Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-01-2023 Exécuté par CoinCoin (11-01-2023 17:15:03) Exécuté depuis C:\Users\CoinCoin\Documents\IDM Microsoft Windows 7 Édition Intégrale Service Pack 1 (X64) (2021-01-20 01:30:36) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) Administrateur (S-1-5-21-1501871606-60433178-1570617971-500 - Administrator - Disabled) CoinCoin (S-1-5-21-1501871606-60433178-1570617971-1000 - Administrator - Enabled) => C:\Users\CoinCoin Invité (S-1-5-21-1501871606-60433178-1570617971-501 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Norton Security (Disabled - Up to date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0} AS: Norton Security (Disabled - Up to date) {15AFC0C2-D2DD-6687-2B42-201BAA7C816D} AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Norton Security (Disabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) ACDSee Ultimate 10 (64-bits) (HKLM\...\{F1BD782B-A54A-4BC1-9A4E-CF64CFF019BD}) (Version: 10.4.0.912 - ACD Systems International Inc.) Adobe Acrobat DC (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-0C0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated) BenVista PhotoZoom Pro 7.0.2 (HKU\S-1-5-21-1501871606-60433178-1570617971-1000\...\PhotoZoom Pro 7) (Version: 7.0.2 - BenVista Ltd.) BitTorrent (HKU\S-1-5-21-1501871606-60433178-1570617971-1000\...\BitTorrent) (Version: 7.11.0.46555 - BitTorrent Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: - ‪Canon Inc.‬) Canon MG6300 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG6300_series) (Version: 1.01 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.) CloneCD (HKLM-x32\...\CloneCD) (Version: 5.3.4.0 - SlySoft) CyberLink PowerDVD 18 (HKLM-x32\...\{0F4F617F-E8D5-46A3-A0F9-43855182A3B1}) (Version: 18.0.2307.62 - CyberLink Corp.) EaseUS Todo Backup 13.0 Trial (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 13.0 - CHENGDU YIWO Tech Development Co., Ltd) East-Tec Eraser 2012 Version 10.0 (HKLM-x32\...\East-Tec Eraser 2012_is1) (Version: 10.0.6.100 - EAST Technologies) GetDataBack for NTFS (HKLM-x32\...\{56582EEA-3AEF-4D84-8B9D-C87A3CD9250F}) (Version: 4.33.000 - Runtime Software) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 109.0.5414.74 - Google LLC) Intel(R) Graphics Driver Software (HKLM-x32\...\{db70f544-dfdb-476d-a3df-88e33a4d61e7}) (Version: 3.11.1.0 - Intel) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{81E3719B-FF99-4624-8F44-34CA8A0558A1}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{C12959F3-546B-412B-A25D-2F35C2E698AE}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{D5D7A32F-831F-457F-95E8-812B279ED7FF}) (Version: 11.0.6.1194 - Intel Corporation) Hidden Intel(R) ME UninstallLegacy (HKLM\...\{CDCB07E6-AF55-4BF2-8908-46C93B8BFD1C}) (Version: 1.0.1.0 - Intel Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.5180 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.16.1063 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{9503AD68-6198-4081-9F57-1F346D7B58D4}) (Version: 14.8.16.1063 - Intel Corporation) Hidden Intel(R) Rapid Storage Technology enterprise (HKLM\...\{96613175-E550-4300-A213-DF425A573A6A}) (Version: 5.5.0.1367 - Intel Corporation) Hidden Intel(R) USB 3.0\3.1 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 5.0.4.43 - Intel Corporation) Intel® Trusted Connect Service Client (HKLM\...\{3973721B-C2ED-4505-98B6-752897ECF2F1}) (Version: 1.42.680.1 - Intel Corporation) Hidden Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: 6.39.3 - Tonec Inc.) Java 8 Update 341 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180341F0}) (Version: 8.0.3410.10 - Oracle Corporation) K-Lite Mega Codec Pack 16.0.8 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 16.0.8 - KLCP) Microsoft .NET Framework 4.8 (FRA) (HKLM\...\{EED6E294-BB0E-32E8-B448-92F2B59EB418}) (Version: 4.8.03761 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.8 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.8.03761 - Microsoft Corporation) Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden Microsoft .NET Framework 4.8 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.8.03761 - Microsoft Corporation) Microsoft Office Professionnel Plus 2019 - fr-fr (HKLM\...\ProPlus2019Retail - fr-fr) (Version: 16.0.12026.20264 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{CA8A885F-E95B-3FC6-BB91-F4D9377C7686}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 x64 Additional Runtime - 14.0.24210 (HKLM\...\{95265B86-188E-3F62-9CDB-60FCE59EC721}) (Version: 14.0.24210 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015 x64 Minimum Runtime - 14.0.24210 (HKLM\...\{C0B2C673-ECAA-372D-94E5-E89440D087AD}) (Version: 14.0.24210 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.24215 (HKLM-x32\...\{69BCE4AC-9572-3271-A2FB-9423BDA36A43}) (Version: 14.0.24215 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.24215 (HKLM-x32\...\{BBF2AC74-720C-3CB3-8291-5E34039232FA}) (Version: 14.0.24215 - Microsoft Corporation) Hidden Molotov 4.6.0 (HKU\S-1-5-21-1501871606-60433178-1570617971-1000\...\13767fb8-1090-5f10-9b1e-b497b7aff594) (Version: 4.6.0 - Molotov) Mozilla Firefox (x64 fr) (HKLM\...\Mozilla Firefox 108.0.2 (x64 fr)) (Version: 108.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 84.0.2 - Mozilla) Norton Security (HKLM-x32\...\NGC) (Version: 22.22.10.9 - NortonLifeLock Inc) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.12026.20264 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.12026.20264 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.12026.20264 - Microsoft Corporation) Hidden PowerISO (HKLM-x32\...