Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 26-12-2017 Exécuté par snake (30-12-2017 03:35:41) Exécuté depuis C:\Users\snake\Desktop Windows 10 Home Version 1709 16299.125 (X64) (2017-12-01 02:27:15) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-4201515988-136340311-816858667-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-4201515988-136340311-816858667-503 - Limited - Disabled) Invité (S-1-5-21-4201515988-136340311-816858667-501 - Limited - Disabled) snake (S-1-5-21-4201515988-136340311-816858667-1001 - Administrator - Enabled) => C:\Users\snake WDAGUtilityAccount (S-1-5-21-4201515988-136340311-816858667-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AV: ESET NOD32 Antivirus (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70} AS: ESET NOD32 Antivirus (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD} AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Apple Application Support (32 bits) (HKLM-x32\...\{BC7C46A4-D7A7-48EC-A98C-32A7762B5EFA}) (Version: 6.2.1 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{F0C4B709-8BF4-4A72-B527-12E7BF5482F8}) (Version: 6.2.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{BD6778C5-6FA5-492A-ADD6-E706339C2A7B}) (Version: 11.0.2.4 - Apple Inc.) Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.) Application Blizzard (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BitTorrent (HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\BitTorrent) (Version: 7.10.0.43917 - BitTorrent Inc.) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Call of Duty(R) - World at War(TM) 1.1 Patch (HKLM-x32\...\{AFAE2B15-89A0-4215-A030-F7B5B478886B}) (Version: 1.1 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.1 Patch (HKLM-x32\...\InstallShield_{AFAE2B15-89A0-4215-A030-F7B5B478886B}) (Version: - ) Hidden Call of Duty(R) - World at War(TM) 1.2 Patch (HKLM-x32\...\{2BF0AE92-C3BC-4112-9066-1546342B1FAE}) (Version: 1.2 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.2 Patch (HKLM-x32\...\InstallShield_{2BF0AE92-C3BC-4112-9066-1546342B1FAE}) (Version: - ) Hidden Call of Duty(R) - World at War(TM) 1.3 Patch (HKLM-x32\...\{149464D9-B06F-4505-9968-FD1206F67AD3}) (Version: 1.3 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.3 Patch (HKLM-x32\...\InstallShield_{149464D9-B06F-4505-9968-FD1206F67AD3}) (Version: - ) Hidden Call of Duty(R) - World at War(TM) 1.4 Patch (HKLM-x32\...\{9F01A67B-7D67-482F-9D4F-D5980A440FD4}) (Version: 1.4 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.4 Patch (HKLM-x32\...\InstallShield_{9F01A67B-7D67-482F-9D4F-D5980A440FD4}) (Version: - ) Hidden Call of Duty(R) - World at War(TM) 1.5 Patch (HKLM-x32\...\{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}) (Version: 1.5 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.5 Patch (HKLM-x32\...\InstallShield_{C3DC2DF5-EFAC-4055-9010-31F7C545DD9E}) (Version: - ) Hidden Call of Duty(R) - World at War(TM) 1.6 Patch (HKLM-x32\...\{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}) (Version: 1.6 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.6 Patch (HKLM-x32\...\InstallShield_{064DC64E-7A2F-4FDF-B598-E3C0747BBB9C}) (Version: - ) Hidden Call of Duty(R) - World at War(TM) 1.7 Patch (HKLM-x32\...\{750C87B8-AF19-4C3C-B791-50D9C83AE572}) (Version: 1.7 - Activision) Hidden Call of Duty(R) - World at War(TM) 1.7 Patch (HKLM-x32\...\InstallShield_{750C87B8-AF19-4C3C-B791-50D9C83AE572}) (Version: - ) Hidden CPUID HWMonitor 1.33 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.33 - ) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd) Destiny 2 (HKLM-x32\...\Destiny 2) (Version: - Blizzard Entertainment) EA Network Play System (HKLM-x32\...\Network Play System) (Version: - ) ESET Security (HKLM\...\{37E67F0A-50BB-430A-A2A5-F5E2F6EE96DB}) (Version: 11.0.159.0 - ESET, spol. s r.o.) Fallout 4 - Patch FR 1.00 (HKLM-x32\...\Fallout 4 - Patch FR 1.00) (Version: 1.00 - TraductionJeux.com) Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version: - ) Flawless Widescreen version 1.0.15 (HKLM-x32\...\{7348D82E-8C68-48FF-BA2D-8C97B5B4B3D8}_is1) (Version: 1.0.15 - Flawless Widescreen) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.108 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8301}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8302}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden Grand Theft Auto IV (HKLM-x32\...\{5454083B-1308-4485-BF17-1110000D8303}) (Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden iCloud (HKLM\...\{99868C9C-C141-4DDE-A2C7-9DDF00F68F17}) (Version: 7.2.0.67 - Apple Inc.) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4835 - Intel Corporation) iTunes (HKLM\...\{F3D76007-5A86-4D79-AFF5-103760F02B60}) (Version: 12.7.2.60 - Apple Inc.) Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) Metal Gear Solid (HKLM-x32\...\Metal Gear Solid) (Version: - ) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable - x86 8.0.61001 (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{b3c7f59f-dc40-4be9-829c-77dd292978ea}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation) Mises à jour NVIDIA 31.0.1.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 31.0.1.0 - NVIDIA Corporation) Hidden MSI Afterburner 4.4.2 (HKLM-x32\...\Afterburner) (Version: 4.4.2 - MSI Co., LTD) Need for Speed Underground 2 (HKLM-x32\...\{909F8EBC-EC7F-48FF-0085-475D818F0F31}) (Version: - ) Need for Speed™ Carbon (HKLM-x32\...\{259C0ABB-A3B2-4D70-008F-BF7EE491B70B}) (Version: - ) Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts) Need for Speed™ Payback (HKLM-x32\...