Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 09-02-2023 01 Exécuté par moniq (09-02-2023 20:27:33) Exécuté depuis C:\Users\moniq\OneDrive\Desktop Microsoft Windows 11 Famille Version 22H2 22621.1105 (X64) (2022-11-30 08:38:19) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) Administrateur (S-1-5-21-557128043-3211486600-3372128446-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-557128043-3211486600-3372128446-503 - Limited - Disabled) Invité (S-1-5-21-557128043-3211486600-3372128446-501 - Limited - Disabled) moniq (S-1-5-21-557128043-3211486600-3372128446-1001 - Administrator - Enabled) => C:\Users\moniq WDAGUtilityAccount (S-1-5-21-557128043-3211486600-3372128446-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Avira Security (Enabled - Up to date) {76C0BF9F-9FD3-D249-DE2F-7A33A59B9258} AS: Avira Antivirus (Enabled - Up to date) {33CF8AA2-FA06-4AD4-98AB-332D53DD7FFB} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Avira Security (Enabled) {4EFB3EBA-D5BC-D311-F570-D3065B48D523} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1036-1033-7760-BC15014EA700}) (Version: 22.003.20314 - Adobe) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.9.1.377 - Adobe Inc.) Adobe Lightroom Classic (HKLM-x32\...\LTRM_12_1) (Version: 12.1 - Adobe Inc.) Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_1_1) (Version: 24.1.1.238 - Adobe Inc.) Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601032}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Assistant Mise à jour de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22589 - Microsoft Corporation) ASUS GiftBox Service (HKLM-x32\...\{4701E5AB-AF91-4D40-8F18-358CC80E4E5B}) (Version: 3.2.3.0 - ASUSTeK COMPUTER INC.) ASUS Hello (HKLM-x32\...\{D8CE1923-92A9-4036-817E-9E0D8AA2169B}) (Version: 1.1.4.0 - ASUSTeK COMPUTER INC.) ASUS Sync Drivers (HKLM\...\{086FE7AE-1622-4617-92B8-F54FAAB372D0}) (Version: 2.3.5715 - Screenovate Technologies Ltd.) AudioWizard (HKLM-x32\...\{57E770A2-2BAF-4CAA-BAA3-BD896E2254D3}) (Version: 1.0.8.4 - ICEpower a/s) Avira Fallback Updater (HKLM-x32\...\Avira Fallback Updater) (Version: - ) Hidden Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.41.1.25731 - Avira Operations GmbH & Co. KG) Hidden Avira Privacy Pal (HKLM-x32\...\{F2BC8305-DFBE-4C02-A906-9BBD8EE299A3}_is1) (Version: 2.4.0.1962 - Avira Operations GmbH & Co. KG) Avira Security (HKLM-x32\...\Avira Security_is1) (Version: 1.1.83.5 - Avira Operations GmbH) Hidden Avira Security (HKLM-x32\...\AviraSecurityUninstaller) (Version: - Avira Operations GmbH & Co. KG) Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 6.23.0.13 - Avira Operations GmbH) Hidden Canon Utilities Digital Photo Professional 4 (HKLM-x32\...\Digital Photo Professional 4 (x64)) (Version: 4.17.10.0 - Canon Inc.) Canon Utilities EOS Lens Registration Tool (HKLM-x32\...\EOS Lens Registration Tool) (Version: 1.16.0.0 - Canon Inc.) CCleaner (HKLM\...\CCleaner) (Version: 6.08 - Piriform) Contrôle d’intégrité du PC Windows (HKLM\...\{90C6971F-ABF1-4FBF-BD98-24F14C5F5AB4}) (Version: 3.6.2204.08001 - Microsoft Corporation) Désinstallation de l'imprimante EPSON ET-2810 Series (HKLM\...\EPSON ET-2810 Series) (Version: - Seiko Epson Corporation) Discord (HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\Discord) (Version: 0.0.307 - Discord Inc.) Endpoint Protection SDK (HKLM\...\{68E1CCB4-4965-4713-BDEB-77F6D6C9BF9D}_is1) (Version: 1.0.2206.2990 - Avira Operations GmbH & Co. KG) Hidden Epson Event Manager (HKLM-x32\...\{DBC38C08-9FB5-43A5-B6BA-EB10AC7DA570}) (Version: 3.11.0053 - Seiko Epson Corporation) Epson FAX Utility (HKLM-x32\...\{0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A}) (Version: 3.21.00 - Seiko Epson Corporation) Epson Photo+ (HKLM-x32\...\{7F286969-84B8-4AB0-819F-5B18CE33588C}) (Version: 3.3.2.0 - Seiko Epson Corporation) Epson Printer Connection Checker (HKLM-x32\...\{562C1C83-6199-49DD-987B-60D5FF7BC971}) (Version: 3.3.2.0 - Seiko Epson Corporation) Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation) EPSON Scan OCR Component (HKLM-x32\...\{563B99D8-8895-4E3E-AE8D-15BE8C05F1C1}) (Version: 3.00.04 - SEIKO EPSON Corp.) EPSON Scan PDF EXtensions (HKLM-x32\...\{F9956472-6E16-4F83-BF9A-F887EF4A45B7}) (Version: 1.03.02 - SEIKO EPSON Corp.) Epson ScanSmart (HKLM-x32\...