Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 19.04.2024 01 Exécuté par puiti (01-05-2024 20:46:46) Exécuté depuis D:\Téléchargement Microsoft Windows 10 Professionnel Version 22H2 19045.4291 (X64) (2023-11-11 14:43:16) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) Administrateur (S-1-5-21-3855559541-3393991966-3907732845-500 - Administrator - Enabled) => C:\Users\Administrateur DefaultAccount (S-1-5-21-3855559541-3393991966-3907732845-503 - Limited - Disabled) Invité (S-1-5-21-3855559541-3393991966-3907732845-501 - Limited - Disabled) puiti (S-1-5-21-3855559541-3393991966-3907732845-1001 - Administrator - Enabled) => C:\Users\puiti puiti_ugka3kv (S-1-5-21-3855559541-3393991966-3907732845-1005 - Administrator - Enabled) => C:\Users\puiti_ugka3kv WDAGUtilityAccount (S-1-5-21-3855559541-3393991966-3907732845-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) 7-Zip 23.01 (x64) (HKLM\...\7-Zip) (Version: 23.01 - Igor Pavlov) AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 6.02.07.2300 - Advanced Micro Devices, Inc.) AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.27.0.0 - Advanced Micro Devices, Inc.) Hidden AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 8.0.0.13 - Advanced Micro Devices, Inc.) Hidden AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden AMD_Chipset_Drivers (HKLM-x32\...\{87355a16-0a35-41ad-b751-301db3b6b78c}) (Version: 6.02.07.2300 - Advanced Micro Devices, Inc.) Hidden Apple Mobile Device Support (HKLM\...\{FA3D0F2D-BA1C-4462-B6B3-3048CFF464C7}) (Version: 17.0.0.28 - Apple Inc.) Apple Software Update (HKLM-x32\...\{B292D163-23D2-4523-A699-1ABEC1875609}) (Version: 2.7.0.3 - Apple Inc.) AUTOBAHN POLICE SIMULATOR 3 OFF-ROAD (HKLM-x32\...\AUTOBAHN POLICE SIMULATOR 3 OFF-ROAD_) (Version: - ) AutoHotkey 1.1.37.01 (HKLM\...\AutoHotkey) (Version: 1.1.37.01 - AutoHotkey Foundation LLC) Bloxstrap (HKU\S-1-5-21-3855559541-3393991966-3907732845-500\...\Bloxstrap) (Version: 2.5.4 - pizzaboxer) BlueStacks App Player (HKLM\...\BlueStacks) (Version: 4.280.0.1022 - BlueStack Systems, Inc.) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 124.1.65.123 - Auteurs de Brave) CAPTAIN TSUBASA RISE OF NEW CHAMPIONS (HKLM-x32\...\CAPTAIN TSUBASA RISE OF NEW CHAMPIONS_) (Version: - ) Disco Simulator (HKLM-x32\...\Disco Simulator) (Version: - SKIDROW) DRIVE UP (HKLM-x32\...\DRIVE UP_) (Version: - ) EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.74.0.5587 - Electronic Arts) Hidden EA app (HKLM-x32\...\{5cb72f10-205d-496e-a2bc-ff98485b0f8d}) (Version: 13.74.0.5587 - Electronic Arts) FakerInput (HKLM\...\{BF63C434-BF91-4666-B817-AD7B5C34AE91}) (Version: 0.1.0 - Ryochan7) FFB Racing Wheel drivers (HKLM-x32\...\{28B758EA-5C83-48B1-B352-C70F12C73F5A}) (Version: 1.TTRS.2024 - Thrustmaster) FLASHING LIGHTS BEAST SWAT TRUCK (HKLM-x32\...\FLASHING LIGHTS BEAST SWAT TRUCK_) (Version: - ) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 124.0.6367.92 - Google LLC) HidHide (HKLM\...\{27AF679E-48DB-4B49-A689-1D6A3A52C472}) (Version: 1.2.98 - Nefarius Software Solutions e.U.) iOverlay 0.7.3 (HKLM\...\8309dcb4-0eff-554a-9dae-5d025c520446) (Version: 0.7.3 - Joeri Steinmetz) iTunes (HKLM\...\{88EF1CB0-199B-40F5-8142-320016E88382}) (Version: 12.13.1.3 - Apple Inc.) Microsoft .NET Host - 6.0.5 (x64) (HKLM\...\{F3B3A61B-DC16-429A-A260-DBAFE66741A9}) (Version: 48.23.40665 - Microsoft Corporation) Hidden Microsoft .NET Host - 8.0.3 (x64) (HKLM\...\{0511E062-77E0-4F80-ABA3-0F99B9EF8C4B}) (Version: 64.12.10343 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.5 (x64) (HKLM\...\{3E6CCD41-6B96-47BD-8E1E-D7B593CEE976}) (Version: 48.23.40665 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 8.0.3 (x64) (HKLM\...\{E79D3B29-C9A2-42D5-8703-85B73C452D8B}) (Version: 64.12.10343 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.5 (x64) (HKLM\...\{089A177D-98AE-4195-A115-D3C45613B875}) (Version: 48.23.40665 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 8.0.3 (x64) (HKLM\...\{D98088DE-EDA4-4E1A-BF0F-ED9A9145CC70}) (Version: 64.12.10343 - Microsoft Corporation) Hidden Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.17425.20176 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 124.0.2478.67 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 124.0.2478.67 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.076.0414.0005 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.60610 (HKLM\...\{764384C5-BCA9-307C-9AAC-FD443662686A}) (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.60610 (HKLM\...\{2EDC2FA3-1F34-34E5-9085-588C9EFD1CC6}) (Version: 11.0.60610 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.5 (x64) (HKLM\...\{DE578B32-084A-49E7-8E55-6F58A37578C0}) (Version: 48.23.40699 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.5 (x64) (HKLM-x32\...\{0f711ee3-eb88-456d-acb4-c2ee31add211}) (Version: 6.0.5.31215 - Microsoft Corporation) Microsoft Windows Desktop Runtime - 8.0.3 (x64) (HKLM\...\{CE0906F2-6C11-4A2B-880B-AFB92474B13E}) (Version: 64.12.10377 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 8.0.3 (x64) (HKLM-x32\...\{fb8f4657-2b60-4298-b83e-aaccb07ef793}) (Version: 8.0.3.33416 - Microsoft Corporation) NUCLEAR WAR SIMULATOR (HKLM-x32\...\NUCLEAR WAR SIMULATOR_) (Version: - ) NVIDIA Logiciel système PhysX 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation) NVIDIA Pilote graphique 552.