Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 22-03-2020 Exécuté par Antoine (24-03-2020 10:48:10) Exécuté depuis C:\Users\Antoine\Downloads Windows 10 Home Version 1909 18363.720 (X64) (2019-12-12 18:56:59) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-1941883336-2920843220-2085220501-500 - Administrator - Disabled) antoi (S-1-5-21-1941883336-2920843220-2085220501-1002 - Limited - Disabled) Antoine (S-1-5-21-1941883336-2920843220-2085220501-1001 - Administrator - Enabled) => C:\Users\Antoine DefaultAccount (S-1-5-21-1941883336-2920843220-2085220501-503 - Limited - Disabled) Invité (S-1-5-21-1941883336-2920843220-2085220501-501 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-1941883336-2920843220-2085220501-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Avast Antivirus (Enabled) {D322394B-73F7-C65E-BBB0-3B81E063D6D4} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) AMD Catalyst Install Manager (HKLM\...\{DE74B890-4025-A7BE-8EBC-F374528DCFFD}) (Version: 8.0.916.0 - Advanced Micro Devices, Inc.) AMD Ryzen Master SDK (HKLM\...\{DBD50508-5F75-416B-995D-C42433A00944}) (Version: 2.1.0.1236 - Advanced Micro Devices, Inc.) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.28 - Advanced Micro Devices, Inc.) AMD_Chipset_Drivers (HKLM-x32\...\{81322601-C53F-4D9B-A432-F773DFFE9E43}) (Version: 1.11.22.454 - Advanced Micro Devices, Inc.) Hidden AMD_Chipset_Drivers (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 1.11.22.454 - Advanced Micro Devices, Inc.) Anno 1800 (HKLM-x32\...\Uplay Install 4553) (Version: - Ubisoft) AstronTycoon2 Ritual (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\AstronTycoon2 Ritual) (Version: - HOODLUM) Avast Premium Sécurité (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software) Avorion (HKLM-x32\...\Avorion_is1) (Version: - ) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BFME1 HD Edition by Revora version 1 (HKLM-x32\...\BFME1HDEDITIOM_is1) (Version: 1 - Revora) CCleaner (HKLM\...\CCleaner) (Version: 5.63 - Piriform) Crossout Launcher 1.0.3.106 (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\CrossOutLauncher_is1) (Version: - ) Discord (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\Discord) (Version: 0.0.306 - Discord Inc.) DriversCloud.com (64 bits) (HKLM\...\{BD4AC883-4AF5-40BB-91F0-31A061F9588E}) (Version: 10.0.11.0 - Cybelsoft) ENE IO Driver (HKLM-x32\...\{D0512FFD-6194-4D2E-967E-25B82A3322FF}) (Version: 2.0.8 - ENE TECHNOLOGY INC.) Hidden ENE RGB HAL (HKLM\...\{87316426-A33E-41E9-942B-968E928A9A47}) (Version: 1.00.10 - Ene Tech.) Hidden ENE RGB HAL (HKLM-x32\...\{9f93601b-15ea-4e69-8d7c-dfa0f29ae04e}) (Version: 1.00.10 - Ene Tech.) Hidden Epic Games Launcher (HKLM-x32\...\{6653362F-9365-4A3C-9BF8-71494529DE06}) (Version: 1.1.236.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden GameRanger (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\GameRanger) (Version: - GameRanger Technologies) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 80.0.3987.149 - Google LLC) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden Java 8 Update 241 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180241F0}) (Version: 8.0.2410.7 - Oracle Corporation) La Bataille pour la Terre du Milieu(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version: - ) La Bataille pour la Terre du Milieu™ II (HKLM-x32\...\{2A9F95AB-65A3-432c-8631-B8BC5BF7477A}) (Version: - ) Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden L'Avènement du Roi-sorcier™ (HKLM-x32\...\{B931FB80-537A-4600-00AD-AC5DEDB6C25B}) (Version: - ) League of Legends (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc) Legends of Runeterra (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\Riot Game bacon.live) (Version: - Riot Games, Inc) Logitech - Assistant pour jeux vidéo 9.02 (HKLM\...\Logitech Gaming Software) (Version: 9.02.65 - Logitech Inc.) LogMeIn Hamachi (HKLM-x32\...\{ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7}) (Version: 2.2.0.633 - LogMeIn, Inc.) Hidden LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.633 - LogMeIn, Inc.) MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.12527.20278 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\OneDriveSetup.exe) (Version: 19.232.1124.0010 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Mises à jour NVIDIA 38.0.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 38.0.4.0 - NVIDIA Corporation) Hidden MSI APP Manager (HKLM-x32\...\{00F47104-12BA-4E58-A7E6-F456C1BA338E}}_is1) (Version: 1.0.0.32 - MSI) MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 3.0.0.99 - MSI) MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.96 - MSI) MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.65 - MSI) MSI Smart Tool (HKLM-x32\...\{DDCCA038-DAB1-4D09-B85C-848020AA75D6}}_is1) (Version: 1.0.0.43 - MSI) MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.3.0.28 - MSI) MSI X Boost (HKLM-x32\...\{515143BB-7A11-4D85-B941-D520AAAA099C}_is1) (Version: 1.0.0.46 - MSI) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.38.26 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.26 - NVIDIA Corporation) NVIDIA Pilote graphique 445.75 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 445.75 - NVIDIA Corporation) NVIDIA USBC Driver 1.38.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.38.831.832 - NVIDIA Corporation) NZXT CAM 4.3.0 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.3.0 - NZXT, Inc.) OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12527.20242 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.12527.20278 - Microsoft Corporation) Hidden Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) Paradox Launcher v2 (HKLM\...