Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 29-05-2023
Exécuté par Lidiane (03-06-2023 20:17:14)
Exécuté depuis C:\Users\Lidiane\Desktop
Microsoft Windows 10 Famille Version 22H2 19045.2965 (X64) (2022-01-24 18:18:22)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================


(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

Administrateur (S-1-5-21-2490073962-3199906421-323260014-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2490073962-3199906421-323260014-503 - Limited - Disabled)
Invité (S-1-5-21-2490073962-3199906421-323260014-501 - Limited - Disabled)
Lidiane (S-1-5-21-2490073962-3199906421-323260014-1001 - Administrator - Enabled) => C:\Users\Lidiane
WDAGUtilityAccount (S-1-5-21-2490073962-3199906421-323260014-504 - Limited - Disabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Malwarebytes (Disabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

BlueStacks 5 (HKLM\...\BlueStacks_nxt) (Version: 5.7.110.1002 - BlueStack Systems, Inc.)
BlueStacks X (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\BlueStacks X) (Version: 0.15.3.4 - BlueStack Systems, Inc.)
Contrôle d’intégrité du PC Windows (HKLM\...\{90C6971F-ABF1-4FBF-BD98-24F14C5F5AB4}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Discord (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\Discord) (Version: 1.0.9002 - Discord Inc.)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 12.193.0.5450 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{d784aa79-3dac-45df-b52b-70303fb90b62}) (Version: 12.193.0.5450 - Electronic Arts)
Epic Games Launcher (HKLM-x32\...\{25A199C2-78B4-4D70-AE0D-71BD2E70FAF8}) (Version: 1.3.23.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{758842D2-1538-4008-A8E3-66F65A061C52}) (Version: 2.0.33.0 - Epic Games, Inc.)
Explor@ Park (HKLM-x32\...\VTechDownloadManager) (Version: - VTech)
Genshin Impact (HKLM\...\Genshin Impact) (Version: 2.26.0.0 - miHoYo Co.,Ltd)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 114.0.5735.90 - Google LLC)
Honkai Impact 3rd (HKLM\...\Honkai Impact 3rd) (Version: 2.23.1.0 - miHoYo Co.,Ltd)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Les Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.95.207.1030 - Electronic Arts Inc.)
Malwarebytes version 4.5.29.268 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.29.268 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 113.0.1774.57 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 113.0.1774.57 - Microsoft Corporation)
Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\OneDriveSetup.exe) (Version: 23.101.0514.0001 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{BB052C53-34CB-42DE-AF41-66FDFCEEC868}) (Version: 3.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29914 (HKLM-x32\...\{1b5476d9-ab8e-4b0d-b004-059a1bd5568b}) (Version: 14.28.29914.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30708 (HKLM-x32\...\{ee198d9f-cfe1-4f8a-bf5f-7b1be355b63d}) (Version: 14.30.30708.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29914 (HKLM-x32\...\{BD8C6100-7C7D-48DD-93BA-69F6828213FE}) (Version: 14.28.29914 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29914 (HKLM-x32\...\{42365A3A-622A-4EED-A727-FE192A794AFD}) (Version: 14.28.29914 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.30.30708 (HKLM\...\{12A2980B-E47B-491B-92F5-0BC703841ED4}) (Version: 14.30.30708 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.30.30708 (HKLM\...\{AE043016-3897-41D4-870B-1DAEE62CF152}) (Version: 14.30.30708 - Microsoft Corporation) Hidden
Netmarble Launcher 0.2.15 (HKLM\...\ebab0fa0-3e67-5055-898a-0b6ee5815a99) (Version: 0.2.15 - Netmarble corporation)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
NVIDIA Pilote graphique 471.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 471.41 - NVIDIA Corporation)
Opera GX Stable 98.0.4759.82 (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\Opera GX 98.0.4759.82) (Version: 98.0.4759.82 - Opera Software)
osu! (HKLM-x32\...\{1b3b2a51-33b5-4a09-935b-8bdf69fd0048}) (Version: latest - ppy Pty Ltd)
Progress Telerik Fiddler Classic (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\Fiddler2) (Version: 5.0.20211.51073 - Progress Software Corporation)
Roblox Player for Lidiane (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\roblox-player) (Version: - Roblox Corporation)
Star Rail (HKLM\...\Star Rail) (Version: 2.24.2.0 - COGNOSPHERE PTE. LTD.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamlabs Desktop 1.7.0 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 1.7.0 - General Workings, Inc.)
Tower of Fantasy (HKLM-x32\...\Tower of Fantasy) (Version: 1.0.0 - Perfect World)
Tower of Fantasy (HKU\S-1-5-21-2490073962-3199906421-323260014-1001\...\tof_launcher) (Version: - Hotta Studio)
UE4 Prerequisites (x64) (HKLM-x32\...\{0d995f46-317b-4b5f-bf3e-9f98bae9d339}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden
WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH)
Wondershare Filmora X(Build 10.5.2.4) (HKLM\...\Wondershare Filmora X_is1) (Version: - Wondershare Software)
Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare)

