Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01
Exécuté par lolip (10-05-2024 19:40:00)
Exécuté depuis C:\Users\lolip\OneDrive\Desktop
Microsoft Windows 11 Famille Version 23H2 22631.3447 (X64) (2022-09-30 17:35:49)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-2122109008-1014232456-2694980413-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2122109008-1014232456-2694980413-503 - Limited - Disabled)
Invité (S-1-5-21-2122109008-1014232456-2694980413-501 - Limited - Disabled)
lolip (S-1-5-21-2122109008-1014232456-2694980413-1001 - Administrator - Enabled) => C:\Users\lolip
WDAGUtilityAccount (S-1-5-21-2122109008-1014232456-2694980413-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Alienware SupportAssist OS Recovery Plugin for Alienware Update (HKLM\...\{39BF0E71-7A16-4A80-BBCE-FBDD2D1CC2D5}) (Version: 5.5.9.18923 - Dell Inc.) Hidden
Alienware SupportAssist OS Recovery Plugin for Alienware Update (HKLM-x32\...\{f6a4df94-48f2-459a-8d40-16b1fbed13c5}) (Version: 5.5.9.18923 - Dell Inc.)
Alienware SupportAssist Remediation (HKLM\...\{398E49A0-84CA-43B5-A926-42EF68619E91}) (Version: 5.5.10.19019 - Dell Inc.) Hidden
Alienware SupportAssist Remediation (HKLM-x32\...\{3563aa3a-c8ae-48d8-ab19-b1f359265295}) (Version: 5.5.10.19019 - Dell Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 6.23 - Piriform)
CurseForge (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.242.1.1 - Overwolf app)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 11.0.0.1996 - Disc Soft Ltd)
Dell SupportAssist (HKLM\...\{A1FC489C-7909-4E08-9685-6C77BA2053DE}) (Version: 4.0.3.61632 - Dell Inc.)
Discord (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\Discord) (Version: 1.0.9011 - Discord Inc.)
DS4Windows (HKLM\...\DS4Windows) (Version: - Ryochan7)
Epic Games Launcher (HKLM-x32\...\{92A065DE-A8D9-4842-9DFD-4BDA462EE8FD}) (Version: 1.3.51.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{19695986-25CE-41AC-9C6F-54794653EDBA}) (Version: 2.0.36.0 - Epic Games, Inc.)
FileZilla 3.61.0 (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\FileZilla Client) (Version: 3.61.0 - Tim Kosse)
FiveM (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\CitizenFX_FiveM) (Version: - Cfx.re)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 124.0.6367.156 - Google LLC)
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.3095.0 - Rockstar Games)
Intel(R) Management Engine Components (HKLM\...\{1A9FE6B4-801A-4AF0-AEDB-EA49BD80C9F2}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2205.15.0.2623 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{B7F27296-F1AE-46BB-8BD7-5E0EED0EA1AC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{9EB5F95A-335A-414D-BECE-BA2CE114A856}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{4150A94D-A96A-413F-ACA3-B6CC368ECE43}) (Version: 30.100.1943.2 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1943.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.63.1155.2 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.63.1155.2 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{5f9b06c7-aa5d-482b-a7e6-5355a325f465}) (Version: 1.63.1155.2 - Intel Corporation) Hidden
Java 8 Update 401 (HKLM-x32\...\{71024AE4-039E-4CA4-87B4-2F32180401F0}) (Version: 8.0.4010.10 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 4.6.9.314 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.9.314 - Malwarebytes)
McAfee (HKLM\...\McAfee.WPS) (Version: 1.18.255.1 - McAfee, LLC)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Host - 6.0.28 (x64) (HKLM\...\{CA84969C-64F9-4606-A998-E692A5DA9B9F}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.0 (x64) (HKLM\...\{D44822A8-FC28-42FC-8B1D-21A78579FC79}) (Version: 64.0.4211 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.20 (x64) (HKLM\...\{76FA02FF-603F-48BB-9E3F-17ED5DB861E8}) (Version: 48.83.63169 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.28 (x64) (HKLM\...\{7C4254A1-17EE-4840-B9D3-7CA9B34C75CD}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.0 (x64) (HKLM\...\{3A706840-2882-423C-90EB-B31545E2BC7A}) (Version: 64.0.4211 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.20 (x64) (HKLM\...\{6CE8AD8C-E6D5-4BF7-91C3-7F8106A5CD93}) (Version: 48.83.63169 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.20 (x64) (HKLM-x32\...\{403b0cfe-5969-462d-8eb2-aafde344360e}) (Version: 6.0.20.32620 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.28 (x64) (HKLM\...\{4BCC5DFD-5D10-4ACC-AAA9-8A1578A9F0C6}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.0 (x64) (HKLM\...\{76DEEAB3-122F-4231-83C7-0C35363D02F9}) (Version: 64.0.4211 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.80 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 124.0.2478.80 - Microsoft Corporation)
Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\OneDriveSetup.exe) (Version: 24.081.0421.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{6ACED991-1E65-4D16-8F6A-1AA1A0B97596}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{7465FCB9-1918-4438-9337-47BAF1902684}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{21a92a8d-968e-4b78-9af4-329f60d97ed7}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130 (HKLM-x32\...\{1de5e707-82da-4db6-b810-5d140cc4cbb3}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33130 (HKLM-x32\...\{2cfeba4a-21f8-4ea7-9927-c5a5c6f13cc9}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33130 (HKLM\...\{C31777DB-51C1-4B19-9F80-38EF5C1D7C89}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33130 (HKLM\...\{1CA7421F-A225-4A9C-B320-A36981A2B789}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.33130 (HKLM-x32\...\{5CA9AE7B-2EFC-4F02-81CD-32ABE173C755}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.33130 (HKLM-x32\...\{DF1B52DF-C88E-4DDF-956B-6E7A03327F46}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.28 (x64) (HKLM\...\{443A7BE8-E5BE-4514-BDAB-0A872E3E846B}) (Version: 48.112.10435 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.28 (x64) (HKLM-x32\...\{bd3c5800-9256-43b9-97a7-eb349fc38d78}) (Version: 6.0.28.33420 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.0 (x64) (HKLM\...\{113C0ADC-B9BD-4F95-9653-4F5BC540ED03}) (Version: 64.0.5329 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.0 (x64) (HKLM-x32\...\{17316079-d65a-4f25-a9f3-56c32781b15d}) (Version: 8.0.0.33101 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.6.2 - Notepad++ Team)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)
NVIDIA Pilote graphique 546.29 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 546.29 - NVIDIA Corporation)
NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.248.120.19 - Overwolf Ltd.)
PS Remote Play (HKLM-x32\...\{5671DFC7-30C0-4A7F-845B-698BBB818B64}) (Version: 6.5.0.08180 - Sony Interactive Entertainment Inc.)
Red Dead Redemption 2 (HKLM-x32\...\Red Dead Redemption 2) (Version: 1.0.1491.50 - Rockstar Games)
RedM (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\CitizenFX_RedM) (Version: - Cfx.re)
Riot Client (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player for lolip (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\roblox-player) (Version: - Roblox Corporation)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.86.1893 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.3.0.1 - Rockstar Games)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
T16 Wired Gaming Mouse (HKLM-x32\...\{444BE55C-4B14-4DB8-9922-6846C1437677}_is1) (Version: 1.0.3 - )
TeamSpeak 3 Client (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\TeamSpeak 3 Client) (Version: 3.5.6 - TeamSpeak Systems GmbH)
uTorrent Web (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\utweb) (Version: 1.3.0 - Rainberry, Inc.)
Voicemod (HKLM\...\{8435A407-F778-4647-9CDB-46E5EC50BAD0}_is1) (Version: 2.48.0.0 - Voicemod, Inc., Sucursal en España)
WebAdvisor par McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.883 - McAfee, LLC)
WinRAR 6.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.21.0 - win.rar GmbH)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5435.0_x64__8j3eq9eme6ctt [2024-04-22] (INTEL CORP) [Startup Task]
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_4.0.16.0_x64__htrsf667h5kn2 [2024-05-08] (Dell Inc)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1300.477.0_x64__8wekyb3d8bbwe [2024-04-25] (Microsoft Corporation)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-04-20] (Disney)
Intel® Optane⢠Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1041.0_x64__8j3eq9eme6ctt [2024-03-23] (INTEL CORP)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1423.712.0_x64__rh07ty8m5nkag [2023-10-13] (INTEL CORP) [Startup Task]
Lively Wallpaper -> C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.137.0_x86__97hta09mmv6hy [2024-02-26] (rocksdanister) [Startup Task]
McAfee -> C:\Program Files\McAfee\wps\1.18.255.1 [2024-05-09] ()
Microsoft Jenny (Natural) - English (United States) -> C:\Program Files\WindowsApps\MicrosoftWindows.Voice.en-US.Jenny.1_1.0.8.0_x64__cw5n1h2txyewy [2024-05-09] (Microsoft Windows)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-04-25] (Microsoft Corporation)
Microsoft.Photos.MediaEngineDLC -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-10-21] (Microsoft Corporation)
Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-03-30] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-05-09] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.34.0_x64__cw5n1h2txyewy [2024-05-08] (Microsoft Windows) [Startup Task]
Notepad++ -> C:\Program Files\Notepad++\contextMenu [2024-01-15] (Notepad++)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-25] (NVIDIA Corp.)
Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11050.3002.0_x64__8wekyb3d8bbwe [2024-05-09] (Microsoft Corporation) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.37.275.0_x64__dt26b99r8h8gj [2024-04-25] (Realtek Semiconductor Corp)
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.624.521.0_x64__55nm5eh3cm0pr [2024-05-09] (Roblox Corporation)
Speech Pack - English (United Kingdom) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.en-GB.1_1.0.7.0_x64__cw5n1h2txyewy [2023-07-03] (Microsoft Windows)
Speech Pack - English (United States) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.en-US.1_1.0.16.0_x64__cw5n1h2txyewy [2024-05-09] (Microsoft Windows)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0 [2024-05-09] (Spotify AB) [Startup Task]
TranslucentTB -> C:\Program Files\WindowsApps\28017CharlesMilette.TranslucentTB_2024.1.0.0_x64__v826wp6bftszj [2024-03-09] (Charles Milette) [Startup Task]
WinAppRuntime.Main.1.3 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.3_3000.934.1904.0_x64__8wekyb3d8bbwe [2023-08-27] (Microsoft Corp.)
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-20] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-20] (Microsoft Corp.)
Windows App Runtime DDLM 3000.882.2207.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.3000.882.2207.0-x6_3000.882.2207.0_x64__8wekyb3d8bbwe [2023-09-11] (Microsoft Corporation)
Windows App Runtime DDLM 3000.882.2207.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.3000.882.2207.0-x8_3000.882.2207.0_x86__8wekyb3d8bbwe [2023-09-11] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x6_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-20] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x8_4000.1082.2259.0_x86__8wekyb3d8bbwe [2024-04-20] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-01-12] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-01-12] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-16] (Microsoft Corporation)
WinRAR -> D:\Program Files (x86) [2023-03-07] (win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-2122109008-1014232456-2694980413-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> "C:\Program Files\NordVPN\NordVPN.exe" -ToastActivated => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2122109008-1014232456-2694980413-1001_Classes\CLSID\{6ca9ad9c-a1ed-01c2-7a24-01395a90424e}\localserver32 -> D:\Program Files (x86)\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÃA -> Voicemod)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Windows\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_357b728ba88fb99a\OptaneShellExt.dll [2022-12-18] (Intel Corporation -> )
ContextMenuHandlers1: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.18.255.1\mc-ctxmnu.dll [2024-05-09] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2022-10-01] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2022-10-01] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-02-27] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Windows\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_357b728ba88fb99a\OptaneShellExt.dll [2022-12-18] (Intel Corporation -> )
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_31dab972145ae5a9\nvshext.dll [2023-11-30] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-02-27] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.18.255.1\mc-ctxmnu.dll [2024-05-09] (McAfee, LLC -> McAfee, LLC)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
==================== Alternate Data Streams (Avec liste blanche) ========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite.lnk:073005E2F7 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite.lnk:35EB56C735 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk:C5D586BE93 [3442]
AlternateDataStreams: C:\Users\lolip\OneDrive\Desktop\miles-morales-prowler.gif:shield [158]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [10040]
==================== Mode sans échec (Avec liste blanche) ==================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre-1.8\bin\ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre-1.8\bin\jp2ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2022-05-07 07:24 - 2024-02-27 19:21 - 000002222 _____ C:\Windows\system32\drivers\etc\hosts
0.0.0.0 virustotal.com
0.0.0.0 www.virustotal.com
0.0.0.0 avast.com
0.0.0.0 www.avast.com
0.0.0.0 totalav.com
0.0.0.0 www.totalav.com
0.0.0.0 scanguard.com
0.0.0.0 www.scanguard.com
0.0.0.0 totaladblock.com
0.0.0.0 www.totaladblock.com
0.0.0.0 pcprotect.com
0.0.0.0 www.pcprotect.com
0.0.0.0 mcafee.com
0.0.0.0 www.mcafee.com
0.0.0.0 bitdefender.com
0.0.0.0 www.bitdefender.com
0.0.0.0 us.norton.com
0.0.0.0 www.us.norton.com
0.0.0.0 avg.com
0.0.0.0 www.avg.com
0.0.0.0 pandasecurity.com
0.0.0.0 www.pandasecurity.com
0.0.0.0 avira.com
0.0.0.0 www.avira.com
0.0.0.0 norton.com
0.0.0.0 www.norton.com
0.0.0.0 eset.com
0.0.0.0 www.eset.com
0.0.0.0 zillya.com
0.0.0.0 www.zillya.com
2023-07-09 14:21 - 2023-09-04 14:58 - 000000435 _____ C:\Windows\system32\drivers\etc\hosts.ics
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\lolip\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\StartupFolder: => "RocketDock.lnk"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\StartupFolder: => "RocketDock.lnk"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_2C91D863338E0E69C9060A122A0DD036"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "ut"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Voicemod"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Viewndow"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "utweb"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{AE75C0D2-1727-4E03-A7FF-A23B4DA06EF2}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{82A444E5-9531-4776-ACB6-B96A5B5FACA0}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3A2BB58A-CC51-4692-B508-A31F21C4FFB8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A77D466D-5194-488F-9BB2-D9A32C7678A3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{52180AEC-9E92-49CA-A035-99A72CA2EFEB}C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe => Pas de fichier
FirewallRules: [UDP Query User{39B52E74-87D2-47C7-9BC5-85AD35D28118}C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe => Pas de fichier
FirewallRules: [{7A6E8225-EFBE-4D3F-9EBE-010DEE922528}] => (Allow) D:\SteamLibrary\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [Fichier non signé]
FirewallRules: [{859AFB3B-3C81-40FE-96D3-F17C24306F24}] => (Allow) D:\SteamLibrary\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [Fichier non signé]
FirewallRules: [{B96CBF59-4E8D-4303-88DA-D18630592644}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6BA1E79E-D3F8-4EAD-8CC6-FB76851B4A76}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{62CE933E-19C5-47C5-8230-7DF337FD202B}] => (Allow) D:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [{DB0BD930-8976-4A2E-9D42-AE9B8E444371}] => (Allow) D:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [TCP Query User{C7B51842-FE4D-4F97-B399-A38D0081854C}D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe] => (Allow) D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe (Facepunch Studios Ltd) [Fichier non signé]
FirewallRules: [UDP Query User{6D1D2D57-29E7-4CE0-8F92-F12676BC1AE3}D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe] => (Allow) D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe (Facepunch Studios Ltd) [Fichier non signé]
FirewallRules: [TCP Query User{2456DE99-5959-4AF3-9C94-603B78DC9B1A}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe
FirewallRules: [UDP Query User{C780A3FF-6122-4DC7-9667-D004C5CB71D7}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe
FirewallRules: [TCP Query User{B426BEF3-91E1-4314-9F8E-066F76462AF4}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{B7BF0E8D-6802-43C5-AAC0-B3FB1763CF4A}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{EC019371-7ECD-43FC-B85E-1DF0DA7811A7}C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{82B1B73A-CACB-472D-95A5-30E95B1EFE47}C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{2CF4C9CD-C79F-44D8-B7C4-B184452C2915}C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe => Pas de fichier
FirewallRules: [UDP Query User{A7994C81-AD2B-4728-B01D-FF3FE3BAB358}C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{4431BCDB-C92A-4F64-B2D2-277D041945BA}C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{09AAFBB2-1174-4CA8-9D32-6D1D19379484}C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{87B86997-DEB9-4F4D-BC05-49D4694460AE}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{D7E036A5-DDD0-484E-8880-B97B3FAB4172}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{0BADE342-CFAE-47F6-9DB1-A916DEB6AE53}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe => Pas de fichier
FirewallRules: [UDP Query User{72B73D8F-8ABD-4BAD-9FF3-EA1188ECB77B}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe => Pas de fichier
FirewallRules: [TCP Query User{56568EEC-744B-44F5-BDBA-EBCD37025373}C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{369D983E-9042-4E39-B73B-E860CC6DFBC2}C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe => Pas de fichier
FirewallRules: [TCP Query User{16BB9128-FC54-49FC-816F-CF5D7700FB8B}C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe] => (Allow) C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{3064677F-2B36-4F5C-B28D-87E881664074}C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe] => (Allow) C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe => Pas de fichier
FirewallRules: [TCP Query User{468AD162-7DCC-453D-A47E-BF9ACD44B153}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe
FirewallRules: [UDP Query User{C4358539-EB4A-4404-88BF-A604462998F0}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe
FirewallRules: [{6100605F-84BB-44DD-BD5C-7F063CDCE845}] => (Allow) D:\SteamLibrary\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [{59379774-E907-4A41-9F57-E1423B5483EB}] => (Allow) D:\SteamLibrary\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [TCP Query User{512D21CC-3E33-4372-8A10-47E13A76472F}C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe] => (Allow) C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe => Pas de fichier
FirewallRules: [UDP Query User{21380894-1D53-4F22-A355-D93444748BE8}C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe] => (Allow) C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe => Pas de fichier
FirewallRules: [TCP Query User{38A6229A-8A1B-4F08-91DE-962530A207EC}C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [UDP Query User{8F79C1D4-22B5-488A-A4F1-05BEA2830482}C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [TCP Query User{98A56BDF-8BCF-4247-9FEF-AA6B98B976AB}C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [UDP Query User{AB9B5C88-F999-4DFA-8B0D-98AA14590FAB}C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [TCP Query User{21232A92-1108-43D8-9817-E9DDF17EE1F5}C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe] => (Allow) C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{449B1588-D444-445A-9875-DFBA62973600}C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe] => (Allow) C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe => Pas de fichier
FirewallRules: [{B3591466-B806-44BE-95A9-E72FD128B37E}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Forever\We Were Here Forever.exe () [Fichier non signé]
FirewallRules: [{0A297F5C-9A8D-4A36-825D-79E4A5120D86}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Forever\We Were Here Forever.exe () [Fichier non signé]
FirewallRules: [TCP Query User{BB2F97F2-4B1D-4FEF-ACE8-79A54C8F571C}C:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) C:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{75022380-86F6-49D8-8382-DFC034BEAF17}C:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) C:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [TCP Query User{1DD42ECA-DFD1-440B-A36F-F47D6D88BA73}D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{2BBC521D-E09A-4A51-992F-920F16802DF7}D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{7079255E-B1F6-46D8-A0EB-226DA124D85A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F97E6E52-E8F8-40F4-A781-06F51525FA3F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{217B9E74-7A50-4584-A509-A49B4E708F2C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{96BC8556-A4C1-423B-8D51-35E8320B9BFE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{496DE63F-0B4A-47F2-9520-31C7B25E3848}] => (Allow) C:\Program Files (x86)\Sony\PS Remote Play\RemotePlay.exe (Sony Interactive Entertainment Inc. -> Sony Interactive Entertainment Inc.)