\{D310BDCC-D4B4-4DC1-B9DF-D1D7367CAC4F}) (Version: 3.6.1 - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{28C66F35-69BF-4376-BC80-4D5F4808FF3C}) (Version: 4.6.1 - Seiko Epson Corporation) EPSON WF-2810 Series Printer Uninstall (HKLM\...\EPSON WF-2810 Series) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 109.0.5414.120 - Google LLC) HFSExplorer 0.23.1 (HKLM-x32\...\HFSExplorer) (Version: 0.23.1 - Catacombae Software) Intel(R) Chipset Device Software (HKLM\...\{7FB35D08-C75C-4A18-B593-1D7C3E8970AD}) (Version: 10.1.1.45 - Intel Corporation) Hidden Intel(R) Chipset Device Software (HKLM-x32\...\{44ded3eb-1686-46a6-9770-fd79096c29f7}) (Version: 10.1.1.45 - Intel(R) Corporation) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10208.5644 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1068 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{721F3055-6A35-4F74-A317-740E3F220468}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{E3870CAD-2D62-48F8-9D38-5F7B77CDA133}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Driver (HKLM\...\{4ADC1C4F-BDF6-4BC0-905C-B99A4227D635}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 23.20.16.4974 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.0.4.1093 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{CDEBCCAA-1456-474C-AC2F-820CE193824B}) (Version: 16.0.4.1093 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1725.1 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{E6D90D08-C61C-42BD-971B-301E5C9B6F70}) (Version: 30.100.1725.1 - Intel Corporation) Hidden Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.49.166.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.49.166.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{df682aff-4294-4ad1-aaa7-276931d5781f}) (Version: 1.49.166.0 - Intel Corporation) Hidden Java 8 Update 241 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180241F0}) (Version: 8.0.2410.7 - Oracle Corporation) LibreOffice 7.5.0.3 (HKLM\...\{AE6E3BD6-832E-486F-B040-B06228F447F5}) (Version: 7.5.0.3 - The Document Foundation) Malwarebytes version 4.5.21.231 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.21.231 - Malwarebytes) Manuels EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 109.0.1518.70 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 109.0.1518.70 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\OneDriveSetup.exe) (Version: 23.007.0109.0004 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{EF9EBC42-6969-45CE-A8D2-B9249B00C838}) (Version: 5.69.0.0 - Microsoft Corporation) Microsoft VC++ redistributables repacked. (HKLM\...\{7D3F6E2B-7A32-4289-A6E1-0595B89D1386}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft VC++ redistributables repacked. (HKLM-x32\...\{6AB94FE2-DC1A-434E-B8DC-772168A92300}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31326 (HKLM-x32\...\{2d507699-404c-4c8b-a54a-38e352f32cdd}) (Version: 14.32.31326.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31326 (HKLM\...\{38624EB5-356D-4B08-8357-C33D89A5C0C5}) (Version: 14.32.31326 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31326 (HKLM\...\{C96241EA-9900-4FE8-85B3-1E238D509DF6}) (Version: 14.32.31326 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden Mozilla Firefox (x64 fr) (HKLM\...\Mozilla Firefox 109.0.1 (x64 fr)) (Version: 109.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 60.5.3 - Mozilla) Mozilla Thunderbird (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 91.8.0 (x86 fr)) (Version: 91.8.0 - Mozilla) MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.3.6 - SEIKO EPSON CORPORATION) Hidden MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - Seiko Epson Corporation) PDF24 Creator 8.8.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.10 - Tracker Software Products Ltd) Skype version 8.78 (HKLM-x32\...\Skype_is1) (Version: 8.78 - Skype Technologies S.A.) SpyderXElite (HKLM-x32\...\SpyderXElite) (Version: - ) SpywareBlaster 5.6 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.6.0 - BrightFort LLC) Topaz DeNoise AI (HKLM\...\Topaz DeNoise AI 3.7.0) (Version: 3.7.0 - Topaz Labs LLC) Topaz Sharpen AI (HKLM\...\Topaz Sharpen AI 4.1.0) (Version: 4.1.0 - Topaz Labs LLC) UsbFix Anti-Malware Premium (HKLM-x32\...