Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 05-11-2023 02 Exécuté par sheit (26-11-2023 19:53:07) Exécuté depuis C:\Users\sheit\Desktop Microsoft Windows 11 Professionnel Version 23H2 22631.2715 (X64) (2023-11-19 19:04:19) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) Administrateur (S-1-5-21-2592330816-1423317966-2364152033-500 - Administrator - Disabled) Aurélie (S-1-5-21-2592330816-1423317966-2364152033-1003 - Administrator - Enabled) => C:\Users\Aurélie DefaultAccount (S-1-5-21-2592330816-1423317966-2364152033-503 - Limited - Disabled) Invité (S-1-5-21-2592330816-1423317966-2364152033-501 - Limited - Disabled) sheit (S-1-5-21-2592330816-1423317966-2364152033-1001 - Administrator - Enabled) => C:\Users\sheit WDAGUtilityAccount (S-1-5-21-2592330816-1423317966-2364152033-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Max Secure Total Security (Disabled - Up to date) {2818336F-1729-A370-DBF5-67717829BFC5} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Norton AntiVirus (Disabled - Up to date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0} FW: Norton AntiVirus (Disabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) 3Dconnexion 3DxSoftware (HKLM\...\{3B01A9DA-3689-41E0-B6D9-F1F5E44A9F6E}) (Version: 10.8.16.3641 - 3Dconnexion) Hidden 3Dconnexion 3DxWare 10 (HKLM-x32\...\{92f06056-952c-467d-b516-d03c6903cd23}) (Version: 10.8.16.3641 - 3Dconnexion) 3Dconnexion 3DxWinCore (HKLM\...\{2FBB3707-A901-473F-904E-92ABE7765872}) (Version: 17.8.16.20445 - 3Dconnexion) Hidden 3Dconnexion Add-In for AutoCAD (HKLM\...\{06191A44-8DFF-4BB2-99A1-8B568DAC5BC5}) (Version: 5.8.0.20441 - 3Dconnexion) Hidden 3Dconnexion Add-In for Autodesk Inventor (HKLM\...\{6E6D5439-8AF9-4C3C-AA95-0A147CA6551E}) (Version: 2.4.1.19400 - 3Dconnexion) Hidden 3Dconnexion Add-In for Microsoft Office (HKLM\...\{B0B56E9C-7A10-4380-BCD8-A4F771CD0320}) (Version: 1.1.2.19333 - 3Dconnexion) Hidden 3Dconnexion Add-In for Navisworks (HKLM\...\{BF78BF1F-0FAD-46E9-8DEF-314BE090BD61}) (Version: 1.0.1.36 - 3Dconnexion) Hidden 3Dconnexion Add-In for Revit (HKLM\...\{48C8DF82-2E82-4615-A45B-FEAE0AA71A29}) (Version: 1.0.2.35 - 3Dconnexion) Hidden 3Dconnexion Add-In for Solid Edge (HKLM\...\{5A69C62A-B2C9-4FDF-87DA-3C4F3B58EFF4}) (Version: 3.6.3 - 3Dconnexion) Hidden 3Dconnexion Add-In for SOLIDWORKS (HKLM\...\{F8BE1BB2-042F-4613-9368-B71DFF9C49EC}) (Version: 3.6.0.20358 - 3Dconnexion) Hidden 3Dconnexion Assembly Demo (HKLM-x32\...\{6AC5E623-5E87-426A-8E6A-353D5DB1D250}) (Version: 0.9.8.0 - 3Dconnexion) Hidden 3Dconnexion Extension for SketchUp (HKLM\...\{7DCD511E-0A3E-4586-A666-D2F9BBCAECD3}) (Version: 5.4.0.19831 - 3Dconnexion) Hidden 3Dconnexion LCD Applets for SpacePilot Pro (HKLM\...\{E937DA80-FBD4-4AF9-8080-86CFDCAC9C68}) (Version: 1.5.1 - 3Dconnexion) Hidden 3Dconnexion Navigation Library Server (HKLM-x32\...\{4C6A5700-B38E-4F4F-8126-65DE9D75BFC4}) (Version: 1.4.4.19928 - 3Dconnexion) Hidden 3Dconnexion Plug-In for 3ds Max 2017 - 2024 (HKLM\...\{2E3DA851-3E31-498A-8352-656701757347}) (Version: 7.0.16.20075 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Acrobat 3D (HKLM\...\{CBA2D3AE-60C8-48DC-A001-85A943908B72}) (Version: 1.5.1.763 - 3Dconnexion) Hidden 3Dconnexion Plugin for Cinema 4D (HKLM\...\{092A4C5F-A277-40FF-B78A-EB585646684D}) (Version: 1.1.0.50 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Creo 2.0 - 9.0 (HKLM\...\{4357FD0C-0444-4CAF-B003-512F529EEE6D}) (Version: 2.4.6.19972 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Maya (HKLM\...\{19ADBA6E-9032-4FD9-8F24-4067336478B5}) (Version: 6.0.16.20076 - 3Dconnexion) Hidden 3Dconnexion Plug-In for NX 8.0 - 2306 Series (HKLM\...\{84576D61-9BE2-4499-866C-41A31573C292}) (Version: 3.5.3.20215 - 3Dconnexion) Hidden 3Dconnexion Plug-In for Photoshop (HKLM\...\{380AD429-A881-4952-9140-95B7A3AD5785}) (Version: 2.13.0.20430 - 3Dconnexion) Hidden 3Dconnexion Plug-in for Unity Editor (HKLM\...\{C3A53ABF-7107-4388-8D99-E6843849C177}) (Version: 1.0.1.23 - 3Dconnexion) Hidden 3Dconnexion Plugin for Unreal Editor (HKLM\...\{3D40C6FB-04C8-40CA-83A6-8D816B40AA1F}) (Version: 1.1.9.111 - 3Dconnexion) Hidden 3Dconnexion Trainer (HKLM-x32\...\{5158E770-0862-478B-ADC3-E22B33061A86}) (Version: 3.2.7.17569 - 3Dconnexion) Hidden 3Dconnexion Viewer (HKLM\...\{61BEE16E-0556-4C29-9C14-DE02FE50B870}) (Version: 1.1.0.44 - 3Dconnexion) Hidden Adobe Photoshop (Beta) (HKLM\...\{KCF078A9-BA3F-458D-A4A0-3DBB7B169E6S}) (Version: 25.2.0 m.2357 - Adobe) AniMe Matrix MB EN (HKLM\...