FirewallRules: [{6E178C1E-BA51-4536-A07F-6637658F3A8D}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Pas de fichier
FirewallRules: [{03DEEDA7-15CD-48EE-BDA3-166A6238BA41}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Pas de fichier
FirewallRules: [{1479F839-4CE2-4651-9ED5-8D1B2EDB6F21}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => Pas de fichier
FirewallRules: [{8B56C2C5-C947-4C27-BE01-4DAAEB7DFF3B}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe => Pas de fichier
FirewallRules: [TCP Query User{11CDDE90-0605-490C-8140-155FE76260B2}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{F79D43B9-76A8-49AC-A206-2B09C532A634}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{04045D1F-6932-4CF0-A665-761A0D3C2C37}] => (Allow) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{71740631-243A-4E3E-B24A-B0A3DE1D21E0}] => (Allow) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{B0A7CDB6-E9F8-4724-B0D4-53B7D5A6EEBD}] => (Block) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{1D7674F0-409E-451F-A719-741C767DCE4D}] => (Block) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{9F1FA718-4C20-4FAE-84FD-2875E9545A83}] => (Allow) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{A24EB2F5-2BCE-4174-8E63-F56F88097A86}] => (Allow) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{1D1DEC88-B5EA-4B40-9FFD-80175D6B3276}] => (Block) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{B6DFED98-34AC-48FE-A8CD-B6CF6C6CCE74}] => (Block) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{75B1C6AC-B9BA-45E1-A3D8-6FF9C5CBC9F5}] => (Allow) D:\Program Files (x86)\Overwolf\0.248.120.19\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{FEBFF74E-FE2A-4D86-BE5F-D78EFC93665A}] => (Allow) D:\Program Files (x86)\Overwolf\0.248.120.19\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D185D3A1-1EDC-4420-835A-DC6C559DFD75}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.80\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{730D2134-F656-4FC2-9134-F4FDB43927CB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{95C5F438-25D5-47C0-9E59-F92455F0DBD5}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FBA66E7C-F67F-4512-8F6F-5F330FEB6096}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C724250B-5BC1-47F6-AF4F-AA2A1E347239}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8174F88B-65EB-44E9-AB66-64E6955F4FB3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{02532DDE-CA0D-42E6-B48B-24FD33C5E884}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4DC0B2AE-9016-42C9-9D3B-650BE70396F1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A215364C-7CD1-4093-8213-64FB90597621}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{51CEACAA-6767-4BF9-B08C-29FB3B742EAB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{5C63B8C8-59DA-4FB4-8684-C1EB770900DE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DE1547EA-19AE-4B87-99E3-D8561D300B67}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{97C91F71-D111-418C-A5F3-06E49B63FD92}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{ECDE4710-37AE-4517-9013-12435FE27C25}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{169A7F61-F9E8-42F9-80BB-6FD01F2E89EE}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Too\We Were Here Too.exe () [Fichier non signé]
FirewallRules: [{3D6FCF50-1E0A-4E6B-AD46-F8876FF52636}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Too\We Were Here Too.exe () [Fichier non signé]
FirewallRules: [{1D0B1E25-9D27-4D97-B2A6-CF983ADD3C23}] => (Allow) D:\Program Files (x86)\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÃA -> Voicemod)
FirewallRules: [{ABCA53D1-AA3D-4E24-A44A-ED4B0583D76F}] => (Allow) D:\Program Files (x86)\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÃA -> Voicemod)
==================== Points de restauration =========================
23-03-2024 11:14:57 Windows Update
23-03-2024 11:15:05 Windows Update
28-03-2024 20:14:16 Windows Update
28-03-2024 20:14:22 Windows Update
02-04-2024 20:32:34 Windows Update
20-04-2024 12:41:36 Windows Update
22-04-2024 18:31:59 Programme dâinstallation pour les modules Windows
27-04-2024 10:48:00 Windows Update
27-04-2024 10:48:02 Windows Update
27-04-2024 10:48:04 Windows Update
08-05-2024 15:52:49 Windows Update
08-05-2024 15:52:51 Windows Update
==================== Ãléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (05/08/2024 10:56:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de lâinterrogation de lâinterface IVssWriterCallback. hr = 0x80070005, Accès refusé..Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.
Opération :
Données du rédacteur en cours de collecte
Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID dâinstance du rédacteur: {ca431d62-5d29-44b8-85a6-91b94ccc15bc}
Error: (05/08/2024 03:50:44 PM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT)
Description: Nom de lâapplication défaillante SupportAssistSoftwareDiags.exe, version : 4.0.0.51819, horodatage : 0x64b073ea
Nom du module défaillant : KERNELBASE.dll, version : 10.0.22621.3447, horodatage : 0x3d876852
Code dâexception : 0xe0434352
Décalage dâerreur : 0x00000000000653ac
ID du processus défaillant : 0x0x5c4
Heure de début de lâapplication défaillante : 0x0x1daa14dfa6b4912
Chemin dâaccès de lâapplication défaillante : C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistSoftwareDiags.exe
Chemin dâaccès du module défaillant: C:\Windows\System32\KERNELBASE.dll
ID de rapport : 9692d250-fa0f-4145-bd79-1376a6c1b460
Nom complet du package défaillant :
ID de lâapplication relative au package défaillant :
Error: (05/08/2024 03:50:44 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: SupportAssistSoftwareDiags.exe
CoreCLR Version: 6.0.2824.12007
.NET Version: 6.0.28
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ObjectDisposedException: Safe handle has been closed.
Object name: 'SafeHandle'.
at System.Runtime.InteropServices.SafeHandle.DangerousAddRef(Boolean& success)
at Interop.Kernel32.SetEvent(SafeWaitHandle handle)
at System.Threading.EventWaitHandle.Set()
at Dell.Client.Framework.Common.PluginManagerBase.Dispose(Boolean disposing)
at Dell.Client.Framework.Common.PluginManagerBase.Dispose()
at Dell.Client.Framework.Agent.Agent.Dispose(Boolean disposing)
at Dell.Client.Framework.Agent.Agent.Dispose()
at Dell.SupportAssist.Client.Agent.SoftwareDiags.SoftwareDiagnosticsSubAgent.DisposeAgent()
at Dell.SupportAssist.Client.Agent.SoftwareDiags.Program.CurrentDomain_ProcessExit(Object sender, EventArgs e)
at System.AppContext.OnProcessExit()
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de lâappel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours..
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.]
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de lâappel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours..
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.]
Error: (04/23/2024 08:18:51 PM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT)
Description: Nom de lâapplication défaillante mc-fw-host.exe, version : 1.17.166.0, horodatage : 0x65f65d73
Nom du module défaillant : ntdll.dll, version : 10.0.22621.3374, horodatage : 0xeae8eecc
Code dâexception : 0xc0000374
Décalage dâerreur : 0x000000000010c169
ID du processus défaillant : 0x0x13a4
Heure de début de lâapplication défaillante : 0x0x1da95aa87cd8996
Chemin dâaccès de lâapplication défaillante : \\?\C:\Program Files\McAfee\WPS\1.17.226.1\mc-fw-host.exe
Chemin dâaccès du module défaillant: C:\Windows\SYSTEM32\ntdll.dll
ID de rapport : 5ff33d1f-eba3-497f-af4f-d5d2239cec7b
Nom complet du package défaillant :
ID de lâapplication relative au package défaillant :
Erreurs système:
=============
Error: (05/09/2024 04:46:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Le service McAfee Maintenance Service sâest arrêté avec lâerreur spécifique au service suivante :
Le module spécifié est introuvable.
