Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 02.08.2018 Exécuté par Eric (18-08-2018 11:15:04) Exécuté depuis C:\Users\Eric\Desktop Windows 10 Pro Version 1803 17134.165 (X64) (2018-05-27 11:48:55) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-2608685514-3513478324-1993146139-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2608685514-3513478324-1993146139-503 - Limited - Disabled) Eric (S-1-5-21-2608685514-3513478324-1993146139-1001 - Administrator - Enabled) => C:\Users\Eric HomeGroupUser$ (S-1-5-21-2608685514-3513478324-1993146139-1002 - Limited - Enabled) Invité (S-1-5-21-2608685514-3513478324-1993146139-501 - Limited - Disabled) Test (S-1-5-21-2608685514-3513478324-1993146139-1009 - Administrator - Enabled) => C:\Users\Test WDAGUtilityAccount (S-1-5-21-2608685514-3513478324-1993146139-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: ESET NOD32 Antivirus (Enabled - Out of date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70} AS: ESET NOD32 Antivirus (Enabled - Out of date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.1 - ) 64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden 7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov) ActivePerl 5.16.3 Build 1604 (64-bit) (HKLM\...\{A7915697-1675-433D-AD07-759E8550582F}) (Version: 5.16.1604 - ActiveState) Adobe Acrobat XI Pro (HKLM-x32\...\{AC76BA86-1033-FFFF-7760-000000000006}) (Version: 11.0.09 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 26.0.0.118 - Adobe Systems Incorporated) Adobe Audition CS6 (HKLM-x32\...\{30FD541D-3C9D-41C4-B240-A994EE4E0231}) (Version: 5.0 - Adobe Systems Incorporated) Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated) Akamai NetSession Interface (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Akamai) (Version: - Akamai Technologies, Inc) Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 382.05 - NVIDIA Corporation) Hidden ANT Drivers Installer x64 (HKLM\...\{15E1B393-3CCA-4C5B-A187-ACBC36019E73}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden ANT Drivers Installer x64 (HKLM\...\{1B6B17C2-176C-433C-93F3-640D12825426}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden ANT Drivers Installer x64 (HKLM\...\{20AB389B-8602-403C-B19B-F0A1D6C510A5}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden AOMEI Partition Assistant Standard Edition 6.6 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.) Application Insights Tools for Visual Studio 2015 (HKLM-x32\...\{9F429DF7-F8DD-4980-9673-E6DACA012F6C}) (Version: 3.3 - Microsoft Corporation) Hidden Application Verifier x64 External Package (HKLM\...\{77F3D72C-465F-BD51-890E-CC3914B1365F}) (Version: 8.100.26936 - Microsoft) Hidden Applications hybrides multi-appareils en C# - Modèles - FRA (HKLM-x32\...\{9222F12D-9DD6-3F84-BF8D-A70B9BB4ECAB}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Archiveur WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - ) Aslain's WoT Modpack version 1.0.2.3.08 (HKLM-x32\...\Aslains_WoT_Modpack_Installer_is1) (Version: 1.0.2.3.08 - Aslain) Assemblys du Kit de développement logiciel (SDK) Windows Phone 8.0 pour Visual Studio 2015 - FRA (HKLM-x32\...\{1A8C4E94-C4A9-327E-9378-3EE88CB1042A}) (Version: 14.0.23107 - Microsoft Corporation) Hidden ASUS Boot Setting (HKLM-x32\...\{7AAE9187-C24F-4073-A951-36C370E7A3A5}) (Version: 1.00.18 - ASUSTeK Computer Inc.) ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.) ASUS Xonar Essence STX Audio (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392008788}) (Version: - ASUSTeK Computer Inc.) Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team) Autopsy (HKLM\...\{2FC7F29D-EACB-403C-B188-1F2F54019C48}) (Version: 4.4.0 - The Sleuth Kit) AviSynth (HKLM-x32\...\AviSynth) (Version: 2.6.0 MT - ) Azure AD Authentication Connected Service (HKLM-x32\...\{3FEAC561-1CF6-41D6-B0F3-BECDD9C88A1B}) (Version: 14.0.23107 - Microsoft Corporation) Hidden AzureTools.Notifications (HKLM-x32\...\{1E5CA362-39B6-4BD0-B9C0-69CF15F0FEA2}) (Version: 2.7.30611.1601 - Microsoft Corporation) Hidden Bejeweled® 3 (HKLM-x32\...\{E99C27B2-EB2E-4244-9F5C-A96F55100F0C}) (Version: 1.1.13.4753 - Electronic Arts, Inc.) BitTorrent (HKLM-x32\...\BitTorrent) (Version: - BitTorrent, Inc) bl (HKLM-x32\...\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}) (Version: 1.0.0 - Your Company Name) Hidden Blend for Visual Studio SDK for .NET 4.5 (HKLM-x32\...\{37E53780-3944-4A6A-842F-727128E8616E}) (Version: 3.0.40218.0 - Microsoft Corporation) Hidden Bochs 2.6.8 (remove only) (HKLM-x32\...\Bochs 2.6.8) (Version: 2.6.8 - The Bochs Project) BufferChm (HKLM-x32\...\{2EEA7AA4-C203-4b90-A34F-19FB7EF1C81C}) (Version: 130.0.331.000 - Hewlett-Packard) Hidden Bulk Extractor 1.5.5 (HKLM-x32\...\Bulk Extractor 1.5.5) (Version: 1.5.5 - NPS) C4500 (HKLM-x32\...\{9DC11D9A-6DCD-4064-8363-63914A0122AB}) (Version: 130.0.365.000 - Hewlett-Packard) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.31 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5844 - CDBurnerXP) ClamAV-x64 (HKLM\...\{EFAEABEF-06ED-4095-9BAA-A5B1D1B4AACA}) (Version: 0.99.3 - Cisco Systems, Inc.) clrmamepro (HKLM-x32\...\clrmamepro) (Version: 4.00.23.0 - Roman Scherzer) CodeBlocks (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\CodeBlocks) (Version: 17.12 - The Code::Blocks Team) Composants requis pour SSDT (HKLM-x32\...\{FAFA0B40-AF76-4158-9DFA-1D2052CD0963}) (Version: 12.0.2000.8 - Microsoft Corporation) Concepteur XAML Microsoft Visual Studio 2015 - FRA (HKLM-x32\...\{AEA4DA1E-2339-3038-8F04-2B31E7F7E0BA}) (Version: 14.0.23107 - Microsoft Corporation) Hidden CPUID CPU-Z 1.78 (HKLM\...\CPUID CPU-Z_is1) (Version: - ) <==== ATTENTION Creative PC-CAM Center (HKLM-x32\...\Creative PC-CAM Center) (Version: - ) CrypTool 1.4.31 (HKLM-x32\...\CrypTool) (Version: 1.4.31 - ) Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version: - Western Digital Corporation) DB Browser for SQLite (HKLM-x32\...\DB Browser for SQLite) (Version: 3.9.1 - DB Browser for SQLite Team) dBpoweramp (HKLM-x32\...\dBpoweramp) (Version: Release 15.1 - Illustrate) dBpoweramp DSP Effects (HKLM-x32\...\dBpoweramp DSP Effects) (Version: Release 11 - Illustrate) dBpoweramp Monkeys Audio Codec (HKLM-x32\...\dBpoweramp Monkeys Audio Codec) (Version: Release 12 (Monkeys v4.12) - Illustrate) dBpoweramp Ogg Vorbis Codec (HKLM-x32\...\dBpoweramp Ogg Vorbis Codec) (Version: Release 23 (Vorbis v1.3.3) - Illustrate) Debug Diagnostics 2.0 (HKLM\...\{4F41E4D7-3AC8-48A3-BA06-BA60813F8F66}) (Version: 2.0.0.179 - Microsoft Corporation) Deluge 1.3.15 (HKLM-x32\...\Deluge) (Version: - ) devolo Cockpit (HKLM-x32\...\dlancockpit) (Version: 4.3.2.0 - devolo AG) Dotfuscator and Analytics Community Edition 5.18.1 (HKLM-x32\...\{9890DF1A-10E9-4236-94B1-1EFAA4099F13}) (Version: 5.18.1.2898 - PreEmptive Solutions) Hidden Double Dragon Trilogy (HKLM-x32\...\Double Dragon Trilogy_is1) (Version: 1.1 - ) DVDFab 9.1.6.6 (04/09/2014) (HKLM-x32\...\DVDFab 9_is1) (Version: - Fengtao Software Inc.) Elevated Installer (HKLM-x32\...\{6E257EB0-5EFF-416D-82D4-592924566BB4}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden Encrypt Files v1.5 (HKLM-x32\...\Encrypt Files_is1) (Version: - PowTools) Enregistreur VSS Microsoft pour SQL Server 2012 (HKLM\...\{CB5C654E-DA72-4B61-97F3-61C755C2E939}) (Version: 11.2.5058.0 - Microsoft Corporation) Entity Framework 6.1.3 Tools for Visual Studio 2015 (HKLM-x32\...\{1A8A9739-BAD7-491F-B5B9-A79A2B965422}) (Version: 14.0.40302.0 - Microsoft Corporation) Epson Connect Printer Setup (HKLM-x32\...\{D9B1D51B-EB56-410D-AEB5-1CCFAC4B6C8C}) (Version: 1.4.0 - Seiko Epson Corporation) EPSON ET-2550 Series Printer Uninstall (HKLM\...\EPSON ET-2550 Series) (Version: - SEIKO EPSON Corporation) Epson E-Web Print (HKLM-x32\...\{6BF9F374-EC67-4808-A90C-F127DE6D989D}) (Version: 1.23.0000 - SEIKO EPSON CORPORATION) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation) ESET NOD32 Antivirus (HKLM\...\{6044ED6C-0F7D-4B0C-A73D-D5ED40513EE9}) (Version: 10.1.219.1 - ESET, spol. s r.o.) EVE-NG-Win-Client-Pack (HKLM\...\EVE-NG-Win-Client-Pack_is1) (Version: 1.1 - EVE-NG) Exact Audio Copy 1.0beta3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.0beta3 - Andre Wiethoff) f.lux (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Flux) (Version: - ) Fedora Project - Fedora Media Writer - Tool to write Fedora images to flash drives (HKLM-x32\...\Fedora Media Writer) (Version: "${VERSIONMAJOR}.${VERSIONMINOR}.${VERSIONBUILD}" - "Fedora Project") Fichiers de support d'installation de Microsoft SQL Server 2008 (HKLM\...\{308350C4-5DA5-4035-A69B-12600021C9FA}) (Version: 10.1.2731.0 - Microsoft Corporation) FileZilla Client 3.33.0 (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\FileZilla Client) (Version: 3.33.0 - Tim Kosse) FileZilla Server (HKLM-x32\...\FileZilla Server) (Version: beta 0.9.48 - FileZilla Project) Firewall Builder 5.1 (HKLM-x32\...\FWBuilder 5.1) (Version: 5.1.0.3599 - NetCitadel LLC) foobar2000 v1.3.7 (HKLM-x32\...\foobar2000) (Version: 1.3.7 - Peter Pawlowski) Garmin BaseCamp (HKLM-x32\...\{23A4DBD1-D847-4957-995D-8B1CC527E2E2}) (Version: 4.6.2.0 - Garmin Ltd or its subsidiaries) Garmin City Navigator Europe NTU 2016.20 (HKLM-x32\...\{7F485A74-C557-4EF4-B934-97DA9A74E74B}) (Version: 2.0.0.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{3e534d41-dcc4-4f51-9858-70dd42beb3d5}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Garmin Express (HKLM-x32\...\{E1C18A5C-63D7-4DC5-977F-5B4BAB4169D9}) (Version: 6.5.1.0 - Garmin Ltd or its subsidiaries) Hidden Garmin USB Drivers (HKLM\...\{DC7720F2-98BE-41C1-B0A8-E391362E86B8}) (Version: 2.3.1.1 - Garmin Ltd or its subsidiaries) GDR 5343 pour SQL Server 2012 (KB3045321) (64-bit) (HKLM\...\KB3045321) (Version: 11.2.5343.0 - Microsoft Corporation) GDR 5388 pour SQL Server 2012 (KB3194719) (64-bit) (HKLM\...\KB3194719) (Version: 11.2.5388.0 - Microsoft Corporation) Git version 2.9.2 (HKLM\...\Git_is1) (Version: 2.9.2 - The Git Development Community) GlassFish Server Open Source Edition 4.1.1 (HKLM\...\nbi-glassfish-mod-4.1.1.0.1) (Version: - ) GNU Privacy Guard (HKLM-x32\...\GnuPG) (Version: 2.2.1 - The GnuPG Project) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden GostCrypt (HKLM-x32\...\GostCrypt) (Version: 1.3.1 - GostCrypt Developers) Gpg4win (3.0.0) (HKLM-x32\...\Gpg4win) (Version: 3.0.0 - The Gpg4win Project) GPL Ghostscript (HKLM\...\GPL Ghostscript 9.19) (Version: 9.19 - Artifex Software Inc.) GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd) HandBrake 0.10.5 (HKLM-x32\...\HandBrake) (Version: 0.10.5 - ) HashTab 6.0.0.28 (HKLM\...\HashTab) (Version: 6.0.0.28 - Implbits Software) HDD Health v4.2 (HKLM-x32\...\HDD Health_is1) (Version: - ) HitmanPro 3.7 (HKLM\...\HitmanPro38) (Version: 3.8.0.295 - SurfRight B.V.) HitmanPro.Alert 3 (HKLM\...\HitmanPro.Alert) (Version: 3.7.8.750 - SurfRight B.V.) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden HPPhotoGadget (HKLM-x32\...\{CAE4213F-F797-439D-BD9E-79B71D115BE3}) (Version: 130.0.282.000 - Hewlett-Packard) Hidden HxD Hex Editor version 1.7.7.0 (HKLM-x32\...\HxD Hex Editor_is1) (Version: 1.7.7.0 - Maël Hörz) IDA Pro v6.8 and Hex-Rays Decompiler (ARM,x64,x86) (HKLM-x32\...\IDA Pro_6.8_is1) (Version: - Hex-Rays SA) IIS 10.0 Express (HKLM\...\{5984D8DA-C1AF-4284-9C88-D7150425B315}) (Version: 10.0.1734 - Microsoft Corporation) IIS Express Application Compatibility Database for x64 (HKLM\...\{08274920-8908-45c2-9258-8ad67ff77b09}.sdb) (Version: - ) IIS Express Application Compatibility Database for x86 (HKLM\...\{ad846bae-d44b-4722-abad-f7420e08bcd9}.sdb) (Version: - ) Ikaruga Update v260346 (HKLM-x32\...\SWthcnVnYQ==_is1) (Version: 1 - ) Intel(R) Network Connections 21.0.504.0 (HKLM\...\PROSetDX) (Version: 21.0.504.0 - Intel) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4531 - Intel Corporation) Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 7.2.0.11 - IObit) IZArc 4.3 (HKLM-x32\...\{97C82B44-D408-4F14-9252-47FC1636D23E}_is1) (Version: 4.3 - Ivan Zahariev) Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation) Java 8 Update 144 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180144F0}) (Version: 8.0.1440.1 - Oracle Corporation) Java SE Development Kit 8 Update 144 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180144}) (Version: 8.0.1440.1 - Oracle Corporation) JPEXS Free Flash Decompiler (HKLM-x32\...\{E618D276-6596-41F4-8A98-447D442A77DB}_is1) (Version: 10.0.0 - JPEXS) KeePass Password Safe 2.36 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.36 - Dominik Reichl) KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.11.0.0 - QFX Software Corporation) Kits Configuration Installer (HKLM-x32\...\{B74E65FD-CC47-41C5-4B89-791A3F61942D}) (Version: 8.100.25984 - Microsoft) Hidden Kiwi Syslog Server 9.4.1 (Standard Edition) (HKLM-x32\...\Kiwi Syslog Server) (Version: 9.4.1 (Standard Edition) - hxxp://www.kiwisyslog.com) K-Lite Mega Codec Pack 13.3.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 13.3.0 - KLCP) League of Legends (HKLM-x32\...\{3E75652D-99B1-417E-B163-BEF33CAD3F16}) (Version: 3.0.1 - Riot Games) Hidden League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) LibreOffice 5.3.7.2 (HKLM\...\{117F3217-458C-4371-B222-00C69DE96CB2}) (Version: 5.3.7.2 - The Document Foundation) Macrium Reflect Free Edition (HKLM\...\{82EAF766-45D4-429A-A74C-74D7DEB91115}) (Version: 6.3.1855 - Paramount Software (UK) Ltd.) Hidden Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 6.3 - Paramount Software (UK) Ltd.) Macromedia Dreamweaver 4 (HKLM-x32\...\{ABDA9912-5D00-11D4-BAE7-9367CA097955}) (Version: 4.0 - Macromedia) Macromedia Extension Manager (HKLM-x32\...\{A5BA14E0-7384-11D4-BAE7-00409631A2C8}) (Version: 1.2 - Macromedia) Macromedia Fireworks MX (HKLM-x32\...\{930B2432-43D4-11D5-9871-00C04F8EEB39}) (Version: 6 - Macromedia) Malwarebytes version 3.5.1.2522 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.5.1.2522 - Malwarebytes) Manuels EPSON (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.53.0.0 - Seiko Epson Corporation) MediaInfo 0.7.71 (HKLM\...\MediaInfo) (Version: 0.7.71 - MediaArea.net) MediaPortal (HKLM-x32\...\MediaPortal) (Version: 1.8.0 - Team MediaPortal) MergeModule_x64 (HKLM\...\{3D576235-F0CE-4B50-A9C6-0775B9E50B63}) (Version: 9.1.00 - Sony Corporation) Hidden MergeModule_x86 (HKLM-x32\...\{306CBA87-E890-4FBB-9AB8-E65C96D352B2}) (Version: 9.1.00 - Sony Corporation) Hidden Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.5 Multi-Targeting Pack (HKLM-x32\...\{56E962F0-4FB0-3C67-88DB-9EAA6EEFC493}) (Version: 4.5.50710 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (Français) (HKLM-x32\...\{15A5D4D5-6435-322E-9435-C21252920944}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 Multi-Targeting Pack (HKLM-x32\...\{6A0C6700-EA93-372C-8871-DCCF13D160A4}) (Version: 4.5.50932 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (Français) (HKLM-x32\...\{5F951DA6-8F50-4E55-B2A3-DCE78BF3D185}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 SDK (HKLM-x32\...\{19A5926D-66E1-46FC-854D-163AA10A52D3}) (Version: 4.5.51641 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (Français) (HKLM-x32\...\{4C742A71-01FC-391A-972B-87DAFB8C46DD}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 Multi-Targeting Pack (HKLM-x32\...\{B941AFB4-8851-33A1-9E72-0C33D463C41C}) (Version: 4.5.51209 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (Français) (HKLM-x32\...\{224757CE-5740-4E20-84CB-670D8D593A1C}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 SDK (HKLM-x32\...\{B5915D37-0637-4A26-A3AA-C5DC9F856370}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (HKLM-x32\...\{2CC6A4A7-AAC2-46C9-9DBB-3727B5954F65}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 Targeting Pack (Français) (HKLM-x32\...\{E93A5C15-224F-45D1-8D74-D8BD5B52E855}) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Version Manager (x64) 1.0.0-beta5 (HKLM\...\{c5a4aba3-1aba-3ef8-b2d5-c3fa37f59738}) (Version: 1.0.10609.0 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{F2508213-9989-4E85-A078-72BE483917EF}) (Version: 3.5.88.0 - Microsoft Corporation) Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation) Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 1.1 Language Pack - FRA (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - FRA) (Version: 1.1.40219 - Microsoft Corporation) Microsoft Help Viewer 2.2 (HKLM-x32\...\Microsoft Help Viewer 2.2) (Version: 2.2.23107 - Microsoft Corporation) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Standard Edition 2003 (HKLM-x32\...\{9112040C-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Report Viewer 2012 Runtime (HKLM-x32\...\{B4A23593-B575-421D-96B4-4B71231DBB8E}) (Version: 11.0.2100.60 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2012 (64-bit) (HKLM\...\Microsoft SQL Server SQLServer2012) (Version: - Microsoft Corporation) Microsoft SQL Server 2012 Express LocalDB (HKLM\...\{6753A8AE-340E-4B81-9914-F1B30FCAE693}) (Version: 11.2.5058.0 - Microsoft Corporation) Microsoft SQL Server 2012 Native Client (HKLM\...\{2B9EE1FE-105F-4093-A40E-C1BF12F873B7}) (Version: 11.2.5388.0 - Microsoft Corporation) Microsoft SQL Server 2012 Setup (English) (HKLM\...\{C23DBA16-E075-41BE-AE2E-C1B0DD0B4535}) (Version: 11.2.5388.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL Compiler Service (HKLM\...\{FA73FAE6-BAE5-4928-8CBB-00D311B6DFD3}) (Version: 11.2.5388.0 - Microsoft Corporation) Microsoft SQL Server 2012 Transact-SQL ScriptDom (HKLM\...\{FF9547BD-C968-4311-8557-053F1913778C}) (Version: 11.2.5058.0 - Microsoft Corporation) Microsoft SQL Server Compact 4.0 SP1 x64 FRA (HKLM\...\{0D4447E0-A261-43A4-AEBC-F76E983901F0}) (Version: 4.0.8876.1 - Microsoft Corporation) Microsoft SQL Server Data Tools - FRA (14.0.50616.0) (HKLM-x32\...\{4BDA02EE-4846-4D39-8D4C-683AC94F9B44}) (Version: 14.0.50616.0 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM-x32\...