\Usbfix) (Version: 11.0.4.8 - SOSVirus (SOSVirus.Net)) UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.) VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN) Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden Winmail Opener 1.6 (HKLM-x32\...\Winmail Opener) (Version: 1.6 - Eolsoft) WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH) Zoom (HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\ZoomUMX) (Version: 5.4.1 (58698.1027) - Zoom Video Communications, Inc.) Packages: ========= Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc [2023-01-11] (Adobe Systems Incorporated) ASUS GIFTBOX -> C:\Program Files\WindowsApps\B9ECED6F.ASUSGIFTBOX_3.2.4.0_x64__qmba6cd70vzyy [2022-03-14] (ASUSTeK COMPUTER INC.) ASUS Keyboard Hotkeys -> C:\Program Files\WindowsApps\B9ECED6F.ASUSKeyboardHotkeys_1.0.12.0_x86__qmba6cd70vzyy [2022-12-21] (ASUSTeK COMPUTER INC.) [Startup Task] ASUS Sync -> C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0 [2022-06-25] (Screenovate Technologies.) [Startup Task] AudioWizard -> C:\Program Files\WindowsApps\ICEpower.AudioWizard_1.5.28.0_x64__dxp88312j1fgj [2023-01-31] (ICEpower) Clipchamp -> C:\Program Files\WindowsApps\Clipchamp.Clipchamp_2.5.15.0_neutral__yxz26nhyzhsrt [2023-01-17] (Microsoft Corp.) Composant additionnel Photos Media Engine -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2019-10-31] (Microsoft Corporation) Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.16.345.0_x64__rz1tebttyb220 [2023-01-22] (Dolby Laboratories) eManual -> C:\Program Files\WindowsApps\B9ECED6F.eManual_2.0.3.0_x86__qmba6cd70vzyy [2019-04-17] (ASUSTeK COMPUTER INC.) Extension Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-03-13] (Microsoft Corporation) Fitbit Coach -> C:\Program Files\WindowsApps\Fitbit.FitbitCoach_4.4.133.0_x64__6mqt6hf9g46tw [2023-01-31] (Fitbit) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_142.3.139.0_x64__v10z8vjag6ke6 [2023-01-27] (HP Inc.) Intel® Graphics Control Panel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsControlPanel_3.3.0.0_x64__8j3eq9eme6ctt [2022-06-25] (INTEL CORP) LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [2023-01-31] (LinkedIn) Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.16026.20146.0_x86__8wekyb3d8bbwe [2023-02-04] (Microsoft Corporation) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-06-24] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-06-24] (Microsoft Corporation) [MS Ad] Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.39.0_x64__8wekyb3d8bbwe [2023-01-10] (Microsoft Corp.) Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.16026.20146.0_x86__8wekyb3d8bbwe [2023-02-04] (Microsoft Corporation) Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.16026.20146.0_x86__8wekyb3d8bbwe [2023-02-04] (Microsoft Corporation) Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.16026.20146.0_x86__8wekyb3d8bbwe [2023-02-04] (Microsoft Corporation) ms-resource://MicrosoftCorporationII.QuickAssist/resources/APP_WINDOW_NAME -> C:\Program Files\WindowsApps\MicrosoftCorporationII.QuickAssist_2.0.16.0_x64__8wekyb3d8bbwe [2023-02-02] (Microsoft Corp.) ms-resource:AppDisplayName -> C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy [2022-12-24] (ASUSTeK COMPUTER INC.) ms-resource:AppStoreName -> C:\Program Files\WindowsApps\Microsoft.RawImageExtension_2.1.40041.0_x64__8wekyb3d8bbwe [2023-01-12] (Microsoft Corporation) ms-resource:AppxManifest_DisplayName -> C:\Windows\SystemApps\Microsoft.Windows.PrintQueueActionCenter_cw5n1h2txyewy [2022-11-30] (Microsoft Corporation) ms-resource:System_Item_Title_IntelGraphicsControlPanel -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4478.0_x64__8j3eq9eme6ctt [2023-01-12] (INTEL CORP) [Startup Task] Phototastic Collage -> C:\Program Files\WindowsApps\ThumbmunkeysLtd.PhototasticCollage_3.27.25.0_x64__nfy108tqq3p12 [2023-01-31] (Thumbmunkeys Ltd) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.9.205.0_x64__dt26b99r8h8gj [2020-01-28] (Realtek Semiconductor Corp) Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.15.12020.0_x64__8wekyb3d8bbwe [2022-12-29] (Microsoft Studios) [MS Ad] Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.Core_cw5n1h2txyewy [2023-01-30] (Microsoft Windows) WinRAR -> C:\Program Files\WinRAR [2022-12-19] (0) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-557128043-3211486600-3372128446-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-84E731729C24} -> [Creative