Error: (05/09/2024 03:01:20 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur Windows.Media.Capture.Internal.AppCaptureShell ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (05/08/2024 04:06:55 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur Windows.Media.Capture.Internal.AppCaptureShell ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (05/08/2024 03:53:36 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Ãchec de lâinstallation : lâinstallation de la mise à jour suivante a échoue avec lâerreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (05/08/2024 03:52:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Dell Data Vault Processor sâest terminé de manière inattendue. Ceci sâest produit 1 fois. Lâaction corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
Error: (04/28/2024 01:05:18 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (04/28/2024 12:24:54 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur Windows.Media.Capture.Internal.AppCaptureShell ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (04/27/2024 11:12:06 AM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Windows Defender:
================
Date: 2022-11-23 18:26:58
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik.U&threatid=2147835657&enterprise=0
Nom : TrojanClicker:Win32/Doplik.U
ID : 2147835657
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : containerfile:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe; file:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe->(ZipSfx)->start.bin; process:_pid:32916,ProcessStart:133136977152618719; process:_pid:40108,ProcessStart:133136977241333863; process:_pid:40136,ProcessStart:133136977241582965; process:_pid:40272,ProcessStart:133136977242368295; process:_pid:40284,ProcessStart:133136977242422520; process:_pid:40348,ProcessStart:133136977242698781; process:_pid:40428,ProcessStart:133136977243035678; regkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Entertainment; runkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Entertainment
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe
Version de la veille de sécurité : AV: 1.379.813.0, AS: 1.379.813.0, NIS: 1.379.813.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Date: 2022-11-23 18:23:15
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik.U&threatid=2147835657&enterprise=0
Nom : TrojanClicker:Win32/Doplik.U
ID : 2147835657
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : containerfile:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe; file:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe->(ZipSfx)->start.bin; process:_pid:32916,ProcessStart:133136977152618719; process:_pid:40108,ProcessStart:133136977241333863; process:_pid:40136,ProcessStart:133136977241582965; process:_pid:40272,ProcessStart:133136977242368295; process:_pid:40284,ProcessStart:133136977242422520; process:_pid:40348,ProcessStart:133136977242698781; process:_pid:40428,ProcessStart:133136977243035678
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe
Version de la veille de sécurité : AV: 1.379.813.0, AS: 1.379.813.0, NIS: 1.379.813.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Date: 2022-11-08 18:43:59
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik&threatid=2147822417&enterprise=0
Nom : TrojanClicker:Win32/Doplik
ID : 2147822417
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : file:_C:\Users\lolip\AppData\Roaming\gallery\gallery.exe; process:_pid:16756,ProcessStart:133124029853629714; process:_pid:21828,ProcessStart:133124029853469783; process:_pid:2292,ProcessStart:133124029852579867; process:_pid:40068,ProcessStart:133124029853946138; process:_pid:54884,ProcessStart:133124029850751303; process:_pid:8480,ProcessStart:133124029853400315; regkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\gallery; runkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\gallery
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\gallery\gallery.exe
Version de la veille de sécurité : AV: 1.379.37.0, AS: 1.379.37.0, NIS: 1.379.37.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Date: 2022-11-08 18:43:36
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik&threatid=2147822417&enterprise=0
Nom : TrojanClicker:Win32/Doplik
ID : 2147822417
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : file:_C:\Users\lolip\AppData\Roaming\gallery\gallery.exe; process:_pid:16756,ProcessStart:133124029853629714; process:_pid:21828,ProcessStart:133124029853469783; process:_pid:2292,ProcessStart:133124029852579867; process:_pid:40068,ProcessStart:133124029853946138; process:_pid:54884,ProcessStart:133124029850751303; process:_pid:8480,ProcessStart:133124029853400315
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\gallery\gallery.exe
Version de la veille de sécurité : AV: 1.379.37.0, AS: 1.379.37.0, NIS: 1.379.37.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Event[0]
Date: 2023-10-29 18:33:47
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.399.1352.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23090.2007
Code dâerreur : 0x8024001e
Description de lâerreur : Un problème inattendu sâest produit lors de la vérification des mises à jour. Pour plus dâinformations sur lâinstallation ou la résolution des problèmes de mise à jour, voir Aide et support.
Date: 2023-10-13 22:15:34
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.399.545.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23090.2007
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
Date: 2023-10-13 22:15:34
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.399.545.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23090.2007
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
Date: 2023-09-04 09:36:12
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.397.312.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23080.2005
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
Date: 2023-09-04 09:36:12
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.397.312.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23080.2005
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
CodeIntegrity:
===============
Date: 2024-05-10 18:08:58
Description:
Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume8\Program Files\McAfee\WPS\1.18.255.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements.
==================== Infos Mémoire ===========================
BIOS: Alienware 1.0.26 11/22/2022
Carte mère: Alienware 0R3FWM
Processeur: Intel(R) Core(TM) i7-9700K CPU @ 3.60GHz
Pourcentage de mémoire utilisée: 48%
Mémoire physique - RAM - totale: 16206.5 MB
Mémoire physique - RAM - disponible: 8277.64 MB
Mémoire virtuelle totale: 22606.5 MB
Mémoire virtuelle disponible: 11093.41 MB
==================== Lecteurs ================================
Drive c: (SSD Nvme) (Fixed) (Total:930.43 GB) (Free:497.69 GB) (Model: NVMe CT1000P3PSSD8) NTFS
Drive d: (SSHD Kiki) (Fixed) (Total:899.67 GB) (Free:605.25 GB) (Model: ST1000DX001-SSHD-8GB) NTFS
Drive e: (SSD) (Fixed) (Total:218.9 GB) (Free:207.14 GB) (Model: NVMe KXG60ZNV256G NVM) NTFS
\\?\Volume{25924673-5702-47c3-aeff-e1560bd09058}\ (WinRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.39 GB) NTFS
\\?\Volume{267cc85b-81c5-4898-a7cc-e6c9060c079b}\ (LENOVO_PART) (Fixed) (Total:30 GB) (Free:16.48 GB) NTFS
\\?\Volume{f9b33c9c-5d1a-495e-5d58-079c14615b71}\ (DELLSUPPORT) (Fixed) (Total:1.06 GB) (Free:1.05 GB) NTFS
\\?\Volume{5edf0236-216d-42fe-b77c-b3bfc1d69575}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.47 GB) NTFS
\\?\Volume{129a1a2d-6212-4047-b8ee-d43c639eecfc}\ (Image) (Fixed) (Total:16.64 GB) (Free:0.11 GB) NTFS
\\?\Volume{fd4b88ef-d0a4-4207-9436-dd2c83a90a5f}\ (DELLSUPPORT) (Fixed) (Total:1.19 GB) (Free:0.19 GB) NTFS
\\?\Volume{461d777b-6db7-445b-8560-5a4b2a1fc14f}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32
\\?\Volume{6ed903ef-4393-425e-9704-33f51f348834}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.55 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: C29BAE07)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CA34382F)
Partition: GPT.
==========================================================
Disk: 2 (Size: 238.5 GB) (Disk ID: 7B200E1B)
Partition: GPT.
==================== Fin de Addition.txt =======================
Exécuté par lolip (10-05-2024 19:40:00)
Exécuté depuis C:\Users\lolip\OneDrive\Desktop
Microsoft Windows 11 Famille Version 23H2 22631.3447 (X64) (2022-09-30 17:35:49)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
Administrateur (S-1-5-21-2122109008-1014232456-2694980413-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2122109008-1014232456-2694980413-503 - Limited - Disabled)
Invité (S-1-5-21-2122109008-1014232456-2694980413-501 - Limited - Disabled)
lolip (S-1-5-21-2122109008-1014232456-2694980413-1001 - Administrator - Enabled) => C:\Users\lolip
WDAGUtilityAccount (S-1-5-21-2122109008-1014232456-2694980413-504 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Alienware SupportAssist OS Recovery Plugin for Alienware Update (HKLM\...\{39BF0E71-7A16-4A80-BBCE-FBDD2D1CC2D5}) (Version: 5.5.9.18923 - Dell Inc.) Hidden
Alienware SupportAssist OS Recovery Plugin for Alienware Update (HKLM-x32\...\{f6a4df94-48f2-459a-8d40-16b1fbed13c5}) (Version: 5.5.9.18923 - Dell Inc.)
Alienware SupportAssist Remediation (HKLM\...\{398E49A0-84CA-43B5-A926-42EF68619E91}) (Version: 5.5.10.19019 - Dell Inc.) Hidden
Alienware SupportAssist Remediation (HKLM-x32\...\{3563aa3a-c8ae-48d8-ab19-b1f359265295}) (Version: 5.5.10.19019 - Dell Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 6.23 - Piriform)
CurseForge (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.242.1.1 - Overwolf app)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 11.0.0.1996 - Disc Soft Ltd)
Dell SupportAssist (HKLM\...\{A1FC489C-7909-4E08-9685-6C77BA2053DE}) (Version: 4.0.3.61632 - Dell Inc.)
Discord (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\Discord) (Version: 1.0.9011 - Discord Inc.)
DS4Windows (HKLM\...\DS4Windows) (Version: - Ryochan7)
Epic Games Launcher (HKLM-x32\...\{92A065DE-A8D9-4842-9DFD-4BDA462EE8FD}) (Version: 1.3.51.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{19695986-25CE-41AC-9C6F-54794653EDBA}) (Version: 2.0.36.0 - Epic Games, Inc.)