\PowerISO) (Version: 8.1 - Power Software Ltd) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.141.511.2021 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8454 - Realtek Semiconductor Corp.) Realtek USB Wireless LAN Driver (HKLM-x32\...\InstallShield_{DBCC4C27-F949-482b-B786-7B3B67587CD2}) (Version: Drv_3.00.0019 - REALTEK Semiconductor Corp.) Revo Uninstaller 2.3.8 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.3.8 - VS Revo Group, Ltd.) Technologie de stockage Intel(R) Rapid entreprise (HKLM-x32\...\{1a1a8962-f5a0-47f7-bb11-3eea93944169}) (Version: 5.5.0.1367 - Intel Corporation) TuneUp Utilities 2011 (HKLM-x32\...\TuneUp Utilities 2011) (Version: 10.0.2011.66 - TuneUp Software) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.83 Build 20 - Windscribe Limited) WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) Wondershare Filmora(Build 8.5.2) (HKLM\...\Wondershare Filmora_is1) (Version: - Wondershare Software) Wondershare Helper Compact 2.6.0 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.6.0 - Wondershare) xp-AntiSpy 3.98-2 (HKLM-x32\...\xp-AntiSpy) (Version: - Christian Taubenheim) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-1501871606-60433178-1570617971-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel(R) pGFX 2020 -> Intel Corporation) ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2021-03-03] (Tonec Inc. -> Tonec FZE) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [$PowerDVD18] -> {EF1ED1FB-2224-4150-B12A-CDDE6D442D5A} => C:\ProgramData\CyberLink\PowerDVD18\OpenWith\PDVD_Shell64.dll [2018-11-12] (CyberLink Corp. -> CyberLink Corp.) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1-x32: [East-TecEraser] -> {E0BD38EB-C8EC-11D2-B274-B493B003B125} => C:\Program Files (x86)\East-Tec Eraser 2012\etcontextmenu.dll [2012-03-15] (EAST Technologies) [Fichier non signé] ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.22.10.9\NavShExt.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2015-10-08] (ACD Systems International -> ACD Systems International Inc.) ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2021-11-04] (Power Software Limited -> Power Software Ltd) ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-12-18] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [Fichier non signé] ContextMenuHandlers1: [TuneUp Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\TuneUp Utilities 2011\SDShelEx-x64.dll [2010-10-28] (TuneUp Software -> TuneUp Software) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers2-x32: [East-TecEraser] -> {E0BD38EB-C8EC-11D2-B274-B493B003B125} => C:\Program Files (x86)\East-Tec Eraser 2012\etcontextmenu.dll [2012-03-15] (EAST Technologies) [Fichier non signé] ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.22.10.9\NavShExt.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-12-18] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [Fichier non signé] ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> ) ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2021-11-04] (Power Software Limited -> Power Software Ltd) ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll [2019-12-18] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [Fichier non signé] ContextMenuHandlers4: [TuneUp Disk Space Explorer Shell Extension] -> {4838CD50-7E5D-4811-9B17-C47A85539F28} => C:\Program Files (x86)\TuneUp Utilities 2011\DseShExt-x64.dll [2010-10-28] (TuneUp Software -> TuneUp Software) ContextMenuHandlers4: [TuneUp Shredder Shell Extension] -> {4858E7D9-8E12-45a3-B6A3-1CD128C9D403} => C:\Program Files (x86)\TuneUp Utilities 2011\SDShelEx-x64.dll [2010-10-28] (TuneUp Software -> TuneUp Software) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2021-03-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2020-03-06] (Adobe Inc. -> Adobe Systems Inc.) ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.22.10.9\buShell.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6-x32: [East-TecEraser] -> {E0BD38EB-C8EC-11D2-B274-B493B003B125} => C:\Program Files (x86)\East-Tec Eraser 2012\etcontextmenu.dll [2012-03-15] (EAST Technologies) [Fichier non signé] ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.22.10.9\NavShExt.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files\PowerISO\PWRISOSH.DLL [2021-11-04] (Power Software Limited -> Power Software Ltd) ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] (Empty Loop -> ) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\system32\x264vfw64.dll [3799552 2017-07-30] (x264vfw project) [Fichier non signé] HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\system32\lagarith.dll [148992 2011-12-07] () [Fichier non signé] HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\system32\xvidvfw.dll [310784 2019-12-28] () [Fichier non signé] HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\system32\ac3acm.acm [180736 2012-07-21] (fccHandler) [Fichier non signé] HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\system32\ff_vfw.dll [126976 2015-10-24] () [Fichier non signé] HKLM\...\Drivers32: [VIDC.X264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [Fichier non signé] HKLM\...\Drivers32: [VIDC.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] () [Fichier non signé] HKLM\...\Drivers32: [VIDC.