\{F4CF3D08-565C-40B7-B351-D3033DE2172B}) (Version: 1.0.51.9958 - Electronic Arts) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.14 - Black Tree Gaming) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.1 - Notepad++ Team) NVIDIA GeForce Experience 3.11.0.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.11.0.73 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation) NVIDIA Pilote 3D Vision 388.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.71 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation) NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA Pilote graphique 388.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.71 - NVIDIA Corporation) OpenIV (HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\OpenIV) (Version: 2.9.1.926 - .black/OpenIV Team) Origin (HKLM-x32\...\Origin) (Version: 10.5.8.17910 - Electronic Arts, Inc.) Outlast 2 (HKLM-x32\...\Outlast 2_is1) (Version: - ) Panneau de configuration NVIDIA 388.71 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.71 - NVIDIA Corporation) Hidden PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.) Reimage Repair (HKLM\...\Reimage Repair) (Version: 1.8.7.2 - Reimage) <==== ATTENTION RivaTuner Statistics Server 7.0.2 (HKLM-x32\...\RTSS) (Version: 7.0.2 - Unwinder) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.3.1 - Rockstar Games) RomStation (HKLM-x32\...\{223B62A8-F6FF-4BEB-BC17-230D12723CD0}_is1) (Version: - RomStation) Simple Shutdown Timer (HKLM-x32\...\Simple Shutdown Timer1.1.2) (Version: 1.1.2 - PcWinTech.com) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden WinRAR 5.31 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-4201515988-136340311-816858667-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\snake\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-4201515988-136340311-816858667-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\snake\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-4201515988-136340311-816858667-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\snake\AppData\Local\Microsoft\OneDrive\17.3.6943.0625\amd64\FileSyncShell64.dll => Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2017-08-29] () ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-12-18] (ESET) ContextMenuHandlers1: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-22] (MagicISO, Inc.) ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-12-08] (Apple Inc.) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-02-04] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal) ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-12-18] (ESET) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers4: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-22] (MagicISO, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-10-20] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-12-15] (NVIDIA Corporation) ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-12-18] (ESET) ContextMenuHandlers6: [MagicISO] -> {DB85C504-C730-49DD-BEC1-7B39C6103B7A} => C:\Program Files (x86)\MagicISO\misosh64.dll [2008-05-22] (MagicISO, Inc.) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-02-04] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-02-04] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {014F61B0-F968-4D84-92E9-C5EA5F32D071} - System32\Tasks\{995BEC7C-D9C6-4694-B725-C3DE3BFAA567} => C:\Windows\system32\pcalua.exe -a F:\SETUP\setup.exe -d F:\SETUP Task: {18A5725D-233F-476A-9888-61AD88BD6CF7} - System32\Tasks\{C2C538A2-FD63-4C89-A609-17E2A259250F} => C:\Windows\system32\pcalua.exe -a F:\setup.exe -d F:\ Task: {2854D779-F1B4-4AF8-9C7E-53F877DEA20E} - System32\Tasks\{6F3AD005-1525-49B5-BB60-CC6C910D31A4} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Electronic Arts\Need For Speed High Stakes\nfshs.exe" -d "C:\Program Files (x86)\Electronic Arts\Need For Speed High Stakes" Task: {29F20480-5DA6-4795-916B-D7AAADB7EB61} - System32\Tasks\{49699DFA-211B-4EBF-BE6E-E8722AD83FF9} => C:\Windows\system32\pcalua.exe -a "D:\EA Games\Ra2.exe" -d "D:\EA Games\" Task: {2B432BC7-EF62-48C1-BBCF-FC1B3F6DFF41} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-28] (Google Inc.) Task: {4B49D279-F47E-4821-A964-2E5326D35E7B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-16] (NVIDIA Corporation) Task: {4B92145C-B68C-450F-A27B-02911980CF1C} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-16] (NVIDIA Corporation) Task: {7ECA4895-949C-40DF-A17C-30BE1D7B71D8} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {8036E72E-1A52-413D-B783-69AA21A3CBD2} - System32\Tasks\{BE94D51F-159A-4500-9798-11E26AA645F7} => C:\Windows\system32\pcalua.exe -a C:\Users\snake\Desktop\nfs\nfsc.exe -d C:\Users\snake\Desktop\nfs Task: {8693062A-BD14-4918-84FF-EFD689693D6E} - System32\Tasks\{AF2A385F-455F-4295-9F84-6CA79A5C2302} => C:\Windows\system32\pcalua.exe -a E:\NFSHS.EXE -d E:\ Task: {940E6957-E934-4DBD-81A1-266BD9C33DB0} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-16] (NVIDIA Corporation) Task: {980541D0-E3DA-4C0C-8B50-611D4EC90813} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-12-28] (Google Inc.) Task: {A025FDB2-6DE1-4F19-B78B-C82072B95397} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-11-16] (NVIDIA Corporation) Task: {A630BFC5-6793-4DA3-BD94-A470BC0E9292} - System32\Tasks\{96E554CD-E9AD-4AE1-BFB1-BE59941F0574} => C:\Windows\system32\pcalua.exe -a C:\Westwood\Internet\UNSTLLAP.EXE -d C:\Westwood\Internet Task: {B6BD8F60-DF87-4784-BFF1-06951BFC40E2} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-11-16] (NVIDIA Corporation) Task: {C062D5DD-4C86-4A9B-92F2-ECEAE07A047F} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-16] (NVIDIA