Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 18-08-2025 Exécuté par TestifiedPassword (20-08-2025 14:31:54) Exécuté depuis C:\Users\maxim\Downloads Microsoft Windows 11 Famille Version 24H2 26100.4946 (X64) (2024-12-04 19:23:44) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) Administrateur (S-1-5-21-158360774-455183219-2346978064-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-158360774-455183219-2346978064-503 - Limited - Disabled) Invité (S-1-5-21-158360774-455183219-2346978064-501 - Limited - Disabled) TestifiedPassword (S-1-5-21-158360774-455183219-2346978064-1001 - Administrator - Enabled) => C:\Users\maxim WDAGUtilityAccount (S-1-5-21-158360774-455183219-2346978064-504 - Limited - Disabled) WsiAccount (S-1-5-21-158360774-455183219-2346978064-1002 - Limited - Disabled) => C:\Users\WsiAccount ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) AntiCheatExpert (HKLM\...\AntiCheatExpert) (Version: 21.2.2507.685 - ) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Blender (HKLM\...\{1437AC43-0319-4782-9048-44CD8CA4D842}) (Version: 4.5.1 - Blender Foundation) Blender (HKLM\...\{40D07A01-07A9-450A-8271-9BB69187F4BA}) (Version: 4.2.3 - Blender Foundation) Bloxstrap (HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\Bloxstrap) (Version: 2.9.1 - Bloxstrap) Debug Diagnostics 2 Update 3.2 (HKLM\...\{7A94F4D3-AC7B-48EB-866E-BBA62AEFFA4B}) (Version: 2.3.2.12 - Microsoft Corporation) Discord (HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\Discord) (Version: 1.0.9202 - Discord Inc.) Epic Games Launcher (HKLM-x32\...\{5CC5F080-5711-430D-89BB-C56433F68361}) (Version: 1.3.93.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 139.0.7258.128 - Google LLC) HoYoPlay (HKLM\...\HYP_1_0_global) (Version: 1.9.0.276 - COGNOSPHERE PTE. LTD.) Java 8 Update 421 (64-bit) (HKLM\...\{77924AE4-039E-4CA4-87B4-2F64180421F0}) (Version: 8.0.4210.9 - Oracle Corporation) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Legion Arena (HKLM-x32\...\Legion Arena_is1) (Version: 1.10.0.10 - Lenovo Group Ltd.) Lenovo Now (HKLM-x32\...\{622FA116-13E7-4BB6-839C-A3E0E3ECDFE6}_is1) (Version: 4.3.0.87 - Lenovo) Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.3.50.0 - Lenovo Group Ltd.) Malwarebytes version 5.3.5.204 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.3.5.204 - Malwarebytes) Microsoft .NET Host - 6.0.36 (x64) (HKLM\...\{D6932D97-36F1-40B8-9CDC-CA8365B21000}) (Version: 48.144.23141 - Microsoft Corporation) Hidden Microsoft .NET Host FX Resolver - 6.0.36 (x64) (HKLM\...\{A9E32B25-994B-4856-A12B-0EBED3050410}) (Version: 48.144.23141 - Microsoft Corporation) Hidden Microsoft .NET Runtime - 6.0.36 (x64) (HKLM\...\{C912E33F-956A-4921-9F55-CC11AE8F09AF}) (Version: 48.144.23141 - Microsoft Corporation) Hidden Microsoft 365 Apps for enterprise - fr-fr (HKLM\...\O365ProPlusRetail - fr-fr) (Version: 16.0.19029.20184 - Microsoft Corporation) Microsoft ASP.NET Core 8.0.16 - Shared Framework (x64) (HKLM-x32\...\{ba545f1a-e07e-4325-b540-d5de7204c63f}) (Version: 8.0.16.25216 - Microsoft Corporation) Microsoft ASP.NET Core 8.0.16 Shared Framework (x64) (HKLM\...\{AF96A2AF-9C74-39BF-B615-AF63D111E78D}) (Version: 8.0.16.25216 - Microsoft Corporation) Hidden Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 139.0.3405.102 - Microsoft Corporation) Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 139.0.3405.102 - Microsoft Corporation) Hidden Microsoft OneNote - fr-fr (HKLM\...\OneNoteFreeRetail - fr-fr) (Version: 16.0.19029.20184 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM\...\{61D4736B-3325-4D4A-BD41-8BD206C6A86E}) (Version: 48.144.23186 - Microsoft Corporation) Hidden Microsoft Windows Desktop Runtime - 6.0.36 (x64) (HKLM-x32\...\{0532b8f2-12d7-43de-95fc-7b87006758a8}) (Version: 6.0.36.34217 - Microsoft Corporation) NVIDIA App 11.0.4.526 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.4.526 - NVIDIA Corporation) NVIDIA Broadcast 2.0.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIABroadcast) (Version: 2.0.1 - NVIDIA Corporation) NVIDIA FrameView SDK 1.5.10920.35420203 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.5.10920.35420203 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation) NVIDIA Pilote audio HD 1.4.5.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.0 - NVIDIA Corporation) NVIDIA Pilote graphique 581.08 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 581.08 - NVIDIA Corporation) NVIDIA USBC Driver 1.52.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.52.831.832 - NVIDIA Corporation) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.4 - OBS Project) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20184 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20184 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.19029.20184 - Microsoft Corporation) Hidden OP Auto Clicker (HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\OP Auto Clicker_is1) (Version: V4.0 - OP Auto Clicker) Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) Roblox Player for TestifiedPassword (HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\roblox-player) (Version: - Roblox Corporation) Roblox Studio for maxim (HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\roblox-studio) (Version: - Roblox Corporation) RØDE Application Fonts (HKLM\...\{D742CB1C-CAA5-4675-AD29-9B0EE782A3C9}) (Version: 1.0.0.0 - RØDE Microphones) RODE Central (HKLM\...\{1E60BD4A-E5BA-49D5-B7F4-F80D60816E86}) (Version: 2.0.101 - RØDE Microphones) RODE Connect (HKLM\...