Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 22-09-2021 02
Exécuté par maryl (27-09-2021 11:06:16)
Exécuté depuis C:\Users\maryl\Downloads
Windows 10 Home Version 20H2 19042.1237 (X64) (2021-04-10 09:34:08)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-3104752690-3260484642-325040286-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3104752690-3260484642-325040286-503 - Limited - Disabled)
Invité (S-1-5-21-3104752690-3260484642-325040286-501 - Limited - Disabled)
maryl (S-1-5-21-3104752690-3260484642-325040286-1001 - Administrator - Enabled) => C:\Users\maryl
WDAGUtilityAccount (S-1-5-21-3104752690-3260484642-325040286-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 6.2.3 - philandro Software GmbH)
Avast Premium Sécurité (HKLM\...\Avast Antivirus) (Version: 21.8.2487 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 93.0.11965.83 - Auteurs de Avast Secure Browser)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 5.13.5702.2914 - Avast Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1065.0 - AVAST Software) Hidden
Bing Wallpaper (HKLM-x32\...\{9C94D5E4-22D6-457B-9263-9C68DBF669DD}) (Version: 1.0.9.3 - Microsoft Corporation)
Chilkat FTP2 ActiveX (HKLM-x32\...\{2856B15B-23DB-430C-9E86-3CBFA5A5E617}) (Version: 2.6.8 - Chilkat Software Inc)
Ditto (HKLM-x32\...\Ditto_is1) (Version: - Scott Brogden)
DriversCloud.com (64 bits) (HKLM\...\{8345D0DF-6F2B-42B5-BEA4-9D7B0F532294}) (Version: 10.1.1.1 - Cybelsoft)
Dropbox (HKLM-x32\...\Dropbox) (Version: 131.4.3968 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.503.1 - Dropbox, Inc.) Hidden
Express Scribe - Logiciel de transcription (HKLM-x32\...\Scribe) (Version: 10.14 - NCH Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 93.0.4577.82 - Google LLC)
Lenovo Essential Wireless Keyboard (HKLM\...\Lenovo Essential Wireless Keyboard) (Version: 1.0 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.8.23.0 - Lenovo Group Ltd.)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.54.161 - Logitech)
Logitech SetPoint 6.70 (HKLM\...\sp6) (Version: 6.70.55 - Logitech)
Malwarebytes version 4.4.6.132 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.4.6.132 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.31 - Microsoft Corporation)
Microsoft Office Home and Student 2019 - fr-fr (HKLM\...\HomeStudent2019Retail - fr-fr) (Version: 16.0.14326.20404 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\OneDriveSetup.exe) (Version: 21.170.0822.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B981965-2FBC-433C-B4B3-E183EE97CD29}) (Version: 2.83.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Molotov (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\Molotov) (Version: 4.4.2 - Molotov)
Mozilla Firefox (x64 fr) (HKLM\...\Mozilla Firefox 92.0.1 (x64 fr)) (Version: 92.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 87.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14326.20404 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.14326.20404 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden
Olympus DSS Player Standard (HKLM-x32\...\{A3B4D99F-4147-4C04-AA3A-15DA42F66972}) (Version: 2.1.1 - OM Digital Solutions Corporation)
PhotoFiltre Studio X (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\PhotoFiltre Studio X) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8383 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.2.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.2.5 - VS Revo Group, Ltd.)
RogueKiller version 15.1.0.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.1.0.0 - Adlice Software)
Skype version 8.75 (HKLM-x32\...\Skype_is1) (Version: 8.75 - Skype Technologies S.A.)
Switch - Convertisseur de fichiers audio (HKLM-x32\...\Switch) (Version: 9.11 - NCH Software)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.16.8 - TeamViewer)
Vivaldi (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\Vivaldi) (Version: 4.2.2406.48 - Vivaldi Technologies AS.)
WhatsApp (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\WhatsApp) (Version: 2.2132.6 - WhatsApp)
Zoom (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\ZoomUMX) (Version: 5.7.7 (1105) - Zoom Video Communications, Inc.)
