Résultats de correction de Farbar Recovery Scan Tool (x64) Version: 21-08-2021 Exécuté par nadac (27-08-2021 08:53:38) Run:1 Exécuté depuis C:\Users\nadac\Downloads Profils chargés: nadac Mode d'amorçage: Normal ============================================== fixlist contenu: ***************** CreateRestorePoint: CloseProcesses: HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction HKU\S-1-5-21-3146612119-1447694991-794874632-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [33169992 2021-03-18] (Piriform Software Ltd -> Piriform Software Ltd) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\92.0.4515.159\Installer\chrmstp.exe [2021-08-19] (Google LLC -> Google LLC) GroupPolicy: Restriction ? HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction DeleteValue: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|{7C046CF8-759C-4301-A95C-2D5FD8AD23DE} DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Steam DeleteValue: HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|EpicGamesLauncher DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run|Steam] DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run|EpicGamesLauncher] DeleteKey: HKLM\SOFTWARE\POLICIES\Mozilla\Firefox DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{567B422D-86AF-499B-9BA5-1DDC886978CD}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{4708F83D-BAC8-4908-BE1C-EF6222A6C70C}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{542ABD82-7802-46B7-BF10-1AC14733F2EF}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{9A218985-3049-4917-9EE7-01977943D60B}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{5F6E9E57-7AF7-40AC-9F5C-0A2C3F35CA8A}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{95D61BAC-4387-4897-9DD7-7BB63C1CC3EA}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{BC3749C7-E1E9-4B2B-81B3-E91C98CA28F9}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{BF1E94EA-A5F4-4E5C-800D-4226B990ED28}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{E95E5CE9-74A4-403E-9467-4CF533188E6D}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{864FEA67-9A7C-4910-9E32-AA511496AE3C}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{D86A77CF-DD72-45BB-8A39-3D849E7E7504}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{A438D69E-60E4-4EA3-929B-5856006D577C}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{B0830FA0-E7FF-4067-A793-AEBC81EFEEF5}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{1302ED56-31B4-42C5-8D5E-195AB02900BF}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{82C3DEA6-7D87-417D-9879-8C0BA7A37786}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{ECBA0E4B-C6D0-4404-B87E-B84A13B38818}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{A1907F1F-8670-4B6C-956E-4B103167CFBD}C:\program files\epic games\paladins\binaries\win64\paladins.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{DA7450AF-326C-4900-8A1C-6FF92F05427B}C:\program files\epic games\paladins\binaries\win64\paladins.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{A4F6EEA3-68E0-4CEC-BEB5-A6ACF5E1DEF4}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{4FC64AC3-2552-4F3C-A8F4-95C8BE6DD1A5}C:\games\world_of_tanks_eu\win64\worldoftanks.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{38702402-CCC6-40CA-BAC0-70E965A3290C}C:\program files\epic games\paladins\binaries\win64\paladins.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{E2410E0A-2286-4ED0-934F-572A031C3D48}C:\program files\epic games\paladins\binaries\win64\paladins.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C23A1153-F368-42AB-AF55-C51B395D87F8}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CAD88F47-25DA-42AC-8153-E3DFD366C2E6}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{F271AB11-112D-494C-AF9B-A53B4F256876}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{9BA14D0A-C0B6-43D3-94EB-1883232D9023}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{3AA6B6BB-5DF9-4A5C-ADA0-E8819A4250B5}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CEFFA9B0-17FE-483A-8164-B6134BEB6C03}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{CB8E399D-7291-422A-A930-362F69A17580}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{10FF04D9-947B-4265-90D4-C59038A50641}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{E9D0917C-240F-45C8-A461-F2A608B01E82}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{60DD2C92-F563-4604-B977-2D7D91B258B3}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{6731B656-2FA6-4878-BD7D-59288664CC39}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{7B5AFFDC-2D1E-4363-8117-DF4EF50530C9}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{C03FD084-2D40-40ED-8E24-F72A05F59800}" DeleteValue: HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|{9A63098A-2775-477C-8414-5F566EDA58BE}" DeleteKey: HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 DeleteKey: HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} DeleteKey: HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 DeleteKey: HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\000 C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\001 DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName DeleteValue: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName DeleteValue: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache|C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 DeleteKey: HKCU\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8 DeleteKey: HKCU\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e DeleteKey: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8 DeleteKey: HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e C:\Program Files (x86)\Company DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 S3 WdNisSvc; "%ProgramData%\Microsoft\Windows Defender\platform\4.18.2103.7-0\NisSrv.exe" [X] S2 WinDefend; "C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2103.7-0\MsMpEng.exe" [X] 2021-08-26 12:40 - 2021-08-26 12:40 - 000001046 _____ C:\Users\nadac\Desktop\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT 2021-08-22 21:04 - 2021-08-22 21:04 - 000001046 _____ C:\ProgramData\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT 2021-08-22 19:54 - 2021-08-22 21:04 - 000000000 ____D C:\ProgramData\70W5UKWS426DKBHE1IT9R6001 2021-08-22 19:54 - 2021-08-22 19:56 - 000000000 ____D C:\ProgramData\JUHCKWPS1610DSWZDV4UU4RJK 2021-08-22 19:53 - 2021-08-22 19:53 - 000305049 _____ C:\Users\nadac\AppData\LocalLow\sqlite3.dll 2021-08-22 19:53 - 2021-08-22 19:53 - 000000000 ____D C:\ProgramData\{1D7BD5EC-1EA9-44E8-9114-08DDFBD26AB9} 2021-08-22 19:52 - 2021-08-22 21:04 - 000000000 ____D C:\ProgramData\A7MZ6PQXZKJ1YK0K2LNYGZ2C2 2021-08-22 19:51 - 2021-08-22 19:51 - 000000000 ____D C:\ProgramData\FIPYNJIUJ3L62O82MV7YQOAI7 2021-08-20 23:15 - 2021-08-22 20:11 - 004074273 _____ C:\Users\nadac\Desktop\oka.flp.payfast.206-0A0-8D2 2021-08-20 13:21 - 2021-08-20 23:09 - 001322119 _____ C:\Users\nadac\Desktop\fg - Copie.flp.payfast.206-0A0-8D2 2021-08-16 21:50 - 2021-08-16 21:50 - 001235050 _____ C:\Users\nadac\Desktop\fg_2.flp.payfast.206-0A0-8D2 2021-08-16 21:41 - 2021-08-16 21:55 - 001234689 _____ C:\Users\nadac\Desktop\fg.flp.payfast.206-0A0-8D2 2021-08-16 19:31 - 2021-08-16 19:32 - 001427293 _____ C:\Users\nadac\Downloads\video0.mp4 2021-08-16 10:42 - 2021-08-16 10:42 - 007008601 _____ C:\Users\nadac\Desktop\untitled.wav.payfast.206-0A0-8D2 2021-08-16 01:12 - 2021-08-16 16:46 - 001456628 _____ C:\Users\nadac\Desktop\orchestrap3_3.flp.payfast.206-0A0-8D2 2021-08-16 00:12 - 2021-08-16 01:07 - 001456570 _____ C:\Users\nadac\Desktop\orchestrap3_2.flp.payfast.206-0A0-8D2 2021-08-15 20:31 - 2021-08-15 20:31 - 001457581 _____ C:\Users\nadac\Desktop\orchestrap3.flp.payfast.206-0A0-8D2 2021-08-15 19:02 - 2021-08-15 19:02 - 001446436 _____ C:\Users\nadac\Desktop\orchestrap_2.flp.payfast.206-0A0-8D2 2021-08-15 14:06 - 2021-08-15 18:23 - 001425476 _____ C:\Users\nadac\Desktop\orchestrap.flp.payfast.206-0A0-8D2 FirewallRules: [TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe] => (Allow) C:\program files\qbittorrent\qbittorrent.exe => Pas de fichier FirewallRules: [UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe] => (Allow) C:\program files\qbittorrent\qbittorrent.exe => Pas de fichier EmptyTemp: ***************** Le Point de restauration a été créé avec succès. Processus fermé avec succès. HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => supprimé(es) avec succès "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Microsoft\Windows\CurrentVersion\Run\\CCleaner Smart Cleaning" => supprimé(es) avec succès HKLM\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96} => supprimé(es) avec succès C:\Windows\system32\GroupPolicy\Machine => déplacé(es) avec succès HKLM\SOFTWARE\Policies\Mozilla => supprimé(es) avec succès "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\{7C046CF8-759C-4301-A95C-2D5FD8AD23DE}" => supprimé(es) avec succès "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\Steam" => supprimé(es) avec succès "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\\EpicGamesLauncher" => supprimé(es) avec succès "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run\\Steam]" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\\Software\Microsoft\Windows\CurrentVersion\Run\\EpicGamesLauncher]" => non trouvé(e) "HKLM\SOFTWARE\POLICIES\Mozilla\Firefox" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{567B422D-86AF-499B-9BA5-1DDC886978CD}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{4708F83D-BAC8-4908-BE1C-EF6222A6C70C}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{542ABD82-7802-46B7-BF10-1AC14733F2EF}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9A218985-3049-4917-9EE7-01977943D60B}C:\users\nadac\desktop\arduino-nightly-windows\arduino-nightly\java\bin\javaw.