\{399B6DA7-B609-426E-95F8-B9A83FB7D06E}) (Version: 1.0.1 - ASUS) ARMOURY CRATE Lite Service (HKLM\...\{EF3944FF-2501-4568-B15C-5701E726719E}) (Version: 5.7.6 - ASUS) ASUS AIOFan HAL (HKLM\...\{EAE80DED-1A39-41C5-9F60-87CC947F6454}) (Version: 1.2.13.0 - ASUSTek COMPUTER INC.) Hidden ASUS AIOFan HAL (HKLM-x32\...\{ef4f8c38-7a01-42e8-aff3-a52c2b70c31c}) (Version: 1.2.13.0 - ASUSTek COMPUTER INC.) Hidden ASUS Ambient HAL (HKLM\...\{02DBBC13-0422-43B8-8C72-F1983DADD1FA}) (Version: 1.4.0.0 - ASUSTeK COMPUTER INC.) Hidden ASUS Ambient HAL (HKLM-x32\...\{089a9b2c-cc3b-4fad-91ba-34243342505a}) (Version: 1.4.0.0 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.20 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Extension Card HAL (HKLM-x32\...\{49c4358d-054e-4cf1-9ec1-dca3487f304a}) (Version: 1.1.0.20 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Motherboard HAL (HKLM\...\{4EBEAC95-76BC-46A8-8644-6E2F1C87CF70}) (Version: 1.3.9.5 - ASUSTeK COMPUTER INC.) Hidden ASUS AURA Motherboard HAL (HKLM-x32\...\{a51a52ef-375e-4963-8736-c98fae7373c4}) (Version: 1.3.9.5 - ASUSTeK COMPUTER INC.) Hidden ASUS Aura SDK (HKLM\...\{CF8E6E00-9C03-4440-81C0-21FACB921A6B}) (Version: 3.04.39 - ASUSTek COMPUTER INC.) Hidden ASUS Framework Service (HKLM-x32\...\{339A6383-7862-46DA-8A9D-E84180EF9424}) (Version: 4.1.0.9 - ASUSTeK Computer Inc.) ASUS Motherboard (HKLM-x32\...\{93795eb8-bd86-4d4d-ab27-ff80f9467b37}) (Version: 4.01.27 - ASUSTek Computer Inc.) ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.107 - ASUSTeK Computer Inc.) Hidden AURA DRAM Component (HKLM\...\{90A5EA1A-E836-4E51-B078-1CC6586B9933}) (Version: 1.1.24 - ASUS) Hidden AURA DRAM Component (HKLM-x32\...\{64ba8d48-3b58-4b5b-a2fb-33fcd361ef56}) (Version: 1.1.24 - ASUS) Hidden AURA lighting effect add-on (HKLM-x32\...\{1E2EA04B-FCA7-457E-B6F4-F33E1858E859}) (Version: 0.0.41 - ASUS) AURA lighting effect add-on x64 (HKLM\...\{C5A4A164-4428-4931-B728-96EEF0FA3C44}) (Version: 0.0.41 - ASUS) AURA Service (HKLM-x32\...\{56EEEF7D-0AE3-401A-898B-581719D005AE}) (Version: 3.07.26 - ASUSTeK Computer Inc.) Hidden AURA Service (HKLM-x32\...\{b7466853-b157-49df-811e-643beab9cdc7}) (Version: 3.07.26 - ASUSTeK Computer Inc.) Autodesk AutoCAD 2024 - English (HKLM\...\{CC46AD7F-5075-3702-B2BF-CFCC5AB8468B}) (Version: 24.3.61.0 - Autodesk, Inc.) Autodesk Identity Manager (HKLM\...\Autodesk Identity Manager) (Version: 1.10.4.0 - Autodesk) Autodesk Interoperability Engine Manager (HKLM\...\{412B8C29-F1BC-3791-A0BA-490A502077FA}) (Version: 1.1.0.28 - Autodesk.com) Hidden Dynamic Application Loader Host Interface Service (HKLM\...\{602631E2-0FA8-4BED-9EDB-E7CE9FDA437F}) (Version: 1.0.0.0 - Intel Corporation) Hidden ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.46.8 - Ene Tech.) Hidden ENE RGB HAL (HKLM-x32\...\{255501f4-fc14-40a4-91e3-7e5f75f74dd8}) (Version: 1.1.46.8 - Ene Tech.) Hidden ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.10.3 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_M2_HAL (HKLM-x32\...\{79e8502b-eaf7-4831-b53d-2da128540d16}) (Version: 1.0.10.3 - ENE TECHNOLOGY INC.) Hidden Everything 1.4.1.1024 (x64) (HKLM\...\Everything) (Version: 1.4.1.1024 - voidtools) Folder Lock (HKLM-x32\...\Folder Lock) (Version: - New Softwares.net) Foxit PDF Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 2023.2.0.21408 - Foxit Software Inc.) GameSDK Service (HKLM-x32\...\{021d69c3-d686-4a94-8fb5-fd1ee782fb14}) (Version: 1.0.5.0 - ASUSTek COMPUTER INC.) GameSDK Service (HKLM-x32\...\{7160DA8D-3F25-4F6E-ABC8-F693551D82FA}) (Version: 1.0.5.0 - ASUSTek COMPUTER INC.) Hidden Image Slideshower version 3.3.2 (HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\{B700046B-6A21-47D7-A027-62CF9C92FEC6}_is1) (Version: 3.3.2 - SofttouchSols, Inc.) Intel(R) Icls (HKLM\...\{AC2499C1-4700-4ECF-9581-08954D4DAE1F}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2328.5.16.0 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{5B599B1E-BEE8-4493-85AD-0BC087AB2B88}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Driver (HKLM\...\{DEAFF352-6F9F-45F4-916A-DF7A0C5A5B0C}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) ME WMI Provider (HKLM\...\{74970E1F-42D7-443F-857F-A0A0C4E71604}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{80E278C3-C089-4D7E-B83A-9C75A691F526}) (Version: 30.100.2237.26 - Intel Corporation) Hidden Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2237.26 - Intel Corporation) Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.25 - KINGSTON COMPONENTS INC.) Hidden Kingston AURA DRAM Component (HKLM-x32\...