\{F0072197-FCF6-41BF-9D38-832B145922DC}) (Version: 2.0.0.0 - Paradox Interactive) Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 2.0.1.0 - Advanced Micro Devices, Inc.) Hidden Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.38.1118.2019 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8573 - Realtek Semiconductor Corp.) Rise of the Witch-King 2.02 (HKLM-x32\...\GameReplaysRotWK) (Version: - RotWK 2.02 Team) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Taur (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\Taur) (Version: - HOODLUM) Timberborn (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\559962591942803456) (Version: - ) Uplay (HKLM-x32\...\Uplay) (Version: 100.0 - Ubisoft) War Thunder Launcher 1.0.3.213 (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\{ed8deea4-29fa-3932-9612-e2122d8a62d9}}_is1) (Version: - Gaijin Entertainment) Wargaming.net Game Center (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\Wargaming.net Game Center) (Version: 20.0.1.9051 - Wargaming.net) WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH) World of Tanks EU (HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\WOT.EU.PRODUCTION) (Version: - Wargaming.net) Packages: ========= A Plague Tale: Innocence -> C:\Program Files\WindowsApps\FocusHomeInteractiveSA.APlagueTaleInnocence-Window_1.0.6.0_x64__4hny5m903y3g0 [2020-03-06] (Focus Home Interactive SA) ARK: Survival Evolved -> C:\Program Files\WindowsApps\StudioWildcard.4558480580BB9_1.62.795.2_x64__1w2mm55455e38 [2020-03-11] (Studio Wildcard) DirectX -> C:\Program Files\WindowsApps\Microsoft.DirectXRuntime_9.29.952.0_x64__8wekyb3d8bbwe [2019-12-29] (Microsoft Corporation) DirectX -> C:\Program Files\WindowsApps\Microsoft.DirectXRuntime_9.29.952.0_x86__8wekyb3d8bbwe [2019-12-29] (Microsoft Corporation) Dishonored 2 -> C:\Program Files\WindowsApps\BethesdaSoftworks.Dishonored2-PC_1.0.9.0_x64__3275kfvn8vcwc [2020-02-03] (Bethesda Softworks) For The King -> C:\Program Files\WindowsApps\CurveDigital.ForTheKingPC_1.0.25.0_x64__1ezqdnbhnc70m [2020-01-02] (Curve Digital) Frostpunk -> C:\Program Files\WindowsApps\11bitstudios.Frostpunk_1.3.3.2_x64__gwy9gn5q9j1y6 [2020-01-10] (11 bit studios) Messenger -> C:\Program Files\WindowsApps\FACEBOOK.317180B0BB486_410.4.128.0_x64__8xx8rvfyw5nnt [2020-03-14] (Facebook Inc) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-12-10] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-12-10] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.6.1224.0_x64__8wekyb3d8bbwe [2020-02-28] (Microsoft Studios) [MS Ad] MSN Météo -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20503.0_x64__8wekyb3d8bbwe [2020-03-10] (Microsoft Corporation) [MS Ad] myCANAL -> C:\Program Files\WindowsApps\CANALGroupe.CANALTOUCH_3.7.7.0_x64__4d0jsvmsaqz2m [2020-03-20] (Groupe Canal +) Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.95.602.0_x64__mcm4njqhnhss8 [2019-12-18] (Netflix, Inc.) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.956.0_x64__56jybvy8sckqj [2020-01-29] (NVIDIA Corp.) Ori and the Blind Forest: Definitive Edition -> C:\Program Files\WindowsApps\Microsoft.OriandtheBlindForestDefinitiveEdition_1.1.29.0_x64__8wekyb3d8bbwe [2020-02-06] (Microsoft Studios) Sea of Thieves -> C:\Program Files\WindowsApps\Microsoft.SeaofThieves_2.91.4943.2_x64__8wekyb3d8bbwe [2020-03-20] (ms-resource:PublisherDisplayName) Services de jeu -> C:\Program Files\WindowsApps\Microsoft.GamingServices_1.39.6001.0_x64__8wekyb3d8bbwe [2020-03-14] (Microsoft Corporation) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0 [2020-03-14] (Spotify AB) [Startup Task] Stellaris -> C:\Program Files\WindowsApps\ParadoxInteractive.Stellaris-MicrosoftStoreEdition_2.5.1.0_x64__zfnrdv2de78ny [2020-01-09] (Paradox Interactive) SUPERHOT - Windows 10 -> C:\Program Files\WindowsApps\SUPERHOTTeam.SHPLACEHOLDER_1.1.106.0_x64__hj98apedv0ctt [2020-01-27] (SUPERHOT Team) Wakanim -> C:\Program Files\WindowsApps\Wakanim.Wakanim_2.1.16.0_neutral__zd6wxdv4jcttg [2020-03-10] (Wakanim) Xbox (Beta) -> C:\Program Files\WindowsApps\Microsoft.GamingApp_2003.1001.4.0_x64__8wekyb3d8bbwe [2020-03-10] (Microsoft Corporation) [Startup Task] ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-20] (Avast Software s.r.o. -> AVAST Software) ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-20] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-20] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Antoine\AppData\Local\MEGAsync\ShellExtX64.dll [2020-03-11] (Mega Limited -> ) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_8c5e3f480513d171\nvshext.dll [2020-03-19] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2020-03-20] (Avast Software s.r.o. -> AVAST Software) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Avec liste blanche) ==================== ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\Antoine\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d249d9ddd424b688\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default ==================== Modules chargés (Avec liste blanche) ============= 2020-03-23 12:20 - 2020-03-23 12:20 - 003875328 _____ () [Fichier non signé] \\?\C:\Users\Antoine\AppData\Local\Temp\a49af3fc-4620-47b6-9434-9d1100a81531.tmp.node 2020-03-23 12:20 - 2020-03-23 12:20 - 003875328 _____ () [Fichier non signé] \\?