\{2A2DE0E0-A940-4870-8D2E-4AE70B1A2227}) (Version: 10.51.2500.0 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (HKLM-x32\...\{9CD2AD15-115E-4F44-90A8-435B9537973B}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Management Objects (x64) (HKLM\...\{296D0B70-F8D8-4D58-9E55-C86B3E82DB7C}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft SQL Server 2014 Transact-SQL ScriptDom (HKLM\...\{855F1729-ECA5-4BF8-A8E4-9E521BB36E10}) (Version: 12.0.2000.8 - Microsoft Corporation) Microsoft System CLR Types pour SQL Server 2012 (x64) (HKLM\...\{84C602CF-913B-4D99-9101-DFC9083B7252}) (Version: 11.2.5058.0 - Microsoft Corporation) Microsoft System CLR Types pour SQL Server 2014 (HKLM\...\{76582300-132C-4B08-9DFB-350E9E9260EA}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft System CLR Types pour SQL Server 2014 (HKLM-x32\...\{F531C37C-D2F8-4BF8-BBE8-E943F787F761}) (Version: 12.0.2402.11 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{402ED4A1-8F5B-387A-8688-997ABF58B8F2}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{b3c7f59f-dc40-4be9-829c-77dd292978ea}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Web Deploy 3.6 (HKLM\...\{ED4CC1E5-043E-4157-8452-B5E533FE2BA1}) (Version: 3.1238.1955 - Microsoft Corporation) MiKTeX 2.9 (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org) mIRC (HKLM-x32\...\mIRC) (Version: 7.36 - mIRC Co. Ltd.) Module de compatibilité pour Microsoft Office System 2007 (HKLM-x32\...\{90120000-0020-040C-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Module linguistique de Dotfuscator and Analytics Community Edition 5.18.1 fr-FR (HKLM-x32\...\{242E5CC0-31F6-4C13-90B1-93859035E410}) (Version: 5.18.1.2898 - PreEmptive Solutions) Hidden Module linguistique de la création de plan conceptuel (x64) de Microsoft Visual Studio Team Foundation Server 2015 - FRA (HKLM\...\{E945B9EB-8276-3C1F-AFBD-FC3EA5CCB001}) (Version: 14.0.23102 - Microsoft Corporation) Hidden Module linguistique de la visionneuse d'aide Microsoft 2.2 - FRA (HKLM-x32\...\{CA7DEAE0-CDD3-3E30-A0D2-05246EC3D6F9}) (Version: 2.2.23107 - Microsoft Corporation) Hidden Module linguistique de l'intégration Office (x64) de Microsoft Visual Studio Team Foundation Server 2015 - FRA (HKLM\...\{63999886-5BF6-372A-929B-F96E842A064E}) (Version: 14.0.23102 - Microsoft Corporation) Hidden Module linguistique des composants partagés Microsoft Azure pour Visual Studio 2015 (FRA) - v1.5 (HKLM-x32\...\{A7B54F58-F1FB-4BC0-BF2A-0A32A8C3F61D}) (Version: 1.5.30619.1602 - Microsoft Corporation) Hidden Module linguistique des outils de test de Microsoft Visual Studio 2015 - FRA (HKLM-x32\...\{3CDAADFE-E957-43A9-9F40-18BB890AFFDC}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Module linguistique du Kit de développement logiciel (SDK) de Microsoft Visual Studio 2015 - FRA (HKLM-x32\...\{DC6804FF-F6B5-370C-8EC1-8099C7BE8C9F}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Module linguistique Microsoft Azure Mobile Services Tools pour Visual Studio - v1.4 (HKLM-x32\...\{DD61292F-143F-4424-B78B-B229F7B99CF7}) (Version: 1.4.30611.1601 - Microsoft Corporation) Hidden Module linguistique Microsoft Help Viewer 2.2 - FRA (HKLM-x32\...\Module linguistique de la visionneuse d'aide Microsoft 2.2 - FRA) (Version: 2.2.23107 - Microsoft Corporation) Module linguistique Team Explorer pour Microsoft Visual Studio 2015 - FRA (HKLM-x32\...\{C32406B6-F3E8-39DC-8906-86E78003993D}) (Version: 14.0.23102 - Microsoft Corporation) Hidden MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 59.0.3 (x64 en-US) (HKLM\...\Mozilla Firefox 59.0.3 (x64 en-US)) (Version: 59.0.3 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla) Mozilla Thunderbird 52.9.1 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 fr)) (Version: 52.9.1 - Mozilla) MSI Afterburner 4.4.0 (HKLM-x32\...\Afterburner) (Version: 4.4.0 - MSI Co., LTD) MSI Development Tools (HKLM-x32\...\{CF3A1CA6-5E5E-B4BD-6CF1-363056816CA2}) (Version: 8.100.26898 - Microsoft Corporation) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) Music NFO Builder version 1.21a (HKLM-x32\...\{CC9F74BA-CA3D-4C13-A97A-738DA26ED686}_is1) (Version: 1.21a - Pawe³ Piecuch) My.com Game Center (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\MyComGames) (Version: 3.201 - My.com B.V.) MySQL Server 5.6 (HKLM\...\{56DA0CB5-ABD2-4318-BEAB-62FDBC9B12CC}) (Version: 5.6.10 - Oracle Corporation) NetBeans IDE 8.2 (HKLM\...\nbi-nb-base-8.2.0.0.201609300101) (Version: 8.2 - NetBeans.org) Network64 (HKLM\...\{05EFBF37-0E52-4579-875C-7EEF0DFB4FCB}) (Version: 130.0.572.000 - Hewlett-Packard) Hidden Network64 (HKLM\...\{6BFAB6C1-6D46-46DB-A538-A269907C9F2F}) (Version: 140.0.221.000 - Hewlett-Packard) Hidden NirSoft BlueScreenView (HKLM-x32\...\NirSoft BlueScreenView) (Version: - ) Node.js (HKLM\...\{C6D83D75-9B09-4DEA-A890-F700FD744DEA}) (Version: 6.11.2 - Node.js Foundation) Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 7.5.6 - Notepad++ Team) NovaBench 3.0.4 (HKLM-x32\...\{88603FC0-6B3C-442D-981E-E3D49F083548}_is1) (Version: - Novawave Inc.) NoVirusThanks OSArmor v1.4 (HKLM\...\NoVirusThanks OSArmor_is1) (Version: 1.4.0.0 - NoVirusThanks Company Srl) NoVirusThanks SysHardener v1.5 (HKLM\...\NoVirusThanks SysHardener_is1) (Version: 1.5.0.0 - NoVirusThanks Company Srl) Npcap 0.92 (HKLM-x32\...\NpcapInst) (Version: 0.92 - Nmap Project) Objets de gestion Microsoft SQL Server 2008 R2 (HKLM-x32\...\{C92868E2-32A3-4475-9B3A-57132338B532}) (Version: 10.51.2500.0 - Microsoft Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) OpenSCAD (remove only) (HKLM\...\OpenSCAD) (Version: 2015.03-2 - The OpenSCAD Developers) OpenStego v0.6.1 (HKLM-x32\...\OpenStego) (Version: - ) OpenVPN 2.3.8-I601 (HKLM\...\OpenVPN) (Version: 2.3.8-I601 - ) Oracle VM VirtualBox 5.1.30 (HKLM\...\{2F7790B1-72FA-426F-91B3-EBEAA30B1ABA}) (Version: 5.1.30 - Oracle Corporation) Origin (HKLM-x32\...\Origin) (Version: 10.5.22.1331 - Electronic Arts, Inc.) Outils de diagnostic de Microsoft Visual Studio 2015 - FRA (HKLM-x32\...\{41A6114B-3B11-4FA4-8D08-75DFEFDDEE82}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Outils de diagnostic de Microsoft Visual Studio 2015 - FRA (HKLM-x32\...\{6BDB173D-9120-4747-8987-B0D77A09C234}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.) Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software) Panneau de configuration NVIDIA 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.13 - NVIDIA Corporation) Hidden PC Chrono 1.1.0.6 (HKLM-x32\...\{C1C910A7-0B89-4260-8845-FE221D9285E8}_is1) (Version: - highspheres.com) PCSX2 - Playstation 2 Emulator (HKLM-x32\...\pcsx2-r5875) (Version: - ) ph (HKLM-x32\...\{185F9795-9663-4F13-9EF9-307A282ADB5A}) (Version: 1.0.0 - Your Company Name) Hidden PlayMemories Home (HKLM-x32\...\{93AA5B49-0994-4EF6-80F3-868C9CEA88ED}) (Version: 4.1.00.12152 - Sony Corporation) PMB_ModeEditor (HKLM-x32\...\{19FEBF46-AE2C-45C7-BF9F-E254A4B3E717}) (Version: 9.1.00 - Sony Corporation) Hidden PMB_ServiceUploader (HKLM-x32\...\{D0A231B2-5921-45B7-A2FC-4EC937D6E020}) (Version: 9.1.00 - Sony Corporation) Hidden PokerStars.fr (HKLM-x32\...\PokerStars.fr) (Version: - PokerStars.fr) PreEmptive Analytics Client French Language Pack (HKLM-x32\...\{B7B58EF9-6307-4DCF-8276-2F17D1E6DE69}) (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden PreEmptive Analytics Visual Studio Components (HKLM-x32\...\{436A18DD-5F2C-4B3C-985E-AD3C13B0CC25}) (Version: 1.2.5134.1 - PreEmptive Solutions) Hidden PrivaZer (HKLM-x32\...\PrivaZer) (Version: 3.0.50.0 - Goversoft LLC) Process Hacker 2.39 (r124) (HKLM\...\Process_Hacker2_is1) (Version: 2.39.0.124 - wj32) Proxifier version 3.29 (HKLM-x32\...\Proxifier_is1) (Version: 3.29 - Initex) PS_AIO_04_C4500_Software_Min (HKLM-x32\...\{CF408B76-8698-4298-B549-5E6A94931B64}) (Version: 130.0.365.000 - Hewlett-Packard) Hidden PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) PyQt GPL v4.10.3 for Python v2.7 (x64) (HKLM\...\PyQt GPL v4.10.3 for Python v2.7 (x64)) (Version: 4.10.3 - ) Python 2.6 pycrypto-2.6 (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\pycrypto-py2.6) (Version: - ) Python 2.6 pywin32-217 (HKLM\...\pywin32-py2.6) (Version: - ) Python 2.7 apsw-3.7.14.1-r1 (HKLM\...\apsw-py2.7) (Version: - ) Python 2.7 PIL-1.1.7 (64-bit) (HKLM\...\PIL-py2.7) (Version: - ) Python 2.7.5 (64-bit) (HKLM\...\{DBDD570E-0952-475f-9453-AB88F3DD565a}) (Version: 2.7.5150 - Python Software Foundation) Python 2.7.6 (HKLM-x32\...\{C3CC4DF5-39A5-4027-B136-2B3E1F5AB6E2}) (Version: 2.7.6150 - Python Software Foundation) Python 3.2 volatility-2.3.1 (HKLM\...\volatility-py3.2) (Version: - ) Python 3.2.3 (64-bit) (HKLM\...\{789C9644-9F82-44d3-B4CA-AC31F46F5883}) (Version: 3.2.3150 - Python Software Foundation) Raiden III (HKLM-x32\...\1207666023_is1) (Version: 2.0.0.3 - GOG.com) Razer Copperhead (HKLM-x32\...\{28A946E1-E83B-4662-BC7C-23451851489E}) (Version: 6.10 - Razer USA Ltd.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7865 - Realtek Semiconductor Corp.) Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform) RegSeeker (HKLM-x32\...\RegSeeker) (Version: 3.01.3680 - HoverDesk) Ressources de Microsoft Visual Studio 2015 Shell (minimum) (HKLM-x32\...\{50A252FB-E372-30D7-98A2-41DA044460DE}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Ressources Devenv de Microsoft Visual Studio 2015 (HKLM-x32\...\{A6DB9DAB-4780-3068-8DAD-37D8D3B3339D}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.) RivaTuner Statistics Server 6.5.0 Beta 5 (HKLM-x32\...\RTSS) (Version: 6.5.0 Beta 5 - Unwinder) Roslyn Language Services - x86 (HKLM-x32\...\{1E3168EE-DCCA-33A1-AD17-5962A59118A3}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Roslyn Language Services - x86 (HKLM-x32\...\{5B47029B-1E62-30FF-906E-694851C22782}) (Version: 14.0.23107 - Microsoft Corporation) Hidden SanityCheck 3.50 (HKLM\...\SanityCheck_is1) (Version: - Resplendence Software Projects Sp.) Scan (HKLM-x32\...\{0F367CA3-3B2F-43F9-A44A-25A8EE69E45D}) (Version: 13.0.0.0 - Hewlett-Packard) Hidden SDK Debuggers (HKLM-x32\...\{9274C832-3D8A-A294-FDE8-8B9272357098}) (Version: 8.100.26936 - Microsoft Corporation) Hidden SeaTools for Windows (HKLM-x32\...\SeaTools for Windows) (Version: - Seagate Technology) Secure Folders (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\Secure Folders) (Version: - ) Service de langage T-SQL Microsoft SQL Server 2014 (HKLM-x32\...\{4152D9BF-6975-4653-B993-5CA882638A72}) (Version: 12.0.2000.8 - Microsoft Corporation) Service Pack 2 pour SQL Server 2012 (KB2958429) (64-bit) (HKLM\...\KB2958429) (Version: 11.2.5058.0 - Microsoft Corporation) SIW version 2011.10.29 (HKLM-x32\...\{AB67580-257C-45FF-B8F4-C8C30682091A}_is1) (Version: 2011.10.29 - Topala Software Solutions) Skype™ 7.38 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.38.101 - Skype Technologies S.A.) SOHLib for PlayMemories Home (HKLM\...\{F07F9109-D141-4E88-BFF5-0206D61994F5}) (Version: 1.0.3.02170 - Sony Corporation) Hidden SolarWinds TFTP Server (HKLM-x32\...\{7EE86A3F-8107-486F-8E97-041F49578E73}) (Version: 10.9.1.33 - SolarWinds) Sophos Virus Removal Tool (HKLM-x32\...\{B829E117-D072-41EA-9606-9826A38D34C1}) (Version: 2.6.1 - Sophos Limited) Sothink SWF Decompiler (HKLM-x32\...\{87ECFEA1-7882-4FC7-A2E2-2AC0CC262EBC}) (Version: - ) Speccy (HKLM\...\Speccy) (Version: 1.30 - Piriform) SpywareBlaster 5.5 (HKLM-x32\...\SpywareBlaster_is1) (Version: 5.5.0 - BrightFort LLC) SQL Server 2012 Common Files (HKLM\...\{202AAF1F-69AA-442A-B59F-6B54B1AD07C6}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Common Files (HKLM\...\{6493CA0F-4425-467B-A8D1-1E179C38186F}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (HKLM\...\{0B16EDDC-5622-41B6-AB9D-8FDEFD860AF4}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Services (HKLM\...\{18B2A97C-92C3-4AC7-BE72-F823E0BC895B}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (HKLM\...\{54FF8FAB-DE27-4187-82F1-EBAE6AEE869A}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Database Engine Shared (HKLM\...\{FDAAEA11-D2C9-4234-B590-DD5156186BD0}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (HKLM\...\{A7037EB2-F953-4B12-B843-195F4D988DA1}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server 2012 Management Studio (HKLM\...\{ECFC7508-D29B-4802-85E2-C61A9CE43582}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden SQL Server Browser pour SQL Server 2012 (HKLM-x32\...\{437F5BA1-449C-4FF5-B136-8A037B950919}) (Version: 11.2.5058.0 - Microsoft Corporation) Sql Server Customer Experience Improvement Program (HKLM\...\{BED1EA3D-592D-4305-9D1F-20F03726EFC1}) (Version: 11.2.5058.0 - Microsoft Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Synology Cloud Station Backup (remove only) (HKLM\...\Synology Cloud Station Backup) (Version: 4.2.5.4396 - Synology, Inc.) Syslog Server 1.2.3 (HKLM-x32\...\Syslog Server_is1) (Version: - ) TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - ) Team Explorer for Microsoft Visual Studio 2015 (HKLM-x32\...\{791295AE-3B0A-3222-9E69-26C8C106E8D1}) (Version: 14.0.23102 - Microsoft Corporation) Hidden TekCERT (HKLM-x32\...\{ED76EFC6-A5F6-4E2D-8369-3E11B057B526}) (Version: 2.2.2 - KaplanSoft) TekRADIUS (HKLM-x32\...\{C762B948-60AA-4E26-941F-96F73377DC9C}) (Version: 4.9.1 - KaplanSoft) Telegram Desktop version 1.2.6 (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.2.6 - Telegram Messenger LLP) Test Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{9EABBFE1-7EED-47D9-8FB8-21D7E4808057}) (Version: 14.0.23107 - Microsoft Corporation) Hidden TeXstudio 2.11.0 (HKLM-x32\...\TeXstudio_is1) (Version: 2.11.0 - Benito van der Zander) Tftpd64 Standalone Edition (remove only) (HKLM-x32\...\Tftpd64) (Version: - ) Toolbox (HKLM-x32\...\{6BBA26E9-AB03-4FE7-831A-3535584CA002}) (Version: 130.0.648.000 - Hewlett-Packard) Hidden TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation) TypeScript Power Tool (HKLM-x32\...\{C5D259B0-526A-48D0-9E2D-7CC884B3A1CA}) (Version: 1.5.4.0 - Microsoft Corporation) Hidden TypeScript Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{C7AA90EF-3C40-4F1E-897B-696834DD0B0F}) (Version: 1.5.4.0 - Microsoft Corporation) Hidden UltraVnc (HKLM\...\Ultravnc2_is1) (Version: 1.2.1.2 - uvnc bvba) Universal Media Server (HKLM-x32\...\Universal Media Server) (Version: 6.7.2 - Universal Media Server) UnloadSupport (HKLM-x32\...\{4E7C28C7-D5DA-4E9F-A1CA-60490B54AE35}) (Version: 11.0.0 - Hewlett-Packard) Hidden Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft) Utilitaires ligne de comm. Microsoft SQL Server 2012 (HKLM\...\{3835543E-37BA-4CE3-91BE-608DA8827675}) (Version: 11.1.3000.0 - Microsoft Corporation) VanDyke Software SecureCRT 7.1 (HKLM\...\{68C86F43-1D19-4F7C-AA04-C4C5FF1F7BCA}) (Version: 7.1.1 - VanDyke Software, Inc.) VB Decompiler Pro (HKLM-x32\...\VB Decompiler Pro_is1) (Version: - DotFix Software) VBReFormer 3.5 (HKLM-x32\...\VBReFormer_is1) (Version: - Hexorciser, by Warning) VBReFormer 5.0 Professional Edition (HKLM-x32\...\VBReFormer 2007_is1) (Version: - Decompiler-vb.net) VBReFormer 6.4 Free Edition (HKLM-x32\...\VBReFormer 2015 Free_is1) (Version: 6.4.353 - Decompiler-vb.net) VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.21 - IDRIX) Version préparatoire de Microsoft Visual Studio 2015 (HKLM-x32\...\{7E30FA29-6EED-4660-A38A-753519B5A9AA}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Version préparatoire de Microsoft Visual Studio 2015 (HKLM-x32\...\{CE513FDB-75AD-42D9-B6F2-31CFAB97487A}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Version préparatoire de Microsoft Visual Studio 2015 (HKLM-x32\...\{D1D9844E-7CD5-435B-96B7-B3097A1B55B2}) (Version: 14.0.23107 - Microsoft Corporation) Hidden Visual Studio 2010 Prerequisites - English (HKLM\...\{C3175CF2-1DDD-3740-9AF7-0226CA07C6A0}) (Version: 10.0.40219 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) VMware Workstation (HKLM\...\{0AD91785-F9BD-47FD-84F7-9E27B5A1853D}) (Version: 12.1.0 - VMware, Inc.) VoodooShield version 4.28 (HKLM\...\{A8644328-A66F-490E-B8FA-901FF649189D}_is1) (Version: 4.28 - VoodooSoft, LLC) VPNetwork LLC - TorGuard - Online Privacy Protection Services (HKLM-x32\...\VPNetwork LLC TorGuard) (Version: "3.86.1" - "VPNetwork LLC") Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.) WampServer 2.2 (HKLM-x32\...\WampServer 2_is1) (Version: - Hervé Leclerc (HeL)) WCF Data Services 5.6.4 FRA Language Pack (HKLM-x32\...\{314D548C-60FF-48F8-BEAE-C94946706349}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services 5.6.4 Runtime (HKLM-x32\...\{DB85E7BD-B2DD-43D4-B3C0-23D7B527B597}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 (HKLM-x32\...\{0A3B508E-5638-4471-BCC9-954E1868CB86}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WCF Data Services Tools for Microsoft Visual Studio 2015 FRA Language Pack (HKLM-x32\...\{1914EF4B-70F3-47AA-90A2-B5FB0C45E45D}) (Version: 5.6.62175.4 - Microsoft Corporation) Hidden WebReg (HKLM-x32\...\{43CDF946-F5D9-4292-B006-BA0D92013021}) (Version: 130.0.132.017 - Hewlett-Packard) Hidden WhatsApp (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\WhatsApp) (Version: 0.3.225 - WhatsApp) Windows 7 Games for Windows 10 and 8 (HKLM\...\Win7Games) (Version: 2.0 - hxxp://winaero.com) Windows Firewall Control (HKLM\...\Windows Firewall Control) (Version: 5.1.0.0 - BiniSoft.org) WinMerge 2.14.0 (HKLM-x32\...\WinMerge_is1) (Version: 2.14.0 - Thingamahoochie Software) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) WinSCP 5.11.2 (HKLM-x32\...\winscp3_is1) (Version: 5.11.2 - Martin Prikryl) WinX DVD Ripper Platinum 7.3.4 (HKLM-x32\...\WinX DVD Ripper Platinum_is1) (Version: - Digiarty Software, Inc.) Wireshark 2.2.5 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.2.5 - The Wireshark developer community, hxxps://www.wireshark.org) World of Tanks (HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net) WOT Statistics 2.5.1.2 (HKLM-x32\...