\{92bbb3e1-0a47-41f4-800d-e889c839da91}) (Version: 1.1.25 - KINGSTON COMPONENTS INC.) Hidden KMS_VL_ALL_AIO (HKLM-x32\...\{6774DC3B-ADD4-4B97-BB18-4D08F4FBF321}) (Version: 1.0.0 - KMS_VL_ALL_AIO) Logitech LCD Manager (HKLM\...\{F469B548-030B-41CD-BD46-D37A7EC9A530}) (Version: 3.06.109 - Logitech Inc.) Hidden Microsoft .NET Host - 6.0.16 (x64) (HKLM\...\{1D0AC7F1-2B34-44AF-91F6-88757D768DA7}) (Version: 48.67.58427 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.16 (x64) (HKLM\...\{B8537ACA-B210-4DF5-B928-E41CEB76723D}) (Version: 48.67.58427 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.16 (x64) (HKLM\...\{C71E93D2-B8B4-4858-B2A1-4C967DBC1C5F}) (Version: 48.67.58427 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.16 (x64) (HKLM-x32\...\{2a8d0f2b-911b-4b58-8252-46b29e7a4590}) (Version: 6.0.16.32323 - Microsoft Corporation) Microsoft ASP.NET Core 6.0.8 - Shared Framework (x64) (HKLM-x32\...\{1182f806-658a-4241-9202-d43e13bf2719}) (Version: 6.0.8.22363 - Microsoft Corporation) Microsoft ASP.NET Core 6.0.8 Shared Framework (x64) (HKLM\...\{FA97D589-B37E-3B49-A8D2-4764029773FE}) (Version: 6.0.8.22363 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 119.0.2151.72 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 119.0.2151.72 - Microsoft Corporation) Microsoft Office LTSC Professional Plus 2021 - en-us (HKLM\...\ProPlus2021Volume - en-us) (Version: 16.0.14332.20604 - Microsoft Corporation) Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 23.204.1001.0003 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31931 (HKLM-x32\...\{d4cecf3b-b68f-4995-8840-52ea0fab646e}) (Version: 14.34.31931.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31931 (HKLM-x32\...\{6ba9fb5e-8366-4cc4-bf65-25fe9819b2fc}) (Version: 14.34.31931.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31931 (HKLM\...\{EAE242B1-0A26-485A-BFEB-0292EE9F03CB}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31931 (HKLM\...\{CF4C347D-954E-4543-88D2-EC17F07F466F}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31931 (HKLM-x32\...\{C2662EFF-06E6-4FD1-9D6D-FDCA91025757}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.34.31931 (HKLM-x32\...\{AB1BDF73-7393-42CE-812D-9A90918814D5}) (Version: 14.34.31931 - Microsoft Corporation) Hidden Microsoft Office LTSC Professionnel Plus 2021 - fr-fr (HKLM\...\ProPlus2021Volume - fr-fr) (Version: 16.0.14332.20604 - Microsoft Corporation) Norton AntiVirus (HKLM-x32\...\NGC) (Version: 22.23.10.10 - NortonLifeLock Inc) Norton Secure Browser (HKLM-x32\...\Norton Secure Browser) (Version: 118.0.22914.118 - NortonLifeLock Inc) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20604 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14332.20604 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.14332.20546 - Microsoft Corporation) Hidden Opera Stable 105.0.4970.21 (HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\Opera 105.0.4970.21) (Version: 105.0.4970.21 - Opera Software) Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.9.7 - Patriot Memory) Hidden Patriot Viper DRAM RGB (HKLM-x32\...\{1d74a898-7a92-484d-8f3b-e3b68dfb1264}) (Version: 1.0.9.7 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.3 - Patriot Memory) Hidden Patriot Viper M2 SSD RGB (HKLM-x32\...\{6e0eff60-c502-43bb-8f56-360ca07e73d9}) (Version: 1.1.0.3 - Patriot Memory) Hidden PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden PHISON HAL (HKLM-x32\...\{549da357-1b81-456b-83f2-dcc47c41dfff}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden Realtek USB Audio (HKLM-x32\...\{0A46A65D-89AC-464C-8026-3CD44960BD04}) (Version: 6.3.9600.2335 - Realtek Semiconductor Corp.) Revo Uninstaller Pro 4.3.3 (HKLM\...\{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1) (Version: 4.3.3 - VS Revo Group, Ltd.) ROG FAN XPERT 4 (HKLM-x32\...\{2dfe216d-3481-4684-ad4d-2566bd7cfe4f}) (Version: 4.01.16 - ASUSTek Computer Inc.) ROG Live Service (HKLM\...\{2D87BFB6-C184-4A59-9BBE-3E20CE797631}) (Version: 2.2.14.0 - ASUSTek COMPUTER INC.) ROG STRIX LC (HKLM-x32\...\{b7eeaff5-d588-4e3b-aec3-72461da12839}) (Version: 4.01.26 - ASUSTek Computer Inc.) ROGFontInstaller (HKLM\...\{605108C1-153E-43D8-8A67-7CE326B00ECA}) (Version: 1.0.0 - ASUS) Security Task Manager 2.4 (HKLM-x32\...