Messages

1

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 08:32:56 PM »

je n'ai pas l'option "Attachments and other options", j'ai juste "analyser"-"chercher fichiers"-"chercher registre" & "corriger"

2

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:08:21 PM »

Error: (12/01/2017 03:56:15 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Wolcen.exe, version : 3.7.0.0, horodatage : 0x5a0d9065
Nom du module défaillant : CryGameSDK.dll, version : 3.7.0.0, horodatage : 0x5a0d9074
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000075f8c3
ID du processus défaillant : 0x1d8c
Heure de début de l’application défaillante : 0x01d36a49b2f46134
Chemin d’accès de l’application défaillante : D:\-JEUX-\- STEAM -\steamapps\common\Wolcen\win_x64\Wolcen.exe
Chemin d’accès du module défaillant: D:\-JEUX-\- STEAM -\steamapps\common\Wolcen\win_x64\CryGameSDK.dll
ID de rapport : e24d05ef-66ae-4776-848c-20d9e81799af
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (12/01/2017 02:29:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante bhd.exe, version : 0.0.0.0, horodatage : 0x5465c323
Nom du module défaillant : d3d9.dll, version : 2.0.3.1120, horodatage : 0x570150f8
Code d’exception : 0xc000041d
Décalage d’erreur : 0x00050acd
ID du processus défaillant : 0x2fdc
Heure de début de l’application défaillante : 0x01d36a438ae57d05
Chemin d’accès de l’application défaillante : F:\STEAM\steamapps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
Chemin d’accès du module défaillant: F:\STEAM\steamapps\common\Resident Evil Biohazard HD REMASTER\d3d9.dll
ID de rapport : 44e795f8-0e54-48ba-a31a-8e55da4f1c74
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (12/01/2017 02:29:01 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante bhd.exe, version : 0.0.0.0, horodatage : 0x5465c323
Nom du module défaillant : d3d9.dll, version : 2.0.3.1120, horodatage : 0x570150f8
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00050acd
ID du processus défaillant : 0x2fdc
Heure de début de l’application défaillante : 0x01d36a438ae57d05
Chemin d’accès de l’application défaillante : F:\STEAM\steamapps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
Chemin d’accès du module défaillant: F:\STEAM\steamapps\common\Resident Evil Biohazard HD REMASTER\d3d9.dll
ID de rapport : bb0ff5cb-0201-4c08-b423-6a9ffb19a6c4
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (11/30/2017 07:59:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante thebureau.exe, version : 0.1.0.15143, horodatage : 0x523bae03
Nom du module défaillant : PhysXCore.dll, version : 2.8.4.8, horodatage : 0x501aa63d
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0004bc97
ID du processus défaillant : 0x19ac
Heure de début de l’application défaillante : 0x01d36a0d200e0c10
Chemin d’accès de l’application défaillante : F:\STEAM\steamapps\common\The Bureau\binaries\win32\thebureau.exe
Chemin d’accès du module défaillant: F:\STEAM\steamapps\common\The Bureau\binaries\win32\PhysXCore.dll
ID de rapport : ab7e60c5-eb05-4368-983d-7ee98234c53f
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (11/30/2017 07:57:35 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante thebureau.exe, version : 0.1.0.15143, horodatage : 0x523bae03
Nom du module défaillant : PhysXCore.dll, version : 2.8.4.8, horodatage : 0x501aa63d
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0004bc97
ID du processus défaillant : 0x1028
Heure de début de l’application défaillante : 0x01d36a0b7ea00595
Chemin d’accès de l’application défaillante : F:\STEAM\steamapps\common\The Bureau\binaries\win32\thebureau.exe
Chemin d’accès du module défaillant: F:\STEAM\steamapps\common\The Bureau\binaries\win32\PhysXCore.dll
ID de rapport : 2f124ced-a70f-4b3b-9b46-2cf11c90efc9
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (11/27/2017 10:55:08 PM) (Source: Perflib) (EventID: 1008) (User: )
Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur.

Error: (11/27/2017 12:58:56 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante GearGame.exe, version : 0.0.0.0, horodatage : 0x5a14f3b6
Nom du module défaillant : GearGame.exe, version : 0.0.0.0, horodatage : 0x5a14f3b6
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000004d98e4e
ID du processus défaillant : 0x2668
Heure de début de l’application défaillante : 0x01d36712841df80f
Chemin d’accès de l’application défaillante : C:\Program Files\WindowsApps\Microsoft.SpartaUWP_11.6.0.2_x64__8wekyb3d8bbwe\GearGame\Binaries\UWP64\GearGame.exe
Chemin d’accès du module défaillant: C:\Program Files\WindowsApps\Microsoft.SpartaUWP_11.6.0.2_x64__8wekyb3d8bbwe\GearGame\Binaries\UWP64\GearGame.exe
ID de rapport : 0a54b98a-b85c-4203-9e3d-fbe9d8dbb99a
Nom complet du package défaillant : Microsoft.SpartaUWP_11.6.0.2_x64__8wekyb3d8bbwe
ID de l’application relative au package défaillant : GearGameShippingPublic


