4B8C-B227-28AA667E510E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{21BA124D-91E3-4F0D-A95A-04C5D9122516}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4354EBB1-1788-41B5-B585-92F7ADE7CC38}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9C151D4A-F367-49E7-9CA6-DCAC0A12A9AB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{34A3116F-E040-42FC-B302-F222033076F4}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{51CA5473-1A10-4276-A1A2-924E5D814A0C}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BD897A28-0FF5-49BA-815A-4654D8704475}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{896D5AC8-B717-46DF-AA92-D5BE374E8191}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{B961A578-C203-4B6A-954D-3E33CD363C71}] => (Allow) D:\SteamLibrary\steamapps\common\Football Manager 2021\fm.exe (Sports Interactive) [Fichier non signé]
FirewallRules: [{F6050A7D-95AD-41AD-9735-EDABBCE1A254}] => (Allow) D:\SteamLibrary\steamapps\common\Football Manager 2021\fm.exe (Sports Interactive) [Fichier non signé]
FirewallRules: [{7E1AB6B0-5D56-46BF-B276-DEE7A8D7548D}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [{2A5FF68F-C7A6-4117-B29F-3F80AA1E817A}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [TCP Query User{F5927493-837B-40C4-A2C3-F2A8171C726F}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{90567667-D087-4D97-B49C-67B47E10E0B4}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{1FDD0482-4359-4543-9906-A799330ADF98}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [UDP Query User{AC9D3BBF-FAD1-4F8F-8F33-B994B55FFFAA}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [TCP Query User{127EC5C9-0E62-4439-8294-EF9BB61EAA18}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{A896B81D-CBB8-41BF-8CB6-354E0C489EA4}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{E89EB138-5D06-4477-BF70-3F397D140F74}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [UDP Query User{C95C2672-B4D9-43A7-B3F1-DA4FBA5873E2}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [{D1B26B43-291D-4912-957D-774E01CE183F}] => (Allow) D:\SteamLibrary\steamapps\common\Out of Space\Out of Space.exe () [Fichier non signé]
FirewallRules: [{1441B0F5-BC4A-477A-A108-2C8C12BF7A19}] => (Allow) D:\SteamLibrary\steamapps\common\Out of Space\Out of Space.exe () [Fichier non signé]
FirewallRules: [{95167538-86B5-46B6-9CC5-172AEE8C37B0}] => (Allow) D:\SteamLibrary\steamapps\common\Satisfactory\FactoryGame.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{9E6DF475-66FA-4CA0-A713-12ED9187121B}] => (Allow) D:\SteamLibrary\steamapps\common\Satisfactory\FactoryGame.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [TCP Query User{2C975BCC-0B15-40DD-8630-F7EF3BAC73E8}D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe (Coffee Stain Studios AB) [Fichier non signé]
FirewallRules: [UDP Query User{CDC99387-D6DF-410B-9AD5-F401B594FC03}D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe (Coffee Stain Studios AB) [Fichier non signé]
FirewallRules: [{B56AAA91-109E-4C29-BDAF-A282A94409E8}] => (Allow) D:\SteamLibrary\steamapps\common\Stellaris\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{14B0856F-CA06-4104-AC25-5A17E7F6449B}] => (Allow) D:\SteamLibrary\steamapps\common\Stellaris\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{A5E9E795-BE6F-4C81-B5F0-79228DA08E64}] => (Allow) D:\SteamLibrary\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{4B94E6A4-0A0A-4CC3-9011-6E72352B7DEC}] => (Allow) D:\SteamLibrary\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{DF267483-6117-46F2-8BE7-A0F9782B8A6C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{6B513547-57EE-42D2-B75F-8019D48A041A}] => (Allow) D:\SteamLibrary\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Fichier non signé]
FirewallRules: [{A617A89C-3F51-46D1-B4D2-84E553C52569}] => (Allow) D:\SteamLibrary\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Fichier non signé]
