Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 21-08-2021
Exécuté par nadac (27-08-2021 08:53:38) Run:1
Exécuté depuis C:\Users\nadac\Downloads
Profils chargés: nadac
Mode d'amorçage: Normal
==============================================

fixlist contenu:
*****************
CreateRestorePoint:
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction
HKU\S-1-5-21-3146612119-1447694991-794874632-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33169992 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\92.0.4515.159\Installer\chrmstp.exe [2021-08-19] (Google LLC -> Google LLC)
GroupPolicy: Restriction ?
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction
DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|{7C046CF8-759C-4301-A95C-2D5FD8AD23DE}
DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Steam
DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|EpicGamesLauncher
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run|Steam]
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run|EpicGamesLauncher]
DeleteKey: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{567B422D-86AF-499B-9BA5-1DDC886978CD}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{4708F83D-BAC8-4908-BE1C-EF6222A6C70C}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{542ABD82-7802-46B7-BF10-1AC14733F2EF}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{9A218985-3049-4917-9EE7-01977943D60B}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5F6E9E57-7AF7-40AC-9F5C-0A2C3F35CA8A}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{95D61BAC-4387-4897-9DD7-7BB63C1CC3EA}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{BC3749C7-E1E9-4B2B-81B3-E91C98CA28F9}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{BF1E94EA-A5F4-4E5C-800D-4226B990ED28}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{E95E5CE9-74A4-403E-9467-4CF533188E6D}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{864FEA67-9A7C-4910-9E32-AA511496AE3C}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{D86A77CF-DD72-45BB-8A39-3D849E7E7504}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{A438D69E-60E4-4EA3-929B-5856006D577C}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{B0830FA0-E7FF-4067-A793-AEBC81EFEEF5}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{1302ED56-31B4-42C5-8D5E-195AB02900BF}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{82C3DEA6-7D87-417D-9879-8C0BA7A37786}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{ECBA0E4B-C6D0-4404-B87E-B84A13B38818}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{A1907F1F-8670-4B6C-956E-4B103167CFBD}C:\program files\epic games\paladins\binaries\win64\paladins.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{DA7450AF-326C-4900-8A1C-6FF92F05427B}C:\program files\epic games\paladins\binaries\win64\paladins.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{A4F6EEA3-68E0-4CEC-BEB5-A6ACF5E1DEF4}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{4FC64AC3-2552-4F3C-A8F4-95C8BE6DD1A5}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{38702402-CCC6-40CA-BAC0-70E965A3290C}C:\program files\epic games\paladins\binaries\win64\paladins.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{E2410E0A-2286-4ED0-934F-572A031C3D48}C:\program files\epic games\paladins\binaries\win64\paladins.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C23A1153-F368-42AB-AF55-C51B395D87F8}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CAD88F47-25DA-42AC-8153-E3DFD366C2E6}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{F271AB11-112D-494C-AF9B-A53B4F256876}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{9BA14D0A-C0B6-43D3-94EB-1883232D9023}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3AA6B6BB-5DF9-4A5C-ADA0-E8819A4250B5}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CEFFA9B0-17FE-483A-8164-B6134BEB6C03}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CB8E399D-7291-422A-A930-362F69A17580}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{10FF04D9-947B-4265-90D4-C59038A50641}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{E9D0917C-240F-45C8-A461-F2A608B01E82}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{60DD2C92-F563-4604-B977-2D7D91B258B3}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{6731B656-2FA6-4878-BD7D-59288664CC39}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{7B5AFFDC-2D1E-4363-8117-DF4EF50530C9}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C03FD084-2D40-40ED-8E24-F72A05F59800}"
DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9A63098A-2775-477C-8414-5F566EDA58BE}"
DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32
DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA}
DeleteKey: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32
DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32
C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\000
C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\001
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName
DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName
DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00
DeleteKey: HKCU\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8
DeleteKey: HKCU\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e
DeleteKey: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8
DeleteKey: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e
C:\Program Files (x86)\Company
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00
S3 WdNisSvc; "%ProgramData%\Microsoft\Windows Defender\platform\4.18.2103.7-0\NisSrv.exe" [X]
S2 WinDefend; "C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2103.7-0\MsMpEng.exe" [X]
2021-08-26 12:40 - 2021-08-26 12:40 - 000001046 _____ C:\Users\nadac\Desktop\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT
2021-08-22 21:04 - 2021-08-22 21:04 - 000001046 _____ C:\ProgramData\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT
2021-08-22 19:54 - 2021-08-22 21:04 - 000000000 ____D C:\ProgramData\70W5UKWS426DKBHE1IT9R6001
2021-08-22 19:54 - 2021-08-22 19:56 - 000000000 ____D C:\ProgramData\JUHCKWPS1610DSWZDV4UU4RJK
2021-08-22 19:53 - 2021-08-22 19:53 - 000305049 _____ C:\Users\nadac\AppData\LocalLow\sqlite3.dll
2021-08-22 19:53 - 2021-08-22 19:53 - 000000000 ____D C:\ProgramData\{1D7BD5EC-1EA9-44E8-9114-08DDFBD26AB9}
2021-08-22 19:52 - 2021-08-22 21:04 - 000000000 ____D C:\ProgramData\A7MZ6PQXZKJ1YK0K2LNYGZ2C2
2021-08-22 19:51 - 2021-08-22 19:51 - 000000000 ____D C:\ProgramData\FIPYNJIUJ3L62O82MV7YQOAI7
2021-08-20 23:15 - 2021-08-22 20:11 - 004074273 _____ C:\Users\nadac\Desktop\oka.flp.payfast.206-0A0-8D2
2021-08-20 13:21 - 2021-08-20 23:09 - 001322119 _____ C:\Users\nadac\Desktop\fg - Copie.flp.payfast.206-0A0-8D2
2021-08-16 21:50 - 2021-08-16 21:50 - 001235050 _____ C:\Users\nadac\Desktop\fg_2.flp.payfast.206-0A0-8D2
2021-08-16 21:41 - 2021-08-16 21:55 - 001234689 _____ C:\Users\nadac\Desktop\fg.flp.payfast.206-0A0-8D2
2021-08-16 19:31 - 2021-08-16 19:32 - 001427293 _____ C:\Users\nadac\Downloads\video0.mp4
2021-08-16 10:42 - 2021-08-16 10:42 - 007008601 _____ C:\Users\nadac\Desktop\untitled.wav.payfast.206-0A0-8D2
2021-08-16 01:12 - 2021-08-16 16:46 - 001456628 _____ C:\Users\nadac\Desktop\orchestrap3_3.flp.payfast.206-0A0-8D2
2021-08-16 00:12 - 2021-08-16 01:07 - 001456570 _____ C:\Users\nadac\Desktop\orchestrap3_2.flp.payfast.206-0A0-8D2
2021-08-15 20:31 - 2021-08-15 20:31 - 001457581 _____ C:\Users\nadac\Desktop\orchestrap3.flp.payfast.206-0A0-8D2
2021-08-15 19:02 - 2021-08-15 19:02 - 001446436 _____ C:\Users\nadac\Desktop\orchestrap_2.flp.payfast.206-0A0-8D2
2021-08-15 14:06 - 2021-08-15 18:23 - 001425476 _____ C:\Users\nadac\Desktop\orchestrap.flp.payfast.206-0A0-8D2
FirewallRules: [TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe] => (Allow) C:\program files\qbittorrent\qbittorrent.exe => Pas de fichier
FirewallRules: [UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe] => (Allow) C:\program files\qbittorrent\qbittorrent.exe => Pas de fichier
EmptyTemp:

*****************

Le Point de restauration a été créé avec succès.
Processus fermé avec succès.
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => supprimé(es) avec succès
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Smart Cleaning" => supprimé(es) avec succès
HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => supprimé(es) avec succès
C:\Windows\system32\GroupPolicy\Machine => déplacé(es) avec succès
HKLM\SOFTWARE\Policies\Mozilla => supprimé(es) avec succès
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\{7C046CF8-759C-4301-A95C-2D5FD8AD23DE}" => supprimé(es) avec succès
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Steam" => supprimé(es) avec succès
"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EpicGamesLauncher" => supprimé(es) avec succès
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run\\Steam]" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run\\EpicGamesLauncher]" => non trouvé(e)
"HKLM\SOFTWARE\POLICIES\Mozilla\Firefox" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{567B422D-86AF-499B-9BA5-1DDC886978CD}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4708F83D-BAC8-4908-BE1C-EF6222A6C70C}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{542ABD82-7802-46B7-BF10-1AC14733F2EF}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9A218985-3049-4917-9EE7-01977943D60B}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5F6E9E57-7AF7-40AC-9F5C-0A2C3F35CA8A}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{95D61BAC-4387-4897-9DD7-7BB63C1CC3EA}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BC3749C7-E1E9-4B2B-81B3-E91C98CA28F9}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BF1E94EA-A5F4-4E5C-800D-4226B990ED28}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E95E5CE9-74A4-403E-9467-4CF533188E6D}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{864FEA67-9A7C-4910-9E32-AA511496AE3C}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D86A77CF-DD72-45BB-8A39-3D849E7E7504}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A438D69E-60E4-4EA3-929B-5856006D577C}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B0830FA0-E7FF-4067-A793-AEBC81EFEEF5}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1302ED56-31B4-42C5-8D5E-195AB02900BF}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{82C3DEA6-7D87-417D-9879-8C0BA7A37786}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ECBA0E4B-C6D0-4404-B87E-B84A13B38818}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A1907F1F-8670-4B6C-956E-4B103167CFBD}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DA7450AF-326C-4900-8A1C-6FF92F05427B}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A4F6EEA3-68E0-4CEC-BEB5-A6ACF5E1DEF4}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4FC64AC3-2552-4F3C-A8F4-95C8BE6DD1A5}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{38702402-CCC6-40CA-BAC0-70E965A3290C}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E2410E0A-2286-4ED0-934F-572A031C3D48}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C23A1153-F368-42AB-AF55-C51B395D87F8}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CAD88F47-25DA-42AC-8153-E3DFD366C2E6}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F271AB11-112D-494C-AF9B-A53B4F256876}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9BA14D0A-C0B6-43D3-94EB-1883232D9023}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3AA6B6BB-5DF9-4A5C-ADA0-E8819A4250B5}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CEFFA9B0-17FE-483A-8164-B6134BEB6C03}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB8E399D-7291-422A-A930-362F69A17580}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10FF04D9-947B-4265-90D4-C59038A50641}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E9D0917C-240F-45C8-A461-F2A608B01E82}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60DD2C92-F563-4604-B977-2D7D91B258B3}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6731B656-2FA6-4878-BD7D-59288664CC39}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7B5AFFDC-2D1E-4363-8117-DF4EF50530C9}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C03FD084-2D40-40ED-8E24-F72A05F59800}"" => non trouvé(e)
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A63098A-2775-477C-8414-5F566EDA58BE}"" => non trouvé(e)
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès
HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => non trouvé(e)
HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès
C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\000 => déplacé(es) avec succès
C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\001 => déplacé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName" => supprimé(es) avec succès
"HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany" => supprimé(es) avec succès
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName" => non trouvé(e)
"HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany" => non trouvé(e)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 => non trouvé(e)
HKCU\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8 => supprimé(es) avec succès
HKCU\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e => supprimé(es) avec succès
HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8 => non trouvé(e)
HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e => non trouvé(e)
C:\Program Files (x86)\Company => déplacé(es) avec succès
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 => non trouvé(e)
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 => supprimé(es) avec succès
HKLM\System\CurrentControlSet\Services\WdNisSvc => impossible à supprimer, clé était peut-être protégé(e)
HKLM\System\CurrentControlSet\Services\WinDefend => impossible à supprimer, clé était peut-être protégé(e)
Impossible de déplacer "C:\Users\nadac\Desktop\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT" => Planifié pour déplacement au redémarrage.
C:\ProgramData\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT => déplacé(es) avec succès
C:\ProgramData\70W5UKWS426DKBHE1IT9R6001 => déplacé(es) avec succès
C:\ProgramData\JUHCKWPS1610DSWZDV4UU4RJK => déplacé(es) avec succès
C:\Users\nadac\AppData\LocalLow\sqlite3.dll => déplacé(es) avec succès
C:\ProgramData\{1D7BD5EC-1EA9-44E8-9114-08DDFBD26AB9} => déplacé(es) avec succès
C:\ProgramData\A7MZ6PQXZKJ1YK0K2LNYGZ2C2 => déplacé(es) avec succès
C:\ProgramData\FIPYNJIUJ3L62O82MV7YQOAI7 => déplacé(es) avec succès
C:\Users\nadac\Desktop\oka.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\fg - Copie.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\fg_2.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\fg.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Downloads\video0.mp4 => déplacé(es) avec succès
C:\Users\nadac\Desktop\untitled.wav.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\orchestrap3_3.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\orchestrap3_2.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\orchestrap3.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\orchestrap_2.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
C:\Users\nadac\Desktop\orchestrap.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe" => supprimé(es) avec succès
"HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe" => supprimé(es) avec succès

=========== EmptyTemp: ==========

BITS transfer queue => 9199616 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10582703 B
Java, Flash, Steam htmlcache => 171482376 B
Windows/system/drivers => 2186052 B
Edge => 0 B
Chrome => 653198157 B
Firefox => 196389691 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
NetworkService => 18611384 B
nadac => 148378499 B

RecycleBin => 0 B
EmptyTemp: => 1.1 GB données temporaires supprimées.

================================

Résultats du déplacement planifié des fichiers (Mode d'amorçage: Normal) (Date&Heure: 27-08-2021 09:10:32)

C:\Users\nadac\Desktop\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT => déplacé(es) avec succès

Résultats de la suppression planifiée des clés après redémarrage:

HKLM\System\CurrentControlSet\Services\WdNisSvc => impossible à supprimer, clé était peut-être protégé(e)
HKLM\System\CurrentControlSet\Services\WinDefend => impossible à supprimer, clé était peut-être protégé(e)

==== Fin de Fixlog 09:11:04 ====