Erreurs système:
=============
Error: (12/02/2017 11:23:40 AM) (Source: DCOM) (EventID: 10016) (User: YOLIX-PC-I7)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID YOLIX-PC-I7\Johan de l’utilisateur (S-1-5-21-3725624749-1276324894-2347643319-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 11:19:40 AM) (Source: DCOM) (EventID: 10016) (User: YOLIX-PC-I7)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID YOLIX-PC-I7\Johan de l’utilisateur (S-1-5-21-3725624749-1276324894-2347643319-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:46:43 AM) (Source: DCOM) (EventID: 10016) (User: YOLIX-PC-I7)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 au SID YOLIX-PC-I7\Johan de l’utilisateur (S-1-5-21-3725624749-1276324894-2347643319-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:45:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:45:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:45:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:45:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:45:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:45:41 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
 et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
 au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/02/2017 09:44:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Assistant Connexion avec un compte Microsoft n’a pas pu démarrer en raison de l’erreur :
Le canal de communication a été fermé.


CodeIntegrity:
===================================
  Date: 2017-11-22 19:25:07.254
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\InfusedApps\Applications\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x86\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 19:25:07.233
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\InfusedApps\Applications\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x86\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 19:25:06.593
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\InfusedApps\Applications\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x64\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 19:25:06.571
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\InfusedApps\Applications\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x64\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 18:34:26.568
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x86\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 18:34:26.547
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x86\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 18:34:25.873
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x64\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2017-11-22 18:34:25.850
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\WindowsApps\Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe\x64\hevcdecoder_store.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Infos Mémoire ===========================

Processeur: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz
Pourcentage de mémoire utilisée: 22%
Mémoire physique - RAM - totale: 16322.36 MB
Mémoire physique - RAM - disponible: 12584.12 MB
Mémoire virtuelle totale: 18754.36 MB
Mémoire virtuelle disponible: 13894.79 MB

==================== Lecteurs ================================

Drive c: () (Fixed) (Total:111.34 GB) (Free:56.65 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)]
Drive d: (••-Mon PC-••) (Fixed) (Total:468.31 GB) (Free:342.44 GB) NTFS
Drive e: (••-Installation-••) (Fixed) (Total:462.75 GB) (Free:35.98 GB) NTFS
Drive f: (Installation) (Fixed) (Total:1862.89 GB) (Free:101.61 GB) NTFS
Drive g: (SSD 475go) (Fixed) (Total:446.58 GB) (Free:91.91 GB) NTFS
Drive h: (TOSHIBA EXT) (Fixed) (Total:1863.01 GB) (Free:72.8 GB) NTFS
Drive i: (SSD250) (Fixed) (Total:256.05 GB) (Free:6.45 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or (Size: 931.5 GB) (Disk ID: A6015280)
Partition 1: (Active) - (Size=468.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=462.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7 or (Size: 111.8 GB) (Disk ID: 47614761)
Partition 1: (Active) - (Size=111.3 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=460 MB) - (Type=27)

========================================================
Disk: 2 (MBR Code: Windows 7 or (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 3 (MBR Code: Windows 7 or (Size: 256.2 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 4 (MBR Code: Windows 7 or (Size: 1863 GB) (Disk ID: 937EF37E)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 5 (MBR Code: Windows 7 or (Size: 447.1 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Fin de Addition.txt ============================

3

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:08:02 PM »