FileZilla 3.61.0 (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\FileZilla Client) (Version: 3.61.0 - Tim Kosse)
FiveM (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\CitizenFX_FiveM) (Version: - Cfx.re)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 124.0.6367.156 - Google LLC)
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.3095.0 - Rockstar Games)
Intel(R) Management Engine Components (HKLM\...\{1A9FE6B4-801A-4AF0-AEDB-EA49BD80C9F2}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2205.15.0.2623 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{B7F27296-F1AE-46BB-8BD7-5E0EED0EA1AC}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{9EB5F95A-335A-414D-BECE-BA2CE114A856}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{4150A94D-A96A-413F-ACA3-B6CC368ECE43}) (Version: 30.100.1943.2 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1943.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.63.1155.2 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.63.1155.2 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{5f9b06c7-aa5d-482b-a7e6-5355a325f465}) (Version: 1.63.1155.2 - Intel Corporation) Hidden
Java 8 Update 401 (HKLM-x32\...\{71024AE4-039E-4CA4-87B4-2F32180401F0}) (Version: 8.0.4010.10 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 4.6.9.314 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.9.314 - Malwarebytes)
McAfee (HKLM\...\McAfee.WPS) (Version: 1.18.255.1 - McAfee, LLC)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Host - 6.0.28 (x64) (HKLM\...\{CA84969C-64F9-4606-A998-E692A5DA9B9F}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.0 (x64) (HKLM\...\{D44822A8-FC28-42FC-8B1D-21A78579FC79}) (Version: 64.0.4211 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.20 (x64) (HKLM\...\{76FA02FF-603F-48BB-9E3F-17ED5DB861E8}) (Version: 48.83.63169 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.28 (x64) (HKLM\...\{7C4254A1-17EE-4840-B9D3-7CA9B34C75CD}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.0 (x64) (HKLM\...\{3A706840-2882-423C-90EB-B31545E2BC7A}) (Version: 64.0.4211 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.20 (x64) (HKLM\...\{6CE8AD8C-E6D5-4BF7-91C3-7F8106A5CD93}) (Version: 48.83.63169 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.20 (x64) (HKLM-x32\...\{403b0cfe-5969-462d-8eb2-aafde344360e}) (Version: 6.0.20.32620 - Microsoft Corporation)
Microsoft .NET Runtime - 6.0.28 (x64) (HKLM\...\{4BCC5DFD-5D10-4ACC-AAA9-8A1578A9F0C6}) (Version: 48.112.10439 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.0 (x64) (HKLM\...\{76DEEAB3-122F-4231-83C7-0C35363D02F9}) (Version: 64.0.4211 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.80 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 124.0.2478.80 - Microsoft Corporation)
Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\OneDriveSetup.exe) (Version: 24.081.0421.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{6ACED991-1E65-4D16-8F6A-1AA1A0B97596}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{7465FCB9-1918-4438-9337-47BAF1902684}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{21a92a8d-968e-4b78-9af4-329f60d97ed7}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33130 (HKLM-x32\...\{1de5e707-82da-4db6-b810-5d140cc4cbb3}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33130 (HKLM-x32\...\{2cfeba4a-21f8-4ea7-9927-c5a5c6f13cc9}) (Version: 14.38.33130.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33130 (HKLM\...\{C31777DB-51C1-4B19-9F80-38EF5C1D7C89}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33130 (HKLM\...\{1CA7421F-A225-4A9C-B320-A36981A2B789}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.33130 (HKLM-x32\...\{5CA9AE7B-2EFC-4F02-81CD-32ABE173C755}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.33130 (HKLM-x32\...\{DF1B52DF-C88E-4DDF-956B-6E7A03327F46}) (Version: 14.38.33130 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.28 (x64) (HKLM\...\{443A7BE8-E5BE-4514-BDAB-0A872E3E846B}) (Version: 48.112.10435 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.28 (x64) (HKLM-x32\...\{bd3c5800-9256-43b9-97a7-eb349fc38d78}) (Version: 6.0.28.33420 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.0 (x64) (HKLM\...\{113C0ADC-B9BD-4F95-9653-4F5BC540ED03}) (Version: 64.0.5329 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.0 (x64) (HKLM-x32\...\{17316079-d65a-4f25-a9f3-56c32781b15d}) (Version: 8.0.0.33101 - Microsoft Corporation)
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.6.2 - Notepad++ Team)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)
NVIDIA Pilote graphique 546.29 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 546.29 - NVIDIA Corporation)
NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.248.120.19 - Overwolf Ltd.)
PS Remote Play (HKLM-x32\...\{5671DFC7-30C0-4A7F-845B-698BBB818B64}) (Version: 6.5.0.08180 - Sony Interactive Entertainment Inc.)
Red Dead Redemption 2 (HKLM-x32\...\Red Dead Redemption 2) (Version: 1.0.1491.50 - Rockstar Games)
RedM (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\CitizenFX_RedM) (Version: - Cfx.re)
Riot Client (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc)
Roblox Player for lolip (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\roblox-player) (Version: - Roblox Corporation)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.86.1893 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.3.0.1 - Rockstar Games)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
T16 Wired Gaming Mouse (HKLM-x32\...\{444BE55C-4B14-4DB8-9922-6846C1437677}_is1) (Version: 1.0.3 - )
TeamSpeak 3 Client (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\TeamSpeak 3 Client) (Version: 3.5.6 - TeamSpeak Systems GmbH)
uTorrent Web (HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\utweb) (Version: 1.3.0 - Rainberry, Inc.)
Voicemod (HKLM\...\{8435A407-F778-4647-9CDB-46E5EC50BAD0}_is1) (Version: 2.48.0.0 - Voicemod, Inc., Sucursal en España)
WebAdvisor par McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.883 - McAfee, LLC)
WinRAR 6.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.21.0 - win.rar GmbH)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5435.0_x64__8j3eq9eme6ctt [2024-04-22] (INTEL CORP) [Startup Task]
Dell SupportAssist for Home PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_4.0.16.0_x64__htrsf667h5kn2 [2024-05-08] (Dell Inc)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1300.477.0_x64__8wekyb3d8bbwe [2024-04-25] (Microsoft Corporation)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-04-20] (Disney)
Intel® Optane⢠Memory and Storage Management -> C:\Program Files\WindowsApps\AppUp.IntelOptaneMemoryandStorageManagement_18.1.1041.0_x64__8j3eq9eme6ctt [2024-03-23] (INTEL CORP)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1423.712.0_x64__rh07ty8m5nkag [2023-10-13] (INTEL CORP) [Startup Task]
Lively Wallpaper -> C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.137.0_x86__97hta09mmv6hy [2024-02-26] (rocksdanister) [Startup Task]
McAfee -> C:\Program Files\McAfee\wps\1.18.255.1 [2024-05-09] ()
Microsoft Jenny (Natural) - English (United States) -> C:\Program Files\WindowsApps\MicrosoftWindows.Voice.en-US.Jenny.1_1.0.8.0_x64__cw5n1h2txyewy [2024-05-09] (Microsoft Windows)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.91.0_x64__8wekyb3d8bbwe [2024-04-25] (Microsoft Corporation)
Microsoft.Photos.MediaEngineDLC -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-10-21] (Microsoft Corporation)
Microsoft.Windows.Ai.Copilot.Provider -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-03-30] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-05-09] (Microsoft Corporation)
MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24041.34.0_x64__cw5n1h2txyewy [2024-05-08] (Microsoft Windows) [Startup Task]
Notepad++ -> C:\Program Files\Notepad++\contextMenu [2024-01-15] (Notepad++)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-25] (NVIDIA Corp.)
Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11050.3002.0_x64__8wekyb3d8bbwe [2024-05-09] (Microsoft Corporation) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.37.275.0_x64__dt26b99r8h8gj [2024-04-25] (Realtek Semiconductor Corp)
Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.624.521.0_x64__55nm5eh3cm0pr [2024-05-09] (Roblox Corporation)
Speech Pack - English (United Kingdom) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.en-GB.1_1.0.7.0_x64__cw5n1h2txyewy [2023-07-03] (Microsoft Windows)
Speech Pack - English (United States) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.en-US.1_1.0.16.0_x64__cw5n1h2txyewy [2024-05-09] (Microsoft Windows)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0 [2024-05-09] (Spotify AB) [Startup Task]
TranslucentTB -> C:\Program Files\WindowsApps\28017CharlesMilette.TranslucentTB_2024.1.0.0_x64__v826wp6bftszj [2024-03-09] (Charles Milette) [Startup Task]
WinAppRuntime.Main.1.3 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.3_3000.934.1904.0_x64__8wekyb3d8bbwe [2023-08-27] (Microsoft Corp.)
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-20] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-20] (Microsoft Corp.)