Packages:
=========
Centre de configuration des graphiques Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt [2021-07-23] (INTEL CORP) [Startup Task]
Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-04-10] (Microsoft Corporation)
Dolby Audio -> C:\Program Files\WindowsApps\dolbylaboratories.dolbyaudio_2.3.222.0_x64__rz1tebttyb220 [2021-04-10] (Dolby Laboratories)
Extension vidéo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-19] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_131.1.242.0_x64__v10z8vjag6ke6 [2021-09-25] (HP Inc.)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\appup.intelgraphicscontrolpanel_3.3.0.0_x64__8j3eq9eme6ctt [2021-04-10] (INTEL CORP)
Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1020.0_x64__8j3eq9eme6ctt [2021-09-04] (INTEL CORP)
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2108.22.0_x64__k1h2ywk1493x8 [2021-09-02] (LENOVO INC.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.7290.0_x64__8wekyb3d8bbwe [2021-08-05] (Microsoft Studios) [MS Ad]
Power2Go for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.Power2GoforLenovo_8.0.12518.0_x86__m916jedk64snt [2021-06-23] (CYBERLINKCOM CORPORATION) [Startup Task]
PowerDVD for Lenovo -> C:\Program Files\WindowsApps\cyberlinkcorp.th.powerdvdforlenovo_14.2.2520.0_x86__m916jedk64snt [2021-04-10] (CYBERLINKCOM CORPORATION)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2021-04-10] (Realtek Semiconductor Corp)
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2021-04-10] (Samsung Electronics Co. Ltd.)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3104752690-3260484642-325040286-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> C:\Users\maryl\AppData\Local\Vivaldi\Application\4.2.2406.48\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
CustomCLSID: HKU\S-1-5-21-3104752690-3260484642-325040286-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\maryl\Dropbox [2021-07-08 11:10]
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-10] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-10] (Malwarebytes Corporation -> Malwarebytes)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2021-04-10 18:04 - 2021-02-27 18:25 - 000017408 _____ () [Fichier non signé] C:\Program Files (x86)\Ditto\ICU_Loader.dll
2021-09-22 18:33 - 2021-08-10 08:59 - 002546176 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\ffmpeg.dll
2021-09-22 18:33 - 2021-08-10 08:59 - 000359936 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\libegl.dll
2021-09-22 18:33 - 2021-08-10 08:59 - 006861312 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\libglesv2.dll
2021-04-10 18:04 - 2021-02-27 18:25 - 000041984 _____ (Ditto Utility Addin) [Fichier non signé] C:\Program Files (x86)\Ditto\Addins\DittoUtil.dll
2021-07-23 11:07 - 2021-07-23 11:08 - 042803200 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\IGCC.dll
2021-04-12 13:02 - 2021-04-12 13:02 - 000000000 ____L (Microsoft Corporation) <==== ATTENTION (zéro octet Fichier/Dossier) C:\Program Files (x86)\Microsoft Office\root\Office16\AppVIsvSubsystems32.dll
2021-04-12 13:02 - 2021-04-12 13:02 - 000000000 ____L (Microsoft Corporation) <==== ATTENTION (zéro octet Fichier/Dossier) C:\Program Files (x86)\Microsoft Office\root\Office16\c2r32.dll
2018-06-13 15:17 - 2018-06-13 15:17 - 000908288 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\DeviceManager\olyadcom.dll
2018-06-13 15:18 - 2018-06-13 15:18 - 001015296 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\DeviceManager\olyadsp.dll
2018-06-13 15:20 - 2018-06-13 15:20 - 000632832 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\DeviceManager\olydvmgr.dll
2021-08-25 14:28 - 2021-08-25 14:28 - 000543744 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\ServerVD\olycfasv.dll
2021-08-25 14:28 - 2021-08-25 14:28 - 000119808 _____ (OM Digital Solutions Corporation) [Fichier non signé] C:\Program Files (x86)\OLYMPUS\DeviceDetector\DSSCancel.DLL
2021-08-25 14:27 - 2021-08-25 14:27 - 000033792 _____ (OM Digital Solutions Corporation) [Fichier non signé] C:\Program Files (x86)\OLYMPUS\DeviceDetector\glossary.dll
