Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 27-02-2022
Exécuté par sanle (02-03-2022 16:08:39)
Exécuté depuis C:\Users\sanle\Downloads
Microsoft Windows 11 Famille Version 21H2 22000.493 (X64) (2021-11-10 17:51:36)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-4111342802-2546267125-1772061895-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4111342802-2546267125-1772061895-503 - Limited - Disabled)
Invité (S-1-5-21-4111342802-2546267125-1772061895-501 - Limited - Disabled)
sanle (S-1-5-21-4111342802-2546267125-1772061895-1001 - Administrator - Enabled) => C:\Users\sanle
WDAGUtilityAccount (S-1-5-21-4111342802-2546267125-1772061895-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09}
AV: McAfee VirusScan (Enabled - Up to date) {9D4501E6-72F6-2877-C789-89AF6F535B2C}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
FW: Pare-feu McAfee (Enabled) {A57E80C3-3899-292F-ECD6-209A91801C57}
FW: Pare-feu McAfee (Enabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1036-1033-7760-BC15014EA700}) (Version: 21.011.20039 - Adobe)
BankPerfect 8.0 (HKLM-x32\...\BankPerfect) (Version: 8.0 - Fabio Chelly)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Contrôle d’intégrité du PC Windows (HKLM\...\{0150BDB3-AFFD-47A1-ADB8-DE06658EB3B2}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Étude pour l'amélioration du produit HP ENVY 5640 series (HKLM\...\{1E0EABDF-040F-4471-BF8E-004ABAC22C5D}) (Version: 40.13.1176.1978 - HP Inc.)
HP Dropbox Plugin (HKLM-x32\...\{45E639F6-2949-4047-82DD-1FAF69DD6B62}) (Version: 40.13.54.81239 - HP)
HP ENVY 5640 series Aide (HKLM-x32\...\{50BB2714-5C7C-4040-965F-A23532545903}) (Version: 34.0.0 - Hewlett Packard)
HP Google Drive Plugin (HKLM-x32\...\{A70D2B56-7CF3-4392-B7B8-49A3DD9B9F34}) (Version: 40.13.54.81239 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
LibreOffice 7.0.0.3 (HKLM\...\{7C7F19DA-6107-4284-9263-EC5C4792C8C7}) (Version: 7.0.0.3 - The Document Foundation)
Logiciel de base du périphérique HP ENVY 5640 series (HKLM\...\{3E6E0A5B-449D-475F-9A1C-8B703021AD63}) (Version: 40.15.1230.21319 - HP Inc.)
Malwarebytes version 4.5.4.168 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.4.168 - Malwarebytes)
Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.14827.20198 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 98.0.1108.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 98.0.1108.62 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{572E990E-67FD-4014-884C-A730BFC7E1D7}) (Version: 4.65.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox (x64 fr) (HKLM\...\Mozilla Firefox 97.0.1 (x64 fr)) (Version: 97.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 78.2.1 - Mozilla)
Mozilla Thunderbird (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 91.6.1 (x86 fr)) (Version: 91.6.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14827.20198 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14827.20198 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.14827.20198 - Microsoft Corporation) Hidden
Samsung DeX (HKLM-x32\...\{43409A91-7C1A-4D28-B628-AD78F09DA3F0}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.) Hidden
Samsung DeX (HKLM-x32\...\{a306c372-6ec4-43f0-b372-b1de15b0e935}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.)
Samsung Portable SSD Software 1.0 (HKLM-x32\...\SamsungPortableSSD_1.0_is1) (Version: 1.7.4.3 - Samsung Electronics)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.46.0 - Samsung Electronics Co., Ltd.)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.20025.0_x64__0a9344xs7nr4m [2021-11-04] (Advanced Micro Devices Inc.) [Startup Task]
AMD Radeon™ Settings Lite -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.59462344778C5_10.19.10004.0_x64__0a9344xs7nr4m [2021-11-10] (Advanced Micro Devices Inc.)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.2210.4.0_x86__kgqvnymyfvs32 [2022-02-21] (king.com)
Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-03-15] (Microsoft Corporation)
Extension vidéo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-26] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_134.1.221.0_x64__v10z8vjag6ke6 [2022-01-28] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa [2021-11-06] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-11-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-11-10] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.2180.0_x64__8wekyb3d8bbwe [2022-02-25] (Microsoft Studios) [MS Ad]
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy [2022-02-20] (ASUSTeK COMPUTER INC.)