Corporation) Task: {C3C1F6DA-5E90-4DDA-9F0B-F41CCF9FC74A} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.) Task: {C8C79FE3-85CB-4EA8-98F9-D8FBA4308431} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-11-16] (NVIDIA Corporation) Task: {D1696697-5C34-4FA6-AE54-81865EE7AFD1} - System32\Tasks\{086813D2-47B1-421E-94E1-5E80C3C3CD1A} => C:\Windows\system32\pcalua.exe -a F:\AUTORUN.EXE -d F:\ Task: {DD0947A9-0B85-4E18-A2B9-BDD317FAD494} - System32\Tasks\{66366FF3-F708-40DE-872A-0483927DE113} => C:\Windows\system32\pcalua.exe -a D:\nfs\NFSC.exe -d D:\nfs Task: {DD197AAA-1178-4B44-B70C-6C25B7745099} - System32\Tasks\{B181A0DA-43EC-42BF-AD0E-A8AEC2C46834} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Electronic Arts\Need for Speed Carbon\NFSC.exe" -d "C:\Program Files (x86)\Electronic Arts\Need for Speed Carbon" Task: {EE1C4B97-E0BF-4F0E-A636-99CD1C48416E} - System32\Tasks\ReimageUpdater => C:\Program Files\Reimage\Reimage Protector\ReiGuard.exe [2017-09-11] (Reimage®) <==== ATTENTION Task: {FA290ED0-9591-4CFC-816B-E93EB3F3FF51} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-16] (NVIDIA Corporation) Task: {FB244001-6841-4724-91D0-FAF9784C2C82} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-12-13] (Microsoft Corporation) Task: {FD8EFF61-EA1D-455B-8FEC-64D6F191D3BA} - System32\Tasks\{F3C730B5-AAA4-471F-B52C-B2359EA85C69} => C:\Windows\system32\pcalua.exe -a "D:\EA Games\bin\farcry3_d3d11.exe" -d "D:\EA Games\bin" (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2016-09-11 20:10 - 2017-11-16 02:41 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2017-12-08 01:48 - 2017-12-08 01:48 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-12-08 01:48 - 2017-12-08 01:48 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2017-08-29 01:43 - 2017-08-29 01:43 - 000230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll 2017-12-13 14:19 - 2017-11-26 13:23 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-12-13 14:19 - 2017-11-26 13:01 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-12-28 23:00 - 2017-12-14 03:49 - 004063064 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.108\libglesv2.dll 2017-12-28 23:00 - 2017-12-14 03:49 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\63.0.3239.108\libegl.dll 2016-09-11 20:10 - 2017-11-16 02:41 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2016-09-11 20:10 - 2017-11-16 02:40 - 066906560 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2015-10-30 08:24 - 2015-10-30 08:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-4201515988-136340311-816858667-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\snake\Downloads\mclaren_p1-1920x1080.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == HKLM\...\StartupApproved\StartupFolder: => "Roccat Talk.lnk" HKLM\...\StartupApproved\Run: => "SecurityHealth" HKLM\...\StartupApproved\Run: => "RTHDVCPL" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run: => "ShadowPlay" HKLM\...\StartupApproved\Run: => "WindowsDefender" HKLM\...\StartupApproved\Run: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "RoccatIskuFX" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "BitTorrent" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "IDMan" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "iCloudServices" HKU\S-1-5-21-4201515988-136340311-816858667-1001\...\StartupApproved\Run: => "OneDriveSetup" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [UDP Query User{150C31D8-881F-4693-B92C-62EA5BDB439F}D:\games\igg-day.of.infamy.v2.4.6.5\bin\crash_handler.exe] => (Allow) D:\games\igg-day.of.infamy.v2.4.6.5\bin\crash_handler.exe FirewallRules: [TCP Query User{5BFCC2A3-C2AA-4D87-8921-199C47940496}D:\games\igg-day.of.infamy.v2.4.6.5\bin\crash_handler.exe] => (Allow) D:\games\igg-day.of.infamy.v2.4.6.5\bin\crash_handler.exe FirewallRules: [UDP Query User{C5789808-90EA-4892-8433-F6ED23CFBB84}D:\games\igg-day.of.infamy.v2.4.6.5\dayofinfamy.exe] => (Allow) D:\games\igg-day.of.infamy.v2.4.6.5\dayofinfamy.exe FirewallRules: [TCP Query User{DD28EA6F-291A-4094-B5A4-8D642E888EDE}D:\games\igg-day.of.infamy.v2.4.6.5\dayofinfamy.exe] => (Allow) D:\games\igg-day.of.infamy.v2.4.6.5\dayofinfamy.exe FirewallRules: [{FEB29692-48D2-43E3-8539-1FDF80C32E1B}] => (Allow) D:\EA Games\nfs payback\3DMGAME-Need.for.Speed.Payback.Deluxe.Edition-3DM\Need for Speed Payback\NeedForSpeedPayback.exe FirewallRules: [{27E91CF2-A15F-44AE-9379-0AD34E805F8B}] => (Allow) D:\EA Games\nfs payback\3DMGAME-Need.for.Speed.Payback.Deluxe.Edition-3DM\Need for Speed Payback\NeedForSpeedPayback.exe FirewallRules: [{03A45FA5-C360-4C89-A7AC-1FCDBC9B80CB}] => (Allow) D:\EA Games\nfs payback\3DMGAME-Need.for.Speed.Payback.Deluxe.Edition-3DM\Need for Speed Payback\NeedForSpeedPaybackTrial.exe FirewallRules: [{4BC68260-36D0-4F04-B9AC-794A942F6642}] => (Allow) D:\EA Games\nfs payback\3DMGAME-Need.for.Speed.Payback.Deluxe.Edition-3DM\Need for Speed Payback\NeedForSpeedPaybackTrial.exe FirewallRules: [UDP Query User{1E9A8A26-54F6-4310-AEA1-587589A8A445}D:\games\splinter cell - blacklist\src\system\blacklist_dx11_game.exe] => (Allow) D:\games\splinter cell - blacklist\src\system\blacklist_dx11_game.exe FirewallRules: [TCP Query User{ED7EF9F7-DF36-43D7-8B19-D530EA526E1E}D:\games\splinter cell - blacklist\src\system\blacklist_dx11_game.exe] => (Allow) D:\games\splinter cell - blacklist\src\system\blacklist_dx11_game.exe FirewallRules: [{8AEB3F68-E465-4085-AC91-079A4B3E647D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [UDP Query User{8E27428E-2F0E-4EF1-B6FE-4E18F8748078}D:\games\beamng.drive.v0.10\bin64\beamng.drive.x64.exe] => (Allow) D:\games\beamng.drive.v0.10\bin64\beamng.drive.x64.exe