Cloud Files] => C:\Users\moniq\Creative Cloud Files [2023-01-11 19:31] CustomCLSID: HKU\S-1-5-21-557128043-3211486600-3372128446-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.) CustomCLSID: HKU\S-1-5-21-557128043-3211486600-3372128446-1001_Classes\CLSID\{D3E34B21-9D75-101A-8C3D-00AA001A1652}\localserver32 -> C:\Program Files\WindowsApps\Microsoft.Paint_11.2210.4.0_x64__8wekyb3d8bbwe\PaintApp\mspaint.exe () [Fichier non signé] CustomCLSID: HKU\S-1-5-21-557128043-3211486600-3372128446-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-11-30] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-11-30] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-11-30] (Adobe Inc. -> ) ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-11-30] (Adobe Inc. -> ) ContextMenuHandlers1: [SystemSpeedupFilesMenu] -> {14cb2bd0-2375-3d10-9b5d-5e18865c8959} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2023-01-17] (Avira Operations GmbH -> Avira Operations GmbH) ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL [2023-01-26] (Avira Operations GmbH -> Avira Operations GmbH) ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL [2023-01-26] (Avira Operations GmbH -> Avira Operations GmbH) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-05-07] (Malwarebytes Inc. -> Malwarebytes) ContextMenuHandlers4: [SystemSpeedupFoldersMenu] -> {700866bb-c8e9-3e71-b359-abb28baed0e8} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2023-01-17] (Avira Operations GmbH -> Avira Operations GmbH) ContextMenuHandlers5: [SystemSpeedupDesktopMenu] -> {0cab5786-30e8-3185-9b3b-ccefbf1b8afe} => C:\Program Files (x86)\Avira\System Speedup\Avira.SystemSpeedup.UI.ShellExtension.DLL [2023-01-17] (Avira Operations GmbH -> Avira Operations GmbH) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-11-30] (Adobe Inc. -> ) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-05-07] (Malwarebytes Inc. -> Malwarebytes) ==================== Codecs (Avec liste blanche) ==================== ==================== Raccourcis & WMI ======================== ==================== Modules chargés (Avec liste blanche) ============= 2022-04-20 10:08 - 2022-06-01 13:54 - 000435712 _____ () [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility Libs\CGamma.dll 2022-04-20 10:08 - 2022-06-01 13:54 - 000196096 _____ () [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility Libs\CSensor.dll 2022-04-20 10:08 - 2020-01-23 17:08 - 000054272 _____ (Datacolor) [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\dccmtr.dll 2022-12-18 09:57 - 2022-12-18 09:57 - 003091456 _____ (Newtonsoft) [Fichier non signé] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\8071632758f6f1637e2bdbf28ac7adaa\Newtonsoft.Json.ni.dll 2020-02-07 16:20 - 2020-02-07 16:20 - 000132096 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll 2018-03-05 15:41 - 2018-03-05 15:41 - 000057856 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON Software\Event Manager\EPNWPSHDevFinder.DLL 2009-10-21 16:39 - 2009-10-21 16:39 - 000291328 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll 2021-06-23 18:37 - 2021-04-08 02:21 - 000098304 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\EbpD4Fax.dll 2021-06-23 18:37 - 2021-04-08 02:21 - 000286720 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\FUFAXCFG.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000278528 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\FULEPP.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000356352 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\FUSVCCLT.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000065536 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\FUUSBHLP.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000073728 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUDEVCOM.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000135168 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUDRVUTL.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000339968 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUPRBDEV.dll 2021-06-23 18:38 - 2021-04-08 02:21 - 000286720 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\Library\FUSNMPUT.dll 2021-06-23 18:38 - 2021-04-07 19:21 - 000090112 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUCMNMSG.dll 2021-06-23 18:38 - 2021-04-07 19:21 - 000090112 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXCFGRes.dll 2021-06-23 18:38 - 2021-04-07 19:21 - 000245760 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUFAXRCV.dll 2021-06-23 18:38 - 2021-04-07 19:21 - 000022016 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FULEPPRes.dll 2021-06-23 18:38 - 2021-04-07 19:21 - 000077824 _____ (SEIKO EPSON CORPORATION) [Fichier non signé] C:\Program Files (x86)\Epson Software\FAX Utility\Resource\FUPRBDEVRes.dll 2021-10-26 15:58 - 2021-10-26 15:58 - 000647168 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON\MyEpson Portal\Condition Viewer_00000012\ConView.dll 2021-10-26 09:00 - 2021-10-26 09:00 - 000708608 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll 2020-04-17 09:15 - 2020-04-17 09:15 - 000577536 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON\MyEpson Portal\MepUploader_00000542\MepUploader.dll 2019-02-22 14:09 - 2019-02-22 14:09 - 000475136 _____ (Seiko Epson Corporation) [Fichier non signé] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll 2016-09-14 13:31 - 2016-09-14 13:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [Fichier non signé] C:\WINDOWS\System32\enppmon.dll 2021-06-23 18:37 - 2021-04-08 02:21 - 000786432 _____ (SEIKO EPSON) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\ENCM.dll 2021-06-23 18:37 - 2021-04-08 02:21 - 000278528 _____ (SEIKO EPSON) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\ENNW.dll 2021-06-23 18:37 - 2021-04-08 02:21 - 000299008 _____ (SEIKO EPSON) [Fichier non signé] C:\Program Files (x86)\EPSON Software\FAX Utility\ENUTIL.dll 2022-12-18 09:57 - 2022-12-18 09:57 - 000913408 _____ (ServiceStack) [Fichier non signé] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\ServiceStack.Text\629d2d0796c9c3f2b158aed9fce1069f\ServiceStack.Text.ni.dll 2022-04-20 10:08 - 2022-04-27 12:57 - 027980288 _____ (The ICU Project) [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility Libs\icudt65.dll 2022-04-20 10:08 - 2022-04-27 12:57 - 002217472 _____ (The ICU Project) [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility Libs\icuin65.dll 2022-04-20 10:08 - 2022-04-27 12:57 - 001468416 _____ (The ICU Project) [Fichier non signé] C:\Program Files (x86)\Datacolor\SpyderXElite\Utility\SpyderUtility Libs\icuuc65.dll ==================== Alternate Data Streams (Avec liste blanche) ======== (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [143] ==================== Mode sans échec (Avec liste blanche) ================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\HidSpiCx.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TextInputManagementService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{5099944A-F6B9-4057-A056-8C550228544C} => ""="Memory" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\{5099944A-F6B9-4057-A056-8C550228544C} => "SafeBootDrivers"="1" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\HidSpiCx.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TextInputManagementService => ""="Service" ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer (Avec liste blanche) ========== HKU\S-1-5-21-557128043-3211486600-3372128446-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://asus17win10.msn.com/?pc=ASTE HKU\S-1-5-21-557128043-3211486600-3372128446-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://asus17win10.msn.com/?pc=ASTE SearchScopes: HKU\S-1-5-21-557128043-3211486600-3372128446-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-557128043-3211486600-3372128446-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_241\bin\ssv.dll [2020-01-25] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_241\bin\jp2ssv.dll [2020-01-25] (Oracle America, Inc. -> Oracle Corporation) (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\008k.com -> 008k.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\00hq.com -> 00hq.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0411dd.com -> 0411dd.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0511zfhl.com -> 0511zfhl.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0632qyw.com -> 0632qyw.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\0scan.com -> 0scan.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\1-domains-registrations.com -> 1-domains-registrations.