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 552.22 - NVIDIA Corporation) NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.1.2 - OBS Project) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17425.20146 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17425.20176 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.17425.20146 - Microsoft Corporation) Hidden Overwolf (HKLM-x32\...\Overwolf) (Version: 0.248.120.19 - Overwolf Ltd.) PARKING TYCOON BUSINESS SIMULATOR (HKLM-x32\...\PARKING TYCOON BUSINESS SIMULATOR_) (Version: - ) Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.0.0 - Advanced Micro Devices, Inc.) Hidden RacelabApps (HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\...\racelabapps) (Version: 5.2.2 - Istvan Fodor) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.69.1121.2023 - Realtek) Roblox Player (HKLM-x32\...\roblox-player-admin) (Version: - Roblox Corporation) Roblox Player for puiti (HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\...\roblox-player) (Version: - Roblox Corporation) Roblox Player for puiti_ugka3kv (HKU\S-1-5-21-3855559541-3393991966-3907732845-1005\...\roblox-player) (Version: - Roblox Corporation) Roblox Studio for puiti (HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\...\roblox-studio) (Version: - Roblox Corporation) SnowRunner Public Energy (HKLM-x32\...\SnowRunner Public Energy_is1) (Version: - ) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Streamlabs Desktop 1.16.3 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 1.16.3 - General Workings, Inc.) Taxi Life A City Driving Simulator (HKLM-x32\...\FLT_Taxi_Life_-_A_City_Driving_Simulator) (Version: - ) Trading Paints (HKLM-x32\...\{7DD94BA7-5DB1-43C3-8D5E-97F9634E4531}) (Version: 2.1.0 - Rhinode LLC) Transparent Twitch Chat Overlay (HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\...\TransparentTwitchChatOverlay) (Version: 1.0.2 - baffler) TruckersMP Launcher (HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\...\TruckersMP) (Version: 1.3.10 - TruckersMP) TrucksBook Client version 1.4.3 (HKLM-x32\...\TrucksBook Client_is1) (Version: 1.4.3 - TrucksBook) Trucky (HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\...\Overwolf_nhooheenabojigjaocnbanebmgdcmokbkbcdidea) (Version: 2.27.6.5 - Overwolf app) UE4 Prerequisites (x64) (HKLM\...\{36EAD5CF-44EF-4FCF-8BE1-D96C4835D7A4}) (Version: 1.0.11.0 - Epic Games, Inc.) Hidden UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{B9A7A138-BFD5-4C73-A269-F78CCA28150E}) (Version: 8.94.0.0 - Microsoft Corporation) ViGEm Bus Driver (HKLM\...\{9C581C76-2D68-40F8-AA6F-94D3C5215C05}) (Version: 1.21.442 - Nefarius Software Solutions e.U.) vJoy Device Driver 2.1.9.1 (HKLM\...\{8E31F76F-74C3-47F1-9550-E041EEDC5FBB}_is1) (Version: 2.1.9.1 - Shaul Eizikovich) WinRAR 6.24 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH) Wreckfest - Season Pass 1 (HKLM-x32\...\2139564572_is1) (Version: 1.0j - GOG.com) Wreckfest - Season Pass 2 (HKLM-x32\...\1570193906_is1) (Version: 1.0j - GOG.com) Wreckfest (HKLM-x32\...\1249986612_is1) (Version: 1.0j - GOG.com) Packages: ========= Microsoft Copilot -> C:\Program Files\WindowsApps\Microsoft.Windows.Ai.Copilot.Provider_1.0.3.0_neutral__8wekyb3d8bbwe [2024-03-29] (Microsoft Corporation) Microsoft Recherche Bing -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.79.0_x64__8wekyb3d8bbwe [2024-02-13] (Microsoft Corporation) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-29] (NVIDIA Corp.) Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.20.238.0_x64__dt26b99r8h8gj [2023-11-29] (Realtek Semiconductor Corp) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-3855559541-3393991966-3907732845-1001_Classes\CLSID\{04271989-C4D2-9BC8-9507-00F24B4E6FB7} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6} CustomCLSID: HKU\S-1-5-21-3855559541-3393991966-3907732845-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> "C:\Program Files\NordVPN\NordVPN.exe" -ToastActivated => Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Fichier non signé] ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Fichier non signé] ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.076.0414.0005\FileSyncShell64.dll [2024-04-29] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispig.inf_amd64_84b2c943d6816eb7\nvshext.dll [2024-04-12] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Fichier non signé] ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal) ==================== Codecs (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Drivers32: [VIDC.WVC1] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.WMV3] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.MJPG] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.M4S2] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.FVFW] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.MP4V] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.FFVH] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) HKLM\...