Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-08-2016 01
Exécuté par William (2016-08-12 16:52:45)
Exécuté depuis C:\Users\William\Desktop
Windows 10 Home Version 1511 (X64) (2015-12-16 14:59:41)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-3679993256-793984374-2723091592-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3679993256-793984374-2723091592-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3679993256-793984374-2723091592-1003 - Limited - Enabled)
Invité (S-1-5-21-3679993256-793984374-2723091592-501 - Limited - Disabled)
William (S-1-5-21-3679993256-793984374-2723091592-1001 - Administrator - Enabled) => C:\Users\William

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371}
AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 15.017.20053 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.209 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-3679993256-793984374-2723091592-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Apple Application Support (32-bit) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.)
Apple Application Support (64-bit) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.)
ASUS Gaming Center (HKLM-x32\...\{23C8A788-4790-4F3C-B103-0ACC7D9DC5BE}) (Version: 1.0.2 - ASUS)
ASUS GIFTBOX Desktop (HKLM-x32\...\{4701E5AB-AF91-4D40-8F18-358CC80E4E5B}) (Version: 1.1.6 - ASUS)
ASUS GPU Tweak (HKLM\...\{7353D4C7-43E9-46A3-A1FF-79DD94A386F2}) (Version: 1.0.10 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.1 - ASUS)
ASUS ROG Gaming Mouse (HKLM-x32\...\{3B9E171F-A955-4834-B877-447C0A437260}) (Version: 2.00.026 - ASUS)
ASUS ROG MacroKey (HKLM-x32\...\{348022C5-F497-4333-AFEE-208F22F169F2}_is1) (Version: 1.0.0.24 - )
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.02.0001 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.9 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0036 - ASUS)
Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team)
Battle Brothers (HKLM\...\Steam App 365360) (Version:  - Overhype Studios)
Battle for Wesnoth 1.12.2 (HKLM-x32\...\Battle for Wesnoth 1.12.2) (Version: 1.12.2 - )
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.26.1436 - Bitdefender)
Bitdefender Antivirus Plus 2016 (HKLM\...\Bitdefender) (Version: 20.0.28.1478 - Bitdefender)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-J625DW (HKLM-x32\...\{A1B36B88-AF90-43A3-8906-6DBEE89B4FBD}) (Version: 1.1.6.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 5.20 - Piriform)
Classic Shell (HKLM\...\{7C129CF8-199F-4269-AAEE-60B5D8D716E2}) (Version: 4.2.1 - IvoSoft)
Device Setup (HKLM-x32\...\{1F07F2C7-596F-4F34-B805-2C61A3E50E5A}) (Version: 1.0.18 - ASUSTek Computer Inc.)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-3679993256-793984374-2723091592-1001\...\Discord) (Version: 0.0.295 - Hammer & Chisel, Inc.)
Driver Talent (HKLM-x32\...\{29FE44D7-BC89-4188-8B0E-F6BA073C15A5}_is1) (Version: 6.4.41.134 - OSToto Co., Ltd.)
Dust: An Elysian Tail (HKLM\...\Steam App 236090) (Version:  - Humble Hearts LLC)
ELAN Touchpad 11.5.19.2_X64_WHQL (HKLM\...\Elantech) (Version: 11.5.19.2 - ELAN Microelectronic Corp.)
Genesys USB Mass Storage Device (HKLM-x32\...\{959B7F35-2819-40C5-A0CD-3C53B5FCC935}) (Version: 4.3.1.1 - Genesys Logic)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM\...\Steam App 271590) (Version:  - Rockstar North)
Grim Dawn (HKLM\...\Steam App 219990) (Version:  - Crate Entertainment)
Hearts of Iron IV (HKLM\...\Steam App 394360) (Version:  - Paradox Development Studios)
HexChat (HKLM-x32\...\HexChat_is1) (Version: 2.10.2 - HexChat)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4300 - Intel Corporation)
iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
LAV Filters 0.63.0 (HKLM-x32\...\lavfilters_is1) (Version: 0.63.0 - Hendrik Leppkes)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft Office 365 ProPlus - fr-fr (HKLM\...\O365ProPlusRetail - fr-fr) (Version: 15.0.4841.1002 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 47.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 fr)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
MyDefrag v4.3.1 (HKLM\...\MyDefrag v4.3.1_is1) (Version: 4.0.0.0 - J.C. Kessels)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.23 - Black Tree Gaming)
NVIDIA GeForce Experience 2.11.3.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.3.5 - NVIDIA Corporation)
NVIDIA Graphics Driver 368.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 368.22 - NVIDIA Corporation)
NVIDIA PhysX System Software 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4841.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4841.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4841.1002 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.3.5 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM\...\Steam App 8930) (Version:  - Firaxis Games)
Sid Meier's Civilization V (HKLM-x32\...\steam app 8930) (Version:  - 2K Games, Inc.)
Skype™ 7.25 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.25.106 - Skype Technologies S.A.)
Skyrim Script Extender (SKSE) (HKLM\...\Steam App 365720) (Version:  - The SKSE Team)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version:  - )
Starbound (HKLM\...\Steam App 211820) (Version:  - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stellaris (HKLM\...\Steam App 281990) (Version:  - Paradox Development Studio)
Sword Coast Legends (HKLM\...\Steam App 325600) (Version:  - n-Space)
TeamViewer 10 Host (HKLM-x32\...\TeamViewer) (Version: 10.0.47484 - TeamViewer)
Terraria (HKLM\...\Steam App 105600) (Version:  - Re-Logic)
The Witcher 3: Wild Hunt (HKLM\...\Steam App 292030) (Version:  - CD PROJEKT RED)
Thunderbolt(TM) Software (HKLM\...\{BED2816F-D47A-41DA-AFCF-44E1B257C368}) (Version: 2.0.4.250 - Intel(R) Corporation)