2020-05-30 16:04 - 2020-05-30 16:04 - 001638912 _____ (Robert Simpson, et al.) [Fichier non signé] C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.0.0.15\x64\SQLite.Interop.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2021-06-08] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2020-11-21] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2020-11-21] (Logitech Inc -> Logitech, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\maryl\AppData\Local\Microsoft\BingWallpaperApp\WPImages\20210927.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{F2EF79EA-020B-4BE4-BD9D-33C6E046F4DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{57AACF7A-6C5F-4F80-9D8F-08180946A3D0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7C6038F8-D498-486B-B9DB-0330A3AC0AED}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{00F1976E-1A7E-47C9-BB80-DEDDA4E8FBF2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9ED1AC53-8396-426C-8416-529129C4B57E}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe (CYBELSOFT -> CybelSoft)
FirewallRules: [{777469C4-1539-4095-BE4C-868B524817BD}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe (CYBELSOFT -> CybelSoft)
FirewallRules: [{ED3D903D-BBD9-4707-B5CB-4C7759440CBE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A26CC4B8-5C7B-42A5-BB7E-7C8E0B6AFB14}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A8EF91E9-EEE2-4E75-B748-6081D8EBD1F6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6C76A872-6F76-4A1E-AB66-269229D68BB5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{2674F9AF-C35C-4569-99A0-FA3CBD45EF14}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E9488D25-C44E-43A4-83CF-53A44C37C9F2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{FCB92A31-0665-43D2-8719-01F7B3E88D9D}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{5A5FDC01-3083-4468-92B0-C84D9A196EF9}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{8F8CE346-01FE-4EB3-868D-7A41BA12171E}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{8E693C88-5656-4B95-81B0-F07DE9B40D6C}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{AF42612C-3D87-40DE-9E92-24A888EEF401}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{6F900FA8-35BA-46EF-B149-F4F5C8668D23}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{695D03AD-F1F4-422B-87B9-2B81698C676B}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{278B9ACE-D9D4-40D5-B910-5B0BD7BD4099}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\UpdateManager.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{23DDFF4B-7F50-4069-8359-C3B85B6CB775}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\UpdateManager.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{E3EA20CE-0C50-4BB3-9D32-19C355D96DA5}] => (Allow) C:\Users\maryl\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C89AAB0F-4BA4-4357-8029-622B5023677D}] => (Allow) C:\Users\maryl\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{0458961A-6E09-43A9-87BA-D6A3CD1605A6}] => (Allow) C:\Users\maryl\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{F430E3EF-FB92-402E-9A81-4894733BC6FD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{5803B5AE-92DA-40A8-8053-89A7E6FB5264}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{F9963182-5175-40C4-A868-E58DE34057EB}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{41E26F83-C397-432A-8512-40124DAAB790}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{B2C47C51-8D5C-4EB0-B47F-91513057D10F}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{F0D1A671-9096-4326-8F60-F7798232F30E}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{564F46A1-0B0C-4AE3-BA9F-3E3E83852D9F}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{88EA4637-68FA-4BA6-95DC-AABD473AADDB}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DE617778-72DB-46FF-8314-0C7A661371AA}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{860647FF-E04A-4209-B702-FC59EAA31479}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{8FEC5A1C-6C3E-4FB4-80E1-F546BA10F909}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{065CDDB7-DAC6-4FD1-A37F-10F22477CACC}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{2A8B0063-C0FB-4686-A3AA-3460E099E950}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{913E4ACB-130F-4E0A-891C-9E50431F87AA}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{A24B0EC5-F214-43D5-B4ED-CC21E355ED2E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
==================== Points de restauration =========================
17-09-2021 11:32:26 Programme d’installation pour les modules Windows
17-09-2021 11:35:12 Programme d’installation pour les modules Windows
20-09-2021 19:06:37 Revo Uninstaller's restore point - Skype version 8.75
26-09-2021 19:40:07 ZHPcleaner
==================== Éléments en erreur du Gestionnaire de périphériques ============
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours.
.
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.
]
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours.
.
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.