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\1-se.com -> 1-se.com IE restricted site: HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\1001movie.com -> 1001movie.com Il y a 6091 plus de sites. ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2018-04-12 00:38 - 2018-04-12 00:36 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts 2019-07-11 20:51 - 2019-07-11 20:52 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT HKU\S-1-5-21-557128043-3211486600-3372128446-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\moniq\OneDrive\Images\Saved Pictures\IMG_2089.JPG DNS Servers: Le média n'est pas connecté à internet. HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) HKLM\...\StartupApproved\Run32: => "PDFPrint" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0" HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\StartupApproved\Run: => "Opera Browser Assistant" HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-557128043-3211486600-3372128446-1001\...\StartupApproved\Run: => "Skype for Desktop" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{585FA0BC-2623-44B0-922B-095C56FA9B3C}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) [Fichier non signé] FirewallRules: [{96B23F7D-F40F-4835-9408-58CB849DAA1A}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) [Fichier non signé] FirewallRules: [{193E1648-B836-4E59-BF5F-34DA87A75A95}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22082.402.1279.2578_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{308C1043-E6B2-4B8E-A53B-F9F53573E27F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22082.402.1279.2578_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{AD9476B8-64DC-4A9B-A23B-3C3916FB5ED7}C:\users\moniq\appdata\roaming\zoom\bin\zoom.exe] => (Block) C:\users\moniq\appdata\roaming\zoom\bin\zoom.exe => Pas de fichier FirewallRules: [TCP Query User{54B5750D-85D2-4660-8CFE-3E94E590EE6A}C:\users\moniq\appdata\roaming\zoom\bin\zoom.exe] => (Block) C:\users\moniq\appdata\roaming\zoom\bin\zoom.exe => Pas de fichier FirewallRules: [{836199FF-4A9A-46B7-B10A-72D69E01ECCD}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) [Fichier non signé] FirewallRules: [{18FB39D7-9BAB-405B-9D66-7009C8DF2423}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) [Fichier non signé] FirewallRules: [{BA5B048E-74FC-46C4-98E7-F7AF6B0A79DF}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{DE818D79-11AA-48F8-8CF3-268236467BC4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{013B3A4C-C047-4279-B196-EA373210E1FB}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) [Fichier non signé] FirewallRules: [{3D3F5CFF-DB64-4FAB-AA99-0AF2A8E516C5}] => (Allow) C:\Program Files\WindowsApps\ScreenovateTechnologies.AsusVirtoo_2.4.8064.0_x64__0vhbc3ng4wbp0\app\ASUSSyncClient.exe (SCREENOVATE TECHNOLOGIES LTD. -> Screenovate Technologies Ltd.) [Fichier non signé] FirewallRules: [TCP Query User{27051FEF-24F6-4667-9CEC-CEC92A3FC801}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [UDP Query User{CD186F03-729D-4424-BA5E-B9E7EE39902A}C:\program files\mozilla firefox\firefox.exe] => (Allow) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{3E273384-5237-48F9-B6B6-8764C31CF773}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (Seiko Epson Corporation) [Fichier non signé] FirewallRules: [{98666A2D-2E2B-4BEE-9671-09FC55131A89}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (Seiko Epson Corporation) [Fichier non signé] FirewallRules: [{12FE07EB-65E5-4F99-A072-4660D4D53DF9}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{867E4B49-B96D-4012-B12C-91B9EECF8B2C}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{9565A1FF-93B2-4D62-B9DB-FF2BAC140322}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22308.1003.1743.8209_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B0A413B1-B578-4392-BDCA-4929958F8A3C}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22308.1003.1743.8209_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{ECAA44F3-9688-4C4E-840B-9F259A539025}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé] FirewallRules: [{550800FF-F9A8-4DAE-BF38-6CF294CAC6CF}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé] FirewallRules: [{6B44A4FA-505E-4AA5-BA06-9E1431495A85}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé] FirewallRules: [{C6F45BD5-C7A5-43D8-B717-A293BE2BF28A}] => (Allow) C:\Program Files\WindowsApps\B9ECED6F.ASUSPCAssistant_3.1.13.0_x64__qmba6cd70vzyy\MyASUS\AsusMyASUS.exe (ASUSTeK COMPUTER INC.) [Fichier non signé] FirewallRules: [{770B98C3-8707-4CC3-8F61-3F9806907A1E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{B2D4994A-C707-410A-8FAC-4408338C5548}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{66F0A65C-0250-4FED-A2BE-AFCFFE57661E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{B1BE1639-37A8-4B1F-9529-3F3FFEEC02E9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3404.