FirewallRules: [TCP Query User{E8089463-EFD7-4B72-A831-59F603D4A801}D:\games\beamng.drive.v0.10\bin64\beamng.drive.x64.exe] => (Allow) D:\games\beamng.drive.v0.10\bin64\beamng.drive.x64.exe FirewallRules: [UDP Query User{A754516C-F06F-40D4-B2FB-54C1C6519FA4}D:\games\sgw3\sniper ghost warrior 3\win_x64\sgw3.exe] => (Allow) D:\games\sgw3\sniper ghost warrior 3\win_x64\sgw3.exe FirewallRules: [TCP Query User{E07016BF-426B-446A-9B7B-A77C0F6C07E6}D:\games\sgw3\sniper ghost warrior 3\win_x64\sgw3.exe] => (Allow) D:\games\sgw3\sniper ghost warrior 3\win_x64\sgw3.exe FirewallRules: [UDP Query User{D254CAD6-2A24-415D-89BA-4DEA530DE9D9}D:\games\the crew (worldwide)\thecrew.exe] => (Allow) D:\games\the crew (worldwide)\thecrew.exe FirewallRules: [TCP Query User{C3545482-1536-463F-AF08-2803915D9475}D:\games\the crew (worldwide)\thecrew.exe] => (Allow) D:\games\the crew (worldwide)\thecrew.exe FirewallRules: [UDP Query User{75CA2B03-B3E5-4C09-A5C0-AB56D975B74D}D:\games\sniper ghost warrior 3\win_x64\sgw3.exe] => (Allow) D:\games\sniper ghost warrior 3\win_x64\sgw3.exe FirewallRules: [TCP Query User{8CC12764-D64E-4E47-9EE0-96F3F8814DE3}D:\games\sniper ghost warrior 3\win_x64\sgw3.exe] => (Allow) D:\games\sniper ghost warrior 3\win_x64\sgw3.exe FirewallRules: [{DC0211B3-0BDD-48EB-BE2A-BFDAE9B5C1DD}] => (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{891CF2C7-37AD-4A6F-AED7-69648D487CCB}] => (Allow) C:\Program Files (x86)\Rockstar Games\Grand Theft Auto IV\LaunchGTAIV.exe FirewallRules: [{028529A1-0742-4A47-A335-16DF5B8793B5}] => (Allow) D:\jeux\steamapps\common\Call of Duty WWII Beta\s2_mp64_ship.exe FirewallRules: [{00DD6D03-08FE-4FD6-997D-B73576F6F3E4}] => (Allow) D:\jeux\steamapps\common\Call of Duty WWII Beta\s2_mp64_ship.exe FirewallRules: [{9339B644-E0D7-4FC7-88CE-71AE5F331075}] => (Allow) C:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe FirewallRules: [{07EB7BC9-3CB5-47B9-B9DD-16436EB91CDD}] => (Allow) C:\SteamLibrary\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe FirewallRules: [{0943F639-3BDC-437E-84DE-0038E130DD60}] => (Allow) D:\jeux\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{6577ECCC-4F8C-4BEF-9A33-6B3864248BC8}] => (Allow) D:\jeux\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [UDP Query User{6C1B0079-3116-4DF7-B2BF-7AB2607F604E}D:\jeux\steamapps\common\insurgency2\insurgency.exe] => (Allow) D:\jeux\steamapps\common\insurgency2\insurgency.exe FirewallRules: [TCP Query User{6C8E7C8D-451D-4775-885D-12CC3A39D057}D:\jeux\steamapps\common\insurgency2\insurgency.exe] => (Allow) D:\jeux\steamapps\common\insurgency2\insurgency.exe FirewallRules: [UDP Query User{3FF7C4B0-A7F2-4E77-A0D8-5862637C344D}D:\games\killing floor 2\binaries\win64\kfgame.exe] => (Allow) D:\games\killing floor 2\binaries\win64\kfgame.exe FirewallRules: [TCP Query User{53FFA4A9-7ADF-48E7-92E7-7DD0BA1F1977}D:\games\killing floor 2\binaries\win64\kfgame.exe] => (Allow) D:\games\killing floor 2\binaries\win64\kfgame.exe FirewallRules: [UDP Query User{107762E3-BE6E-483C-901A-B6B444B7A142}D:\debilen\the crew (worldwide)\thecrew.exe] => (Allow) D:\debilen\the crew (worldwide)\thecrew.exe FirewallRules: [TCP Query User{427954FB-48E2-4FEC-BF67-E26774D17A33}D:\debilen\the crew (worldwide)\thecrew.exe] => (Allow) D:\debilen\the crew (worldwide)\thecrew.exe FirewallRules: [UDP Query User{F420ECF9-31E4-489C-9CF6-9FBCBBBF5179}D:\games\rising storm 2\binaries\win64\vngame.exe] => (Allow) D:\games\rising storm 2\binaries\win64\vngame.exe FirewallRules: [TCP Query User{5F6FAD28-76EA-42FE-A892-024B2C3AC45E}D:\games\rising storm 2\binaries\win64\vngame.exe] => (Allow) D:\games\rising storm 2\binaries\win64\vngame.exe FirewallRules: [UDP Query User{CD5491D5-708F-443F-966B-54279D1707E9}D:\games\rising storm 2\binaries\win64\vngame.exe] => (Allow) D:\games\rising storm 2\binaries\win64\vngame.exe FirewallRules: [TCP Query User{A2CDEE52-9653-42A7-8B13-1802675F9BE0}D:\games\rising storm 2\binaries\win64\vngame.exe] => (Allow) D:\games\rising storm 2\binaries\win64\vngame.exe FirewallRules: [UDP Query User{D0595909-9499-4F35-A486-63B62F2A1B8D}C:\program files (x86)\destiny 2\destiny2.exe] => (Allow) C:\program files (x86)\destiny 2\destiny2.exe FirewallRules: [TCP Query User{54912F8E-AC66-41E9-8C93-DAF4716663DA}C:\program files (x86)\destiny 2\destiny2.exe] => (Allow) C:\program files (x86)\destiny 2\destiny2.exe FirewallRules: [UDP Query User{98355536-9B2F-467A-A905-81762F7B1B11}D:\games\saints row the third - the full package\saintsrowthethird_dx11.exe] => (Allow) D:\games\saints row the third - the full package\saintsrowthethird_dx11.exe FirewallRules: [TCP Query User{400FFA60-465E-4B85-BA74-6FE4C38B37D2}D:\games\saints row the third - the full package\saintsrowthethird_dx11.exe] => (Allow) D:\games\saints row the third - the full package\saintsrowthethird_dx11.exe FirewallRules: [UDP Query User{83FA8118-881C-40FA-A615-972B55267CC0}D:\games\saints row the third - the full package\saintsrowthethird.exe] => (Allow) D:\games\saints row the third - the full package\saintsrowthethird.exe FirewallRules: [TCP Query User{C26B08E6-9523-4482-AE13-D1EF69D46B75}D:\games\saints row the third - the full package\saintsrowthethird.exe] => (Allow) D:\games\saints row the third - the full package\saintsrowthethird.exe FirewallRules: [UDP Query User{F19AA44E-B503-47DF-96E5-B6ADD31894C7}D:\ubi\ghost recon wildlands\tom clancy's ghost recon wildlands\grw.exe] => (Allow) D:\ubi\ghost recon wildlands\tom clancy's ghost recon wildlands\grw.exe FirewallRules: [TCP Query User{B8541267-DD2B-451C-947D-951C7036A6D3}D:\ubi\ghost