Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 10-01-2022 01
Exécuté par ollie (15-01-2022 13:04:48)
Exécuté depuis C:\Users\ollie\OneDrive\Bureau
Microsoft Windows 11 Famille Version 21H2 22000.434 (X64) (2021-11-11 12:04:10)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-3664022494-3954249225-3457998549-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3664022494-3954249225-3457998549-503 - Limited - Disabled)
Invité (S-1-5-21-3664022494-3954249225-3457998549-501 - Limited - Disabled)
ollie (S-1-5-21-3664022494-3954249225-3457998549-1001 - Administrator - Enabled) => C:\Users\ollie
WDAGUtilityAccount (S-1-5-21-3664022494-3954249225-3457998549-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Contrôle dâintégrité du PC Windows (HKLM\...\{0150BDB3-AFFD-47A1-ADB8-DE06658EB3B2}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Discord (HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.)
EdgeDeflector (HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\...\EdgeDeflector) (Version: 1.2.3.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 97.0.4692.71 - Google LLC)
Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.14701.20262 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 97.0.1072.55 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\...\OneDriveSetup.exe) (Version: 21.245.1128.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.14701.20248 - Microsoft Corporation) Hidden
ProtonVPN (HKLM-x32\...\{57C4E518-CE13-4F6B-BA1C-647667ECACFE}) (Version: 1.24.1 - Proton Technologies AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.24.1) (Version: 1.24.1 - Proton Technologies AG)
ProtonVPNTap (HKLM-x32\...\{5DA710E2-1B81-4675-BFC5-76BAF63AE1F6}) (Version: 1.1.3 - Proton Technologies AG)
ProtonVPNTun (HKLM-x32\...\{C953D354-0C14-4CB5-AB42-0A9E40F55857}) (Version: 0.13.0 - Proton Technologies AG)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.30024.0_x64__0a9344xs7nr4m [2022-01-07] (Advanced Micro Devices Inc.) [Startup Task]
BreeZip -> C:\Program Files\WindowsApps\3138AweZip.AweZip_1.4.8.0_x86__ffd303wmbhcjt [2021-11-17] (BreeZip) [MS Ad]
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.22.3.0_x64__6rarf9sa4v8jt [2022-01-14] (Disney)
DTS Audio Processing -> C:\Program Files\WindowsApps\DTSInc.DTSAudioProcessing_1.10.2.0_x64__t5j2fzbtdg37r [2021-11-13] (DTS, Inc.)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1320.12.119.0_x64__8xx8rvfyw5nnt [2021-12-02] (Facebook Inc) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-11-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-11-17] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-14] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.60.43512.0_x64__8wekyb3d8bbwe [2021-12-22] (Microsoft Corporation) [Startup Task]
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_51.10913.5796.0_x64__8wekyb3d8bbwe [2021-12-02] (Microsoft Corporation)
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy [2022-01-14] (ASUSTeK COMPUTER INC.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.29.256.0_x64__dt26b99r8h8gj [2022-01-07] (Realtek Semiconductor Corp)
Samsung Flow -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy [2021-12-22] (Samsung Electronics Co, Ltd.)
ScreenXpert -> C:\Program Files\WindowsApps\B9ECED6F.ScreenPadMaster_2.2.12.0_x64__qmba6cd70vzyy [2022-01-10] (ASUSTeK COMPUTER INC.)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-10] (Spotify AB) [Startup Task]
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3664022494-3954249225-3457998549-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe (Proton Technologies AG -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-10-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2020-11-21 13:44 - 2020-11-21 13:44 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-11-21 13:44 - 2020-11-21 13:44 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2021-12-12 16:54 - 2021-12-12 16:54 - 000137184 _____ (Microsoft Windows -> Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20050.505.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{A2F09AB1-083E-41D2-A4FB-078FC19D253E}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Pas de fichier
FirewallRules: [{2640A2C2-CDB4-40B0-935B-B830C6083088}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8ED1F726-5499-4094-A5CE-986AC3848406}C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe] => (Allow) C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe => Pas de fichier
FirewallRules: [UDP Query User{3B37F680-0703-420B-A0E5-DA96F5270E7E}C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe] => (Allow) C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe => Pas de fichier
FirewallRules: [{60A80559-22D7-4D80-88CC-DC6048F94472}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{54883892-ED8A-4A77-AA82-38D078AB5CEF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E5787BBF-BF12-44DE-B8D6-3BA13BE7BE02}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7CF9B851-73D1-4DB5-B68C-EEE51A3DC0C3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8E031A6D-644E-4341-95D5-D3AA8CBB9646}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{570129B4-A7C1-46F0-BAF5-54857D7C0909}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{9A683FFA-0177-4FAC-AC33-03B7C695F3D3}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{85893D77-D003-4856-9C3C-14D33875F486}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{8B15B357-966B-44DC-BD84-D1369A7DDD2D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E2A85B0A-C458-449A-8578-6721C2BC186E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