FirewallRules: [{4E773541-1EC9-43A4-919D-FC9B181CB33C}] => (Allow) D:\SteamLibrary\steamapps\common\Foxhole\War.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{ADF4ED1D-E4FE-49C6-AA0F-521B92A821E0}] => (Allow) D:\SteamLibrary\steamapps\common\Foxhole\War.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [TCP Query User{D162FF37-9D30-4765-B8E2-B0375423D672}D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe (Clapfoot Inc) [Fichier non signé]
FirewallRules: [UDP Query User{E842A1A6-40B1-4F54-8E57-ABDE44B520C0}D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe (Clapfoot Inc) [Fichier non signé]
FirewallRules: [{4632661D-2EBA-455C-907B-793A4642C71D}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [{425A0CC1-F112-4EA2-BC10-357C1869CCA3}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [{8783E65C-42CE-4A32-9A0C-ADB986701535}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{79F9FB4B-9A19-4F4D-AAD3-82287464C61C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{22FF186D-4963-433E-8B95-F27D1D1EA70A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{EDA5C6F7-810C-490B-8B4C-57FE1AB30111}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
==================== Points de restauration =========================
ATTENTION: La Restauration système est désactivée (Total:111.16 GB) (Free:17.27 GB) (16%)
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (03/06/2021 03:27:59 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 03:19:22 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (03/06/2021 12:44:18 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 12:28:32 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 12:13:33 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 11:35:45 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: L’optimiseur de stockage n’a pas pu terminer réoptimisation sur Nouveau nom (D:) car : L’opération demandée n’est pas prise en charge par le matériel sous-jacent au volume. (0x8900002A)
Error: (03/06/2021 11:25:58 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 03:30:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante fm.exe, version : 21.3.0.0, horodatage : 0x602d44b1
Nom du module défaillant : d3d11.dll_unloaded, version : 10.0.19041.746, horodatage : 0xfc177b9d
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000002bd00
ID du processus défaillant : 0x3ed8
Heure de début de l’application défaillante : 0x01d712121f4216f5
Chemin d’accès de l’application défaillante : D:\SteamLibrary\steamapps\common\Football Manager 2021\fm.exe
Chemin d’accès du module défaillant: d3d11.dll
ID de rapport : 149e629c-328d-476d-9ae7-de26a43ff77f
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (03/06/2021 12:17:49 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 6000 millisecondes : Redémarrer le service.
Error: (03/06/2021 12:17:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service NVIDIA LocalSystem Container s’est arrêté avec l’erreur :
Un exécutable de commande générique a renvoyé un résultat qui indique un échec.
Error: (03/06/2021 12:08:29 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-KTN07BH)
Description: Impossible de démarrer un serveur DCOM : {0358B920-0AC7-461F-98F4-58E32CD89148}. L’erreur
« 2147942767 »
s’est produite lors du démarrage de la commande :
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (03/05/2021 03:02:32 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-KTN07BH)
Description: DCOM a reçu l’erreur « 1053 » lors de la tentative de démarrage du service BcastDVRUserService_2f74b avec les arguments « Non disponible » pour exécuter le serveur :
Windows.Media.Capture.Internal.AppCaptureShell
Error: (03/05/2021 03:02:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BcastDVRUserService_2f74b n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (03/05/2021 03:02:32 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service BcastDVRUserService_2f74b.