Packages:
=========
Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-23] (Microsoft Corporation)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.52.5.0_x64__6rarf9sa4v8jt [2023-05-24] (Disney)
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.2.4.0_x64__8wekyb3d8bbwe [2023-04-09] (Microsoft Studios)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj [2023-03-11] (NVIDIA Corp.)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-03-21] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0 [2023-05-28] (Spotify AB) [Startup Task]

==================== Personnalisé CLSID (Avec liste blanche): ==============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-05-29] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmd.inf_amd64_cc1a5d7d67a7b51d\nvshext.dll [2021-07-21] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-05-29] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-11-18] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2022-11-28] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2022-11-28] (Electronic Arts -> On2.com)

==================== Raccourcis & WMI ========================

==================== Modules chargés (Avec liste blanche) =============

2022-01-30 16:30 - 2016-07-21 11:54 - 000137728 _____ () [Fichier non signé] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2022-01-30 16:30 - 2017-09-12 11:34 - 001506304 _____ () [Fichier non signé] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2021-11-19 11:02 - 2014-05-06 07:38 - 000036352 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\bearer\qgenericbearer.dll
2021-11-19 11:02 - 2014-05-06 07:38 - 000038912 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\bearer\qnativewifibearer.dll
2021-11-19 11:02 - 2014-05-06 07:38 - 000021504 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qgif.dll
2021-11-19 11:02 - 2014-05-06 07:38 - 000020992 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qico.dll
2021-11-19 11:02 - 2014-05-06 07:38 - 000204800 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qjpeg.dll
2021-11-19 11:02 - 2014-05-06 12:44 - 000218112 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qmng.dll
2021-11-19 11:02 - 2014-05-06 07:58 - 000015872 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qsvg.dll
2021-11-19 11:02 - 2014-05-06 12:44 - 000015360 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qtga.dll
2021-11-19 11:02 - 2014-05-06 12:44 - 000307712 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qtiff.dll
2021-11-19 11:02 - 2014-05-06 12:44 - 000014848 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qwbmp.dll
2021-11-19 11:02 - 2014-05-06 07:39 - 000861184 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\platforms\qwindows.dll
2021-11-19 11:02 - 2014-05-06 08:31 - 000015872 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\plugins\sensors\qtsensors_dummy.dll
2021-11-19 11:02 - 2014-04-22 04:14 - 000065536 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\QHttpServer.dll
2021-11-19 11:02 - 2015-12-14 08:05 - 000120832 _____ () [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll
2021-11-19 11:02 - 2014-05-06 05:59 - 004048896 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Core.dll
2021-11-19 11:02 - 2014-05-06 06:02 - 004113408 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Gui.dll
2021-11-19 11:02 - 2014-05-06 08:21 - 000545792 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Multimedia.dll
2021-11-19 11:02 - 2014-05-06 08:22 - 000081920 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5MultimediaWidgets.dll
2021-11-19 11:02 - 2019-03-12 09:53 - 000985088 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Network.dll
2021-11-19 11:02 - 2014-05-06 07:37 - 000285696 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5OpenGL.dll
2021-11-19 11:02 - 2014-05-06 08:30 - 000144896 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Positioning.dll