\Drivers32: [VIDC.H264] => C:\WINDOWS\system32\d3dgeardecoder64.dll [158592 2024-03-06] (D3DGear Technologies -> D3DGear Technologies.) ==================== Raccourcis & WMI ======================== ==================== Modules chargés (Avec liste blanche) ============= 2024-04-05 20:05 - 2023-04-19 07:22 - 001360896 _____ () [Fichier non signé] C:\Program Files (x86)\TrucksBook Client\SII_Decrypt.dll 2024-04-11 18:05 - 2024-04-11 17:03 - 000245760 _____ (František Milt) [Fichier non signé] C:\Users\puiti\Desktop\PICKUP\SII_Decrypt.dll 2023-12-07 22:33 - 2023-06-20 10:00 - 000101376 _____ (Igor Pavlov) [Fichier non signé] C:\Program Files\7-Zip\7-zip.dll 2023-11-26 01:09 - 2023-11-26 01:09 - 000116736 _____ (Stas'M Corp.) [Fichier non signé] c:\program files\rdp wrapper\rdpwrap.dll ==================== Alternate Data Streams (Avec liste blanche) ======== ==================== Mode sans échec (Avec liste blanche) ================== ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer (Avec liste blanche) ========== BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2023-11-11 16:15 - 2023-11-11 16:14 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-3855559541-3393991966-3907732845-1001\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-3855559541-3393991966-3907732845-1005\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg HKU\S-1-5-21-3855559541-3393991966-3907732845-500\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{778958B7-6A89-4B36-96F7-4252BF047D66}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{BC29E87D-F94D-495D-880E-99E1DD9FD933}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{F5C02D93-BF67-4114-A7C7-A1CC408AF2EE}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{0F5301CA-8E37-476A-9FF8-540D7B5ED097}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{12DD7950-FB93-4EED-9085-058301BEE9C8}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{42700F29-1BC2-4056-BE07-C6156BD15EF6}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{0AD4C341-8808-436D-A3C0-8DDAB031A8AC}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{D0173E75-1466-482B-9473-AD1A7748ECB4}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{2D21F06C-A766-4168-892A-0B957297ED66}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{F79E93C5-26C0-4675-9FDD-03D9B0663B2A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{4F70D73D-11F8-4748-A545-86DC1687FBC6}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{46FAF02C-973E-4D4A-962C-3558D46AFC35}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{341C22A6-A059-4147-B98B-30F40DDAB63A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{751CE95A-D45A-4558-AC6E-CFFBDD9FEEF1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{8E48AC89-70E9-44B5-8602-8D27DD7B774D}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{63FD77A9-12AD-41D3-9CCB-56BE03B7F019}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{FBE00659-6479-4BA8-96F3-DE5D96B2BA5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{A750799E-AD02-49D0-932C-2C7E61CE3AE5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{9CB56954-492D-46C1-82F0-8D1A369CE748}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [TCP Query User{75D58DF2-D4C8-47AA-B415-3888E6834065}D:\ea sports fc 24\fc24.exe] => (Allow) D:\ea sports fc 24\fc24.exe => Pas de fichier FirewallRules: [UDP Query User{98707707-7FFF-409C-A78C-B2EF179FA2E8}D:\ea sports fc 24\fc24.exe] => (Allow) D:\ea sports fc 24\fc24.exe => Pas de fichier FirewallRules: [{39530F4A-DF9A-454F-BA30-A7F12501BB57}] => (Block) D:\ea sports fc 24\fc24.exe => Pas de fichier FirewallRules: [{46A4FA53-4846-4AB2-8197-3F6B04AF4D70}] => (Block) D:\ea sports fc 24\fc24.exe => Pas de fichier FirewallRules: [TCP Query User{264F199C-2449-4DF8-9772-EBE899B07A93}C:\users\puiti\appdata\local\overwolf\processcache\0.236.0.11\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.236.0.11\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [UDP Query User{78DEFBCD-42D3-443F-9984-1D9C0E7A330D}C:\users\puiti\appdata\local\overwolf\processcache\0.236.0.11\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.236.0.11\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [TCP Query User{379DED6C-694E-4E5F-87D7-64720F957834}C:\users\puiti\appdata\local\overwolf\processcache\0.236.2.2\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.236.2.2\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [UDP Query User{19276202-EA8F-437B-A402-222D998D121C}C:\users\puiti\appdata\local\overwolf\processcache\0.236.2.2\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.236.2.2\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [{72229608-557E-41F3-B50E-37C56AF52AB4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{883AF067-DD65-4577-9EB7-737BFBEED71C}] => (Allow) C:\Program Files\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.) FirewallRules: [{4AC25253-F89A-4700-A609-8AF94AEE1EAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 15\x64\FarmingSimulator2015Game.exe => Pas de fichier FirewallRules: [{D5EFAEAD-B9B4-4C2C-9121-6240FC5DAE78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 15\x64\FarmingSimulator2015Game.exe => Pas de fichier FirewallRules: [{D73964B9-3746-48D4-9CB9-07C442E239AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 15\x86\FarmingSimulator2015Game.exe => Pas de fichier FirewallRules: [{ED7CEC40-52A2-4CE7-913C-718CE7722EAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Farming Simulator 15\x86\FarmingSimulator2015Game.exe => Pas de fichier FirewallRules: [TCP Query User{928609D9-391F-4E44-AD86-888B44960760}C:\users\puiti\appdata\local\overwolf\processcache\0.240.0.6\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.240.0.6\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [UDP Query