Error: (02/26/2021 04:30:33 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-KTN07BH)
Description: DCOM a reçu l’erreur « 1053 » lors de la tentative de démarrage du service BcastDVRUserService_35ea3 avec les arguments « Non disponible » pour exécuter le serveur :
Windows.Media.Capture.Internal.AppCaptureShell
Error: (02/26/2021 04:30:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BcastDVRUserService_35ea3 n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Windows Defender:
================
Date: 2021-03-06 11:34:15
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {61C7A403-BBD9-4B11-BCF6-532FB6DDED17}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-21 12:03:39
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {3C794D90-6362-481C-A0A4-A8F7B9105915}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-21 11:59:34
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {C84D7272-5E95-4F19-99FF-D85523DB1EEA}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-15 22:24:35
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {25EFB7EE-A360-416D-BB3E-790C3C37CB50}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-12 10:46:49
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {19881F70-0F4D-494D-954F-78F042478133}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. P3.60 07/31/2019
Carte mère: ASRock B450 Pro4
Processeur: AMD Ryzen 5 2600 Six-Core Processor
Pourcentage de mémoire utilisée: 44%
Mémoire physique - RAM - totale: 16316.99 MB
Mémoire physique - RAM - disponible: 9083.7 MB
Mémoire virtuelle totale: 25532.99 MB
Mémoire virtuelle disponible: 14903.47 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:111.16 GB) (Free:17.27 GB) NTFS
Drive d: (Nouveau nom) (Fixed) (Total:931.5 GB) (Free:840.54 GB) NTFS
\\?\Volume{4c2c5f01-ad78-4a41-a75d-dd90678af4fd}\ (Récupération) (Fixed) (Total:0.52 GB) (Free:0.07 GB) NTFS
\\?\Volume{34893e93-a8ab-4d9d-bd65-95951ea4cb1b}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Fin de Addition.txt =======================
Exécuté par thoma (06-03-2021 15:56:35)
Exécuté depuis C:\Users\thoma\Downloads
Windows 10 Home Version 2004 19041.804 (X64) (2020-06-22 00:23:32)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-458995999-549699937-3878598887-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-458995999-549699937-3878598887-503 - Limited - Disabled)
Invité (S-1-5-21-458995999-549699937-3878598887-501 - Limited - Disabled)
thoma (S-1-5-21-458995999-549699937-3878598887-1002 - Administrator - Enabled) => C:\Users\thoma
WDAGUtilityAccount (S-1-5-21-458995999-549699937-3878598887-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
7-Zip 19.02 alpha (x64) (HKLM\...\7-Zip) (Version: 19.02 alpha - Igor Pavlov)
BrLauncher (HKLM-x32\...\{C661197A-6B93-4E37-9E3F-2A1DFCD64234}) (Version: 1.1.15.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{B556F816-FF4D-4BB6-9339-ED28639E2EF3}) (Version: 1.0.2.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{0648F446-BAE9-402F-9BEC-8B333959D8FB}) (Version: 1.2.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{A242EB06-0518-48A3-AF7A-5973BE9CAF7B}) (Version: 1.0.7.3 - Brother Industries Ltd.) Hidden
BrotherHelpInstaller (HKLM-x32\...\{4E461C2A-EC1C-46D1-AF5B-7FEFD0054AF8}) (Version: 1.0.0.0 - Brother) Hidden
BrSupportTools (HKLM-x32\...\{F8F9EB58-33BA-4FF8-80E7-66D87D2E0C3C}) (Version: 1.0.9.0 - Brother Industries Ltd.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.77 - Piriform)
ControlCenter4 (HKLM-x32\...\{9ADB625A-7F6D-4C48-9058-4767A55D5424}) (Version: 4.2.438.1 - Brother Insutries Ltd.) Hidden
DeviceDetect (HKLM-x32\...\{F805D16D-AB79-4DC7-A60F-436621995275}) (Version: 1.2.1.0 - Brother Industries Ltd.) Hidden
Discord (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\Discord) (Version: 0.0.309 - Discord Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Excel (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\1fc5b090eab9aa41f8a2f5987367e6da) (Version: 1.0 - Excel)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 88.0.4324.190 - Google LLC)
Greenshot 1.2.10.6 (HKLM\...\Greenshot_is1) (Version: 1.2.10.6 - Greenshot)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HP Support Assistant (HKLM-x32\...\{54ECA61C-83AE-4EE3-A9F7-848155A33386}) (Version: 8.8.34.31 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{BD1E9869-3478-423A-8DC9-3F5639DFC6DB}) (Version: 12.19.48.1 - HP Inc.)