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2021-03-11] (Adobe Systems Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.28.255.0_x64__dt26b99r8h8gj [2022-01-25] (Realtek Semiconductor Corp)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-4111342802-2546267125-1772061895-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> "C:\Users\sanle\AppData\Local\Microsoft\OneDrive\21.052.0314.0001\Microsoft.Nucleus.exe" => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4111342802-2546267125-1772061895-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> "C:\Users\sanle\AppData\Local\Microsoft\OneDrive\21.052.0314.0001\Microsoft.Nucleus.exe" => Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-02-22] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-06-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-02-22] (Malwarebytes Corporation -> Malwarebytes)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2021-10-25 11:31 - 2021-10-25 11:31 - 013525504 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\avcodec-58.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 002586112 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\avformat-58.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000658944 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\avutil-56.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000135680 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\brotlicommon.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000041984 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\brotlidec.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000056320 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\bz2.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 001130496 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\cairo.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000222208 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\fontconfig.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000009728 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libcharset.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000117248 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libexpat.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000918016 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libiconv.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000164864 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libpng16.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000152576 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\swresample-3.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000611328 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\swscale-5.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000074752 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\zlib1.dll
2019-10-23 20:38 - 2019-10-23 20:38 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2019-10-23 20:38 - 2019-10-23 20:38 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2022-02-15 11:58 - 2022-02-15 11:58 - 000137168 _____ (Microsoft Windows -> Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.95.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000055808 _____ (Open Source Software community LGPL) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\pthreadVC2.dll
2021-12-03 13:17 - 2021-12-03 13:17 - 004578816 _____ (Samsung Electronics Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\NativeSamsungDexFramework.dll
2021-12-03 13:16 - 2021-12-03 13:16 - 002832384 _____ (Samsung Electronics Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\SCommon.dll
2021-12-03 13:14 - 2021-12-03 13:14 - 006556672 _____ (Samsung Electronics Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\SLocales.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000539136 _____ (The FreeType Project) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\freetype.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000110207 _____ (Un4seen Developments) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\BASS.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000019008 _____ (Un4seen Developments) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\BASSCD.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000017472 _____ (Un4seen Developments) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\BASSWMA.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-4111342802-2546267125-1772061895-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\sanle\AppData\Roaming\Mozilla\Firefox\Fond d’écran.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{8922D8B8-A67C-4D93-AB14-A2E0E80D940F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AC30DA11-9F0C-4A3E-BD2C-DF02EF1EA090}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BEB9AD43-5ED9-41FE-A957-6AF964C12F00}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{03C820E6-4CD3-4C27-9A06-07333E38C6E4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{21DF7C54-611B-4AA3-8917-495A4F229150}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A00992A1-2680-4842-98EB-E8DDE1F5B06C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{96F5ACAE-8C55-435C-8962-C82FC8BD2DBD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B369DE40-6267-4FF1-A1E0-D1D963482A84}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CA1A6012-55EA-4AC2-8ED7-7A95C0D96A39}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6DD151FD-1DCE-4E29-A76D-2286C6673346}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{762FA7EB-41C7-46D5-874E-860E61C12994}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe => Pas de fichier