\{DE24FF20-1842-4354-8060-2065CCE962B2}) (Version: 2.5.1.2 - vBAddict) WPT Redistributables (HKLM-x32\...\{64F3FB9A-9250-B2D6-00B4-50BE0358AEE8}) (Version: 8.100.26936 - Microsoft) Hidden WPTx64 (HKLM-x32\...\{BFF81CB5-E8C7-4184-FBB4-74ADFBC6CCCB}) (Version: 8.100.26936 - Microsoft) Hidden XCA (X Certificate and Key Management) (HKLM-x32\...\xca) (Version: 1.2.0 - Christian Hohnstaedt <[removed]>) XVM version 6.3.0 (HKLM-x32\...\{2865cd27-6b8b-4413-8272-cd968f316050}_is1) (Version: 6.3.0 - XVM team) Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.150 - Zemana Ltd.) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Pas de fichier ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Pas de fichier ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2018-08-03] () ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2018-01-01] () ContextMenuHandlers1: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-06-13] (ESET) ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2017-09-19] (g10 Code GmbH) ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit) ContextMenuHandlers1: [IZArcCM] -> {BC593DF5-466F-44EC-8FFD-C4DBC603B917} => C:\Program Files (x86)\IZArc\IZArcCM64.dll [2012-07-20] () ContextMenuHandlers1: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll [2018-06-22] () ContextMenuHandlers1: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2015-10-12] (Paramount Software UK Ltd) ContextMenuHandlers1: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2015-06-13] (hxxp://winmerge.org) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers1-x32: [{3C06DF11-062F-11D4-8D3B-919D46C1CE19}] -> {3C06DF11-062F-11D4-8D3B-919D46C1CE19} => -> Pas de fichier ContextMenuHandlers2: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-06-13] (ESET) ContextMenuHandlers2: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll [2018-06-22] () ContextMenuHandlers2: [ReflectShellExt] -> {DEBB9B79-B3DD-47F4-9E5C-EA6975BAB611} => C:\Program Files\Macrium\Reflect\RContextMenu.dll [2015-10-12] (Paramount Software UK Ltd) ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2015-11-25] (VMware, Inc.) ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2015-11-25] (VMware, Inc.) ContextMenuHandlers2-x32: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2015-06-13] (hxxp://winmerge.org) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers3: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll [2018-06-22] () ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2017-09-19] (g10 Code GmbH) ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit) ContextMenuHandlers4: [IZArcCM] -> {BC593DF5-466F-44EC-8FFD-C4DBC603B917} => C:\Program Files (x86)\IZArc\IZArcCM64.dll [2012-07-20] () ContextMenuHandlers4: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll [2018-06-22] () ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers4: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2015-06-13] (hxxp://winmerge.org) ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers4: [{3C06DF11-062F-11D4-8D3B-919D46C1CE19}] -> {3C06DF11-062F-11D4-8D3B-919D46C1CE19} => -> Pas de fichier ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Pas de fichier ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => -> Pas de fichier ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation) ContextMenuHandlers5: [WinMerge] -> {4E716236-AA30-4C65-B225-D68BBA81E9C2} => C:\Program Files (x86)\WinMerge\ShellExtensionX64.dll [2015-06-13] (hxxp://winmerge.org) ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2018-08-03] () ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers6: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat Elements\ContextMenuShim64.dll [2012-09-23] (Adobe Systems Inc.) ContextMenuHandlers6: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-06-13] (ESET) ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-05-22] (IObit) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-05-09] (Malwarebytes) ContextMenuHandlers6: [PrivaZer] -> {7691BE2F-3D79-AADE-9C87-4D6EBCC76682} => C:\Program Files (x86)\PrivaZer\PrivaMenu5.dll [2018-06-22] () ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2016-06-06] (Piriform Ltd) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {00E90692-31F5-4683-A6FB-7E1A81D88938} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-07-31] (Microsoft Corporation) Task: {05AD66EC-3966-4818-84FF-F33374D97163} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_Broker_Display => C:\WINDOWS\system32\MusNotification.exe [2018-06-15] () Task: {060630C0-7793-4A6A-A566-D8D1CAB43C0D} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.EXE /NOUACCHECK Task: {069EA770-C20E-4803-8CA6-4EA2A5C6C7A7} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-07-03] () Task: {0E643515-3F0B-4F73-8E9C-808F854F9298} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2017-10-31] () Task: {0EB93C3C-35FD-438C-AFAB-68B068122A1B} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION Task: {0FD5506C-E7F6-4AB8-81CE-84917D1C2192} - System32\Tasks\{9F81CC2E-21B2-4C98-A05A-C7DF5A1F2179} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{5280074D-6AB3-44B2-8B59-C6A808AB55A4}\setup.exe" -c /runfromtemp /x Task: {15F38371-0D43-48A8-AFDB-E9F2A98CB2AB} - \Safer-Networking\Spybot - Search and Destroy\Scan the system -> Pas de fichier <==== ATTENTION Task: {1E44F91B-89E7-4825-9B82-C812B284A1FA} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2018-06-06] () Task: {202BE166-F93F-4714-9531-82610EE51240} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Eric\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Task: {2065E1C8-251C-409E-AD82-17AB898F9D4C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION Task: {23E38EF4-8636-4EB7-9AD2-D982870C63CE} - System32\Tasks\EPSON ET-2550 Series Update {2956E691-DC46-4434-BE8A-F4CCD628491C} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNXE.EXE [2016-12-20] (SEIKO EPSON CORPORATION) Task: {366D70DC-3DB7-4B2A-BA0D-50890300F2CC} - System32\Tasks\{96E8AB11-83E9-4382-84DA-0D45FDEE64D0} => C:\Windows\system32\pcalua.exe -a H:\SETUP.EXE -d H:\ -c /AUTORUN Task: {3AFE4BE2-8009-400C-8273-C964698710C2} - System32\Tasks\{C8B4DD8D-DEFF-4002-A6A2-DE4AE442A06C} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ZHPDiag\ZHPhep.exe" -d "C:\Program Files (x86)\ZHPDiag" Task: {471EF466-DF81-4029-889D-4130591E6E1A} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Pas de fichier <==== ATTENTION Task: {4AB37818-35AD-4E56-97A1-890EE69E05A4} - System32\Tasks\PrivaZer_SkipUAC => C:\Program Files (x86)\PrivaZer\PrivaZer.exe [2018-07-16] (Goversoft LLC) Task: {56E5E805-9863-4DB9-B2F9-298236C2D833} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2016-07-10] (ASUSTeK Computer Inc.) Task: {5A3690CD-E46E-4B67-9FAF-A4F6D83D3155} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-07-31] (Microsoft Corporation) Task: {5B8713B9-55B8-4E74-85C6-9B2CBC2D8579} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION Task: {5BE358DF-C2F0-43BC-BA5A-77E36BF54A02} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics => C:\WINDOWS\system32\disksnapshot.exe [2018-04-12] () Task: {624E3857-7AC5-4574-9D3C-86E2F7FF0BC2} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2016-07-10] (ASUSTeK Computer Inc.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {6ECC17BA-2F21-4D1D-A937-AF5B7E29ED7A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot => C:\WINDOWS\system32\MusNotification.exe [2018-06-15] () Task: {70C9D0AD-2805-4CDF-BF93-4A295690D08D} - System32\Tasks\Microsoft\Windows Defender\MP Scheduled Scan => c:\program files\windows defender\MpCmdRun.exe [2018-04-12] () Task: {730DA9E9-DCA9-4D1C-A246-6CC2E4192D4C} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier <==== ATTENTION Task: {767341A8-2B29-4123-B54F-2ED38EC89F90} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION Task: {7CBBCED5-6B51-4297-863A-146CBD35AADB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-07-31] (Microsoft Corporation) Task: {84BE478D-879F-447B-B346-1B85711644B6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-07] (Google Inc.) Task: {876176A9-349A-4B23-B37C-3D1C8D1523E9} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION Task: {8A50C434-DAEA-4D66-803C-63476760CFC0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-07-31] (Microsoft Corporation) Task: {9114B8C0-BA59-4AC9-ACE9-496A57D199C9} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {937F6627-73E6-4437-AFF2-39384E17747C} - \Safer-Networking\Spybot - Search and Destroy\Check for updates -> Pas de fichier <==== ATTENTION Task: {997C77FB-1356-4177-A9B5-4C4796FA3926} - \Microsoft\Windows\Setup\gwx\rundetector -> Pas de fichier <==== ATTENTION Task: {9C2D6379-9F2C-4948-A70B-68ACF5023C8D} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.) Task: {9D417E12-F2FE-42E8-9182-9D7BE33F5653} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2015-01-31] (Sony Corporation) Task: {9E0D79F5-8A8F-4574-87B4-FFC73ACE4629} - \Safer-Networking\Spybot - Search and Destroy\Refresh immunization -> Pas de fichier <==== ATTENTION Task: {9EC50C3F-2427-4118-BC71-CB09AD93469C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-13] (Piriform Ltd) Task: {AC578D3B-1573-4DE6-9AA7-6F25515C87C7} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2016-07-10] (TODO: ) Task: {AE9B4CC1-DF6E-4D85-8158-1422CA937934} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION Task: {B1B4F03B-6CAE-4D2D-95FE-4ED41A01EB76} - System32\Tasks\{0ED5105C-2A6F-40C6-A439-429351B63C34} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ZHPFix\ZHPhep.exe" -d "C:\Program Files (x86)\ZHPFix" Task: {C218F661-81D2-451A-851C-8658C67627AF} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION Task: {C4B74C81-6E80-4186-898A-65B53C2E1BE7} - System32\Tasks\{4E7A18D0-CBC2-4133-AAC6-66389A6E345D} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ZHPDiag\ZHPhep.exe" -d "C:\Program Files (x86)\ZHPDiag" Task: {C7C3B7B5-A5EF-44E0-9379-099E222C53FC} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION Task: {C820B77F-8131-4139-AC82-49846FC97276} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {C83C4C6C-181F-42BE-86FC-9F185155DE0F} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {D118DBF4-544B-4D71-9B75-70967EAC6028} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2016-07-10] () Task: {D1786D5D-94D1-4988-87BA-5D17D7239BC3} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => C:\WINDOWS\system32\MusNotification.exe [2018-06-15] () Task: {E1AF9894-9B35-4BB8-B424-E90BFA0B005A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-11-07] (Google Inc.) Task: {E32A35CB-B25D-4231-A519-B9836397A628} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION Task: {E9D8C996-422B-4F2E-B80E-6E7011D60E50} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2016-07-10] () (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\EPSON ET-2550 Series Update {2956E691-DC46-4434-BE8A-F4CCD628491C}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSNXE.EXE:/EXE:{2956E691-DC46-4434-BE8A-F4CCD628491C} /F:UpdateWORKGROUP\Y3TCW$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) Shortcut: C:\Users\Eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yamb 2.1.0.0 beta 2\Yamb - Website.lnk -> hxxp://yamb.unite-video.com ShortcutWithArgument: C:\Users\Eric\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Ledger Manager.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=beimhnaefocolcplfimocfiaiefpkgbf ==================== Modules chargés (Avec liste blanche) ============== 2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll 2014-09-29 23:07 - 2016-07-10 13:31 - 001430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe 2014-09-29 23:06 - 2016-07-10 13:28 - 001271096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe 2014-05-05 23:45 - 2014-05-05 23:45 - 000075136 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2018-06-18 17:26 - 2018-07-12 20:55 - 002433744 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2014-04-23 19:07 - 2013-03-08 09:54 - 000017760 _____ () C:\Program Files (x86)\HDD Health\HDDHealthService.exe 2017-08-23 07:29 - 2017-08-23 07:29 - 000287256 _____ () C:\Program Files (x86)\Synology\CloudStationBackup\bin\vss-service-x64.exe 2017-07-05 15:22 - 2014-01-28 05:16 - 000936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe 2014-09-29 23:06 - 2014-04-11 08:51 - 001360016 _____ () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe 2016-07-10 13:33 - 2016-07-10 13:33 - 001065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe 2016-07-10 13:33 - 2016-07-10 13:33 - 000036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe 2018-07-12 13:08 - 2018-07-06 08:55 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-07-17 09:39 - 2018-07-17 09:39 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-07-17 09:39 - 2018-07-17 09:39 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.210.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-08-09 22:37 - 2018-08-08 02:41 - 004855640 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libglesv2.dll 2018-08-09 22:37 - 2018-08-08 02:41 - 000115544 _____ () C:\Program Files (x86)\Google\Chrome\Application\68.0.3440.106\libegl.dll 2014-09-29 23:06 - 2016-07-10 13:28 - 000711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll 2014-09-29 23:06 - 2016-07-10 13:28 - 000857088 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll 2014-09-29 23:06 - 2016-07-10 13:28 - 000803840 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll 2014-09-29 23:06 - 2016-07-10 13:28 - 000814080 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll 2014-09-29 23:06 - 2016-07-10 13:28 - 000010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll 2015-11-25 18:09 - 2015-11-25 18:09 - 001301696 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll 2017-07-05 15:22 - 2018-08-18 10:35 - 000036648 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll 2017-07-05 15:22 - 2014-01-28 05:16 - 000104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll 2016-07-10 13:33 - 2016-07-10 13:33 - 000662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll 2016-07-10 13:33 - 2016-07-10 13:33 - 000253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll 2014-03-20 11:43 - 2014-03-20 11:43 - 001241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000123918 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\libgcc_s_dw2-1.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000596986 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\libcurl-4.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 003036942 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\libsqlite3-0.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 001798570 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\icuuc53.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000120334 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\zlib1.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 003095505 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\icuin53.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 001026062 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\libstdc++-6.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 021565192 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\icudt53.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000712704 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\platforms\qwindows.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000031744 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qgif.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000046080 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qicns.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000032768 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qico.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000516608 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qjp2.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000243200 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qjpeg.dll 2018-06-04 09:30 - 2018-06-04 09:30 - 000431616 _____ () C:\Users\Eric\AppData\Local\CloudStationBackup\CloudStation.app\bin\imageformats\qtiff.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\WINDOWS\Cmicnfgp.ini.cfg:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\Cmicnfgp.ini.imi:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\cmudaxp.ini:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\difxapi.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\Xonar STX Audio.ico:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system\Cmicnfgp.ini:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system\CmiFltr.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system\HsMgr64.exe:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system\HsSrv64.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system\HsSrv642.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\AcpiServiceVnA64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAC64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\appverif.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\audioLibVc.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Caf64api.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CAF64APO2.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\centel.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\cmasiopx.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\cmasiopx.ini:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Cmeauoxy.exe:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\CmiCnfgp.cpl:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\CmiInstallResAll64.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\cmudaxp.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Cm_Oal.