Ubiquiti UniFi (remove only) (HKLM-x32\...\Ubiquiti UniFi) (Version:  - )
Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.)
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.1.11.399 - ASUS Cloud Corporation)
WIDCOMM Bluetooth Software (HKLM\...\{C6D9ED03-6FCF-4410-9CB7-45CA285F9E11}) (Version: 12.0.0.9550 - Broadcom Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
WinRAR 5.21 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-3679993256-793984374-2723091592-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\William\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\FileCoAuth.exe (Microsoft Corporation)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {040D1095-3F13-45C2-A040-7D7DC27F92A4} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-06-03] ()
Task: {0720F6FD-BA18-4C7B-8D6E-8F30F26CDF61} - System32\Tasks\MyDefrag v4.3.1 Monthly => C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticMonthly.MyD [2010-05-21] ()
Task: {0A2B0929-F84C-48EA-A7A0-987C31423865} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {0CF20AF4-4DDF-4836-B140-0B3576643536} - System32\Tasks\UMonitor Task => C:\Windows\SysWOW64\UMonit64.exe [2014-02-25] ()
Task: {0F378827-1F4F-4DF3-B742-A5013E90F051} - System32\Tasks\Gaming Center => C:\Program Files (x86)\ASUS\ASUS Gaming Center\vivokey.exe [2014-04-30] (ASUSTek Computer Inc.)
Task: {0FFB38AA-ABAC-4863-BA61-8E27E7B8CD4A} - System32\Tasks\MyDefrag v4.3.1 Daily => C:\Program Files\MyDefrag v4.3.1\Scripts\AutomaticDaily.MyD [2010-05-21] ()
Task: {10605BE7-4029-4587-A333-D8455BAD688D} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2014-06-12] (Realtek Semiconductor)
Task: {1E4080B5-C7EF-47D7-B1D6-11D6504A9F79} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2014-06-04] (ASUS)
Task: {2F03511A-2BCB-4CF8-B04A-59804C9ACAEF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-06-25] (Adobe Systems Incorporated)
Task: {31887739-0448-44D1-A91D-262BFC82AAC9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-06-14] (Microsoft Corporation)
Task: {32046472-62DC-4A82-87D2-538B91F66E8A} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {34ABDD7D-5EC9-4285-A962-66E3671FBF55} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2016-06-08] (ASUSTek Computer Inc.)
Task: {3D7E9E78-EBD2-4EA2-87B7-9096F8446F2D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION
Task: {3FA4CBBC-9EF0-471D-9482-F1864457B387} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION
Task: {46801013-6527-4E73-84C5-7D308236E5DE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-06-14] (Microsoft Corporation)
Task: {4B42F482-93DF-42F4-803C-F2822D17B1DB} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION
Task: {4FE5C03D-EADA-4946-9FBF-DBDBC8C9E2C1} - System32\Tasks\ASUS GPUTweak => C:\Program Files\ASUS\ASUS GPU Tweak\GPUTweak.exe [2014-04-22] (ASUS)
Task: {54F8646A-8153-43FC-91A5-E24E0BBC5B43} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION
Task: {56D23B0F-1CCC-4BC0-8CEA-7033B4E7DD8B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-27] (Microsoft Corporation)
Task: {7AB7FF98-3053-423F-B1E3-A0EEFE146D17} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => Thunderbolt.exe
Task: {8A1B5A3A-70D4-44E6-ACA2-D196BF7DE6EF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION
Task: {8A9DB9CC-DB5D-4FED-9389-82B0AAFF56A2} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-07-13] (Adobe Systems Incorporated)
Task: {8EA9F12C-2006-4478-BD73-B1177FA26821} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-02] (Google Inc.)
Task: {93621C93-87D1-4890-8ECE-DF75E8D3660B} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-09] (Microsoft Corporation)
Task: {9630648D-DBFC-41EF-8D2E-D78FFAFCE593} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-06-03] ()
Task: {98250162-C2FD-4A2A-BC45-020A79624FB4} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {9B8CFBFA-3287-4CF1-BF35-A272263D7856} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-02] (Google Inc.)
Task: {9C89141D-0CB0-446B-84AD-B598C4E08AB7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-27] (Apple Inc.)
Task: {9EE7C0A2-DE40-4981-B1B3-E5F9BDD9041C} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2014-01-14] (ASUSTek Computer Inc.)
Task: {A25E3890-A8E3-4BCC-9D7F-307F7087C0B2} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION
Task: {B72BD9B1-FB40-47F8-BCAF-8FA2193C6113} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => start ThunderboltService
Task: {BF4C9840-74FC-4C84-9FA0-8D935ECF5075} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => Thunderbolt.exe
Task: {C0CB48A0-5CBD-4CB5-9ED5-DD088C76F029} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-06-03] ()
Task: {CE8CE62D-8DC6-480C-B2BF-B9C3E10C3F16} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2016-06-14] (Microsoft Corporation)
Task: {CFED016F-4701-4E9A-93DB-55C2869D9DA8} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {D6DDF582-BCD4-4DDC-9B05-80FB58181C91} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2014-06-13] (Realtek Semiconductor)
Task: {E6576298-1EE6-4D94-8EA7-6FC824EBDE27} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {F164EF1C-D74B-43C2-845E-01B8DBEBAA82} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-04-18] (Bitdefender)
Task: {F58FFBD4-14C7-4F07-833C-DF834E6E03DF} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => tbtsvc.exe
Task: {F9F620C1-3C1B-4AE9-A6E6-CDDD8531CE5D} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {FAF77E8F-56EA-4EA6-A326-C63FEC3C4A68} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-07-13] (Piriform Ltd)
Task: {FF4D69F0-7BBC-4268-8E01-70BD3693E006} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2014-03-27] (ASUSTek Computer Inc.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Raccourcis =============================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)