]
Error: (09/26/2021 04:22:35 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: L’optimiseur de stockage n’a pas pu terminer réoptimisation sur Data (D:) car : L’opération demandée n’est pas prise en charge par le matériel sous-jacent au volume. (0x8900002A)
Error: (09/26/2021 04:12:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante UpdateBrowserForApp.exe, version : 1.0.0.0, horodatage : 0xfc42b742
Nom du module défaillant : KERNELBASE.dll, version : 10.0.19041.1202, horodatage : 0x448a4f5d
Code d’exception : 0xe0434352
Décalage d’erreur : 0x0012b5b2
ID du processus défaillant : 0x59dc
Heure de début de l’application défaillante : 0x01d7b2e085f5aff9
Chemin d’accès de l’application défaillante : C:\Users\maryl\AppData\Local\Temp\IXP002.TMP\UpdateBrowserForApp.exe
Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll
ID de rapport : d769952e-3801-4656-996c-e2ea56530d9e
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (09/26/2021 04:12:22 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : UpdateBrowserForApp.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.Data.SQLite.SQLiteException
à System.Data.SQLite.SQLiteLog.Initialize(System.String)
à System.Data.SQLite.SQLiteConnection..ctor(System.String, Boolean)
à System.Data.SQLite.SQLiteConnection..ctor(System.String)
à UpdateBrowserForApp.CookiesManager.ReadBWCookieFromMF(System.String, System.String)
à UpdateBrowserForApp.ThreadManager.ManageBWCookieInMF()
à System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
à System.Threading.ThreadHelper.ThreadStart()
Error: (09/24/2021 06:16:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante UpdateBrowserForApp.exe, version : 1.0.0.0, horodatage : 0xfc42b742
Nom du module défaillant : KERNELBASE.dll, version : 10.0.19041.1202, horodatage : 0x448a4f5d
Code d’exception : 0xe0434352
Décalage d’erreur : 0x0012b5b2
ID du processus défaillant : 0x5c18
Heure de début de l’application défaillante : 0x01d7b15f865cf769
Chemin d’accès de l’application défaillante : C:\Users\maryl\AppData\Local\Temp\IXP002.TMP\UpdateBrowserForApp.exe
Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll
ID de rapport : 7be5d6bd-5b3b-4beb-9b33-26e24b35a5d1
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (09/26/2021 07:21:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service SysMain s’est arrêté avec l’erreur :
Paramètre incorrect.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Content Protection HDCP Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Storage Middleware Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service System Interface Foundation Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Graphics Command Center Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service LenovoVantageService s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Service Microsoft Office « Démarrer en un clic » s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Avast SecureLine VPN s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
CodeIntegrity:
===============
Date: 2021-09-27 10:23:13
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Date: 2021-09-26 19:21:35
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.
==================== Infos Mémoire ===========================
BIOS: LENOVO O3YKT39A 01/21/2020
Carte mère: LENOVO 36F4
Processeur: Intel(R) Core(TM) i5-8400T CPU @ 1.70GHz
Pourcentage de mémoire utilisée: 45%
Mémoire physique - RAM - totale: 16235.76 MB
Mémoire physique - RAM - disponible: 8858.36 MB
Mémoire virtuelle totale: 45931.76 MB
Mémoire virtuelle disponible: 37743.59 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:237.23 GB) (Free:85.55 GB) NTFS
Drive d: (Data) (Fixed) (Total:931.39 GB) (Free:902.18 GB) NTFS
Drive e: (Audio CD) (CDROM) (Total:0 GB) (Free:0 GB) CDFS
Drive f: () (Removable) (Total:7.25 GB) (Free:5.23 GB) FAT32
\\?\Volume{81ec543b-d7a8-4ae3-9964-e1192c0b9d0e}\ () (Fixed) (Total:0.98 GB) (Free:0.48 GB) NTFS
\\?\Volume{66810cf0-e1ca-4444-a4f2-bc0135fc2464}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: CFC876B9)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CFC876CD)
Partition: GPT.