Windows App Runtime DDLM 3000.882.2207.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.3000.882.2207.0-x6_3000.882.2207.0_x64__8wekyb3d8bbwe [2023-09-11] (Microsoft Corporation)
Windows App Runtime DDLM 3000.882.2207.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.3000.882.2207.0-x8_3000.882.2207.0_x86__8wekyb3d8bbwe [2023-09-11] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x6_4000.1082.2259.0_x64__8wekyb3d8bbwe [2024-04-20] (Microsoft Corporation)
Windows App Runtime DDLM 4000.1082.2259.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.1082.2259.0-x8_4000.1082.2259.0_x86__8wekyb3d8bbwe [2024-04-20] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-01-12] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-01-12] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-16] (Microsoft Corporation)
WinRAR -> D:\Program Files (x86) [2023-03-07] (win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-2122109008-1014232456-2694980413-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> "C:\Program Files\NordVPN\NordVPN.exe" -ToastActivated => Pas de fichier
CustomCLSID: HKU\S-1-5-21-2122109008-1014232456-2694980413-1001_Classes\CLSID\{6ca9ad9c-a1ed-01c2-7a24-01395a90424e}\localserver32 -> D:\Program Files (x86)\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÃA -> Voicemod)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ OptaneIconOverlay] -> {A3AF6F6C-8BED-3D93-8B5D-33427B5D38E9} => C:\Windows\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_357b728ba88fb99a\OptaneShellExt.dll [2022-12-18] (Intel Corporation -> )
ContextMenuHandlers1: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.18.255.1\mc-ctxmnu.dll [2024-05-09] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2022-10-01] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2022-10-01] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-02-27] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers3: [OptaneContextMenu] -> {AD7EBB13-617D-3270-8FA8-46583499C4FB} => C:\Windows\System32\DriverStore\FileRepository\iastorpinningcomponent.inf_amd64_357b728ba88fb99a\OptaneShellExt.dll [2022-12-18] (Intel Corporation -> )
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\lolip\AppData\Local\MEGAsync\ShellExtX64.dll [2022-09-29] (Mega Limited -> )
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_31dab972145ae5a9\nvshext.dll [2023-11-30] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-02-27] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.18.255.1\mc-ctxmnu.dll [2024-05-09] (McAfee, LLC -> McAfee, LLC)
==================== Codecs (Avec liste blanche) ====================
==================== Raccourcis & WMI ========================
==================== Modules chargés (Avec liste blanche) =============
==================== Alternate Data Streams (Avec liste blanche) ========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite.lnk:073005E2F7 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Lite.lnk:35EB56C735 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk:C5D586BE93 [3442]
AlternateDataStreams: C:\Users\lolip\OneDrive\Desktop\miles-morales-prowler.gif:shield [158]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [10040]
==================== Mode sans échec (Avec liste blanche) ==================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver"
==================== Association (Avec liste blanche) =================
==================== Internet Explorer (Avec liste blanche) ==========
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre-1.8\bin\ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre-1.8\bin\jp2ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation)
==================== Hosts contenu: =========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2022-05-07 07:24 - 2024-02-27 19:21 - 000002222 _____ C:\Windows\system32\drivers\etc\hosts
0.0.0.0 virustotal.com
0.0.0.0 www.virustotal.com
0.0.0.0 avast.com
0.0.0.0 www.avast.com
0.0.0.0 totalav.com
0.0.0.0 www.totalav.com
0.0.0.0 scanguard.com
0.0.0.0 www.scanguard.com
0.0.0.0 totaladblock.com
0.0.0.0 www.totaladblock.com
0.0.0.0 pcprotect.com
0.0.0.0 www.pcprotect.com
0.0.0.0 mcafee.com
0.0.0.0 www.mcafee.com
0.0.0.0 bitdefender.com
0.0.0.0 www.bitdefender.com
0.0.0.0 us.norton.com
0.0.0.0 www.us.norton.com
0.0.0.0 avg.com
0.0.0.0 www.avg.com
0.0.0.0 pandasecurity.com
0.0.0.0 www.pandasecurity.com
0.0.0.0 avira.com
0.0.0.0 www.avira.com
0.0.0.0 norton.com
0.0.0.0 www.norton.com
0.0.0.0 eset.com
0.0.0.0 www.eset.com
0.0.0.0 zillya.com
0.0.0.0 www.zillya.com
2023-07-09 14:21 - 2023-09-04 14:58 - 000000435 _____ C:\Windows\system32\drivers\etc\hosts.ics
==================== Autres zones ===========================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\lolip\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
HKLM\...\StartupApproved\StartupFolder: => "RocketDock.lnk"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\StartupFolder: => "RocketDock.lnk"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_2C91D863338E0E69C9060A122A0DD036"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "ut"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Voicemod"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "Viewndow"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2122109008-1014232456-2694980413-1001\...\StartupApproved\Run: => "utweb"
==================== RèglesPare-feu (Avec liste blanche) ================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{AE75C0D2-1727-4E03-A7FF-A23B4DA06EF2}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{82A444E5-9531-4776-ACB6-B96A5B5FACA0}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3A2BB58A-CC51-4692-B508-A31F21C4FFB8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{A77D466D-5194-488F-9BB2-D9A32C7678A3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{52180AEC-9E92-49CA-A035-99A72CA2EFEB}C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe => Pas de fichier
FirewallRules: [UDP Query User{39B52E74-87D2-47C7-9BC5-85AD35D28118}C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.205.1006.0_x86__zpdnekdrzrea0\spotify.exe => Pas de fichier
FirewallRules: [{7A6E8225-EFBE-4D3F-9EBE-010DEE922528}] => (Allow) D:\SteamLibrary\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [Fichier non signé]
FirewallRules: [{859AFB3B-3C81-40FE-96D3-F17C24306F24}] => (Allow) D:\SteamLibrary\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [Fichier non signé]
FirewallRules: [{B96CBF59-4E8D-4303-88DA-D18630592644}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6BA1E79E-D3F8-4EAD-8CC6-FB76851B4A76}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{62CE933E-19C5-47C5-8230-7DF337FD202B}] => (Allow) D:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [{DB0BD930-8976-4A2E-9D42-AE9B8E444371}] => (Allow) D:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe () [Fichier non signé]
FirewallRules: [TCP Query User{C7B51842-FE4D-4F97-B399-A38D0081854C}D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe] => (Allow) D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe (Facepunch Studios Ltd) [Fichier non signé]
FirewallRules: [UDP Query User{6D1D2D57-29E7-4CE0-8F92-F12676BC1AE3}D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe] => (Allow) D:\steamlibrary\steamapps\common\garrysmod\bin\win64\gmod.exe (Facepunch Studios Ltd) [Fichier non signé]
FirewallRules: [TCP Query User{2456DE99-5959-4AF3-9C94-603B78DC9B1A}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe
FirewallRules: [UDP Query User{C780A3FF-6122-4DC7-9667-D004C5CB71D7}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\javaw.exe
FirewallRules: [TCP Query User{B426BEF3-91E1-4314-9F8E-066F76462AF4}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{B7BF0E8D-6802-43C5-AAC0-B3FB1763CF4A}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [TCP Query User{EC019371-7ECD-43FC-B85E-1DF0DA7811A7}C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{82B1B73A-CACB-472D-95A5-30E95B1EFE47}C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{2CF4C9CD-C79F-44D8-B7C4-B184452C2915}C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe => Pas de fichier
FirewallRules: [UDP Query User{A7994C81-AD2B-4728-B01D-FF3FE3BAB358}C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_361\bin\javaw.exe => Pas de fichier
FirewallRules: [TCP Query User{4431BCDB-C92A-4F64-B2D2-277D041945BA}C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{09AAFBB2-1174-4CA8-9D32-6D1D19379484}C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\lolip\onedrive\desktop\all\minecraft\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{87B86997-DEB9-4F4D-BC05-49D4694460AE}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{D7E036A5-DDD0-484E-8880-B97B3FAB4172}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{0BADE342-CFAE-47F6-9DB1-A916DEB6AE53}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe => Pas de fichier
FirewallRules: [UDP Query User{72B73D8F-8ABD-4BAD-9FF3-EA1188ECB77B}C:\riot games\riot client\riotclientservices.exe] => (Allow) C:\riot games\riot client\riotclientservices.exe => Pas de fichier
FirewallRules: [TCP Query User{56568EEC-744B-44F5-BDBA-EBCD37025373}C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe => Pas de fichier
FirewallRules: [UDP Query User{369D983E-9042-4E39-B73B-E860CC6DFBC2}C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\lolip\appdata\local\discord\app-1.0.9013\discord.exe => Pas de fichier
FirewallRules: [TCP Query User{16BB9128-FC54-49FC-816F-CF5D7700FB8B}C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe] => (Allow) C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{3064677F-2B36-4F5C-B28D-87E881664074}C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe] => (Allow) C:\users\lolip\onedrive\desktop\onlyup! (v05072023) by stg gege\onlyup\binaries\win64\onlyup-win64-shipping.exe => Pas de fichier
FirewallRules: [TCP Query User{468AD162-7DCC-453D-A47E-BF9ACD44B153}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe
FirewallRules: [UDP Query User{C4358539-EB4A-4404-88BF-A604462998F0}C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\lolip\curseforge\minecraft\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe
FirewallRules: [{6100605F-84BB-44DD-BD5C-7F063CDCE845}] => (Allow) D:\SteamLibrary\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [{59379774-E907-4A41-9F57-E1423B5483EB}] => (Allow) D:\SteamLibrary\steamapps\common\Among Us\Among Us.exe () [Fichier non signé]
FirewallRules: [TCP Query User{512D21CC-3E33-4372-8A10-47E13A76472F}C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe] => (Allow) C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe => Pas de fichier
FirewallRules: [UDP Query User{21380894-1D53-4F22-A355-D93444748BE8}C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe] => (Allow) C:\users\lolip\appdata\local\programs\bettercrewlink\better-crewlink.exe => Pas de fichier
FirewallRules: [TCP Query User{38A6229A-8A1B-4F08-91DE-962530A207EC}C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [UDP Query User{8F79C1D4-22B5-488A-A4F1-05BEA2830482}C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\ia voice changer\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [TCP Query User{98A56BDF-8BCF-4247-9FEF-AA6B98B976AB}C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [UDP Query User{AB9B5C88-F999-4DFA-8B0D-98AA14590FAB}C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\lolip\onedrive\desktop\mmvcserversio_win_onnxdirectml-cuda_v.1.5.3.13\mmvcserversio\mmvcserversio.exe => Pas de fichier
FirewallRules: [TCP Query User{21232A92-1108-43D8-9817-E9DDF17EE1F5}C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe] => (Allow) C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe => Pas de fichier
FirewallRules: [UDP Query User{449B1588-D444-445A-9875-DFBA62973600}C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe] => (Allow) C:\chronos releases\fae farm\faefarm\binaries\win64\faefarmclient-win64-shipping.exe => Pas de fichier
FirewallRules: [{B3591466-B806-44BE-95A9-E72FD128B37E}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Forever\We Were Here Forever.exe () [Fichier non signé]
FirewallRules: [{0A297F5C-9A8D-4A36-825D-79E4A5120D86}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Forever\We Were Here Forever.exe () [Fichier non signé]
FirewallRules: [TCP Query User{BB2F97F2-4B1D-4FEF-ACE8-79A54C8F571C}C:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) C:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{75022380-86F6-49D8-8382-DFC034BEAF17}C:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) C:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [TCP Query User{1DD42ECA-DFD1-440B-A36F-F47D6D88BA73}D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{2BBC521D-E09A-4A51-992F-920F16802DF7}D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\program files (x86)\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{7079255E-B1F6-46D8-A0EB-226DA124D85A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F97E6E52-E8F8-40F4-A781-06F51525FA3F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{217B9E74-7A50-4584-A509-A49B4E708F2C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{96BC8556-A4C1-423B-8D51-35E8320B9BFE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{496DE63F-0B4A-47F2-9520-31C7B25E3848}] => (Allow) C:\Program Files (x86)\Sony\PS Remote Play\RemotePlay.exe (Sony Interactive Entertainment Inc. -> Sony Interactive Entertainment Inc.)