FirewallRules: [{5C36A450-1DFB-4815-A6F7-6A347FC1540D}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe => Pas de fichier
FirewallRules: [{7759DEE0-2F10-41A0-8C49-563C641D3526}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3F4E83C1-F821-474E-9116-90AD5FE9AC0A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{510201EB-4691-4DCB-902B-7FE01638B1B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{730D6723-4AEA-45B5-86C9-429A724B4D29}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{DF5B12B5-B9BF-444B-B130-3F4D3FDC3317}C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe] => (Allow) C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe => Pas de fichier
FirewallRules: [UDP Query User{D2FBAF8B-C68C-432C-8A5F-ACC03366215C}C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe] => (Allow) C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe => Pas de fichier
FirewallRules: [{530F5858-AEFC-4F64-8CDD-4EA289BBDADB}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS6ED4\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{B1317768-5BD3-4BB1-B716-906AB8E5475A}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS6ED4\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{C078F455-6886-4EF7-BDB5-083949FD837B}] => (Allow) LPort=57209
FirewallRules: [{FB3AA066-7637-4EC5-92D3-9571F3820DC2}] => (Allow) LPort=57209
FirewallRules: [{CB317D6F-AE32-4220-961A-D3286822A7E7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{7589CBD2-9416-4D21-BB1D-DAE21A192B74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{51897A9D-2A9F-46D8-8A51-5C62652C2AA8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{C2CF1BE6-BF93-4B50-BEAE-23D681C7DF21}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{66B41599-39E0-4C50-8A5E-F4DA0E8F9FBB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{A522A78C-E730-459E-ACE3-AB7A94AC3BD9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{90893B18-41AB-4330-B13C-14EF035BE935}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{6B0D8B39-7355-4202-ACCA-AD99A431E91C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [TCP Query User{43BF33AA-9F8F-463B-8651-758342F76C5C}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{08701078-95C2-491F-A1D6-0C69249EE479}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6EC4A7AD-DC40-4935-A551-EC15A6A33EB2}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS01DB\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{9DD5F4C2-E362-4BAE-AD82-128EB6D50474}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS01DB\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{A72C26DA-FC5E-4B27-8FB2-779FACD8C516}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{3B86692A-D791-47FA-AB30-FEDD948F3F10}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{D4191C93-69BC-4C74-8C0E-B71DBD516DE9}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{49E3350B-4CE5-4F20-87F3-CBEA9E9D6529}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{4312531A-EBD8-4B0C-8681-B7E7605FF564}] => (Allow) C:\Program Files\HP\HP ENVY 5640 series\Bin\DeviceSetup.exe (HP Inc. -> HP Inc.)
FirewallRules: [{7F44B7D1-F521-404D-B80B-A9A525DE25ED}] => (Allow) LPort=5357
FirewallRules: [{A2925E14-ED69-4E15-83BD-DD5ED19F2407}] => (Allow) C:\Program Files\HP\HP ENVY 5640 series\Bin\HPNetworkCommunicatorCom.exe (HP Inc. -> HP Inc.)
FirewallRules: [{18C6062F-CE9F-42B4-8D1B-E219B9E89105}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{D58B8C02-D0BB-4EB7-849A-4031CCD31345}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{0405BD45-B3CF-4E5D-8F36-21D79800A430}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{3F188BAD-8FC4-46E2-8669-D321FD20C71F}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{064C303A-2B38-4AEF-87AA-0434BF2A4B4A}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{029BA347-13B8-41FE-863E-27CAEC384792}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{D7CF545C-2E48-4D4D-A999-286FC3EC6DC0}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{A9F57B2B-C1C2-4B5E-9D37-44CDF9BB86D4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{679DEE20-A3E0-40C6-8089-E7C171DEAD65}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{894AB49D-9B0A-4D97-B8FB-D495B53F19DE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F8595FFB-073F-444A-9A33-60FBC7E7DFD6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{739B0E3B-C859-49B3-9FB4-963B791120D9}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.62\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{49A5202C-2AC8-4EAA-9557-875F74B0A2E1}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_8c13dfd9a3013c06\ASUSLinkNear\AsusLinkNear.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{84952069-26D5-409D-9C1B-1F3554A6BEFC}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_8c13dfd9a3013c06\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{49501BFC-43C7-4ABB-8B1A-F539116E99D8}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_8c13dfd9a3013c06\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{D1CA4EE0-2D5B-4428-9CFD-CFF4407F12CF}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22042.700.1195.9062_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{75BC3892-7289-4768-BA0F-E11DBCE9EB79}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22042.700.1195.9062_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Points de restauration =========================