\C:\Users\Antoine\AppData\Local\Temp\a9dff63a-66d6-45a7-b983-a3b209e95ff4.tmp.node 2019-12-11 14:39 - 2005-07-18 13:43 - 000160256 _____ () [Fichier non signé] C:\Program Files (x86)\MSI\APP Manager\unrar.dll 2019-12-11 14:40 - 2017-08-02 14:48 - 000237568 _____ () [Fichier non signé] C:\Program Files (x86)\MSI\Gaming APP\LEDControl.dll 2020-01-22 19:46 - 2005-07-18 13:43 - 000160256 _____ () [Fichier non signé] C:\Program Files (x86)\MSI\Live Update\unrar.dll 2019-12-11 14:40 - 2016-04-20 14:12 - 000772608 _____ () [Fichier non signé] C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\Lib\USB_DLL.dll 2020-01-09 15:37 - 2020-03-12 00:06 - 002131456 _____ () [Fichier non signé] C:\Program Files\NZXT CAM\ffmpeg.dll 2020-01-09 15:37 - 2020-03-12 00:06 - 000140288 _____ () [Fichier non signé] C:\Program Files\NZXT CAM\libegl.dll 2020-01-09 15:37 - 2020-03-12 00:06 - 005425152 _____ () [Fichier non signé] C:\Program Files\NZXT CAM\libglesv2.dll 2019-12-10 19:03 - 2019-12-10 19:03 - 001230336 _____ () [Fichier non signé] C:\Riot Games\League of Legends\ffmpeg.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000153088 _____ () [Fichier non signé] C:\Riot Games\Riot Client\libuv.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000092160 _____ () [Fichier non signé] C:\Riot Games\Riot Client\yaml.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000106496 _____ () [Fichier non signé] C:\Riot Games\Riot Client\zlib.dll 2020-03-12 17:59 - 2020-03-12 00:06 - 001752064 _____ (CPUID) [Fichier non signé] C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\rust-cam-worker\cpuidsdk64.dll 2020-01-14 18:41 - 2015-06-23 16:41 - 000082432 _____ (Fintek) [Fichier non signé] C:\Program Files (x86)\MSI\Gaming APP\Lib\FintekUSBDll.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000122880 _____ (hxxps://nghttp2.org/) [Fichier non signé] C:\Riot Games\Riot Client\libnghttp2.dll 2020-03-12 17:59 - 2020-03-12 00:06 - 000083456 _____ (Silicon Laboratories, Inc.) [Fichier non signé] C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\nzxt-device\SiUSBXp64.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000334336 _____ (The curl library, hxxps://curl.haxx.se/) [Fichier non signé] C:\Riot Games\Riot Client\libcurl.dll 2018-04-06 19:29 - 2018-04-06 19:29 - 002286747 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files\Logitech Gaming Software\LIBEAY32.dll 2018-04-06 19:29 - 2018-04-06 19:29 - 000416627 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files\Logitech Gaming Software\ssleay32.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 002551296 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Fichier non signé] C:\Riot Games\Riot Client\libcrypto-1_1.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000530432 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Fichier non signé] C:\Riot Games\Riot Client\libssl-1_1.dll 2020-01-14 18:41 - 2016-10-03 13:43 - 000399872 _____ (TODO: <公司名稱>) [Fichier non signé] C:\Program Files (x86)\MSI\Gaming APP\Lib\SDKDLL.dll 2019-12-10 18:16 - 2019-12-10 18:16 - 000386560 _____ (Yann Collet, Facebook, Inc.) [Fichier non signé] C:\Riot Games\Riot Client\libzstd.dll ==================== Alternate Data Streams (Avec liste blanche) ======== ==================== Mode sans échec (Avec liste blanche) ================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer sites de confiance/sensibles ========== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\sharepoint.com -> hxxps://supdesrh-files.sharepoint.com ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2018-09-15 08:31 - 2018-09-15 08:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg DNS Servers: 10.188.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) HKLM\...\StartupApproved\Run32: => "Live Update" HKLM\...\StartupApproved\Run32: => "MSIRegister" HKLM\...\StartupApproved\Run32: => "APP Manager" HKLM\...\StartupApproved\Run32: => "Command Center" HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui" HKLM\...\StartupApproved\Run32: => "Super Charger" HKLM\...\StartupApproved\Run32: => "EnTierSystray" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\StartupFolder: => "GameRanger.lnk" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\Run: => "Battle.net" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\Run: => "Gaijin.Net Updater" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\Run: => "Application Restart #5" HKU\S-1-5-21-1941883336-2920843220-2085220501-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [TCP Query User{06F47F99-B5BB-478A-AA02-886F2B409368}C:\program files\windowsapps\spotifyab.spotifymusic_1.122.633.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.122.633.0_x86__zpdnekdrzrea0\spotify.exe Pas de fichier FirewallRules: [UDP Query User{C50A6D32-61C1-46FB-ACC7-28AF2CA3AAA6}C:\program files\windowsapps\spotifyab.spotifymusic_1.122.633.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.122.633.0_x86__zpdnekdrzrea0\spotify.exe Pas de fichier FirewallRules: [{3455A544-5BB8-4380-8253-183BD1758930}] => (Block) C:\program files\windowsapps\spotifyab.spotifymusic_1.122.633.0_x86__zpdnekdrzrea0\spotify.exe Pas de fichier FirewallRules: [{18502A7F-E0A7-47B8-8CEF-79499AA32A16}] => (Block) C:\program files\windowsapps\spotifyab.spotifymusic_1.122.633.0_x86__zpdnekdrzrea0\spotify.exe Pas de fichier FirewallRules: [{39EA96F2-E829-427E-950D-5B2C17E6C5E1}] => (Allow) E:\SteamLibrary\steamapps\common\Absolver\Absolver.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{E468C52F-C4CC-41BC-BA06-5220A6D6AB55}] => (Allow) E:\SteamLibrary\steamapps\common\Absolver\Absolver.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{ED68B533-AD37-4FED-94ED-D83ED0063AA9}] => (Allow) E:\SteamLibrary\steamapps\common\Hunt Showdown\hunt.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{5CFC6B79-86A1-427C-8FCB-8268AAEC14A4}] => (Allow) E:\SteamLibrary\steamapps\common\Hunt Showdown\hunt.