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [284160 2019-12-28] () [Fichier non signé] HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\ac3acm.acm [122880 2012-07-21] (fccHandler) [Fichier non signé] HKLM\...\Drivers32: [VIDC.FFDS] => C:\Windows\SysWOW64\ff_vfw.dll [112128 2015-10-24] () [Fichier non signé] ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\":: WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99] WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate] ==================== Modules chargés (Avec liste blanche) ============= 2015-03-17 06:34 - 2015-03-17 06:34 - 000010240 _____ () [Fichier non signé] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\fr_fr\AcroTray.fra 2022-09-06 00:36 - 2019-06-28 10:09 - 001291264 _____ () [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\libxml2.dll 2022-09-06 00:36 - 2019-06-28 10:09 - 000055808 _____ () [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\zlib1.dll 2020-03-06 06:11 - 2020-03-06 06:11 - 000021504 _____ (Adobe Systems Inc.) [Fichier non signé] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\locale\fr_fr\Acrobat Elements\ContextMenuShim64.fra 2022-06-06 19:16 - 2022-06-06 19:16 - 000359936 _____ (CANON INC.) [Fichier non signé] C:\Windows\System32\CNMN6PPM.DLL 2022-09-06 00:36 - 2019-12-17 15:12 - 000026792 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\AccountManager.dll 2022-09-06 00:36 - 2019-07-10 18:31 - 000057936 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActivationOnline.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000021672 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ActiveOnline.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000505512 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\AliyunWrap.DLL 2022-09-06 00:36 - 2019-12-17 15:12 - 000175784 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\AuthorizedMng.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000098472 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\BootDriver.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000112296 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CalcScheduleTime.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000026280 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CallbackOperator.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000075432 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CheckImg.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000079016 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CloudOperator.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000196264 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000163496 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCAdapt_RTTO.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000018088 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCNetTokenProxy.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000100520 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CMCPipeCenter.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000024744 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmcTbProxy.dll 2022-09-06 00:36 - 2019-12-17 14:14 - 000109736 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CodeLog.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000091816 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Common.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000019624 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CompressFile.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000024744 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CorrectMbr.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000143016 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Device.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000029352 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceAdapter.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000367784 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\DeviceManager.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000032936 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\DiskSearchImg.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000561320 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\DsImgFile.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000269992 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBackupSize.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000296104 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EmailBrowser.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000162984 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumDisk.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000034472 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EnumTapeDevice.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000704168 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuActiveOnline.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000082600 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EULicenseDLL.DLL 2022-09-06 00:36 - 2019-12-17 15:13 - 000301736 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSize.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000479400 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExchBackupSizeEx.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 002479272 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExImage.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000064168 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FATFileSystemAnalyser.