19-02-2022 00:14:52 Point de contrôle planifié
28-02-2022 16:54:09 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-4RQOL2AU.local already in use; will try LAPTOP-4RQOL2AU-2.local instead
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 LAPTOP-4RQOL2AU.local. Addr 192.168.1.12
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.12:5353 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:193B:5CCF:D0DB:BF3E
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 LAPTOP-4RQOL2AU.local. AAAA FE80:0000:0000:0000:EDB1:AF0C:C069:C5E2
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.12:5353 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:193B:5CCF:D0DB:BF3E
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:0462:126B:8496:AA1A
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.12:5353 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:193B:5CCF:D0DB:BF3E
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:EDB1:AF0C:C069:C5E2
Erreurs système:
=============
Error: (03/02/2022 11:29:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (03/02/2022 11:23:04 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 08:44:37 PM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 06:30:16 PM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 02:25:52 PM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 10:47:55 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (02/28/2022 10:53:34 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-4RQOL2AU)
Description: Le serveur {63A193FC-1252-47F7-AF50-10248D524D1F} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (02/28/2022 10:53:34 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-4RQOL2AU)
Description: Le serveur {1470775F-9CCD-442D-B5BE-F0295139B681} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Windows Defender:
================
Date: 2022-02-22 01:13:12
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {76999413-D3B6-45DD-BE10-C400DAB55859}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-22 00:32:33
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {C7B4E55A-A798-465F-AE2D-3BF54DF42039}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-22 00:15:09
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {81812AAD-1E92-4C80-8B29-2DCF0CD439DB}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-20 23:09:40
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {1F4367E1-3A38-477A-BBFD-CEC2B145A8B8}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-19 23:05:28
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {0A67BAD8-2361-4CF8-A9F9-D919227B521E}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
CodeIntegrity:
===============
Date: 2022-02-22 21:14:42
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. X712DA.303 03/31/2020
Carte mère: ASUSTeK COMPUTER INC. X712DA
Processeur: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx
Pourcentage de mémoire utilisée: 71%
Mémoire physique - RAM - totale: 6091.61 MB
Mémoire physique - RAM - disponible: 1760.69 MB
Mémoire virtuelle totale: 10187.61 MB
Mémoire virtuelle disponible: 3281.89 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:475.84 GB) (Free:369.57 GB) NTFS
\\?\Volume{47bc6e05-91e8-4e28-aded-9540c27c0089}\ (RECOVERY) (Fixed) (Total:0.83 GB) (Free:0.3 GB) NTFS
\\?\Volume{30d9ac6e-f1ea-4f21-952b-05be6f03c260}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 293ED26F)
Partition: GPT.
==================== Fin de Addition.txt =======================
Exécuté par sanle (02-03-2022 16:08:39)
Exécuté depuis C:\Users\sanle\Downloads
Microsoft Windows 11 Famille Version 21H2 22000.493 (X64) (2021-11-10 17:51:36)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-4111342802-2546267125-1772061895-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4111342802-2546267125-1772061895-503 - Limited - Disabled)
Invité (S-1-5-21-4111342802-2546267125-1772061895-501 - Limited - Disabled)
sanle (S-1-5-21-4111342802-2546267125-1772061895-1001 - Administrator - Enabled) => C:\Users\sanle
WDAGUtilityAccount (S-1-5-21-4111342802-2546267125-1772061895-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Enabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09}
AV: McAfee VirusScan (Enabled - Up to date) {9D4501E6-72F6-2877-C789-89AF6F535B2C}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
FW: Pare-feu McAfee (Enabled) {A57E80C3-3899-292F-ECD6-209A91801C57}
FW: Pare-feu McAfee (Enabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1036-1033-7760-BC15014EA700}) (Version: 21.011.20039 - Adobe)
BankPerfect 8.0 (HKLM-x32\...\BankPerfect) (Version: 8.0 - Fabio Chelly)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Contrôle d’intégrité du PC Windows (HKLM\...\{0150BDB3-AFFD-47A1-ADB8-DE06658EB3B2}) (Version: 3.2.2110.14001 - Microsoft Corporation)
Étude pour l'amélioration du produit HP ENVY 5640 series (HKLM\...\{1E0EABDF-040F-4471-BF8E-004ABAC22C5D}) (Version: 40.13.1176.1978 - HP Inc.)