==================== Modules chargés (Avec liste blanche) ==============

2016-05-12 16:25 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll
2016-05-12 16:25 - 2016-05-09 11:29 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpbr.mdl
2016-05-12 16:25 - 2016-05-09 11:29 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpdsp.mdl
2016-05-12 16:25 - 2016-05-09 11:29 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttpph.mdl
2016-05-12 16:25 - 2016-05-09 11:29 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_001_001\ashttprbl.mdl
2015-04-29 18:30 - 2016-05-24 09:51 - 00116416 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2016-02-24 20:50 - 2016-05-02 01:54 - 00369208 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2015-12-19 11:59 - 2016-05-02 01:55 - 00289848 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-04-11 19:24 - 2016-05-02 01:54 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-02-24 20:50 - 2016-05-02 01:55 - 03613240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-12-17 19:38 - 2015-12-17 19:38 - 01328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-01-16 22:35 - 2005-04-22 00:36 - 00143360 _____ () C:\WINDOWS\system32\BrSNMP64.dll
2015-02-04 19:24 - 2015-02-04 19:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2016-04-11 19:24 - 2016-05-02 01:55 - 02667576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-04-11 19:24 - 2016-05-02 01:55 - 01990200 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-04-11 19:24 - 2016-05-02 01:55 - 01842232 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-01-16 11:00 - 2016-05-02 01:55 - 00208952 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2015-10-30 03:18 - 2015-10-30 03:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-16 10:34 - 2016-05-19 22:08 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-07-12 15:38 - 2016-07-01 00:48 - 02656408 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-07-18 00:35 - 2015-10-22 15:11 - 00395368 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-07-12 15:38 - 2016-07-01 00:48 - 02656408 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-05-23 19:37 - 2016-05-23 19:37 - 00959168 _____ () C:\Users\William\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64\ClientTelemetry.dll
2015-12-17 14:50 - 2015-12-07 00:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-07-12 15:39 - 2016-06-30 23:48 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-07-12 15:38 - 2016-06-30 23:27 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-07-12 15:38 - 2016-06-30 23:21 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-07-12 15:38 - 2016-06-30 23:22 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-07-12 15:38 - 2016-06-30 23:24 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2014-11-04 08:17 - 2014-02-25 23:13 - 00053248 _____ () C:\Windows\SysWOW64\UMonit64.exe
2014-11-04 08:21 - 2013-05-15 18:39 - 00463872 _____ () C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe
2016-04-11 19:24 - 2016-05-02 01:54 - 00035896 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-04-11 19:24 - 2016-05-02 01:54 - 00921656 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2014-04-22 15:12 - 2014-04-22 15:12 - 00011264 _____ () C:\Program Files\ASUS\ASUS GPU Tweak\WMIProc.dll
2014-04-22 15:12 - 2014-04-22 15:12 - 00320000 _____ () C:\Program Files\ASUS\ASUS GPU Tweak\NavpiWrapper.dll
2016-04-19 14:53 - 2016-04-19 14:53 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-02-23 18:20 - 2016-02-18 05:22 - 00147216 _____ () c:\program files (x86)\ostotosoft\drivertalent\ldrvsvc.dll
2016-02-23 18:20 - 2016-02-18 05:22 - 00186640 _____ () c:\program files (x86)\ostotosoft\drivertalent\CrashCatch.dll
2016-02-23 18:20 - 2016-02-18 05:22 - 00254824 _____ () c:\program files (x86)\ostotosoft\drivertalent\updater\checkupdate.dll
2016-02-23 18:20 - 2016-06-17 03:16 - 00173224 _____ () c:\program files (x86)\ostotosoft\drivertalent\substat.dll
2016-02-23 18:20 - 2016-02-18 05:22 - 00103776 _____ () c:\program files (x86)\ostotosoft\drivertalent\dstudp.dll
2016-02-23 18:20 - 2016-02-18 05:22 - 00117088 _____ () c:\program files (x86)\ostotosoft\drivertalent\udp.dll
2016-01-16 22:35 - 2009-02-27 17:38 - 00139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2014-06-04 00:01 - 2014-06-04 00:01 - 00117248 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2014-06-04 00:01 - 2014-06-04 00:01 - 00037936 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2014-06-04 00:01 - 2014-06-04 00:01 - 00018992 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDColorEnhance.dll
2014-06-04 00:01 - 2014-06-04 00:01 - 00020528 _____ () C:\Program Files (x86)\ASUS\Splendid\AMDRegammaAndGamut.dll
2015-08-07 14:56 - 2016-05-02 02:02 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-05-23 19:37 - 2016-05-23 19:37 - 00679624 _____ () C:\Users\William\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-02-23 16:09 - 2016-02-23 16:09 - 00325824 _____ () C:\Program Files\Microsoft Office 15\Root\VFS\ProgramFilesCommonX86\Microsoft Shared\OFFICE15\AppVIsvStream32.dll
2015-03-09 04:44 - 2015-03-09 04:44 - 00137728 _____ () C:\ProgramData\Razer\Synapse\CrashReporter\CrashRpt1402.dll
2016-02-23 16:08 - 2016-02-23 16:08 - 00325824 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll
2016-04-19 14:53 - 2016-04-19 14:53 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\WINDOWS\SysWOW64\FlashPlayerInstaller.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Desktop\FRST64.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Downloads\adwcleaner_5.201.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Downloads\ccsetup520.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Downloads\LOOT.Installer.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Downloads\mbam-setup-2.2.1.1043.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Downloads\Mod Organizer v1_3_11 installer-1334-1-3-11.exe:BDU [0]
AlternateDataStreams: C:\Users\William\Downloads\Nexus Mod Manager-0.61.23.exe:BDU [0]