recon wildlands\tom clancy's ghost recon wildlands\grw.exe] => (Allow) D:\ubi\ghost recon wildlands\tom clancy's ghost recon wildlands\grw.exe FirewallRules: [{B184E2EA-4A71-4058-9675-4055097D9F8D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{9555E3C8-81CC-4762-9DD4-B6FBEAFF0069}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{AA7194B9-F6EE-4EB1-8D8F-DE376EF43CBD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{902BCF78-13FB-4AA9-B491-099FB84D21CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [UDP Query User{122C7A21-717B-48A7-A9A3-2C045BFE1F59}C:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe FirewallRules: [TCP Query User{A32E9AB6-03AF-4867-B38E-6856A8921B54}C:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\steamlibrary\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe FirewallRules: [UDP Query User{7B62F977-DFAD-44F0-B7DB-45E5646AEC70}D:\jeux\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\jeux\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe FirewallRules: [TCP Query User{8153A34F-F2A6-4E48-93D2-6A1DD729D404}D:\jeux\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) D:\jeux\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe FirewallRules: [UDP Query User{77B529D9-1CA3-48E4-8F29-A8490D664599}D:\games\outlast 2\binaries\win64\outlast2.exe] => (Allow) D:\games\outlast 2\binaries\win64\outlast2.exe FirewallRules: [TCP Query User{2507C3D9-59DF-48A7-8B06-E1B222DDB845}D:\games\outlast 2\binaries\win64\outlast2.exe] => (Allow) D:\games\outlast 2\binaries\win64\outlast2.exe FirewallRules: [{DF6F5009-BB1B-47BE-89E5-F753FA5EA365}] => (Allow) D:\ubi\Far Cry 4\bin\IGE_WPF64.exe FirewallRules: [{D961AB20-3B18-4D57-9957-652664ED7D16}] => (Allow) D:\ubi\Far Cry 4\bin\IGE_WPF64.exe FirewallRules: [{75E60162-E4A8-4F15-8ECD-03F54FBC595F}] => (Allow) D:\ubi\Far Cry 4\bin\FarCry4.exe FirewallRules: [{C5988BBE-44A4-401F-9048-DAC14AC90919}] => (Allow) D:\ubi\Far Cry 4\bin\FarCry4.exe FirewallRules: [UDP Query User{FED335EB-CE26-4F55-BF19-E4A0F6C9FB0C}D:\debilen\tr\tomb raider\rise of the tomb raider - 20 years celebration\rottr.exe] => (Allow) D:\debilen\tr\tomb raider\rise of the tomb raider - 20 years celebration\rottr.exe FirewallRules: [TCP Query User{C8CA1FF9-C201-42C1-94E1-0E5454513706}D:\debilen\tr\tomb raider\rise of the tomb raider - 20 years celebration\rottr.exe] => (Allow) D:\debilen\tr\tomb raider\rise of the tomb raider - 20 years celebration\rottr.exe FirewallRules: [{66E7E65F-B9CA-44D0-AFE7-2E7471E3D9E7}] => (Allow) D:\ubi\tcwr\The Crew (Worldwide)\TheCrew.exe FirewallRules: [{6C849288-DF3C-45BE-9EA8-17B21019B441}] => (Allow) D:\ubi\tcwr\The Crew (Worldwide)\TheCrew.exe FirewallRules: [{1A6CF67E-B584-44F8-BC62-D0DB704D45AA}] => (Allow) D:\Program Files (x86)\Origin Games\Command and Conquer Red Alert II\RA2Launcher.exe FirewallRules: [{939DA94A-D349-4090-B62E-780CCA1348BD}] => (Allow) D:\Program Files (x86)\Origin Games\Command and Conquer Red Alert II\RA2Launcher.exe FirewallRules: [{0DCECB8B-D545-4009-9E44-2890918D6633}] => (Allow) D:\EA Games\bin\FC3Editor.exe FirewallRules: [{72CA1299-936D-4891-8669-39946F39218A}] => (Allow) D:\EA Games\bin\FC3Editor.exe FirewallRules: [{2E80B689-9DCD-4F1D-B457-7B50C30E7DE2}] => (Allow) D:\EA Games\bin\FC3Updater.exe FirewallRules: [{EED1C56C-4D57-4BC7-83B0-7C8D81C9FACB}] => (Allow) D:\EA Games\bin\FC3Updater.exe FirewallRules: [{3565CD8B-B945-48BE-864D-FEBB5DB48585}] => (Allow) D:\EA Games\bin\farcry3_d3d11.exe FirewallRules: [{2A9D715E-B512-4179-AC7D-066DE169CA36}] => (Allow) D:\EA Games\bin\farcry3_d3d11.exe FirewallRules: [{87EC7E78-30AD-456C-9959-A4E4E48B86BF}] => (Allow) D:\EA Games\bin\farcry3.exe FirewallRules: [{8416F04C-7018-4182-92A7-CAD274F9E85C}] => (Allow) D:\EA Games\bin\farcry3.exe FirewallRules: [{89EFF7D1-F82E-4719-8B8E-F479154BEAE8}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe FirewallRules: [{F7437715-F3D4-488D-AB7E-D30F3E32C3A8}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe FirewallRules: [UDP Query User{88BEFBF1-BF3B-4916-A341-55E0580ECBC5}D:\jeux\steamapps\common\arma 3\arma3.exe] => (Allow) D:\jeux\steamapps\common\arma 3\arma3.exe FirewallRules: [TCP Query User{723D9C88-E737-42D7-A5E9-C860A6D214A3}D:\jeux\steamapps\common\arma 3\arma3.exe] => (Allow) D:\jeux\steamapps\common\arma 3\arma3.exe FirewallRules: [{F8FC8B92-CCE3-4F00-85F3-1EE82C4BF622}] => (Allow) C:\Users\snake\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{1BF7F4C9-5BC0-44AA-BEB9-A64A7B448656}] => (Allow) C:\Users\snake\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{C4A79175-2601-490E-9201-5B7FEC36F818}] => (Allow) C:\Users\snake\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{D583B2E7-B923-4170-95BC-FDA029694795}] => (Allow) C:\Users\snake\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{4B0C5BB6-3940-49F9-9124-F07CCAC65339}] => (Allow) C:\Users\snake\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{69942574-DA80-4153-A13D-E0B595211647}] => (Allow) C:\Users\snake\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{D5274B59-E766-4D0E-9768-D284C4B13A23}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{3171E742-5AF6-4A76-A105-3B26932F720F}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe FirewallRules: [{D999A3C6-B332-455D-9B04-D54EEBF4D8FA}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe FirewallRules: [UDP Query User{3257BE34-F4DC-42BA-AF3C-F6FC3C8FF6CD}D:\jeux\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\jeux\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [TCP Query