\Security Task Manager) (Version: 2.4 - Neuber Software) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.6 - PD) Hidden Universal Holtek RGB DRAM (HKLM-x32\...\{82f9b0cd-20fe-4ed6-a632-ef6daefb3c0d}) (Version: 1.0.0.6 - PD) Hidden uTorrent Web (HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\utweb) (Version: 1.4.0 - Rainberry, Inc.) VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN) WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden WD_BLACK AN1500 (HKLM-x32\...\{e42c5874-37b0-4977-9e8d-70bf006e1f76}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH) ZBrush 2022 (HKLM\...\ZBrush 2022 2022) (Version: 2022 - Pixologic) Packages: ========= AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5237.0_x64__8j3eq9eme6ctt [2023-11-20] (INTEL CORP) [Startup Task] Armoury Crate - Aura Sync -> C:\Program Files\ASUS\AacAmbientHal [2023-11-19] (Sparse Package) ARMOURY CRATE -> C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_5.7.6.0_x64__qmba6cd70vzyy [2023-11-19] (ASUSTeK COMPUTER INC.) DTS Sound Unbound -> C:\Program Files\WindowsApps\DTSInc.DTSSoundUnbound_2023.4.4.0_x64__t5j2fzbtdg37r [2023-11-21] (DTS, Inc.) Microsoft.WindowsAppRuntime.CBS -> C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2023-11-20] (Microsoft Corporation) Norton Security -> C:\Program Files\Norton Security\Engine\22.23.10.10 [2023-11-26] (NortonLifeLock Inc.) Outlook for Windows -> C:\Program Files\WindowsApps\Microsoft.OutlookForWindows_1.2023.1114.100_x64__8wekyb3d8bbwe [2023-11-24] (Microsoft Corporation) Power Automate -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.700.323.0_x64__8wekyb3d8bbwe [2023-11-24] (Microsoft Corporation) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.38.277.0_x64__dt26b99r8h8gj [2023-11-20] (Realtek Semiconductor Corp) Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.18.11020.0_x64__8wekyb3d8bbwe [2023-11-24] (Microsoft Studios) [MS Ad] Sonic Radar 3 -> C:\Program Files\WindowsApps\A-Volute.28054DF1F58B4_3.16.23.0_x64__w2gh52qy24etm [2023-11-20] (A-Volute) Sonic Studio 3 -> C:\Program Files\WindowsApps\A-Volute.SonicStudio3_3.16.23.0_x64__w2gh52qy24etm [2023-11-20] (A-Volute) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0 [2023-11-24] (Spotify AB) [Startup Task] Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2023-11-20] (Microsoft Corporation) WinRAR -> C:\Program Files\WinRAR [2023-11-19] (win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{169B5B8E-E315-41C7-9574-66FC7E530D10}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2024\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2024\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{3A308EFE-656D-46BB-9963-0A41C0D6BCA2}\localserver32 -> "C:\Users\sheit\AppData\Local\Microsoft\OneDrive\23.226.1031.0003\FileCoAuth.exe" => Pas de fichier CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{5405618e-4c42-4fb9-a80a-d24d89911296}\localserver32 -> C:\Users\sheit\AppData\Local\NhNotifSys\sonicstudio\asusns.exe (A-Volute SAS -> A-Volute) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{87a21711-d517-42cf-a187-0753f0b18af5}\localserver32 -> C:\Windows\System32\DriverStore\FileRepository\3dxhid.inf_amd64_2961543c9286b9f7\3DxNS_CoInst.exe (Microsoft Windows Hardware Compatibility Publisher -> 3Dconnexion) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2024\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2024\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{AF18D91C-A699-4578-ADC6-972F3BA007F0}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2024\acad.exe (Autodesk, Inc. -> Autodesk, Inc.) CustomCLSID: HKU\S-1-5-21-2592330816-1423317966-2364152033-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2024\en-US\acadficn.dll (Autodesk, Inc. -> Autodesk, Inc.) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2023-11-25] (Autodesk, Inc. -> Autodesk, Inc.) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ShellIconOverlayIdentifiers-x32: [ OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2023-11-25] (Autodesk, Inc. -> Autodesk) ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.10.10\NavShExt.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.10.10\NavShExt.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\23.204.1001.0003\amd64\FileSyncShell64.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.23.10.10\buShell.