A06961D6-155D-499D-9B89-42BE7009EDDF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D32C2B61-BD0C-4B26-8940-1EA28782B917}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8E9F985C-B0B0-4569-9E64-FDB9742D9DAA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B163464D-13B6-466E-92F1-F0BA0ACE485E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{88AC7CE8-3CE4-4F7D-A648-E4E9C728C7EE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DFA0E3F6-A24E-4FE9-9EFC-79BBFA6FC86E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5C0E59B7-BC78-4B46-B7D6-4FAB46987D89}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\97.0.1072.55\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B8B06105-2A8E-4275-92BE-3C06FAD2ED55}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{74D7D034-EE44-4333-B75C-FAE0238E3530}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{27E42779-BFC0-4E38-9D72-D95656509807}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{1A4FDC29-F577-44B6-8369-2EE5DFA1589C}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{6F6B72CD-5429-4490-9922-98DD38FDF011}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{3EFBD705-5B4A-4EEF-A854-C2AC0D3CE275}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_85e069e041269e42\ASUSLinkNear\AsusLinkNear.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{DE951D95-F954-4278-9453-52E987DBB8D8}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_85e069e041269e42\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.â)
FirewallRules: [{A443945F-2A66-44FD-8DD0-63C85E339F54}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_85e069e041269e42\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.â)
==================== Points de restauration =========================
18-12-2021 09:47:30 Programme dâinstallation pour les modules Windows
28-12-2021 19:15:22 Point de contrôle planifié
14-01-2022 18:16:11 Programme dâinstallation pour les modules Windows
==================== Ãléments en erreur du Gestionnaire de périphériques ============
Name: Zenbook UEFI
Description: Zenbook UEFI
Class Guid: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
Manufacturer: ASUSTeK COMPUTER INC.
Service:
Problem: : This device cannot work properly until you restart your computer. (Code14)
Resolution: Restart your computer.
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (01/15/2022 12:17:23 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour WORKGROUP\LAPTOP-9PH1NVLI$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 11:17:20 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 727d14e4-3b6c-472d-af65-12a24ebc3bc1
Méthode : GET(313ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 12:17:22 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour Système local via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
Méthode : GET(16ms)
Ãtape : GetCACaps
Lâadresse ou le nom de serveur nâa pas pu être résolu 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/15/2022 12:16:06 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.
]
Error: (01/15/2022 12:15:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de lâapplication défaillante Explorer.EXE, version : 10.0.22000.120, horodatage : 0xe846e749
Nom du module défaillant : Taskbar.dll, version : 10.0.22000.132, horodatage : 0x4dfba0cb
Code dâexception : 0xc0000005
Décalage dâerreur : 0x0000000000032bda
ID du processus défaillant : 0x22a0
Heure de début de lâapplication défaillante : 0x01d80a0125c67f6e
Chemin dâaccès de lâapplication défaillante : C:\WINDOWS\Explorer.EXE
Chemin dâaccès du module défaillant: C:\Windows\System32\Taskbar.dll
ID de rapport : 045a96f5-f956-450b-a688-fd7783af6450
Nom complet du package défaillant :
ID de lâapplication relative au package défaillant :
Error: (01/15/2022 12:15:07 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour WORKGROUP\LAPTOP-9PH1NVLI$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 11:15:05 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 7ee4f6f5-2478-44a7-b1fa-f1040b078a3c
Méthode : GET(218ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 12:15:07 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour Système local via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 11:15:03 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: c74c2de6-717c-41a2-abcb-1edd74fc5212
Méthode : GET(344ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 11:55:36 AM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour WORKGROUP\LAPTOP-9PH1NVLI$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 10:55:33 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: d1835985-7f02-4f19-b3e6-90f9f91f80df
Méthode : GET(219ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 11:55:36 AM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour Système local via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 10:55:32 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 51614edb-d9fa-4b6e-806c-f79547e165fc
Méthode : GET(266ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Erreurs système:
=============
Error: (01/15/2022 12:16:02 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-9PH1NVLI)
Description: Le serveur Microsoft.Windows.ContentDeliveryManager_10.0.22000.1_neutral_neutral_cw5n1h2txyewy!App.AppXw3qcpc7p849541dp39vvqd01bn7z9ybh.mca ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (01/15/2022 11:42:49 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur nâa pas pu se lier au transport \Device\NetBT_Tcpip_{1377D30C-4319-4CE7-B139-B04BB1B3F3E5} car un autre ordinateur du réseau porte le même nom. Le serveur nâa pas pu démarrer.