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CX64APO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPA64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPA64F3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPD64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPD64AF3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPO64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPO64AF3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPP64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPP64AF3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOProp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOv201.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOv211.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSBoostDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPONS64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSLFXAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSLimiterDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSNeoPCDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSSymmetryDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PGFX64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PLFX64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSU2PREC64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\e1dmsg.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\escsvc64.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\E_GCINST.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\E_YD4BNXE.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\E_YLMBNXE.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fart.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\fart.exe:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\FMAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HarmanAudioInterface.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HiFiDAX2API.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMClariFi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMEQ.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMEQ_Voice.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMHVS.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMLimiter.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HMUI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ICEsoundAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\igfxCoIn_v4331.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IntelSSTAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IntelSstCApoPropPage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\IPROSetMonitor.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\KAAPORT64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO20.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO30.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO4064.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO5064.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO6064.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO7064.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPOShell64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioCapture64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioEQ64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioRealtek64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioRender64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioRenderAVX64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxSpeechAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxVoiceAPO2064.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\MaxxVoiceAPO3064.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxVoiceAPO4064.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxVolumeSDAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\microsoft.windows.softwarelogo.showdesktop.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MISS_APO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\mshtmlmedia.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NAHIMICAPOlfx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NahimicAPONSControl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NAHIMICV2apo.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NAHIMICV3apo.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NicCo4.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NicInstD.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\powertracker.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PROUnstl.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ProxifierShellExt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PrxerDrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\PrxerNsp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEA64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EED64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEG64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEL64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEP64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RCoInstII64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RdpGroupPolicyExtension.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RltkAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RP3DAA64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RP3DHT64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTCOM64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtDataProc64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEED64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEEG64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEEL64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEEP64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtkApi64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtkCfg64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtkCoLDR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtlCPAPI64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtNicProp64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTNUninst64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtPgEx64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTSnMg64.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SEAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SECOMN64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SEHDRA64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFCOM64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFNHK64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFSS_APO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sl3apo64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\slcnt64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\slprp64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sltech64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRCOM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRCOM64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRRPTR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSHP64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSTSH64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSTSX64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSWOW64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tadefxapo.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tadefxapo264.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tbb_waves.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tepeqapo64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tosade.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tosasfapo64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\toseaeapo64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\tossaeapo64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tossaemaxapo64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\tsnotify.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\UtcResources.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vsjitdebugger.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WavesGUILib64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\WdfCoInstaller01009.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\wu.upgrade.ps.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\YamahaAE.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\YamahaAE2.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\YamahaAE3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-file-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-file-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-localization-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-synch-l1-2-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-math-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-private-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-process-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-string-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-time-l1-1-0.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\appverif.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\cmasiop.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\cmasiop.ini:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\CmiCnfgp.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\CmiFltr.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\Cmpaoxy.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\Cm_Oal.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\HsMgr.exe:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\HsSrv.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\HsSrv2.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\mshtmlmedia.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\openssl.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ProxifierShellExt.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PrxerDrv.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\PrxerNsp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\RltkAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SECOMN32.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SFCOM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SpoonUninstall.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SPORDER.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SRCOM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\VmixP8.dll:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\SysWOW64\vmnat.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\vmnetdhcp.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vsjitdebugger.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\WISPTIS.EXE:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\athrx.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Capsax64Drv.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\cmudaxp.sys:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Drivers\cv2k1.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\e1d62x64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\iaStorA.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\IOMap64.sys:$CmdZnID [26] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nuvserenum.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nuvserial.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\pikbd.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\pimou.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\rt640x64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Rt64win7.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\RTKVHD64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ser2pl64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\TeeDriverW8x64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\torguardtap0901.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\visctap0901.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vmci.sys:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Win10Pcap.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Drivers\ASUSFILTER.sys:$CmdZnID [26] AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [125] AlternateDataStreams: C:\ProgramData\TEMP:9A870F8B [1038] AlternateDataStreams: C:\Users\Eric\Desktop\BDPUARLauncher_FR.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Desktop\JRT.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Desktop\JRT.exe:$CmdZnID [29] AlternateDataStreams: C:\Users\Eric\Desktop\putty .exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Desktop\putty .exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Desktop\rkill.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Desktop\rkill.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Desktop\zoek.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Desktop\zoek.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\1987_10_07_versailles_europe_sc10ma_ta.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\211169384_mp4_h264_aac_hd.mp4:$CmdTcID [130] AlternateDataStreams: C:\Users\Eric\Downloads\211169384_mp4_h264_aac_hd.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\6.06_nvidia_system_tools.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\6.06_nvidia_system_tools.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\A+ VCE Classic 5.0.4 Outcast.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ab_gerance_install.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\ab_gerance_install.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\adcard-jemepropose.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\anubis.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\anubis.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\appcrashview.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\applications-education-preschool.png.part:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ASW-Ticket-05-February-2016-2-eric-chereil.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ASW-Ticket-21-October-2015-3-eric-chereil.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ATELIER-CERTIFICATION-INGENIEUR-15062015.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Autoruns.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\B H L.PPS:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\B2283HS.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\BB61.tmp:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\bluescreenview-x64.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\bluescreenview.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\BlueStacks-ThinInstaller.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\BlueStacks-ThinInstaller.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\bmp2enhancedlsb.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\BootkitRemoval_x64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Bouyguestelecom_Facture_20160323.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Bouyguestelecom_Facture_20160623.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\bsnes_v085-64bit-1058.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\capsa_free_8.1.0.8151_x64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\cerfa_12100-02 (1).pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\cerfa_12100-02.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\cfw_installer_6106_53.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch1.pcap:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch1.png:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch10.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch2.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch2.pcap:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch3.pcap:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch3.wav:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch5.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch6.pcap:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ch7.pcap:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Citations des Grands Auteurs.pps:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\com.on_labs.android.aplus_5.0.4_[www.apk-dl.com].apk:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\COMODO Removal Tool 2014 - Mods version.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\conditions-generales-pj-cfdp-autonome_2015.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\connections.tar.gz:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Connexion matérielle décodeur sur PC.rtf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\CP Pollution 06.12.16.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\cpu-z_1.78-en.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\cpu-z_1.78-en.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\CUETools_2.1.5.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\DAEMON_Tools_3.47_8376.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\DAEMON_Tools_3.47_8376.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\DAS-TBE-41K-CG.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\dBpoweramp-Codec-MonkeysAudio.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\dBpoweramp-Codec-MonkeysAudio.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\DebugDiagx64.msi:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\DebugDiagx64.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\depends22_x64.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\detekt.exe:$CmdZnID [0] AlternateDataStreams: C:\Users\Eric\Downloads\DiagBox V7.02 Already patched.iso:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\dotNetFx40_Full_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\dotNetFx40_Full_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\E2283HS.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\EcoTank-ET-2550-Fiche technique.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\encrypt_files_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\encrypt_files_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ESETSirefefCleaner.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\ESETSirefefCleaner.