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{5F6E9E57-7AF7-40AC-9F5C-0A2C3F35CA8A}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{95D61BAC-4387-4897-9DD7-7BB63C1CC3EA}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{BC3749C7-E1E9-4B2B-81B3-E91C98CA28F9}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{BF1E94EA-A5F4-4E5C-800D-4226B990ED28}C:\program files (x86)\call of duty modern warfare\modernwarfare.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E95E5CE9-74A4-403E-9467-4CF533188E6D}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{864FEA67-9A7C-4910-9E32-AA511496AE3C}C:\program files\epic games\rainbowsixsiege\rainbowsix.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{D86A77CF-DD72-45BB-8A39-3D849E7E7504}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{A438D69E-60E4-4EA3-929B-5856006D577C}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{B0830FA0-E7FF-4067-A793-AEBC81EFEEF5}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{1302ED56-31B4-42C5-8D5E-195AB02900BF}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{82C3DEA6-7D87-417D-9879-8C0BA7A37786}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{ECBA0E4B-C6D0-4404-B87E-B84A13B38818}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A1907F1F-8670-4B6C-956E-4B103167CFBD}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{DA7450AF-326C-4900-8A1C-6FF92F05427B}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{A4F6EEA3-68E0-4CEC-BEB5-A6ACF5E1DEF4}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{4FC64AC3-2552-4F3C-A8F4-95C8BE6DD1A5}C:\games\world_of_tanks_eu\win64\worldoftanks.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{38702402-CCC6-40CA-BAC0-70E965A3290C}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{E2410E0A-2286-4ED0-934F-572A031C3D48}C:\program files\epic games\paladins\binaries\win64\paladins.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C23A1153-F368-42AB-AF55-C51B395D87F8}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CAD88F47-25DA-42AC-8153-E3DFD366C2E6}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{F271AB11-112D-494C-AF9B-A53B4F256876}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{9BA14D0A-C0B6-43D3-94EB-1883232D9023}C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{3AA6B6BB-5DF9-4A5C-ADA0-E8819A4250B5}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CEFFA9B0-17FE-483A-8164-B6134BEB6C03}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{CB8E399D-7291-422A-A930-362F69A17580}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{10FF04D9-947B-4265-90D4-C59038A50641}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{E9D0917C-240F-45C8-A461-F2A608B01E82}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{60DD2C92-F563-4604-B977-2D7D91B258B3}C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{6731B656-2FA6-4878-BD7D-59288664CC39}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{7B5AFFDC-2D1E-4363-8117-DF4EF50530C9}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{C03FD084-2D40-40ED-8E24-F72A05F59800}"" => non trouvé(e) "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{9A63098A-2775-477C-8414-5F566EDA58BE}"" => non trouvé(e) HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès HKLM\Software\Classes\CLSID\{B41DB860-8EE4-11D2-9906-E49FADC173CA} => non trouvé(e) HKLM\Software\Classes\lnkfile\shellex\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\WinRAR32 => supprimé(es) avec succès C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\000 => déplacé(es) avec succès C:\Users\nadac\AppData\Local\Google\Chrome\User Data\Default\File System\001 => déplacé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName" => supprimé(es) avec succès "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany" => supprimé(es) avec succès "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Steam\Steam.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\call of duty modern warfare\modernwarfare.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Origin Games\Apex\r5apex.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Call of Duty Modern Warfare\Modern Warfare Launcher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\games\world_of_tanks_eu\win64\worldoftanks.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Epic Games\rocketleague\Binaries\Win64\RocketLeague.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\System\Tools\Plugin Manager\PluginManager.