User{8B61993A-EE87-4DF2-B11D-354E6370D189}C:\users\puiti\appdata\local\overwolf\processcache\0.240.0.6\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.240.0.6\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [{6303C3CA-AC25-44BF-BC3D-B017ECB02147}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{2EA584D5-226E-4CB1-BFE0-8E10A09922BF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{99DC29CD-7CFB-4315-8FE6-E0CFA42B61F3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{F94E08A5-3D44-4C35-B384-2A118A48DEF3}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.) FirewallRules: [{0DC30BBB-6A28-4778-9FC6-67CC3BF882FE}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.) FirewallRules: [TCP Query User{8C816134-40F0-4F0A-AE50-045F04334040}C:\users\puiti\desktop\police\police.simulator.patrol.officers.v12.3.1\boston\binaries\win64\boston-win64-shipping.exe] => (Block) C:\users\puiti\desktop\police\police.simulator.patrol.officers.v12.3.1\boston\binaries\win64\boston-win64-shipping.exe => Pas de fichier FirewallRules: [UDP Query User{7BE87388-CCE6-4854-8301-11A8C7299A64}C:\users\puiti\desktop\police\police.simulator.patrol.officers.v12.3.1\boston\binaries\win64\boston-win64-shipping.exe] => (Block) C:\users\puiti\desktop\police\police.simulator.patrol.officers.v12.3.1\boston\binaries\win64\boston-win64-shipping.exe => Pas de fichier FirewallRules: [TCP Query User{B23B22C2-601F-4B3E-BEE7-F5B92FD80197}C:\users\puiti\desktop\trombone.champ.v1.19\trombonechamp.exe] => (Block) C:\users\puiti\desktop\trombone.champ.v1.19\trombonechamp.exe => Pas de fichier FirewallRules: [UDP Query User{9624D294-A6C2-4ABC-BFFF-093A33491A87}C:\users\puiti\desktop\trombone.champ.v1.19\trombonechamp.exe] => (Block) C:\users\puiti\desktop\trombone.champ.v1.19\trombonechamp.exe => Pas de fichier FirewallRules: [TCP Query User{B381C687-DDDA-4175-80D6-2AB1D7787BD1}C:\users\puiti\appdata\local\racelabapps\app-5.0.1\racelabapps.exe] => (Allow) C:\users\puiti\appdata\local\racelabapps\app-5.0.1\racelabapps.exe => Pas de fichier FirewallRules: [UDP Query User{FAEC4734-74F7-4350-8E7A-969D6D952120}C:\users\puiti\appdata\local\racelabapps\app-5.0.1\racelabapps.exe] => (Allow) C:\users\puiti\appdata\local\racelabapps\app-5.0.1\racelabapps.exe => Pas de fichier FirewallRules: [TCP Query User{F7D2DAFB-93E6-4B0B-9A7E-73AF6794E4C5}C:\program files\ioverlay\ioverlay.exe] => (Allow) C:\program files\ioverlay\ioverlay.exe (Joeri Steinmetz) [Fichier non signé] FirewallRules: [UDP Query User{E862F192-6DF3-41FB-9264-60C78BAA798B}C:\program files\ioverlay\ioverlay.exe] => (Allow) C:\program files\ioverlay\ioverlay.exe (Joeri Steinmetz) [Fichier non signé] FirewallRules: [TCP Query User{34AD5A0B-1018-4D38-B88B-502DC85C91C9}C:\users\puiti\appdata\local\racelabapps\app-5.2.2\racelabapps.exe] => (Allow) C:\users\puiti\appdata\local\racelabapps\app-5.2.2\racelabapps.exe (Istvan Fodor) [Fichier non signé] FirewallRules: [UDP Query User{2642830A-F50B-463D-A0A2-6A33CC0E0C51}C:\users\puiti\appdata\local\racelabapps\app-5.2.2\racelabapps.exe] => (Allow) C:\users\puiti\appdata\local\racelabapps\app-5.2.2\racelabapps.exe (Istvan Fodor) [Fichier non signé] FirewallRules: [TCP Query User{D1A7712E-1281-4E29-B684-C163D55D0CDD}D:\wreckfest\wreckfest_x64.exe] => (Allow) D:\wreckfest\wreckfest_x64.exe () [Fichier non signé] FirewallRules: [UDP Query User{98E60B7E-E93F-4683-8A33-626D53185974}D:\wreckfest\wreckfest_x64.exe] => (Allow) D:\wreckfest\wreckfest_x64.exe () [Fichier non signé] FirewallRules: [TCP Query User{05E073B0-BE59-4B85-B205-AB26530AED3D}D:\metro\metro.simulator.build.7730960\metro.simulator.build.7730960\metro simulator.exe] => (Allow) D:\metro\metro.simulator.build.7730960\metro.simulator.build.7730960\metro simulator.exe () [Fichier non signé] FirewallRules: [UDP Query User{033355E2-F9BE-4BAC-9E7E-C8A55E50F927}D:\metro\metro.simulator.build.7730960\metro.simulator.build.7730960\metro simulator.exe] => (Allow) D:\metro\metro.simulator.build.7730960\metro.simulator.build.7730960\metro simulator.exe () [Fichier non signé] FirewallRules: [TCP Query User{CD7AE0AB-B806-46BC-AF35-DF1368208578}D:\service it you\serviceit.you.can.do.it.early.access\symulatorit\binaries\win64\symulatorit-win64-shipping.exe] => (Allow) D:\service it you\serviceit.you.can.do.it.early.access\symulatorit\binaries\win64\symulatorit-win64-shipping.exe (picture4u) [Fichier non signé] FirewallRules: [UDP Query User{64FC1BCA-0E12-4647-A050-B5FEDEEB85C3}D:\service it you\serviceit.you.can.do.it.early.access\symulatorit\binaries\win64\symulatorit-win64-shipping.exe] => (Allow) D:\service it you\serviceit.you.can.do.it.early.access\symulatorit\binaries\win64\symulatorit-win64-shipping.exe (picture4u) [Fichier non signé] FirewallRules: [TCP Query User{A305FAE1-6E0F-42C8-88CD-57EC559A24E0}D:\car for sale\car.for.sale.simulator.2023.v0.3.0.3a\car.for.sale.simulator.2023.v0.3.0.3a\car for sale simulator 2023.exe] => (Allow) D:\car for sale\car.for.sale.simulator.2023.v0.3.0.3a\car.for.sale.simulator.2023.v0.3.0.3a\car for sale simulator 2023.exe => Pas de fichier FirewallRules: [UDP Query User{263AE925-8481-4A93-AF33-842B67B400AB}D:\car for sale\car.for.sale.simulator.2023.v0.3.0.3a\car.for.sale.simulator.2023.v0.3.0.3a\car for sale simulator 2023.exe] => (Allow) D:\car for sale\car.for.sale.simulator.2023.v0.3.0.3a\car.for.sale.simulator.2023.v0.3.0.3a\car for sale simulator 2023.exe => Pas de fichier FirewallRules: [TCP Query User{EBDDEFE6-4726-4A21-9ECF-EA622C8A288B}D:\car for sale\car.for.sale.simulator.2023.build.13565786\car for sale simulator 2023.exe] => (Block) D:\car for