Java 8 Update 281 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180281F0}) (Version: 8.0.2810.9 - Oracle Corporation)
Java SE Development Kit 8 Update 111 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: - Logitech)
Microsoft 365 Apps for enterprise - fr-fr (HKLM\...\O365ProPlusRetail - fr-fr) (Version: 16.0.13127.21216 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.45 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.141.63 - )
Microsoft OneDrive (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\OneDriveSetup.exe) (Version: 21.016.0124.0003 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\Teams) (Version: 1.4.00.4167 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{99FAF70F-9B61-4AB0-9EC0-B31F98FFDC4A}) (Version: 2.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Mises à jour NVIDIA 38.0.6.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.6.0 - NVIDIA Corporation) Hidden
NetworkRepairTool (HKLM-x32\...\{4694AD3E-D4A2-4D98-9848-662A0475E872}) (Version: 1.2.11.0 - Brother Insutries Ltd.) Hidden
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA FrameView SDK 1.1.4923.29548709 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29548709 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.21.0.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.21.0.36 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA Pilote graphique 461.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 461.72 - NVIDIA Corporation)
NVIDIA USBC Driver 1.46.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.46.831.832 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13127.21216 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden
Outlook (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\6b0f23e57a39ebfbf2814acb1a24293d) (Version: 1.0 - Outlook)
Panneau de configuration NVIDIA 461.72 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 461.72 - NVIDIA Corporation) Hidden
PowerPoint (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\319814cb56b667dff88f54e08be8f51f) (Version: 1.0 - PowerPoint)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.4.1015.100206 - Razer Inc.)
REDlauncher (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version: - GOG.com)
ScannerUtilityInstaller (HKLM-x32\...\{5B645FE2-19E9-4B15-B5B2-3D8766F6FA27}) (Version: 1.0.0.0 - Brother) Hidden
StatusMonitor (HKLM-x32\...\{86D16055-3C14-44C6-BCD7-5514B83BAD34}) (Version: 1.12.4.0 - Brother Insutries Ltd.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.22654 - Microsoft Corporation)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.7.7 - TeamViewer)
UsbRepairTool (HKLM-x32\...\{523276A4-5779-4105-9163-CA1CF94EC533}) (Version: 1.4.0.0 - Brother Insutries Ltd.) Hidden
WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Word (HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\1b837d0bf93d01407352736c91b7bf50) (Version: 1.0 - Word)
Packages:
=========
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.46.6.0_x86__kgqvnymyfvs32 [2020-10-06] (king.com)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_122.2.834.0_x64__v10z8vjag6ke6 [2021-02-11] (HP Inc.)
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.2.0_neutral__8xx8rvfyw5nnt [2020-05-04] (Instagram)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-09-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe [2020-10-06] (Microsoft Studios) [MS Ad]
Votre téléphone -> C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20091.84.0_x64__8wekyb3d8bbwe [2020-10-06] (Microsoft Corporation)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-458995999-549699937-3878598887-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\thoma\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20289.5\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [Fichier non signé]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [Fichier non signé]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2021-02-23] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-09-05] (Igor Pavlov) [Fichier non signé]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=leffmjdabcgaflkikcefahmlgpodjkdm --app-url=hxxps://excel.office.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=bjhmmnoficofgoiacjaajpkfndojknpb --app-url=hxxps://outlook.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=opfacbhaojodjaojgocnibmklknchehf --app-url=hxxps://powerpoint.office.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=hikhggiobiflkdfdgdajcfklmcibbopi --app-url=hxxps://word.office.com/
ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default
==================== Modules chargés (Avec liste blanche) =============
2009-02-27 16:38 - 2009-02-27 16:38 - 000139264 _____ () [Fichier non signé] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2019-12-01 18:57 - 2005-04-22 13:36 - 000143360 _____ () [Fichier non signé] C:\WINDOWS\system32\BrSNMP64.dll
2014-11-13 18:55 - 2014-11-13 18:55 - 000461824 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\BrMonitor.dll
2010-09-29 17:07 - 2010-09-29 17:07 - 000180224 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\BroSNMP.dll
2011-02-28 11:32 - 2011-02-28 11:32 - 000208896 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\Brother\BrFirmUpdateCheck.dll
2013-10-10 21:55 - 2013-10-10 21:55 - 002040320 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\Program Files (x86)\Browny02\Brother\BrStMonWRes.dll
2019-12-01 18:57 - 2013-03-08 15:44 - 000087040 _____ (Brother Industries, Ltd.) [Fichier non signé] C:\WINDOWS\system32\BrNetSti.dll
==================== Alternate Data Streams (Avec liste blanche) ========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\thoma\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394]
AlternateDataStreams: C:\Users\thoma\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394]
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE trusted site: HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\sharepoint.com -> hxxps://auvencecom-myfiles.sharepoint.com
IE trusted site: HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 05:49 - 2021-01-12 15:13 - 000000850 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 ft.failyv.com
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-458995999-549699937-3878598887-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\thoma\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\187719.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\Run32: => "BrHelp"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "Synapse3"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-458995999-549699937-3878598887-1002\...\StartupApproved\Run: => "Web Companion"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [UDP Query User{3A8C1BEC-73A2-4E31-8BDA-AC0A4E27FD73}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [TCP Query User{63FD01D6-EF09-4210-AB43-6FF7AA2ACD9A}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [{DD337A3A-F104-4CA1-9602-FE408095FEEF}] => (Allow) LPort=1688
FirewallRules: [UDP Query User{67D396DC-807F-4275-A533-8E824C7800D2}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [TCP Query User{961BB187-4A36-4DF9-97C5-2E6AEAD7CE22}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [{87101AB6-B87F-4AF9-B8DE-62EC2583D9C5}] => (Allow) LPort=54925
FirewallRules: [{87150B4D-637C-4B0A-9103-204D520386C3}] => (Allow) C:\Riot Games\PBE\LeagueClient.exe (Riot Games, Inc. -> )
FirewallRules: [{277E6564-30D6-436E-B65D-EC64AA80B3E9}] => (Allow) C:\Riot Games\PBE\LeagueClient.exe (Riot Games, Inc. -> )
FirewallRules: [{310E77A0-83CD-4A00-8170-107169918BD2}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => Pas de fichier
FirewallRules: [{828AD217-3B88-40D4-AC34-A64368D94310}] => (Allow) C:\Riot Games\League of Legends\LeagueClient.exe => Pas de fichier
FirewallRules: [UDP Query User{0F3F4EAE-468F-41DD-966D-102546F6D2DD}C:\programdata\thoma\blitz\current\blitz.exe] => (Allow) C:\programdata\thoma\blitz\current\blitz.exe (Swift Media Entertainment, Inc. -> Blitz Inc.)
FirewallRules: [TCP Query User{D26E10AF-EF66-4CCC-BEF4-771267E9CE9F}C:\programdata\thoma\blitz\current\blitz.exe] => (Allow) C:\programdata\thoma\blitz\current\blitz.exe (Swift Media Entertainment, Inc. -> Blitz Inc.)