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{FCE24E8A-8410-491E-965F-D5526455FC0E}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{16115417-78C4-409C-9231-A7FABD13B85F}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\109.0.1518.70\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{9C421DC1-A981-41CB-9FB5-B2F6F3646392}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkNear\AsusLinkNear.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) FirewallRules: [{F7E19591-2F66-4BC1-88C9-3BD18FD5CBC4}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSwitch\AsusSwitchNet.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) FirewallRules: [{A7F5340C-C319-4A5A-9114-601D0AA0AD78}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSwitch\AsusSwitchNetMDNS.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) FirewallRules: [{E97E5FB0-7753-41A9-98D1-C36B18CAEEF9}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) FirewallRules: [{1CC89EF7-0E36-4640-A8D0-132A1FF4F706}] => (Allow) C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSLinkRemote\AsusLinkRemoteAgent.exe (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.​) ==================== Points de restauration ========================= 04-02-2023 11:50:24 Removed LibreOffice 6.1.5.2 ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (02/09/2023 08:22:10 PM) (Source: Application Hang) (EventID: 1002) (User: AUTORITE NT) Description: Le programme FRST64.exe version 9.2.2023.1 a cessé d'interagir avec Windows et a été fermé. Pour savoir si vous disposez de plus d'informations sur le problème, consultez l'historique des problèmes dans le panneau de configuration Sécurité et maintenance. Error: (02/09/2023 08:08:08 PM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT) Description: Nom de l’application défaillante svchost.exe_Schedule, version : 10.0.22621.1, horodatage : 0x6dc5c2a5 Nom du module défaillant : KERNEL32.DLL, version : 10.0.22621.1105, horodatage : 0xc80ae235 Code d’exception : 0xc0000409 Décalage d’erreur : 0x0000000000036d92 ID du processus défaillant : 0x0x784 Heure de début de l’application défaillante : 0x0x1d9398aad0c131d Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\svchost.exe Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNEL32.DLL ID de rapport : 179d76ec-b7f0-4382-a2d0-c6de9c07cd7a Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (02/09/2023 10:43:41 AM) (Source: Firefox Default Browser Agent) (EventID: 12007) (User: ) Description: Event-ID 12007 Error: (02/09/2023 10:43:41 AM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: ) Description: Event-ID 0 Error: (02/06/2023 07:56:12 AM) (Source: DPTF) (EventID: 17) (User: AUTORITE NT) Description: ESIF(8.5.10103.7263) TYPE: ERROR MODULE: WINDOWS FUNC: rsrc_app_start_app_in_active_user_session FILE: rsrc_app.c LINE: 339 TIME: 47008059 ms Unable to start capture program. Error = 2 Error: (02/06/2023 07:55:26 AM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT) Description: Nom de l’application défaillante AsusSystemAnalysis.exe, version : 2.1.22.0, horodatage : 0x630c2c47 Nom du module défaillant : ntdll.dll, version : 10.0.22621.900, horodatage : 0xa97a9ed6 Code d’exception : 0xc0000409 Décalage d’erreur : 0x00000000000a3e40 ID du processus défaillant : 0x0x10b0 Heure de début de l’application défaillante : 0x0x1d9398aadd41403 Chemin d’accès de l’application défaillante : C:\WINDOWS\System32\DriverStore\FileRepository\asussci.inf_amd64_bb210e79bb1b97b4\ASUSSystemAnalysis\AsusSystemAnalysis.