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\eset_nod32_antivirus_live_installer_ (1).exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\eset_nod32_antivirus_live_installer_ (1).exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\eset_nod32_antivirus_live_installer_.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\eset_nod32_antivirus_live_installer_.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Ethernet_Frame_Analysis.docx:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\face-wink.png.part:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\facture_VM00065475794.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\fart199b_win32.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\FFmpeg-x86-N-74566-g531b0a3.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\FileZilla_3.10.1.1_win32-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\FileZilla_3.10.3_win64-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\FileZilla_3.15.0.2_win64-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Firefox Setup Stub 48.0.2.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Firefox Setup Stub 48.0.2.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\flashplayer17_ha_install.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\flashplayer17_ha_install.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\foobar2000_v1.3.7.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\foobar2000_v1.3.7.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Free_Encoder_Pack_2014-11-29.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Free_Encoder_Pack_2014-11-29.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\GarminExpressInstaller.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\GarminExpressInstaller.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Get_RGB_v1.0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Get_RGB_v1.0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\GlassWireSetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\gMKVExtractGUI.v.1.6.4.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\gpg4win-2.2.4.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Eric\Downloads\gpg4win-2.2.4.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\GPU-Z-[Guru3D.com].zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\hashcat-3.10.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\HashcatGUI_050b1.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\HashTab_v6.0.0.28_Setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\HashTab_v6.0.0.28_Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\HMA-Pro-VPN-2.8.19.0-install.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Eric\Downloads\HMA-Pro-VPN-2.8.19.0-install.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\HPSupportSolutionsFramework-12.3.11.29.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\HPSupportSolutionsFramework-12.3.11.29.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ImgStegano.jar:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Immobilier_Loyer_Install.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Immobilier_Loyer_Install.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\installation_garmin_francais.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\iperf-3.0.11-win64.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\KeyScrambler_Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\kiss_xvm98.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\klcp_update_1166_20151109.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\klcp_update_1166_20151109.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\klcp_update_1178_20151209.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\klcp_update_1178_20151209.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\kml.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\KMPlayer_4.0.3.1.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\KMPlayer_4.0.3.1.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\KMPlayer_4.0.4.6.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\KMPlayer_4.0.4.6.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\LdapAdminExe-w64-1.7.1.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\LdapMiner-Win32-BIN.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\lette-augmentation-provisions-pour-charges.rtf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\lettre-mise-en-demeure.rtf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\lettre-relance-impayee.rtf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\lexia36-fr-fr.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\LexiaFR.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\light_image_resizer4_setup_4.6.8.0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\light_image_resizer4_setup_4.6.8.0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\LosslessAudioChecker.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\MAJ Diagbox 7.02 vers 7.44 MDP scary01.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\MAJ Diagbox 7.02 vers 7.44 MDP scary01.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\mame0165b_64bit.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\mame0165b_64bit.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\manuel_diagbox.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\MarkC_Windows_8.x+7_MouseFix.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\MKVExtractGUI-2.2.2.9.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\mkvtoolnix-amd64-7.6.0-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\mkvtoolnix-amd64-7.6.0-setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Monkey.fb2k-component:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\MONTAGE RIF 5000.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Moules-vapeur-au-vin-blanc.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\mouserate.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\mouserate.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\MPC-HC.1.7.10.x64.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Eric\Downloads\MPC-HC.1.7.10.x64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\mplayer-svn-37527 (1).7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\mplayer-svn-37527.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\MPlayer-x86_64-r37451+g531b0a3.7z:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\msicuu2.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\NDP46-KB3045560-Web.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\NDP46-KB3045560-Web.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Non confirmé 15830.crdownload:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\novabench.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\novabench.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\npp.7.Installer.x64.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\npp.7.Installer.x64.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\OOSU10.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\OOSU10.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\OpenPuff.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\openssl-1.0.2a-x64_86-win64.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\pc-chrono_pc_chrono_1.1.0.6_anglais_62824.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\pc-chrono_pc_chrono_1.1.0.6_anglais_62824.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PCI_STX_7_12_8_1794_W7.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\pdd-bin-win32-0.2.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\petst.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\petst.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\photoidcouleur0002.jpg.pgp:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\pioneer.(2013).fre.1cd.(6022665).zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PLE2773HDS-usermanual-f-RevB.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PMHOME_4100DL.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\PMHOME_4100DL.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PNG_stego.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PokerStarsInstallFR.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\PokerStarsInstallFR.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ProcessExplorer.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ProcessMonitor.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PSA Interface Checker.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\PSA Interface Checker.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\PSISetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\PSISetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\quittance-simple.rtf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\quittance.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\RECAPITULATIFANNUELDESFRAIS_20150119.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\ReflectDL.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\ReflectDL.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\revosetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\revosetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sdksetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\sdksetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\SecurityTaskManager_Setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\SecurityTaskManager_Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\SetupVirtualCloneDrive5480.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\SetupVirtualCloneDrive5480.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\setup_xca-1.2.0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\setup_xca-1.2.0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sfr-facture-1030987589.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sfr-facture-1058110941.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sfr-facture-1064883143.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sfr-facture-1078070028.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sfr-facture-1117764637.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Shortcuts.rar:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Shortcuts.rar:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\SolarWinds-TFTP-Server.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\sp1aexpress_fr.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\sp1aexpress_fr.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\spywareblastersetup55.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\spywareblastersetup55.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\startmenu.diagcab:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\stegano.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\steganographystudio.jar:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\StegExpose-master.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\StegoShare.jar:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\SystemExplorerPortable_700.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\techno-sylph_techno_sylph_1.02_anglais_266820.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Tftpd64-4.52-setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Tftpd64-4.52-setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\torbrowser-install-5.0.1_fr.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Eric\Downloads\torbrowser-install-5.0.1_fr.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\TrackFolderChanges.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\tsMuxeR_2.6.12.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\tsmuxer_tutoriel.doc:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\TV_multicast_SFR.m3u:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\tweakpng-1.4.6.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\typologie_doek_bro_fr.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\usbdeview.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\UserBenchMark.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\UserBenchMark.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\UTILISATION RIF 5000.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\uzcsetup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\uzcsetup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VideoContainerSwitcher.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCheck 1.5 Setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCheck 1.5 Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCheck Pro 1.5 Trial Setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCheck Pro 1.5 Trial Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCLIENT.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCLIENT.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VPNCLIENT_Lic_126348_.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VPNetMon_W7_Basic.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\VpnLifeguard.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\vpnwatcher_v2.0.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\wfc4setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\wfc4setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Win10Pcap-v10.2-5002 (1).msi:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Win10Pcap-v10.2-5002.msi:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Windows10Upgrade28084.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Windows10Upgrade28084.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Windows10Upgrade9252.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Windows10Upgrade9252.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\winhex.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\WinMerge-2.14.0-Setup.exe:$CmdTcID [130] AlternateDataStreams: C:\Users\Eric\Downloads\WinMerge-2.14.0-Setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\winscp576setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\winscp576setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Wireshark-win64-2.2.0.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Wireshark-win64-2.2.0.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\WoT_internet_install_eu.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\WoT_internet_install_eu.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\WoWP_internet_install_eu.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\WoWP_internet_install_eu.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\XStegSecret.Beta.v0.1.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\xvm-6.1.2.3.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\Yamb-2.1.0.0_beta2_setup.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Downloads\Yamb-2.1.0.0_beta2_setup.exe:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\YouTube Video Downloader.zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Downloads\[Guru3D]-DDUv14300].zip:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Documents\Aurosonic & Martire - Paradise - 2013 (WEB - FLAC - Lossless)-30891606.torrent:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Documents\calendartemplateL.ps:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Documents\ch9.gz:$CmdZnID [26] AlternateDataStreams: C:\Users\Eric\Documents\fnr.exe:$CmdTcID [64] AlternateDataStreams: C:\Users\Eric\Documents\fnr.exe:$CmdZnID [26] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\43440040.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\43440040.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) HKLM\...\.scr: => <==== ATTENTION ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0411dd.com -> 0411dd.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0511zfhl.com -> 0511zfhl.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0632qyw.com -> 0632qyw.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\1-2005-search.com -> www.1-2005-search.com Il y a 12599 plus de sites. ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2017-02-01 15:00 - 2018-08-04 07:51 - 000000753 _____ C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Eric\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\startupreg: Acrobat Assistant 8.0 => "C:\Program Files (x86)\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe" MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" MSCONFIG\startupreg: Cmaudio8788 => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cmicnfgp.dll,CMICtrlWnd MSCONFIG\startupreg: PMBVolumeWatcher => C:\Program Files (x86)\Sony\PlayMemories Home\PMBVolumeWatcher.exe /SysAutoRun HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "KeePass 2 PreLoad" HKU\S-1-5-21-2608685514-3513478324-1993146139-1001\...