\{B2628A69-527A-48FF-91C7-F4FA0FED5108}) (Version: 1.3.43 - RØDE Microphones) RØDE UNIFY (HKLM\...\{0571DB5E-E821-4423-B40B-CF25DA99F73B}) (Version: 1.3.43 - RØDE Microphones) RØDE UNIFY Virtual Audio Driver (HKLM\...\{64C0893D-C5AA-40E8-B903-39EFA603E33D}) (Version: 1.0.1 - RØDE Microphones) RØDEConnect Virtual Audio Driver (HKLM\...\{6C38F59B-5599-4239-B07A-E1E704609620}) (Version: 1.0.1 - RØDE Microphones) Spotify (HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\Spotify) (Version: 1.2.67.555.gaf416c8c - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TLauncher (HKLM-x32\...\TLauncher) (Version: 2.9313 - TLauncher Inc.) VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software) Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version: - VB-Audio Software) Voicemod (HKLM\...\{8435A407-F778-4647-9CDB-46E5EC50BAD0}_is1) (Version: 2.51.0.0 - Voicemod, Inc., Sucursal en España) WinRAR 7.11 (64-bit) (HKLM\...\WinRAR archiver) (Version: 7.11.0 - win.rar GmbH) WizTree v4.26 (HKLM\...\WizTree_is1) (Version: 4.26 - Antibody Software) Packages: ========= @{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-12] () AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-08] (INTEL CORP) [Startup Task] Dropbox promotion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_23.4.34.0_x64__xbfy0k16fey96 [2025-06-19] (Dropbox Inc.) HyperX NGENUITY -> C:\Program Files\WindowsApps\33C30B79.HyperXNGenuity_5.33.0.0_x64__0a78dr3hq0pvt [2025-08-19] (HP Inc.) [Startup Task] Intel® Graphics Software -> C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_25.26.1602.0_x64__8j3eq9eme6ctt [2025-07-24] (INTEL CORP) Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.25150.49.0_x64__8wekyb3d8bbwe [2025-06-26] (Microsoft Corporation) Lenovo Companion -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2506.10.0_x64__k1h2ywk1493x8 [2025-07-21] (LENOVO INC.) Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-15] (LENOVO INC) [Startup Task] Local Artificial Intelligence Manager -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2025-08-17] () Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2025-08-13] () Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-09-12] (Microsoft Corp.) Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20610.576.0_x64__8wekyb3d8bbwe [2025-06-20] (Microsoft Corporation) Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2025-08-17] () Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.10.7.0_x64__w2gh52qy24etm [2025-08-11] (A-Volute) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.968.0_x64__56jybvy8sckqj [2025-06-12] (NVIDIA Corp.) OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-08-17] () Roblox -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.686.866.0_x64__55nm5eh3cm0pr [2025-08-18] (Roblox Corporation) WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-08-11] (Microsoft Corp.) WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.522.1444.0_x64__8wekyb3d8bbwe [2025-08-11] (Microsoft Corp.) WinRAR -> C:\Program Files\WinRAR [2025-06-15] (win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Windows -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{0002DF01-0000-0000-C000-000000000046}\localserver32 -> "E:\360se6\Application\360se.exe" => Pas de fichier CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{1fbfb627-93ed-88f1-57b8-78ec8c9febe7}\localserver32 -> "C:\ProgramData\Lenovo\Udc\Hosts\23.4.0.8\x64\MessagingPlugin.exe" -ToastActivated => Pas de fichier CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\maxim\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{89b2b650-c4dd-d68b-46e7-3176f1973c8b}\localserver32 -> C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod) CustomCLSID: HKU\S-1-5-21-158360774-455183219-2346978064-1001_Classes\CLSID\{f9517764-05a4-a748-620a-95087d06a241}\localserver32 -> "C:\Program Files\Cloudflare\Cloudflare WARP\Cloudflare WARP.exe" -ToastActivated => Pas de fichier ContextMenuHandlers1: [DaemonShellExtImage] -> {40966797-8FFE-46C8-9EF8-7003F33CCF0F} => C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShl64.dll -> Pas de fichier ContextMenuHandlers2: [DaemonShellExtDrive] -> {A5415364-784A-41A5-B47A-D452909CA8FF} => C:\Program Files (x86)\DAEMON Tools Pro Advanced\DTShl64.dll -> Pas de fichier ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-06-23] (Malwarebytes Inc -> Malwarebytes) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_944abf9731270167\nvshext.dll [2025-08-18] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-06-23] (Malwarebytes Inc -> Malwarebytes) ==================== Codecs (Avec liste blanche) ==================== ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\maxim\OneDrive\Bureau\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory="Default" ==================== Modules chargés (Avec liste blanche) ============= 2025-07-23 10:49 - 2025-07-23 10:49 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\PlugIns\NVIDIA App\MessageBusRouter.dll] C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\plugins\NVIDIA Overlay\MessageBusRouter.dll 2024-12-24 17:15 - 2025-07-23 10:48 - 000000000 ____L (NVIDIA Corporation) [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll ==================== Alternate Data Streams (Avec liste blanche) ======== (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\WINDOWS\tracing:? [34] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk:A1B76439FE [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Legion Arena.lnk:20903A5BF7 