FirewallRules: [{7421FA65-AB07-4FC0-B820-5C6FCB261DE2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{E5798FED-9A6A-422A-A4A6-1A697C72C905}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{C74DBEB1-6494-4B9E-B5E8-D40C57822C58}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{91369619-585A-481D-B4CA-18D0EF027D49}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{84D57E3A-1ECD-499E-98A0-58A237B55EAA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B91C8AF4-3344-4884-A665-A4938B7C4F7C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{2DC9A5D8-2A75-4344-BAAA-A64A0AD6EF60}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe => Pas de fichier
FirewallRules: [TCP Query User{5264D597-247C-4567-B1D8-9A0215D19EAA}C:\riot games\league of legends\game\league of legends.exe] => (Allow) C:\riot games\league of legends\game\league of legends.exe => Pas de fichier
FirewallRules: [{056887DA-4282-4660-B669-1ED4FDB7D997}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{4F7982B4-6778-451F-ADE4-4D9B3C1E1A48}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{D58F3B3A-F1FF-43B3-8AF8-0C2B57761B1E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B9ACCD09-59E2-4E55-BE29-6989342397CB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3591359F-30C9-4931-A0A1-76CE48DC5702}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9750AFFB-914F-4B49-AA6F-EA220FC23226}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{AB536384-C425-435A-B0BE-8D4F3C776240}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{13887CCD-847D-402A-B552-EF63D73ADB4D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [TCP Query User{417902DB-C50F-4EE1-8E78-713615C72B48}D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe] => (Allow) D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe (Firaxis Games) [Fichier non signé]
FirewallRules: [UDP Query User{C6AA60E0-5688-4FFC-A858-169AA5D41E23}D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe] => (Allow) D:\steamlibrary\steamapps\common\sid meier's civilization vi\base\binaries\win64steam\civilizationvi.exe (Firaxis Games) [Fichier non signé]
FirewallRules: [{9D35E13A-97AE-4FE9-92E0-8079A8638573}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1A9CB49C-BCE9-4B8C-B227-28AA667E510E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{21BA124D-91E3-4F0D-A95A-04C5D9122516}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4354EBB1-1788-41B5-B585-92F7ADE7CC38}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9C151D4A-F367-49E7-9CA6-DCAC0A12A9AB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{34A3116F-E040-42FC-B302-F222033076F4}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{51CA5473-1A10-4276-A1A2-924E5D814A0C}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{BD897A28-0FF5-49BA-815A-4654D8704475}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{896D5AC8-B717-46DF-AA92-D5BE374E8191}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{B961A578-C203-4B6A-954D-3E33CD363C71}] => (Allow) D:\SteamLibrary\steamapps\common\Football Manager 2021\fm.exe (Sports Interactive) [Fichier non signé]
FirewallRules: [{F6050A7D-95AD-41AD-9735-EDABBCE1A254}] => (Allow) D:\SteamLibrary\steamapps\common\Football Manager 2021\fm.exe (Sports Interactive) [Fichier non signé]
FirewallRules: [{7E1AB6B0-5D56-46BF-B276-DEE7A8D7548D}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [{2A5FF68F-C7A6-4117-B29F-3F80AA1E817A}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [TCP Query User{F5927493-837B-40C4-A2C3-F2A8171C726F}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{90567667-D087-4D97-B49C-67B47E10E0B4}C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\thoma\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{1FDD0482-4359-4543-9906-A799330ADF98}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [UDP Query User{AC9D3BBF-FAD1-4F8F-8F33-B994B55FFFAA}C:\program files\teamspeak 3 client\ts3client_win64.exe] => (Allow) C:\program files\teamspeak 3 client\ts3client_win64.exe => Pas de fichier
FirewallRules: [TCP Query User{127EC5C9-0E62-4439-8294-EF9BB61EAA18}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{A896B81D-CBB8-41BF-8CB6-354E0C489EA4}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{E89EB138-5D06-4477-BF70-3F397D140F74}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [UDP Query User{C95C2672-B4D9-43A7-B3F1-DA4FBA5873E2}C:\users\thoma\appdata\local\programs\blitz\blitz.exe] => (Allow) C:\users\thoma\appdata\local\programs\blitz\blitz.exe => Pas de fichier