FirewallRules: [{BCB98A02-DA77-4BDA-B334-7B0E88A269C4}] => (Allow) F:\STEAM\steamapps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{D74E90DB-F284-4585-99BC-2684848B5233}] => (Allow) F:\STEAM\steamapps\common\Resident Evil Biohazard HD REMASTER\bhd.exe
FirewallRules: [{F95A7B30-B540-4653-B8BC-E8B39508FD6A}] => (Allow) F:\STEAM\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1D0EDF0C-69B9-4720-A856-2F4CF0823A1A}] => (Allow) F:\STEAM\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{749188FF-09E2-45D6-A38C-806D375B62E6}] => (Allow) D:0\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [{6B85FFA6-4FD2-43D8-9006-EB402D22B7A4}] => (Allow) D:0\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [{FCFF49DE-EF40-4D3C-A00B-EF18A50E762B}] => (Allow) F:\-ORIGIN-\STAR WARS Battlefront II\starwarsbattlefrontii_trial.exe
FirewallRules: [{EB627C40-12C8-460B-B990-29EF93D2F98E}] => (Allow) F:\-ORIGIN-\STAR WARS Battlefront II\starwarsbattlefrontii_trial.exe
FirewallRules: [{990ABDE3-0697-46A8-8A80-6697E28D677B}] => (Allow) F:\-ORIGIN-\STAR WARS Battlefront II\starwarsbattlefrontii.exe
FirewallRules: [{49A1B9B2-CEE2-45CF-8628-C95A51261BFE}] => (Allow) F:\-ORIGIN-\STAR WARS Battlefront II\starwarsbattlefrontii.exe
FirewallRules: [{E4864382-83E1-42CB-B72A-7CBE022512E1}] => (Allow) F:\STEAM\steamapps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{CE68AD9C-4780-4BD4-9FE5-6032969C8885}] => (Allow) F:\STEAM\steamapps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{CA2C3FC3-A13C-46C1-91A5-C92A22F95184}] => (Allow) D:0\Steam\steamapps\common\Mad Max\MadMax.exe
FirewallRules: [{C77CA456-28A5-45C3-BDFE-2DF4D3763B73}] => (Allow) D:0\Steam\steamapps\common\Mad Max\MadMax.exe
FirewallRules: [{72DCC18F-77EF-4E4F-A60F-77C9D132B009}] => (Allow) D:0\Steam\steamapps\common\RESIDENT EVIL 7 biohazard\re7.exe
FirewallRules: [{A2C5767F-39D4-485C-AD93-EFC808970BC3}] => (Allow) D:0\Steam\steamapps\common\RESIDENT EVIL 7 biohazard\re7.exe
FirewallRules: [{DDC795BE-2346-4AC5-8A4E-5FE469EEAA64}] => (Allow) D:0\Steam\steamapps\common\SleepingDogsDefinitiveEdition\sdhdship.exe
FirewallRules: [{D3A58D9F-6A16-465C-A578-7A9F90233CEF}] => (Allow) D:0\Steam\steamapps\common\SleepingDogsDefinitiveEdition\sdhdship.exe
FirewallRules: [{5A1E6996-50FC-4540-90A8-DB4AE20F3BDC}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Wolcen\win_x64\Wolcen.exe
FirewallRules: [{1005F36D-AD05-4234-8382-D040FBD18091}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Wolcen\win_x64\Wolcen.exe
FirewallRules: [{AA472D57-94AD-4F66-88DB-81E9FA5D37AC}] => (Allow) D:0\Steam\steamapps\common\Aliens Colonial Marines\Binaries\Win32\ACM.exe
FirewallRules: [{644143A7-7409-4FCF-97C3-68C000B98C37}] => (Allow) D:0\Steam\steamapps\common\Aliens Colonial Marines\Binaries\Win32\ACM.exe
FirewallRules: [{211F7DAE-B148-4EA5-9777-83DE6C0F58F0}] => (Allow) D:0\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{15A9AF52-820A-4FC9-A326-CEBE28285F02}] => (Allow) D:0\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{18FBAD9F-1BDF-4BFE-8E7E-353A60D0C262}] => (Allow) D:0\Steam\steamapps\common\Alan Wake\AlanWake.exe
FirewallRules: [{B28457BA-BE79-443F-8E11-D521EFC7EDE0}] => (Allow) D:0\Steam\steamapps\common\Alan Wake\AlanWake.exe
FirewallRules: [{8628BE0C-710B-4E6C-B7B5-6AC0077EBB34}] => (Allow) D:0\Steam\steamapps\common\Tales of Zestiria\Tales of Zestiria.exe
FirewallRules: [{222068DD-75AE-4415-98EE-AEB9BFE0724E}] => (Allow) D:0\Steam\steamapps\common\Tales of Zestiria\Tales of Zestiria.exe
FirewallRules: [{1AE4DA1A-C57E-4AEB-9D26-8071C21E0F56}] => (Allow) D:0\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{3EF5118D-EBB7-4D12-9AE5-FA4241E0509E}] => (Allow) D:0\Steam\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{5AAD10B2-E050-414E-B886-F2B9BF7A4024}] => (Allow) D:0\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{CE48AC83-E480-494D-A75D-950339EA439E}] => (Allow) D:0\Steam\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{FE0B681C-5F99-4181-BC1B-CCE6076A401E}] => (Allow) D:0\Steam\steamapps\common\Bound By Flame\BoundByFlame.exe