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk:60EC9648C0 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook (classic).lnk:BE800952D3 [3442] AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk:1DC1525F34 [3442] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [10050] ==================== Mode sans échec (Avec liste blanche) ================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) ================= ==================== Internet Explorer (Avec liste blanche) ============= HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-158360774-455183219-2346978064-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_421\bin\ssv.dll [2024-06-05] (Oracle America, Inc. -> Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_421\bin\jp2ssv.dll [2024-06-05] (Oracle America, Inc. -> Oracle Corporation) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-08-05] (Microsoft Corporation -> Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\sharepoint.com -> hxxps://lyceesiledefrance-files.sharepoint.com ==================== Hosts contenu: ========================= (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2025-04-08 18:45 - 2025-04-08 18:45 - 000003923 _____ C:\WINDOWS\system32\drivers\etc\hosts 109.94.209.70 fitgirlrepacks.in # Fake FitGirl site 109.94.209.70 www.fitgirlrepacks.in # Fake FitGirl site 109.94.209.70 fitgirlrepacks.co # Fake FitGirl site 109.94.209.70 fitgirl-repacks.cc # Fake FitGirl site 109.94.209.70 fitgirl-repacks.to # Fake FitGirl site 109.94.209.70 fitgirl-repack.com # Fake FitGirl site 109.94.209.70 fitgirl-repacks.website # Fake FitGirl site 109.94.209.70 www.fitgirlrepacks.co # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks.cc # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks.to # Fake FitGirl site 109.94.209.70 www.fitgirl-repack.com # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks.website # Fake FitGirl site 109.94.209.70 ww9.fitgirl-repacks.xyz # Fake FitGirl site 109.94.209.70 fitgirl-repacks.xyz # Fake FitGirl site 109.94.209.70 fitgirl-repack.net # Fake FitGirl site 109.94.209.70 www.fitgirl-repack.net # Fake FitGirl site 109.94.209.70 fitgirlpack.site # Fake FitGirl site 109.94.209.70 www.fitgirlpack.site # Fake FitGirl site 109.94.209.70 fitgirl-repack.org # Fake FitGirl site 109.94.209.70 www.fitgirl-repack.org # Fake FitGirl site 109.94.209.70 fitgirlrepacks.pro # Fake FitGirl site 109.94.209.70 www.fitgirlrepacks.pro # Fake FitGirl site 109.94.209.70 fitgirlrepack.games # Fake FitGirl site 109.94.209.70 www.fitgirlrepack.games # Fake FitGirl site 109.94.209.70 fitgirl-repacks-site.org # Fake FitGirl site 109.94.209.70 www.fitgirl-repacks-site.org # Fake FitGirl site 109.94.209.70 fitgirls-repacks.com # Fake FitGirl site 109.94.209.70 fitgirlrepack.cc # Fake FitGirl site 109.94.209.70 fitgirlrepacks.org # Fake FitGirl site 109.94.209.70 www.fitgirls-repacks.com # Fake FitGirl site ==================== Network =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) DNS Servers: 1.1.1.1 - 1.0.0.1 Le Pare-feu est activé. Network Binding: ============= Wi-Fi: Realtek RTL8852BE WiFi 6 802.11ax PCIe Adapter -> rtwlane601.sys Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys ==================== Autres zones =========================== (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\java8path;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA app\NvDLISR;C:\Program Files\dotnet\ HKCU\Environment\\Path -> %USERPROFILE%\AppData\Local\Microsoft\WindowsApps HKU\S-1-5-21-158360774-455183219-2346978064-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\maxim\OneDrive\Images\Fond d'écrans\wallpaperflare.com_wallpaper.jpg HKU\S-1-5-21-158360774-455183219-2346978064-1002\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 0) (TamperProtectionSource: 3) HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0) HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\maxim\OneDrive\Bureau\Solara\Solara HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\maxim\OneDrive\Bureau\Solara\Solara\Solara HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\ProgramData\Solara HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Users\maxim\OneDrive\Documents\Solara ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) HKLM\...\StartupApproved\Run: => "Riot Vanguard" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_744C908535027465E400920C5264EB75" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "RiotClient" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "VoicemodV3" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "NoxMultiPlayer" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "Opera GX Stable" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "BakkesMod" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "Voicemod" HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "NVIDIA Broadcast " HKU\S-1-5-21-158360774-455183219-2346978064-1001\...