FirewallRules: [{6E178C1E-BA51-4536-A07F-6637658F3A8D}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Pas de fichier
FirewallRules: [{03DEEDA7-15CD-48EE-BDA3-166A6238BA41}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Pas de fichier
FirewallRules: [{1479F839-4CE2-4651-9ED5-8D1B2EDB6F21}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => Pas de fichier
FirewallRules: [{8B56C2C5-C947-4C27-BE01-4DAAEB7DFF3B}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe => Pas de fichier
FirewallRules: [TCP Query User{11CDDE90-0605-490C-8140-155FE76260B2}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{F79D43B9-76A8-49AC-A206-2B09C532A634}C:\program files\rockstar games\grand theft auto v\gta5.exe] => (Allow) C:\program files\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{04045D1F-6932-4CF0-A665-761A0D3C2C37}] => (Allow) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{71740631-243A-4E3E-B24A-B0A3DE1D21E0}] => (Allow) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{B0A7CDB6-E9F8-4724-B0D4-53B7D5A6EEBD}] => (Block) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{1D7674F0-409E-451F-A719-741C767DCE4D}] => (Block) D:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier
FirewallRules: [{9F1FA718-4C20-4FAE-84FD-2875E9545A83}] => (Allow) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{A24EB2F5-2BCE-4174-8E63-F56F88097A86}] => (Allow) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{1D1DEC88-B5EA-4B40-9FFD-80175D6B3276}] => (Block) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{B6DFED98-34AC-48FE-A8CD-B6CF6C6CCE74}] => (Block) D:\Program Files (x86)\Overwolf\0.240.0.6\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{75B1C6AC-B9BA-45E1-A3D8-6FF9C5CBC9F5}] => (Allow) D:\Program Files (x86)\Overwolf\0.248.120.19\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{FEBFF74E-FE2A-4D86-BE5F-D78EFC93665A}] => (Allow) D:\Program Files (x86)\Overwolf\0.248.120.19\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{D185D3A1-1EDC-4420-835A-DC6C559DFD75}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.80\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{730D2134-F656-4FC2-9134-F4FDB43927CB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{95C5F438-25D5-47C0-9E59-F92455F0DBD5}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FBA66E7C-F67F-4512-8F6F-5F330FEB6096}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C724250B-5BC1-47F6-AF4F-AA2A1E347239}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8174F88B-65EB-44E9-AB66-64E6955F4FB3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{02532DDE-CA0D-42E6-B48B-24FD33C5E884}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4DC0B2AE-9016-42C9-9D3B-650BE70396F1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A215364C-7CD1-4093-8213-64FB90597621}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{51CEACAA-6767-4BF9-B08C-29FB3B742EAB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{5C63B8C8-59DA-4FB4-8684-C1EB770900DE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DE1547EA-19AE-4B87-99E3-D8561D300B67}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{97C91F71-D111-418C-A5F3-06E49B63FD92}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.237.701.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{ECDE4710-37AE-4517-9013-12435FE27C25}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{169A7F61-F9E8-42F9-80BB-6FD01F2E89EE}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Too\We Were Here Too.exe () [Fichier non signé]
FirewallRules: [{3D6FCF50-1E0A-4E6B-AD46-F8876FF52636}] => (Allow) D:\SteamLibrary\steamapps\common\We Were Here Too\We Were Here Too.exe () [Fichier non signé]
FirewallRules: [{1D0B1E25-9D27-4D97-B2A6-CF983ADD3C23}] => (Allow) D:\Program Files (x86)\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÃA -> Voicemod)
FirewallRules: [{ABCA53D1-AA3D-4E24-A44A-ED4B0583D76F}] => (Allow) D:\Program Files (x86)\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÃA -> Voicemod)
==================== Points de restauration =========================
23-03-2024 11:14:57 Windows Update
23-03-2024 11:15:05 Windows Update
28-03-2024 20:14:16 Windows Update
28-03-2024 20:14:22 Windows Update
02-04-2024 20:32:34 Windows Update
20-04-2024 12:41:36 Windows Update
22-04-2024 18:31:59 Programme dâinstallation pour les modules Windows
27-04-2024 10:48:00 Windows Update
27-04-2024 10:48:02 Windows Update
27-04-2024 10:48:04 Windows Update
08-05-2024 15:52:49 Windows Update
08-05-2024 15:52:51 Windows Update
==================== Ãléments en erreur du Gestionnaire de périphériques ============
==================== Erreurs du Journal des événements: ========================
Erreurs Application:
==================
Error: (05/08/2024 10:56:02 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de lâinterrogation de lâinterface IVssWriterCallback. hr = 0x80070005, Accès refusé..Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.
Opération :
Données du rédacteur en cours de collecte
Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID dâinstance du rédacteur: {ca431d62-5d29-44b8-85a6-91b94ccc15bc}
Error: (05/08/2024 03:50:44 PM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT)
Description: Nom de lâapplication défaillante SupportAssistSoftwareDiags.exe, version : 4.0.0.51819, horodatage : 0x64b073ea
Nom du module défaillant : KERNELBASE.dll, version : 10.0.22621.3447, horodatage : 0x3d876852
Code dâexception : 0xe0434352
Décalage dâerreur : 0x00000000000653ac
ID du processus défaillant : 0x0x5c4
Heure de début de lâapplication défaillante : 0x0x1daa14dfa6b4912
Chemin dâaccès de lâapplication défaillante : C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistSoftwareDiags.exe
Chemin dâaccès du module défaillant: C:\Windows\System32\KERNELBASE.dll
ID de rapport : 9692d250-fa0f-4145-bd79-1376a6c1b460
Nom complet du package défaillant :
ID de lâapplication relative au package défaillant :
Error: (05/08/2024 03:50:44 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application: SupportAssistSoftwareDiags.exe
CoreCLR Version: 6.0.2824.12007
.NET Version: 6.0.28
Description: The process was terminated due to an unhandled exception.
Exception Info: System.ObjectDisposedException: Safe handle has been closed.
Object name: 'SafeHandle'.
at System.Runtime.InteropServices.SafeHandle.DangerousAddRef(Boolean& success)
at Interop.Kernel32.SetEvent(SafeWaitHandle handle)
at System.Threading.EventWaitHandle.Set()
at Dell.Client.Framework.Common.PluginManagerBase.Dispose(Boolean disposing)
at Dell.Client.Framework.Common.PluginManagerBase.Dispose()
at Dell.Client.Framework.Agent.Agent.Dispose(Boolean disposing)
at Dell.Client.Framework.Agent.Agent.Dispose()
at Dell.SupportAssist.Client.Agent.SoftwareDiags.SoftwareDiagnosticsSubAgent.DisposeAgent()
at Dell.SupportAssist.Client.Agent.SoftwareDiags.Program.CurrentDomain_ProcessExit(Object sender, EventArgs e)
at System.AppContext.OnProcessExit()
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de lâappel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours..
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.]
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de lâappel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours..
Error: (04/23/2024 08:19:20 PM) (Source: VSS) (EventID: 13) (User: )
Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.]