2021-11-19 11:02 - 2014-05-06 07:38 - 000231936 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5PrintSupport.dll
2021-11-19 11:02 - 2014-05-06 08:08 - 002441216 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Qml.dll
2021-11-19 11:02 - 2014-05-06 08:12 - 002121216 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Quick.dll
2021-11-19 11:02 - 2014-05-06 08:31 - 000143872 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Sensors.dll
2021-11-19 11:02 - 2014-05-06 06:00 - 000151040 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Sql.dll
2021-11-19 11:02 - 2014-05-06 07:58 - 000199680 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Svg.dll
2021-11-19 11:02 - 2014-05-06 12:30 - 016913408 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5WebKit.dll
2021-11-19 11:02 - 2014-05-06 12:31 - 000192000 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5WebKitWidgets.dll
2021-11-19 11:02 - 2014-05-06 07:37 - 004359680 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Widgets.dll
2021-11-19 11:02 - 2014-05-06 06:00 - 000159232 _____ (Digia Plc and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\Qt5Xml.dll
2021-11-19 11:02 - 2013-05-23 22:32 - 022324736 _____ (The ICU Project) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\icudt51.dll
2021-11-19 11:02 - 2013-05-23 22:26 - 001392640 _____ (The ICU Project) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\icuin51.dll
2021-11-19 11:02 - 2013-05-23 22:23 - 001056256 _____ (The ICU Project) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\icuuc51.dll
2021-11-19 11:02 - 2019-11-13 05:53 - 001164288 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\LIBEAY32.dll
2021-11-19 11:02 - 2019-11-13 05:53 - 000254976 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\VTech\DownloadManager\System\ssleay32.dll
2023-05-26 17:55 - 2023-05-26 17:55 - 002849280 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Fichier non signé] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll
2023-05-26 17:55 - 2023-05-26 17:55 - 000685056 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Fichier non signé] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll
2023-05-26 17:55 - 2023-05-26 17:55 - 000046592 _____ (The Qt Company Ltd.) [Fichier non signé] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\bearer\qgenericbearer.dll
2023-05-26 17:55 - 2023-05-26 17:55 - 006270976 _____ (The Qt Company Ltd.) [Fichier non signé] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Core.dll
2023-05-26 17:55 - 2023-05-26 17:55 - 001389568 _____ (The Qt Company Ltd.) [Fichier non signé] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Network.dll
2023-05-26 17:55 - 2023-05-26 17:55 - 000157184 _____ (The Qt Company Ltd.) [Fichier non signé] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5WebSockets.dll
2022-01-30 16:30 - 2017-09-12 11:36 - 000708608 _____ (Wondershare) [Fichier non signé] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Avec liste blanche) ========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\ProgramData:err [1250]
AlternateDataStreams: C:\Users\All Users:err [1250]
AlternateDataStreams: C:\ProgramData\Application Data:err [1250]
AlternateDataStreams: C:\Users\Lidiane\Application Data:955d2a2f697b1c9b40c63a2dd2b7d393 [394]
AlternateDataStreams: C:\Users\Lidiane\Application Data:a4a7135d5fc196220c4b1dfe38793a5a [394]
AlternateDataStreams: C:\Users\Lidiane\Application Data:dc2fbb8b303cabdec52ed28927f75974 [394]
AlternateDataStreams: C:\Users\Lidiane\AppData\Roaming:955d2a2f697b1c9b40c63a2dd2b7d393 [394]
AlternateDataStreams: C:\Users\Lidiane\AppData\Roaming:a4a7135d5fc196220c4b1dfe38793a5a [394]
AlternateDataStreams: C:\Users\Lidiane\AppData\Roaming:dc2fbb8b303cabdec52ed28927f75974 [394]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [10432]

==================== Mode sans échec (Avec liste blanche) ==================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Avec liste blanche) =================