\StartupApproved\Run: => "DAEMON Tools Pro Agent" ==================== RèglesPare-feu (Avec liste blanche) ================ (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [UDP Query User{DA80FD96-651A-45E8-9319-87CF9B5597BA}C:\programdata\solara\solara.exe] => (Allow) C:\programdata\solara\solara.exe => Pas de fichier FirewallRules: [TCP Query User{2C415404-B6DC-4171-B753-5264F1A0887A}C:\programdata\solara\solara.exe] => (Allow) C:\programdata\solara\solara.exe => Pas de fichier FirewallRules: [UDP Query User{1D5B4C01-9F68-4167-8D17-603D6BBC449C}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe => Pas de fichier FirewallRules: [TCP Query User{FDB9A396-73C8-4DAC-99DC-DE882B3F9341}C:\program files\nodejs\node.exe] => (Allow) C:\program files\nodejs\node.exe => Pas de fichier FirewallRules: [UDP Query User{198C73C8-CA21-4628-A8C0-478C1C6C800F}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => Pas de fichier FirewallRules: [TCP Query User{D9AED928-1CA3-4235-9B7D-EB01407FB750}C:\riot games\riot client\riotclientelectron\riot client.exe] => (Allow) C:\riot games\riot client\riotclientelectron\riot client.exe => Pas de fichier FirewallRules: [UDP Query User{054C6D86-9EC9-43EB-B893-F3684E8188AE}C:\users\maxim\appdata\local\discord\app-1.0.9166\discord.exe] => (Allow) C:\users\maxim\appdata\local\discord\app-1.0.9166\discord.exe => Pas de fichier FirewallRules: [TCP Query User{DEA66A9C-570F-4837-AB1F-BB0ED118A7E4}C:\users\maxim\appdata\local\discord\app-1.0.9166\discord.exe] => (Allow) C:\users\maxim\appdata\local\discord\app-1.0.9166\discord.exe => Pas de fichier FirewallRules: [UDP Query User{8FD3CA94-66A1-4344-9058-B506CD07531C}C:\program files\strogino cs portal\garrys mod\hl2.exe] => (Allow) C:\program files\strogino cs portal\garrys mod\hl2.exe => Pas de fichier FirewallRules: [TCP Query User{C376EFCA-ACFE-4854-BAE5-D1C824012974}C:\program files\strogino cs portal\garrys mod\hl2.exe] => (Allow) C:\program files\strogino cs portal\garrys mod\hl2.exe => Pas de fichier FirewallRules: [UDP Query User{BFF17D37-A8F1-4FE7-9489-A69C07744647}C:\program files (x86)\steam\steamapps\common\vrchat\vrchat.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\vrchat\vrchat.exe => Pas de fichier FirewallRules: [TCP Query User{69084AF1-D552-4EDE-9690-9F0BA066AA1C}C:\program files (x86)\steam\steamapps\common\vrchat\vrchat.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\vrchat\vrchat.exe => Pas de fichier FirewallRules: [{1C2BA9A9-3B50-48B8-8806-F8F80773F44E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb.exe () [Fichier non signé] FirewallRules: [{40EA7588-2E57-4466-91C2-F73FCD258F49}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Aim Lab\AimLab_tb.exe () [Fichier non signé] FirewallRules: [{60A8B42B-6642-4379-9BD1-9A6B2EA19166}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{271D872A-555D-4E9A-BFA0-B7D95009C7BF}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{787594F7-315C-4753-949D-7678A3B2D9B9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{6FB3BADE-7013-42BE-AF07-2D487DA05B0C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [UDP Query User{7730AD60-E9F8-4F6D-8A4F-76C29FDDAEA8}C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe FirewallRules: [TCP Query User{5ADE8669-B41C-4C57-B92A-41A9A71A4AB5}C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-gamma\windows\java-runtime-gamma\bin\javaw.exe FirewallRules: [UDP Query User{C1C2967A-D079-4E90-A0F5-85E7F05BB919}C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Allow) C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe => Pas de fichier FirewallRules: [TCP Query User{946DB7DA-0AF4-43FC-91A3-2D1A579A230E}C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe] => (Allow) C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.10-windows-x64\bin\java.exe => Pas de fichier FirewallRules: [UDP Query User{9E974778-0B1C-4651-9992-9FABFCFAE235}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [TCP Query User{6C66A331-C41C-4894-A8D7-7FEBDD26685F}C:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [UDP Query User{A68B9BAF-4627-4A75-B7D0-21D93C093344}C:\users\maxim\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\maxim\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) [Fichier non signé] FirewallRules: [TCP Query User{6D0BAD89-F893-4C27-BDAA-F542C195914C}C:\users\maxim\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\maxim\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd) [Fichier non signé] FirewallRules: [TCP Query User{86B869D3-90B9-4E4C-B9E5-68467030F3C6}C:\users\maxim\onedrive\documents\solara\solara.exe] => (Allow) C:\users\maxim\onedrive\documents\solara\solara.exe => Pas de fichier FirewallRules: [UDP Query User{E6052C96-1B13-425C-8AD6-F093F13FD3A5}C:\users\maxim\onedrive\documents\solara\solara.exe] => (Allow) C:\users\maxim\onedrive\documents\solara\solara.exe => Pas de fichier FirewallRules: [{12d4f2dc-c9ec-4f3e-aaa0-bdb33a69a964}] => (Allow) C:\Program Files\ldplayer9box\Ld9BoxHeadless.exe => Pas de fichier FirewallRules: [{0afc730f-447c-4d23-b167-a95a19f7baf6}] => (Allow) C:\Program Files\ldplayer9box\VBoxNetNAT.exe => Pas de fichier FirewallRules: [{cbc8c33f-695a-4d47-8a50-42a01a3499a5}] => (Allow) C:\LDPlayer\LDPlayer9\dnplayer.exe => Pas de fichier FirewallRules: [TCP Query User{512849E0-4016-4388-B1BF-4C8217753480}C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe => Pas de fichier FirewallRules: [UDP Query User{3322DB44-7A0A-4398-8A73-012D68A22870}C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\marvelrivals\marvelgame\marvel\binaries\win64\marvel-win64-shipping.exe => Pas de fichier FirewallRules: [TCP Query User{C6A9535C-05F2-4A8F-B87A-5D41F692D990}C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe => Pas de fichier FirewallRules: [UDP Query User{0BCFEC19-5811-4276-8BA4-E0B3BDD51879}C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe] => (Allow) C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-17.0.11-windows-x64\bin\java.exe => Pas de fichier FirewallRules: [TCP Query