==========================================================
Disk: 2 (Size: 7.3 GB) (Disk ID: 05A89518)
Partition 1: (Active) - (Size=7.3 GB) - (Type=0B)
==================== Fin de Addition.txt =======================
Exécuté par maryl (27-09-2021 11:06:16)
Exécuté depuis C:\Users\maryl\Downloads
Windows 10 Home Version 20H2 19042.1237 (X64) (2021-04-10 09:34:08)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-3104752690-3260484642-325040286-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3104752690-3260484642-325040286-503 - Limited - Disabled)
Invité (S-1-5-21-3104752690-3260484642-325040286-501 - Limited - Disabled)
maryl (S-1-5-21-3104752690-3260484642-325040286-1001 - Administrator - Enabled) => C:\Users\maryl
WDAGUtilityAccount (S-1-5-21-3104752690-3260484642-325040286-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
AnyDesk (HKLM-x32\...\AnyDesk) (Version: ad 6.2.3 - philandro Software GmbH)
Avast Premium Sécurité (HKLM\...\Avast Antivirus) (Version: 21.8.2487 - Avast Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 93.0.11965.83 - Auteurs de Avast Secure Browser)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 5.13.5702.2914 - Avast Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.8.1065.0 - AVAST Software) Hidden
Bing Wallpaper (HKLM-x32\...\{9C94D5E4-22D6-457B-9263-9C68DBF669DD}) (Version: 1.0.9.3 - Microsoft Corporation)
Chilkat FTP2 ActiveX (HKLM-x32\...\{2856B15B-23DB-430C-9E86-3CBFA5A5E617}) (Version: 2.6.8 - Chilkat Software Inc)
Ditto (HKLM-x32\...\Ditto_is1) (Version: - Scott Brogden)
DriversCloud.com (64 bits) (HKLM\...\{8345D0DF-6F2B-42B5-BEA4-9D7B0F532294}) (Version: 10.1.1.1 - Cybelsoft)
Dropbox (HKLM-x32\...\Dropbox) (Version: 131.4.3968 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.503.1 - Dropbox, Inc.) Hidden
Express Scribe - Logiciel de transcription (HKLM-x32\...\Scribe) (Version: 10.14 - NCH Software)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 93.0.4577.82 - Google LLC)
Lenovo Essential Wireless Keyboard (HKLM\...\Lenovo Essential Wireless Keyboard) (Version: 1.0 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 3.8.23.0 - Lenovo Group Ltd.)
Logitech Options (HKLM\...\LogiOptions) (Version: 8.54.161 - Logitech)
Logitech SetPoint 6.70 (HKLM\...\sp6) (Version: 6.70.55 - Logitech)
Malwarebytes version 4.4.6.132 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.4.6.132 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.31 - Microsoft Corporation)
Microsoft Office Home and Student 2019 - fr-fr (HKLM\...\HomeStudent2019Retail - fr-fr) (Version: 16.0.14326.20404 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\OneDriveSetup.exe) (Version: 21.170.0822.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B981965-2FBC-433C-B4B3-E183EE97CD29}) (Version: 2.83.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Molotov (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\Molotov) (Version: 4.4.2 - Molotov)
Mozilla Firefox (x64 fr) (HKLM\...\Mozilla Firefox 92.0.1 (x64 fr)) (Version: 92.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 87.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14326.20404 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.14326.20404 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden
Olympus DSS Player Standard (HKLM-x32\...\{A3B4D99F-4147-4C04-AA3A-15DA42F66972}) (Version: 2.1.1 - OM Digital Solutions Corporation)
PhotoFiltre Studio X (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\PhotoFiltre Studio X) (Version: - )
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8383 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.2.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.2.5 - VS Revo Group, Ltd.)
RogueKiller version 15.1.0.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.1.0.0 - Adlice Software)
Skype version 8.75 (HKLM-x32\...\Skype_is1) (Version: 8.75 - Skype Technologies S.A.)
Switch - Convertisseur de fichiers audio (HKLM-x32\...\Switch) (Version: 9.11 - NCH Software)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.16.8 - TeamViewer)
Vivaldi (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\Vivaldi) (Version: 4.2.2406.48 - Vivaldi Technologies AS.)
WhatsApp (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\WhatsApp) (Version: 2.2132.6 - WhatsApp)
Zoom (HKU\S-1-5-21-3104752690-3260484642-325040286-1001\...\ZoomUMX) (Version: 5.7.7 (1105) - Zoom Video Communications, Inc.)
Packages:
=========
Centre de configuration des graphiques Intel® -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt [2021-07-23] (INTEL CORP) [Startup Task]
Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-04-10] (Microsoft Corporation)
Dolby Audio -> C:\Program Files\WindowsApps\dolbylaboratories.dolbyaudio_2.3.222.0_x64__rz1tebttyb220 [2021-04-10] (Dolby Laboratories)
Extension vidéo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-19] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_131.1.242.0_x64__v10z8vjag6ke6 [2021-09-25] (HP Inc.)
Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\appup.intelgraphicscontrolpanel_3.3.0.0_x64__8j3eq9eme6ctt [2021-04-10] (INTEL CORP)
Intel® Optane™ Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1020.0_x64__8j3eq9eme6ctt [2021-09-04] (INTEL CORP)
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2108.22.0_x64__k1h2ywk1493x8 [2021-09-02] (LENOVO INC.)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.7290.0_x64__8wekyb3d8bbwe [2021-08-05] (Microsoft Studios) [MS Ad]
Power2Go for Lenovo -> C:\Program Files\WindowsApps\CyberLinkCorp.th.Power2GoforLenovo_8.0.12518.0_x86__m916jedk64snt [2021-06-23] (CYBERLINKCOM CORPORATION) [Startup Task]
PowerDVD for Lenovo -> C:\Program Files\WindowsApps\cyberlinkcorp.th.powerdvdforlenovo_14.2.2520.0_x86__m916jedk64snt [2021-04-10] (CYBERLINKCOM CORPORATION)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2021-04-10] (Realtek Semiconductor Corp)
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2021-04-10] (Samsung Electronics Co. Ltd.)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3104752690-3260484642-325040286-1001_Classes\CLSID\{BCA9D37C-CA60-4160-9115-97A00F24702D}\localserver32 -> C:\Users\maryl\AppData\Local\Vivaldi\Application\4.2.2406.48\notification_helper.exe (Vivaldi Technologies AS -> Vivaldi Technologies AS)
CustomCLSID: HKU\S-1-5-21-3104752690-3260484642-325040286-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\maryl\Dropbox [2021-07-08 11:10]
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-10] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.48.0.dll [2021-07-03] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Avast\ashShell.dll [2021-09-22] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-04-10] (Malwarebytes Corporation -> Malwarebytes)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2021-04-10 18:04 - 2021-02-27 18:25 - 000017408 _____ () [Fichier non signé] C:\Program Files (x86)\Ditto\ICU_Loader.dll
2021-09-22 18:33 - 2021-08-10 08:59 - 002546176 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\ffmpeg.dll
2021-09-22 18:33 - 2021-08-10 08:59 - 000359936 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\libegl.dll
2021-09-22 18:33 - 2021-08-10 08:59 - 006861312 _____ () [Fichier non signé] C:\Program Files (x86)\Microsoft\Skype for Desktop\libglesv2.dll
2021-04-10 18:04 - 2021-02-27 18:25 - 000041984 _____ (Ditto Utility Addin) [Fichier non signé] C:\Program Files (x86)\Ditto\Addins\DittoUtil.dll
2021-07-23 11:07 - 2021-07-23 11:08 - 042803200 _____ (Intel Corporation) [Fichier non signé] C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3370.0_x64__8j3eq9eme6ctt\IGCC.dll
2021-04-12 13:02 - 2021-04-12 13:02 - 000000000 ____L (Microsoft Corporation) <==== ATTENTION (zéro octet Fichier/Dossier) C:\Program Files (x86)\Microsoft Office\root\Office16\AppVIsvSubsystems32.dll
2021-04-12 13:02 - 2021-04-12 13:02 - 000000000 ____L (Microsoft Corporation) <==== ATTENTION (zéro octet Fichier/Dossier) C:\Program Files (x86)\Microsoft Office\root\Office16\c2r32.dll
2018-06-13 15:17 - 2018-06-13 15:17 - 000908288 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\DeviceManager\olyadcom.dll
2018-06-13 15:18 - 2018-06-13 15:18 - 001015296 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\DeviceManager\olyadsp.dll
2018-06-13 15:20 - 2018-06-13 15:20 - 000632832 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\DeviceManager\olydvmgr.dll
2021-08-25 14:28 - 2021-08-25 14:28 - 000543744 _____ (OLYMPUS CORPORATION) [Fichier non signé] C:\Program Files (x86)\Common Files\Olympus Shared\ServerVD\olycfasv.dll
2021-08-25 14:28 - 2021-08-25 14:28 - 000119808 _____ (OM Digital Solutions Corporation) [Fichier non signé] C:\Program Files (x86)\OLYMPUS\DeviceDetector\DSSCancel.DLL
2021-08-25 14:27 - 2021-08-25 14:27 - 000033792 _____ (OM Digital Solutions Corporation) [Fichier non signé] C:\Program Files (x86)\OLYMPUS\DeviceDetector\glossary.dll
2020-05-30 16:04 - 2020-05-30 16:04 - 001638912 _____ (Robert Simpson, et al.) [Fichier non signé] C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.0.0.15\x64\SQLite.Interop.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://lenovo17win10.msn.com/?pc=LCTE
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://mystart.lenovo.com/
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2021-06-08] (Microsoft Corporation -> Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2020-11-21] (Logitech Inc -> Logitech, Inc.)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2020-11-21] (Logitech Inc -> Logitech, Inc.)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-29] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3104752690-3260484642-325040286-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\maryl\AppData\Local\Microsoft\BingWallpaperApp\WPImages\20210927.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{F2EF79EA-020B-4BE4-BD9D-33C6E046F4DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{57AACF7A-6C5F-4F80-9D8F-08180946A3D0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7C6038F8-D498-486B-B9DB-0330A3AC0AED}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{00F1976E-1A7E-47C9-BB80-DEDDA4E8FBF2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9ED1AC53-8396-426C-8416-529129C4B57E}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe (CYBELSOFT -> CybelSoft)