Error: (01/15/2022 11:42:45 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Ãchec de lâinstallation : lâinstallation de la mise à jour suivante a échoue avec lâerreur 0x8024200b : Intel Corporation - Extension - 22.1070.0.1.
Error: (01/15/2022 11:42:45 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT)
Description: Le module dâextensibilité WLAN sâest arrêté de façon inattendue.
Chemin dâaccès du module : C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (01/15/2022 11:42:45 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT)
Description: Le module dâextensibilité WLAN sâest arrêté de façon inattendue.
Chemin dâaccès du module : C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (01/15/2022 11:32:01 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur nâa pas pu se lier au transport \Device\NetBT_Tcpip_{1377D30C-4319-4CE7-B139-B04BB1B3F3E5} car un autre ordinateur du réseau porte le même nom. Le serveur nâa pas pu démarrer.
Error: (01/15/2022 11:31:57 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Le miniport Microsoft Wi-Fi Direct Virtual Adapter #2, {b7673a57-32d2-4a26-bf36-b723b4fe070f}, a eu lâévénement 74
Error: (01/15/2022 09:09:54 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur nâa pas pu se lier au transport \Device\NetBT_Tcpip_{1377D30C-4319-4CE7-B139-B04BB1B3F3E5} car un autre ordinateur du réseau porte le même nom. Le serveur nâa pas pu démarrer.
Windows Defender:
================
Date: 2022-01-14 21:27:29
Description:
Lâanalyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de lâanalyse : {9D4AB5F2-22F4-4130-AF2F-02F1D55E18FE}
Type de lâanalyse : Logiciel anti-programme malveillant
Paramètres de lâanalyse : Analyse rapide
Utilisateur : AUTORITE NT\Système à¨
Date: 2022-01-03 21:48:18
Description:
N/A
Date: 2021-12-28 17:40:55
Description:
N/A
Date: 2021-11-20 15:17:49
Description:
N/A
Event[0]
Date: 2022-01-15 11:49:05
Description:
Antivirus Microsoft Defender a rencontré une erreur lors du téléchargement et de la configuration de Microsoft Defender Offline.
Code dâerreur : 0x8000000a
Description de lâerreur : Les données nécessaires pour terminer cette opération ne sont pas encore disponibles. à¨
CodeIntegrity:
===============
Date: 2021-12-15 21:27:04
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system. à¨
==================== Infos Mémoire ===========================
BIOS: American Megatrends International, LLC. UM5401QA_UM5401QA.203 08/23/2021
Carte mère: ASUSTeK COMPUTER INC. UM5401QA
Processeur: AMD Ryzen 7 5800H with Radeon Graphics
Pourcentage de mémoire utilisée: 36%
Mémoire physique - RAM - totale: 15775.75 MB
Mémoire physique - RAM - disponible: 10047.74 MB
Mémoire virtuelle totale: 18207.75 MB
Mémoire virtuelle disponible: 11791.24 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:952.33 GB) (Free:759.2 GB) (Protected) NTFS
\\?\Volume{a9e72136-e415-493c-a4c9-d58bb5fe6578}\ (RECOVERY) (Fixed) (Total:1.07 GB) (Free:0.59 GB) NTFS
\\?\Volume{5b2bcb61-4806-4a77-b3ac-d48d8cb99fdb}\ (MYASUS) (Fixed) (Total:0.19 GB) (Free:0.14 GB) FAT32
\\?\Volume{e377bd41-0425-4761-b401-110379610a7e}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 08C203A8)
Partition: GPT.
==================== Fin de Addition.txt =======================
Exécuté par ollie (15-01-2022 13:04:48)
Exécuté depuis C:\Users\ollie\OneDrive\Bureau
Microsoft Windows 11 Famille Version 21H2 22000.434 (X64) (2021-11-11 12:04:10)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-3664022494-3954249225-3457998549-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3664022494-3954249225-3457998549-503 - Limited - Disabled)
Invité (S-1-5-21-3664022494-3954249225-3457998549-501 - Limited - Disabled)
ollie (S-1-5-21-3664022494-3954249225-3457998549-1001 - Administrator - Enabled) => C:\Users\ollie
WDAGUtilityAccount (S-1-5-21-3664022494-3954249225-3457998549-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Contrôle dâintégrité du PC Windows (HKLM\...\{0150BDB3-AFFD-47A1-ADB8-DE06658EB3B2}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Discord (HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.)