sale\car.for.sale.simulator.2023.build.13565786\car for sale simulator 2023.exe () [Fichier non signé] FirewallRules: [UDP Query User{2736E072-E9D6-4ABC-8F3E-89C6268EE21C}D:\car for sale\car.for.sale.simulator.2023.build.13565786\car for sale simulator 2023.exe] => (Block) D:\car for sale\car.for.sale.simulator.2023.build.13565786\car for sale simulator 2023.exe () [Fichier non signé] FirewallRules: [TCP Query User{92F8555C-4801-4B49-A51E-EB2EFF2607C8}D:\a difficult\a.difficult.game.about.climbing.v1.02\a.difficult.game.about.climbing.v1.02\a difficult game about climbing.exe] => (Block) D:\a difficult\a.difficult.game.about.climbing.v1.02\a.difficult.game.about.climbing.v1.02\a difficult game about climbing.exe () [Fichier non signé] FirewallRules: [UDP Query User{37AE4E1F-21ED-430E-8FC0-F6D749CFDEFA}D:\a difficult\a.difficult.game.about.climbing.v1.02\a.difficult.game.about.climbing.v1.02\a difficult game about climbing.exe] => (Block) D:\a difficult\a.difficult.game.about.climbing.v1.02\a.difficult.game.about.climbing.v1.02\a difficult game about climbing.exe () [Fichier non signé] FirewallRules: [TCP Query User{85C51EFF-5FC8-4B6A-9E0C-8ED508B5A471}D:\farming simulator 22\x64\farmingsimulator2022game.exe] => (Block) D:\farming simulator 22\x64\farmingsimulator2022game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [UDP Query User{BE976819-10DB-4048-980F-D5DD278EB0F1}D:\farming simulator 22\x64\farmingsimulator2022game.exe] => (Block) D:\farming simulator 22\x64\farmingsimulator2022game.exe (GIANTS Software GmbH -> GIANTS Software GmbH) FirewallRules: [TCP Query User{42539309-62A9-4C33-9C97-A91D610E8EBD}D:\decouvrir\sex.spa\s.e.x. retreat wellcum in!\sex spa.exe] => (Block) D:\decouvrir\sex.spa\s.e.x. retreat wellcum in!\sex spa.exe => Pas de fichier FirewallRules: [UDP Query User{FFCA10FB-3439-4B37-B071-9F519D42FAB2}D:\decouvrir\sex.spa\s.e.x. retreat wellcum in!\sex spa.exe] => (Block) D:\decouvrir\sex.spa\s.e.x. retreat wellcum in!\sex spa.exe => Pas de fichier FirewallRules: [TCP Query User{EA33AAA1-1D3D-4FDA-90FD-62EBEB68852A}D:\decouvert\sex.doll.simulator\game\sex doll simulator🔞.exe] => (Block) D:\decouvert\sex.doll.simulator\game\sex doll simulator🔞.exe => Pas de fichier FirewallRules: [UDP Query User{C667FE44-1F72-4B03-AECC-FDF5172F1552}D:\decouvert\sex.doll.simulator\game\sex doll simulator🔞.exe] => (Block) D:\decouvert\sex.doll.simulator\game\sex doll simulator🔞.exe => Pas de fichier FirewallRules: [TCP Query User{A527BCB0-1E03-497C-ADC0-25BB4F9ED349}D:\decouvert\sex.room.2\sex.room.2.build.11066708\sex room 2.exe] => (Block) D:\decouvert\sex.room.2\sex.room.2.build.11066708\sex room 2.exe => Pas de fichier FirewallRules: [UDP Query User{5CE4A86B-85F4-4981-B3D4-0FF0FB82DF23}D:\decouvert\sex.room.2\sex.room.2.build.11066708\sex room 2.exe] => (Block) D:\decouvert\sex.room.2\sex.room.2.build.11066708\sex room 2.exe => Pas de fichier FirewallRules: [TCP Query User{D412961C-F8F6-498D-BC8F-A2C2A381B15C}D:\decouvert\sex.hotel.simulator\sex.hotel.simulator\sexhotelsimulator.exe] => (Block) D:\decouvert\sex.hotel.simulator\sex.hotel.simulator\sexhotelsimulator.exe => Pas de fichier FirewallRules: [UDP Query User{18ECD8E4-2C81-48E5-A0AE-B7940EA0F792}D:\decouvert\sex.hotel.simulator\sex.hotel.simulator\sexhotelsimulator.exe] => (Block) D:\decouvert\sex.hotel.simulator\sex.hotel.simulator\sexhotelsimulator.exe => Pas de fichier FirewallRules: [TCP Query User{C02654FE-7218-45FA-8014-75353A1F9ACD}D:\decouvert\sex.tentacles.18+\game\sex tentacles [18+].exe] => (Block) D:\decouvert\sex.tentacles.18+\game\sex tentacles [18+].exe => Pas de fichier FirewallRules: [UDP Query User{3F2C01CC-D069-4A53-8596-D9B8025D5568}D:\decouvert\sex.tentacles.18+\game\sex tentacles [18+].exe] => (Block) D:\decouvert\sex.tentacles.18+\game\sex tentacles [18+].exe => Pas de fichier FirewallRules: [TCP Query User{AB6E0764-8E07-42E5-9A33-EC5D6E0E2C9E}D:\decouvert\sex.faculty\sex faculty🔞\sex faculty 18+.exe] => (Block) D:\decouvert\sex.faculty\sex faculty🔞\sex faculty 18+.exe => Pas de fichier FirewallRules: [UDP Query User{364C3BA3-162F-42BB-9E9D-32C51BAC4352}D:\decouvert\sex.faculty\sex faculty🔞\sex faculty 18+.exe] => (Block) D:\decouvert\sex.faculty\sex faculty🔞\sex faculty 18+.exe => Pas de fichier FirewallRules: [TCP Query User{21D9EC83-0FAF-4ADD-B2A9-1E9BC5D5DD89}D:\decouvert\cybersex.chronicles\cybersex chronicles\cybersex chronicles.exe] => (Block) D:\decouvert\cybersex.chronicles\cybersex chronicles\cybersex chronicles.exe => Pas de fichier FirewallRules: [UDP Query User{6524B681-4968-48F6-B40A-58196AE1A5AF}D:\decouvert\cybersex.chronicles\cybersex chronicles\cybersex chronicles.exe] => (Block) D:\decouvert\cybersex.chronicles\cybersex chronicles\cybersex chronicles.exe => Pas de fichier FirewallRules: [TCP Query User{586F2B7C-D42F-4610-B833-8ECBB7DBFE48}D:\decouvert\cybercity.sex.saga\game\cybercity sex saga.exe] => (Block) D:\decouvert\cybercity.sex.saga\game\cybercity sex saga.exe => Pas de fichier FirewallRules: [UDP Query User{ED4CB871-82D5-4CAA-A1B2-A15120AD3728}D:\decouvert\cybercity.sex.saga\game\cybercity sex saga.exe] => (Block) D:\decouvert\cybercity.sex.saga\game\cybercity sex saga.exe => Pas de fichier FirewallRules: [TCP Query User{E080DFD3-D95F-4CD0-B9FD-DE35D5CE282C}D:\decouvert\love.sex.and.fitness\love.sex.and.fitness.build.12014031\love sex & fitness.exe] => (Block) D:\decouvert\love.sex.and.fitness\love.sex.and.fitness.build.12014031\love sex & fitness.exe => Pas de fichier FirewallRules: [UDP Query User{46926CD7-D303-4908-8EAB-D9F78990EF20}D:\decouvert\love.sex.and.fitness\love.sex.and.fitness.build.12014031\love sex & fitness.exe] => (Block) D:\decouvert\love.sex.and.fitness\love.sex.and.fitness.build.12014031\love sex & fitness.exe => Pas de fichier FirewallRules: [TCP Query User{014B96A3-9F53-4941-B9DE-7B94308D0FCD}D:\ets2\euro.truck.simulator.2.v1.49.2.6s\game\bin\win_x64\eurotrucks2.exe] => (Allow) D:\ets2\euro.truck.simulator.2.v1.49.2.6s\game\bin\win_x64\eurotrucks2.exe (SCS Software) [Fichier non signé] FirewallRules: [UDP Query User{411CB201-C572-4ABB-A574-701B3A081F65}D:\ets2\euro.truck.simulator.2.v1.49.2.6s\game\bin\win_x64\eurotrucks2.exe] => (Allow) D:\ets2\euro.truck.simulator.2.v1.49.2.6s\game\bin\win_x64\eurotrucks2.exe (SCS Software) [Fichier non signé] FirewallRules: [TCP Query User{EA429B4B-E831-4DA7-869A-DAF46C3293BB}C:\users\puiti\appdata\local\overwolf\processcache\0.243.0.9\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.243.0.9\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [UDP Query User{5E2DCCBD-77C0-48D9-87E8-ABED697AEA26}C:\users\puiti\appdata\local\overwolf\processcache\0.243.0.9\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.243.0.9\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [{4786DD05-A4B6-45DD-9381-CBD84DE68F47}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{9AD32B37-6F89-4C7A-BD38-1E77F462D322}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{C3DBE40D-33B1-4C23-B142-43310670C274}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{64C4EFC8-9F8A-4A3B-9012-F8F535132EBE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{C7A5A8CA-B90F-4736-9795-B46698614269}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{23F07069-7D6A-46FD-91FE-2EAE5825F21D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{7A640125-F569-454D-B7AB-1FAA011F4EC3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [{F3F602D0-D24E-42E6-960E-07F237C0AD1E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software) FirewallRules: [TCP Query User{A669C966-AD53-46AD-AF00-5BE781F837C7}C:\users\puiti\appdata\local\overwolf\processcache\0.243.1.1\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.243.1.1\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [UDP Query User{2DF514B2-625E-4CD7-890E-E345C526A671}C:\users\puiti\appdata\local\overwolf\processcache\0.243.1.1\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.243.1.1\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe => Pas de fichier FirewallRules: [{DF3EBBEC-62E3-4F71-A8F8-B8281841F64C}] => (Allow) C:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier FirewallRules: [{F5D2DE8F-18F8-4C57-970C-4EA1CFD470EB}] => (Allow) C:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier FirewallRules: [{A405A18C-087F-4974-8608-05DE1E0E130B}] => (Block) C:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier FirewallRules: [{993A79D0-F66C-422F-9B42-6E4FD9680E19}] => (Block) C:\Program Files (x86)\Overwolf\0.243.1.1\OverwolfBrowser.exe => Pas de fichier FirewallRules: [{9F0D8EDC-3FED-483C-BA21-1F4B8128D93D}] => (Allow) C:\Program Files (x86)\Overwolf\0.248.120.19\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{4D06EBEE-D779-4A53-969A-5B53E2F6C9D4}] => (Allow) C:\Program Files (x86)\Overwolf\0.248.120.19\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [TCP Query User{06C0024E-007B-4F06-A430-8426B384ADA9}C:\users\puiti\appdata\local\overwolf\processcache\0.248.120.19\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.248.120.19\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [UDP Query User{A628B7AE-AFA9-46DC-AF5B-04A38DD4230C}C:\users\puiti\appdata\local\overwolf\processcache\0.248.120.19\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe] => (Allow) C:\users\puiti\appdata\local\overwolf\processcache\0.248.120.19\nhooheenabojigjaocnbanebmgdcmokbkbcdidea\trucky.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [TCP Query User{C5254EF7-0539-4C10-AD9C-41A4C443C1CE}D:\decouvert\webcum.empire.tycoon\webcum empire tycoon 📷 💦\webcum empire tycoon.exe] => (Block) D:\decouvert\webcum.empire.tycoon\webcum empire tycoon 📷 💦\webcum empire tycoon.exe => Pas de fichier FirewallRules: [UDP Query User{558279E6-1443-4C73-B9EF-62DE81C73B97}D:\decouvert\webcum.empire.tycoon\webcum empire tycoon 📷 💦\webcum empire tycoon.exe] => (Block) D:\decouvert\webcum.empire.tycoon\webcum empire tycoon 📷 💦\webcum empire tycoon.exe => Pas de fichier FirewallRules: [TCP Query User{7E6FD4F6-1428-4A8B-ACF2-020097E12DBB}D:\decouvert\fap.cum\fap & cum 💦\fap & cum.exe] => (Block) D:\decouvert\fap.cum\fap & cum 💦\fap & cum.exe => Pas de fichier FirewallRules: [UDP Query User{6727DE04-537F-4BD7-AD03-44CF82E7D749}D:\decouvert\fap.cum\fap & cum 💦\fap & cum.exe] => (Block) D:\decouvert\fap.cum\fap & cum 💦\fap & cum.exe => Pas de fichier FirewallRules: [TCP Query User{0F1D1444-8CE2-4616-9D50-70BC351D3BBB}D:\decouvert\onlyfap.simulator.6\game\onlyfap 6.exe] => (Block) D:\decouvert\onlyfap.simulator.6\game\onlyfap 6.exe => Pas de fichier FirewallRules: [UDP Query User{B8F8583E-093C-49E6-BC92-FEB4CB34C719}D:\decouvert\onlyfap.simulator.6\game\onlyfap 6.exe] => (Block) D:\decouvert\onlyfap.simulator.6\game\onlyfap 6.exe => Pas de fichier FirewallRules: [TCP Query User{30A7ACEA-F3CA-49A5-95B3-56CA625CC3DE}D:\decouvert\brothel.simulator\game\brothel simulator.exe] => (Block) D:\decouvert\brothel.simulator\game\brothel