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{86DA3DDC-011D-4FFC-85E6-C7316C5F9E72}] => (Allow) E:\SteamLibrary\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe (CAPCOM CO., LTD. -> CAPCOM CO., LTD.) FirewallRules: [{3ECE7DBD-8626-4FEE-A254-F35D535833B4}] => (Allow) E:\SteamLibrary\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe (CAPCOM CO., LTD. -> CAPCOM CO., LTD.) FirewallRules: [{FC78AD43-B3B7-4AD4-B3A3-F055C9C5951D}] => (Allow) E:\SteamLibrary\steamapps\common\TPH\TPH.exe () [Fichier non signé] FirewallRules: [{C5B862AE-FDC1-4ED4-9EDB-69493E2A5B6E}] => (Allow) E:\SteamLibrary\steamapps\common\TPH\TPH.exe () [Fichier non signé] FirewallRules: [TCP Query User{4F1C550B-1B62-4CD3-A0E7-4294C81DFDA9}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.) FirewallRules: [UDP Query User{8B8FDFB7-B52B-4582-99E5-AFF928260876}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.) FirewallRules: [{DF00A1B8-759F-4365-80A4-89601B194F4E}] => (Block) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.) FirewallRules: [{9D7D8667-3B20-4691-811E-CED969BC0ADD}] => (Block) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.) FirewallRules: [{8534CD2A-6D75-45A7-A5E8-92CD8C41DC61}] => (Allow) E:\SteamLibrary\steamapps\common\Total War THREE KINGDOMS\launcher\launcher.exe Pas de fichier FirewallRules: [{EE47199A-E13C-41F2-8C9A-DBAD948934FE}] => (Allow) E:\SteamLibrary\steamapps\common\Total War THREE KINGDOMS\launcher\launcher.exe Pas de fichier FirewallRules: [TCP Query User{0B0B4017-7575-4A61-BDF5-0C697B0D16F8}E:\starcraft ii\versions\base77661\sc2_x64.exe] => (Allow) E:\starcraft ii\versions\base77661\sc2_x64.exe Pas de fichier FirewallRules: [UDP Query User{B8CDBF68-F348-4E93-82C4-8D9EC695D25E}E:\starcraft ii\versions\base77661\sc2_x64.exe] => (Allow) E:\starcraft ii\versions\base77661\sc2_x64.exe Pas de fichier FirewallRules: [{70EA009A-7A59-4163-9C9C-2B70B2E5D775}] => (Block) E:\starcraft ii\versions\base77661\sc2_x64.exe Pas de fichier FirewallRules: [{0241B382-FB98-4A94-B1BF-0666E58ECB1D}] => (Block) E:\starcraft ii\versions\base77661\sc2_x64.exe Pas de fichier FirewallRules: [TCP Query User{90D96222-1AC2-44FF-9BF5-E7ECB13C9243}E:\steamlibrary\steamapps\common\hunt showdown\bin\win_x64\huntgame.exe] => (Allow) E:\steamlibrary\steamapps\common\hunt showdown\bin\win_x64\huntgame.exe (Crytek GmbH -> Crytek GmbH) FirewallRules: [UDP Query User{1D89C6D7-E5AB-4CF4-9337-2E20E3DFF65B}E:\steamlibrary\steamapps\common\hunt showdown\bin\win_x64\huntgame.exe] => (Allow) E:\steamlibrary\steamapps\common\hunt showdown\bin\win_x64\huntgame.exe (Crytek GmbH -> Crytek GmbH) FirewallRules: [TCP Query User{F58C78A1-9B95-4998-9740-3FB7462ED935}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [UDP Query User{8C32EABF-6459-4319-94EB-98E8E16BD4A7}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{CE6D49EC-D14E-476F-A614-850BF9E4F527}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{FEC6B27B-0CB9-4880-9435-BDC6829FECBB}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{350AA5AC-D7B9-4A8C-9B43-B4D42AFB2513}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{57AD63AD-58E2-40C3-AAAA-8BE3403519A1}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{D589E5E1-D6C8-4227-8C84-51FEB1579D88}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Pas de fichier FirewallRules: [{B9EB19FC-B02C-476D-A150-5BE21DB2F2BD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Pas de fichier FirewallRules: [{30A72B30-38C6-4014-83BC-7D094C4CC077}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> ) FirewallRules: [{C081F664-672D-482C-ADD6-3C66D25111BC}] => (Allow) E:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> ) FirewallRules: [TCP Query User{31956FED-68D5-4291-8B43-5BC5113B4134}C:\program files (x86)\steam\steamapps\common\total war three kingdoms\three_kingdoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war three kingdoms\three_kingdoms.exe (The Creative Assembly Limited -> The Creative Assembly Ltd) FirewallRules: [UDP Query User{834D0DF9-500E-481E-8C41-3D81FEA18932}C:\program files (x86)\steam\steamapps\common\total war three kingdoms\three_kingdoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war three kingdoms\three_kingdoms.exe (The Creative Assembly Limited -> The Creative Assembly Ltd) FirewallRules: [{AE3B9923-3586-4ECA-A07F-15493FEE0F96}] => (Block) C:\program files (x86)\steam\steamapps\common\total war three kingdoms\three_kingdoms.exe (The Creative Assembly Limited -> The Creative Assembly Ltd) FirewallRules: [{1296CEF6-2730-49C2-9A76-6487E026A6E5}] => (Block) C:\program files (x86)\steam\steamapps\common\total war three kingdoms\three_kingdoms.exe (The Creative Assembly Limited -> The Creative Assembly Ltd) FirewallRules: [{2B8A67DB-89CD-4EA8-8BBC-3F4EC5B4A5F1}] => (Allow) E:\SteamLibrary\steamapps\common\The Universim\The Universim.exe (Crytivo Inc. -> ) FirewallRules: [{4B4B5FD3-18B5-4638-B00A-2D6B20FE0FDD}] => (Allow) E:\SteamLibrary\steamapps\common\The Universim\The Universim.exe (Crytivo Inc. -> ) FirewallRules: [{972AD27C-554D-4161-A6A5-6CB6ED1EB625}] => (Allow) E:\SteamLibrary\steamapps\common\Kingdom Two Crowns\KingdomTwoCrowns.exe () [Fichier non signé] FirewallRules: [{2F6B9740-D889-491D-83AF-A4BDC1AB96E9}] => (Allow) E:\SteamLibrary\steamapps\common\Kingdom Two Crowns\KingdomTwoCrowns.exe () [Fichier non signé] FirewallRules: [{3146FFE5-80DF-47FA-9B1B-810B6FC61756}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{210404E2-3BB7-424B-93AE-F829ECB25597}E:\epic games\satisfactoryearlyaccess\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) E:\epic games\satisfactoryearlyaccess\factorygame\binaries\win64\factorygame-win64-shipping.exe (Coffee Stain Studios AB) [Fichier non signé] FirewallRules: [UDP Query User{1109042F-9A32-4004-ABF9-608676675515}E:\epic games\satisfactoryearlyaccess\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) E:\epic games\satisfactoryearlyaccess\factorygame\binaries\win64\factorygame-win64-shipping.exe (Coffee Stain Studios AB) [Fichier non signé] FirewallRules: [{FA72803D-C593-41BB-9539-F9770643582D}] => (Allow) E:\SteamLibrary\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe (Larian Studios -> Larian Studios) FirewallRules: [{9326A5D3-EBE5-4F00-B849-AA375A3C5DBA}] => (Allow) E:\SteamLibrary\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe (Larian Studios -> Larian Studios) FirewallRules: [{07C0D68D-E92F-4C0F-B23E-09CFFC26B1B1}] => (Allow) E:\SteamLibrary\steamapps\common\No Man's Sky\Binaries\NMS.exe (Hello Games) [Fichier non signé] FirewallRules: [{69E2466E-C03D-46F0-A0F7-3D6D75D1A7B2}] => (Allow) E:\SteamLibrary\steamapps\common\No Man's Sky\Binaries\NMS.exe (Hello Games) [Fichier non signé] FirewallRules: [TCP Query User{F764EF9C-981D-45C2-BEA0-2F3B833F0CF7}E:\steamlibrary\steamapps\common\divinity original sin 2\defed\bin\eocapp.exe] => (Allow) E:\steamlibrary\steamapps\common\divinity original sin 2\defed\bin\eocapp.exe (Larian Studios -> ) FirewallRules: [UDP Query User{8C04C2BF-3354-4784-9AA6-4DBE44E3C906}E:\steamlibrary\steamapps\common\divinity original sin 2\defed\bin\eocapp.exe] => (Allow) E:\steamlibrary\steamapps\common\divinity original sin 2\defed\bin\eocapp.exe (Larian Studios -> ) FirewallRules: [{BD58507B-8624-4A41-B631-89EF30E02BD2}] => (Allow) E:\SteamLibrary\steamapps\common\Colony Survival\colonyclient.exe () [Fichier non signé] FirewallRules: [{FF6ADD5B-83E5-47F8-A497-E75BF1112A3F}] => (Allow) E:\SteamLibrary\steamapps\common\Colony Survival\colonyclient.exe () [Fichier non signé] FirewallRules: [{5D8E04BC-E5F6-46B4-9A3F-336B5724CF29}] => (Allow) E:\SteamLibrary\steamapps\common\Domina\Domina.exe (Dolphin Barn Incorporated) [Fichier non signé] FirewallRules: [{9FC9FD16-9A40-4285-891F-A547A2166822}] => (Allow) E:\SteamLibrary\steamapps\common\Domina\Domina.exe (Dolphin Barn Incorporated) [Fichier non signé] FirewallRules: [{52F21E30-2517-48A2-8587-24349F7CDC59}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{24203C17-6C8B-4F5F-A0E9-81A85A5FF290}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{CC2003AC-408A-4410-952E-F15F3260CDF0}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé] FirewallRules: [{CFE0700C-261F-485E-B68B-B17F449C879B}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe (Psyonix, LLC) [Fichier non signé] FirewallRules: [{A2D764B6-301A-4BEA-83C9-36B837793AEE}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Fichier non signé] FirewallRules: [{F0337A2B-7AD0-46AC-BF84-DD0995164015}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Fichier non signé] FirewallRules: [TCP Query User{1F1CDA06-C5B5-4C0E-8D38-F9A1157E6CB8}E:\epic games\satisfactoryexperimental\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) E:\epic games\satisfactoryexperimental\factorygame\binaries\win64\factorygame-win64-shipping.exe Pas de fichier FirewallRules: [UDP Query User{B798D985-1690-425B-8F5E-03130D93EAA6}E:\epic games\satisfactoryexperimental\factorygame\binaries\win64\factorygame-win64-shipping.exe] => (Allow) E:\epic games\satisfactoryexperimental\factorygame\binaries\win64\factorygame-win64-shipping.exe Pas de fichier FirewallRules: [{EB7935F3-FAE4-479C-8ED3-78C1891BB805}] => (Allow) E:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> ) FirewallRules: [{D4429817-6658-4033-B19A-EC478F91663B}] => (Allow) E:\SteamLibrary\steamapps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> ) FirewallRules: [{0A02A5FF-A973-49A7-8D25-A5A816E96D47}] => (Allow) E:\SteamLibrary\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> ) FirewallRules: [{CF6D96AA-417A-441E-8341-E05B10EC0D7E}] => (Allow) E:\SteamLibrary\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> ) FirewallRules: [{E672ABC5-89D0-4826-9913-E5D4567EA767}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{7DEAAA04-C2E5-496B-A58F-13448CA4FFC1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{439ECE7D-41A3-47D7-B7C3-30FA08D7DB49}] => (Allow) E:\SteamLibrary\steamapps\common\YoutubersLife\YoutubersLife.exe () [Fichier non signé] FirewallRules: [{9D8C3A3E-7EDE-4B47-89C1-9565ADE0B1A7}] => (Allow) E:\SteamLibrary\steamapps\common\YoutubersLife\YoutubersLife.exe () [Fichier non signé] FirewallRules: [{56036B53-D09D-4BBF-A632-D69AE6E58305}] => (Allow) E:\SteamLibrary\steamapps\common\Broomstick League\Broomstick.exe Pas de fichier FirewallRules: [{582A866F-20D9-4E82-833B-C492102E4293}] => (Allow) E:\SteamLibrary\steamapps\common\Broomstick League\Broomstick.exe Pas de fichier FirewallRules: [{4565D8B4-31DD-4CE5-AE31-4A248DC051A3}] => (Allow) E:\SteamLibrary\steamapps\common\LLBlaze\LLBlaze.exe () [Fichier non signé] FirewallRules: [{0C87C386-1B93-4F71-BDAF-2AA97528EEA2}] => (Allow) E:\SteamLibrary\steamapps\common\LLBlaze\LLBlaze.exe () [Fichier non signé] FirewallRules: [{E07B0235-2C24-441D-A947-23392C20DE0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{16A0CEEE-9E4E-4E45-A1BD-EDDB812B2C93}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{E1207522-81DB-48D7-A3CE-1A32520D0F0D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{C1D56726-CC49-4F55-A517-1EB4FE823E51}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{58400F6A-734B-4E94-A118-509030A497DD}] => (Allow) E:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé] FirewallRules: [{0791AC10-94BD-4DEC-913C-104655B8B884}] => (Allow) E:\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Fichier non signé] FirewallRules: [{57A6A691-6E60-4411-875B-07685B7052E1}] => (Allow) E:\SteamLibrary\steamapps\common\Kenshi\kenshi_x64.exe () [Fichier non signé] FirewallRules: [{C4913F51-D785-48CF-B895-84A3BE166545}] => (Allow) E:\SteamLibrary\steamapps\common\Kenshi\kenshi_x64.exe () [Fichier non signé] FirewallRules: [{E1D954BD-7287-47E8-AED7-3AA7384364E9}] => (Allow) E:\SteamLibrary\steamapps\common\Kenshi\forgotten construction set.exe (LoFi Games) [Fichier non signé] FirewallRules: [{E59F05BE-C1C0-4416-AF2A-28185EEFAFC1}] => (Allow) E:\SteamLibrary\steamapps\common\Kenshi\forgotten construction set.exe (LoFi Games) [Fichier non signé] FirewallRules: [TCP Query User{26B62503-B74B-4628-A459-A5D5177FF2A0}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [UDP Query User{1B8807B9-8CB4-4E47-951C-3ED2672D9FEC}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{9F97F6D8-C00E-46A9-8C93-400176A6F917}] => (Block) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{CE6BB84F-CE54-4BE9-A96B-FE818B899546}] => (Block) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{4D3DAB34-5814-44D4-AD46-66B508296317}] => (Allow) E:\SteamLibrary\steamapps\common\CraftTheWorld\CraftWorld.exe () [Fichier non signé] FirewallRules: [{5D9CA416-3796-4FA8-8EC8-A09D66F97B5E}] => (Allow) E:\SteamLibrary\steamapps\common\CraftTheWorld\CraftWorld.exe () [Fichier non signé] FirewallRules: [TCP Query User{8272A8D2-E227-4A28-AA51-5D7E00E81C88}C:\games\world_of_tanks_eu\win32\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win32\worldoftanks.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [UDP Query User{1D9E7ECF-F88E-4043-8AFE-A3E164E3D6BE}C:\games\world_of_tanks_eu\win32\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win32\worldoftanks.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{CE66524F-F4A6-4A36-AB33-6D8BF1A05E03}] => (Block) C:\games\world_of_tanks_eu\win32\worldoftanks.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{2439A1F4-F0C3-4D84-A1B6-B7B3F6C1C2A5}] => (Block) C:\games\world_of_tanks_eu\win32\worldoftanks.exe (Wargaming.net Limited -> Wargaming.net) FirewallRules: [{2E189AE1-9758-408C-9700-F76F3C586507}] => (Allow) E:\SteamLibrary\steamapps\common\CraftTheWorld\Editor.exe () [Fichier non signé] FirewallRules: [{7E7168F4-CFD7-4ED9-973A-51BBFF10BF06}] => (Allow) E:\SteamLibrary\steamapps\common\CraftTheWorld\Editor.exe () [Fichier non signé] FirewallRules: [{791DD45D-38E7-4F65-AA39-3A103E0803AE}] => (Allow) E:\SteamLibrary\steamapps\common\Transport Fever 2\TransportFever2.exe () [Fichier non signé] FirewallRules: [{5162A3FB-4616-46E3-823A-07E824F1A2D3}] => (Allow) E:\SteamLibrary\steamapps\common\Transport Fever 2\TransportFever2.exe () [Fichier non signé] FirewallRules: [TCP Query User{900B43B1-62EF-4390-8A84-FA0446172BFB}E:\games\avorion\bin\avorionserver.exe] => (Allow) E:\games\avorion\bin\avorionserver.exe Pas de fichier FirewallRules: [UDP Query User{2B5EB918-84B2-42BB-9212-9C8EBA6ABE1C}E:\games\avorion\bin\avorionserver.exe] => (Allow) E:\games\avorion\bin\avorionserver.exe Pas de fichier FirewallRules: [{784A43E8-790F-471F-8089-5AD6A8AE415F}] => (Allow) E:\games\avorion\bin\avorionserver.exe Pas de fichier FirewallRules: [{429D1F7C-2DEE-4FCA-B79E-E2F3268B4BE0}] => (Allow) E:\games\avorion\bin\avorionserver.exe Pas de fichier FirewallRules: [TCP Query User{63FA6B3E-D24A-4F5D-B12D-AB28E0C99476}E:\steamlibrary\steamapps\common\avorion\bin\avorionserver.exe] => (Allow) E:\steamlibrary\steamapps\common\avorion\bin\avorionserver.exe () [Fichier non signé] FirewallRules: [UDP Query User{276CF2F7-8F49-4374-A930-62F85637D293}E:\steamlibrary\steamapps\common\avorion\bin\avorionserver.exe] => (Allow) E:\steamlibrary\steamapps\common\avorion\bin\avorionserver.exe () [Fichier non signé] FirewallRules: [{CB49D7F9-ECC1-472F-B607-939A583E949E}] => (Allow) E:\SteamLibrary\steamapps\common\Enderal\Enderal Launcher.exe (SureAI) [Fichier non signé] FirewallRules: [{EAD57367-BE01-4C51-BC3D-5C02E5A5BF2A}] => (Allow) E:\SteamLibrary\steamapps\common\Enderal\Enderal Launcher.exe (SureAI) [Fichier non signé] FirewallRules: [{3ABF3D91-BDF5-4C22-9F23-8689D01078E6}] => (Allow) E:\SteamLibrary\steamapps\common\MountBlade Warband\mb_warband.exe ( Taleworlds Entertainment) [Fichier non signé] FirewallRules: [{C968BDA3-6486-4960-A108-B6E08BB9539D}] => (Allow) E:\SteamLibrary\steamapps\common\MountBlade Warband\mb_warband.exe ( Taleworlds Entertainment) [Fichier non signé] FirewallRules: [{FD879128-83B0-4602-9C33-486516BEE56A}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\RocketLeague.exe (Psyonix, Inc. -> Psyonix LLC) FirewallRules: [{EB6FE0FB-3898-489E-9157-96F7D2D96E11}] => (Allow) E:\SteamLibrary\steamapps\common\rocketleague\Binaries\RocketLeague.exe (Psyonix, Inc. -> Psyonix LLC) FirewallRules: [{CED51D50-5FB6-4A84-A715-54A4907F0055}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{EFED390F-FAD0-43CE-97AC-13B419814C74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{71F30228-B93D-4889-986F-390133D80C88}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{1855C2EA-B3D8-45B3-85C5-2AE1EB3A6F4B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{956122C7-0948-4770-86B6-5F8AF1250DBC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{0698E8BA-7E25-4F75-9633-275039CB26DA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{A0622159-74C5-4332-BBCD-77E181E5C590}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{EE7DE0B5-4B7D-49B5-B21D-B75E45226228}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.128.721.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd) FirewallRules: [{7D8C20E6-4A5F-459E-BD5C-76928298191B}] => (Allow) E:\SteamLibrary\steamapps\common\Assassins Creed Odyssey\ACOdyssey.exe (UBISOFT ENTERTAINMENT INC. -> ) FirewallRules: [{05E4E447-C3FD-4AE7-ADDD-8F888D8EC4FF}] => (Allow) E:\SteamLibrary\steamapps\common\Assassins Creed Odyssey\ACOdyssey.exe (UBISOFT ENTERTAINMENT INC. -> ) FirewallRules: [TCP Query User{803F5899-202E-47D0-B7FC-93B30806FD7F}C:\program files (x86)\ubisoft\ubisoft game launcher\games\roller champions\roller.