User{E4E8185F-5BA7-4A33-AE88-18D02AFF2D4A}C:\users\maxim\onedrive\bureau\solara\solara\solara.exe] => (Allow) C:\users\maxim\onedrive\bureau\solara\solara\solara.exe => Pas de fichier FirewallRules: [UDP Query User{1B3B94A4-7F66-4770-9FB8-907DEBC5F72E}C:\users\maxim\onedrive\bureau\solara\solara\solara.exe] => (Allow) C:\users\maxim\onedrive\bureau\solara\solara\solara.exe => Pas de fichier FirewallRules: [TCP Query User{FEB727D6-F263-4A93-8610-641EF0907278}C:\users\maxim\onedrive\bureau\solara\solara\solara\solara.exe] => (Allow) C:\users\maxim\onedrive\bureau\solara\solara\solara\solara.exe => Pas de fichier FirewallRules: [UDP Query User{87E7F408-F668-4235-AD06-C8D43C452EB4}C:\users\maxim\onedrive\bureau\solara\solara\solara\solara.exe] => (Allow) C:\users\maxim\onedrive\bureau\solara\solara\solara\solara.exe => Pas de fichier FirewallRules: [{34B502C4-E6A9-4780-B4F7-18BF800E0432}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe => Pas de fichier FirewallRules: [{CA852497-DB2D-494A-8966-DC0B7D4C83DD}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe => Pas de fichier FirewallRules: [TCP Query User{26407EDF-3C3B-48B5-8D77-5B2EB51B67F9}C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe FirewallRules: [UDP Query User{ADCF97A6-1680-45CF-9E3A-E5791957847D}C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe] => (Allow) C:\users\maxim\appdata\roaming\.tlauncher\starter\jre_default\jre-21.0.61-windows-x64\bin\java.exe FirewallRules: [TCP Query User{3A2E9455-DBE1-4541-90CC-35409A6BEA9E}C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe FirewallRules: [UDP Query User{C71D4FA8-8767-41A9-AD58-72AAC560BBEC}C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-beta\windows\java-runtime-beta\bin\javaw.exe FirewallRules: [TCP Query User{23469F11-86D0-44C9-9C21-E8292BC66B8C}C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe FirewallRules: [UDP Query User{72FE417A-0B02-4BA0-BE5A-379ECC108C96}C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\java-runtime-delta\windows\java-runtime-delta\bin\javaw.exe FirewallRules: [TCP Query User{00E26067-76AD-4739-A224-9ADD00C723D5}C:\users\maxim\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe FirewallRules: [UDP Query User{B6102DBB-3627-4877-8B16-614F82B5CE3B}C:\users\maxim\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe] => (Allow) C:\users\maxim\appdata\roaming\.minecraft\runtime\jre-legacy\windows\jre-legacy\bin\javaw.exe FirewallRules: [TCP Query User{09F8552D-7737-4190-8D22-B3E78D3120C8}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Allow) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe => Pas de fichier FirewallRules: [UDP Query User{43C5DE91-51CA-4E3F-960B-93E09580FAC4}C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe] => (Allow) C:\program files\epic games\rocketleague\binaries\win64\rocketleague.exe => Pas de fichier FirewallRules: [{03028B27-9850-42A5-8C29-637EE8FD6FC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BongoCat\BongoCat.exe () [Fichier non signé] FirewallRules: [{AA18DB07-3AF1-4894-BC27-9757B2E64056}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BongoCat\BongoCat.exe () [Fichier non signé] FirewallRules: [{47A69DB6-3A17-4854-8DEB-5825AA3E297B}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Pas de fichier FirewallRules: [{82929339-82D9-48C8-89C6-78D96E366ED1}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Pas de fichier FirewallRules: [{D4E872EC-604D-429E-BB97-0B86E06DC257}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe => Pas de fichier FirewallRules: [{D8EA459A-FC09-4401-A9FD-D303143A0748}] => (Allow) C:\Program Files\BlueStacks_nxt\BlueStacksAppplayerWeb.exe => Pas de fichier FirewallRules: [TCP Query User{663CF6B0-A227-4D43-866D-D799CDDEF134}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{5AC7D84D-6608-438B-87C5-E5FDDBDF75AC}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{93662AF9-7C97-41F4-B470-C58FA90E26D2}] => (Allow) C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod) FirewallRules: [{E8C0D821-D812-4484-B5B0-A46886316A9F}] => (Allow) C:\Program Files\Voicemod Desktop\VoicemodDesktop.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod) FirewallRules: [TCP Query User{66555049-AAB7-45C2-B999-21F262960A74}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{4C89F0BD-907A-42A6-B4F3-FEAF65CD2932}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{77B6ECCA-F2C9-4982-9C7C-4477CED83832}C:\users\maxim\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\maxim\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games) FirewallRules: [UDP Query User{F86D8FDC-61DB-4990-BDD8-F6BFF5FF30C8}C:\users\maxim\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe] => (Allow) C:\users\maxim\appdata\local\unrealengine\common\unrealtrace\bin\00010017\unrealtraceserver.exe (Epic Games Inc. -> Epic Games) FirewallRules: [TCP Query User{D9946670-732F-450E-A2FF-9F6C12B8CDBD}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{21596D84-B748-4F21-AEB0-0D58FD698C27}C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe] => (Allow) C:\program files\epic games\ue_5.6\engine\binaries\win64\unrealeditor.