==================== Internet Explorer (Avec liste blanche) ==========


==================== Hosts contenu: =========================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Autres zones ===========================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\Lidiane\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-2490073962-3199906421-323260014-1001\Control Panel\Desktop\\Wallpaper -> c:\users\lidiane\pictures\bh3rd\2013-07-23_20.32.29.jpg
DNS Servers: 192.168.0.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

==================== RèglesPare-feu (Avec liste blanche) ================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [{FD3AECC1-AD79-4C68-9A72-A4DF97D9AA49}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{243946E6-F9B9-4742-979F-0EFC8D27422B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{DF675FEE-2EE7-4531-9F3E-B03035B13396}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{8340423E-E8DA-4CEF-BFC7-1185B731B8C2}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2B2DA10F-F963-47BC-A6A0-7E2472952D6B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [{9675CFBA-13B3-475C-B53F-1A5B9BDAF145}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [TCP Query User{7336C4E6-E5B3-45A9-9E15-6DF854FBA68B}C:\users\lidiane\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\lidiane\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{BB2C9329-6731-44DD-8344-A3FFE1C9C62C}C:\users\lidiane\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\lidiane\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{EB4634FD-EA38-4E7B-80D2-C465FF1586DC}C:\users\lidiane\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\lidiane\appdata\local\discord\app-1.0.9004\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{381C180E-4D07-4268-A5F1-71E41AB2D5F0}C:\users\lidiane\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\lidiane\appdata\local\discord\app-1.0.9004\discord.exe => Pas de fichier
FirewallRules: [TCP Query User{BC664EC2-84D4-4FE0-943F-BE0F4FB13C8E}C:\users\lidiane\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\lidiane\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{9C85BE9F-7F06-443A-BA95-37A1AC57D7D3}C:\users\lidiane\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\lidiane\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{2B76A8CD-C131-450C-A330-36E11361E3C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{98583F5D-FFC6-4146-A653-AAB5DE95E696}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Fichier non signé]
FirewallRules: [{EC0E7324-D031-4FB1-887A-A9983DF62378}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\Goose Goose Duck.exe (Gaggle Studios, Inc. -> Unity Technologies ApS)
FirewallRules: [{7C9F1046-9567-4111-99BE-374F0CCBFCEC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\Goose Goose Duck.exe (Gaggle Studios, Inc. -> Unity Technologies ApS)
FirewallRules: [{0394186A-7EB1-451D-A487-3E3B0B0D7586}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RISK Global Domination\RISK.exe () [Fichier non signé]
FirewallRules: [{B3F71C2E-20B4-4D3A-8BB4-CF10A3840986}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\RISK Global Domination\RISK.exe () [Fichier non signé]
FirewallRules: [{64EFC099-EB13-45F0-A529-81ADEE7A46CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VTuber Maker\VTuber Maker.exe () [Fichier non signé]
FirewallRules: [{CF17AE2A-B128-4CFA-8DA3-097BB40B1BA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VTuber Maker\VTuber Maker.exe () [Fichier non signé]
FirewallRules: [{33D36F83-CA46-4832-9555-6A3A66E31210}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VTuber Editor\VTuber Editor.exe () [Fichier non signé]
FirewallRules: [{8A3E8C28-BE85-4DA3-BED8-58F67E0A35A2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VTuber Editor\VTuber Editor.exe () [Fichier non signé]
FirewallRules: [{BFD8EF64-FBCE-4F45-A2E3-334D717259FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VRoid Studio\VRoidStudio.exe () [Fichier non signé]