==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)


==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)

HKU\S-1-5-21-3679993256-793984374-2723091592-1001\Software\Classes\regfile: regedit.exe "%1" <===== ATTENTION

==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)

IE trusted site: HKU\S-1-5-21-3679993256-793984374-2723091592-1001\...\sharepoint.com -> hxxps://collegealma.sharepoint.com

==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2013-08-22 09:25 - 2016-08-12 16:29 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-3679993256-793984374-2723091592-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\William\AppData\Roaming\Mozilla\Firefox\Fond d’écran.bmp
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-3679993256-793984374-2723091592-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{7C21608F-B2FA-4C44-BF86-3BC04D9D1625}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{02FB7495-8130-427F-B336-5C80347440BC}] => (Allow) C:\Program Files\Echobit\Evolve\EvoSvc.exe
FirewallRules: [{A8EA853C-AAB0-457A-AA4D-213D7314ECF2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{1330BBEB-746E-464C-B979-1B9A14C558F0}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{1BA09C6E-4278-44C2-897C-313B5A30CE8B}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{9EF30A4C-8740-4B84-A7EE-5B5ED78D013C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{6ED45C2F-135B-462A-A9B0-26A92A2C151D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{7BE449A6-5267-4089-95E1-459102CB0808}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{564A4039-5CE5-402F-8AD0-C0C53DDC38B7}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{3EA74611-84B2-436F-8DBB-AAAC069D4055}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{6FFA4168-549F-4B3E-BB77-7B683CC012C0}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{25B5CEB2-9DD6-463D-89B8-909906982CE1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E18B7C36-2392-4E11-9AC1-F8DB91FA167B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{55DA1649-7353-42D3-93F8-00E66986B6BE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{D9D8956B-A6F4-4C2E-B488-4327E044546A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{1772AF27-7CBC-4545-AAE8-40009AA8F969}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{4FE9E88C-B0FF-4AAC-99E0-5D0BFC67B812}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7EC038EF-ED54-4D9B-8E85-46B5501E6220}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{D5A5C666-A0BF-4FB3-8D87-E8F9FD0D7247}C:\program files (x86)\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{46147176-CFBE-4440-9309-9926A5D00099}C:\program files (x86)\neverwinter_en\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\neverwinter_en\neverwinter\live\gameclient.exe
FirewallRules: [TCP Query User{00CC4AE9-79B7-4397-AD79-F78A7E0E87AC}C:\users\william\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\william\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{AD1E3211-E5E7-4F22-8B40-E9896D76133F}C:\users\william\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\william\appdata\local\akamai\netsession_win.exe
FirewallRules: [{DE822CAA-FB5C-4229-8C14-AC043CF7E019}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{AB5FCEB4-5A2F-4950-A3B2-0B79C1C35BE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{96060E32-899B-4812-8A9F-15ACBA213F5A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{200CDB9C-0E8F-45E0-90D8-8C929DF2D6F6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{455657CD-CDA7-40DE-97F0-8ECBF2286A84}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{517650A9-32A7-4127-9092-6313B7C60720}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{A9FB79AE-00C6-43FF-94FC-DD9907345E0D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hoard\win32\Reuben.exe
FirewallRules: [{8271D964-C637-4BB5-9DE7-F247B10A8024}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hoard\win32\Reuben.exe
FirewallRules: [TCP Query User{163AA1B1-594C-4927-B9C9-82422F63B841}C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3.exe] => (Allow) C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3.exe
FirewallRules: [UDP Query User{0E268E8B-56FC-4579-BA0C-93506AE1F9B8}C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3.exe] => (Allow) C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3.exe
FirewallRules: [TCP Query User{DFA058DE-B66B-4B68-AD3B-A474CFD4409F}C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3_debug.exe] => (Allow) C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3_debug.exe
FirewallRules: [UDP Query User{A52DD90C-A5DE-4AEE-A4F1-231417CB0ED1}C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3_debug.exe] => (Allow) C:\program files (x86)\r.g. mechanics\age of wonders 3\aow3_debug.exe
FirewallRules: [TCP Query User{D6645BFD-508E-4543-A03C-71ABFAAB9E47}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{831DFEC7-72F2-4A5B-9DB1-89D07B9C0CD6}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [TCP Query User{13BEB16F-2662-43D0-BB64-80D71B22A421}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{7021DE88-2203-4F5D-B847-2144059D1D6C}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{C3A5C3C4-3CDE-4705-B1DD-418A973504F0}C:\program files (x86)\hexchat\hexchat.exe] => (Allow) C:\program files (x86)\hexchat\hexchat.exe