EdgeDeflector (HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\...\EdgeDeflector) (Version: 1.2.3.0 - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 97.0.4692.71 - Google LLC)
Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.14701.20262 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 97.0.1072.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 97.0.1072.55 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\...\OneDriveSetup.exe) (Version: 21.245.1128.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.14701.20248 - Microsoft Corporation) Hidden
ProtonVPN (HKLM-x32\...\{57C4E518-CE13-4F6B-BA1C-647667ECACFE}) (Version: 1.24.1 - Proton Technologies AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.24.1) (Version: 1.24.1 - Proton Technologies AG)
ProtonVPNTap (HKLM-x32\...\{5DA710E2-1B81-4675-BFC5-76BAF63AE1F6}) (Version: 1.1.3 - Proton Technologies AG)
ProtonVPNTun (HKLM-x32\...\{C953D354-0C14-4CB5-AB42-0A9E40F55857}) (Version: 0.13.0 - Proton Technologies AG)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.16 - VideoLAN)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.30024.0_x64__0a9344xs7nr4m [2022-01-07] (Advanced Micro Devices Inc.) [Startup Task]
BreeZip -> C:\Program Files\WindowsApps\3138AweZip.AweZip_1.4.8.0_x86__ffd303wmbhcjt [2021-11-17] (BreeZip) [MS Ad]
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.22.3.0_x64__6rarf9sa4v8jt [2022-01-14] (Disney)
DTS Audio Processing -> C:\Program Files\WindowsApps\DTSInc.DTSAudioProcessing_1.10.2.0_x64__t5j2fzbtdg37r [2021-11-13] (DTS, Inc.)
Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_1320.12.119.0_x64__8xx8rvfyw5nnt [2021-12-02] (Facebook Inc) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-11-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-11-17] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.1050.0_x64__8wekyb3d8bbwe [2022-01-14] (Microsoft Studios) [MS Ad]
Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.60.43512.0_x64__8wekyb3d8bbwe [2021-12-22] (Microsoft Corporation) [Startup Task]
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_51.10913.5796.0_x64__8wekyb3d8bbwe [2021-12-02] (Microsoft Corporation)
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy [2022-01-14] (ASUSTeK COMPUTER INC.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.29.256.0_x64__dt26b99r8h8gj [2022-01-07] (Realtek Semiconductor Corp)
Samsung Flow -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy [2021-12-22] (Samsung Electronics Co, Ltd.)
ScreenXpert -> C:\Program Files\WindowsApps\B9ECED6F.ScreenPadMaster_2.2.12.0_x64__qmba6cd70vzyy [2022-01-10] (ASUSTeK COMPUTER INC.)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0 [2022-01-10] (Spotify AB) [Startup Task]
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3664022494-3954249225-3457998549-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe (Proton Technologies AG -> )
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-10-15] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2020-11-21 13:44 - 2020-11-21 13:44 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-11-21 13:44 - 2020-11-21 13:44 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2021-12-12 16:54 - 2021-12-12 16:54 - 000137184 _____ (Microsoft Windows -> Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20050.505.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-13] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3664022494-3954249225-3457998549-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{A2F09AB1-083E-41D2-A4FB-078FC19D253E}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Pas de fichier
FirewallRules: [{2640A2C2-CDB4-40B0-935B-B830C6083088}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8ED1F726-5499-4094-A5CE-986AC3848406}C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe] => (Allow) C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe => Pas de fichier
FirewallRules: [UDP Query User{3B37F680-0703-420B-A0E5-DA96F5270E7E}C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe] => (Allow) C:\users\ollie\onedrive\bureau\chronos-alex.kidd.in.miracle.world.dx\alex kidd in miracle world dx\alex kidd in miracle world dx.exe => Pas de fichier
FirewallRules: [{60A80559-22D7-4D80-88CC-DC6048F94472}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{54883892-ED8A-4A77-AA82-38D078AB5CEF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E5787BBF-BF12-44DE-B8D6-3BA13BE7BE02}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7CF9B851-73D1-4DB5-B68C-EEE51A3DC0C3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.79.95.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8E031A6D-644E-4341-95D5-D3AA8CBB9646}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{570129B4-A7C1-46F0-BAF5-54857D7C0909}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{9A683FFA-0177-4FAC-AC33-03B7C695F3D3}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{85893D77-D003-4856-9C3C-14D33875F486}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.8.6.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{8B15B357-966B-44DC-BD84-D1369A7DDD2D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E2A85B0A-C458-449A-8578-6721C2BC186E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A06961D6-155D-499D-9B89-42BE7009EDDF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D32C2B61-BD0C-4B26-8940-1EA28782B917}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8E9F985C-B0B0-4569-9E64-FDB9742D9DAA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B163464D-13B6-466E-92F1-F0BA0ACE485E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{88AC7CE8-3CE4-4F7D-A648-E4E9C728C7EE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DFA0E3F6-A24E-4FE9-9EFC-79BBFA6FC86E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.176.447.