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\paladins\binaries\win64\paladins.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\AppData\Local\Discord\app-0.0.309\Discord.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Games\World_of_Tanks_EU\wgc_api.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files (x86)\minecraft launcher\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files\Image-Line\FL Studio 20\FL.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\program files\epic games\rainbowsixsiege\rainbowsix_vulkan.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\ZHPCleaner.exe.ApplicationCompany" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.FriendlyAppName" => non trouvé(e) "HKU\S-1-5-21-3146612119-1447694991-794874632-1001\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\MuiCache\\C:\Users\nadac\Desktop\jdk-16.0.1_windows-x64_bin.exe.ApplicationCompany" => non trouvé(e) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 => non trouvé(e) HKCU\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8 => supprimé(es) avec succès HKCU\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e => supprimé(es) avec succès HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8 => non trouvé(e) HKU\S-1-5-21-3146612119-1447694991-794874632-1001\SOFTWARE\d4cd4c7a-5fb2-540e-b192-7e46d93e510e => non trouvé(e) C:\Program Files (x86)\Company => déplacé(es) avec succès HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 => non trouvé(e) HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\NewProduct 1.00 => supprimé(es) avec succès HKLM\System\CurrentControlSet\Services\WdNisSvc => impossible à supprimer, clé était peut-être protégé(e) HKLM\System\CurrentControlSet\Services\WinDefend => impossible à supprimer, clé était peut-être protégé(e) Impossible de déplacer "C:\Users\nadac\Desktop\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT" => Planifié pour déplacement au redémarrage. C:\ProgramData\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT => déplacé(es) avec succès C:\ProgramData\70W5UKWS426DKBHE1IT9R6001 => déplacé(es) avec succès C:\ProgramData\JUHCKWPS1610DSWZDV4UU4RJK => déplacé(es) avec succès C:\Users\nadac\AppData\LocalLow\sqlite3.dll => déplacé(es) avec succès C:\ProgramData\{1D7BD5EC-1EA9-44E8-9114-08DDFBD26AB9} => déplacé(es) avec succès C:\ProgramData\A7MZ6PQXZKJ1YK0K2LNYGZ2C2 => déplacé(es) avec succès C:\ProgramData\FIPYNJIUJ3L62O82MV7YQOAI7 => déplacé(es) avec succès C:\Users\nadac\Desktop\oka.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\fg - Copie.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\fg_2.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\fg.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Downloads\video0.mp4 => déplacé(es) avec succès C:\Users\nadac\Desktop\untitled.wav.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\orchestrap3_3.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\orchestrap3_2.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\orchestrap3.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\orchestrap_2.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès C:\Users\nadac\Desktop\orchestrap.flp.payfast.206-0A0-8D2 => déplacé(es) avec succès "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\TCP Query User{249AC4A3-D7B3-4F7E-9824-BAF1D3089A6C}C:\program files\qbittorrent\qbittorrent.exe" => supprimé(es) avec succès "HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\UDP Query User{93084514-3499-428C-90DC-D262AA64C721}C:\program files\qbittorrent\qbittorrent.exe" => supprimé(es) avec succès =========== EmptyTemp: ========== BITS transfer queue => 9199616 B DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10582703 B Java, Flash, Steam htmlcache => 171482376 B Windows/system/drivers => 2186052 B Edge => 0 B Chrome => 653198157 B Firefox => 196389691 B Opera => 0 B Temp, IE cache, history, cookies, recent: Default => 0 B ProgramData => 0 B Public => 0 B systemprofile => 0 B systemprofile32 => 0 B LocalService => 0 B NetworkService => 18611384 B nadac => 148378499 B RecycleBin => 0 B EmptyTemp: => 1.1 GB données temporaires supprimées. ================================ Résultats du déplacement planifié des fichiers (Mode d'amorçage: Normal) (Date&Heure: 27-08-2021 09:10:32) C:\Users\nadac\Desktop\!!! ALL YOUR FILES ARE ENCRYPTED !!!.TXT => déplacé(es) avec succès Résultats de la suppression planifiée des clés après redémarrage: HKLM\System\CurrentControlSet\Services\WdNisSvc => impossible à supprimer, clé était peut-être protégé(e) HKLM\System\CurrentControlSet\Services\WinDefend => impossible à supprimer, clé était peut-être protégé(e) ==== Fin de Fixlog 09:11:04 ====