FirewallRules: [UDP Query User{A6DBC0DD-0510-4592-B2B1-86EF512ACF0B}C:\program files (x86)\hexchat\hexchat.exe] => (Allow) C:\program files (x86)\hexchat\hexchat.exe
FirewallRules: [TCP Query User{FA2D26F6-CD66-4CD0-98F0-E1A269BCF60F}C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [UDP Query User{E3BF61B9-3E9F-4F12-82BC-1EDEB5E22A2F}C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [TCP Query User{2AB6BAF8-D3D1-4093-B9E0-C135C23663F8}C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [UDP Query User{87813169-B879-43F6-A83F-3F0937CBACA5}C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [TCP Query User{219C387E-F589-4B72-AB5D-7FDE3897B96E}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [UDP Query User{B929E548-4D0E-4637-BC6A-5178217BD5B6}C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [{E958B00A-340E-4AC8-A179-C1E6D66F24A6}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D8DFB95D-D2BF-4969-A586-BD1374CA2480}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{71E29CC0-82AF-4A4D-9BA4-470C0654ACED}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{22F23BC3-7994-4DAE-94CE-35674CADEC80}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{CE39FEDD-B47F-4891-BBAD-CB2630364AFB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{302B4DBA-6A2D-4905-970C-B7F6D823A873}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{980E194F-1733-4BF3-9B72-FF246BB74C5F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{C6C48226-5A39-459C-AA78-0A190FAE737F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{0253F673-8E9E-47E7-A8DB-728FBC66C82C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{15D07439-D204-46AC-8F7E-FF5164D50712}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{8CAAB11F-692E-49BD-B894-4D5CD72491D9}C:\program files (x86)\diablo iii\diablo iii.exe] => (Allow) C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{C8387F58-DD28-4A5E-9FA7-67560961CFF2}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_45\bin\java.exe
FirewallRules: [{63F18037-E334-4215-BD6A-C17E151E77F3}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_45\bin\java.exe
FirewallRules: [{2A033448-ABF5-4431-8900-45F939C6FB99}] => (Allow) C:\Users\William\Ubiquiti UniFi\bin\mongod.exe
FirewallRules: [{1B94FBED-A05E-4468-8CDF-61BB275354F7}] => (Allow) C:\Users\William\Ubiquiti UniFi\bin\mongod.exe
FirewallRules: [{835FBA6D-AEC2-4C27-8395-F3E0B0AC77F8}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{AD7E5026-58B6-4F8F-856D-FCC99FA5E3A6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{6966EE51-6052-43DE-93EB-E1B887658308}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{6BBE406E-6D0A-47AC-9563-03F140746BBE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{BBDEA878-54A6-45F6-B01F-E3EDA2C09F3E}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{475644F4-3A64-4A6E-92CB-9631C13FE228}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{70AFE2EE-A67A-4241-A0DB-473512F14C5E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{0F0290AB-43B9-4711-A6C1-E956A6F273B8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{DDDC5EA6-CFD0-4E69-9E91-F469D0337704}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{9BBCFDDD-4A2F-444D-A119-D1AD59E34671}] => (Allow) C:\Program Files (x86)\Brother\Brmfl11a\FAXRX.exe
FirewallRules: [{CD277183-91B4-4C6B-8679-F1C560F891E2}] => (Allow) C:\Program Files (x86)\Brother\Brmfl11a\FAXRX.exe
FirewallRules: [{7C8EFEB2-3E2F-45F7-A56A-0E602833ECBE}] => (Allow) LPort=54925
FirewallRules: [TCP Query User{AC4A1574-27A3-4C83-BDC1-022E067F33BE}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe
FirewallRules: [UDP Query User{2354DE4E-52C7-4116-AA79-7A8858E12CEF}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe
FirewallRules: [TCP Query User{2A2F391C-C412-4BFB-97D5-D39007655282}C:\users\william\appdata\local\temp\i1456263374\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\william\appdata\local\temp\i1456263374\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{73B382C3-CEEA-4C12-A421-15427403B102}C:\users\william\appdata\local\temp\i1456263374\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\william\appdata\local\temp\i1456263374\windows\resource\jre\bin\javaw.exe
FirewallRules: [TCP Query User{BC1869B1-82D0-4394-AAB9-9E0774D2FF36}C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe] => (Allow) C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe
FirewallRules: [UDP Query User{70E8E972-CF8C-4282-8C66-D9CAF200F62B}C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe] => (Allow) C:\program files (x86)\ostotosoft\drivertalent\drivertalent.exe
FirewallRules: [{E0E2A005-D920-4AB1-9A90-ED6921933171}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DriverTalent.exe
FirewallRules: [{D391F8BD-FADE-4B60-90C1-1E3FE42ABEB1}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\DTLService.exe
FirewallRules: [{70EAC50B-036E-4619-889B-91B1873150FA}] => (Allow) C:\Program Files (x86)\OSTotoSoft\DriverTalent\download\MiniThunderPlatform.exe
FirewallRules: [{C4B29E67-5409-4980-B829-A0A010C1382C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War Attila\launcher\launcher.exe
FirewallRules: [{6E732BFD-427D-4760-8930-4BA405CBDEDC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War Attila\launcher\launcher.exe