FirewallRules: [{D1B26B43-291D-4912-957D-774E01CE183F}] => (Allow) D:\SteamLibrary\steamapps\common\Out of Space\Out of Space.exe () [Fichier non signé]
FirewallRules: [{1441B0F5-BC4A-477A-A108-2C8C12BF7A19}] => (Allow) D:\SteamLibrary\steamapps\common\Out of Space\Out of Space.exe () [Fichier non signé]
FirewallRules: [{95167538-86B5-46B6-9CC5-172AEE8C37B0}] => (Allow) D:\SteamLibrary\steamapps\common\Satisfactory\FactoryGame.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{9E6DF475-66FA-4CA0-A713-12ED9187121B}] => (Allow) D:\SteamLibrary\steamapps\common\Satisfactory\FactoryGame.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [TCP Query User{2C975BCC-0B15-40DD-8630-F7EF3BAC73E8}D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe (Coffee Stain Studios AB) [Fichier non signé]
FirewallRules: [UDP Query User{CDC99387-D6DF-410B-9AD5-F401B594FC03}D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\satisfactory\factorygame\binaries\win64\factorygame-win64-shipping.exe (Coffee Stain Studios AB) [Fichier non signé]
FirewallRules: [{B56AAA91-109E-4C29-BDAF-A282A94409E8}] => (Allow) D:\SteamLibrary\steamapps\common\Stellaris\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{14B0856F-CA06-4104-AC25-5A17E7F6449B}] => (Allow) D:\SteamLibrary\steamapps\common\Stellaris\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{A5E9E795-BE6F-4C81-B5F0-79228DA08E64}] => (Allow) D:\SteamLibrary\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{4B94E6A4-0A0A-4CC3-9011-6E72352B7DEC}] => (Allow) D:\SteamLibrary\steamapps\common\Phasmophobia\Phasmophobia.exe () [Fichier non signé]
FirewallRules: [{DF267483-6117-46F2-8BE7-A0F9782B8A6C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{6B513547-57EE-42D2-B75F-8019D48A041A}] => (Allow) D:\SteamLibrary\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Fichier non signé]
FirewallRules: [{A617A89C-3F51-46D1-B4D2-84E553C52569}] => (Allow) D:\SteamLibrary\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Fichier non signé]
FirewallRules: [{4E773541-1EC9-43A4-919D-FC9B181CB33C}] => (Allow) D:\SteamLibrary\steamapps\common\Foxhole\War.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{ADF4ED1D-E4FE-49C6-AA0F-521B92A821E0}] => (Allow) D:\SteamLibrary\steamapps\common\Foxhole\War.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [TCP Query User{D162FF37-9D30-4765-B8E2-B0375423D672}D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe (Clapfoot Inc) [Fichier non signé]
FirewallRules: [UDP Query User{E842A1A6-40B1-4F54-8E57-ABDE44B520C0}D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\foxhole\war\binaries\win64\war-win64-shipping.exe (Clapfoot Inc) [Fichier non signé]
FirewallRules: [{4632661D-2EBA-455C-907B-793A4642C71D}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [{425A0CC1-F112-4EA2-BC10-357C1869CCA3}] => (Allow) D:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)
FirewallRules: [{8783E65C-42CE-4A32-9A0C-ADB986701535}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{79F9FB4B-9A19-4F4D-AAD3-82287464C61C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{22FF186D-4963-433E-8B95-F27D1D1EA70A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{EDA5C6F7-810C-490B-8B4C-57FE1AB30111}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
==================== Points de restauration =========================
ATTENTION: La Restauration système est désactivée (Total:111.16 GB) (Free:17.27 GB) (16%)
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (03/06/2021 03:27:59 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 03:19:22 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (03/06/2021 12:44:18 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 12:28:32 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 12:13:33 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 11:35:45 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: L’optimiseur de stockage n’a pas pu terminer réoptimisation sur Nouveau nom (D:) car : L’opération demandée n’est pas prise en charge par le matériel sous-jacent au volume. (0x8900002A)
Error: (03/06/2021 11:25:58 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: DESKTOP-KTN07BH)
Description: Impossible d’ouvrir l’objet de performance pour le service Serveur. Les quatre premiers octets (DWORD) de la section Data contiennent le code de statut.