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000078504 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FatLib.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000120488 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileSearch.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000146600 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileStorage.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000052392 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FileSystemAnalyser.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000021672 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\fsclog.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000026792 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\GetDriverInfo.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000169128 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFile.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000091304 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\logsys.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000070824 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\MountImg.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000072872 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\NasOperator.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000058536 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSFileSystemAnalyser.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000211112 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSLib.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000458920 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\NTFSUtil.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000149160 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Partition.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000066216 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\RegLib.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000219816 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\SmartBackup.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000075432 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\SqlExBrowser.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000498344 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\SqlSMOCPlusPlus.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000045224 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbDataSwap.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000055976 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBInfo.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000054952 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbTapeBrowse.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000150696 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\vhdvmdk.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000146088 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\VMConfig.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000030376 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCInit.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000126632 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCLogCli.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000208552 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCMsgCenter.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000045736 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCNetToken.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000151208 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\CMCTaskCli.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000021672 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\fsclog.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000861864 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\HostMgr.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000037544 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\LocalDB.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000196264 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\NetComm.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000114344 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\RemoteInstall.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000122024 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\RTTOMgr.dll 2022-09-06 00:36 - 2019-12-19 10:23 - 000536232 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\sqlite.dll 2022-09-06 00:36 - 2019-12-19 10:24 - 000048296 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\TBActivation.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000727208 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\CmdManager.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000022184 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ControlPxe.dll 2022-09-06 00:36 - 2019-12-17 15:12 - 000131752 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EMail.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000046760 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\EuPipe.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000430760 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ExFunction.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000250536 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FlBackup.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000103080 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FlBackupSize.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000651944 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FlImgFile.