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.23.10.10\NavShExt.dll [2023-11-06] (NortonLifeLock Inc. -> NortonLifeLock Inc.) ContextMenuHandlers6: [RUShellExt] -> {2C5515DC-2A7E-4BFD-B813-CACC2B685EB7} => C:\Program Files\VS Revo Group\Revo Uninstaller Pro\RUExt.dll [2019-03-29] (VS Revo Group Ltd. -> VS Revo Group) ==================== Codecs (Avec liste blanche) ==================== ==================== Raccourcis & WMI ======================== ==================== Modules chargés (Avec liste blanche) ============= 2023-11-19 21:54 - 2023-10-13 15:13 - 000395776 _____ () [Fichier non signé] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\resources\app.asar.unpacked\node_modules\ac_node_addon\build\Release\ac_node_addon.node 2023-11-19 21:54 - 2023-09-15 17:21 - 000175104 _____ () [Fichier non signé] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\resources\app.asar.unpacked\node_modules\ffi-napi\build\Release\ffi_bindings.node 2023-11-19 21:54 - 2023-04-14 14:18 - 000159744 _____ () [Fichier non signé] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\resources\app.asar.unpacked\node_modules\ref-napi\prebuilds\win32-ia32\electron.napi.node 2023-11-19 21:54 - 2023-04-14 14:18 - 000319488 _____ () [Fichier non signé] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\resources\app.asar.unpacked\node_modules\sharp\build\Release\sharp-win32-ia32.node ==================== Alternate Data Streams (Avec liste blanche) ======== ==================== Mode sans échec (Avec liste blanche) ================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinFLAdrv.sys => ""="Driver" ==================== Association (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1" ==================== Internet Explorer (Avec liste blanche) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/?gfe_rd=cr&ei=zqe4Vda_KIv4vQTc0JS4DA&gws_rd=ssl HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?gfe_rd=cr&ei=zqe4Vda_KIv4vQTc0JS4DA&gws_rd=ssl BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-11-25] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2023-11-25 17:48 - 2023-11-25 20:37 - 000000808 _____ C:\Windows\system32\drivers\etc\hosts ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\sheit\Pictures\153 - ROG Wallpaper Challenge - 4K.jpg HKU\S-1-5-21-2592330816-1423317966-2364152033-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\Aurélie\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) HKLM\...\StartupApproved\Run: => "3DxWare Service" HKLM\...\StartupApproved\Run: => "Autodesk Access" HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller" HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\StartupApproved\StartupFolder: => "Stormshield SSL VPN Client.lnk" HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_6935E64079137BDF8762C4A74096758A" HKU\S-1-5-21-2592330816-1423317966-2364152033-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2592330816-1423317966-2364152033-1003\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2592330816-1423317966-2364152033-1003\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_4C79CD0E920919F177FAAA2B96C3D1BD" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{7576D545-4463-40F1-8C01-66417CE79F19}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23285.3703.2471.4627_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{A8A3E7E1-AA36-43FC-BB8A-CEB46FE81347}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23285.3703.2471.4627_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E2527F85-5E41-490E-A2D0-4B2E93381EAE}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.72\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{968CEF2A-FA1A-400D-BABD-BCA6E7F3AC45}C:\users\sheit\downloads\sdio_x64_r758.exe] => (Allow) C:\users\sheit\downloads\sdio_x64_r758.exe => Pas de fichier FirewallRules: [UDP Query User{38845F43-4F6B-4156-8D2A-EE3C686432B6}C:\users\sheit\downloads\sdio_x64_r758.exe] => (Allow) C:\users\sheit\downloads\sdio_x64_r758.exe => Pas de fichier FirewallRules: [{116E0FFB-F671-4255-94D1-C5512AD46341}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) FirewallRules: [{D544B831-FB17-4F95-91F2-20024970C8DA}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) FirewallRules: [{C9184857-1C11-4509-B20E-021CCC0F88D8}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) FirewallRules: [{66ED2C96-56CF-405B-9C8E-B087F0E0C427}] => (Allow) C:\Program Files\ASUS\AacAmbientHal\AacAmbientLighting.exe (ASUSTeK COMPUTER INC. -> ) FirewallRules: [{E52F0B19-0FDA-4497-8A21-FF0A4A938156}] => (Allow) C:\Users\sheit\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\LocalState\GridUpdateFile\ASUSGCDriverUpdateClient.exe (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) FirewallRules: [{022381E3-8928-415D-B6B7-42D487308A06}] => (Allow) C:\Users\sheit\AppData\Roaming\uTorrent Web\utweb.exe => Pas de fichier FirewallRules: [{8A86B5CC-26F3-4B54-8B45-98FC44541594}] => (Allow) C:\Users\sheit\AppData\Roaming\uTorrent Web\utweb.exe => Pas de fichier FirewallRules: [{37EAB1B4-2037-4B15-A48B-1457F3F3B73C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{083E47DC-9374-4B8A-93F8-7DABF713BD38}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{4A911E37-C461-47B6-93CA-16D0916CF8B7}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{45BCD9E2-FA21-4BA8-AC6C-80736A912A2B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{E6DD5BAE-B606-4A5D-8A3C-EE7F6A85112E}C:\users\sheit\appdata\local\programs\opera\opera.exe] => (Block) C:\users\sheit\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{BB385713-5B57-4224-B9ED-185431CAE4E5}C:\users\sheit\appdata\local\programs\opera\opera.exe] => (Block) C:\users\sheit\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{7BEE5B64-0579-4A79-A173-D076AE570F19}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK COMPUTER INC. -> ASUS) FirewallRules: [{565829EA-EFB8-4CC1-AB1B-3B05E6C44CA7}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK COMPUTER INC. -> ASUS) FirewallRules: [{6A9B2A48-4629-41EE-9AEB-1E759D6D414B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{DABBB622-88C5-4195-A628-2D2B9EB7CB5D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{07B18F20-2E86-4237-9906-D71310B511BA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{ECA5DF12-873E-4DC4-86B5-C2A31AA69AC6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{7AB11DF4-D738-4CAE-B857-F6B08E425017}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{5B076B95-982B-4257-A75A-F3199E5C51F5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{1D6FFB00-7A17-4E56-9739-663DD2BD058A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{6E1605A5-8B3A-40E0-BF36-E774A60C87B0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{9CBB14E2-C6AA-4EB6-82D0-EE90F38228AE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{574FA230-8185-4C2D-AFAA-13D11B1F0ECB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.225.1011.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{16F26B1B-31A8-4B9F-8D17-23707868F5A7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{DDDA1E56-77D3-4D3C-A342-79EEEB9F4C00}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{B01F1411-01A2-402C-919F-729B122CBCBB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4C317500-2634-473E-B5F6-ECF3CB91AE36}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C0DE1FA4-46D1-4977-92B9-F85BF1C5E8B8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{2B53D1B7-8AE3-4500-B46F-920E17C1D2D7}C:\users\sheit\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\sheit\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{7B48FA85-BDA2-49A2-9398-3A93C8085E96}C:\users\sheit\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\sheit\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{6A93E68D-87B4-47B2-841A-AED7867D1BE2}] => (Allow) C:\Program Files (x86)\Norton\Browser\Application\NortonBrowser.exe (NortonLifeLock Inc. -> NortonLifeLock Inc) ==================== Points de restauration ========================= 25-11-2023 01:07:56 {ec827f9c-27e5-473e-90b4-2072195a703a} 25-11-2023 21:29:34 Supprimé Stormshield SSL VPN Client ==================== Éléments en erreur du Gestionnaire de périphériques ============ Name: Contrôleur de bus SM Description: Contrôleur de bus SM Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Périphérique PCI Description: Périphérique PCI Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (11/26/2023 07:23:05 PM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/26/2023 07:01:07 PM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/26/2023 02:23:05 AM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/26/2023 01:23:05 AM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/26/2023 12:23:05 AM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/25/2023 11:23:05 PM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/25/2023 10:23:08 PM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Error: (11/25/2023 09:23:08 PM) (Source: MsiInstaller) (EventID: 