HP Dropbox Plugin (HKLM-x32\...\{45E639F6-2949-4047-82DD-1FAF69DD6B62}) (Version: 40.13.54.81239 - HP)
HP ENVY 5640 series Aide (HKLM-x32\...\{50BB2714-5C7C-4040-965F-A23532545903}) (Version: 34.0.0 - Hewlett Packard)
HP Google Drive Plugin (HKLM-x32\...\{A70D2B56-7CF3-4392-B7B8-49A3DD9B9F34}) (Version: 40.13.54.81239 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.9572 - HP)
LibreOffice 7.0.0.3 (HKLM\...\{7C7F19DA-6107-4284-9263-EC5C4792C8C7}) (Version: 7.0.0.3 - The Document Foundation)
Logiciel de base du périphérique HP ENVY 5640 series (HKLM\...\{3E6E0A5B-449D-475F-9A1C-8B703021AD63}) (Version: 40.15.1230.21319 - HP Inc.)
Malwarebytes version 4.5.4.168 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.4.168 - Malwarebytes)
Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.14827.20198 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 98.0.1108.62 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 98.0.1108.62 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{572E990E-67FD-4014-884C-A730BFC7E1D7}) (Version: 4.65.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Mozilla Firefox (x64 fr) (HKLM\...\Mozilla Firefox 97.0.1 (x64 fr)) (Version: 97.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 78.2.1 - Mozilla)
Mozilla Thunderbird (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 91.6.1 (x86 fr)) (Version: 91.6.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14827.20198 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14827.20198 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.14827.20198 - Microsoft Corporation) Hidden
Samsung DeX (HKLM-x32\...\{43409A91-7C1A-4D28-B628-AD78F09DA3F0}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.) Hidden
Samsung DeX (HKLM-x32\...\{a306c372-6ec4-43f0-b372-b1de15b0e935}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.)
Samsung Portable SSD Software 1.0 (HKLM-x32\...\SamsungPortableSSD_1.0_is1) (Version: 1.7.4.3 - Samsung Electronics)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.46.0 - Samsung Electronics Co., Ltd.)
Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.21.20025.0_x64__0a9344xs7nr4m [2021-11-04] (Advanced Micro Devices Inc.) [Startup Task]
AMD Radeon™ Settings Lite -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.59462344778C5_10.19.10004.0_x64__0a9344xs7nr4m [2021-11-10] (Advanced Micro Devices Inc.)
Candy Crush Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSaga_1.2210.4.0_x86__kgqvnymyfvs32 [2022-02-21] (king.com)
Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-03-15] (Microsoft Corporation)
Extension vidéo MPEG-2 -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.42152.0_x64__8wekyb3d8bbwe [2021-08-26] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_134.1.221.0_x64__v10z8vjag6ke6 [2022-01-28] (HP Inc.)
iTunes -> C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa [2021-11-06] (Apple Inc.) [Startup Task]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-11-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-11-10] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.2180.0_x64__8wekyb3d8bbwe [2022-02-25] (Microsoft Studios) [MS Ad]
MyASUS -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy [2022-02-20] (ASUSTeK COMPUTER INC.)