FirewallRules: [{777469C4-1539-4095-BE4C-868B524817BD}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe (CYBELSOFT -> CybelSoft)
FirewallRules: [{ED3D903D-BBD9-4707-B5CB-4C7759440CBE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A26CC4B8-5C7B-42A5-BB7E-7C8E0B6AFB14}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A8EF91E9-EEE2-4E75-B748-6081D8EBD1F6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6C76A872-6F76-4A1E-AB66-269229D68BB5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{2674F9AF-C35C-4569-99A0-FA3CBD45EF14}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E9488D25-C44E-43A4-83CF-53A44C37C9F2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{FCB92A31-0665-43D2-8719-01F7B3E88D9D}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{5A5FDC01-3083-4468-92B0-C84D9A196EF9}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{8F8CE346-01FE-4EB3-868D-7A41BA12171E}] => (Allow) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.EXE (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{8E693C88-5656-4B95-81B0-F07DE9B40D6C}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{AF42612C-3D87-40DE-9E92-24A888EEF401}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{6F900FA8-35BA-46EF-B149-F4F5C8668D23}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{695D03AD-F1F4-422B-87B9-2B81698C676B}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\TranscriptionModule.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{278B9ACE-D9D4-40D5-B910-5B0BD7BD4099}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\UpdateManager.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{23DDFF4B-7F50-4069-8359-C3B85B6CB775}] => (Allow) C:\Program Files (x86)\OLYMPUS\DSSPlayerStandard\UpdateManager.exe (OM Digital Solutions Corporation -> OM Digital Solutions Corporation)
FirewallRules: [{E3EA20CE-0C50-4BB3-9D32-19C355D96DA5}] => (Allow) C:\Users\maryl\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C89AAB0F-4BA4-4357-8029-622B5023677D}] => (Allow) C:\Users\maryl\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{0458961A-6E09-43A9-87BA-D6A3CD1605A6}] => (Allow) C:\Users\maryl\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier
FirewallRules: [{F430E3EF-FB92-402E-9A81-4894733BC6FD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{5803B5AE-92DA-40A8-8053-89A7E6FB5264}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{F9963182-5175-40C4-A868-E58DE34057EB}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{41E26F83-C397-432A-8512-40124DAAB790}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{B2C47C51-8D5C-4EB0-B47F-91513057D10F}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{F0D1A671-9096-4326-8F60-F7798232F30E}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{564F46A1-0B0C-4AE3-BA9F-3E3E83852D9F}] => (Block) C:\Program Files\Avast Software\Avast\AvastUI.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{88EA4637-68FA-4BA6-95DC-AABD473AADDB}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DE617778-72DB-46FF-8314-0C7A661371AA}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{860647FF-E04A-4209-B702-FC59EAA31479}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{8FEC5A1C-6C3E-4FB4-80E1-F546BA10F909}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{065CDDB7-DAC6-4FD1-A37F-10F22477CACC}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{2A8B0063-C0FB-4686-A3AA-3460E099E950}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{913E4ACB-130F-4E0A-891C-9E50431F87AA}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
FirewallRules: [{A24B0EC5-F214-43D5-B4ED-CC21E355ED2E}] => (Allow) C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> philandro Software GmbH)
==================== Points de restauration =========================
17-09-2021 11:32:26 Programme d’installation pour les modules Windows
17-09-2021 11:35:12 Programme d’installation pour les modules Windows
20-09-2021 19:06:37 Revo Uninstaller's restore point - Skype version 8.75
26-09-2021 19:40:07 ZHPcleaner
==================== Éléments en erreur du Gestionnaire de périphériques ============
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours.
.
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.
]
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours.
.
Error: (09/26/2021 07:19:44 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.
