Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 12-08.2024 Exécuté par Win (19-08-2024 04:53:03) Exécuté depuis C:\Users\Win\Desktop Microsoft Windows 11 Famille Version 23H2 22631.4037 (X64) (2022-12-27 20:31:37) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) Administrateur (S-1-5-21-3190564359-2480941703-1493978613-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3190564359-2480941703-1493978613-503 - Limited - Disabled) Invité (S-1-5-21-3190564359-2480941703-1493978613-501 - Limited - Disabled) WDAGUtilityAccount (S-1-5-21-3190564359-2480941703-1493978613-504 - Limited - Disabled) Win (S-1-5-21-3190564359-2480941703-1493978613-1001 - Administrator - Enabled) => C:\Users\Win ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1036-1033-7760-BC15014EA700}) (Version: 24.002.20991 - Adobe) Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601078}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Amazon Appstore (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\com.amazon.venezia) (Version: release-60.24.1.0.210299.0_683610 - amazon.com) AutoHotkey 1.1.36.02 (HKLM\...\AutoHotkey) (Version: 1.1.36.02 - Lexikos) Badlion Client (HKLM\...\1de14785-dd8c-5cd2-aae8-d4a376f81d78) (Version: 4.1.0 - Badlion) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) BlueStacks Services (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\BlueStacksServices) (Version: 3.0.2 - now.gg, Inc.) BlueStacks X (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\BlueStacks X) (Version: 10.5.0.1016 - now.gg, Inc.) Call of Duty (HKLM-x32\...\Call of Duty) (Version: - Blizzard Entertainment) CapCut (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\CapCut) (Version: 3.2.0.1106 - Bytedance Pte. Ltd.) CDBurnerXP (HKLM\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7128 - CDBurnerXP) Cheat Engine 7.5 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine) Epic Games Launcher (HKLM-x32\...\{5CC5F080-5711-430D-89BB-C56433F68361}) (Version: 1.3.93.0 - Epic Games, Inc.) Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.) Exodus (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\exodus) (Version: 24.9.7 - Exodus Movement Inc) FACEIT (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\FACEIT) (Version: 2.0.15 - FACEIT Ltd.) FACEIT Anti-Cheat (HKLM\...\{1419E44C-0EF4-4822-9194-9F1A4D43973D}_is1) (Version: 2.1 - FACEIT LTD) FiveM (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\CitizenFX_FiveM) (Version: - Cfx.re) Free Stopwatch (HKLM-x32\...\{A1FAC1AF-5615-47FE-B5C8-5E981EC8522B}_is1) (Version: 5.1.2.0 - Comfort Software Group) GIMP 2.10.32 (HKLM\...\GIMP-2_is1) (Version: 2.10.32 - The GIMP Team) Google Chrome (HKLM\...\{6EA4A09D-E0E2-358F-B54C-79106D2D2C95}) (Version: 127.0.6533.120 - Google LLC) Google Play Jeux bêta (HKLM\...\GooglePlayGames) (Version: 24.7.1042.5 - Google LLC) Grammarly for Windows (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\Grammarly Desktop Integrations) (Version: 1.0.27.421 - ) Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.3274.0 - Rockstar Games) HitFilm (HKLM\...\{D9114DDF-43CF-4D6B-9BD4-A250CF99B7EE}) (Version: 20.0.1.0 - FXhome) Java 8 Update 401 (64-bit) (HKLM\...\{71024AE4-039E-4CA4-87B4-2F64180401F0}) (Version: 8.0.4010.10 - Oracle Corporation) K-Lite Codec Pack 17.3.5 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 17.3.5 - KLCP) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden LibreOffice 7.4.3.2 (HKLM\...\{C724CD98-7AEB-4F85-8C10-9721600CE0DA}) (Version: 7.4.3.2 - The Document Foundation) Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2024.6.600476 - Logitech) MacroGamer (HKLM-x32\...\{2AAF54AF-F0E3-425C-996B-52A1EF5BE13D}) (Version: 1.0 - iToady) Malwarebytes version 5.1.8.123 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.8.123 - Malwarebytes) Microsoft .NET Host - 6.0.21 (x64) (HKLM\...\{26FF35F7-ADBB-4C9F-97DA-79120DB80EC6}) (Version: 48.87.64667 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.21 (x64) (HKLM\...\{D937EF87-F11D-4778-973C-B71E178F95D0}) (Version: 48.87.64667 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.21 (x64) (HKLM\...\{8D2EC92E-5903-4B25-9406-182B8EFA834F}) (Version: 48.87.64667 - Microsoft Corporation) Hidden Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.17830.20166 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 127.0.2651.105 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 127.0.2651.105 - Microsoft Corporation) Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.151.0728.0003 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.21 (x64) (HKLM\...\{AF6BF7DD-2B12-40C5-919C-2EC99054BBE1}) (Version: 48.87.64723 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.21 (x64) (HKLM-x32\...\{0f39db03-9030-48f3-82ef-5384bed81d85}) (Version: 6.0.21.32717 - Microsoft Corporation) MiniTool MovieMaker (HKLM\...\{MT-39B9213B-B182-41FB-B149-CD1016372F9C}_is1) (Version: 7.0.1 - MiniTool Software Limited) NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation) NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.4.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.0.1 - NVIDIA Corporation) NVIDIA Pilote graphique 560.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 560.81 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 30.2.2 - OBS Project) OctoSniff 4.0.1.1 (HKLM\...\{5432F4CF-9B16-4A35-B2CE-771668F0706E}_is1) (Version: 4.0.1.1 - OctoSEC) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17830.20166 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17830.20166 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Opera GX Stable 112.0.5197.60 (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\Opera GX 112.0.5197.60) (Version: 112.0.5197.60 - Opera Software) Parsec (HKLM-x32\...\Parsec) (Version: 150-89d - Parsec Cloud Inc.) Proton Drive (HKLM\...\{9C763E95-ABF2-4246-B1C5-2F2B63C994CB}) (Version: 1.4.7 - Proton AG) Hidden Proton Drive (HKLM\...\Proton Drive 1.4.7) (Version: 1.4.7 - Proton AG) Proton VPN (HKLM\...\Proton VPN_is1) (Version: 3.3.0 - Proton AG) Python 3.12.0 (64-bit) (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\{cf9c4d97-48a7-4a27-b9fc-91b88a803c40}) (Version: 3.12.150.0 - Python Software Foundation) Python 3.12.0 Core Interpreter (64-bit) (HKLM\...\{6B58F6F9-656A-4CC4-8BAB-22177BFFA45F}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 Development Libraries (64-bit) (HKLM\...\{225BAA2C-BDCA-4D63-9D72-D92CE5E2421D}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 Documentation (64-bit) (HKLM\...\{5DF0B8D8-4E7F-43EB-AD16-30FFA931A905}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 Executables (64-bit) (HKLM\...\{575EC8EB-A481-4CF1-BAB0-3C1DBD2E50A7}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 pip Bootstrap (64-bit) (HKLM\...\{24B8988D-E785-4124-BF77-1DC6A3E62050}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 Standard Library (64-bit) (HKLM\...\{14BBD330-AA3F-4F7A-8A39-DFB28AECFA82}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 Tcl/Tk Support (64-bit) (HKLM\...\{6EAF677E-4EE8-4A22-9781-9131C5298D26}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python 3.12.0 Test Suite (64-bit) (HKLM\...\{0A9B38A7-D393-44A5-A94E-9FEC927DC39C}) (Version: 3.12.150.0 - Python Software Foundation) Hidden Python Launcher (HKLM-x32\...