\StartupApproved\Run: => "pdiface" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe FirewallRules: [{9F484050-CE3A-4467-B158-3CCC2EF9F07D}] => (Allow) C:\Program Files\Windows Firewall Control\wfc.exe FirewallRules: [{6293E35E-F538-4939-A9E7-FADFED1964D0}] => (Allow) C:\program files\cpuid\cpu-z\cpuz.exe FirewallRules: [{D8FB519D-8101-4E0F-BB94-911240F1B65E}] => (Allow) C:\users\eric\zhpcleaner.exe FirewallRules: [{F45CE9EA-6AB3-43CF-8A36-01DBBC52C4E1}] => (Allow) C:\programdata\battle.net\agent\agent.6017\agent.exe FirewallRules: [{C78084A3-26D4-46A6-A222-3414CF338296}] => (Allow) C:\programdata\battle.net\agent\agent.6017\agent.exe FirewallRules: [{880F8FCE-FAD3-4D7D-BA79-643E6A03AAD9}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.8.0.exe FirewallRules: [{5B0B059C-03DC-42A7-8874-97F54E57AF10}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.8.0.exe FirewallRules: [{7EF72C2F-42E4-4C2C-9416-58F5E18B18B9}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\openvpn_v2_4.exe FirewallRules: [{65801825-75EC-4120-BDBA-54E9FC89CEF6}] => (Allow) C:\program files (x86)\sony\playmemories home\pmbdownloader.exe FirewallRules: [{FF4356A3-EF99-44A5-8DBF-DBAA077163D8}] => (Allow) C:\users\eric\appdata\local\whatsapp\update.exe FirewallRules: [{80B4856F-2CAC-49A3-8D2D-F62FD66D07FA}] => (Allow) C:\users\eric\appdata\local\whatsapp\app-0.2.8082\whatsapp.exe FirewallRules: [{F5A1D34B-1FD9-4347-A666-E0C61DF97933}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.7.0.exe FirewallRules: [{681B0B12-DF86-4F4D-9696-4EA13E90584A}] => (Allow) L:\systèmes\emsisoft emergency kit\bin64\a2emergencykit.exe FirewallRules: [{44E0E93F-8831-4CE1-A263-428F4CCED103}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe FirewallRules: [{2E037C93-6C7F-4C6B-8BBA-9B9A7AA82911}] => (Allow) C:\Program Files\uvnc bvba\UltraVNC\vncviewer.exe FirewallRules: [{A646BBAC-9B33-4C5D-80C7-0E079C60E246}] => (Allow) C:\users\eric\appdata\local\discord\app-0.0.300\discord.exe FirewallRules: [{F9E93157-7B60-4EFF-97B8-3DDF18A96E8A}] => (Allow) C:\users\eric\appdata\local\discord\update.exe FirewallRules: [{3050DE96-CA39-4407-82E1-A34B53C06561}] => (Allow) C:\users\eric\appdata\roaming\telegram desktop\telegram.exe FirewallRules: [{3A91C5EC-4013-4C5D-8CC3-584C3F67DD8F}] => (Allow) C:\program files (x86)\pascal coin\pascalcoinwallet.exe FirewallRules: [UDP Query User{29DFABC5-9C32-4650-9DA6-72318092A0E1}C:\program files (x86)\pascal coin\pascalcoinwallet.exe] => (Allow) C:\program files (x86)\pascal coin\pascalcoinwallet.exe FirewallRules: [TCP Query User{8060927D-C926-4212-8087-55A055282B05}C:\program files (x86)\pascal coin\pascalcoinwallet.exe] => (Allow) C:\program files (x86)\pascal coin\pascalcoinwallet.exe FirewallRules: [{7DF639B7-77AD-4E57-A716-AE801F600E89}] => (Allow) C:\programdata\battle.net\agent\agent.5985\agent.exe FirewallRules: [{AC35F790-3E43-43CD-A3B2-03EDBC63A416}] => (Allow) C:\programdata\battle.net\agent\agent.5985\agent.exe FirewallRules: [{428E9C38-FDCC-4A68-A53D-BC5AE3B3CFF1}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.6.0.exe FirewallRules: [{8044A9C1-61FF-4947-AD4E-D54943A61C9B}] => (Allow) C:\Program Files\Daedalus\cardano-node.exe FirewallRules: [{3650132B-65FA-4648-883F-D8EEC0EFA279}] => (Allow) C:\program files (x86)\iobit\iobit uninstaller\maspop.exe FirewallRules: [{9EE18C8D-2401-4783-8891-A4003CD94806}] => (Allow) C:\program files (x86)\iobit\iobit uninstaller\aupdate.exe FirewallRules: [{AB351B77-8AF5-452A-8DC9-9E43BC16C5DE}] => (Allow) C:\program files (x86)\iobit\iobit uninstaller\iobitliveupdate.exe FirewallRules: [{1753CF3A-2666-46DA-A1B9-500A97543493}] => (Allow) C:\program files (x86)\iobit\iobit uninstaller\iobituninstaler.exe FirewallRules: [{B91E72F6-AD1D-4B0C-A52F-177FD43CDAAF}] => (Allow) C:\program files (x86)\iobit\iobit uninstaller\uninstallpromote.exe FirewallRules: [{9A5FA259-A9D7-4274-9392-857C972BCBE2}] => (Allow) C:\program files\malwarebytes\anti-malware\mbam.exe FirewallRules: [{64DBA182-0214-429E-82C6-E82370D9D38B}] => (Allow) C:\program files\malwarebytes\anti-malware\mbamtray.exe FirewallRules: [{1FA528B0-90B8-4EE7-9FEE-EB5BD6DD318F}] => (Allow) C:\program files\malwarebytes\anti-malware\mbamservice.exe FirewallRules: [{D0C20A3F-EE1D-4A56-A372-43AD54F730D6}] => (Allow) C:\users\eric\desktop\frst64.exe FirewallRules: [{E7CF6963-0682-4331-9BCC-D951169C447D}] => (Allow) D:\frst\frst64.exe FirewallRules: [{F92882EE-9A53-451F-8411-9D3726E44FAE}] => (Allow) C:\users\eric\desktop\rkill64-26892.exe FirewallRules: [{D266EE2F-4C65-45EB-BF2D-E1E51BFA1943}] => (Allow) C:\program files (x86)\sony\playmemories home\pmbupdatenetworkservice.exe FirewallRules: [{97098493-1FBB-49CA-A21D-7758CFE33331}] => (Allow) C:\program files (x86)\sony\playmemories home\pmbannounce.exe FirewallRules: [{D69791FF-D545-4DB9-B68E-11980774F5C4}] => (Allow) C:\windows\system32\speech_onecore\common\speechmodeldownload.exe FirewallRules: [{DFBF10A0-718E-4415-A3FD-3539E0F7B113}] => (Allow) C:\program files\ethereum-wallet\ethereum wallet.exe FirewallRules: [{344A645C-46C5-49E0-85DD-7A2533746277}] => (Allow) C:\windows\explorer.exe FirewallRules: [{FD0E697B-5593-4974-B800-277298810F69}] => (Allow) C:\programdata\battle.net\agent\agent.5955\agent.exe FirewallRules: [{1E3359D6-4ED6-4BC7-8862-12F7E810063B}] => (Allow) C:\users\eric\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-auto-updater.exe FirewallRules: [{AC00E9F0-95A9-4305-8ADB-10213DF5E6F6}] => (Allow) C:\users\eric\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-daemon.exe FirewallRules: [{F7BE0470-5FBD-4C87-BA06-282F7D317AD6}] => (Allow) C:\users\eric\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-connect.exe FirewallRules: [{42252FCA-6DCD-43E1-8D12-86C3E281F919}] => (Allow) C:\users\eric\appdata\local\cloudstationbackup\cloudstation.app\bin\cloud-backup-ui.exe FirewallRules: [{9E6B1CFC-1432-4F27-9321-D4F176687152}] => (Allow) C:\windows\system32\waasmedic.exe FirewallRules: [{004B2773-4B66-4EE3-945B-FD9F204B64D9}] => (Allow) C:\program files\wireshark\vcredist_x64.exe FirewallRules: [{41AF90B2-7875-42FE-8281-AADC531F0F0C}] => (Allow) C:\windows\system32\nslookup.exe FirewallRules: [{C15EC14C-9A9F-437A-A2BD-301214E4F024}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.5.0.exe FirewallRules: [{CDA37E15-39DA-4F08-BBAB-9F9EEA6D08DC}] => (Allow) C:\programdata\battle.net\agent\agent.5913\agent.exe FirewallRules: [{6ED81B1A-B483-4AE2-BF31-670909D18550}] => (Allow) F:\affaires travail\finances\bitcoins-blockchain\winauth-3.5.1\winauth.exe FirewallRules: [{3441EDA8-AD98-44F0-97FC-B4EDE13D3F3E}] => (Allow) C:\program files\daedalus\cardano-node.exe FirewallRules: [{346F802C-70B4-4358-97DD-7A97DC8571E4}] => (Allow) C:\program files\daedalus\daedalus.exe FirewallRules: [{C0C51C66-FF1F-4D45-8ABF-94AA9A6D8303}] => (Allow) C:\Program Files\Daedalus\cardano-node.exe FirewallRules: [{643C3042-80A6-4581-9FFB-790E13444155}] => (Allow) C:\program files (x86)\microsoft office\office11\winword.exe FirewallRules: [{E72AA102-B854-44D2-A945-4E9E4B47864E}] => (Allow) C:\program files (x86)\aomei partition assistant standard edition 6.6\partassist.exe FirewallRules: [{237D632F-6FB3-476D-8CBB-D9BB49EC7C2F}] => (Allow) D:\malwarebytesarootkit\mbar\mbar.exe FirewallRules: [{2377F61E-55AB-4070-9F72-47B579DD6BB2}] => (Allow) C:\windows\system32\speech_onecore\common\speechruntime.exe FirewallRules: [{E2160E31-D75A-4222-9F71-4EF80E08444A}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{11DE3F49-3EEE-419D-A174-A80EA5362FF6}] => (Allow) C:\program files (x86)\garmin\express selfupdater\esu.exe FirewallRules: [{157D074C-56B3-4D86-BC93-187753486ACF}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_131\bin\javaw.exe FirewallRules: [{D8AD1D92-E9B8-49B5-A834-02E3BC753460}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_131\bin\javaw.exe FirewallRules: [{C5E35B14-BDE5-4C04-909B-6DF9366A5DC4}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_131\bin\javaw.exe FirewallRules: [{93A0593B-6E07-439D-A5CE-65B9DE2AC386}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_131\bin\javaw.exe FirewallRules: [{C2BA187B-A869-480C-BA53-C3AA54333E7F}] => (Allow) C:\Program Files (x86)\Java\jre1.8.0_131\bin\javaw.exe FirewallRules: [{EF7868FD-5ABD-4F7F-824D-5CE2F8B89332}] => (Allow) C:\users\eric\appdata\local\fluxsoftware\flux\flux.exe FirewallRules: [{5D032E4A-3956-4023-9973-3E5EABFFDE00}] => (Allow) C:\program files (x86)\garmin\express\express.exe FirewallRules: [{5305F56E-6785-42C9-B965-599476FCFEBD}] => (Allow) C:\program files (x86)\garmin\express tray\expresstray.exe FirewallRules: [{E50C4AE8-C10F-4ADC-A1E7-17445FFF0426}] => (Allow) C:\program files (x86)\garmin\device interaction service\garminservice.exe FirewallRules: [{4097EF7E-F8D2-49C0-81A5-5D1963CBA207}] => (Allow) C:\program files (x86)\garmin\basecamp\basecamp.exe FirewallRules: [{04B7E03E-E6FB-4A2A-9720-4AAC9FD278F1}] => (Allow) C:\program files (x86)\epson software\download navigator\epsdnlmw32.exe FirewallRules: [{E4B619EA-4206-4754-A3C1-E596C513900A}] => (Allow) C:\program files (x86)\epson software\download navigator\epsdnlmw64.exe FirewallRules: [{3B8CCD48-BE19-4DF4-BEA1-471890FCF61E}] => (Allow) C:\windows\splwow64.exe FirewallRules: [{DBA76F38-1474-47A5-A759-A2C87D973DC9}] => (Allow) C:\program files (x86)\epson software\download navigator\epsdnavi.exe FirewallRules: [{65B63DC5-31F1-4DC5-96BB-A5ED423D1340}] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{6819F369-FE29-4F23-A082-6D93A5E0C6DD}] => (Allow) C:\users\eric\downloads\ccsetup531.exe FirewallRules: [{7AEC083A-F540-4563-A68D-D1CF352F9DE0}] => (Allow) C:\program files\recuva\recuva64.exe FirewallRules: [{1E59E5F6-4107-47E3-A1DE-7275FB28E9A1}] => (Allow) C:\users\eric\downloads\rcsetup153.exe FirewallRules: [{6B8FF338-005C-4F8B-ABCA-5267458F35DC}] => (Allow) C:\program files\eset\eset nod32 antivirus\egui.exe FirewallRules: [{9E4BFEBE-9E06-4D16-8531-63726E027812}] => (Allow) C:\program files\bitdefender agent\productagentui.exe FirewallRules: [{1E9BD84C-6731-4310-927D-D868CB7AFE6D}] => (Allow) C:\program files\bitdefender agent\productagentservice.exe FirewallRules: [{030D249D-74CA-4A83-A94D-E738F3BC0800}] => (Allow) C:\program files (x86)\kaspersky lab\kaspersky software updater\kl_platf.exe FirewallRules: [{CD9CC0E3-8BAE-449E-9059-BB1CD0AA3236}] => (Allow) C:\users\eric\desktop\kss16.0.0.1344en_ru_de_fr_es_it_zh-hans_pl_tr_nl_cs_ko_id_pt_ar_vi_hi_zh-hant_fa_10837.exe FirewallRules: [{59B4B803-9A69-40AA-8E54-06D60B4C26D0}] => (Allow) C:\users\eric\desktop\adwcleaner_6.047 (1).exe FirewallRules: [{57D0408B-5615-4B9A-A998-AB5049D71F0C}] => (Allow) C:\users\eric\desktop\rkill64.exe FirewallRules: [{0BFBC20A-94B6-4D91-8C00-986E2AD64D03}] => (Allow) C:\users\eric\downloads\mbantirootkit\mbar\mbar.exe FirewallRules: [{CED1D6C0-F96B-423E-BD81-B4FA2F5B8F17}] => (Allow) C:\users\eric\desktop\roguekiller_portable64 (1).exe FirewallRules: [{C602ADAA-8110-45AA-85FB-AA0850091412}] => (Allow) C:\users\eric\downloads\hmpalert3.exe FirewallRules: [{B34D8DC4-A8C2-40C0-9241-59F3D678FF7A}] => (Allow) C:\program files (x86)\hitmanpro.alert\hmpalert.exe FirewallRules: [{465D3ED4-9C03-4742-81AF-BB7E91963625}] => (Allow) C:\users\eric\desktop\roguekillerx64.exe FirewallRules: [{C83185CD-C301-4CAD-8EC5-5A5CA44E052D}] => (Allow) C:\windows\system32\searchindexer.exe FirewallRules: [{7C6E2350-769B-4F71-94F0-9783DFFAF44E}] => (Allow) C:\program files (x86)\origin\origin.exe FirewallRules: [{4F889D74-53A8-465C-8ABD-F3336E67EA6A}] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\upc.exe FirewallRules: [{B0B5AB84-3450-4D38-9F7E-AE4893753A69}] => (Allow) C:\program files (x86)\steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{32E47FCD-5BDA-4A32-A8E7-E69ABC22352B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{588EBC84-B7A3-46C4-9628-82E1DE31B6E0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [UDP Query User{7DD26FEE-FF77-4684-A206-68407B01B230}C:\program files (x86)\immobilierloyer\rocherdigital\mysql\bin\mysqld.exe] => (Allow) C:\program files (x86)\immobilierloyer\rocherdigital\mysql\bin\mysqld.exe FirewallRules: [TCP Query User{182A5247-91E0-4982-B9F9-EE06E48293BF}C:\program files (x86)\immobilierloyer\rocherdigital\mysql\bin\mysqld.exe] => (Allow) C:\program files (x86)\immobilierloyer\rocherdigital\mysql\bin\mysqld.exe FirewallRules: [{F34A72F6-3078-442E-98A8-6B59AFE759D7}] => (Allow) C:\program files (x86)\texstudio\texstudio.exe FirewallRules: [{CD5652FE-626A-4017-9761-AF2501112EBC}] => (Allow) C:\users\eric\desktop\kvrt (1).exe FirewallRules: [{EFCB1589-66A5-4FD8-A67F-A2773E577864}] => (Allow) C:\windows\system32\unp\unpcampaignmanager.exe FirewallRules: [{9672C86D-7667-44BE-9439-8E0F067902E9}] => (Allow) C:\users\eric\downloads\keyscrambler_setup (3).exe FirewallRules: [{35A18B4B-A3A5-480D-8029-6A7C4258CE73}] => (Allow) C:\users\eric\downloads\keyscrambler_setup (1).exe FirewallRules: [{E0620039-B30F-44BC-856E-2AD56EC5C79F}] => (Allow) C:\users\eric\appdata\local\gaijin\program files (x86)\netagent\gjagent.exe FirewallRules: [{04887FE7-A208-4A14-990B-DCB82C5148F3}] => (Allow) C:\program files\eve-ng\plink.exe FirewallRules: [UDP Query User{A69D7FEE-2E0D-4701-87D1-11176B5FEBCA}C:\program files (x86)\macromedia\fireworks mx\fireworks.exe] => (Allow) C:\program files (x86)\macromedia\fireworks mx\fireworks.exe FirewallRules: [TCP Query User{AF424C6B-27BA-4C11-B6B9-6047571A9BA8}C:\program files (x86)\macromedia\fireworks mx\fireworks.exe] => (Allow) C:\program files (x86)\macromedia\fireworks mx\fireworks.exe FirewallRules: [{E9797A9B-627E-4FF5-ABEB-8BA879F1870E}] => (Allow) C:\program files\eve-ng\putty.exe FirewallRules: [{9849A08C-DFF4-4936-BC5D-0FF47AC295A1}] => (Allow) C:\program files (x86)\winscp\winscp.exe FirewallRules: [{30209710-56D4-4BD8-9066-40BDFF5813C4}] => (Allow) C:\users\eric\desktop\zhpcleaner (1).exe FirewallRules: [{12EB1B82-8D6E-47A5-A0E4-7D71611ACD82}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{EE14C50A-E2EB-4A9F-B4AD-04DC8F122F76}] => (Allow) C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{684D7E1A-349D-4CF0-BE28-DD9C20ECEB18}] => (Allow) C:\windows\twain_32\escndv\escfg.exe FirewallRules: [{795BA843-94C8-4174-85CF-7501EDBAE0CE}] => (Allow) C:\windows\twain_32\escndv\escndv.exe FirewallRules: [UDP Query User{74F49C13-25E9-4F67-BD12-5ACCD5F38DF1}C:\program files\tftpd64\tftpd64.exe] => (Block) C:\program files\tftpd64\tftpd64.exe FirewallRules: [TCP Query User{0FF7B97B-0B6A-40EB-965D-1ADD4EDF1662}C:\program files\tftpd64\tftpd64.exe] => (Block) C:\program files\tftpd64\tftpd64.exe FirewallRules: [{9F63EE0F-767E-41DD-823E-93AF1A77EE85}] => (Allow) C:\windows\system32\mpsigstub.exe FirewallRules: [{89F0C0DB-1EA7-45AA-86AB-CB6B8BA6C145}] => (Allow) C:\users\eric\desktop\putty .exe FirewallRules: [{1AE53535-261E-4E73-A24A-662028593600}] => (Allow) C:\programdata\battle.net\agent\agent.5485\agent.exe FirewallRules: [{05F49213-166C-4FA3-B58F-48FDC272CB1B}] => (Allow) C:\programdata\battle.net\agent\agent.5296\agent.exe FirewallRules: [{200E4286-7096-4CF8-8AAE-3FA82D102FC2}] => (Allow) C:\program files (x86)\libreoffice 5\program\soffice.bin FirewallRules: [{EABD3C1C-0391-4141-A715-8A4C797AC9FE}] => (Allow) C:\program files (x86)\microsoft office\office11\excel.exe FirewallRules: [{2EB4BF6F-F097-4E4E-929F-D6D7AE489D50}] => (Allow) C:\program files\windows firewall control\wfc.exe FirewallRules: [{E87AC56E-784A-4287-8B68-83D1DE0A3268}] => (Allow) C:\windows\systemapps\microsoft.microsoftedge_8wekyb3d8bbwe\microsoftedge.exe FirewallRules: [{5F114AA0-61B2-4D85-A52D-C0C3504DBFB9}] => (Allow) C:\windows\system32\browser_broker.exe FirewallRules: [{A6423EED-DC1A-489B-8E25-C9654D085028}] => (Allow) C:\windows\systemapps\microsoft.microsoftedge_8wekyb3d8bbwe\microsoftedgecp.exe FirewallRules: [{342E9783-5E3F-4435-A7E7-483872EB830A}] => (Allow) C:\program files\wireshark\wireshark.exe FirewallRules: [{348E0ED0-58DF-4DE4-BFA7-F9E5EE0DE105}] => (Allow) C:\users\eric\appdata\roaming\zhp\zhpcleaner.exe FirewallRules: [{25871265-6749-4454-B901-E9CA6C84B1DA}] => (Allow) C:\program files (x86)\steam\steamapps\common\grid autosport\gridautosport_avx.exe FirewallRules: [{AFD01EE4-7072-4382-93A0-4F7C6963054D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GRID Autosport\GRIDAutosport.exe FirewallRules: [{8ADEDEA7-8ED0-48C0-8014-B9FB133357B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\GRID Autosport\GRIDAutosport.exe FirewallRules: [{B15ED411-C336-4014-B8A2-E2A12B99B784}] => (Allow) C:\program files (x86)\steam\steam.exe FirewallRules: [{EAB737CC-1227-4EC6-A6E9-3C4F20926ED3}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{DA6E2AE2-1850-4364-ACE8-31E38E34A5E9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{93E6B001-8252-40B8-9E1C-2C59683E77F8}] => (Allow) C:\users\eric\downloads\gfwlivesetup.exe FirewallRules: [{1FBCACB8-F63E-4B4B-AFA4-487F101ACF8B}] => (Allow) C:\program files (x86)\secure folders\securefolders.exe FirewallRules: [{C0C08989-5629-4EE0-BA84-A0B212EF35A4}] => (Allow) F:\logiciels pc\setupsecurefolders.exe FirewallRules: [{5A84DFF1-CCBB-4F45-885E-3F6F0F03D762}] => (Allow) C:\users\eric\desktop\kvrt.exe FirewallRules: [{5C644708-6ABD-4026-A550-5410C70352D0}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\vcredist_x86.exe FirewallRules: [{E8733AA7-732A-4B3A-A66F-1F1B1367289C}] => (Allow) K:\systèmes\emsisoft emergency kit\bin64\a2emergencykit.exe FirewallRules: [{3BEF720F-DB78-47D3-BE94-C3081E423BDF}] => (Allow) C:\windows\system32\mrt.exe FirewallRules: [{C77885AB-737E-4C75-A5B1-B849206E56E0}] => (Allow) F:\logiciels pc\dnsbench.exe FirewallRules: [{CCB39D77-3568-447D-9738-D3D534CEFDD9}] => (Allow) C:\Program Files (x86)\BitTorrent\bittorrent.exe FirewallRules: [{CC5C6CBB-3341-44C7-B316-FE44CCDC2C0E}] => (Allow) C:\Users\Eric\Downloads\ProcessExplorer (1)\procexp64.exe FirewallRules: [{26FCCE6F-D47C-4811-B588-F3D5FA33842B}] => (Allow) C:\program files (x86)\bittorrent\bittorrent.exe FirewallRules: [{7B099887-881F-4E6D-ABDC-C46925000FAF}] => (Allow) C:\program files (x86)\asus\ai suite iii\ez update\ezupdt.exe FirewallRules: [{5CA90163-CA4C-484E-98E7-B17DEC118E67}] => (Allow) F:\logiciels pc\mise a jour windows 10\disable windows 10 tracking\stx_8_1_8_1823_win10\disablewintracking.exe FirewallRules: [{0E2AFD97-4F8F-4F17-918B-0A64C72A1FF9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1D342383-1EF3-4192-B460-B5B6718DD4D5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{532DF709-6769-4068-93B0-5FBD6AD0BD04}] => (Allow) C:\program files\speccy\speccy64.exe FirewallRules: [{DD776DC7-1563-4F7E-8BBB-A8A0927E68F7}] => (Allow) C:\program files\voodooshield\voodooshieldservice.exe FirewallRules: [{83B9350E-32C0-4FB2-9AC9-07AAC4410073}] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe FirewallRules: [{98CCD267-DAA1-4DB3-8284-9AE8C01B0FB2}] => (Allow) C:\program files\voodooshield\voodooshield.exe FirewallRules: [{D9E2F540-756C-4DF3-BBB3-6BCFECA80770}] => (Allow) C:\program files\eset\eset nod32 antivirus\ekrn.exe FirewallRules: [{6853F90B-8E98-4B21-93FA-29070BEBE088}] => (Allow) C:\windows\system32\werfault.exe FirewallRules: [{A6CAD281-C211-45C3-B1B1-294AF4D64B31}] => (Allow) C:\windows\system32\wermgr.exe FirewallRules: [{49011196-E51B-4E5E-B3F2-8021BFA63808}] => (Allow) C:\windows\system32\wifitask.exe FirewallRules: [{B7B05F83-5749-4AF4-97E0-2490BC32241D}] => (Allow) C:\program files (x86)\devolo\dlan\devolonetsvc.exe FirewallRules: [{9EB97841-71BB-4BF6-97C8-B77EDBC1BE43}] => (Allow) C:\windows\system32\smartscreen.exe FirewallRules: [{7DAB87DF-5F33-4C75-B6CC-44F3AAD50B2F}] => (Allow) C:\users\eric\desktop\zhpcleaner.exe FirewallRules: [{7AABA3BC-9AE1-4254-8D21-AF935EF72495}] => (Allow) C:\program files (x86)\mozilla thunderbird\thunderbird.exe FirewallRules: [{3AD3DC20-5E0D-4032-80CD-1CE131C98854}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\torguarddesktopqt.exe FirewallRules: [{3B040745-7FFC-426B-835E-625157DDA19D}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\torguarddesktopqt.exe FirewallRules: [{37BC0BCE-C244-4321-B927-7438554321EE}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\torguarddesktopqt.exe FirewallRules: [{C9951B42-915D-47DE-AF16-F834F6D39CE7}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\openvpn.exe FirewallRules: [{53ED4761-DE45-4F9E-96C0-911B9F835525}] => (Allow) C:\games\world_of_tanks\wotlauncher.exe FirewallRules: [{B6C5A8D6-3944-4848-888C-8111E918E943}] => (Allow) C:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{6966BCC1-4167-459B-9B71-B7C291936A5F}] => (Allow) C:\program files (x86)\google\update\googleupdate.exe FirewallRules: [{4137D6DC-EDA2-40DF-A28E-516B623421D1}] => (Allow) C:\windows\system32\dxdiag.exe FirewallRules: [{36F41858-5972-4173-87FC-29DEFFFDF8BC}] => (Allow) C:\users\eric\downloads\[guru3d]-dduv14300]\display driver uninstaller.exe FirewallRules: [{453F6B7C-8A98-4E50-8479-2609DE20CD40}] => (Allow) C:\windows\system32\rundll32.exe FirewallRules: [{DF1DE041-5E93-40D6-A456-714C11632732}] => (Allow) C:\windows\system32\sihclient.exe FirewallRules: [{0D92A04F-36D5-47BE-9169-88F5A308381F}] => (Allow) C:\users\eric\downloads\autoruns\autoruns64.exe FirewallRules: [{D27637E6-4C3E-4CC1-8EF9-CC7DA3893F98}] => (Allow) C:\windows\system32\msfeedssync.exe FirewallRules: [{E9713DFF-A55C-493E-9814-AEF7306B3D9E}] => (Allow) C:\users\eric\downloads\ddu\display driver uninstaller.exe FirewallRules: [{112FD37A-B35D-41D6-84FF-D94951FA7401}] => (Allow) C:\nvidia\displaydriver\368.69\win10_64\international\setup.exe FirewallRules: [{3A8F3C56-96EB-400E-8C38-B0E476A39087}] => (Allow) powershell.exe FirewallRules: [{CD1EC007-2A8E-43DB-9E78-DBE57FC15195}] => (Allow) C:\program files\nvidia corporation\installer2\installercore\setup.exe FirewallRules: [{93A5E391-85AE-41DE-B1A1-7E3112A51E55}] => (Allow) C:\windows\syswow64\rundll32.exe FirewallRules: [{89B36F2C-E447-425F-88B2-C412E036182D}] => (Block) C:\program files (x86)\adobe\acrobat 11.0\acrobat\acrobat.exe FirewallRules: [{8267E0B4-06C8-4EA0-9417-319829B7053C}] => (Allow) C:\windows\system32\compattelrunner.exe FirewallRules: [{19C4CE82-A771-461F-BAE6-A0D97AE214D0}] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{5686871E-6FF1-4803-B674-BE9F923E143C}] => (Allow) C:\games\world_of_tanks\res\cef\cef_browser_process.exe FirewallRules: [{4451466B-C6FD-41ED-AAF0-5BCB212C18A6}] => (Allow) C:\program files\mediainfo\mediainfo.exe FirewallRules: [{3EF74A11-2EC6-4412-B8E9-4CE66418660F}] => (Allow) C:\users\eric\downloads\rootme\ffdec_10.0.0_setup.exe FirewallRules: [{C28584B3-59B2-4DF6-ADAE-44166867EFB6}] => (Block) C:\windows\system32\installagentuserbroker.exe FirewallRules: [{DB98CFC8-8F03-492F-A509-1682B32334DD}] => (Block) C:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe FirewallRules: [{C62F7418-3F6A-4AF0-B747-8AD804D7B153}] => (Allow) C:\program files\db browser for sqlite\db browser for sqlite.exe FirewallRules: [{DEB2799C-34F4-43A7-9EBC-E34998BFC57B}] => (Block) C:\windows\microsoft.net\framework64\v4.0.30319\mscorsvw.exe FirewallRules: [{47D0DD9A-1940-4A0A-A1E0-17E2B1F6C811}] => (Allow) C:\program files (x86)\vmware\vmware workstation\vmware.exe FirewallRules: [{32493DBD-AC93-4452-8839-BE6A68C5CAD6}] => (Allow) C:\windows\syswow64\vmnat.exe FirewallRules: [{4D308DC4-029F-44FE-9CB3-19394757FBAF}] => (Allow) C:\program files (x86)\vmware\vmware workstation\vmnetcfg.exe FirewallRules: [{D713DB25-143F-4B69-AC11-4AD0D350F8A4}] => (Allow) C:\windows\system32\taskhostw.exe FirewallRules: [{5C512154-6036-4652-8DA3-B0EBC7F37E65}] => (Allow) C:\windows\system32\spool\drivers\x64\3\e_yarnnxe.exe FirewallRules: [{C23BBC83-61D4-4F7D-B5DD-BAC52619F950}] => (Allow) C:\program files (x86)\telerik\justdecompile\libraries\justdecompile.exe FirewallRules: [TCP Query User{0073670C-6DD2-446B-B7AE-F4E4497669F0}C:\program files (x86)\ida 6.8\idaq64.exe] => (Allow) C:\program files (x86)\ida 6.8\idaq64.exe FirewallRules: [UDP Query User{5DAFF96E-78A6-42ED-B716-186B8DF5ADCD}C:\program files (x86)\ida 6.8\idaq64.exe] => (Allow) C:\program files (x86)\ida 6.8\idaq64.exe FirewallRules: [{10B26F88-8AC3-4C35-A7C1-19848E03EF95}] => (Allow) C:\program files (x86)\ida 6.8\idaq64.exe FirewallRules: [{6F0F4B42-84BD-4758-9785-C28A57A6C805}] => (Allow) C:\program files\notepad++\updater\gup.exe FirewallRules: [{0F396058-8BD7-418F-9793-6C3DEC55F4A8}] => (Allow) C:\windows\system32\runtimebroker.exe FirewallRules: [{EA745D63-31D4-423A-AD4B-C7BD149D34BC}] => (Block) C:\program files (x86)\macromedia\fireworks mx\fireworks.exe FirewallRules: [{C5180749-898B-45CD-A21C-A0E844DA3AFD}] => (Allow) C:\program files\daemon tools lite\dtlite.exe FirewallRules: [{8B074F47-A700-44D9-9400-95E5A15C520D}] => (Allow) C:\windows\syswow64\werfault.exe FirewallRules: [{8A361C05-81CF-419A-AD4E-9F006237B9CA}] => (Allow) C:\program files (x86)\garmin\mapinstall\mapinstall.exe FirewallRules: [{A5C84640-CC39-494B-AD98-06C7C5F447C2}] => (Allow) C:\windows\system32\apphostregistrationverifier.exe FirewallRules: [{446CAD43-E609-407A-95EF-2C4390D2571D}] => (Allow) C:\program files (x86)\msi afterburner\msiafterburner.exe FirewallRules: [{287B3DA4-7FFE-4188-8900-079AC62CE5FC}] => (Allow) C:\program files\windows defender\mpcmdrun.exe FirewallRules: [{FE8A95BA-8BC9-43C2-9114-B42B11210670}] => (Allow) C:\program files\ccleaner\ccleaner64.exe FirewallRules: [{47117834-9C73-468D-BBB5-477B75212CE0}] => (Allow) C:\windows\systemapps\microsoft.windows.cortana_cw5n1h2txyewy\searchui.exe FirewallRules: [{6323483E-5F2C-43FD-8A10-B43EEACC580E}] => (Allow) C:\program files (x86)\asus\ai suite iii\push notice\pushnotify_pcctrl.exe FirewallRules: [{228DEFDB-686D-4F34-B546-98A23EB19573}] => (Allow) C:\windows\immersivecontrolpanel\systemsettings.exe FirewallRules: [{1ED9169F-307F-426E-8CB1-0C880ABDF41C}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.0.0.exe FirewallRules: [{27A23E61-49A9-43AA-9AC6-057B75EEC80C}] => (Allow) C:\windows\softwaredistribution\download\install\setup.exe FirewallRules: [{99817DA4-D852-43D1-A776-8CE604999C9E}] => (Allow) C:\program files (x86)\keyscrambler\keyscrambler.exe FirewallRules: [{AC982718-FED1-4187-9858-3C15CEBCE19A}] => (Allow) C:\program files (x86)\quark 6.6.0 beta 6\quark.exe FirewallRules: [{3A32084D-477A-48C5-BD72-C6CEA9C7B69E}] => (Allow) C:\windows\system32\wbem\wmiprvse.exe FirewallRules: [{3F82D92E-D3FC-4CE6-A40C-957CB0E2D3DD}] => (Allow) C:\program files\internet explorer\iexplore.exe FirewallRules: [{0C2D9FF8-44DF-4F0D-8745-647B2675BD01}] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe FirewallRules: [TCP Query User{EC0EFCB9-B58A-4A39-907A-3A52D88AC4C0}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe FirewallRules: [UDP Query User{EEEB46AA-11F8-463F-A2B5-1998D08B1C86}C:\program files (x86)\mirc\mirc.exe] => (Allow) C:\program files (x86)\mirc\mirc.exe FirewallRules: [{D26BA8AE-A6B2-44EA-B3A5-E8DCD8DD9172}] => (Allow) C:\program files (x86)\mirc\mirc.exe FirewallRules: [{2C6FCE6E-4683-4499-B93A-BA1F81C8635C}] => (Allow) C:\program files\windows defender\msmpeng.exe FirewallRules: [TCP Query User{87E1A007-B937-4DCD-ACD1-3344A07A3B42}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe FirewallRules: [UDP Query User{80E6B5A3-7CE9-4BF8-90F2-F8FA0863FC9D}C:\program files (x86)\deluge\deluge.exe] => (Allow) C:\program files (x86)\deluge\deluge.exe FirewallRules: [{BCD2B19F-D281-4468-9B53-EB8A2EDCA672}] => (Allow) C:\program files (x86)\deluge\deluge.exe FirewallRules: [{2C8C2525-116F-49DF-8CF8-BA145544DA54}] => (Allow) C:\program files (x86)\deluge\deluge.exe FirewallRules: [{68C7A808-AE4D-4F7C-968C-AD26EAB834CE}] => (Allow) C:\program files\daemon tools lite\dtagent.exe FirewallRules: [{0DEBFD3A-1FF3-4E11-9C96-6493D8BB39FC}] => (Allow) C:\users\eric\downloads\newbiecontest\forensics\setup.exe FirewallRules: [{FF9A158E-E282-4F3B-A7D7-4C86E1DFD8A5}] => (Allow) C:\windows\microsoft.net\framework64\v4.0.30319\dfsvc.exe FirewallRules: [{C97267E8-3F35-4D79-AD27-131E1849EA58}] => (Allow) C:\program files\vandyke software\securecrt\securecrt.exe FirewallRules: [TCP Query User{1FC410DA-288C-4910-9D23-634B6EC9944B}C:\program files (x86)\utorrent\utorrent.exe] => (Block) C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [UDP Query User{DE4246E1-0FCC-48DA-B08E-6F2EC74FFD7F}C:\program files (x86)\utorrent\utorrent.exe] => (Block) C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [{E1652A8C-82A0-4FE3-8153-19C349AA50B7}] => (Allow) C:\program files (x86)\utorrent\utorrent.exe FirewallRules: [{7876DAE1-6A85-43D2-8918-B4139589A3D9}] => (Allow) C:\program files\java\jdk1.8.0_144\jre.exe FirewallRules: [{2F645C65-B9A6-460F-AF0F-3BE7AF74E570}] => (Allow) C:\users\eric\eclipse\java-oxygen\eclipse\eclipse.exe FirewallRules: [{B4E460C4-3930-4E62-8F5D-269CCFAF7AC2}] => (Allow) C:\users\eric\eclipse\javascript-oxygen\eclipse\eclipse.exe FirewallRules: [{983A0E71-A270-4FC5-B5FB-B8EBF940D4F1}] => (Allow) C:\program files\java\jre1.8.0_144\bin\javaw.exe FirewallRules: [{9DF446FF-4221-47FA-9EE7-D48811546144}] => (Allow) C:\program files (x86)\music nfo builder\nfo.exe FirewallRules: [{FC147B9C-FB1A-4590-883E-A8F47528C5EC}] => (Allow) C:\program files\java\jdk1.8.0_144\jre\bin\java.exe FirewallRules: [{466CC3D0-5D5D-4406-87F5-0FC9CC7A99D3}] => (Allow) C:\program files\netbeans 8.2\bin\netbeans64.exe FirewallRules: [{F2C6C978-DD9D-4591-8928-BFCAE6F32EE6}] => (Allow) C:\program files (x86)\k-lite codec pack\tools\codectweaktool.exe FirewallRules: [{F5DACF90-B5B8-4B14-950F-06D5311E63C4}] => (Allow) C:\program files (x86)\digiarty\winx_dvd_ripper_platinum\winx_dvd_ripper_platinum.exe FirewallRules: [{01D584F0-B94E-49E8-9304-44EC34E80172}] => (Allow) C:\program files (x86)\filezilla ftp client\filezilla.exe FirewallRules: [{BA80C469-0DD6-42E9-B1C2-319B9BA2F9D2}] => (Allow) C:\program files (x86)\ida 6.8\idaq.exe FirewallRules: [{0854AB69-73CF-4BE3-963A-3000654FB7F8}] => (Allow) C:\program files\vs revo group\revo uninstaller\revounin.exe FirewallRules: [{616DDE7B-9B90-4744-856A-BC310BE8B211}] => (Allow) C:\Program Files (x86)\Universal Media Server\UMS.exe FirewallRules: [{E540D532-11D4-4403-BFFB-E3CD9188C3BC}] => (Allow) C:\Program Files (x86)\Universal Media Server\UMS.exe FirewallRules: [{4D5F9070-100A-46FF-B04D-CCB678AF3D81}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe FirewallRules: [{BF368A1D-88B5-474D-8688-F446173D35C1}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe FirewallRules: [{7BFC6DCB-B829-40D3-9332-2E4DA0D26E0D}] => (Allow) C:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe FirewallRules: [{8E6A1559-CE9F-4064-9886-759074D8BEA7}] => (Allow) C:\program files (x86)\spywareblaster\spywareblaster.exe FirewallRules: [{9EC19668-35F0-4330-B9CC-32B86722D340}] => (Allow) C:\users\eric\desktop\f-secureonlinescanner.exe FirewallRules: [{9D94A4F5-1202-40ED-BDAF-BCC340677D6B}] => (Allow) C:\program files (x86)\privazer\privazer.exe FirewallRules: [{FF4E4ED1-4E7D-415D-8597-84C5C6097C3B}] => (Allow) C:\program files\daemon tools lite\discsoftbusservicelite.exe FirewallRules: [{2AA6E586-055E-4D56-8D80-E073771720EB}] => (Allow) C:\program files (x86)\origin\originthinsetupinternal.exe FirewallRules: [{2FCE12D4-84DF-4307-85E9-2044C78EFAF8}] => (Allow) C:\users\eric\downloads\reflectdlhf.exe FirewallRules: [{4094F542-E74A-40F5-ACB0-37AC89D91E26}] => (Allow) C:\windows\system32\msiexec.exe FirewallRules: [{83B24D68-8B69-4AA1-96EF-6A856F0F6274}] => (Allow) C:\program files\macrium\reflect\reflectbin.exe FirewallRules: [{A2F2F818-130E-4904-A07B-5C3924C987BF}] => (Allow) C:\program files (x86)\mozilla maintenance service\maintenanceservice.exe FirewallRules: [{E114B4C2-3F51-4C31-8493-0549A621070E}] => (Allow) C:\program files (x86)\mozilla maintenance service\update\updater.exe FirewallRules: [{C98949F0-948A-4AAC-99E5-3D8EE329CFE1}] => (Block) C:\program files (x86)\mozilla firefox\pingsender.exe FirewallRules: [{1203C2B7-2F1D-446D-896A-5032D6D614C2}] => (Allow) C:\program files\process hacker 2\processhacker.exe FirewallRules: [{F3200DDB-A524-463E-8D61-D51CD8BBDCF8}] => (Allow) C:\program files\oracle\virtualbox\virtualbox.exe FirewallRules: [{DEA606BC-82E5-45DB-8656-F9CAC98B27C8}] => (Allow) C:\program files (x86)\keepass password safe 2\keepass.exe FirewallRules: [{842731D7-50DA-44D7-BE39-7774814C8A82}] => (Allow) C:\program files (x86)\origin\originclientservice.exe FirewallRules: [{17D40534-BA5C-48A8-8ADD-58463E830D4D}] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\watch_dogs\bin\watch_dogs.exe FirewallRules: [{758BF7DF-F22A-42D6-AEB9-048807C6AA55}] => (Allow) C:\program files (x86)\origin\originwebhelperservice.exe FirewallRules: [{D2F4CAC2-11B1-4176-AA09-14F57C02376D}] => (Allow) C:\users\eric\appdata\local\warthunder\gaijin_downloader.exe FirewallRules: [{47AFE0AD-D5F8-4A3F-A35E-57EC741BDF58}] => (Allow) C:\program files (x86)\pokerstars.fr\pokerstarsupdate.exe FirewallRules: [{64B0B043-E58B-4163-B61E-6689B8148290}] => (Allow) C:\program files (x86)\pokerstars.fr\pokerstars.exe FirewallRules: [{92379819-AE27-413A-9DA0-27D03DD9C435}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe FirewallRules: [{5CC21CCD-CF00-45D3-A735-58211383B0B9}] => (Allow) C:\Program Files (x86)\EPSON Software\ECPrinterSetup\ENPApp.exe FirewallRules: [{EAA6BD0D-DC8F-4E9C-84C3-76FE465AC43C}] => (Allow) C:\program files (x86)\epson software\ecprintersetup\enpapp.exe FirewallRules: [{E69A2C90-5758-4573-8F6F-571CEAAB9FA1}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\system\rads_user_kernel.exe FirewallRules: [{8F7B21F5-9967-4B05-9A2C-DFB025F25594}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\lol_launcher\releases\0.0.1.57\deploy\lollauncher.exe FirewallRules: [{4A683489-583C-41D9-BBCD-75526C0022EC}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.97\deploy\lolpatcher.exe FirewallRules: [{417EF4E9-4C9D-45A3-BFFC-390BD2761E3F}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.97\deploy\lolpatcherux.exe FirewallRules: [{0FF62E64-461C-45D0-B81A-903151D6E2D2}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\league_client\releases\0.0.0.98\deploy\leagueclient.exe FirewallRules: [{2F75B0A3-B5E4-4EBC-A930-E74416EAFFF0}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\league_client\releases\0.0.0.98\deploy\leagueclientux.exe FirewallRules: [{D0F1DED7-6858-432A-A6DE-BE67470E389B}] => (Allow) C:\Program Files\Bitdefender Home Scanner\hvasrv.exe FirewallRules: [{C3ACA903-085A-4893-ACEE-53829D7FAE7F}] => (Allow) C:\program files\bitdefender home scanner\hvasrv.exe FirewallRules: [{B6FAFC25-6637-4552-8565-04092306C92B}] => (Allow) C:\program files\bitdefender home scanner\hvaui.exe FirewallRules: [{74A94CDD-E2EE-4B55-9696-AB757182CDF6}] => (Allow) C:\program files\bitdefender home scanner\antispam32\nmap.exe FirewallRules: [{61988497-9D97-4E56-9660-E93870FF0E66}] => (Allow) C:\program files\bitdefender home scanner\antispam32\scan_network.exe FirewallRules: [{0E21F5A7-1C6A-46FC-A3EE-34851E572E75}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\solutions\lol_game_client_sln\releases\0.0.1.191\deploy\league of legends.exe FirewallRules: [{5806D9AC-3D01-49B9-89B7-32CAAB3AB65E}] => (Allow) C:\Program Files\Java\jre1.8.0_144\bin\javaw.exe FirewallRules: [{085966E1-1091-4B17-95E2-B9E49A630942}] => (Allow) C:\Program Files (x86)\Universal Media Server\UMS.exe FirewallRules: [{1DB14356-4923-4AED-BF37-ED4E008CFBA6}] => (Allow) C:\users\eric\downloads\display driver uninstaller.exe FirewallRules: [{135DE047-CC54-4B6D-A500-13ABE9790C5A}] => (Allow) C:\program files (x86)\sophos\sophos virus removal tool\svrtgui.exe FirewallRules: [{9265C6F1-2C46-483D-B3A8-5123A9EC5594}] => (Allow) C:\program files (x86)\sophos\sophos virus removal tool\svrtservice.exe FirewallRules: [{DA526B9B-F49A-4D01-B151-F267DC24F070}] => (Allow) C:\users\eric\desktop\roguekiller_portable64.exe FirewallRules: [{24C7E742-93C9-42E8-B418-5F624CF45FFE}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.3.1.exe FirewallRules: [{3FD81A9C-19F2-4EB0-8B55-645A30C0F858}] => (Allow) C:\program files (x86)\vpnetwork llc\torguard\openvpn_v2_3.exe FirewallRules: [{16EB2536-2A28-4A0D-B05A-7E7A27EB10F6}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\solutions\lol_game_client_sln\releases\0.0.1.192\deploy\league of legends.exe FirewallRules: [{DA597550-6751-4139-ABC7-1DBDD0628371}] => (Allow) C:\users\eric\desktop\rkill64-7393.exe FirewallRules: [{6DF231DE-6722-4F86-917A-E7C6F228C449}] => (Allow) C:\program files\sanitycheck\sanity.exe FirewallRules: [TCP Query User{482F47C0-4EB3-4C83-8A0B-244FB3A0927D}C:\program files (x86)\gnupg\bin\dirmngr.exe] => (Allow) C:\program files (x86)\gnupg\bin\dirmngr.exe FirewallRules: [UDP Query User{3C45F8B7-1CB8-46C9-8942-D68D999927E0}C:\program files (x86)\gnupg\bin\dirmngr.exe] => (Allow) C:\program files (x86)\gnupg\bin\dirmngr.exe FirewallRules: [{E531571C-52CD-4190-8B67-7E730C1A7735}] => (Allow) C:\program files (x86)\gnupg\bin\dirmngr.exe FirewallRules: [{EA87BB49-F862-451B-AAAC-59C4A80D50C0}] => (Block) C:\windows\system32\mrt-kb890830.exe FirewallRules: [{1A14ACB7-0891-464F-9878-BF7F01371DFC}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\league_client\releases\0.0.0.100\deploy\leagueclient.exe FirewallRules: [{EA4BADC3-FD06-4011-9206-E6914E3429F4}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\league_client\releases\0.0.0.100\deploy\leagueclientux.exe FirewallRules: [{529185CA-BD1B-46E1-A099-115C6F9C1840}] => (Allow) C:\program files (x86)\common files\steam\steamservice.exe FirewallRules: [{765B1540-DECB-4BC1-B30C-63B4B5A073EB}] => (Allow) C:\program files (x86)\fedora media writer\mediawriter.exe FirewallRules: [{D00EA88A-9C53-4A0C-9BAF-755855F552DE}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\league_client\releases\0.0.0.103\deploy\leagueclient.exe FirewallRules: [{5F11FC56-884F-44E6-9DBF-01ACAF8786C0}] => (Allow) C:\program files (x86)\riot games\league of legends\rads\projects\league_client\releases\0.0.0.103\deploy\leagueclientux.exe FirewallRules: [{8A96CA2D-9871-4816-BE78-D3686A6FCFC7}] => (Allow) C:\users\eric\downloads\autoruns\autorunsc64.exe FirewallRules: [{E3724AB8-2B9D-4439-8B8C-9E07AA4EF82B}] => (Allow) K:\systèmes\misc\rufus-2.17.exe FirewallRules: [{5DAFBCE1-40AC-4193-A8F1-B4463D8361DF}] => (Allow) C:\program files\uvnc bvba\ultravnc\vncviewer.exe FirewallRules: [{73A3D85E-F58E-45A4-B11F-055380B3C164}] => (Allow) C:\users\eric\desktop\adwcleaner_7.0.4.0.exe FirewallRules: [{17BAEEBB-3324-4978-BB26-0A12E28EBD84}] => (Allow) C:\users\eric\desktop\rkill64-12104.exe FirewallRules: [{3B1D2BA9-8D5F-440B-AB8A-4A41D1895544}] => (Allow) D:\eek\bin64\a2emergencykit.exe FirewallRules: [{67F82368-CE95-41A3-B1E1-3C25FF65A189}] => (Allow) I:\films\terminé\eset nod32 antivirus 2017 v10.1.219.1 + license finder\nod32.antivirus.10.1.219.1.x64 + license finder\nod antivirus license finder.exe FirewallRules: [{918988C7-625D-4F9E-8BDE-0DF6D43D2C10}] => (Allow) C:\programdata\battle.net\agent\agent.5857\agent.exe FirewallRules: [{6A9B7A2E-2080-45A5-8B01-E76CD1DDA994}] => (Allow) C:\program files\bitdefender home scanner\installer\installer.exe FirewallRules: [{727CD63F-2633-45F6-B5E3-7CA770CA26F7}] => (Allow) K:\systèmes\exploit exercises\usb\usbdriveinfo\usbflashinfo\getflashinfo.exe FirewallRules: [TCP Query User{47A2B584-37FB-40B2-9F36-EF86B4A36C5F}C:\program files (x86)\armory\armorydb.exe] => (Allow) C:\program files (x86)\armory\armorydb.exe FirewallRules: [UDP Query User{0034A6ED-0945-4DE5-A742-A2105F6F731E}C:\program files (x86)\armory\armorydb.exe] => (Allow) C:\program files (x86)\armory\armorydb.exe FirewallRules: [{0FFECD9F-344A-4D98-92C7-91B8691FA841}] => (Allow) C:\$WINDOWS.~BT\Sources\setuphost.exe FirewallRules: [{4C8B1912-3317-46A3-A261-55B3522D2935}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe FirewallRules: [{0083865E-B87A-4E2A-85B1-E2872F1E42B6}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe FirewallRules: [TCP Query User{B17C81BA-E8D8-40C1-A8B8-D6B4F09B1874}C:\users\eric\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\eric\appdata\local\mycomgames\mycomgames.exe FirewallRules: [UDP Query User{ED2384BB-D593-413F-9E3E-EE6D2ABF4E64}C:\users\eric\appdata\local\mycomgames\mycomgames.exe] => (Allow) C:\users\eric\appdata\local\mycomgames\mycomgames.exe FirewallRules: [{BE9A748E-AF7C-4F5E-9D62-8EED3959C2BC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Points de restauration ========================= 13-08-2018 11:09:46 JRT Pre-Junkware Removal 18-08-2018 10:10:59 JRT Pre-Junkware Removal ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: D-Link DWA-547 RangeBooster N650 Desktop Adapter Description: D-Link DWA-547 RangeBooster N650 Desktop Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Qualcomm Atheros Communications Inc. Service: athr Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: Creative WebCam NX Ultra Description: Creative WebCam NX Ultra Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Intel(R) Ethernet Connection (2) I218-V Description: Intel(R) Ethernet Connection (2) I218-V Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Intel Service: e1dexpress Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (08/18/2018 11:06:46 AM) (Source: Application Error) (EventID: 1005) (User: ) Description: Windows ne peut pas accéder au fichier C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.1.5252.0_x86__8wekyb3d8bbwe\resources.pri pour une des raisons suivantes : un problème s’est produit avec la connexion réseau, le disque sur lequel le fichier est enregistré, ou les pilotes de stockage installés sur cet ordinateur, ou le disque est manquant. Windows a fermé le programme Host Process for Windows Services en raison de cette erreur. Programme : Host Process for Windows Services Fichier : C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.1.5252.0_x86__8wekyb3d8bbwe\resources.pri La valeur de l’erreur est affichée dans la section Données supplémentaires. Action utilisateur 1. Ouvrez à nouveau le fichier. Cette situation peut résulter d’un problème temporaire qui se corrigera de lui-même à la prochaine exécution du programme. 2. Si le fichier est toujours inaccessible et - Il se trouve sur le réseau : votre administrateur réseau devrait vérifier qu’il n’y a aucun problème avec le réseau et que le serveur peut être contacté. - Il se trouve sur un disque amovible, par exemple une disquette ou un CD-ROM : vérifiez que le disque est inséré correctement dans l’ordinateur. 3. Vérifiez et réparez le système de fichiers en exécutant CHKDSK. Pour exécuter CHKDSK, cliquez sur Démarrer, Exécuter, entrez CMD puis cliquez sur OK. À l’invite de commandes, entrez CHKDSK /F et appuyez sur Entrée. 4. Si le problème persiste, restaurez le fichier à partir d’une copie de sauvegarde. 5. Déterminez si d’autres fichiers du même disque peuvent être ouverts. Si ce n’est pas le cas, le disque est peut-être endommagé. S’il s’agit d’un disque dur, contactez votre administrateur ou le distributeur de votre ordinateur pour obtenir une assistance supplémentaire. Données supplémentaires Valeur de l’erreur : C0000242 Type du disque : 3 Error: (08/18/2018 11:06:46 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante svchost.exe_AppXSvc, version : 10.0.17134.1, horodatage : 0xa38b9ab2 Nom du module défaillant : MrmCoreR.dll, version : 10.0.17134.1, horodatage : 0x8a8f885b Code d’exception : 0xc0000006 Décalage d’erreur : 0x0000000000044960 ID du processus défaillant : 0x954 Heure de début de l’application défaillante : 0x01d436d0bfa50a43 Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\svchost.exe Chemin d’accès du module défaillant: c:\windows\system32\MrmCoreR.dll ID de rapport : bddb3a41-2004-4433-9b68-91cb0ae5e1c0 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (08/18/2018 10:41:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante explorer.exe, version : 10.0.17134.165, horodatage : 0x4031a9f8 Nom du module défaillant : ntdll.dll, version : 10.0.17134.165, horodatage : 0xf4df6dc2 Code d’exception : 0xc0000374 Décalage d’erreur : 0x00000000000f4d1b ID du processus défaillant : 0x23f4 Heure de début de l’application défaillante : 0x01d436cf0bf9f5dc Chemin d’accès de l’application défaillante : C:\Windows\explorer.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : 30b817da-4dae-4d42-b1e4-a81f421aebed Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (08/18/2018 10:39:58 AM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme explorer.exe version 10.0.17134.165 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 1f18 Heure de début : 01d436cedddf113e Heure de fin : 0 Chemin d'accès de l'application : C:\Windows\explorer.exe ID de rapport : dca2a185-bd1e-46b0-abf2-fe1c8bc5071e Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (08/18/2018 10:38:39 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante IAStorDataMgrSvc.exe, version : 13.0.3.1001, horodatage : 0x533de83f Nom du module défaillant : KERNELBASE.dll, version : 10.0.17134.165, horodatage : 0xfa43f4b2 Code d’exception : 0xe0434352 Décalage d’erreur : 0x0010ddc2 ID du processus défaillant : 0x15cc Heure de début de l’application défaillante : 0x01d436ced97a7c00 Chemin d’accès de l’application défaillante : C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll ID de rapport : 8f69f6bd-9b6d-4105-9a86-ff7829c4a151 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (08/18/2018 10:38:35 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application : IAStorDataMgrSvc.exe Version du Framework : v4.0.30319 Description : le processus a été arrêté en raison d'une exception non gérée. Informations sur l'exception : System.BadImageFormatException à IAStorDataMgr.Service.Dispose(Boolean) à System.ComponentModel.Component.Dispose() à System.ServiceProcess.ServiceBase.Run(System.ServiceProcess.ServiceBase[]) à IAStorDataMgr.Program.Main() Error: (08/18/2018 10:38:35 AM) (Source: IAStorDataMgrSvc) (EventID: 0) (User: ) Description: Le service ne peut pas être démarré. System.BadImageFormatException: Impossible de charger le fichier ou l'assembly 'IAStorDataMgr, Version=13.0.3.1001, Culture=neutral, PublicKeyToken=0864863fcbc5bc91' ou une de ses dépendances. Le module était censé contenir un manifeste de l'assembly. Nom de fichier : 'IAStorDataMgr, Version=13.0.3.1001, Culture=neutral, PublicKeyToken=0864863fcbc5bc91' à IAStorDataMgr.Service.OnStart(String[] args) à System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state) AVT : la journalisation de liaison d'assembly est désactivée. Pour activer la journalisation des échecs de liaison d'assembly, attribuez la valeur 1 à la valeur de Registre [HKLM\Software\Microsoft\Fusion!EnableLog] (DWORD). Remarque : une certaine perte de performance est associée à l'enregistrement dans le journal des échecs de liaison d'assembly. Pour désactiver cette fonctionnalité, supprimez la valeur de Registre [HKLM\Software\Microsoft\Fusion!EnableLog]. Error: (08/18/2018 10:38:19 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Explorer.EXE, version : 10.0.17134.165, horodatage : 0x4031a9f8 Nom du module défaillant : windows.immersiveshell.serviceprovider.dll, version : 10.0.17134.1, horodatage : 0x3698c690 Code d’exception : 0x80270233 Décalage d’erreur : 0x000000000004fdaf ID du processus défaillant : 0xed0 Heure de début de l’application défaillante : 0x01d436ce6a680903 Chemin d’accès de l’application défaillante : C:\WINDOWS\Explorer.EXE Chemin d’accès du module défaillant: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll ID de rapport : 7d89d9cc-4953-4010-af47-1624c054be32 Nom complet du package défaillant : ID de l’application relative au package défaillant : Erreurs système: ============= Error: (08/18/2018 11:18:34 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service lmhosts s’est arrêté avec l’erreur : lmhosts n’est pas une application Win32 valide. Error: (08/18/2018 11:09:04 AM) (Source: Service Control Manager) (EventID: 7032) (User: ) Description: Le Gestionnaire de services de contrôle a essayé d’entreprendre une action corrective (Redémarrer le service) après la fin inattendue du service Service de déploiement AppX (AppXSVC), mais cette action a échoué en raison de l’erreur suivante : Une instance du service s’exécute déjà. Error: (08/18/2018 11:08:14 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT) Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073cf9 : 9WZDNCRFHWD2-Microsoft.MicrosoftSolitaireCollection. Error: (08/18/2018 11:07:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Service de déploiement AppX (AppXSVC) s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 120000 millisecondes : Redémarrer le service. Error: (08/18/2018 11:04:12 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service lmhosts s’est arrêté avec l’erreur : lmhosts n’est pas une application Win32 valide. Error: (08/18/2018 11:03:07 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service lmhosts s’est arrêté avec l’erreur : lmhosts n’est pas une application Win32 valide. Error: (08/18/2018 10:44:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID Windows.SecurityCenter.WscDataProtection et l’APPID Non disponible au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (08/18/2018 10:42:19 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service lmhosts s’est arrêté avec l’erreur : lmhosts n’est pas une application Win32 valide. Windows Defender: =================================== Date: 2018-08-17 12:36:38.338 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {7019F292-0B70-4EF5-A2F7-1460A687E9B1} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-08-17 12:30:02.024 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {3781B8F8-0C32-4BE8-AFAC-6630D1D5E783} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-08-17 11:49:32.445 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {C7CA08A6-5A5F-49C1-A342-CAB531E38BCA} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-08-17 10:03:57.305 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {87C6D741-95BF-4C16-A2EE-0365EA2F62B0} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-08-16 10:01:12.744 Description: L’analyse Antivirus Windows Defender a été arrêtée avant la fin. ID de l’analyse : {EA3189B6-9C9C-4670-A067-DCA8AA2F3D66} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-08-18 01:14:08.888 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.273.1585.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.15100.1 Code d’erreur : 0x80240016 Description de l’erreur : Le périphérique ne reconnaît pas la commande. Date: 2018-08-17 09:47:49.475 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.273.1545.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.15100.1 Code d’erreur : 0x80240016 Description de l’erreur : Le périphérique ne reconnaît pas la commande. Date: 2018-08-13 11:29:53.617 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.273.1311.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.15100.1 Code d’erreur : 0x8024402c Description de l’erreur : Date: 2018-08-13 09:50:16.967 Description: Antivirus Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.273.1311.0 Source de mise à jour : Serveur Microsoft Update Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\Système Version actuelle du moteur : Version précédente du moteur : 1.1.15100.1 Code d’erreur : 0x80240016 Description de l’erreur : Le périphérique ne reconnaît pas la commande. Date: 2018-08-05 10:10:18.349 Description: La fonctionnalité de protection en temps réel Antivirus Windows Defender a rencontré une erreur et échoué. Fonctionnalité : Sur accès Code d’erreur : 0x80004005 Description de l’erreur : Erreur non spécifiée Raison : Le pilote de filtre a ignoré l’analyse des éléments et est en mode relais. Cela peut être dû à des ressources insuffisantes. CodeIntegrity: =================================== Date: 2018-08-18 11:16:19.756 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Windows\System32\iseguard64.dll that did not meet the Windows signing level requirements. Date: 2018-08-18 11:07:05.481 Description: Code Integrity determined that a process (\Device\HarddiskVolume1\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume1\Windows\System32\iseguard64.dll that did not meet the Windows signing level requirements. Date: 2018-08-18 11:06:59.511 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2018-08-18 11:06:58.106 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2018-08-18 11:06:57.189 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2018-08-18 11:06:55.795 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\FlightSettings.dll because the set of per-page image hashes could not be found on the system. Date: 2018-08-18 11:06:54.906 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system. Date: 2018-08-18 11:06:53.350 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\dsreg.dll because the set of per-page image hashes could not be found on the system. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz Pourcentage de mémoire utilisée: 12% Mémoire physique - RAM - totale: 32710.82 MB Mémoire physique - RAM - disponible: 28518.77 MB Mémoire virtuelle totale: 34758.82 MB Mémoire virtuelle disponible: 30283.51 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:487.83 GB) (Free:159.43 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)] Drive d: () (Fixed) (Total:297.85 GB) (Free:107.4 GB) NTFS Drive e: () (Fixed) (Total:107.9 GB) (Free:107.36 GB) NTFS Drive f: () (Fixed) (Total:298.32 GB) (Free:46.75 GB) NTFS Drive h: (Seagate Expansion Drive) (Fixed) (Total:931.51 GB) (Free:173.74 GB) NTFS Drive i: () (Fixed) (Total:931.39 GB) (Free:425.07 GB) NTFS Drive k: () (Fixed) (Total:1862.89 GB) (Free:621.84 GB) NTFS Drive l: (Disque local) (Fixed) (Total:3725.9 GB) (Free:3209.26 GB) NTFS \\?\Volume{23672366-0000-0000-0000-60f579000000}\ () (Fixed) (Total:0.44 GB) (Free:0.04 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: 23672366) Partition 1: (Active) - (Size=487.8 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=449 MB) - (Type=27) Partition 3: (Not Active) - (Size=107.9 GB) - (Type=0F Extended) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 596.2 GB) (Disk ID: 12EC65BF) Partition 1: (Not Active) - (Size=297.9 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=298.3 GB) - (Type=07 NTFS) ======================================================== Disk: 2 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 3 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 4 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000) Partition: GPT. ======================================================== Disk: 5 (Size: 931.5 GB) (Disk ID: 61537046) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================