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5C0E59B7-BC78-4B46-B7D6-4FAB46987D89}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\97.0.1072.55\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B8B06105-2A8E-4275-92BE-3C06FAD2ED55}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{74D7D034-EE44-4333-B75C-FAE0238E3530}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{27E42779-BFC0-4E38-9D72-D95656509807}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{1A4FDC29-F577-44B6-8369-2EE5DFA1589C}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{6F6B72CD-5429-4490-9922-98DD38FDF011}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{3EFBD705-5B4A-4EEF-A854-C2AC0D3CE275}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_85e069e041269e42\ASUSLinkNear\AsusLinkNear.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{DE951D95-F954-4278-9453-52E987DBB8D8}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_85e069e041269e42\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.â)
FirewallRules: [{A443945F-2A66-44FD-8DD0-63C85E339F54}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_85e069e041269e42\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.â)
==================== Points de restauration =========================
18-12-2021 09:47:30 Programme dâinstallation pour les modules Windows
28-12-2021 19:15:22 Point de contrôle planifié
14-01-2022 18:16:11 Programme dâinstallation pour les modules Windows
==================== Ãléments en erreur du Gestionnaire de périphériques ============
Name: Zenbook UEFI
Description: Zenbook UEFI
Class Guid: {f2e7dd72-6468-4e36-b6f1-6488f42c1b52}
Manufacturer: ASUSTeK COMPUTER INC.
Service:
Problem: : This device cannot work properly until you restart your computer. (Code14)
Resolution: Restart your computer.
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (01/15/2022 12:17:23 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour WORKGROUP\LAPTOP-9PH1NVLI$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 11:17:20 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 727d14e4-3b6c-472d-af65-12a24ebc3bc1
Méthode : GET(313ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 12:17:22 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour Système local via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
Méthode : GET(16ms)
Ãtape : GetCACaps
Lâadresse ou le nom de serveur nâa pas pu être résolu 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (01/15/2022 12:16:06 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.
]
Error: (01/15/2022 12:15:22 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de lâapplication défaillante Explorer.EXE, version : 10.0.22000.120, horodatage : 0xe846e749
Nom du module défaillant : Taskbar.dll, version : 10.0.22000.132, horodatage : 0x4dfba0cb
Code dâexception : 0xc0000005
Décalage dâerreur : 0x0000000000032bda
ID du processus défaillant : 0x22a0
Heure de début de lâapplication défaillante : 0x01d80a0125c67f6e
Chemin dâaccès de lâapplication défaillante : C:\WINDOWS\Explorer.EXE
Chemin dâaccès du module défaillant: C:\Windows\System32\Taskbar.dll
ID de rapport : 045a96f5-f956-450b-a688-fd7783af6450
Nom complet du package défaillant :
ID de lâapplication relative au package défaillant :
Error: (01/15/2022 12:15:07 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour WORKGROUP\LAPTOP-9PH1NVLI$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 11:15:05 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 7ee4f6f5-2478-44a7-b1fa-f1040b078a3c
Méthode : GET(218ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 12:15:07 PM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour Système local via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 11:15:03 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: c74c2de6-717c-41a2-abcb-1edd74fc5212
Méthode : GET(344ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 11:55:36 AM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour WORKGROUP\LAPTOP-9PH1NVLI$ via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 10:55:33 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: d1835985-7f02-4f19-b3e6-90f9f91f80df
Méthode : GET(219ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Error: (01/15/2022 11:55:36 AM) (Source: CertEnroll) (EventID: 86) (User: AUTORITE NT)
Description: Ãchec de lâinitialisation de lâinscription du certificat SCEP pour Système local via https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep :
GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Sat, 15 Jan 2022 10:55:32 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 51614edb-d9fa-4b6e-806c-f79547e165fc
Méthode : GET(266ms)
Ãtape : GetCACaps
Non trouvé (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
Erreurs système:
=============
Error: (01/15/2022 12:16:02 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-9PH1NVLI)
Description: Le serveur Microsoft.Windows.ContentDeliveryManager_10.0.22000.1_neutral_neutral_cw5n1h2txyewy!App.AppXw3qcpc7p849541dp39vvqd01bn7z9ybh.mca ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (01/15/2022 11:42:49 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur nâa pas pu se lier au transport \Device\NetBT_Tcpip_{1377D30C-4319-4CE7-B139-B04BB1B3F3E5} car un autre ordinateur du réseau porte le même nom. Le serveur nâa pas pu démarrer.