\{3182A195-B671-44A8-B0C7-7876B916BA5A}) (Version: 3.12.150.0 - Python Software Foundation) REDlauncher (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version: - GOG.com) Riot Client (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\Riot Game Riot_Client.) (Version: - Riot Games, Inc) Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.) Roblox Studio for Win (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\roblox-studio) (Version: - Roblox Corporation) Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.93.2040 - Rockstar Games) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.3.3.5 - Rockstar Games) Snap Camera 1.20.0 (HKLM-x32\...\{024A6CF5-627D-497F-980B-B9A6EC5C40AF}_is1) (Version: 1.20.0 - Snap Inc.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SteelSeries GG 52.0.0 (HKLM\...\SteelSeries GG) (Version: 52.0.0 - SteelSeries ApS) Telegram Desktop (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 5.0.1 - Telegram FZ-LLC) Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 140.0.10857 - Ubisoft) UE4 Prerequisites (x64) (HKLM\...\{D7B591D8-1091-4A00-A0B3-5301C45E5D51}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden UE4 Prerequisites (x64) (HKLM-x32\...\{0d995f46-317b-4b5f-bf3e-9f98bae9d339}) (Version: 1.0.14.0 - Epic Games, Inc.) Hidden VALORANT (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\Riot Game valorant.live) (Version: - Riot Games, Inc) Viber (HKLM-x32\...\{787C81C1-72F4-46B5-8F00-8B5CBBAB2889}) (Version: 20.7.0.1 - 2010-2023 Viber Media S.a.r.l) Hidden Viber (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\{86186445-bb59-4bd7-b30e-7f00fa00a159}) (Version: 20.7.0.1 - 2010-2023 Viber Media S.a.r.l) VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN) WeMod (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\WeMod) (Version: 8.13.1 - WeMod) Winaero Tweaker (HKLM\...\Winaero Tweaker_is1) (Version: 1.55.0.0 - Winaero) Windows 7 Games for Windows 11, 10 and 8 (HKLM\...\Win7Games) (Version: 3.1 - hxxp://winaero.com) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 6.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 6.11.0 - win.rar GmbH) wootility-lekker 4.6.21 (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\66e6eb5a-751d-5dea-9547-09ad84261e24) (Version: 4.6.21 - ) wooting-analog-sdk (HKLM\...\{EDA8A641-DF57-48F6-9445-8C8F93B4DC22}) (Version: 0.7.5 - Wooting) Zoom (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\ZoomUMX) (Version: 5.13.7 (12602) - Zoom Video Communications, Inc.) Chrome apps: ============ Google Earth (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\374750334b43cfe38408f3399d610f68) (Version: 1.0 - Google\Chrome) Myinstants App (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\6c868c1718d9f50e91ace51337801e17) (Version: 1.0 - Google\Chrome) TikTok (HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\6a016867ec0619a50154b6b9726f899d) (Version: 1.0 - Google\Chrome) Packages: ========= Adobe Acrobat Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC [2024-08-01] () Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-06-26] (Disney) Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.23.0_neutral__8xx8rvfyw5nnt [2024-06-26] (Instagram) Instagram -> C:\Program Files\WindowsApps\www.instagram.com-3D2AAE46_42.0.23.1_neutral__ysfa6mcnwr1rw [2024-06-26] (www.instagram.com) Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2407.18002.0_x64__8wekyb3d8bbwe [2024-07-31] (Microsoft Corporation) [Startup Task] Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-14] (Microsoft Corp.) MicrosoftWindows.CrossDevice -> C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.24072.45.0_x64__cw5n1h2txyewy [2024-08-16] (Microsoft Windows) [Startup Task] Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.7.2.0_x64__8wekyb3d8bbwe [2024-06-15] (Microsoft Studios) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-08-14] (NVIDIA Corp.) Photos -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-07] (Microsoft Corporation) [Startup Task] Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.324.0_x64__dt26b99r8h8gj [2024-08-05] (Realtek Semiconductor Corp) Sous-système Windows pour Android™ -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.0.0_x64__8wekyb3d8bbwe [2024-07-31] (Microsoft Corp.) [Startup Task] Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0 [2024-08-18] (Spotify AB) [Startup Task] Unigram—Telegram for Windows -> C:\Program Files\WindowsApps\38833FF26BA1D.UnigramPreview_10.15.3.0_x64__g9c9v27vpyspw [2024-08-17] (Unigram, Inc.) [Startup Task] WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2432.5.0_x64__cv1g1gvanyjgm [2024-08-15] (WhatsApp Inc.) [Startup Task] WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.214.1843.0_x64__8wekyb3d8bbwe [2024-08-14] (Microsoft Corp.) WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.214.1843.0_x64__8wekyb3d8bbwe [2024-08-15] (Microsoft Corp.) Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-08-15] (Microsoft Windows) WinRAR -> C:\Program Files\WinRAR [2022-12-27] (win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{14100442-9664-1407-2647-000000000000}\localserver32 -> "C:\Users\Win\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe" -ToastActivated => Pas de fichier CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{1dcb280c-9699-aefe-803c-2007c35cbb5a}\localserver32 -> C:\Program Files\Proton\Drive\ProtonDrive.exe (Proton AG -> Proton AG) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> C:\Program Files\Proton\VPN\v3.3.0\ProtonVPN.exe (Proton AG -> ) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{6a27a1a9-7be8-1491-04ca-ee68a211c258}\localserver32 -> C:\Program Files\Google\Play Games\current\service\Service.exe (Google LLC -> Google LLC) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b}\localserver32 -> C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe (Voicemod Sociedad Limitada -> Voicemod) CustomCLSID: HKU\S-1-5-21-3190564359-2480941703-1493978613-1001_Classes\CLSID\{BEA218D2-6950-497B-9434-61683EC065FE}\InprocServer32 -> C:\Users\Win\AppData\Local\Programs\Python\Launcher\pyshellext.amd64.dll (Python Software Foundation -> Python Software Foundation) ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-12-30] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-12-30] (Adobe Inc. -> ) ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-12-30] (Adobe Inc. -> ) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.151.0728.0003\FileSyncShell64.dll [2024-08-17] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-12-30] (Adobe Inc. -> ) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-08-17] (Malwarebytes Inc. -> Malwarebytes) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.151.0728.0003\FileSyncShell64.dll [2024-08-17] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Win\AppData\Local\MEGAsync\ShellExtX64.dll -> Pas de fichier ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.151.0728.0003\FileSyncShell64.dll [2024-08-17] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_34f9511bafd21ff9\nvshext.dll [2024-07-31] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2022-12-30] (Adobe Inc. -> ) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-08-17] (Malwarebytes Inc. -> Malwarebytes) ==================== Codecs (Avec liste blanche) ==================== ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\Win\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default" ShortcutWithArgument: C:\Users\Win\Desktop\Myinstants App.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gjbabmkcekheipalmehaekacpkmocefc ShortcutWithArgument: C:\Users\Win\Desktop\TikTok.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nlalbmkafgmoifbeooblidblkmlhhpnc ShortcutWithArgument: C:\Users\Win\AppData\Local\Microsoft\Edge\User Data\Default\Web Applications\_crx__maonlnecdeecdljpahhnnlmhbmalehlm\Instagram.