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000046760 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FlSearchImg.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000097960 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Ftp.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000019624 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\FTPTest.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000122024 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImageFileInfo.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000285352 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\ImgFileHlp.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000153256 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\MatchStr.dll 2022-09-06 00:36 - 2019-07-10 18:32 - 000028752 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Options.dll 2022-09-06 00:36 - 2019-12-17 15:13 - 000095400 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\PolicyManage.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000124072 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Thread.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000113320 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\Transmit.dll 2022-09-06 00:36 - 2019-12-17 15:14 - 000044712 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\XmlWrapper.dll 2022-09-06 00:36 - 2019-12-17 13:44 - 000046760 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\EuPipe.dll 2022-09-06 00:36 - 2019-12-18 13:51 - 000379048 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\x64\ImageSh.dll 2022-09-06 00:36 - 2019-06-28 10:09 - 000892928 _____ (Free Software Foundation) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\iconv.dll 2022-09-06 00:36 - 2019-10-09 08:05 - 001359872 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\LIBEAY32.dll 2022-09-06 00:36 - 2019-10-09 08:05 - 000365056 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\bin\SSLEAY32.dll 2022-09-06 00:36 - 2019-12-17 13:37 - 001359872 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\LIBEAY32.dll ==================== Alternate Data Streams (Avec liste blanche) ======== ==================== Mode sans échec (Avec liste blanche) ================== ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer (Version 11) (Avec liste blanche) ========== HKU\S-1-5-21-1501871606-60433178-1570617971-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/ SearchScopes: HKU\S-1-5-21-1501871606-60433178-1570617971-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2020-12-12] (Tonec Inc. -> Internet Download Manager, Tonec Inc.) BHO: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.22.10.9\coIEPlg.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_341\bin\ssv.dll [2022-09-07] (Oracle America, Inc. -> Oracle Corporation) BHO: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\Office16\URLREDIR.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_341\bin\jp2ssv.dll [2022-09-07] (Oracle America, Inc. -> Oracle Corporation) BHO: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2020-12-12] (Tonec Inc. -> Internet Download Manager, Tonec Inc.) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.22.10.9\coIEPlg.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) BHO-x32: Adobe Acrobat Create PDF Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\URLREDIR.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Adobe Acrobat Create PDF from Selection -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.22.10.9\coIEPlg.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Toolbar: HKLM-x32 - Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.22.10.9\coIEPlg.dll [2022-11-07] (NortonLifeLock Inc. -> NortonLifeLock Inc.) Toolbar: HKU\S-1-5-21-1501871606-60433178-1570617971-1000 -> Adobe Acrobat Create PDF Toolbar - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\WCIEActiveX\DC\x64\AcroIEFavStub.dll [2020-03-06] (Adobe Systems, Incorporated -> Adobe Systems Incorporated) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-24] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2023-01-10 11:27 - 2023-01-10 11:28 - 000001192 _____ C:\Windows\system32\drivers\etc\hosts 127.0.0.1 lmlicenses.wip4.adobe.com 127.0.0.1 lm.licenses.adobe.com 127.0.0.1 na1r.services.adobe.com 127.0.0.1 hlrcv.stage.adobe.com 127.0.0.1 practivate.adobe.com 127.0.0.1 activate.adobe.com 127.0.0.1 genuine.adobe.com 127.0.0.1 prod.adobegenuine.com 127.0.0.1 cap.cyberlink.com 127.0.0.1 activation.cyberlink.com 127.0.0.1 platform.wondershare.com ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\EaseUS\Todo Backup\bin HKU\S-1-5-21-1501871606-60433178-1570617971-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\CoinCoin\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 1.1.1.1 - 1.0.