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : 49d01805-4da4-41b8-be36-ecad320342dd Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (02/06/2023 07:55:12 AM) (Source: DPTF) (EventID: 17) (User: AUTORITE NT) Description: ESIF(8.5.10103.7263) TYPE: ERROR MODULE: WINDOWS FUNC: rsrc_app_start_app_in_active_user_session FILE: rsrc_app.c LINE: 339 TIME: 46948054 ms Unable to start capture program. Error = 2 Error: (02/05/2023 07:55:13 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: AUTORITE NT) Description: Windows ne peut pas charger la DLL de compteur extensible « C:\WINDOWS\system32\sysmain.dll » (code d'erreur Win32 126). Erreurs système: ============= Error: (02/09/2023 08:08:09 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Planificateur de tâches s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service dans un processus séparé. Error: (02/09/2023 07:21:15 PM) (Source: DCOM) (EventID: 10000) (User: LAPTOP-USPQJ8VS) Description: Impossible de démarrer un serveur DCOM : {94269C4E-071A-4116-90E6-52E557067E4E}. L’erreur « 2147942402 » s’est produite lors du démarrage de la commande : "C:\Users\moniq\AppData\Local\Microsoft\OneDrive\23.007.0109.0004\FileCoAuth.exe" -Embedding Error: (02/09/2023 07:21:15 PM) (Source: DCOM) (EventID: 10000) (User: LAPTOP-USPQJ8VS) Description: Impossible de démarrer un serveur DCOM : {94269C4E-071A-4116-90E6-52E557067E4E}. L’erreur « 2147942402 » s’est produite lors du démarrage de la commande : "C:\Users\moniq\AppData\Local\Microsoft\OneDrive\23.007.0109.0004\FileCoAuth.exe" -Embedding Error: (02/09/2023 10:19:13 AM) (Source: DCOM) (EventID: 10000) (User: LAPTOP-USPQJ8VS) Description: Impossible de démarrer un serveur DCOM : {94269C4E-071A-4116-90E6-52E557067E4E}. L’erreur « 2147942402 » s’est produite lors du démarrage de la commande : "C:\Users\moniq\AppData\Local\Microsoft\OneDrive\23.007.0109.0004\FileCoAuth.exe" -Embedding Error: (02/09/2023 10:19:13 AM) (Source: DCOM) (EventID: 10000) (User: LAPTOP-USPQJ8VS) Description: Impossible de démarrer un serveur DCOM : {94269C4E-071A-4116-90E6-52E557067E4E}. L’erreur « 2147942402 » s’est produite lors du démarrage de la commande : "C:\Users\moniq\AppData\Local\Microsoft\OneDrive\23.007.0109.0004\FileCoAuth.exe" -Embedding Error: (02/06/2023 07:56:42 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service GiftBox.Service. Error: (02/06/2023 07:56:12 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service GiftBox.Service. Error: (02/06/2023 07:55:42 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service GiftBox.Service. Windows Defender: ================Event[0] Date: 2023-02-04 22:03:09 Description: La fonctionnalité de protection en temps réel Antivirus Microsoft Defender a rencontré une erreur et échoué. Fonctionnalité : Sur accès Code d’erreur : 0x80070057 Description de l’erreur : Paramètre incorrect. Raison : La veille de sécurité contre les logiciels malveillants a cessé de fonctionner pour une raison inconnue. Dans certains cas, le redémarrage du service peut résoudre le problème. Date: 2023-01-14 09:51:53 Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.381.638.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.19900.2 Code d’erreur : 0x80240017 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2022-12-17 22:20:27 Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.321.69.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.17300.4 Code d’erreur : 0x8024001e Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. CodeIntegrity: =============== Date: 2023-02-09 19:17:55 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\Avira\Endpoint Protection SDK\amsi\x64\avamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Infos Mémoire =========================== BIOS: American Megatrends Inc. X430UA.304 05/22/2019 Carte mère: ASUSTeK COMPUTER INC. X430UA Processeur: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz Pourcentage de mémoire utilisée: 87% Mémoire physique - RAM - totale: 6026.05 MB Mémoire physique - RAM - disponible: 757.18 MB Mémoire virtuelle totale: 9098.05 MB Mémoire virtuelle disponible: 1827.77 MB ==================== Lecteurs ================================ Drive c: (OS) (Fixed) (Total:237.31 GB) (Free:47.15 GB) (Model: Micron_1100_MTFDDAV256TBN) NTFS \\?\Volume{6538167f-e0f3-4dd9-9e6d-e784a1d3f01e}\ () (Fixed) (Total:0.9 GB) (Free:0.27 GB) NTFS \\?\Volume{19332a96-c3c5-4136-9bac-0c3ba1712d3c}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Size: 238.5 GB) (Disk ID: 51EE0805) Partition: GPT. ==================== Fin de Addition.txt =======================