simulator.exe () [Fichier non signé] FirewallRules: [UDP Query User{D3D182C8-8C11-4736-AA15-67C62402FFF6}D:\decouvert\brothel.simulator\game\brothel simulator.exe] => (Block) D:\decouvert\brothel.simulator\game\brothel simulator.exe () [Fichier non signé] FirewallRules: [TCP Query User{631D69F6-9019-4EB8-9E6F-BDE1FF753F9B}D:\decouvert\streaming.girls.18.onlyfap.live\streaming girls [18+] - onlyfap ●live\streamergirls.exe] => (Block) D:\decouvert\streaming.girls.18.onlyfap.live\streaming girls [18+] - onlyfap ●live\streamergirls.exe => Pas de fichier FirewallRules: [UDP Query User{15A4CBF9-4605-48E8-ABE7-BC408C0E6ED1}D:\decouvert\streaming.girls.18.onlyfap.live\streaming girls [18+] - onlyfap ●live\streamergirls.exe] => (Block) D:\decouvert\streaming.girls.18.onlyfap.live\streaming girls [18+] - onlyfap ●live\streamergirls.exe => Pas de fichier FirewallRules: [TCP Query User{7C0B685D-9FF8-42E7-8D28-61CAAEAF051D}D:\decouvert\onlyfap.simulator.4\onlyfap simulator\onlyfap simulator 4.exe] => (Block) D:\decouvert\onlyfap.simulator.4\onlyfap simulator\onlyfap simulator 4.exe => Pas de fichier FirewallRules: [UDP Query User{15B05796-41B0-47A3-865A-79E51BB3BA66}D:\decouvert\onlyfap.simulator.4\onlyfap simulator\onlyfap simulator 4.exe] => (Block) D:\decouvert\onlyfap.simulator.4\onlyfap simulator\onlyfap simulator 4.exe => Pas de fichier FirewallRules: [{F6E3348C-E9C1-4C9E-ADD3-792550F38313}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.) FirewallRules: [{CD574306-C563-4D8C-B18C-6E08BCB3BF9B}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\124.0.2478.67\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{574905D4-AA5A-4FA2-8BD3-1C776F09698E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Points de restauration ========================= 01-05-2024 01:13:48 JRT Pre-Junkware Removal ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (05/01/2024 08:46:35 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : pickup-1.12_x64.dll, version : 0.0.0.0, horodatage : 0x5f4e498d Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000005add ID du processus défaillant : 0x8870 Heure de début de l’application défaillante : 0x01da9bf41e05b73b Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\pickup-1.12_x64.dll ID de rapport : 115906b2-dd01-4967-b073-5a6f7e21b9a7 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (05/01/2024 08:46:34 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : trucksbook_64.dll, version : 0.0.0.0, horodatage : 0x606b1c31 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000000058bd ID du processus défaillant : 0x8870 Heure de début de l’application défaillante : 0x01da9bf41e05b73b Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\trucksbook_64.dll ID de rapport : 76b7a496-5366-4718-8bd7-16fd269f84aa Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (05/01/2024 08:18:47 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : pickup-1.12_x64.dll, version : 0.0.0.0, horodatage : 0x5f4e498d Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000005add ID du processus défaillant : 0x7d68 Heure de début de l’application défaillante : 0x01da9be6affc48a5 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\pickup-1.12_x64.dll ID de rapport : d19a378b-51d4-4c77-8ce5-f4b5f76fa071 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (05/01/2024 08:18:46 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : trucksbook_64.dll, version : 0.0.0.0, horodatage : 0x606b1c31 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000000058bd ID du processus défaillant : 0x7d68 Heure de début de l’application défaillante : 0x01da9be6affc48a5 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\trucksbook_64.dll ID de rapport : 29a7fec9-297b-408a-9d24-3fe74bd02d45 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (05/01/2024 06:38:00 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme OUTLOOK.EXE version 16.0.17425.20176 a cessé d'interagir avec Windows et a été fermé. Pour voir si plus d'informations sur le problème sont disponibles, vérifiez l'historique des problèmes dans le Panneau de configuration Sécurité et maintenance. ID de processus : 47c4 Heure de début : 01da9be5c5caafb3 Heure d'arrêt : 19 Chemin d'accès à l'application : C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE ID de rapport : 1117e9ce-1341-44e1-89e0-3507afdb607e Nom complet du package défectueux : ID de l'application relative à un package défectueux : Type de blocage : Cross-thread Error: (05/01/2024 06:11:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : pickup-1.12_x64.dll, version : 0.0.0.0, horodatage : 0x5f4e498d Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000005add ID du processus défaillant : 0x5220 Heure de début de l’application défaillante : 0x01da9bce05c1d0b7 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\pickup-1.12_x64.dll ID de rapport : 9ef9eed2-762f-4dbb-9b43-58d7a10e5404 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (05/01/2024 06:11:20 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : trucksbook_64.dll, version : 0.0.0.0, horodatage : 0x606b1c31 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000000058bd ID du processus défaillant : 0x5220 Heure de début de l’application défaillante : 0x01da9bce05c1d0b7 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\trucksbook_64.dll ID de rapport : 23fa9b08-ba13-4245-933e-e09048a16724 