User{D59055FC-FE6F-4E78-97CD-37D9B0F08762}D:\jeux\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\jeux\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [{1E801CE4-641F-4983-A5AE-9F24B371A705}] => (Allow) D:\jeux\bin\steamwebhelper.exe FirewallRules: [{CCD2F61C-D6E7-4CF8-9289-642089AA9D56}] => (Allow) D:\jeux\bin\steamwebhelper.exe FirewallRules: [{34932496-805C-4C6C-B2B8-3B8C209ED85F}] => (Allow) D:\jeux\Steam.exe FirewallRules: [{468547E0-4472-4343-91FE-CB9A1B007639}] => (Allow) D:\jeux\Steam.exe FirewallRules: [{869F77AB-A88C-4964-82DB-D8D21DB29110}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{B1FF38E6-7D1E-49DE-80EA-FC8DA7A460DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{283FED1E-11B1-4EDF-A6C7-A533768A18BF}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{D74AA9C4-B97D-4D9E-8537-3632E4F451B5}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{899E0A6E-36EC-4633-AA11-2334D99E8708}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{C9924E96-6742-4AC7-8B87-08EF9EB05B36}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{03C8BCAD-E890-4677-A8A7-03348A0B71F7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{4CC821CD-5943-400A-96FF-04146062B223}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{710D75B7-8D54-4987-B334-B9C00EAC948B}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{4AC2179C-EA05-4A51-82EB-8C339C1309F0}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{888710E8-9092-4117-91E7-B46371065715}] => (Allow) LPort=82 FirewallRules: [{9CE3BDFC-A881-4E34-A8D5-A30083268B6B}] => (Allow) D:\Games\Tom Clancy's Splinter Cell\system\SplinterCell.exe FirewallRules: [{67225682-DC6B-4A4F-B211-A450619B17C5}] => (Allow) D:\Games\Tom Clancy's Splinter Cell\system\SplinterCell.exe FirewallRules: [{A63AB080-B1F6-4DDF-9D54-FDAB0FFFB10E}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FarCry2.exe FirewallRules: [{66CC2713-F081-4C82-9FDF-AAEB05181AAD}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FarCry2.exe FirewallRules: [{35C36766-F469-400A-8F0C-8D0DC9C7CC4C}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Launcher.exe FirewallRules: [{778F8924-DB8A-49E2-ACBB-C13B90295A6D}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Launcher.exe FirewallRules: [{9AC77ABF-84F0-4BD7-82A9-85C1A1CD9C47}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Editor.exe FirewallRules: [{1938215D-FDCB-4C93-996F-C445787521C0}] => (Allow) C:\Program Files (x86)\Ubisoft\Far Cry 2\bin\FC2Editor.exe FirewallRules: [{AFC60765-A4D8-4786-9AE0-268AFFBFFB35}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{F7813952-A3D5-4723-8861-B794D034CE07}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{12006678-D2F5-4EC1-9F7A-484E2F393DAE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{8CEBC1A1-CEE4-489B-9B69-01B53184A83F}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{A2F6BE3D-74B5-4261-B338-3B2E823D35FF}] => (Allow) D:\jeux\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{F7DD900D-D670-4167-897F-4DEE322B8F38}] => (Allow) D:\jeux\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{1DF324C0-2A95-441E-9045-4990DFE7B320}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{64502C27-20F4-421A-9CB8-6B1268214376}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{B3A6CE14-67F4-40C8-9CF6-089927D5A113}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{F85E9AD2-D416-40E9-BEB6-6573B114AF8E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{8FFAC383-95AE-4F84-A52B-E60C66D1ADB9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{F869886D-D1FB-40EB-A76B-0617BA52F64B}] => (Allow) D:\jeux\steamapps\common\SniperGhostWarrior2\Bin32\SniperGhostWarrior2.exe FirewallRules: [{0C61A889-90CC-4594-8323-9E6C6885BF7C}] => (Allow) D:\jeux\steamapps\common\SniperGhostWarrior2\Bin32\SniperGhostWarrior2.exe FirewallRules: [{78A54EA1-9681-4A41-96AE-C2CE89EF1C7B}] => (Allow) D:\ubi\FC4\Far Cry 4\bin\FarCry4.exe FirewallRules: [{C6566606-497B-4F62-B962-4C4ECEB8DC30}] => (Allow) D:\ubi\FC4\Far Cry 4\bin\FarCry4.exe FirewallRules: [{C9F37C5E-2683-4194-98C3-42B40178B593}] => (Allow) D:\ubi\FC4\Far Cry 4\bin\IGE_WPF64.exe FirewallRules: [{115BCA3F-7311-4352-A053-068A0F6B8DA6}] => (Allow) D:\ubi\FC4\Far Cry 4\bin\IGE_WPF64.exe FirewallRules: [TCP Query User{37D5D48A-CE78-4D55-BC6D-0635932B00C7}D:\jeux\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\jeux\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{8D70B223-B3A1-435F-9623-9424D0652BBC}D:\jeux\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\jeux\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [TCP Query User{6531F1BB-1E02-4BFC-97DC-72B80F4994AF}D:\debilen\thcow\thehunter\thehunter call of the wild\thehuntercotw_f.exe] => (Allow) D:\debilen\thcow\thehunter\thehunter call of the wild\thehuntercotw_f.exe FirewallRules: [UDP Query User{D9B631C5-E8F1-4CE8-8834-BF88647431E9}D:\debilen\thcow\thehunter\thehunter call of the wild\thehuntercotw_f.exe] => (Allow) D:\debilen\thcow\thehunter\thehunter call of the wild\thehuntercotw_f.exe FirewallRules: [{6371EED7-450B-4CA6-B883-15B992D09D06}] => (Allow) D:\debilen\GRW\Ghost Recon Wildlands Beta\GRW.exe FirewallRules: [TCP Query User{3A7ACE1F-EB3A-4D6B-9F54-76276FA970CC}D:\debilen\driver\beamng.drive v0.8.0.1\bin64\beamng.drive.x64.exe] => (Allow) D:\debilen\driver\beamng.drive v0.8.0.1\bin64\beamng.drive.x64.exe FirewallRules: [UDP Query User{C2CFB586-C62E-4081-9075-F3777152D16B}D:\debilen\driver\beamng.drive v0.8.0.1\bin64\beamng.drive.x64.exe] => (Allow) D:\debilen\driver\beamng.drive v0.8.0.1\bin64\beamng.drive.x64.exe FirewallRules: [TCP Query User{A25289D3-58A5-48C0-9FDE-C520186CA2ED}D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe FirewallRules: [UDP Query