FirewallRules: [{7D4CF9BB-9BF7-48E8-B40B-8D099C27470C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\VRoid Studio\VRoidStudio.exe () [Fichier non signé]
FirewallRules: [{86AFF5FE-1571-4411-AE56-4594A06911C1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Realm Royale\Binaries\Win64\RealmEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{E482CD36-E6EE-4CFF-B7C5-3AADF774CA39}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Realm Royale\Binaries\Win64\RealmEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{6A42DE63-3C46-4512-874C-B5CE08A94CFC}C:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe (Hirez Studios, Inc.) [Fichier non signé]
FirewallRules: [UDP Query User{1A9C6CDA-43D2-4E56-881B-1D897CCF8A44}C:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\realm royale\binaries\win64\realm.exe (Hirez Studios, Inc.) [Fichier non signé]
FirewallRules: [{9D08538F-78AE-4E20-AA8C-722BA4A7F2F6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Eternal Return\EternalReturn.exe (Nimble Neuron Corp. -> )
FirewallRules: [{A6D2D1BE-A70F-416E-995D-689763826247}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Eternal Return\EternalReturn.exe (Nimble Neuron Corp. -> )
FirewallRules: [{A4CD9DDA-194D-4339-A462-D70A5471623C}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpMobileGame.exe => Pas de fichier
FirewallRules: [{6A422EEF-C139-470A-85BE-3D2A030B45BC}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpMobileGame.exe => Pas de fichier
FirewallRules: [{F44C633B-6C38-4989-A7FA-F0109F15DF78}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpUpdate.exe => Pas de fichier
FirewallRules: [{4A5B2DFB-7AC2-449E-8A3F-1619BCF8206A}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpUpdate.exe => Pas de fichier
FirewallRules: [{8F5E1E64-4700-49CA-AA9C-2DD2D6DDA0F8}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpBrowser.exe => Pas de fichier
FirewallRules: [{7B1F8A14-203A-4DF9-9A9D-562AA6086178}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpBrowser.exe => Pas de fichier
FirewallRules: [{5F0D36D7-364A-4089-9EF4-9CC86742FD52}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpWebBooster.exe => Pas de fichier
FirewallRules: [{5F77D199-BFD8-402F-86E5-FB356BB08F66}] => (Allow) C:\Users\Lidiane\AppData\Local\Temp\scoped_dir11120_1536348969\Tower of Fantasy\WmGpLaunch\WmgpWebBooster.exe => Pas de fichier
FirewallRules: [{C60B0C5A-02C7-48F2-9341-7B65510ABB14}] => (Allow) C:\Users\Lidiane\AppData\Local\Programs\Opera\87.0.4390.25\opera.exe => Pas de fichier
FirewallRules: [{C5BEB804-3A5D-45FF-931F-77B2E25A14C0}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Bluestack Systems, Inc -> Bluestack Systems, Inc.)
FirewallRules: [{9A6546BE-86F0-4696-BEB8-E363C946D72B}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe (Bluestack Systems, Inc -> Bluestack Systems, Inc.)
FirewallRules: [{D31F2E0D-4E9F-4959-8F58-4EB72156E971}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Bluestack Systems, Inc -> BlueStack Systems)
FirewallRules: [{034A24A7-A00E-44E7-A557-FAAD334C16E6}] => (Allow) C:\Users\Lidiane\AppData\Local\Programs\Fiddler\Fiddler.exe (Progress Software Corporation -> Progress Software Corporation)
FirewallRules: [TCP Query User{04878976-42BB-4FB1-BBE8-91F729051CF2}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{04ED87FA-5FC4-4BE5-B175-ED68C8E16169}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{0F34E6F6-715E-44BC-831A-C8E277ED952A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{FDC5623D-2651-4495-90F0-8323C02AB368}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{4BF9AADA-05EF-403F-86CD-E5B7910C2285}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{30ABA6B1-DCC4-4426-B701-60A0BE2F6D6D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties LLC -> Epic Games, Inc.)