Error: (01/15/2022 11:42:45 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Ãchec de lâinstallation : lâinstallation de la mise à jour suivante a échoue avec lâerreur 0x8024200b : Intel Corporation - Extension - 22.1070.0.1.
Error: (01/15/2022 11:42:45 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT)
Description: Le module dâextensibilité WLAN sâest arrêté de façon inattendue.
Chemin dâaccès du module : C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (01/15/2022 11:42:45 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: AUTORITE NT)
Description: Le module dâextensibilité WLAN sâest arrêté de façon inattendue.
Chemin dâaccès du module : C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (01/15/2022 11:32:01 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur nâa pas pu se lier au transport \Device\NetBT_Tcpip_{1377D30C-4319-4CE7-B139-B04BB1B3F3E5} car un autre ordinateur du réseau porte le même nom. Le serveur nâa pas pu démarrer.
Error: (01/15/2022 11:31:57 AM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: )
Description: Le miniport Microsoft Wi-Fi Direct Virtual Adapter #2, {b7673a57-32d2-4a26-bf36-b723b4fe070f}, a eu lâévénement 74
Error: (01/15/2022 09:09:54 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur nâa pas pu se lier au transport \Device\NetBT_Tcpip_{1377D30C-4319-4CE7-B139-B04BB1B3F3E5} car un autre ordinateur du réseau porte le même nom. Le serveur nâa pas pu démarrer.
Windows Defender:
================
Date: 2022-01-14 21:27:29
Description:
Lâanalyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de lâanalyse : {9D4AB5F2-22F4-4130-AF2F-02F1D55E18FE}
Type de lâanalyse : Logiciel anti-programme malveillant
Paramètres de lâanalyse : Analyse rapide
Utilisateur : AUTORITE NT\Système à¨
Date: 2022-01-03 21:48:18
Description:
N/A
Date: 2021-12-28 17:40:55
Description:
N/A
Date: 2021-11-20 15:17:49
Description:
N/A
Event[0]
Date: 2022-01-15 11:49:05
Description:
Antivirus Microsoft Defender a rencontré une erreur lors du téléchargement et de la configuration de Microsoft Defender Offline.
Code dâerreur : 0x8000000a
Description de lâerreur : Les données nécessaires pour terminer cette opération ne sont pas encore disponibles. à¨
CodeIntegrity:
===============
Date: 2021-12-15 21:27:04
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system. à¨
==================== Infos Mémoire ===========================
BIOS: American Megatrends International, LLC. UM5401QA_UM5401QA.203 08/23/2021
Carte mère: ASUSTeK COMPUTER INC. UM5401QA
Processeur: AMD Ryzen 7 5800H with Radeon Graphics
Pourcentage de mémoire utilisée: 36%
Mémoire physique - RAM - totale: 15775.75 MB
Mémoire physique - RAM - disponible: 10047.74 MB
Mémoire virtuelle totale: 18207.75 MB
Mémoire virtuelle disponible: 11791.24 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:952.33 GB) (Free:759.2 GB) (Protected) NTFS
\\?\Volume{a9e72136-e415-493c-a4c9-d58bb5fe6578}\ (RECOVERY) (Fixed) (Total:1.07 GB) (Free:0.59 GB) NTFS
\\?\Volume{5b2bcb61-4806-4a77-b3ac-d48d8cb99fdb}\ (MYASUS) (Fixed) (Total:0.19 GB) (Free:0.14 GB) FAT32
\\?\Volume{e377bd41-0425-4761-b401-110379610a7e}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 08C203A8)
Partition: GPT.
==================== Fin de Addition.txt =======================