Error: (03/06/2021 03:30:33 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante fm.exe, version : 21.3.0.0, horodatage : 0x602d44b1
Nom du module défaillant : d3d11.dll_unloaded, version : 10.0.19041.746, horodatage : 0xfc177b9d
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000002bd00
ID du processus défaillant : 0x3ed8
Heure de début de l’application défaillante : 0x01d712121f4216f5
Chemin d’accès de l’application défaillante : D:\SteamLibrary\steamapps\common\Football Manager 2021\fm.exe
Chemin d’accès du module défaillant: d3d11.dll
ID de rapport : 149e629c-328d-476d-9ae7-de26a43ff77f
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (03/06/2021 12:17:49 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 6000 millisecondes : Redémarrer le service.
Error: (03/06/2021 12:17:49 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service NVIDIA LocalSystem Container s’est arrêté avec l’erreur :
Un exécutable de commande générique a renvoyé un résultat qui indique un échec.
Error: (03/06/2021 12:08:29 PM) (Source: DCOM) (EventID: 10000) (User: DESKTOP-KTN07BH)
Description: Impossible de démarrer un serveur DCOM : {0358B920-0AC7-461F-98F4-58E32CD89148}. L’erreur
« 2147942767 »
s’est produite lors du démarrage de la commande :
C:\WINDOWS\system32\DllHost.exe /Processid:{3EB3C877-1F16-487C-9050-104DBCD66683}
Error: (03/05/2021 03:02:32 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-KTN07BH)
Description: DCOM a reçu l’erreur « 1053 » lors de la tentative de démarrage du service BcastDVRUserService_2f74b avec les arguments « Non disponible » pour exécuter le serveur :
Windows.Media.Capture.Internal.AppCaptureShell
Error: (03/05/2021 03:02:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BcastDVRUserService_2f74b n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Error: (03/05/2021 03:02:32 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service BcastDVRUserService_2f74b.
Error: (02/26/2021 04:30:33 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-KTN07BH)
Description: DCOM a reçu l’erreur « 1053 » lors de la tentative de démarrage du service BcastDVRUserService_35ea3 avec les arguments « Non disponible » pour exécuter le serveur :
Windows.Media.Capture.Internal.AppCaptureShell
Error: (02/26/2021 04:30:33 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BcastDVRUserService_35ea3 n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.
Windows Defender:
================
Date: 2021-03-06 11:34:15
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {61C7A403-BBD9-4B11-BCF6-532FB6DDED17}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-21 12:03:39
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {3C794D90-6362-481C-A0A4-A8F7B9105915}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-21 11:59:34
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {C84D7272-5E95-4F19-99FF-D85523DB1EEA}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-15 22:24:35
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {25EFB7EE-A360-416D-BB3E-790C3C37CB50}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2021-02-12 10:46:49
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {19881F70-0F4D-494D-954F-78F042478133}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. P3.60 07/31/2019
Carte mère: ASRock B450 Pro4
Processeur: AMD Ryzen 5 2600 Six-Core Processor
Pourcentage de mémoire utilisée: 44%
Mémoire physique - RAM - totale: 16316.99 MB
Mémoire physique - RAM - disponible: 9083.7 MB
Mémoire virtuelle totale: 25532.99 MB
Mémoire virtuelle disponible: 14903.47 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:111.16 GB) (Free:17.27 GB) NTFS
Drive d: (Nouveau nom) (Fixed) (Total:931.5 GB) (Free:840.54 GB) NTFS
\\?\Volume{4c2c5f01-ad78-4a41-a75d-dd90678af4fd}\ (Récupération) (Fixed) (Total:0.52 GB) (Free:0.07 GB) NTFS
\\?\Volume{34893e93-a8ab-4d9d-bd65-95951ea4cb1b}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Protective MBR) (Size: 111.8 GB) (Disk ID: 00000000)
Partition: GPT.
==================== Fin de Addition.txt =======================