FirewallRules: [{8745B126-2258-448B-BA71-C8F1AA1488BD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Poppy Playtime\PlaytimeLauncher\PlaytimeLauncher.exe () [Fichier non signé]
FirewallRules: [{29D4F1B3-8D32-403C-AFF1-A5A82FE1E64D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Poppy Playtime\PlaytimeLauncher\PlaytimeLauncher.exe () [Fichier non signé]
FirewallRules: [{E0314ED1-5CBE-4D81-A5B3-CAF016FD297C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Muck\Muck.exe () [Fichier non signé]
FirewallRules: [{C34AF329-4B01-42C0-BD47-627141DC493C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Muck\Muck.exe () [Fichier non signé]
FirewallRules: [TCP Query User{17ACD1BF-5FF1-4036-B4A1-640F77D515B6}C:\program files\genshin impact\genshin impact game\genshinimpact_data\plugins\zfgamebrowser.exe] => (Allow) C:\program files\genshin impact\genshin impact game\genshinimpact_data\plugins\zfgamebrowser.exe (COGNOSPHERE PTE. LTD. -> )
FirewallRules: [UDP Query User{C6C9D48B-C912-488C-A494-12DA5FF1BDC1}C:\program files\genshin impact\genshin impact game\genshinimpact_data\plugins\zfgamebrowser.exe] => (Allow) C:\program files\genshin impact\genshin impact game\genshinimpact_data\plugins\zfgamebrowser.exe (COGNOSPHERE PTE. LTD. -> )
FirewallRules: [{68AFB4F6-8EDD-4737-A516-BBFF7E113586}] => (Allow) C:\Users\Lidiane\AppData\Local\TofMiniLoader\ToFMiniLoader.exe (PROXIMA BETA PTE. LIMITED -> )
FirewallRules: [{B5D6BDD9-0E1C-4969-A0E5-6095453E7820}] => (Allow) C:\Users\Lidiane\AppData\Local\TofMiniLoader\ToFMiniLoader.exe (PROXIMA BETA PTE. LIMITED -> )
FirewallRules: [{F2BC7B92-75C4-4A2B-8091-C03B4DA0D903}] => (Allow) C:\Tower Of Fantasy\Hotta\Binaries\Win64\INTLWebViewHelper.exe () [Fichier non signé]
FirewallRules: [{301CB59A-21E7-4458-80BA-0D28B9FB9EDD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Realm Royale\RealmBootstrapper.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{81F6617F-703D-42BD-B403-B01D94A0BAA4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Realm Royale\RealmBootstrapper.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{21116249-9B74-40EE-8048-BBBCE8728A50}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{970F659D-E57C-4C65-8F8C-790CB5B2384E}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{73E2ABB2-EC65-4F2E-9DC8-68380BEAD98A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{B923E003-D758-4739-B7DF-0C6B7D0A7114}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{707B2225-C15F-45E5-A607-932E6251957B}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{80884B15-573F-47BB-952D-BE1A5B9453F8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\GGDLauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{548D944A-8F72-4B0D-897C-0D852E5AE0A8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Goose Goose Duck\GGDLauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{0DC98CD5-04F4-498F-94CA-C8D2D9B40F91}] => (Allow) C:\Program Files\EA Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{D23FC21F-0D46-4E31-B153-892725FD72DC}] => (Allow) C:\Program Files\EA Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{9A0189F6-EB80-412A-9DBF-B7BB1CA45B29}] => (Allow) C:\Program Files\EA Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{A961DCED-02ED-4CE7-97BF-DDBC986B7E89}] => (Allow) C:\Program Files\EA Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.)
FirewallRules: [{13E61316-FCCC-4F6B-8396-F208D3D6E5FF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [{0D2BB362-5FB1-44F2-9410-067B56A7248C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [{71E296E0-78E4-4ECF-9BBA-5C3B7C60C821}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\In Sink A Co-Op Escape Prologue\In Sink A Co-Op Escape Prologue.exe () [Fichier non signé]
FirewallRules: [{4511BF86-224A-49FF-A7F5-F5DC4AD72858}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\In Sink A Co-Op Escape Prologue\In Sink A Co-Op Escape Prologue.exe () [Fichier non signé]