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{1E62EFC8-B8AE-4798-936C-EC60BC78353D}C:\users\maxim\appdata\local\temp\rar$exa23208.48382.rartemp\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe] => (Allow) C:\users\maxim\appdata\local\temp\rar$exa23208.48382.rartemp\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe => Pas de fichier FirewallRules: [UDP Query User{50076249-E869-48E9-8AF7-93AC0516D304}C:\users\maxim\appdata\local\temp\rar$exa23208.48382.rartemp\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe] => (Allow) C:\users\maxim\appdata\local\temp\rar$exa23208.48382.rartemp\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe => Pas de fichier FirewallRules: [TCP Query User{C9906B0D-9345-4081-863C-E853E0B0AD7D}C:\users\maxim\downloads\euro.truck.simulator.2.v1.54.1.0s\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe] => (Allow) C:\users\maxim\downloads\euro.truck.simulator.2.v1.54.1.0s\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe => Pas de fichier FirewallRules: [UDP Query User{D53F502D-F7FC-4C20-A745-BF70809A2BAF}C:\users\maxim\downloads\euro.truck.simulator.2.v1.54.1.0s\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe] => (Allow) C:\users\maxim\downloads\euro.truck.simulator.2.v1.54.1.0s\euro.truck.simulator.2.v1.54.1.0s\game\bin\win_x64\eurotrucks2.exe => Pas de fichier FirewallRules: [{C74606FA-65B4-47BA-85C8-86E053E5CF66}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe => Pas de fichier FirewallRules: [{FAF36C1E-77F5-4D5E-8CD8-B77E3CEE394B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{C5EAEAA2-6C92-4C93-8F8D-290C8CCB3404}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [TCP Query User{B4FBACC5-AC7D-46FF-A9DF-12B66174C162}C:\program files (x86)\vb\voicemeeter\voicemeeterpro_x64.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeeterpro_x64.exe (BUREL VINCENT Entrepreneur individuel -> VB-AUDIO Software) FirewallRules: [UDP Query User{888161B9-47A3-4E06-B4A0-C6CABE42BB4D}C:\program files (x86)\vb\voicemeeter\voicemeeterpro_x64.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeeterpro_x64.exe (BUREL VINCENT Entrepreneur individuel -> VB-AUDIO Software) FirewallRules: [TCP Query User{D3BE8AC4-9E28-4F63-9403-14BCFE940347}C:\users\maxim\downloads\mmvcserversio_win_onnxgpu-cuda_v.1.5.3.18a\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\maxim\downloads\mmvcserversio_win_onnxgpu-cuda_v.1.5.3.18a\mmvcserversio\mmvcserversio.exe => Pas de fichier FirewallRules: [UDP Query User{608A56F7-39A7-476E-B605-8A8EE301BC33}C:\users\maxim\downloads\mmvcserversio_win_onnxgpu-cuda_v.1.5.3.18a\mmvcserversio\mmvcserversio.exe] => (Allow) C:\users\maxim\downloads\mmvcserversio_win_onnxgpu-cuda_v.1.5.3.18a\mmvcserversio\mmvcserversio.exe => Pas de fichier FirewallRules: [TCP Query User{78D6F2F7-FE56-49A0-959F-1EF975FAC41A}C:\program files\epic games\fallguys\fallguys_client_game.exe] => (Allow) C:\program files\epic games\fallguys\fallguys_client_game.exe => Pas de fichier FirewallRules: [UDP Query User{BDAD6E34-7AF6-49FF-AD3B-DEFF89C72762}C:\program files\epic games\fallguys\fallguys_client_game.exe] => (Allow) C:\program files\epic games\fallguys\fallguys_client_game.exe => Pas de fichier FirewallRules: [TCP Query User{1F96102C-A631-4542-9B94-16AA5CD96012}C:\users\maxim\onedrive\documents\[fr]undertale\undertale - copie.exe] => (Allow) C:\users\maxim\onedrive\documents\[fr]undertale\undertale - copie.exe => Pas de fichier FirewallRules: [UDP Query User{2D817247-FAB0-48AB-B75F-18F6DF5E03D6}C:\users\maxim\onedrive\documents\[fr]undertale\undertale - copie.exe] => (Allow) C:\users\maxim\onedrive\documents\[fr]undertale\undertale - copie.exe => Pas de fichier FirewallRules: [{1AEE7360-A9DF-48B9-A584-690FC6586005}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Project Rogueteers\launcher\rs_launcher.exe (Epic Games, Inc.) [Fichier non signé] FirewallRules: [{6B51C0BF-8828-4B91-B4EF-085BD32A6239}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Project Rogueteers\launcher\rs_launcher.exe (Epic Games, Inc.) [Fichier non signé] FirewallRules: [{DABA6D44-8EFE-4BBE-AFD6-F687EE6FE818}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{AF0AAA29-EE6A-41E2-9D19-12F9EAD483B4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{856C61AD-CDE4-49FD-AA8E-5FF34F4DF826}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{CA2A1A6D-D28B-4D82-886F-D39F619F839A}] => (Allow) E:\SteamLibrary\steamapps\common\BlackMythWukong\b1.exe (Game Science Interactive Technology Co., Ltd. -> Epic Games, Inc.) FirewallRules: [{166A3C88-E88A-4D6F-BB7C-A2E1C4F2BD01}] => (Allow) E:\SteamLibrary\steamapps\common\BlackMythWukong\b1.exe (Game Science Interactive Technology Co., Ltd. -> Epic Games, Inc.) FirewallRules: [TCP Query User{F2C5A713-7185-493E-9D9F-F7B67E00C8BC}E:\steamlibrary\steamapps\common\blackmythwukong\b1\binaries\win64\b1-win64-shipping.exe] => (Allow) E:\steamlibrary\steamapps\common\blackmythwukong\b1\binaries\win64\b1-win64-shipping.exe (Game Science Interactive Technology Co., Ltd. -> Game Science Interactive Technology Co., Ltd) FirewallRules: [UDP Query User{1F4EB1C0-39F6-42FC-A953-3A4981626181}E:\steamlibrary\steamapps\common\blackmythwukong\b1\binaries\win64\b1-win64-shipping.exe] => (Allow) E:\steamlibrary\steamapps\common\blackmythwukong\b1\binaries\win64\b1-win64-shipping.exe (Game Science Interactive Technology Co., Ltd. -> Game Science Interactive Technology Co., Ltd) FirewallRules: [{A9F8C608-A613-4375-9646-127F95A9AEFB}] => (Allow) E:\G--vv\Grand Theft Auto V\GTA5.exe => Pas de fichier FirewallRules: [{959A7261-D6E7-4178-BC70-659974A90292}] => (Allow) E:\G--vv\Grand Theft Auto V\GTA5.exe => Pas de fichier FirewallRules: [{4D36C4C3-63CA-4A51-8C46-B1179C4BC441}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Points de restauration ========================= 19-08-2025 09:57:47 Windows Update 19-08-2025 09:57:57 Windows Update ==================== Éléments