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (05/01/2024 03:38:00 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante eurotrucks2.exe, version : 1.49.2.22, horodatage : 0x65b9bc01 Nom du module défaillant : pickup-1.12_x64.dll, version : 0.0.0.0, horodatage : 0x5f4e498d Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000005add ID du processus défaillant : 0x4e78 Heure de début de l’application défaillante : 0x01da9bbed1146ed8 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe Chemin d’accès du module défaillant: C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\plugins\pickup-1.12_x64.dll ID de rapport : a6e330ce-0209-40b7-b105-a486a1a363e3 Nom complet du package défaillant : ID de l’application relative au package défaillant : Erreurs système: ============= Error: (05/01/2024 08:19:37 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9U2GK9G) Description: Le serveur Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/01/2024 06:43:29 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9U2GK9G) Description: Le serveur Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/01/2024 03:46:57 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9U2GK9G) Description: Le serveur Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/01/2024 01:58:09 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9U2GK9G) Description: Le serveur Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/01/2024 12:49:03 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9U2GK9G) Description: Le serveur Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/01/2024 11:15:10 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9U2GK9G) Description: Le serveur Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (05/01/2024 10:30:09 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Service Google Update (gupdate) n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (05/01/2024 10:30:09 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (60000 millisecondes) a été atteint lors de l’attente de la connexion du service Service Google Update (gupdate). Windows Defender: ================ Date: 2024-05-01 20:45:55 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/RDPWrap&threatid=273912&enterprise=0 Nom : PUA:Win32/RDPWrap ID : 273912 Gravité : Faible Catégorie : Logiciel potentiellement non désiré Chemin : containerfile:_C:\Users\puiti\Downloads\RDPWrap-v1.6.2.zip; file:_C:\Program Files\RDP Wrapper\rdpwrap.dll; file:_C:\Users\puiti\Desktop\Nouveau dossier\RDPWInst.exe; file:_C:\Users\puiti\Desktop\rdp\RDPWInst.exe; file:_C:\Users\puiti\Downloads\RDPWrap-v1.6.2.zip->RDPWInst.exe; service:_TermService; webfile:_C:\Users\puiti\Downloads\RDPWrap-v1.6.2.zip|about:internet|pid:4780,ProcessStart:133454272354394015 Origine de la détection : Ordinateur local Type de détection : Concret Source de détection : Système Utilisateur : Nom du processus : D:\Téléchargement\FRST64.exe Version de la veille de sécurité : AV: 1.409.621.0, AS: 1.409.621.0, NIS: 1.409.621.0 Version du moteur : AM: 1.1.24030.4, NIS: 1.1.24030.4 Date: 2024-05-01 11:50:07 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {22C86FBA-9655-4132-A9E4-FB5C1F71E6EF} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2024-05-01 11:49:51 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {31C3A23F-BF44-459A-BE3B-8797AA1A223F} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2024-04-30 22:11:37 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {C11F6F09-CC59-4E26-859A-49DB2A6A2281} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2024-04-30 22:11:19 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {601EB570-0569-4AFD-BC0F-579EE898B83F} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Event[0]: Date: 2023-11-15 23:12:33 Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité et va tenter de rétablir une version précédente. Veille de sécurité tentée : Actuelle Code d’erreur : 0x80501102 Description de l’erreur : Un problème inattendu s’est produit. Installez toutes les mises à jour disponibles, puis essayez de redémarrer le programme. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. Version de la veille de sécurité : 1.401.661.0;1.401.661.0 Version du moteur : 1.1.23100.2009 CodeIntegrity: =============== Date: 2024-05-01 20:46:55 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. ==================== Infos Mémoire =========================== BIOS: American Megatrends Inc. 1.50 01/25/2019 Carte mère: Micro-Star International Co., Ltd B450 GAMING PLUS (MS-7B86) Processeur: AMD Ryzen 7 2700X Eight-Core Processor Pourcentage de mémoire utilisée: 58% Mémoire physique - RAM - totale: 16332.93 MB Mémoire physique - RAM - disponible: 6844.53 MB Mémoire virtuelle totale: 32716.93 MB Mémoire virtuelle disponible: 17708.94 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:209 GB) (Free:54.59 GB) (Model: Samsung SSD 970 SCSI Disk Device) NTFS Drive d: (Save) (Fixed) (Total:931.5 GB) (Free:225.04 GB) (Model: ST1000DM010-2EP1 SCSI Disk Device) NTFS Drive e: (ESD-USB) (Removable) (Total:31.99 GB) (Free:23.05 GB) FAT32 \\?\Volume{873bc8ff-c780-4b9f-ae85-039c34dd56dc}\ () (Fixed) (Total:0.49 GB) (Free:0.05 GB) NTFS \\?\Volume{61d37a4d-9c27-48c0-9401-2059f51a55c8}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 2 (MBR Code: Windows 7/8/10) (Size: 58.6 GB) (Disk ID: B904A5B4) Partition 1: (Active) - (Size=32 GB) - (Type=FAT32) ==================== Fin de Addition.txt =======================