FirewallRules: [{E6473ADF-9DC0-4541-B1DA-CECE532B4A3B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{D18099C5-771E-477D-9D8D-48E3149036C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{C0B936AC-636B-41D6-80E3-7AA000444342}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{89928361-C942-462B-A377-F97C57D05579}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{D7E1AFCC-A94E-4778-B2C0-58879D77B9CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{F6166069-21D9-44D2-B16F-2FB1229443F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{C6A3CCC4-F2E2-43EF-9926-5470E44E3305}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{BE747671-2EE2-46D1-9DAF-B4CC5D8968FA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{85C7380E-91A0-4773-ABAD-44AE2862A78C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{B94A3D48-E1CC-4A3F-BB5E-1619621450DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{703D4809-7F45-422D-BC95-01410C16F4D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{3728683F-B2D2-42CE-A460-681295D598D2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{F3301690-2063-4645-8A1F-958B0FC48CCA}C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe
FirewallRules: [UDP Query User{CE0776D6-C87B-4F17-BEAF-E49F7F06081D}C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe
FirewallRules: [TCP Query User{5FF9BA22-F0A4-4AF7-9137-178C58B93539}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe
FirewallRules: [UDP Query User{46D8898B-33B4-438D-8B73-5A4760A1AB36}C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\xcom 2\binaries\win64\xcom2.exe
FirewallRules: [TCP Query User{CA01ED5C-9B2A-491E-BFD9-37CD2D14234A}C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe
FirewallRules: [UDP Query User{5B43EF7F-C635-40FE-8886-DD60D8DE0F77}C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\battlefleet gothic armada\battlefleetgothic\binaries\win64\battlefleetgothic-win64-shipping.exe
FirewallRules: [TCP Query User{B1CE77AC-71BD-486B-80F0-4CE0BC5E1817}C:\program files (x86)\hexchat\hexchat.exe] => (Allow) C:\program files (x86)\hexchat\hexchat.exe
FirewallRules: [UDP Query User{5BFDCC7C-7DB0-4B27-B880-0C637869F45D}C:\program files (x86)\hexchat\hexchat.exe] => (Allow) C:\program files (x86)\hexchat\hexchat.exe
FirewallRules: [{38161E13-A1C8-4696-90D4-54D125CF341B}] => (Allow) C:\Users\William\AppData\Local\Temp\Rar$EXa0.564\blackice-installer.exe
FirewallRules: [{84DDD8EF-A831-4425-9EA8-AE251140BBFF}] => (Allow) C:\Users\William\AppData\Local\Temp\Rar$EXa0.564\blackice-installer.exe
FirewallRules: [TCP Query User{BFF1FDF8-BF9A-4EC4-AE0E-F2C45A50282F}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{E455DF7A-668F-4270-B0F6-0F3B05A7887F}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{5F71FFC6-D8AA-4D52-9D9A-8AAFD3318E61}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{B8BFD40E-B938-48C4-89A3-C0972ECA2689}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stellaris\stellaris.exe
FirewallRules: [{87F7CB92-4929-4C25-B163-E550148EC05A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [{A980CFD5-1CEC-40FA-B731-352A0FABCDAC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Terraria\Terraria.exe
FirewallRules: [TCP Query User{10F52B98-DD2F-4DB7-930D-1D8DEBF03B05}C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe
FirewallRules: [UDP Query User{573B6D48-4865-4BA1-9D44-AB9EBF4C82B1}C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe
FirewallRules: [{C153040B-A743-488C-9074-FF6DCCB9228D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{3CA74F79-36D0-44D9-990F-34914F2D90D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{49F2CC93-7DBD-4426-BB76-628A1955E13B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [{C790037F-4B75-45D2-88A1-6980E2B6F4AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [TCP Query User{E3E43326-5A48-4BC9-8356-565F4E6624A6}C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [UDP Query User{F537A12D-BEB2-4740-A586-DBB34D67B8C7}C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [TCP Query User{6FD04CA4-C90C-4629-9CA9-454196B66689}C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe
FirewallRules: [UDP Query User{04BAEE15-EC6F-4EB4-B3CF-3CE22EE56CD4}C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\goog.exe
FirewallRules: [TCP Query User{E028C248-E1E7-439D-913B-40EB038F396C}C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe
FirewallRules: [UDP Query User{5883CF98-51DC-4DBA-BC1E-7DA29121E6FE}C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\greygoo\instanceserverg.exe
FirewallRules: [{DC098F51-642C-439C-AB1B-7D14E35E7D84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Battle Brothers\win32\BattleBrothers.exe
FirewallRules: [{008433A5-FD90-47DD-9714-BCC371BFC63B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Battle Brothers\win32\BattleBrothers.exe
FirewallRules: [{C2E42F1E-0F72-4CD8-885B-08C35B46AE05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe
FirewallRules: [{1173AB75-516F-470C-8EAA-8D022354EE3D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dust An Elysian Tail\DustAET.exe