11406) (User: AUTORITE NT) Description: Product: Norton Update Helper -- Error 1406. Could not write value MsiStubRun to key \SOFTWARE\Norton\Browser\Update. System error . Verify that you have sufficient access to that key, or contact your support personnel. Erreurs système: ============= Error: (11/26/2023 07:03:01 PM) (Source: DCOM) (EventID: 10010) (User: LIANLI-ROGSTRIX) Description: Le serveur {8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/26/2023 02:46:19 AM) (Source: DCOM) (EventID: 10010) (User: LianLi-RogStrix) Description: Le serveur MicrosoftWindows.Client.CBS_1000.22677.1000.0_x64__cw5n1h2txyewy!CortanaUI ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/26/2023 02:46:19 AM) (Source: DCOM) (EventID: 10010) (User: LianLi-RogStrix) Description: Le serveur Microsoft.Windows.StartMenuExperienceHost_10.0.22621.2506_neutral_neutral_cw5n1h2txyewy!App ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/26/2023 02:46:19 AM) (Source: DCOM) (EventID: 10010) (User: LianLi-RogStrix) Description: Le serveur {69B7FE84-6361-4423-B948-1D64820B1E96} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/25/2023 09:30:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Service Orchestrator pour les mises à jour n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (11/25/2023 09:30:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Service Orchestrator pour les mises à jour. Error: (11/25/2023 09:30:42 PM) (Source: Service Control Manager) (EventID: 7022) (User: ) Description: Le service Optimisation de livraison est en attente de démarrage. Error: (11/25/2023 09:28:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Service de transfert intelligent en arrière-plan n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Windows Defender: ================ Date: 2023-11-25 14:45:23 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0 Nom : Trojan:Script/Wacatac.B!ml ID : 2147735503 Gravité : Grave Catégorie : Cheval de Troie Chemin : file:_D:\FILMS\AAA - DÉJÀ VU\_readme.txt; file:_D:\FILMS\AAC - HORREUR\_readme.txt; file:_D:\FILMS\BANLIEUE 13\_readme.txt; file:_D:\FILMS\BRUCE LEE\_readme.txt; file:_D:\FILMS\CANNONBALL\_readme.txt; file:_D:\FILMS\COUR APRES MOI SHERIF\_readme.txt; file:_D:\FILMS\Crank, Hyper Tension Duology (2006-2009) 1080p\_readme.txt; file:_D:\FILMS\Creepshow 1 & 2 1080p\_readme.txt; file:_D:\FILMS\DEAD SNOW\_readme.txt; file:_D:\FILMS\DESTINATION FINALE\_readme.txt; file:_D:\FILMS\DETOUR MORTEL\_readme.txt; file:_D:\FILMS\EN QUARANTAINE\_readme.txt; file:_D:\FILMS\EVIL DEAD\_readme.txt; file:_D:\FILMS\EXPENDABLES\_readme.txt; file:_D:\FILMS\GREMLINS\_readme.txt; file:_D:\FILMS\HOT SHOTS\_readme.txt; file:_D:\FILMS\INDIANA JONES\_readme.txt; file:_D:\FILMS\IP MAN\_readme.txt; file:_D:\FILMS\LA BOUSE\_readme.txt; file:_D:\FILMS\LA COLLINE A DES YEUX\_readme.txt; file:_D:\FILMS\LA MOMIE\_readme.txt; file:_D:\FILMS\LA MOUCHE\_readme.txt; file:_D:\FILMS\LA PLANÈTE DES SINGES\_readme.txt; file:_D:\FILMS\LE SEIGNEUR DES ANNE Origine de la détection : Ordinateur local Type de détection : Chemin rapide Source de détection : Utilisateur Utilisateur : LianLi-RogStrix\sheit Nom du processus : Unknown Version de la veille de sécurité : AV: 1.401.1166.0, AS: 1.401.1166.0, NIS: 0.0.0.0 Version du moteur : AM: 1.1.23100.2009, NIS: 0.0.0.0 Date: 2023-11-25 14:39:02 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Wacatac.B!ml&threatid=2147735503&enterprise=0 Nom : Trojan:Script/Wacatac.B!ml ID : 2147735503 Gravité : Grave Catégorie : Cheval de Troie Chemin : file:_D:\FILMS\AAA - DÉJÀ VU\_readme.txt; file:_D:\FILMS\AAC - HORREUR\_readme.txt; file:_D:\FILMS\BRUCE LEE\_readme.txt; file:_D:\FILMS\CANNONBALL\_readme.txt; file:_D:\FILMS\COUR APRES MOI SHERIF\_readme.txt; file:_D:\FILMS\Crank, Hyper Tension Duology (2006-2009) 1080p\_readme.txt; file:_D:\FILMS\Creepshow 1 & 2 1080p\_readme.txt; file:_D:\FILMS\DEAD SNOW\_readme.txt; file:_D:\FILMS\DESTINATION FINALE\_readme.txt; file:_D:\FILMS\DETOUR MORTEL\_readme.txt; file:_D:\FILMS\EN QUARANTAINE\_readme.txt; file:_D:\FILMS\EVIL DEAD\_readme.txt; file:_D:\FILMS\EXPENDABLES\_readme.txt; file:_D:\FILMS\GREMLINS\_readme.txt; file:_D:\FILMS\HOT SHOTS\_readme.txt; file:_D:\FILMS\INDIANA JONES\_readme.txt; file:_D:\FILMS\IP MAN\_readme.txt; file:_D:\FILMS\LA BOUSE\_readme.txt; file:_D:\FILMS\LA COLLINE A DES YEUX\_readme.txt; file:_D:\FILMS\LA MOMIE\_readme.txt; file:_D:\FILMS\LA MOUCHE\_readme.txt; file:_D:\FILMS\LA