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) MSCONFIG\startupreg: ACDSeeCommanderUltimate10 => C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\ACDSeeCommanderUltimate10.exe MSCONFIG\startupreg: ACUW10FR => "C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\acdIDInTouch2.exe" MSCONFIG\startupreg: HotKeysCmds => "C:\Windows\system32\hkcmd.exe" MSCONFIG\startupreg: IAStorIcon => "C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology enterprise\IAStorIcon.exe" MSCONFIG\startupreg: IgfxTray => "C:\Windows\system32\igfxtray.exe" MSCONFIG\startupreg: Persistence => "C:\Windows\system32\igfxpers.exe" MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe" MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 3.1 eXtensible Host Controller Driver\Application\iusb3mon.exe" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{931609B6-ECA4-4068-8A84-3353E6F51FAB}] => (Allow) LPort=1542 FirewallRules: [{257252D0-B66A-481A-B371-DA5A6311A909}] => (Allow) LPort=1542 FirewallRules: [{41D9A5C4-D33C-432B-876C-89FFF9A441AB}] => (Allow) LPort=53 FirewallRules: [{4251D547-3676-473D-94ED-24EF155F8A7A}] => (Allow) LPort=53 FirewallRules: [{C065DE22-883D-477E-9D5C-73644DA5D0B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{0221F855-B369-4308-9754-C518995AB4D5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{4AA96B13-4DBF-4012-9C0D-3B757476CCE9}] => (Block) C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\ACDSeeUltimate10.exe (ACD Systems International -> ACD Systems International Inc.) [Fichier non signé] FirewallRules: [TCP Query User{053079C9-9C5E-4A23-868D-6A4C322C4C51}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe (Windscribe Limited -> Windscribe Limited) FirewallRules: [UDP Query User{FB43BE37-C5D2-4D53-AF22-3820DE7DA2FF}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe (Windscribe Limited -> Windscribe Limited) FirewallRules: [{8A45EA4E-2FA2-4CFC-A607-3FAA6F416188}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{C51A3A45-2574-4283-AD03-2810F74C6550}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD18\Kernel\DMS\CLMSServerPDVD18.exe (CyberLink Corp. -> CyberLink) FirewallRules: [{E76CB63B-C13A-472C-82E1-B119B3082D3C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD18\PowerDVD18Agent.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{6CE4941A-86EF-42D5-A568-4331DE084D2B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD18\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{FC8C5922-4CD4-48BD-A5E5-96AE67DE474A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD18\CastingStation.exe (CyberLink Corp. -> CyberLink Corp.) FirewallRules: [{455368E7-BDE7-4C12-9678-B367746A33E7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F6670A70-BCBA-4DF7-BF4E-99432B2253EA}] => (Allow) C:\Users\CoinCoin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{2C720ED8-6467-4717-AF3C-45024096622E}] => (Allow) C:\Users\CoinCoin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{85DA45C0-7798-4BEA-A7CA-DAA68669E9EC}] => (Allow) C:\Users\CoinCoin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{D0984AA8-20A2-4A5C-8C5C-CC68FEC9AA18}] => (Allow) C:\Users\CoinCoin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{2DEB04F1-D310-4A0C-8F77-B654007FC581}] => (Allow) C:\Users\CoinCoin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{96054BD4-542D-434C-BFFA-595A29DC6607}] => (Allow) C:\Users\CoinCoin\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc -> BitTorrent Inc.) FirewallRules: [{02016DFA-CF7A-4C2F-AFBA-579D21F93886}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\CMC\bin\EBCClient.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] FirewallRules: [{0DEF0AC7-E2CB-4E99-B492-D81F4A2C6BBD}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] FirewallRules: [{BDBEBDAB-86A0-427B-83CD-ACA4434FB57E}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] FirewallRules: [{DB9595A7-DDC9-4770-8C0F-544FF8F37CD0}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] FirewallRules: [{4D459C25-B748-4442-ABDF-3CDD624F5DEC}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) [Fichier non signé] FirewallRules: [{88B7FDB4-B733-4745-980F-E8212790CAED}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] FirewallRules: [{E0CD3F6A-B254-472D-A75A-9A26CB6C55C0}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] FirewallRules: [{D6B17036-363D-4992-A27E-9ED66596C3BE}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] FirewallRules: [{9BB3F586-346E-4AD9-9D6E-5D8EC87983DA}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Fichier non signé] FirewallRules: [{72AD39D5-6384-4F4E-A974-CD1084F5C659}] => (Allow) C:\Users\CoinCoin\AppData\Local\Temp\bittorrent\bittorrent.exe => Pas de fichier FirewallRules: [{B779D164-2EF0-4A49-82DC-C2B56983500E}] => (Allow) C:\Users\CoinCoin\AppData\Local\Temp\bittorrent\bittorrent.exe => Pas de fichier FirewallRules: [{23D94035-7C27-4E8D-A61F-C6301899ED3C}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Points de restauration ========================= 11-01-2023 01:27:11 juhugy 11-01-2023 17:09:12 uhytrd ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (01/11/2023 11:28:21 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Error: (01/10/2023 05:54:01 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Error: (01/10/2023 05:19:52 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Error: (01/10/2023 11:28:04 AM) (Source: RasClient) (EventID: 20227) (User: ) Description: CoID={66050164-4753-4774-A0E8-970C568AE9B0} : L’utilisateur CoinCoin-PC\CoinCoin a composé le numéro de la connexion Windscribe IKEv2. La connexion a échoué. Code d’erreur retourné : 809. Error: (01/10/2023 11:27:54 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: CoinCoin-PC) Description: Opération ignorée : échec de la validation de Eap method DLL path. Erreur : ID de type=43, ID d’auteur=9, ID de fournisseur=0, Type de fournisseur=0 Error: (01/10/2023 11:27:54 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: CoinCoin-PC) Description: Opération ignorée : échec de la validation de Eap method DLL path. Erreur : ID de type=25, ID d’auteur=9, ID