FirewallRules: [{B8EDFC0A-284C-41B9-9E74-B5545CC53DA1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{8EDEE037-2374-4F77-AF0A-CF415FEE9DA6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [TCP Query User{FB72B21B-8602-4EDC-94C8-0A7C4767C23D}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{D4830720-ECFB-4F96-B44B-6669A10DC8DA}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{86742548-0E29-4AD2-9C5B-AC492571B33C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{CE4234FA-4BEF-4BA3-B961-2D27C2CD2C57}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{24E9FA38-22BB-433D-88FC-1C8133025076}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{9DAEAF49-9E7C-4B15-80A4-132213F91D84}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{73B3B916-6A1F-4CB2-8CF6-11B4D6C57169}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{2C0590CC-1DCD-4016-B2D9-380573FA20DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{FC0A8545-0820-4F6E-92F7-20768BB8116E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{511D20EA-EF52-4413-A37A-C3956936007D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [TCP Query User{399BC2AF-D6E6-48A4-9D6B-AB1351A0996E}C:\program files (x86)\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe
FirewallRules: [UDP Query User{4142436D-D39A-4EB8-99B6-55AD2135B102}C:\program files (x86)\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe
FirewallRules: [TCP Query User{21588737-08B4-4B7D-86B4-E973B7BD2A00}C:\program files (x86)\gameforgelive\games\gbr_eng\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\gbr_eng\tera\tera-launcher.exe
FirewallRules: [UDP Query User{951D26F6-E663-4C84-BE63-5B532A983416}C:\program files (x86)\gameforgelive\games\gbr_eng\tera\tera-launcher.exe] => (Allow) C:\program files (x86)\gameforgelive\games\gbr_eng\tera\tera-launcher.exe
FirewallRules: [TCP Query User{C7B77614-5FE2-4BD0-82E2-6BF7C3B4522A}C:\users\william\appdata\local\temp\i1469055240\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\william\appdata\local\temp\i1469055240\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{185DE76F-AE34-46D2-A3CC-034ED6DF5AD5}C:\users\william\appdata\local\temp\i1469055240\windows\resource\jre\bin\javaw.exe] => (Allow) C:\users\william\appdata\local\temp\i1469055240\windows\resource\jre\bin\javaw.exe
FirewallRules: [{78B07129-7B14-4959-A2DE-AC48649AB994}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\mod_uploader.exe
FirewallRules: [{DBE95966-2E25-4356-9C8F-4DE8596E452C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\mod_uploader.exe
FirewallRules: [{4160A779-E7F0-4528-805C-D55F3D3CE0DC}] => (Allow) C:\Users\William\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{06BC2FD0-1A23-4DBD-987B-0D88DE3C5182}] => (Allow) C:\Users\William\AppData\Roaming\BitTorrent\BitTorrent.exe
FirewallRules: [{090BDE6B-911A-4C10-A462-2CC7E5625DE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{C1CDB53D-9018-4506-A796-B27C857146A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{54D143CE-A9EC-4DE6-BC7B-7B7870F48D04}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{774DE0E1-DB8B-42B1-8254-B6C6575C5619}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{5A4CD4B8-7E22-4EFB-836E-322092344F47}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{355896DD-92CC-417D-A2E2-CEA57C9D2175}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{EC6E06F5-FF7E-4783-BE35-9B6AA5FDFD76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{DDC44B92-28E8-44AC-9EC8-23F4255DB0E6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{80F0151D-C5E6-45D6-B034-D089DA7B0B0A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{6F97AF86-567D-4C62-91C4-CF2312F823D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{7B740F1B-40FB-487A-946A-A95AEA572AD8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{A156A40F-AD18-424C-9A1B-91F339DEF50D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{BE865CFF-0A99-4F8A-9024-A48B1350CDC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{02CE71E0-ABC2-44A8-B90A-8C5E1FB47D41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe
FirewallRules: [{F19CD519-AE54-4F07-8EA8-8821ECCE608E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{C4A1E529-EF54-4D52-9A31-60475228071A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{01C55A6E-5F4F-487D-AD8B-8426DB7C8433}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{0D8824C8-9BB3-4403-A22D-3B67180E1203}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{A5452AD0-E704-41E3-9DC3-3B87D75BB74C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{6BDF9907-2330-4BB8-A6FC-8D180C1C97F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe
FirewallRules: [{585734D9-C44E-46C9-AA01-7319A235181D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sword Coast Legends\SwordCoast.exe
FirewallRules: [{D600B31C-8F53-423E-B19D-EE5CEA261908}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sword Coast Legends\SwordCoast.exe
FirewallRules: [TCP Query User{5AFE5238-B3CC-4FF8-8D21-FC340852C21F}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [UDP Query User{EAB03175-2E31-41C8-B105-FD9CBA565EDF}C:\program files\java\jre1.8.0_101\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_101\bin\javaw.exe
FirewallRules: [TCP Query User{D97DE42F-F130-4567-BCF0-E8EDA530C8F8}C:\program files\java\jre1.8.0_101\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_101\bin\java.exe
FirewallRules: [UDP Query User{428753A3-BAE2-4FA9-A5E9-693B72A97383}C:\program files\java\jre1.8.0_101\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_101\bin\java.exe