User{49E6385C-7F82-4B65-A067-BCCB6457B3A1}D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe FirewallRules: [TCP Query User{097EC9EB-4F8C-4421-91AD-05180C3ECF35}D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe] => (Block) D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe FirewallRules: [UDP Query User{85360EC9-FD7C-4028-97BC-2F6970D24137}D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe] => (Block) D:\games\borderlands the pre-sequel\binaries\win32\borderlandspresequel.exe FirewallRules: [TCP Query User{2F620D24-1A29-4CD9-A67C-63601E1A418B}D:\games\assetto corsa\acs.exe] => (Allow) D:\games\assetto corsa\acs.exe FirewallRules: [UDP Query User{3C9E19C4-401F-4F60-873D-6613FB182B4D}D:\games\assetto corsa\acs.exe] => (Allow) D:\games\assetto corsa\acs.exe FirewallRules: [{AFBE2566-4978-4936-ACEF-8B8B882F11E8}] => (Allow) D:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe FirewallRules: [{9FAEA7F8-DA82-4FAA-98BA-2B130BC69979}] => (Allow) D:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe FirewallRules: [{CC70908E-E7C0-4BEE-9A9C-F576F64B4213}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe FirewallRules: [{29657B04-AB7B-423E-A9E9-9EA8F659CA28}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{5FF575ED-2F04-42C0-AA56-B2F29A9F50ED}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{B6D9988B-A6BF-45A7-A17A-24A75AB97F14}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{2A2EF7A2-BA2D-4C94-B690-725BADAC5633}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{0823661A-EE7D-4AD8-8122-BFC28833F6B3}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{5EBCD8E2-9995-4387-97DD-F7792977B02E}] => (Allow) D:\Program Files (x86)\Origin Games\Need for Speed Payback\NeedForSpeedPaybackTrial.exe FirewallRules: [{A26B133C-9007-40EF-8881-9877E327113A}] => (Allow) D:\Program Files (x86)\Origin Games\Need for Speed Payback\NeedForSpeedPaybackTrial.exe FirewallRules: [{0B86BCFF-CCDC-4363-9984-22D68584C31F}] => (Allow) D:\Program Files (x86)\Origin Games\Need for Speed Payback\NeedForSpeedPayback.exe FirewallRules: [{76FF0F6B-64F7-4202-8724-6D56FDAB5516}] => (Allow) D:\Program Files (x86)\Origin Games\Need for Speed Payback\NeedForSpeedPayback.exe FirewallRules: [TCP Query User{1E5B9F0A-6026-4039-A40D-59E0AE446BAF}D:\games\o2\outlast 2\binaries\win64\outlast2.exe] => (Allow) D:\games\o2\outlast 2\binaries\win64\outlast2.exe FirewallRules: [UDP Query User{7B1DE647-D82C-4218-8CDD-1BA27468330D}D:\games\o2\outlast 2\binaries\win64\outlast2.exe] => (Allow) D:\games\o2\outlast 2\binaries\win64\outlast2.exe FirewallRules: [{A2E005B0-C514-43BA-B001-A37CA3A68911}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Points de restauration ========================= 30-12-2017 02:51:36 Fin de désinfection ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (12/29/2017 03:19:20 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (12/28/2017 08:42:55 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante ic-0.418fffe03c77e8.exe, version : 1.0.0.1, horodatage : 0x5a454732 Nom du module défaillant : ntdll.dll, version : 10.0.16299.64, horodatage : 0xac8afc81 Code d’exception : 0xc0000028 Décalage d’erreur : 0x00061564 ID du processus défaillant : 0x9dc Heure de début de l’application défaillante : 0x01d380140d094ec8 Chemin d’accès de l’application défaillante : C:\Users\snake\AppData\Local\Temp\338707718\ic-0.418fffe03c77e8.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : 69172249-065a-4f8d-9534-805f647d7938 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/28/2017 08:42:54 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante ic-0.418fffe03c77e8.exe, version : 1.0.0.1, horodatage : 0x5a454732 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc00001a5 Décalage d’erreur : 0x00bb0e2a ID du processus défaillant : 0x9dc Heure de début de l’application défaillante : 0x01d380140d094ec8 Chemin d’accès de l’application défaillante : C:\Users\snake\AppData\Local\Temp\338707718\ic-0.418fffe03c77e8.exe Chemin d’accès du module défaillant: unknown ID de rapport : 39273dfa-45b1-4e3a-af56-1d920b087249 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/28/2017 08:42:53 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante ic-0.418fffe03c77e8.exe, version : 1.0.0.1, horodatage : 0x5a454732 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc00001a5 Décalage d’erreur : 0x00bb0e2a ID du processus défaillant : 0x9dc Heure de début de l’application défaillante : 0x01d380140d094ec8 Chemin d’accès de l’application défaillante : C:\Users\snake\AppData\Local\Temp\338707718\ic-0.418fffe03c77e8.exe Chemin d’accès du module défaillant: unknown ID de rapport : 82303370-f9b1-4be3-a47f-563e87482337 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/28/2017 01:56:38 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (12/28/2017 05:29:36 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante GTA5.exe, version : 1.0.1290.1, horodatage : 0x5a278c81 Nom du module défaillant : GTA5.exe, version : 1.0.1290.1, horodatage : 0x5a278c81 Code d’exception : 0x80000003 Décalage d’erreur : 0x000000000123b04b ID du processus défaillant : 0x1b74 Heure de début de l’application défaillante : 0x01d37f944284154b Chemin d’accès de l’application défaillante : D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe Chemin d’accès du module défaillant: D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe ID de rapport : f0bbb945-58bd-45a0-8537-011c9b395d48 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/28/2017 05:27:31 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme GTA5.exe version 1.0.1290.1 