en erreur du Gestionnaire de périphériques ============ ==================== Erreurs du Journal des événements: ======================== Erreurs Application: ================== Error: (08/19/2025 07:03:36 PM) (Source: IPF) (EventID: 17) (User: AUTORITE NT) Description: Event-ID 17 Error: (08/19/2025 09:55:12 AM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT) Description: Nom de l'application défaillante : NVDisplay.Container.exe, version : 1.39.3323.1171, horodatage : 0x64e85748 Nom du module défaillant : NVDisplay.Container.exe, version : 1.39.3323.1171, horodatage : 0x64e85748 Exception code: 0xc0000409 Fault offset: 0x00000000000932e5 Identifiant du processus défaillant : 0x2a94 Heure de début de l'application défaillante : 0x1dc108b78fefa76 Chemin de l'application défaillante : C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fbee40ce9cc0bf90\Display.NvContainer\NVDisplay.Container.exe Chemin du module défaillant : C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fbee40ce9cc0bf90\Display.NvContainer\NVDisplay.Container.exe ID du rapport : 79e0fd9c-a62f-4b3a-a9c4-07e6ce3f61f6 Nom complet du package défaillant : Package défaillant – ID d'application relatif : Error: (08/19/2025 12:00:13 AM) (Source: Application Error) (EventID: 1000) (User: AUTORITE NT) Description: Nom de l'application défaillante : NVDisplay.Container.exe, version : 1.39.3323.1171, horodatage : 0x64e85748 Nom du module défaillant : _nvtopps.dll, version : 32.0.15.8097, horodatage : 0x689515c0 Exception code: 0xc0000409 Fault offset: 0x00000000008dab29 Identifiant du processus défaillant : 0x9d0 Heure de début de l'application défaillante : 0x1dc0d632de9b596 Chemin de l'application défaillante : C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fbee40ce9cc0bf90\Display.NvContainer\NVDisplay.Container.exe Chemin du module défaillant : C:\WINDOWS\System32\DriverStore\FileRepository\nvlti.inf_amd64_fbee40ce9cc0bf90\Display.NvContainer\plugins\LocalSystem\_nvtopps.dll ID du rapport : 2ad6e9cb-15fe-433f-8b0a-7775f8aa8a02 Nom complet du package défaillant : Package défaillant – ID d'application relatif : Error: (08/17/2025 09:45:23 AM) (Source: IPF) (EventID: 17) (User: AUTORITE NT) Description: Event-ID 17 Error: (08/16/2025 06:46:44 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\maxim\Downloads\Autoruns\Autoruns.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_85b94803f7ad5182.manifest. Composant 2 : C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c.manifest. Error: (08/16/2025 06:36:32 PM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\maxim\Downloads\Autoruns\Autoruns.exe ». Erreur dans le fichier de manifeste ou de stratégie «  » à la ligne . Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_85b94803f7ad5182.manifest. Composant 2 : C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.26100.4768_none_3e0c112ce331287c.manifest. Error: (08/16/2025 12:12:55 PM) (Source: Application Error) (EventID: 1000) (User: COLDEAYXMAX) Description: Nom de l'application défaillante : b1-Win64-Shipping.exe, version : 5.0.0.0, horodatage : 0x67f6a631 Nom du module défaillant : crashhandler64.dll, version : 9.86.62.31, horodatage : 0x685f3fb8 Exception code: 0xc0000409 Fault offset: 0x0000000000036ea1 Identifiant du processus défaillant : 0x55b4 Heure de début de l'application défaillante : 0x1dc0e931e2392a2 Chemin de l'application défaillante : E:\SteamLibrary\steamapps\common\BlackMythWukong\b1\Binaries\Win64\b1-Win64-Shipping.exe Chemin du module défaillant : C:\Program Files (x86)\Steam\crashhandler64.dll ID du rapport : e6e867a8-9d5f-49bb-ae9e-a446c555898a Nom complet du package défaillant : Package défaillant – ID d'application relatif : Error: (08/15/2025 06:26:55 PM) (Source: Application Error) (EventID: 1000) (User: COLDEAYXMAX) Description: Nom de l'application défaillante : shotcut.exe, version : 25.7.26.0, horodatage : 0x68850c58 Nom du module défaillant : Qt6Core.dll, version : 6.9.1.0, horodatage : 0x68372aa1 Exception code: 0xc0000005 Fault offset: 0x0000000000242ddc Identifiant du processus défaillant : 0x1b30 Heure de début de l'application défaillante : 0x1dc0de1a175e70f Chemin de l'application défaillante : C:\Users\maxim\Downloads\shotcut-win64-250726\Shotcut\shotcut.exe Chemin du module défaillant : C:\Users\maxim\Downloads\shotcut-win64-250726\Shotcut\Qt6Core.dll ID du rapport : 5c56502c-f13f-4803-b8ff-b4bce4bc2685 Nom complet du package défaillant : Package défaillant – ID d'application relatif : Erreurs système: ============= Error: (08/20/2025 11:30:35 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT) Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80073d02 : 9PC1H9VN18CM-Microsoft.StartExperiencesApp. Error: (08/20/2025 12:04:35 AM) (Source: DCOM) (EventID: 10005) (User: COLDEAYXMAX) Description: DCOM a reçu l’erreur « 1053 » lors de la tentative de démarrage du service BcastDVRUserService_5f45a4fc avec les arguments « Non disponible » pour exécuter le serveur : Windows.Media.Capture.Internal.AppCaptureShell Error: (08/20/2025 12:04:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Service utilisateur de diffusion et GameDVR_5f45a4fc n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/20/2025 12:04:35 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Service utilisateur de diffusion et GameDVR_5f45a4fc. Error: (08/19/2025 11:09:18 PM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 87 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {D529741A-1BF1-4D1E-9976-35089622E758} Error: (08/19/2025 11:09:18 PM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 87 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {3E8C9ABE-9226-4609-BF5B-60288A391DEE} Error: (08/19/2025 11:09:18 PM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 87 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {D529741A-1BF1-4D1E-9976-35089622E758} Error: (08/19/2025 11:09:18 PM) (Source: DCOM) (EventID: 10005) (User: AUTORITE NT) Description: DCOM a reçu l’erreur « 87 » lors de la tentative de démarrage du service GamingServices avec les arguments « Non disponible » pour exécuter le serveur : {3E8C9ABE-9226-4609-BF5B-60288A391DEE} Windows Defender: ================ Date: 2025-08-20 14:31:52 Description: Antivirus Microsoft Defender a détecté un logiciel malveillant ou potentiellement indésirable. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:PowerShell/AgentTesla.SHD!MTB&threatid=2147945081&enterprise=1 Nom : Trojan:PowerShell/AgentTesla.SHD!MTB ID : 2147945081 Gravité : Grave Catégorie : Cheval de Troie Chemin : file:_C:\Users\maxim\OneDrive\Documents\Install_New_theme.bat Origine de la détection : Ordinateur local Type de détection : Concret Source de détection : Protection en temps réel Utilisateur : ColdeayXMax\TestifiedPassword Nom du processus : C:\Users\maxim\Downloads\FRST64.exe Version de la veille de sécurité : AV: 1.435.278.0, AS: 1.435.278.0, NIS: 1.435.278.0 Version du moteur : AM: 1.1.25070.4, NIS: 1.1.25070.4 Date: 2025-08-10 12:41:33 Description: Antivirus Microsoft Defender şċāή ћάş ьёёň šţθφφĕď взƒõŗэ ςőmрŀεťιόπ.%ń %ŧЅčªл ĪÐ:%ь{5D57A6FD-405E-407A-A088-C1960E2E1022}%л %ŧŠçąή Ŧÿφė:%ьLogiciel anti-programme malveillant%ņ %ţŞĉāⁿ Ρǻřàмéţёřѕ:%ьAnalyse rapide%ņ %ŧÚşěґ:%ъAUTORITE NT\Système%η %ţŜτøφ Яèãŝόή:%вŞçнёðűℓεď šċâñ ẃáŝ ѕκΐррëđ ьêĉаµѕє тĥέ ℓâѕţ ŝųčċėśŝƒûľ ś¢åŋ ώäš ώïτĥίʼn τђз ŀàŝτ 7 ðāγŝ Date: 2025-08-09 13:27:54 Description: Antivirus Microsoft Defender şċāή ћάş ьёёň šţθφφĕď взƒõŗэ ςőmрŀεťιόπ.%ń %ŧЅčªл ĪÐ:%ь{AE262E4C-8C7D-4105-B2C6-B3470D32FD17}%л %ŧŠçąή Ŧÿφė:%ьLogiciel anti-programme malveillant%ņ %ţŞĉāⁿ Ρǻřàмéţёřѕ:%ьAnalyse rapide%ņ %ŧÚşěґ:%ъAUTORITE NT\Système%η %ţŜτøφ Яèãŝόή:%вҐР€ сõηиęćτīøŋ ŗϋńδøẃй Date: 2025-08-08 12:04:06 Description: Antivirus Microsoft Defender şċāή ћάş ьёёň šţθφφĕď взƒõŗэ ςőmрŀεťιόπ.%ń %ŧЅčªл ĪÐ:%ь{13714B30-2A26-4FCA-A7F6-7AAE330FD8BD}%л %ŧŠçąή Ŧÿφė:%ьLogiciel anti-programme malveillant%ņ %ţŞĉāⁿ Ρǻřàмéţёřѕ:%ьAnalyse rapide%ņ %ŧÚşěґ:%ъAUTORITE NT\Système%η %ţŜτøφ Яèãŝόή:%вŞçнёðűℓεď šċâñ ẃáŝ ѕκΐррëđ ьêĉаµѕє тĥέ ℓâѕţ ŝųčċėśŝƒûľ ś¢åŋ ώäš ώïτĥίʼn τђз ŀàŝτ 7 ðāγŝ Date: 2025-08-07 14:26:02 Description: Antivirus Microsoft Defender şċāή ћάş ьёёň šţθφφĕď взƒõŗэ ςőmрŀεťιόπ.%ń %ŧЅčªл ĪÐ:%ь{393F92D3-F5CD-4E77-90DB-F49F86EAD57A}%л %ŧŠçąή Ŧÿφė:%ьLogiciel anti-programme malveillant%ņ %ţŞĉāⁿ Ρǻřàмéţёřѕ:%ьAnalyse rapide%ņ %ŧÚşěґ:%ъAUTORITE NT\Système%η %ţŜτøφ Яèãŝόή:%вŞçнёðűℓεď šċâñ ẃáŝ ѕκΐррëđ ьêĉаµѕє тĥέ ℓâѕţ ŝųčċėśŝƒûľ ś¢åŋ ώäš ώïτĥίʼn τђз ŀàŝτ 7 ðāγŝ Event[0] Date: 2025-01-25 10:57:02 Description: Antivirus Microsoft Defender a rencontré une erreur lors de la restauration d’un élément en quarantaine. Pour plus d’informations, reportez-vous aux éléments suivants : https://go.microsoft.com/fwlink/?linkid=37020&name=PUA:Win32/Puwaders.C!ml&threatid=242878&enterprise=1 Nom : PUA:Win32/Puwaders.C!ml ID : 242878 Gravité : Grave Catégorie : Logiciel potentiellement non désiré Utilisateur : ColdeayXMax\maxim Code d’erreur : 0x80508014 Description de l’erreur : Impossible de restaurer l’élément en quarantaine. Version de la veille de sécurité : AV: 1.421.1527.0, AS: 1.421.1527.0 Version du moteur : 1.1.24090.11 CodeIntegrity: =============== Date: 2025-08-20 14:23:18 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\139.0.3405.102\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements. Date: 2025-08-17 10:50:15 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\139.0.3405.86\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements. Date: 2025-08-13 14:22:17 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\EdgeWebView\Application\138.0.3351.121\msedgewebview2.exe) attempted to load \Device\HarddiskVolume3\ProgramData\A-Volute\A-Volute.Nahimic\Modules\Scheduled\x64\AudioDevProps2.dll that did not meet the Microsoft signing level requirements. ==================== Infos Mémoire =========================== BIOS: LENOVO LZCN42WW 07/07/2025 Carte mère: LENOVO LNVNB161216 Processeur: 12th Gen Intel(R) Core(TM) i5-12450H Pourcentage de mémoire utilisée: 63% Mémoire physique - RAM - totale: 16108.05 MB Mémoire physique - RAM - disponible: 5908.52 MB Mémoire virtuelle totale: 25836.05 MB Mémoire virtuelle disponible: 11726.59 MB ==================== Lecteurs ================================ Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:125.45 GB) (Model: Micron MTFDKCD512TFK) NTFS Drive e: (Spatium M460) (Fixed) (Total:931.5 GB) (Free:767.31 GB) (Model: MSI M460 1TB) NTFS \\?\Volume{61d03e18-0582-4fd8-9fc4-7e8ab94d9e61}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.21 GB) NTFS \\?\Volume{13793e36-8523-4900-947a-b6948f2cd3ea}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32 ==================== MBR & Table des partitions ==================== ========================================================== Disk: 0 (Size: 476.9 GB) (Disk ID: 5FFBCCF2) Partition: GPT. ========================================================== Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ==================== Fin de Addition.txt =======================