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\roller champions\roller.exe Pas de fichier FirewallRules: [UDP Query User{8493DEE9-25EB-47D4-84A6-25E87F83BBC0}C:\program files (x86)\ubisoft\ubisoft game launcher\games\roller champions\roller.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\roller champions\roller.exe Pas de fichier FirewallRules: [{B2911C2B-EF91-4409-9497-6910C2ED79B1}] => (Allow) E:\SteamLibrary\steamapps\common\Total War Rome II\launcher\launcher.exe (The Creative Assembly Limited -> Creative Assembly Ltd) FirewallRules: [{31BDD642-5BF0-4875-8DA6-086E0D37F5FD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War Rome II\launcher\launcher.exe (The Creative Assembly Limited -> Creative Assembly Ltd) FirewallRules: [{349DE29C-BA63-42D3-8A1C-8282AA7A3725}] => (Allow) E:\SteamLibrary\steamapps\common\Avorion\bin\Avorion.exe () [Fichier non signé] FirewallRules: [{F5A99E29-4530-435B-821D-837454949E6C}] => (Allow) E:\SteamLibrary\steamapps\common\Avorion\bin\Avorion.exe () [Fichier non signé] FirewallRules: [{0503A7D9-A40B-4C4B-86AA-E0387B2131C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War THREE KINGDOMS\launcher\launcher.exe (The Creative Assembly Limited -> Creative Assembly Ltd) FirewallRules: [{BE257BE8-A2A4-425D-9351-390D04564CF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War THREE KINGDOMS\launcher\launcher.exe (The Creative Assembly Limited -> Creative Assembly Ltd) FirewallRules: [TCP Query User{D66C1BB9-877C-4089-B5C2-8888CD4B293F}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe FirewallRules: [UDP Query User{167BA6A1-8000-4B06-8B61-CE526E391694}C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_241\bin\javaw.exe FirewallRules: [{94A419EA-8E3D-4C76-A0D2-C7A7316084E0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{6C220747-73A7-4F60-8F44-FF510778A137}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno 1800\Bin\Win64\Anno1800.exe (Blue Byte GmbH -> Ubisoft) FirewallRules: [{1C2F4100-F602-441F-9F8F-658734892F11}] => (Allow) E:\SteamLibrary\steamapps\common\Brawlhalla\Brawlhalla.exe () [Fichier non signé] FirewallRules: [{0B1E3244-F23A-4DB5-9B73-DB756E675351}] => (Allow) E:\SteamLibrary\steamapps\common\Brawlhalla\Brawlhalla.exe () [Fichier non signé] FirewallRules: [{D8B5402C-F031-4761-926A-3D4CCABEE0D4}] => (Allow) E:\SteamLibrary\steamapps\common\Warhammer Vermintide 2\launcher\Launcher.exe (Fatshark AB -> Fatshark AB) FirewallRules: [{362832F4-DDAD-488D-B950-1EA95DEFD882}] => (Allow) E:\SteamLibrary\steamapps\common\Warhammer Vermintide 2\launcher\Launcher.exe (Fatshark AB -> Fatshark AB) FirewallRules: [{A5F624FA-A28B-4158-AE5D-6C9E1ED8DC3A}] => (Allow) E:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe () [Fichier non signé] FirewallRules: [{9C60B592-38A9-453E-9E1E-DB5CDCCC75FA}] => (Allow) E:\SteamLibrary\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe () [Fichier non signé] FirewallRules: [{541C09CB-B82E-4EAA-B493-0D841D6640D1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War THREE KINGDOMS\launcher\launcher.exe (The Creative Assembly Limited -> Creative Assembly Ltd) FirewallRules: [{CEFAA1F6-6994-4419-8A7C-C9AC5F8722E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Total War THREE KINGDOMS\launcher\launcher.exe (The Creative Assembly Limited -> Creative Assembly Ltd) FirewallRules: [{64119B3C-2DDC-4034-A2BD-B489D3FB597E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Knights of the Old Republic II\swkotor2.exe (Obsidian Entertainment, Inc.) [Fichier non signé] FirewallRules: [{70799ADE-51CF-43C7-B780-2B0B70F0B0E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Knights of the Old Republic II\swkotor2.exe (Obsidian Entertainment, Inc.) [Fichier non signé] ==================== Points de restauration ========================= 13-03-2020 20:33:58 DirectX est installé 17-03-2020 10:21:04 Windows Update 20-03-2020 17:03:34 Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 20-03-2020 17:03:42 Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (03/24/2020 10:17:32 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (14364,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 10:06:13 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (11844,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 09:58:34 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (19336,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 09:53:22 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (21648,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 09:39:27 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (10420,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 08:50:05 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (14412,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 08:39:27 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (17924,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Error: (03/24/2020 07:54:28 AM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (19628,R,98) TILEREPOSITORYS-1-5-18: L’erreur -1023 (0xfffffc01) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log. Erreurs système: ============= Error: (03/24/2020 10:14:24 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MHP2J9A) Description: Le serveur {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (03/23/2020 09:28:30 PM) (Source: DCOM) (EventID: 10010) (User: AUTORITE NT) Description: Le serveur {E60687F7-01A1-40AA-86AC-DB1CBF673334} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (03/23/2020 08:31:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 6000 millisecondes : Redémarrer le service. Error: (03/23/2020 08:31:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service NVIDIA LocalSystem Container s’est arrêté avec l’erreur : Un