]
Error: (09/26/2021 04:22:35 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: L’optimiseur de stockage n’a pas pu terminer réoptimisation sur Data (D:) car : L’opération demandée n’est pas prise en charge par le matériel sous-jacent au volume. (0x8900002A)
Error: (09/26/2021 04:12:23 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante UpdateBrowserForApp.exe, version : 1.0.0.0, horodatage : 0xfc42b742
Nom du module défaillant : KERNELBASE.dll, version : 10.0.19041.1202, horodatage : 0x448a4f5d
Code d’exception : 0xe0434352
Décalage d’erreur : 0x0012b5b2
ID du processus défaillant : 0x59dc
Heure de début de l’application défaillante : 0x01d7b2e085f5aff9
Chemin d’accès de l’application défaillante : C:\Users\maryl\AppData\Local\Temp\IXP002.TMP\UpdateBrowserForApp.exe
Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll
ID de rapport : d769952e-3801-4656-996c-e2ea56530d9e
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (09/26/2021 04:12:22 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : UpdateBrowserForApp.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.Data.SQLite.SQLiteException
à System.Data.SQLite.SQLiteLog.Initialize(System.String)
à System.Data.SQLite.SQLiteConnection..ctor(System.String, Boolean)
à System.Data.SQLite.SQLiteConnection..ctor(System.String)
à UpdateBrowserForApp.CookiesManager.ReadBWCookieFromMF(System.String, System.String)
à UpdateBrowserForApp.ThreadManager.ManageBWCookieInMF()
à System.Threading.ThreadHelper.ThreadStart_Context(System.Object)
à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
à System.Threading.ThreadHelper.ThreadStart()
Error: (09/24/2021 06:16:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante UpdateBrowserForApp.exe, version : 1.0.0.0, horodatage : 0xfc42b742
Nom du module défaillant : KERNELBASE.dll, version : 10.0.19041.1202, horodatage : 0x448a4f5d
Code d’exception : 0xe0434352
Décalage d’erreur : 0x0012b5b2
ID du processus défaillant : 0x5c18
Heure de début de l’application défaillante : 0x01d7b15f865cf769
Chemin d’accès de l’application défaillante : C:\Users\maryl\AppData\Local\Temp\IXP002.TMP\UpdateBrowserForApp.exe
Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll
ID de rapport : 7be5d6bd-5b3b-4beb-9b33-26e24b35a5d1
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (09/26/2021 07:21:08 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service SysMain s’est arrêté avec l’erreur :
Paramètre incorrect.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Content Protection HDCP Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Storage Middleware Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service System Interface Foundation Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Intel(R) Graphics Command Center Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service LenovoVantageService s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Service Microsoft Office « Démarrer en un clic » s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
Error: (09/26/2021 07:19:17 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Avast SecureLine VPN s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
CodeIntegrity:
===============
Date: 2021-09-27 10:23:13
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.
Date: 2021-09-26 19:21:35
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume5\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.
==================== Infos Mémoire ===========================
BIOS: LENOVO O3YKT39A 01/21/2020
Carte mère: LENOVO 36F4
Processeur: Intel(R) Core(TM) i5-8400T CPU @ 1.70GHz
Pourcentage de mémoire utilisée: 45%
Mémoire physique - RAM - totale: 16235.76 MB
Mémoire physique - RAM - disponible: 8858.36 MB
Mémoire virtuelle totale: 45931.76 MB
Mémoire virtuelle disponible: 37743.59 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:237.23 GB) (Free:85.55 GB) NTFS
Drive d: (Data) (Fixed) (Total:931.39 GB) (Free:902.18 GB) NTFS
Drive e: (Audio CD) (CDROM) (Total:0 GB) (Free:0 GB) CDFS
Drive f: () (Removable) (Total:7.25 GB) (Free:5.23 GB) FAT32
\\?\Volume{81ec543b-d7a8-4ae3-9964-e1192c0b9d0e}\ () (Fixed) (Total:0.98 GB) (Free:0.48 GB) NTFS
\\?\Volume{66810cf0-e1ca-4444-a4f2-bc0135fc2464}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: CFC876B9)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CFC876CD)
Partition: GPT.
==========================================================
Disk: 2 (Size: 7.3 GB) (Disk ID: 05A89518)
Partition 1: (Active) - (Size=7.3 GB) - (Type=0B)
==================== Fin de Addition.txt =======================