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2021-03-11] (Adobe Systems Incorporated)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.28.255.0_x64__dt26b99r8h8gj [2022-01-25] (Realtek Semiconductor Corp)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-4111342802-2546267125-1772061895-1001_Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}\localserver32 -> "C:\Users\sanle\AppData\Local\Microsoft\OneDrive\21.052.0314.0001\Microsoft.Nucleus.exe" => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4111342802-2546267125-1772061895-1001_Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}\localserver32 -> "C:\Users\sanle\AppData\Local\Microsoft\OneDrive\21.052.0314.0001\Microsoft.Nucleus.exe" => Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-02-22] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-06-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-02-22] (Malwarebytes Corporation -> Malwarebytes)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
2021-10-25 11:31 - 2021-10-25 11:31 - 013525504 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\avcodec-58.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 002586112 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\avformat-58.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000658944 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\avutil-56.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000135680 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\brotlicommon.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000041984 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\brotlidec.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000056320 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\bz2.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 001130496 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\cairo.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000222208 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\fontconfig.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000009728 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libcharset.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000117248 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libexpat.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000918016 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libiconv.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000164864 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\libpng16.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000152576 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\swresample-3.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000611328 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\swscale-5.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000074752 _____ () [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\zlib1.dll
2019-10-23 20:38 - 2019-10-23 20:38 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2019-10-23 20:38 - 2019-10-23 20:38 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
2022-02-15 11:58 - 2022-02-15 11:58 - 000137168 _____ (Microsoft Windows -> Microsoft Corporation) [Fichier non signé] C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_421.20070.95.0_x64__cw5n1h2txyewy\Dashboard\WebView2Loader.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000055808 _____ (Open Source Software community LGPL) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\pthreadVC2.dll
2021-12-03 13:17 - 2021-12-03 13:17 - 004578816 _____ (Samsung Electronics Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\NativeSamsungDexFramework.dll
2021-12-03 13:16 - 2021-12-03 13:16 - 002832384 _____ (Samsung Electronics Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\SCommon.dll
2021-12-03 13:14 - 2021-12-03 13:14 - 006556672 _____ (Samsung Electronics Co., Ltd.) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\SLocales.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000539136 _____ (The FreeType Project) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\freetype.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000110207 _____ (Un4seen Developments) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\BASS.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000019008 _____ (Un4seen Developments) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\BASSCD.dll
2021-10-25 11:31 - 2021-10-25 11:31 - 000017472 _____ (Un4seen Developments) [Fichier non signé] C:\Program Files (x86)\Samsung\Samsung DeX\BASSWMA.dll
==================== Alternate Data Streams (Avec liste blanche) ========