FirewallRules: [{AB57AAAF-6978-4E8D-A992-FF0D74601D9D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\One-armed cook\OAC.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{4B308AA9-BD8F-418C-BD1E-C5EC67C52015}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\One-armed cook\OAC.exe (Epic Games, Inc.) [Fichier non signé]
FirewallRules: [{8D324A75-40CB-43BD-8185-EC64DCCDFB9F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bread & Fred Demo\Bread&Fred.exe () [Fichier non signé]
FirewallRules: [{C09A6255-8DE7-48C5-A3B4-2D58521541AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Bread & Fred Demo\Bread&Fred.exe () [Fichier non signé]
FirewallRules: [TCP Query User{DF2EF0FD-BB2D-4DC2-BAB6-9FECE239E869}C:\program files\star rail\games\starrail.exe] => (Allow) C:\program files\star rail\games\starrail.exe (COGNOSPHERE PTE. LTD. -> )
FirewallRules: [UDP Query User{7A19CE64-CE09-4C50-B235-22FB9432BFB8}C:\program files\star rail\games\starrail.exe] => (Allow) C:\program files\star rail\games\starrail.exe (COGNOSPHERE PTE. LTD. -> )
FirewallRules: [TCP Query User{09063158-283E-4416-B38D-C58EC0FFD43F}C:\program files\star rail\games\starrail_data\plugins\x86_64\zfgamebrowser.exe] => (Block) C:\program files\star rail\games\starrail_data\plugins\x86_64\zfgamebrowser.exe (COGNOSPHERE PTE. LTD. -> )
FirewallRules: [UDP Query User{79FE420B-EBA7-4753-9543-20B593598CF7}C:\program files\star rail\games\starrail_data\plugins\x86_64\zfgamebrowser.exe] => (Block) C:\program files\star rail\games\starrail_data\plugins\x86_64\zfgamebrowser.exe (COGNOSPHERE PTE. LTD. -> )
FirewallRules: [{F3355D94-64D3-4506-9744-88EE7358891A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{0515F3D8-EA41-4363-848E-2A77E25384D6}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{9640CFBB-A163-4C15-8D69-8F21F586EC31}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{6133493E-6C74-4771-932B-D1BE05E5BDED}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{C71F98AB-08BE-4D81-B3DF-F5B5FD414347}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{A947E7C0-7222-4479-B49B-3655F02FAFB2}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{66A16979-B261-4AD3-A9B9-D209314B92F6}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\113.0.1774.57\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{C4CED725-4D7D-4DD6-9B6E-67A4F1AFCCEB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{FCEE7FD8-C847-4E1B-AF7C-21060970CA42}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{17ACC676-645F-41A1-9DCE-31BE1B9733AD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{12A299A3-6945-49E3-AEB2-92A6C60CA2B5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{65BF2F66-6FC8-4387-A64D-5168B9E4CDCF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{81B175FA-D37A-4C66-9B02-5A78A62FEB12}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9AED856C-6DB8-49FB-9E86-F5FD0AD44717}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{BC9DD043-18EA-4FC6-B74F-8975B972D0FB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{2E2ED89B-2FEC-4996-A4E0-5E0EDF2F19A4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D89A5456-BE9D-4603-9423-8A57A0143E41}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.212.902.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{203D80B2-7A9B-4B36-9198-4316F981FFA2}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3206.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D98AAD67-AD03-4F66-9159-9417908375F6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3206.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BA1AA380-1486-465B-A864-168D4DBBCF49}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3206.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FC6DA4D7-A90F-4667-BD22-0C2087B5FFB4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3206.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4B2E7182-3726-40CC-BD06-BAB853F99CB7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Points de restauration =========================