==================== Points de restauration =========================

11-08-2016 14:10:20 Removed Anvil Studio

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (08/12/2016 04:35:01 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (08/12/2016 04:30:54 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Activation context generation failed for "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest1".Error in manifest or policy file "C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest2" on line C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest3.
A component version required by the application conflicts with another component version already active.
Conflicting components are:.
Component 1: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_ea85e725b9ba5a4b.manifest.
Component 2: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.494_none_a2d8b04ea53e3145.manifest.

Error: (08/12/2016 04:29:23 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (08/11/2016 05:42:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: backgroundTaskHost.exe, version: 10.0.10586.0, time stamp: 0x5632d8f0
Faulting module name: ntdll.dll, version: 10.0.10586.306, time stamp: 0x571af2eb
Exception code: 0xc0000409
Fault offset: 0x00000000000a9ba0
Faulting process id: 0x3650
Faulting application start time: 0xbackgroundTaskHost.exe0
Faulting application path: backgroundTaskHost.exe1
Faulting module path: backgroundTaskHost.exe2
Report Id: backgroundTaskHost.exe3
Faulting package full name: backgroundTaskHost.exe4
Faulting package-relative application ID: backgroundTaskHost.exe5

Error: (08/11/2016 02:52:19 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Activation context generation failed for "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1".Error in manifest or policy file "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" on line UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Component identity found in manifest does not match the identity of the component requested.
Reference is UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition is UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Please use sxstrace.exe for detailed diagnosis.

Error: (08/11/2016 02:51:45 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   20 A.B.C.9.3.B.8.1.9.1.5.A.5.1.9.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR PC-William-2.local.

Error: (08/11/2016 02:51:45 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.22.178:5353   18 A.B.C.9.3.B.8.1.9.1.5.A.5.1.9.D.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR PC-William.local.

Error: (08/11/2016 02:51:45 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   20 178.22.168.192.in-addr.arpa. PTR PC-William-2.local.

Error: (08/11/2016 02:51:45 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.22.178:5353   18 178.22.168.192.in-addr.arpa. PTR PC-William.local.

Error: (08/11/2016 02:51:45 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname PC-William.local already in use; will try PC-William-2.local instead


Erreurs système:
=============
Error: (08/12/2016 04:42:08 PM) (Source: DCOM) (EventID: 10016) (User: PC-WILLIAM)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}PC-WilliamWilliamS-1-5-21-3679993256-793984374-2723091592-1001LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/12/2016 04:42:08 PM) (Source: DCOM) (EventID: 10016) (User: PC-WILLIAM)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}PC-WilliamWilliamS-1-5-21-3679993256-793984374-2723091592-1001LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742

Error: (08/12/2016 02:32:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Accès aux données utilisateur_3501c5 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.

Error: (08/12/2016 02:32:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Stockage des données utilisateur_3501c5 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.

Error: (08/12/2016 02:32:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Données de contacts_3501c5 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.

Error: (08/12/2016 02:32:41 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Hôte de synchronisation_3501c5 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.

Error: (08/11/2016 01:20:50 AM) (Source: DCOM) (EventID: 10010) (User: PC-WILLIAM)
Description: {9BA05972-F6A8-11CF-A442-00A0C90A8F39}

Error: (08/11/2016 01:20:46 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Accès aux données utilisateur_58f25 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.

Error: (08/11/2016 01:20:46 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Stockage des données utilisateur_58f25 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.

Error: (08/11/2016 01:20:46 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: The Données de contacts_58f25 service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 10000 milliseconds: Redémarrer le service.


CodeIntegrity:
===================================
  Date: 2016-08-10 17:12:01.900
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-08-10 00:22:22.474
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-14 00:22:16.541
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-13 12:37:52.730
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-12 18:31:22.189
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-11 13:04:37.120
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-18 00:22:13.584
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-15 12:05:26.919
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-15 00:22:11.751
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-06-11 00:22:17.470
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Infos Mémoire =========================== 

Processeur: Intel(R) Core(TM) i7-4710HQ CPU @ 2.50GHz
Pourcentage de mémoire utilisée: 23%
Mémoire physique - RAM - totale: 16266.85 MB
Mémoire physique - RAM - disponible: 12485.72 MB
Mémoire virtuelle totale: 18698.85 MB
Mémoire virtuelle disponible: 14982.9 MB

==================== Lecteurs ================================

Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:110.58 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.54 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 2C66ACEA)

Partition: GPT.

==================== Fin de Addition.txt ============================