==================== Mode sans échec (Avec liste blanche) ==================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-02-01] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2019-03-19 05:49 - 2019-03-19 05:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-4111342802-2546267125-1772061895-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\sanle\AppData\Roaming\Mozilla\Firefox\Fond d’écran.bmp
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{8922D8B8-A67C-4D93-AB14-A2E0E80D940F}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AC30DA11-9F0C-4A3E-BD2C-DF02EF1EA090}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{BEB9AD43-5ED9-41FE-A957-6AF964C12F00}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{03C820E6-4CD3-4C27-9A06-07333E38C6E4}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{21DF7C54-611B-4AA3-8917-495A4F229150}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A00992A1-2680-4842-98EB-E8DDE1F5B06C}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{96F5ACAE-8C55-435C-8962-C82FC8BD2DBD}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{B369DE40-6267-4FF1-A1E0-D1D963482A84}] => (Allow) C:\Program Files\WindowsApps\AppleInc.iTunes_12122.2.54019.0_x64__nzyj5cx40ttqa\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CA1A6012-55EA-4AC2-8ED7-7A95C0D96A39}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6DD151FD-1DCE-4E29-A76D-2286C6673346}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{762FA7EB-41C7-46D5-874E-860E61C12994}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe => Pas de fichier
FirewallRules: [{5C36A450-1DFB-4815-A6F7-6A347FC1540D}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe => Pas de fichier
FirewallRules: [{7759DEE0-2F10-41A0-8C49-563C641D3526}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3F4E83C1-F821-474E-9116-90AD5FE9AC0A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{510201EB-4691-4DCB-902B-7FE01638B1B5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{730D6723-4AEA-45B5-86C9-429A724B4D29}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{DF5B12B5-B9BF-444B-B130-3F4D3FDC3317}C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe] => (Allow) C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe => Pas de fichier
FirewallRules: [UDP Query User{D2FBAF8B-C68C-432C-8A5F-ACC03366215C}C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe] => (Allow) C:\program files (x86)\bsd concept\heredis 2020\heredis20.exe => Pas de fichier
FirewallRules: [{530F5858-AEFC-4F64-8CDD-4EA289BBDADB}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS6ED4\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{B1317768-5BD3-4BB1-B716-906AB8E5475A}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS6ED4\HPDiagnosticCoreUI.exe => Pas de fichier
FirewallRules: [{C078F455-6886-4EF7-BDB5-083949FD837B}] => (Allow) LPort=57209
FirewallRules: [{FB3AA066-7637-4EC5-92D3-9571F3820DC2}] => (Allow) LPort=57209
FirewallRules: [{CB317D6F-AE32-4220-961A-D3286822A7E7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{7589CBD2-9416-4D21-BB1D-DAE21A192B74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{51897A9D-2A9F-46D8-8A51-5C62652C2AA8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{C2CF1BE6-BF93-4B50-BEAE-23D681C7DF21}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{66B41599-39E0-4C50-8A5E-F4DA0E8F9FBB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{A522A78C-E730-459E-ACE3-AB7A94AC3BD9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{90893B18-41AB-4330-B13C-14EF035BE935}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [{6B0D8B39-7355-4202-ACCA-AD99A431E91C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.142.622.0_x86__zpdnekdrzrea0\Spotify.exe => Pas de fichier
FirewallRules: [TCP Query User{43BF33AA-9F8F-463B-8651-758342F76C5C}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{08701078-95C2-491F-A1D6-0C69249EE479}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{6EC4A7AD-DC40-4935-A551-EC15A6A33EB2}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS01DB\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{9DD5F4C2-E362-4BAE-AD82-128EB6D50474}] => (Allow) C:\Users\sanle\AppData\Local\Temp\7zS01DB\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{A72C26DA-FC5E-4B27-8FB2-779FACD8C516}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{3B86692A-D791-47FA-AB30-FEDD948F3F10}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{D4191C93-69BC-4C74-8C0E-B71DBD516DE9}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{49E3350B-4CE5-4F20-87F3-CBEA9E9D6529}] => (Allow) C:\HP\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{4312531A-EBD8-4B0C-8681-B7E7605FF564}] => (Allow) C:\Program Files\HP\HP ENVY 5640 series\Bin\DeviceSetup.exe (HP Inc. -> HP Inc.)
FirewallRules: [{7F44B7D1-F521-404D-B80B-A9A525DE25ED}] => (Allow) LPort=5357
FirewallRules: [{A2925E14-ED69-4E15-83BD-DD5ED19F2407}] => (Allow) C:\Program Files\HP\HP ENVY 5640 series\Bin\HPNetworkCommunicatorCom.exe (HP Inc. -> HP Inc.)