Error: (04/23/2024 08:18:51 PM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT)
Description: Nom de lâapplication défaillante mc-fw-host.exe, version : 1.17.166.0, horodatage : 0x65f65d73
Nom du module défaillant : ntdll.dll, version : 10.0.22621.3374, horodatage : 0xeae8eecc
Code dâexception : 0xc0000374
Décalage dâerreur : 0x000000000010c169
ID du processus défaillant : 0x0x13a4
Heure de début de lâapplication défaillante : 0x0x1da95aa87cd8996
Chemin dâaccès de lâapplication défaillante : \\?\C:\Program Files\McAfee\WPS\1.17.226.1\mc-fw-host.exe
Chemin dâaccès du module défaillant: C:\Windows\SYSTEM32\ntdll.dll
ID de rapport : 5ff33d1f-eba3-497f-af4f-d5d2239cec7b
Nom complet du package défaillant :
ID de lâapplication relative au package défaillant :
Erreurs système:
=============
Error: (05/09/2024 04:46:55 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Le service McAfee Maintenance Service sâest arrêté avec lâerreur spécifique au service suivante :
Le module spécifié est introuvable.
Error: (05/09/2024 03:01:20 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur Windows.Media.Capture.Internal.AppCaptureShell ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (05/08/2024 04:06:55 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur Windows.Media.Capture.Internal.AppCaptureShell ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (05/08/2024 03:53:36 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Ãchec de lâinstallation : lâinstallation de la mise à jour suivante a échoue avec lâerreur 0x80073d02 : 9NMPJ99VJBWV-Microsoft.YourPhone.
Error: (05/08/2024 03:52:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Dell Data Vault Processor sâest terminé de manière inattendue. Ceci sâest produit 1 fois. Lâaction corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
Error: (04/28/2024 01:05:18 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (04/28/2024 12:24:54 PM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur Windows.Media.Capture.Internal.AppCaptureShell ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Error: (04/27/2024 11:12:06 AM) (Source: DCOM) (EventID: 10010) (User: KILLIAN)
Description: Le serveur {FD06603A-2BDF-4BB1-B7DF-5DC68F353601} ne sâest pas enregistré sur DCOM avant la fin du temps imparti.
Windows Defender:
================
Date: 2022-11-23 18:26:58
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik.U&threatid=2147835657&enterprise=0
Nom : TrojanClicker:Win32/Doplik.U
ID : 2147835657
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : containerfile:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe; file:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe->(ZipSfx)->start.bin; process:_pid:32916,ProcessStart:133136977152618719; process:_pid:40108,ProcessStart:133136977241333863; process:_pid:40136,ProcessStart:133136977241582965; process:_pid:40272,ProcessStart:133136977242368295; process:_pid:40284,ProcessStart:133136977242422520; process:_pid:40348,ProcessStart:133136977242698781; process:_pid:40428,ProcessStart:133136977243035678; regkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Entertainment; runkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\Entertainment
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe
Version de la veille de sécurité : AV: 1.379.813.0, AS: 1.379.813.0, NIS: 1.379.813.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Date: 2022-11-23 18:23:15
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik.U&threatid=2147835657&enterprise=0
Nom : TrojanClicker:Win32/Doplik.U
ID : 2147835657
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : containerfile:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe; file:_C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe->(ZipSfx)->start.bin; process:_pid:32916,ProcessStart:133136977152618719; process:_pid:40108,ProcessStart:133136977241333863; process:_pid:40136,ProcessStart:133136977241582965; process:_pid:40272,ProcessStart:133136977242368295; process:_pid:40284,ProcessStart:133136977242422520; process:_pid:40348,ProcessStart:133136977242698781; process:_pid:40428,ProcessStart:133136977243035678
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\Entertainment\Entertainment.exe
Version de la veille de sécurité : AV: 1.379.813.0, AS: 1.379.813.0, NIS: 1.379.813.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Date: 2022-11-08 18:43:59
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik&threatid=2147822417&enterprise=0
Nom : TrojanClicker:Win32/Doplik
ID : 2147822417
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : file:_C:\Users\lolip\AppData\Roaming\gallery\gallery.exe; process:_pid:16756,ProcessStart:133124029853629714; process:_pid:21828,ProcessStart:133124029853469783; process:_pid:2292,ProcessStart:133124029852579867; process:_pid:40068,ProcessStart:133124029853946138; process:_pid:54884,ProcessStart:133124029850751303; process:_pid:8480,ProcessStart:133124029853400315; regkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\gallery; runkey:_HKCU@S-1-5-21-2122109008-1014232456-2694980413-1001\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\\gallery
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\gallery\gallery.exe
Version de la veille de sécurité : AV: 1.379.37.0, AS: 1.379.37.0, NIS: 1.379.37.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Date: 2022-11-08 18:43:36
Description:
Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus dâinformations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanClicker:Win32/Doplik&threatid=2147822417&enterprise=0
Nom : TrojanClicker:Win32/Doplik
ID : 2147822417
Gravité : Grave
Catégorie : Cheval de Troie avec fonction de notification dâintrusion
Chemin : file:_C:\Users\lolip\AppData\Roaming\gallery\gallery.exe; process:_pid:16756,ProcessStart:133124029853629714; process:_pid:21828,ProcessStart:133124029853469783; process:_pid:2292,ProcessStart:133124029852579867; process:_pid:40068,ProcessStart:133124029853946138; process:_pid:54884,ProcessStart:133124029850751303; process:_pid:8480,ProcessStart:133124029853400315
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Système
Utilisateur : AUTORITE NT\Système
Nom du processus : C:\Users\lolip\AppData\Roaming\gallery\gallery.exe
Version de la veille de sécurité : AV: 1.379.37.0, AS: 1.379.37.0, NIS: 1.379.37.0
Version du moteur : AM: 1.1.19800.4, NIS: 1.1.19800.4
Event[0]
Date: 2023-10-29 18:33:47
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.399.1352.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23090.2007
Code dâerreur : 0x8024001e
Description de lâerreur : Un problème inattendu sâest produit lors de la vérification des mises à jour. Pour plus dâinformations sur lâinstallation ou la résolution des problèmes de mise à jour, voir Aide et support.
Date: 2023-10-13 22:15:34
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.399.545.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23090.2007
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
Date: 2023-10-13 22:15:34
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.399.545.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23090.2007
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
Date: 2023-09-04 09:36:12
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.397.312.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23080.2005
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
Date: 2023-09-04 09:36:12
Description:
Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité.
Nouvelle version de la veille de sécurité :
Version précédente de la veille de sécurité : 1.397.312.0
Source de mise à jour : Serveur Microsoft Update
Type de veille de sécurité : Anti-virus
Type de mise à jour : Complet
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur :
Version précédente du moteur : 1.1.23080.2005
Code dâerreur : 0x80070102
Description de lâerreur : Dépassement du délai dâattente.
CodeIntegrity:
===============
Date: 2024-05-10 18:08:58
Description:
Code Integrity determined that a process (\Device\HarddiskVolume8\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume8\Program Files\McAfee\WPS\1.18.255.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements.
==================== Infos Mémoire ===========================
BIOS: Alienware 1.0.26 11/22/2022
Carte mère: Alienware 0R3FWM
Processeur: Intel(R) Core(TM) i7-9700K CPU @ 3.60GHz
Pourcentage de mémoire utilisée: 48%
Mémoire physique - RAM - totale: 16206.5 MB
Mémoire physique - RAM - disponible: 8277.64 MB
Mémoire virtuelle totale: 22606.5 MB
Mémoire virtuelle disponible: 11093.41 MB
==================== Lecteurs ================================
Drive c: (SSD Nvme) (Fixed) (Total:930.43 GB) (Free:497.69 GB) (Model: NVMe CT1000P3PSSD8) NTFS
Drive d: (SSHD Kiki) (Fixed) (Total:899.67 GB) (Free:605.25 GB) (Model: ST1000DX001-SSHD-8GB) NTFS
Drive e: (SSD) (Fixed) (Total:218.9 GB) (Free:207.14 GB) (Model: NVMe KXG60ZNV256G NVM) NTFS
\\?\Volume{25924673-5702-47c3-aeff-e1560bd09058}\ (WinRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.39 GB) NTFS
\\?\Volume{267cc85b-81c5-4898-a7cc-e6c9060c079b}\ (LENOVO_PART) (Fixed) (Total:30 GB) (Free:16.48 GB) NTFS
\\?\Volume{f9b33c9c-5d1a-495e-5d58-079c14615b71}\ (DELLSUPPORT) (Fixed) (Total:1.06 GB) (Free:1.05 GB) NTFS
\\?\Volume{5edf0236-216d-42fe-b77c-b3bfc1d69575}\ (WINRETOOLS) (Fixed) (Total:0.97 GB) (Free:0.47 GB) NTFS
\\?\Volume{129a1a2d-6212-4047-b8ee-d43c639eecfc}\ (Image) (Fixed) (Total:16.64 GB) (Free:0.11 GB) NTFS
\\?\Volume{fd4b88ef-d0a4-4207-9436-dd2c83a90a5f}\ (DELLSUPPORT) (Fixed) (Total:1.19 GB) (Free:0.19 GB) NTFS
\\?\Volume{461d777b-6db7-445b-8560-5a4b2a1fc14f}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32
\\?\Volume{6ed903ef-4393-425e-9704-33f51f348834}\ (ESP) (Fixed) (Total:0.63 GB) (Free:0.55 GB) FAT32
==================== MBR & Table des partitions ====================
==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: C29BAE07)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: CA34382F)
Partition: GPT.
==========================================================
Disk: 2 (Size: 238.5 GB) (Disk ID: 7B200E1B)
Partition: GPT.
==================== Fin de Addition.txt =======================