24-05-2023 17:50:44 Point de contrôle planifié

==================== Éléments en erreur du Gestionnaire de périphériques ============

Name: Périphérique USB inconnu (échec de demande de descripteur de périphérique)
Description: Périphérique USB inconnu (échec de demande de descripteur de périphérique)
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: (Contrôleur hôte USB standard)
Service:
Problem: : Windows has stopped this device because it has reported problems. (Code 43)
Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.

Name: Razer Control Device
Description: Razer Control Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Erreurs du Journal des événements: ========================

Erreurs Application:
==================
Error: (04/04/2023 07:57:52 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante ZFGameBrowser.exe, version : 0.0.0.0, horodatage : 0x630eca29
Nom du module défaillant : ntdll.dll, version : 10.0.19041.2130, horodatage : 0xb5ced1c6
Code d’exception : 0xc0000374
Décalage d’erreur : 0x00000000000ff6a9
ID du processus défaillant : 0x16c4
Heure de début de l’application défaillante : 0x01d9670f80c94448
Chemin d’accès de l’application défaillante : C:\Program Files\Genshin Impact\Genshin Impact game\GenshinImpact_Data\Plugins\ZFGameBrowser.exe
Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll
ID de rapport : 53713454-e088-4182-b4d0-4373be9d77ec
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (03/25/2023 08:08:41 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/25/2023 08:08:40 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=eeba1977-569e-4571-b639-7623d8bfecc0;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=UserLogon;SessionId=4

Error: (03/24/2023 05:30:17 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/24/2023 05:30:16 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=UserLogon;SessionId=3

Error: (03/23/2023 07:26:57 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=NetworkAvailable

Error: (03/23/2023 07:26:57 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=UserLogon;SessionId=2

Error: (03/23/2023 07:26:56 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0xC004F074
Arguments de la ligne de commande :
RuleId=dca14e37-0c5c-444f-9b35-1e2f161f5ac3;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=58e97c99-f377-4ef1-81d5-4ad5522b5fd8;NotificationInterval=1440;Trigger=TimerEvent


Erreurs système:
=============
Error: (05/28/2023 02:29:07 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (05/24/2023 05:47:48 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Les clichés instantanés du volume C: ont été annulés car le stockage du cliché instantané n’a pas pu s’agrandir en raison d’une limite utilisateur.

Error: (05/24/2023 01:41:49 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.

Error: (05/14/2023 05:34:29 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-ERCB6TE)
Description: DCOM a reçu l’erreur « 87 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur :
{3E8C9ABE-9226-4609-BF5B-60288A391DEE}

Error: (05/14/2023 05:34:29 PM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-ERCB6TE)
Description: DCOM a reçu l’erreur « 87 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur :
{3E8C9ABE-9226-4609-BF5B-60288A391DEE}

Error: (05/12/2023 09:55:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ERCB6TE)
Description: Le serveur {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (05/12/2023 09:55:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ERCB6TE)
Description: Le serveur Microsoft.AAD.BrokerPlugin_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (05/08/2023 07:25:34 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-ERCB6TE)
Description: Le serveur {3EB3C877-1F16-487C-9050-104DBCD66683} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.


Windows Defender:
================
Date: 2023-05-28 18:44:13
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {E0CB69DB-CA5D-41C2-B6E6-A478BFC054C4}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2023-05-28 14:28:45
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {320E5314-B85B-4822-BAE2-D0743BE7B332}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2023-05-24 19:23:47
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {E8656AF3-BA5F-4FB2-8FE7-52DC22485B41}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2023-05-20 13:30:26
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {BB5509D4-5AD4-4CBD-89E9-73041CABB663}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

Date: 2023-05-08 19:03:16
Description:
L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin.
ID de l’analyse : {A9ECE937-6D0D-4A8A-A9BC-776FD9899635}
Type de l’analyse : Logiciel anti-programme malveillant
Paramètres de l’analyse : Analyse rapide
Utilisateur : AUTORITE NT\Système

CodeIntegrity:
===============
Date: 2022-06-12 12:24:34
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.


==================== Infos Mémoire ===========================

BIOS: American Megatrends Inc. H.70 06/17/2020
Carte mère: Micro-Star International Co., Ltd B450 GAMING PLUS MAX (MS-7B86)
Processeur: AMD Ryzen 5 2600 Six-Core Processor
Pourcentage de mémoire utilisée: 25%
Mémoire physique - RAM - totale: 16335.04 MB
Mémoire physique - RAM - disponible: 12145.28 MB
Mémoire virtuelle totale: 19151.04 MB
Mémoire virtuelle disponible: 13780.57 MB

==================== Lecteurs ================================

Drive c: () (Fixed) (Total:930.89 GB) (Free:414.38 GB) (Model: Samsung SSD 980 1TB) NTFS

\\?\Volume{e53fed0a-9772-488d-8b45-9d925efc93db}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{20914dc5-2646-4882-9ce8-bbc84e21de2d}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Table des partitions ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Fin de Addition.txt =======================