de fournisseur=0, Type de fournisseur=0 Error: (01/10/2023 11:27:54 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: CoinCoin-PC) Description: Opération ignorée : échec de la validation de Eap method DLL path. Erreur : ID de type=17, ID d’auteur=9, ID de fournisseur=0, Type de fournisseur=0 Error: (01/10/2023 11:27:54 AM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: CoinCoin-PC) Description: Opération ignorée : échec de la validation de Eap method DLL path. Erreur : ID de type=43, ID d’auteur=9, ID de fournisseur=0, Type de fournisseur=0 Erreurs système: ============= Error: (01/11/2023 05:20:50 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: Le serveur {BB6DF56B-CACE-11DC-9992-0019B93A3A84} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (01/11/2023 05:05:29 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. Error: (01/11/2023 01:22:47 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. Error: (01/11/2023 04:05:04 AM) (Source: Disk) (EventID: 11) (User: ) Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk1\DR1. Error: (01/10/2023 10:49:59 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. Error: (01/10/2023 06:23:09 PM) (Source: Disk) (EventID: 11) (User: ) Description: Le pilote a détecté une erreur du contrôleur sur \Device\Harddisk1\DR1. Error: (01/10/2023 06:22:12 PM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service TuneUp.UtilitiesSvc. Error: (01/10/2023 12:04:18 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. Windows Defender: ================ Date: 2021-01-22 16:20:30.256 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {DA4EDC26-8C2D-4E88-B377-7F217C39D121} Type de l’analyse : Logiciel anti-espion Paramètres de l’analyse : Analyse rapide Utilisateur : CoinCoin-PC\CoinCoin Date: 2021-01-22 14:54:34.504 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {843EB618-2C4F-4C64-B043-94D66D235156} Type de l’analyse : Logiciel anti-espion Paramètres de l’analyse : Analyse rapide Utilisateur : CoinCoin-PC\CoinCoin Date: 2021-01-22 14:54:19.722 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {0D5782BE-74CD-4752-8CA2-BCB9549FA824} Type de l’analyse : Logiciel anti-espion Paramètres de l’analyse : Analyse rapide Utilisateur : CoinCoin-PC\CoinCoin Event[0]: Date: 2021-01-22 14:43:30.268 Description: Windows Defender a rencontré une erreur lors de la tentative de mise à jour du moteur. Nouvelle version du moteur : 1.1.17700.4 Version précédente du moteur : 1.1.6402.0 Source de la mise à jour : Utilisateur Utilisateur : CoinCoin-PC\CoinCoin Code d’erreur : 0x8050800c Description de l’erreur : Un problème inattendu s’est produit. Installez toutes les mises à jour disponibles, puis essayez de redémarrer le programme. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. Date: 2021-01-22 01:10:22.303 Description: Windows Defender a rencontré une erreur lors de la tentative de mise à jour du moteur. Nouvelle version du moteur : 1.1.17700.4 Version précédente du moteur : 1.1.6402.0 Source de la mise à jour : Utilisateur Utilisateur : CoinCoin-PC\CoinCoin Code d’erreur : 0x8050800c Description de l’erreur : Un problème inattendu s’est produit. Installez toutes les mises à jour disponibles, puis essayez de redémarrer le programme. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. Date: 2021-01-22 00:26:16.794 Description: Windows Defender a rencontré une erreur lors de la tentative de mise à jour du moteur. Nouvelle version du moteur : 1.1.17700.4 Version précédente du moteur : 1.1.6402.0 Source de la mise à jour : Utilisateur Utilisateur : CoinCoin-PC\CoinCoin Code d’erreur : 0x8050800c Description de l’erreur : Un problème inattendu s’est produit. Installez toutes les mises à jour disponibles, puis essayez de redémarrer le programme. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. Date: 2021-01-21 01:35:50.942 Description: Windows Defender a rencontré une erreur lors de la tentative de mise à jour du moteur. Nouvelle version du moteur : 1.1.17700.4 Version précédente du moteur : 1.1.6402.0 Source de la mise à jour : Utilisateur Utilisateur : CoinCoin-PC\CoinCoin Code d’erreur : 0x8050800c Description de l’erreur : Un problème inattendu s’est produit. Installez toutes les mises à jour disponibles, puis essayez de redémarrer le programme. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. ==================== Infos Mémoire =========================== BIOS: AMI 02.14 11/03/2015 Carte mère: HP 8105 Processeur: Intel(R) Core(TM) i3-4170 CPU @ 3.70GHz Pourcentage de mémoire utilisée: 45% Mémoire physique - RAM - totale: 8117.43 MB Mémoire physique - RAM - disponible: 4423.8 MB Mémoire virtuelle totale: 16233.01 MB Mémoire virtuelle disponible: 12510.24 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:384.25 GB) (Free:283.66 GB) (Model: ATA ST500DM002-1BD14 SCSI Disk Device) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)] Drive d: (Disque ) (Fixed) (Total:81.51 GB) (Free:16.36 GB) (Model: ATA ST500DM002-1BD14 SCSI Disk Device) NTFS Drive f: (HDD Sauvegarde) (Fixed) (Total:465.76 GB) (Free:283.17 GB) (Model: asmedia ASMT1153E USB Device) NTFS ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 38850EF6) Partition 1: (Active) - (Size=384.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=81.5 GB) - (Type=07 NTFS) ========================================================== Disk: 1 (Size: 465.8 GB) (Disk ID: CD2D44D7) Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt =======================