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 27c0 Heure de début : 01d37f9412b15ed5 Heure de fin : 4294967295 Chemin d'accès de l'application : D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe ID de rapport : 60a515c7-9542-4da5-b589-7b1b7e04e939 Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (12/28/2017 05:26:35 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante GTA5.exe, version : 1.0.1290.1, horodatage : 0x5a278c81 Nom du module défaillant : GTA5.exe, version : 1.0.1290.1, horodatage : 0x5a278c81 Code d’exception : 0x80000003 Décalage d’erreur : 0x000000000123b04b ID du processus défaillant : 0x2488 Heure de début de l’application défaillante : 0x01d37f93bd5edb26 Chemin d’accès de l’application défaillante : D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe Chemin d’accès du module défaillant: D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe ID de rapport : b6b9f199-bfc6-463c-90dc-551962f54691 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/25/2017 12:06:28 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante GTA5.exe, version : 1.0.1290.1, horodatage : 0x5a278c81 Nom du module défaillant : ntdll.dll, version : 10.0.16299.64, horodatage : 0x493793ea Code d’exception : 0xc0000005 Décalage d’erreur : 0x000000000004be4b ID du processus défaillant : 0x4c4 Heure de début de l’application défaillante : 0x01d37d0bc8208a85 Chemin d’accès de l’application défaillante : D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : ad246c31-1072-428b-882d-28d2fa39309b Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/25/2017 12:06:27 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante GTA5.exe, version : 1.0.1290.1, horodatage : 0x5a278c81 Nom du module défaillant : ntdll.dll, version : 10.0.16299.64, horodatage : 0x493793ea Code d’exception : 0xc0000005 Décalage d’erreur : 0x000000000004be4b ID du processus défaillant : 0x4c4 Heure de début de l’application défaillante : 0x01d37d0bc8208a85 Chemin d’accès de l’application défaillante : D:\jeux\steamapps\common\Grand Theft Auto V\GTA5.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : c2a74118-a523-4b5d-ab87-44eb623edff4 Nom complet du package défaillant : ID de l’application relative au package défaillant : Erreurs système: ============= Error: (12/30/2017 03:27:05 AM) (Source: DCOM) (EventID: 10016) (User: SNAKE) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID SNAKE\snake de l’utilisateur (S-1-5-21-4201515988-136340311-816858667-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (12/30/2017 03:24:03 AM) (Source: DCOM) (EventID: 10016) (User: SNAKE) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID SNAKE\snake de l’utilisateur (S-1-5-21-4201515988-136340311-816858667-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (12/30/2017 02:58:50 AM) (Source: DCOM) (EventID: 10016) (User: SNAKE) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID SNAKE\snake de l’utilisateur (S-1-5-21-4201515988-136340311-816858667-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (12/30/2017 02:58:41 AM) (Source: SNMP) (EventID: 1500) (User: ) Description: Le service SNMP a rencontré une erreur lors de l’accès à la clé de Registre SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration. Error: (12/30/2017 02:58:12 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service Origin Web Helper Service s’est terminé de façon inattendue pour la 1ème fois. Error: (12/30/2017 02:58:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service. Error: (12/30/2017 02:58:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 6000 millisecondes : Redémarrer le service. Error: (12/30/2017 02:58:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service NVIDIA Display Container LS s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 1000 millisecondes : Redémarrer le service. Error: (12/30/2017 02:58:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service NVIDIA Telemetry Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 1000 millisecondes : Redémarrer le service. Error: (12/30/2017 02:58:12 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Service SNMP s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service. CodeIntegrity: =================================== Date: 2017-12-30 03:34:37.486 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-12-30 03:34:37.484 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-12-30 03:33:50.471 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-12-30 03:33:50.470 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-12-30 03:33:46.822 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-12-30 03:33:46.821 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-12-30 03:33:45.309 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-12-30 03:33:45.308 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-12-30 03:33:42.887 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-12-30 03:33:42.886 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\ESET\ESET Security\ekrn.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz Pourcentage de mémoire utilisée: 15% Mémoire physique - RAM - totale: 16235.4 MB Mémoire physique - RAM - disponible: 13657.59 MB Mémoire virtuelle totale: 18667.4 MB Mémoire virtuelle disponible: 16107.98 MB ==================== Lecteurs ================================ Drive c: (C:/) (Fixed) (Total:111.24 GB) (Free:42.17 GB) NTFS Drive d: (D:/) (Fixed) (Total:931.39 GB) (Free:600.56 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 111.8 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ==================== Fin de Addition.txt ============================