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge_proxy.exe (Microsoft Corporation) -> --profile-directory=Default --app-id=maonlnecdeecdljpahhnnlmhbmalehlm --app-url=hxxps://www.instagram.com/?utm_source=pwa_homescreen --app-launch-source=4 ShortcutWithArgument: C:\Users\Win\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_nlalbmkafgmoifbeooblidblkmlhhpnc\TikTok.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nlalbmkafgmoifbeooblidblkmlhhpnc ShortcutWithArgument: C:\Users\Win\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_gjbabmkcekheipalmehaekacpkmocefc\Myinstants App.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gjbabmkcekheipalmehaekacpkmocefc ShortcutWithArgument: C:\Users\Win\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Earth.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=ndkompnpifimidgppnpofhhjgfnpccpl ShortcutWithArgument: C:\Users\Win\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Myinstants App.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=gjbabmkcekheipalmehaekacpkmocefc ShortcutWithArgument: C:\Users\Win\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\TikTok.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=nlalbmkafgmoifbeooblidblkmlhhpnc ShortcutWithArgument: C:\Users\Win\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\d93944da39af0eb7\Volume Booster - Increase Sound Effect.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=laldfbfjhaogodemgonegbingpmjldnh ShortcutWithArgument: C:\Users\Win\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\cb113cfbe37a584\Easy Video Downloader.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=eaicplkoeceoelookkiaeekhodehdhde ==================== Modules chargés (Avec liste blanche) ============= 2024-07-31 14:11 - 2024-07-31 14:11 - 000026112 _____ () [Fichier non signé] C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.0.0_x64__8wekyb3d8bbwe\PackagedCom\WsaProxy\WsaProxy.dll 2024-02-28 12:35 - 2024-01-26 23:04 - 007470592 _____ () [Fichier non signé] C:\Steam\aom.dll 2024-02-28 12:35 - 2024-01-26 23:04 - 000231424 _____ () [Fichier non signé] C:\Steam\avif-16.dll 2024-02-28 12:35 - 2024-01-26 23:04 - 001066496 _____ () [Fichier non signé] C:\Steam\dav1d.dll ==================== Alternate Data Streams (Avec liste blanche) ======== (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Badlion Client.lnk:8BD81608B2 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk:303A78AFB1 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.32.lnk:BFDD4D0564 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk:C8B6D970BF [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KJ_Starter.lnk:99EF35761E [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OctoSniff.lnk:B17C94B2B7 [3434] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk:60EC9648C0 [3434] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [10404] AlternateDataStreams: C:\Users\Win\Application Data:00e481b5e22dbe1f649fcddd505d3eb7 [394] AlternateDataStreams: C:\Users\Win\Desktop\FRST64.exe:MBAM.Zone.Identifier [193] AlternateDataStreams: C:\Users\Win\Desktop\ZHPSuite.exe:MBAM.Zone.Identifier [223] AlternateDataStreams: C:\Users\Win\AppData\Roaming:00e481b5e22dbe1f649fcddd505d3eb7 [394] ==================== Mode sans échec (Avec liste blanche) ================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer (Avec liste blanche) ========== BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-04-06] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-07] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2022-05-07 07:24 - 2024-01-21 17:09 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts 2024-02-20 20:14 - 2024-08-15 14:22 - 000000436 _____ C:\Windows\system32\drivers\etc\hosts.ics 172.19.16.1 MS-7D46.mshome.net # 2029 8 2 14 12 22 19 608 ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\dotnet\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\wooting-analog-sdk\ HKCU\Environment\\Path -> C:\Users\Win\AppData\Local\Programs\Python\Launcher\;%USERPROFILE%\AppData\Local\Microsoft\WindowsApps HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Win\Downloads\tre.png DNS Servers: 10.2.0.1 - 62.197.111.140 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. Network Binding: ============= ProtonVPN: WireGuard Tunnel -> wireguard.sys Ethernet: Intel(R) Ethernet Connection (17) I219-V -> e1d.sys vms_vsf: Filtre d’extension de commutateur virtuel Hyper-V ms_winvfp: Microsoft Azure VFP Switch Filter Extension vms_vsp: Protocole d’extension de commutateur virtuel Hyper-V ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) MSCONFIG\Services: AdobeARMservice => 2 MSCONFIG\Services: BEService => 3 MSCONFIG\Services: EasyAntiCheat => 3 MSCONFIG\Services: EasyAntiCheat_EOS => 3 MSCONFIG\Services: EpicOnlineServices => 3 MSCONFIG\Services: FvSvc => 3 MSCONFIG\Services: GoogleChromeElevationService => 3 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: jhi_service => 2 MSCONFIG\Services: LGHUBUpdaterService => 2 MSCONFIG\Services: NvContainerLocalSystem => 2 MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2 MSCONFIG\Services: Parsec => 2 MSCONFIG\Services: Rockstar Service => 3 MSCONFIG\Services: rpcapd => 3 MSCONFIG\Services: RtkAudioUniversalService => 2 MSCONFIG\Services: Steam Client Service => 3 MSCONFIG\Services: SteelSeriesGGUpdateServiceProxy => 3 MSCONFIG\Services: WMIRegistrationService => 2 HKLM\...\StartupApproved\Run: => "RtkAudUService" HKLM\...\StartupApproved\Run: => "UniConverterUpdateHelper" HKLM\...\StartupApproved\Run: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run: => "Riot Vanguard" HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "btweb" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "bt" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "Grammarly" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_F9D19A88E0035291E275E0EF38B7A416" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "WallpaperEngine" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_096041DDEFC807A18C2A3F445238B660" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "electron.app.BlueStacks Services" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "Proton Drive" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "ProtonVPN" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "RiotClient" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "Opera GX Browser Assistant" HKU\S-1-5-21-3190564359-2480941703-1493978613-1001\...