FirewallRules: [{18C6062F-CE9F-42B4-8D1B-E219B9E89105}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{D58B8C02-D0BB-4EB7-849A-4031CCD31345}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{0405BD45-B3CF-4E5D-8F36-21D79800A430}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{3F188BAD-8FC4-46E2-8669-D321FD20C71F}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.0.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé]
FirewallRules: [{064C303A-2B38-4AEF-87AA-0434BF2A4B4A}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{029BA347-13B8-41FE-863E-27CAEC384792}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{D7CF545C-2E48-4D4D-A999-286FC3EC6DC0}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{A9F57B2B-C1C2-4B5E-9D37-44CDF9BB86D4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{679DEE20-A3E0-40C6-8089-E7C171DEAD65}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{894AB49D-9B0A-4D97-B8FB-D495B53F19DE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F8595FFB-073F-444A-9A33-60FBC7E7DFD6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{739B0E3B-C859-49B3-9FB4-963B791120D9}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\98.0.1108.62\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{49A5202C-2AC8-4EAA-9557-875F74B0A2E1}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_8c13dfd9a3013c06\ASUSLinkNear\AsusLinkNear.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{84952069-26D5-409D-9C1B-1F3554A6BEFC}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_8c13dfd9a3013c06\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{49501BFC-43C7-4ABB-8B1A-F539116E99D8}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci2.inf_amd64_8c13dfd9a3013c06\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
FirewallRules: [{D1CA4EE0-2D5B-4428-9CFD-CFF4407F12CF}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22042.700.1195.9062_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{75BC3892-7289-4768-BA0F-E11DBCE9EB79}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22042.700.1195.9062_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Points de restauration =========================
19-02-2022 00:14:52 Point de contrôle planifié
28-02-2022 16:54:09 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-4RQOL2AU.local already in use; will try LAPTOP-4RQOL2AU-2.local instead
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 LAPTOP-4RQOL2AU.local. Addr 192.168.1.12
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.12:5353 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:193B:5CCF:D0DB:BF3E
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 LAPTOP-4RQOL2AU.local. AAAA FE80:0000:0000:0000:EDB1:AF0C:C069:C5E2
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.12:5353 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:193B:5CCF:D0DB:BF3E
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:0462:126B:8496:AA1A
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.12:5353 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:193B:5CCF:D0DB:BF3E
Error: (03/01/2022 03:27:37 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 LAPTOP-4RQOL2AU.local. AAAA 2A01:CB0D:01DB:BB00:EDB1:AF0C:C069:C5E2
Erreurs système:
=============
Error: (03/02/2022 11:29:40 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (03/02/2022 11:23:04 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 08:44:37 PM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 06:30:16 PM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 02:25:52 PM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (03/01/2022 10:47:55 AM) (Source: Server) (EventID: 2505) (User: )
Description: Le serveur n’a pas pu se lier au transport \Device\NetBT_Tcpip_{7CC5C3A8-5C5E-4B1E-A808-2711E5015C7B} car un autre ordinateur du réseau porte le même nom. Le serveur n’a pas pu démarrer.
Error: (02/28/2022 10:53:34 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-4RQOL2AU)
Description: Le serveur {63A193FC-1252-47F7-AF50-10248D524D1F} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (02/28/2022 10:53:34 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-4RQOL2AU)
Description: Le serveur {1470775F-9CCD-442D-B5BE-F0295139B681} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Windows Defender:
================
Date: 2022-02-22 01:13:12
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {76999413-D3B6-45DD-BE10-C400DAB55859}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-22 00:32:33
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {C7B4E55A-A798-465F-AE2D-3BF54DF42039}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-22 00:15:09
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {81812AAD-1E92-4C80-8B29-2DCF0CD439DB}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-20 23:09:40
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {1F4367E1-3A38-477A-BBFD-CEC2B145A8B8}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
Date: 2022-02-19 23:05:28
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {0A67BAD8-2361-4CF8-A9F9-D919227B521E}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système
CodeIntegrity:
===============
Date: 2022-02-22 21:14:42
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
==================== Infos Mémoire ===========================
BIOS: American Megatrends Inc. X712DA.303 03/31/2020
Carte mère: ASUSTeK COMPUTER INC. X712DA
Processeur: AMD Ryzen 5 3500U with Radeon Vega Mobile Gfx
Pourcentage de mémoire utilisée: 71%
Mémoire physique - RAM - totale: 6091.61 MB
Mémoire physique - RAM - disponible: 1760.69 MB
Mémoire virtuelle totale: 10187.61 MB
Mémoire virtuelle disponible: 3281.89 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:475.84 GB) (Free:369.57 GB) NTFS
\\?\Volume{47bc6e05-91e8-4e28-aded-9540c27c0089}\ (RECOVERY) (Fixed) (Total:0.83 GB) (Free:0.3 GB) NTFS
\\?\Volume{30d9ac6e-f1ea-4f21-952b-05be6f03c260}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 293ED26F)
Partition: GPT.
==================== Fin de Addition.txt =======================