exécutable de commande générique a renvoyé un résultat qui indique un échec. Error: (03/23/2020 02:25:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Service utilisateur de notifications Push Windows_85b05 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service. Error: (03/23/2020 12:19:27 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: L’arrêt système précédant à 12:18:06 le ‎23/‎03/‎2020 n’était pas prévu. Error: (03/23/2020 11:27:45 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MHP2J9A) Description: Le serveur {D18705BE-FC2F-44C8-AEFF-1CD49AEA8FC1} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (03/23/2020 11:03:27 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service Service utilisateur de notifications Push Windows_942b4 s’est terminé de façon inattendue pour la 7ème fois. Windows Defender: =================================== Date: 2020-03-10 19:21:48.653 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {7300EAF0-3044-461B-B0F1-7DC56C5F2711} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : DESKTOP-MHP2J9A\Antoine Date: 2020-02-20 23:20:12.926 Description: Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.D!ml&threatid=2147749373&enterprise=0 Nom : Trojan:Win32/Wacatac.D!ml ID : 2147749373 Gravité : Grave Catégorie : Cheval de Troie Chemin : file:_D:\setup.exe Origine de la détection : Ordinateur local Type de détection : Chemin rapide Source de détection : Système Utilisateur : AUTORITE NT\Système Nom du processus : C:\Windows\explorer.exe Version de la veille de sécurité : AV: 1.309.1371.0, AS: 1.309.1371.0, NIS: 1.309.1371.0 Version du moteur : AM: 1.1.16700.3, NIS: 1.1.16700.3 Date: 2020-02-20 23:20:12.114 Description: Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Wacatac.D!ml&threatid=2147749373&enterprise=0 Nom : Trojan:Win32/Wacatac.D!ml ID : 2147749373 Gravité : Grave Catégorie : Cheval de Troie Chemin : file:_D:\setup.exe Origine de la détection : Ordinateur local Type de détection : Chemin rapide Source de détection : Système Utilisateur : AUTORITE NT\Système Nom du processus : Unknown Version de la veille de sécurité : AV: 1.309.1371.0, AS: 1.309.1371.0, NIS: 1.309.1371.0 Version du moteur : AM: 1.1.16700.3, NIS: 1.1.16700.3 Date: 2020-03-20 22:10:24.433 Description: Antivirus Windows Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.311.1574.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.16800.2 Code d’erreur : 0x80240022 Description de l’erreur : Le programme ne peut pas rechercher les mises à jour de définitions. Date: 2020-03-20 22:10:24.432 Description: Antivirus Windows Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.311.1574.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.16800.2 Code d’erreur : 0x80240022 Description de l’erreur : Le programme ne peut pas rechercher les mises à jour de définitions. Date: 2020-02-22 15:36:25.157 Description: Antivirus Windows Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.309.1371.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.16700.3 Code d’erreur : 0x80072f8f Description de l’erreur : Une erreur de sécurité s’est produite Date: 2020-02-14 20:06:32.489 Description: Antivirus Windows Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.309.854.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.16700.3 Code d’erreur : 0x80240016 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. CodeIntegrity: =================================== Date: 2020-03-24 10:48:12.368 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements. Date: 2020-03-24 10:48:12.077 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements. Date: 2020-03-24 10:47:38.600 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-24 10:47:38.588 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-24 10:11:46.569 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-24 10:11:46.567 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-24 10:11:46.372 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\aswhook.dll that did not meet the Microsoft signing level requirements. Date: 2020-03-24 10:11:46.371 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume4\Program Files\AVAST Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements. ==================== Infos Mémoire =========================== BIOS: American Megatrends Inc. M.00 08/05/2019 Carte mère: Micro-Star International Co., Ltd. X470 GAMING PRO MAX (MS-7B79) Processeur: AMD Ryzen 5 3600 6-Core Processor Pourcentage de mémoire utilisée: 43% Mémoire physique - RAM - totale: 16330.46 MB Mémoire physique - RAM - disponible: 9165 MB Mémoire virtuelle totale: 21194.46 MB Mémoire virtuelle disponible: 7478.43 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:465.16 GB) (Free:206.36 GB) NTFS Drive e: (HDD) (Fixed) (Total:1863 GB) (Free:610.38 GB) NTFS \\?\Volume{e8a51b99-631e-4afc-a3ff-cf3950bea3a1}\ () (Fixed) (Total:0.49 GB) (Free:0.05 GB) NTFS \\?\Volume{5a8da1a9-303a-6d29-85c0-8c36c85f7fdc}\ () (Fixed) (Total:2.07 GB) (Free:0 GB) NTFS \\?\Volume{3dcf93a7-18b7-b60b-7f81-39fb512c1568}\ () (Fixed) (Total:8.4 GB) (Free:0 GB) NTFS \\?\Volume{096da351-2f6d-7942-5107-31114209c06e}\ () (Fixed) (Total:57.66 GB) (Free:0 GB) NTFS \\?\Volume{947c07af-575c-588f-8330-9332f450bc9d}\ () (Fixed) (Total:41.56 GB) (Free:0 GB) NTFS \\?\Volume{978786d5-a6d4-432a-90ad-977be2029edb}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. Attempted reading MBR returned 0 bytes. Could not read MBR for disk 2. Attempted reading MBR returned 0 bytes. Could not read MBR for disk 3. Attempted reading MBR returned 0 bytes. Could not read MBR for disk 4. Attempted reading MBR returned 0 bytes. Could not read MBR for disk 5. ==================== Fin de Addition.txt =======================