\StartupApproved\Run: => "Opera GX Stable" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [TCP Query User{AE5EAE3D-AF96-4B16-A5D6-63C74D8E846A}\\hfi\partage\sdi_rus new\sdi_x64_r2201.exe] => (Allow) \\hfi\partage\sdi_rus new\sdi_x64_r2201.exe => Pas de fichier FirewallRules: [UDP Query User{4B08439A-EE6C-465D-B77F-E040F54AED90}\\hfi\partage\sdi_rus new\sdi_x64_r2201.exe] => (Allow) \\hfi\partage\sdi_rus new\sdi_x64_r2201.exe => Pas de fichier FirewallRules: [{218C8332-0B63-4C28-B53F-96A562B5CD79}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => Pas de fichier FirewallRules: [{0BCD6DD0-6E5E-478D-87DC-61BFED4D2E19}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{5A070098-9A80-4783-83AE-DC6EEAC5A920}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Pas de fichier FirewallRules: [{EF2E0132-B312-4B17-8129-FB5719E74F91}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Pas de fichier FirewallRules: [{1213ADCD-4A3B-49EF-B20A-7D77A6789BDC}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Pas de fichier FirewallRules: [{0F254747-74BA-46B7-BEEC-EAF7B88A9E6E}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Pas de fichier FirewallRules: [TCP Query User{150C7470-6C61-49E3-AD92-2864748180EB}C:\grand theft auto v\gta5.exe] => (Allow) C:\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [UDP Query User{F0221500-71A1-4E44-A8E2-B4425F89CF93}C:\grand theft auto v\gta5.exe] => (Allow) C:\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [TCP Query User{512B2BCA-A667-4B86-99FB-F1FB1833FE98}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Pas de fichier FirewallRules: [UDP Query User{D3F45367-F9BA-43C8-AC29-A49B6D5EC405}C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Pas de fichier FirewallRules: [{F385F962-FE98-48C3-963B-CBF8F82216AF}] => (Block) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Pas de fichier FirewallRules: [{DAA5239F-6B37-48BF-B359-6F531A6CBBB4}] => (Block) C:\program files (x86)\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe => Pas de fichier FirewallRules: [{FBBA451C-328E-4F7C-AD83-1F8322C012C0}] => (Allow) C:\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [{79B58545-2421-40A4-83D4-BD4CFC96CBB7}] => (Allow) C:\Grand Theft Auto V\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games) FirewallRules: [TCP Query User{696D8AB4-5476-405D-BAD2-73AA9519188E}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Block) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{6C2041B4-20D4-47EE-9160-923C1139B96B}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Block) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{6C6BC69D-54C8-4726-8D3D-E559A05DA01A}] => (Allow) C:\Users\Win\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{2F1D1704-A741-40D8-9EE0-18A405C6753D}] => (Allow) C:\Users\Win\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier FirewallRules: [{50913E1F-5B32-410C-ADFB-E06915D8F847}] => (Allow) C:\Users\Win\AppData\Roaming\Zoom\bin\airhost.exe => Pas de fichier FirewallRules: [{4D9A1455-E9EA-4C3E-AAD7-6ECADDE42FD6}] => (Allow) C:\Users\Win\AppData\Local\Temp\bittorrent\bittorrent.exe => Pas de fichier FirewallRules: [{288AC8DE-D428-4822-949E-6ED8369F0922}] => (Allow) C:\Users\Win\AppData\Local\Temp\bittorrent\bittorrent.exe => Pas de fichier FirewallRules: [{19E1CD7F-C109-4B23-9DCA-6DBB86FC2EA5}] => (Allow) C:\Users\Win\AppData\Roaming\BitTorrent\BitTorrent.exe => Pas de fichier FirewallRules: [{D9C2D704-F8C8-46C2-A47C-53A55B701EBF}] => (Allow) C:\Users\Win\AppData\Roaming\BitTorrent\BitTorrent.exe => Pas de fichier FirewallRules: [TCP Query User{64AA419B-1098-462F-8D7C-E7F8A1236690}C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe FirewallRules: [UDP Query User{53233F42-B556-4F3F-87FA-D7541B067EE1}C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe FirewallRules: [{D19DD5C1-6865-4C5A-B8E7-A8C8A0236271}] => (Block) C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe FirewallRules: [{8AE74E11-110D-4E69-8448-749C68B73137}] => (Block) C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe FirewallRules: [TCP Query User{6747A4CD-E8C4-4175-80C8-F602B71E8F11}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe (ESL Gaming Online, Inc. -> Badlion) FirewallRules: [UDP Query User{1FC63FFE-E626-4401-BF7A-7D3308054989}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe (ESL Gaming Online, Inc. -> Badlion) FirewallRules: [{88E73E0C-E2D2-4277-9FF0-3BDDDC346F44}] => (Block) C:\program files\badlion client\badlion client.exe (ESL Gaming Online, Inc. -> Badlion) FirewallRules: [{C81891E8-92D9-4E4E-B1C9-6DBCFA4197E0}] => (Block) C:\program files\badlion client\badlion client.exe (ESL Gaming Online, Inc. -> Badlion) FirewallRules: [TCP Query User{0464F8CA-4F19-4D96-8A65-04D68B7A8142}C:\programdata\badlionclient\jdk-17.0.1_12\bin\javaw.exe] => (Block) C:\programdata\badlionclient\jdk-17.0.1_12\bin\javaw.exe FirewallRules: [UDP Query User{D244F61F-57A1-4024-ACB5-A021500ED391}C:\programdata\badlionclient\jdk-17.0.1_12\bin\javaw.exe] => (Block) C:\programdata\badlionclient\jdk-17.0.1_12\bin\javaw.exe FirewallRules: [TCP Query User{1B722C05-6DF8-414B-8ED8-BBE747809446}C:\programdata\badlionclient\jre1.8.0_202\bin\javaw.exe] => (Allow) C:\programdata\badlionclient\jre1.8.0_202\bin\javaw.exe FirewallRules: [UDP Query User{6FBCA039-9F59-4165-AB0C-4A2B9B7B6AD5}C:\programdata\badlionclient\jre1.8.0_202\bin\javaw.exe] => (Allow) C:\programdata\badlionclient\jre1.8.0_202\bin\javaw.exe FirewallRules: [{82E5804D-B3E9-45DF-AA8E-BE16769348B5}] => (Block) C:\programdata\badlionclient\jre1.8.0_202\bin\javaw.exe FirewallRules: [{E7BD67A5-CB56-43E4-B8A2-4B6F9B124207}] => (Block) C:\programdata\badlionclient\jre1.8.0_202\bin\javaw.exe FirewallRules: [TCP Query User{49C4F119-A6AD-4B1A-909F-C5048A8D22F3}C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe => Pas de fichier FirewallRules: [UDP Query User{E37FC5DD-1366-4735-B2E9-206EE68D8B49}C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\beamng.drive\bin64\beamng.drive.x64.exe => Pas de fichier FirewallRules: [{B3AC545C-783E-447D-87E7-32524BCF802C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pool 2D - Poolians\Poolians.exe => Pas de fichier FirewallRules: [{06AFAF6B-7E2A-4BDF-8354-3DC2D181D7C9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pool 2D - Poolians\Poolians.exe => Pas de fichier FirewallRules: [TCP Query User{84F09DFF-61E8-45FD-A8D5-80DE49BF8128}C:\users\win\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\win\appdata\local\discord\app-1.0.9013\discord.exe => Pas de fichier FirewallRules: [UDP Query User{192AC1F7-09A3-4639-9A8C-988A42AFC2F5}C:\users\win\appdata\local\discord\app-1.0.9013\discord.exe] => (Allow) C:\users\win\appdata\local\discord\app-1.0.9013\discord.exe => Pas de fichier FirewallRules: [TCP Query User{9B8AA5F8-2796-40D0-AAA9-CAFB29D2BA4A}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{51A54300-94AD-48C6-AEB7-8B5B613B25D4}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{CF0AFDD2-C368-40E6-9C3F-21E5EACE6D8C}C:\program files (x86)\steam\steamapps\common\garrysmod\bin\win64\gmod.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\garrysmod\bin\win64\gmod.exe => Pas de fichier FirewallRules: [UDP Query User{33E72AAB-3277-4133-8108-C8EBBD34A27A}C:\program files (x86)\steam\steamapps\common\garrysmod\bin\win64\gmod.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\garrysmod\bin\win64\gmod.exe => Pas de fichier FirewallRules: [{FAB75903-3390-4F9D-854D-DD36C8BDB1F0}] => (Allow) C:\Program Files\Parsec\parsecd.exe (Parsec Cloud, Inc. -> Parsec) FirewallRules: [{061CAECE-F600-4268-B700-9D268E4888B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Getting Over It\GettingOverIt.exe => Pas de fichier FirewallRules: [{FEC091AC-3C3B-4877-A8C8-4BB47AD62984}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Getting Over It\GettingOverIt.exe => Pas de fichier FirewallRules: [TCP Query User{BD486D3D-1F0B-4BA3-8000-5B2F10ECEAC8}C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe] => (Block) C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{BFBCD9C3-BDD1-4EAA-BDE8-8F1522C2F24B}C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe] => (Block) C:\program files\epic games\fortnite\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{5290E0CE-A1FF-447A-9643-449CA7B504AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Scribble It!\ScribbleIt.exe => Pas de fichier FirewallRules: [{DEE80D71-ECB9-40D5-B55B-CA55AEB18B7A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Scribble It!