PLANÈTE DES SINGES\_readme.txt; file:_D:\FILMS\LE SEIGNEUR DES ANNEAUX TRILOGIE\_readme.txt; file:_D:\FILMS Origine de la détection : Ordinateur local Type de détection : Chemin rapide Source de détection : Utilisateur Utilisateur : LianLi-RogStrix\sheit Nom du processus : Unknown Version de la veille de sécurité : AV: 1.401.1166.0, AS: 1.401.1166.0, NIS: 0.0.0.0 Version du moteur : AM: 1.1.23100.2009, NIS: 0.0.0.0 Date: 2023-11-25 13:13:56 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=VirTool:Win32/DefenderTamperingRestore&threatid=2147741622&enterprise=0 Nom : VirTool:Win32/DefenderTamperingRestore ID : 2147741622 Gravité : Grave Catégorie : Outil Chemin : regkeyvalue:_hklm\software\policies\microsoft\windows defender\real-time protection\\DisableBehaviorMonitoring Origine de la détection : Inconnu Type de détection : Concret Source de détection : Système Utilisateur : AUTORITE NT\Système Nom du processus : Unknown Version de la veille de sécurité : AV: 1.401.1166.0, AS: 1.401.1166.0, NIS: 0.0.0.0 Version du moteur : AM: 1.1.23100.2009, NIS: 0.0.0.0 Date: 2023-11-25 01:27:03 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Sabsik.FL.B&threatid=2147820548&enterprise=0 Nom : Trojan:Win32/Sabsik.FL.B ID : 2147820548 Gravité : Grave Catégorie : Cheval de Troie Chemin : file:_E:\LOGICIELS\AAA- FONCTIONNE SUR\Microsoft Office 2019 & 2021 Pro Plus [16.0.14332.20110] Incl Activator\KMS_VL_ALL_AIO.rar Origine de la détection : Ordinateur local Type de détection : Concret Source de détection : Protection en temps réel Utilisateur : LianLi-RogStrix\sheit Nom du processus : C:\Users\sheit\AppData\Local\a0e89740-4046-44e1-8a08-ea4e283504cb\4gsCEzul3ZFBIhFnkcVgyIZP.exe Version de la veille de sécurité : AV: 1.401.1140.0, AS: 1.401.1140.0, NIS: 1.401.1140.0 Version du moteur : AM: 1.1.23100.2009, NIS: 1.1.23100.2009 Date: 2023-11-25 01:21:22 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Behavior:Win32/Filecoder.DD&threatid=2147811385&enterprise=0 Nom : Behavior:Win32/Filecoder.DD ID : 2147811385 Gravité : Grave Catégorie : Comportement suspect Chemin : behavior:_process: C:\Users\sheit\AppData\Local\a0e89740-4046-44e1-8a08-ea4e283504cb\4gsCEzul3ZFBIhFnkcVgyIZP.exe, pid:16648:178890228286600; process:_pid:16648,ProcessStart:133453452785637610 Origine de la détection : Inconnu Type de détection : Concret Source de détection : Inconnu Utilisateur : Nom du processus : Unknown Version de la veille de sécurité : AV: 1.401.1140.0, AS: 1.401.1140.0, NIS: 1.401.1140.0 Version du moteur : AM: 1.1.23100.2009, NIS: 1.1.23100.2009  CodeIntegrity: =============== Date: 2023-11-26 19:45:32 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.23.10.10\symamsi.dll that did not meet the Windows signing level requirements. Date: 2023-11-26 19:45:15 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.23.10.10\symamsi.dll that did not meet the Windows signing level requirements. ==================== Infos Mémoire =========================== BIOS: American Megatrends Inc. 2012 10/11/2022 Carte mère: ASUSTeK COMPUTER INC. ROG STRIX B660-F GAMING WIFI Processeur: 12th Gen Intel(R) Core(TM) i7-12700K Pourcentage de mémoire utilisée: 20% Mémoire physique - RAM - totale: 32509.42 MB Mémoire physique - RAM - disponible: 25824.22 MB Mémoire virtuelle totale: 37629.42 MB Mémoire virtuelle disponible: 30316.79 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:1862.23 GB) (Free:1748.55 GB) (Model: Samsung SSD 980 PRO 2TB) NTFS Drive d: (HDD 1To HITACHI) (Fixed) (Total:930.91 GB) (Free:162.13 GB) (Model: WDC WD10JPVX-22JC3T0) NTFS Drive e: (HDD 1To HGST) (Fixed) (Total:931.51 GB) (Free:142.79 GB) (Model: HGST HTS721010A9E630) NTFS \\?\Volume{2e1f2c9e-28a0-4049-88d5-868743ba7aea}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS \\?\Volume{1076611f-138d-4bb6-8c7e-34b791ad898d}\ () (Fixed) (Total:0.67 GB) (Free:0.08 GB) NTFS \\?\Volume{65e2c00c-3a02-4f8d-a027-2320b20d94f7}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.05 GB) FAT32 \\?\Volume{4a1026aa-94d2-42ab-a64a-2d451aa52a07}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 9E02EBFB) Partition: GPT. ========================================================== Disk: 1 (Size: 931.5 GB) (Disk ID: 870DEBFD) Partition: GPT. ========================================================== Disk: 2 (Size: 1863 GB) (Disk ID: 73D739DD) Partition: GPT. ==================== Fin de Addition.txt =======================