\ScribbleIt.exe => Pas de fichier FirewallRules: [{47D3E408-AD27-4958-B16A-4B7843920B3F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Scribble It!\ScribbleIt\Binaries\Win64\ScribbleIt-Win64-Shipping.exe => Pas de fichier FirewallRules: [{29E91616-9677-4522-94CA-85E6265AA812}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Scribble It!\ScribbleIt\Binaries\Win64\ScribbleIt-Win64-Shipping.exe => Pas de fichier FirewallRules: [{7469CE80-8591-4022-83E0-FF6932BCB76E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stumble Guys\Stumble Guys.exe => Pas de fichier FirewallRules: [{23123399-9ACF-4D27-95E0-AB9A230BF279}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stumble Guys\Stumble Guys.exe => Pas de fichier FirewallRules: [TCP Query User{F524C4B2-3EBA-457B-968D-28F3107BB84D}C:\red dead redemption 2\rdr2.exe] => (Allow) C:\red dead redemption 2\rdr2.exe => Pas de fichier FirewallRules: [UDP Query User{36D163F3-1F7D-401F-9B18-F6E5E7E31138}C:\red dead redemption 2\rdr2.exe] => (Allow) C:\red dead redemption 2\rdr2.exe => Pas de fichier FirewallRules: [TCP Query User{99043A4E-009C-4BB0-B246-979EAFAFF0DF}C:\users\win\appdata\local\discord\app-1.0.9016\discord.exe] => (Block) C:\users\win\appdata\local\discord\app-1.0.9016\discord.exe => Pas de fichier FirewallRules: [UDP Query User{A96E8492-F558-4DA7-B8F4-D55265ECB72B}C:\users\win\appdata\local\discord\app-1.0.9016\discord.exe] => (Block) C:\users\win\appdata\local\discord\app-1.0.9016\discord.exe => Pas de fichier FirewallRules: [{ED9CF778-232C-4CC1-8EE7-951E014F8FE7}] => (Allow) C:\Users\Win\AppData\Roaming\uTorrent\uTorrent.exe => Pas de fichier FirewallRules: [{D0685950-3002-4071-9411-1FE6D2F1266B}] => (Allow) C:\Users\Win\AppData\Roaming\uTorrent\uTorrent.exe => Pas de fichier FirewallRules: [{719C6F86-6C07-431C-8C92-C33152CC5CBC}] => (Allow) C:\Users\Win\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => Pas de fichier FirewallRules: [{6D4C4773-190C-4A01-90F0-99BA2968294A}] => (Allow) C:\Users\Win\AppData\Local\Wondershare\Wondershare NativePush\WsToastNotification.exe => Pas de fichier FirewallRules: [{76506C96-0634-4E0A-9B21-4AFC0A89EF9C}] => (Allow) C:\Program Files (x86)\EaseUS\VoiceWave\bin\easeus.voicewave.exe => Pas de fichier FirewallRules: [{4BD6B0B5-CC19-43A6-80A1-79BFB0267C6B}] => (Allow) C:\Program Files (x86)\EaseUS\VoiceWave\bin\easeus.evw.vchanger.exe => Pas de fichier FirewallRules: [TCP Query User{C4F11DDD-5477-4237-8D26-8C51C254E73C}C:\program files (x86)\pia_s5_proxy_cata\run\piaproxy.exe] => (Allow) C:\program files (x86)\pia_s5_proxy_cata\run\piaproxy.exe => Pas de fichier FirewallRules: [UDP Query User{460808AD-A6A2-455D-BFFC-DAC2E05C6531}C:\program files (x86)\pia_s5_proxy_cata\run\piaproxy.exe] => (Allow) C:\program files (x86)\pia_s5_proxy_cata\run\piaproxy.exe => Pas de fichier FirewallRules: [TCP Query User{E2F3495F-28BE-4044-931B-9B9ED4476E5D}C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy.exe] => (Allow) C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy.exe => Pas de fichier FirewallRules: [UDP Query User{4976A3A0-56CE-4EB0-8A7D-7C738220FD0B}C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy.exe] => (Allow) C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy.exe => Pas de fichier FirewallRules: [TCP Query User{3DBB9EC6-2527-444D-96BB-CEFF37BD2BD3}C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy_cp.exe] => (Allow) C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy_cp.exe => Pas de fichier FirewallRules: [UDP Query User{26F0825C-BFEC-4D15-B40B-388597A05DA0}C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy_cp.exe] => (Allow) C:\program files (x86)\ip2 s5 manager\ip2world_s5_proxy_cp.exe => Pas de fichier FirewallRules: [TCP Query User{BE40A455-0569-4BEE-85E4-7C94344C7FAC}C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe => Pas de fichier FirewallRules: [UDP Query User{5ABA3C46-1D74-42C9-B30E-5AEB35562B52}C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\projectzomboid\jre64\bin\java.exe => Pas de fichier FirewallRules: [TCP Query User{599A39DD-1BA0-4BCE-84E2-DCD2EEF019EE}C:\programdata\badlionclient\jdk-17.0.8\bin\javaw.exe] => (Allow) C:\programdata\badlionclient\jdk-17.0.8\bin\javaw.exe FirewallRules: [UDP Query User{25A34B81-658A-49F2-8D0C-5694AF7750B6}C:\programdata\badlionclient\jdk-17.0.8\bin\javaw.exe] => (Allow) C:\programdata\badlionclient\jdk-17.0.8\bin\javaw.exe FirewallRules: [{57210A0E-5C22-48FC-B74E-0D81B446559A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => Pas de fichier FirewallRules: [{7976B828-E64A-43F0-A090-F5F0E7ADF198}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe => Pas de fichier FirewallRules: [{CAE18179-6341-4CE7-B80B-D102F83E6823}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe (Now.gg, INC -> Bluestack Systems, Inc.) FirewallRules: [{8D30CCBB-CF8C-4B27-89FB-56117C8E26C5}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe (Now.gg, INC -> COMPANY NAME) FirewallRules: [{B253C1BB-C29D-455B-B2AD-3199C5C86DD6}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => Pas de fichier FirewallRules: [{435FA943-DA63-4931-868E-EA67CD217DE0}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe => Pas de fichier FirewallRules: [{AE3A2FB1-ECF8-4CEC-9A24-163218695D58}] => (Allow) C:\Red Dead Redemption 2\RDR2.exe => Pas de fichier FirewallRules: [{74B7675C-6A97-48FA-A4FF-4432BF4ACDB5}] => (Allow) C:\Red Dead Redemption 2\RDR2.exe => Pas de fichier FirewallRules: [{1E853383-F318-47BF-A76F-A546EA6632E4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{B7E3E6DA-AB26-423B-9D83-FF40A221EEF1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{9351AE77-7271-42DB-9AEA-328370987524}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe => Pas de fichier FirewallRules: [{2E97662F-9A0A-4C2B-B59F-3B606FDF423F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe => Pas de fichier FirewallRules: [TCP Query User{16076B79-4229-40B6-B74D-F88AA020916A}C:\users\win\appdata\local\programs\badlion client\badlion client.exe] => (Allow) C:\users\win\appdata\local\programs\badlion client\badlion client.exe (ESL Gaming Online, Inc. -> Badlion) FirewallRules: [UDP Query User{B14512B6-C330-453A-AA69-21B5CDE22FA1}C:\users\win\appdata\local\programs\badlion client\badlion client.exe] => (Allow) C:\users\win\appdata\local\programs\badlion client\badlion client.exe (ESL Gaming Online, Inc. -> Badlion) FirewallRules: [TCP Query User{7353607D-4279-48EF-B484-AC9A4E746098}C:\users\win\appdata\roaming\badlion client\data\jdk-17.0.8\bin\javaw.exe] => (Allow) C:\users\win\appdata\roaming\badlion client\data\jdk-17.0.8\bin\javaw.exe FirewallRules: [UDP Query User{CC452597-70D9-4EA9-BE58-C08980897D6E}C:\users\win\appdata\roaming\badlion client\data\jdk-17.0.8\bin\javaw.exe] => (Allow) C:\users\win\appdata\roaming\badlion client\data\jdk-17.0.8\bin\javaw.exe FirewallRules: [{F243148D-3F36-4007-97C1-B59A9D940293}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\People Playground\People Playground.exe => Pas de fichier FirewallRules: [{C611C823-3345-45BB-94AE-C0545D801B21}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\People Playground\People Playground.exe => Pas de fichier FirewallRules: [{444811A8-8596-48E3-8E02-9F66C6564E6B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\gmod.exe => Pas de fichier FirewallRules: [{A624A69D-67E1-4926-A162-789A829454AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\bin\gmod.exe => Pas de fichier FirewallRules: [{3E566BF7-8A6D-4E31-AD4E-629DF9D6DB56}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe => Pas de fichier FirewallRules: [{57FDA0EB-D237-4B03-BA0B-FE061811AB86}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe => Pas de fichier FirewallRules: [{9F6C92AA-1450-42AB-933A-F74881832974}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spore\SporeBin\SporeApp.exe => Pas de fichier FirewallRules: [{D4E22847-636F-48CF-987A-652C08DA8CCE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Spore\SporeBin\SporeApp.exe => Pas de fichier FirewallRules: [{9A4560DB-3714-4515-8751-59C778479672}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paint the Town Red\PaintTheTownRed.exe => Pas de fichier FirewallRules: [{DA41D96C-8048-4D18-91FB-DE08D35173FD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Paint the Town Red\PaintTheTownRed.exe => Pas de fichier FirewallRules: [{0E4AE4AF-DB84-4802-9851-E3C9862148A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe => Pas de fichier FirewallRules: [{B3EB18F7-8427-4CDA-8DC6-C169CF4AB5E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe => Pas de fichier FirewallRules: [{5F177136-068D-420A-8DCF-656126F38B5D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DrugDealerSimulator\DrugDealerSimulator.exe => Pas de fichier FirewallRules: [{48277C94-1969-4E57-BC88-4A8BB1BC961D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DrugDealerSimulator\DrugDealerSimulator.exe => Pas de fichier FirewallRules: [TCP Query User{5CEB0EAF-CE13-4F77-92B8-883617238739}C:\program files (x86)\steam\steamapps\common\drugdealersimulator\drugdealersimulator\binaries\win64\drugdealersimulator-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\drugdealersimulator\drugdealersimulator\binaries\win64\drugdealersimulator-win64-shipping.exe => Pas de fichier FirewallRules: [UDP Query User{18261D1A-84D6-4A85-823E-14F414BEAC42}C:\program files (x86)\steam\steamapps\common\drugdealersimulator\drugdealersimulator\binaries\win64\drugdealersimulator-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\drugdealersimulator\drugdealersimulator\binaries\win64\drugdealersimulator-win64-shipping.exe => Pas de fichier FirewallRules: [{08067C4A-25B4-438F-8538-A5F191A6E73B}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E95622B2-0FC6-443E-A271-440CE09DF8A3}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E206F06D-43B6-4ACC-B8CF-22A7CB542E5F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe => Pas de fichier FirewallRules: [{BD1C2DA6-9F4A-472F-9945-DC2CC92D1D1D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Phasmophobia\Phasmophobia.exe => Pas de fichier FirewallRules: [TCP Query User{012B4A2B-86B5-41D8-829B-64EE7CE4E555}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [UDP Query User{49E7209A-F462-4E9D-BDB5-91E38153BEBE}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{05E42534-64FD-4AF6-925A-78A7B09FA2DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe => Pas de fichier FirewallRules: [{BC85E082-1820-4407-91D7-F29DB5C6B463}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BeamNG.drive\BeamNG.drive.exe => Pas de fichier FirewallRules: [TCP Query User{D89F7656-86B2-4140-BF5E-B0CE276035CF}C:\curseforge\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Block) C:\curseforge\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe => Pas de fichier FirewallRules: [UDP Query User{707A3625-F9AE-4C2B-A477-5563AD88990E}C:\curseforge\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Block) C:\curseforge\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe => Pas de fichier FirewallRules: [TCP Query User{F84BD4E5-2722-4D38-B317-5A13E0C9CA5C}C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe FirewallRules: [UDP Query User{BA1764EB-4F6E-4333-BA8A-064F820868BA}C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\win\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-delta\windows-x64\java-runtime-delta\bin\javaw.exe FirewallRules: [{3626C210-1DA0-4536-AC58-F1F57B78597C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FiveNightsatFreddys4\FiveNightsatFreddys4.exe => Pas de fichier FirewallRules: [{41AFBAA8-3DFC-452E-91D7-FC732827268C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FiveNightsatFreddys4\FiveNightsatFreddys4.exe => Pas de fichier FirewallRules: [{A662ADB0-4C73-45D8-BBA6-5D1E3C8D9840}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FiveNightsatFreddys4\HalloweenEdition.exe => Pas de fichier FirewallRules: [{10BFE712-AAC1-44DC-B3DE-4DA0EAA8FD07}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FiveNightsatFreddys4\HalloweenEdition.exe => Pas de fichier FirewallRules: [TCP Query User{167A3A9F-9F5B-4072-AD33-C0C97E122507}C:\program files (x86)\steam\steamapps\common\team fortress 2\tf_win64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\team fortress 2\tf_win64.exe => Pas de fichier FirewallRules: [UDP Query User{F5110E4B-57FF-4B3E-92AB-E902A5065350}C:\program files (x86)\steam\steamapps\common\team fortress 2\tf_win64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\team fortress 2\tf_win64.exe => Pas de fichier FirewallRules: [TCP Query User{9DB744B4-F2CD-4FE9-B59F-64A78E7D7C4B}C:\users\win\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\win\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [UDP Query User{210A8B54-E3EA-47BF-A4FD-602680DF9586}C:\users\win\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\win\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software) FirewallRules: [{443EF20C-C88E-4EC3-B83B-9B110DA15F83}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb.exe => Pas de fichier FirewallRules: [{64ABDE5A-2383-479A-8D94-067D20450E4A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb.exe => Pas de fichier FirewallRules: [TCP Query User{97EA34FF-2126-4F08-BADE-CEEC559AD6DA}C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe => Pas de fichier FirewallRules: [UDP Query User{B6CD869B-087D-4E95-BDC9-A6F32EFB7839}C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty hq\cod22\cod22-cod.exe => Pas de fichier FirewallRules: [TCP Query User{80402B40-88F5-41B1-999E-331E09A1992F}C:\program files (x86)\call of duty\_retail_\cod.exe] => (Allow) C:\program files (x86)\call of duty\_retail_\cod.exe (Activision Publishing Inc -> Activision) FirewallRules: [UDP Query User{203844D8-6E7E-4537-8660-6D18273B62CD}C:\program files (x86)\call of duty\_retail_\cod.exe] => (Allow) C:\program files (x86)\call of duty\_retail_\cod.exe (Activision Publishing Inc -> Activision) FirewallRules: [TCP Query User{04C85E46-4EB1-448B-B290-265F1A77EB0F}C:\program files (x86)\call of duty\_retail_\sp23\sp23-cod.exe] => (Allow) C:\program files (x86)\call of duty\_retail_\sp23\sp23-cod.exe (Activision Publishing Inc -> Activision) FirewallRules: [UDP Query User{E6374A88-E367-44E5-839A-DBA69EE56724}C:\program files (x86)\call of duty\_retail_\sp23\sp23-cod.exe] => (Allow) C:\program files (x86)\call of duty\_retail_\sp23\sp23-cod.exe (Activision Publishing Inc -> Activision) FirewallRules: [{89C313A7-D357-4379-8CB3-1B7ED1303DB8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\1v1.LOL\1v1_LOL.exe => Pas de fichier FirewallRules: [{70C72227-5DCD-48B9-9A30-059873246E11}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\1v1.LOL\1v1_LOL.exe => Pas de fichier FirewallRules: [{BC7F1553-5DFD-4E89-A998-050FAAA40DAF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{E62A1450-7B55-4AC2-A534-A90A1614142F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{795A3D17-E374-4720-A5A6-DCAD85A6CF3C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{F887ECE5-4B8F-41BD-871B-E16310163F20}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{3E8CC4EA-28A7-4BCE-9750-5E2EB7B415AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\assettocorsa\AssettoCorsa.exe => Pas de fichier FirewallRules: [{90C8A478-6045-46E6-B2DF-AD907B5F80D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\assettocorsa\AssettoCorsa.exe => Pas de fichier FirewallRules: [{B983961D-1CF6-4E86-A5F7-6E9D61A04F8D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe => Pas de fichier FirewallRules: [{E88B3342-9994-4BBB-A14A-96245726D8DF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe => Pas de fichier FirewallRules: [{FCE4B4FD-79AD-4357-AD48-FE5AB43A7BCB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Manor Lords\ManorLords.exe => Pas de fichier FirewallRules: [{955B303E-F9D0-420E-85D5-76A4A5DD42A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Manor Lords\ManorLords.exe => Pas de fichier FirewallRules: [{EDE2BC78-3265-49D1-831E-647475FF5479}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C9155211-FDA4-491D-BE69-1D7FD5EC8470}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brotato\Brotato.exe => Pas de fichier FirewallRules: [{E260FB86-0229-4275-ABE2-D84A559DD471}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brotato\Brotato.exe => Pas de fichier FirewallRules: [{3978FFA1-5669-429D-AF5D-3DBB389E90AD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Supermarket Simulator\Supermarket Simulator.exe => Pas de fichier FirewallRules: [{6D00655F-B734-4FF2-A06F-F613C6B7A167}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Supermarket Simulator\Supermarket Simulator.exe => Pas de fichier FirewallRules: [{2ABD855B-3978-4332-9EE4-28056BF2B856}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Isle\TheIsle.exe => Pas de fichier FirewallRules: [{9C219190-F693-4939-B64B-58E66CDB96F6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Isle\TheIsle.exe => Pas de fichier FirewallRules: [{4AE7AA98-E4C2-4FDF-872B-AFCC82C270FE}] => (Allow) C:\Steam\steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{6FDD0954-A77A-4244-9B01-1056E58BD081}] => (Allow) C:\Steam\steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{A3B4B400-2AB8-46ED-AF7C-53C159B59E20}] => (Allow) C:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{F4EF2562-A7BB-4DE2-8127-8D25B8CD97A4}] => (Allow) C:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{F80368CC-6976-4B92-AEB6-ED873439C8BC}C:\steam\steamapps\common\assettocorsa\acs_x86.exe] => (Allow) C:\steam\steamapps\common\assettocorsa\acs_x86.exe () [Fichier non signé] FirewallRules: [UDP Query User{70A88104-1B9B-4FF4-A19E-0B7EBF5D6403}C:\steam\steamapps\common\assettocorsa\acs_x86.exe] => (Allow) C:\steam\steamapps\common\assettocorsa\acs_x86.exe () [Fichier non signé] FirewallRules: [TCP Query User{036710FB-3B94-4F0B-8440-3E7D659AB826}C:\steam\steamapps\common\team fortress 2\tf_win64.exe] => (Allow) C:\steam\steamapps\common\team fortress 2\tf_win64.exe (Valve Corp. -> ) FirewallRules: [UDP Query User{9B0A677B-DAE5-46F0-8C82-F0E5D6D0FE88}C:\steam\steamapps\common\team fortress 2\tf_win64.exe] => (Allow) C:\steam\steamapps\common\team fortress 2\tf_win64.exe (Valve Corp. -> ) FirewallRules: [{BE987EBE-5186-4738-9097-8766D2EE190A}] => (Allow) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.0.0_x64__8wekyb3d8bbwe\WsaClient\WsaClient.exe (Microsoft Corporation -> ) FirewallRules: [TCP Query User{793B6D42-4A1B-4C94-A757-BD38BECBE1A1}C:\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Allow) C:\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe (Valve Corp. -> ) FirewallRules: [UDP Query User{887AD9FC-5318-4275-B17D-B4B93D623055}C:\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe] => (Allow) C:\steam\steamapps\common\counter-strike global offensive\game\bin\win64\cs2.exe (Valve Corp. -> ) FirewallRules: [{0A4B7B09-43F7-4929-B24D-D2EFDA3C72E0}] => (Allow) C:\Steam\steamapps\common\Sea of Thieves\SeaOfThieves.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{258CF131-E64B-45A9-BF5E-6391E25725B5}] => (Allow) C:\Steam\steamapps\common\Sea of Thieves\SeaOfThieves.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{2E8B4159-543A-4DDA-BF6C-44BEA28B022F}] => (Allow) C:\Steam\steamapps\common\Sea of Thieves\Athena\Binaries\Win64\SoTGame.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5E9A8D7B-E0EB-478C-81BD-D0C0352803E2}] => (Allow) C:\Steam\steamapps\common\Sea of Thieves\Athena\Binaries\Win64\SoTGame.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{FC858D6B-48D9-419D-B160-7625ED3B7D5E}] => (Allow) C:\Program Files\Google\Play Games\current\emulator\crosvm.exe (Google LLC -> ) FirewallRules: [{DD0BAF7D-2A56-41D8-AD2D-892913AC386C}] => (Allow) C:\Program Files\Google\Play Games\current\emulator\crosvm.exe (Google LLC -> ) FirewallRules: [TCP Query User{8CE2E9A9-A6AF-4A8E-A314-9BF31D033DAB}C:\steam\steamapps\common\sons of the forest\sonsoftheforest.exe] => (Allow) C:\steam\steamapps\common\sons of the forest\sonsoftheforest.exe () [Fichier non signé] FirewallRules: [UDP Query User{E9F0B8A7-34FC-46E2-8579-881657DA4BA4}C:\steam\steamapps\common\sons of the forest\sonsoftheforest.exe] => (Allow) C:\steam\steamapps\common\sons of the forest\sonsoftheforest.exe () [Fichier non signé] FirewallRules: [{989C9B44-E9F3-4A79-B666-5C1CBC575EF5}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [{1A34A98F-51F3-4CC8-9EB8-A57CB858ED16}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\127.0.2651.105\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{5EFFB4AD-1B4F-40F4-8C7B-CA8FD054CF47}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{E7495B5B-E7DB-4B25-9587-328257C9C188}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{284425D2-E743-4B77-84E0-7E78C2F5C149}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{A64893F2-B526-4DF3-851E-5D6ADEE0C34F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{F616A9A0-DA41-4352-A919-0AF01A018EED}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{6036E2F3-3D42-4631-BBA4-45FA3C53BB10}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{5B8A3037-17EA-4F8B-A733-E0F87566F550}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{30B382B9-1A1A-4889-A37C-D2A5A8949D16}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{3768D481-1D74-4F94-B696-CC1C44E5F85D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{AA928BE3-9768-4078-BFAE-60F12A451C1D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.244.405.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) ==================== Points de restauration ========================= 16-08-2024 00:31:19 ZHPcleaner ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (08/17/2024 03:14:02 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Win\AppData\Local\CapCut\CapCut.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_6ec0f0a887fe525b.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955.manifest. Error: (08/16/2024 01:26:29 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Win\AppData\Local\CapCut\CapCut.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_6ec0f0a887fe525b.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955.manifest. Error: (08/16/2024 12:56:33 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Win\AppData\Local\CapCut\CapCut.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_6ec0f0a887fe525b.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955.manifest. Error: (08/16/2024 12:32:21 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Win\AppData\Local\CapCut\CapCut.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_6ec0f0a887fe525b.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955.manifest. Error: (08/15/2024 08:35:33 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Win\AppData\Local\CapCut\CapCut.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_6ec0f0a887fe525b.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955.manifest. Error: (08/15/2024 02:20:25 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine CoCreateInstance. hr = 0x8007045b, Un arrêt système est en cours.. Error: (08/15/2024 02:20:25 PM) (Source: VSS) (EventID: 13) (User: ) Description: Informations du service de cliché instantané de volumes : impossible de démarrer le serveur COM de CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} et de nom CEventSystem. [0x8007045b, Un arrêt système est en cours.] Error: (08/15/2024 05:37:17 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Win\AppData\Local\CapCut\CapCut.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_6ec0f0a887fe525b.manifest. Composant 2 : C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.22621.3672_none_2713b9d173822955.manifest. Erreurs système: ============= Error: (08/19/2024 04:48:03 AM) (Source: NetBT) (EventID: 4311) (User: ) Description: L’initialisation a échoué car le pilote de périphérique n’a pas pu être créé. Utilisez la chaîne « %2 » pour identifier l’interface pour laquelle l’initialisation a échoué. Cette chaîne représente l’adresse MAC de l’interface défaillante ou l’identificateur global unique (GUID) si NetBT n’a pas réussi à mapper le GUID à l’adresse MAC. Si, ni l’adresse MAC, ni le GUID ne sont disponibles, la chaîne représente un nom de périphérique de cluster. Error: (08/19/2024 04:48:03 AM) (Source: NetBT) (EventID: 4311) (User: ) Description: L’initialisation a échoué car le pilote de périphérique n’a pas pu être créé. Utilisez la chaîne « %2 » pour identifier l’interface pour laquelle l’initialisation a échoué. Cette chaîne représente l’adresse MAC de l’interface défaillante ou l’identificateur global unique (GUID) si NetBT n’a pas réussi à mapper le GUID à l’adresse MAC. Si, ni l’adresse MAC, ni le GUID ne sont disponibles, la chaîne représente un nom de périphérique de cluster. Error: (08/19/2024 03:01:17 AM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 2 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {834366DA-2D43-4FE3-8DCD-42FF2274BD0D} Error: (08/19/2024 03:01:17 AM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 2 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {834366DA-2D43-4FE3-8DCD-42FF2274BD0D} Error: (08/19/2024 03:01:17 AM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 2 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {834366DA-2D43-4FE3-8DCD-42FF2274BD0D} Error: (08/19/2024 03:01:17 AM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 2 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {3E8C9ABE-9226-4609-BF5B-60288A391DEE} Error: (08/19/2024 03:01:17 AM) (Source: DCOM) (EventID: 10005) (User: MS-7D46) Description: DCOM a reçu l’erreur « 2 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {C5CC7CF6-8DE0-4A10-A12E-66A21F3C3EFC} Error: (08/19/2024 03:01:17 AM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 2 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {834366DA-2D43-4FE3-8DCD-42FF2274BD0D} Windows Defender: ================ Date: 2024-08-15 22:23:06 Description: L'apport de modification par C:\Grand Theft Auto V\GTA5.exe à %userprofile%\Documents\Rockstar Games a été bloqué par l'Accès contrôlé aux dossiers. Heure de la détection : 2024-08-15T20:23:06.038Z Utilisateur : MS-7D46\Win Chemin d'accès : %userprofile%\Documents\Rockstar Games Nom du processus : C:\Grand Theft Auto V\GTA5.exe Version de la veille de sécurité : 1.417.129.0 Version du moteur : 1.1.24070.3 Version du produit : 4.18.24070.5 Date: 2024-08-14 13:30:05 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {D1493429-FEE8-440A-9862-B34B0D31B58B} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2024-08-13 15:35:12 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {DCF45080-C113-4613-B1F4-B38A13F93005} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2024-08-13 03:19:05 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {6718A4E6-419D-4C0A-8808-DCBD7577DCCB} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2024-08-11 17:10:54 Description: L’analyse Antivirus Microsoft Defender a été arrêtée avant la fin. ID de l’analyse : {61F1FDA7-2491-4BE9-837B-BA8A4247BC90} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Event[0] Date: 2024-06-18 02:23:01 Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : Version précédente de la veille de sécurité : 1.413.344.0 Source de mise à jour : Serveur Microsoft Update Type de veille de sécurité : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.24050.5 Code d’erreur : 0x80245006 Description de l’erreur : Un problème inattendu s’est produit lors de la vérification des mises à jour. Pour plus d’informations sur l’installation ou la résolution des problèmes de mise à jour, voir Aide et support. Date: 2024-01-16 17:08:32 Description: Antivirus Microsoft Defender moteur a été arrêté en raison d’une erreur inattendue. Type d’échec : Incident Code d’exception : 0xc0000005 Ressource : Code du moteur : 0 Date: 2023-12-22 18:12:58 Description: Antivirus Microsoft Defender moteur a été arrêté en raison d’une erreur inattendue. Type d’échec : Incident Code d’exception : 0xc0000005 Ressource : Code du moteur : 0 Date: 2023-12-08 19:23:26 Description: Antivirus Microsoft Defender moteur a été arrêté en raison d’une erreur inattendue. Type d’échec : Incident Code d’exception : 0xc0000005 Ressource : Code du moteur : 0 Date: 2023-12-07 23:08:38 Description: Antivirus Microsoft Defender a rencontré une erreur lors de la mise à jour de la veille de sécurité. Nouvelle version de la veille de sécurité : 1.403.105.0 Version précédente de la veille de sécurité : 1.403.99.0 Source de mise à jour : Utilisateur Type de veille de sécurité : Logiciel anti-espion Type de mise à jour : Delta Utilisateur : AUTORITE NT\Système Version actuelle du moteur : 1.1.23110.2 Version précédente du moteur : 1.1.23110.2 Code d’erreur : 0x80501102 Description de l’erreur : Un problème inattendu s’est produit. Installez toutes les mises à jour disponibles, puis essayez de redémarrer le programme. Pour plus d’informations sur l’installation des mises à jour, voir Aide et support. CodeIntegrity: =============== Date: 2024-08-19 04:53:00 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements. ==================== Infos Mémoire =========================== BIOS: American Megatrends International, LLC. 1.90 11/07/2022 Carte mère: Micro-Star International Co., Ltd. PRO H610M-G DDR4 (MS-7D46) Processeur: 12th Gen Intel(R) Core(TM) i5-12400F Pourcentage de mémoire utilisée: 51% Mémoire physique - RAM - totale: 32627.87 MB Mémoire physique - RAM - disponible: 15977.95 MB Mémoire virtuelle totale: 34675.87 MB Mémoire virtuelle disponible: 11005.59 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:1862.21 GB) (Free:141.97 GB) (Model: KINGSTON SNV2S2000G) NTFS Drive d: (KINGSTON) (Removable) (Total:230.94 GB) (Free:181.09 GB) exFAT \\?\Volume{ed80c9e9-b5fc-407b-86b5-6605acc20936}\ () (Fixed) (Total:0.7 GB) (Free:0.11 GB) NTFS \\?\Volume{83449bbb-89f9-402c-82e7-7ffc8335e320}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. ========================================================== Disk: 1 (MBR Code: Windows XP) (Size: 231 GB) (Disk ID: 17BF8BA2) Partition 1: (Active) - (Size=231 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt =======================