FirewallRules: [{994E9421-3D75-4A69-928E-7DD3D9E8BC5D}] => (Allow) D:0\Steam\steamapps\common\Bound By Flame\BoundByFlame.exe
FirewallRules: [{5C4BF64F-0CA4-4500-8DEE-2B3F4D228290}] => (Allow) F:\STEAM\steamapps\common\Knights of the Old Republic II\swkotor2.exe
FirewallRules: [{A4751973-1E79-4AD8-9DE4-60D5C826F9F1}] => (Allow) F:\STEAM\steamapps\common\Knights of the Old Republic II\swkotor2.exe
FirewallRules: [{026776F8-C130-4F01-977E-2F9CAAFBB6AE}] => (Allow) F:\STEAM\steamapps\common\Battle Chasers Nightwar\BC.exe
FirewallRules: [{F9E11181-0343-4BC5-BB0A-C52A80143265}] => (Allow) F:\STEAM\steamapps\common\Battle Chasers Nightwar\BC.exe
FirewallRules: [{FC20C7DF-7FD7-4F74-8C2D-82467E21A41E}] => (Allow) F:\STEAM\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{1B5D900F-B6AF-4056-94FC-D5BCE8EE2A5C}] => (Allow) F:\STEAM\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{30189C3D-AD0B-49FB-B676-AE4FD9E49B01}] => (Allow) D:0\Steam\steamapps\common\Two Worlds II\TwoWorlds2.exe
FirewallRules: [{0EA1FC41-C02D-4ECB-9EC4-F55D8F7CBF0B}] => (Allow) D:0\Steam\steamapps\common\Two Worlds II\TwoWorlds2.exe
FirewallRules: [{FBF754DD-16F6-4AB3-A1E2-533CF07A25E9}] => (Allow) D:0\Steam\steamapps\common\Two Worlds II\TwoWorlds2_DX10.exe
FirewallRules: [{2B320B6D-36E5-4C7B-A0B6-452941740777}] => (Allow) D:0\Steam\steamapps\common\Two Worlds II\TwoWorlds2_DX10.exe
FirewallRules: [{04344001-5621-4220-9745-FF97FC114710}] => (Allow) D:0\Steam\steamapps\common\Submerged\Submerged\Binaries\Win64\Submerged-Win64-Shipping.exe
FirewallRules: [{1125AB87-7940-4631-8D09-0754A362D346}] => (Allow) D:0\Steam\steamapps\common\Submerged\Submerged\Binaries\Win64\Submerged-Win64-Shipping.exe
FirewallRules: [{18966482-EFB1-4C61-AAB8-8A27F5E4F71B}] => (Allow) F:\STEAM\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{1F628874-3029-48D2-B500-0703FEBA7BEB}] => (Allow) F:\STEAM\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{29945921-3D64-4B16-A204-327C48E62265}] => (Allow) D:0\Steam\steamapps\common\the-haunted-hells-reach\Binaries\Win32\HauntedGame.exe
FirewallRules: [{8A84AB9B-0DEA-48B9-B110-8D0EDA4645AB}] => (Allow) D:0\Steam\steamapps\common\the-haunted-hells-reach\Binaries\Win32\HauntedGame.exe
FirewallRules: [{C343F83F-FC4F-4734-9BCD-7C0B707565E4}] => (Allow) D:0\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{810D64D9-A750-43F0-B037-EDD689DEACC1}] => (Allow) D:0\Steam\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{519071AA-0682-4020-AAC4-C422AEFB96DD}] => (Allow) D:0\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{8BFCDD78-F5FB-4A0C-8DA8-B26D10858CF9}] => (Allow) D:0\Steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{EF443AC2-153A-4F15-82C4-EB36571A1512}] => (Allow) D:\STEAM\steamapps\common\Seven The Days Long Gone\Seven.exe
FirewallRules: [{E4AE7F91-D7B6-47DE-8AD3-075E77E4974D}] => (Allow) D:\STEAM\steamapps\common\Seven The Days Long Gone\Seven.exe
FirewallRules: [{16BFC5F8-4E39-4106-9843-D1806AAF42E3}] => (Allow) D:\STEAM\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [{11260AEC-7016-4505-B7AF-6A16D8E3CA83}] => (Allow) D:\STEAM\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe
FirewallRules: [TCP Query User{0FF1BCF7-A252-4503-B513-5FC2475DF1F0}D:\steam\steamapps\common\seven the days long gone\seven\binaries\win64\seven-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\seven the days long gone\seven\binaries\win64\seven-win64-shipping.exe
FirewallRules: [UDP Query User{0A17795F-3571-4C73-B32F-5A807AE297EB}D:\steam\steamapps\common\seven the days long gone\seven\binaries\win64\seven-win64-shipping.exe] => (Allow) D:\steam\steamapps\common\seven the days long gone\seven\binaries\win64\seven-win64-shipping.exe

==================== Points de restauration =========================

ATTENTION: La Restauration système est désactivée

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (12/01/2017 11:12:56 PM) (Source: FolderSize) (EventID: 0) (User: )
Description: Event-ID 0

Error: (12/01/2017 03:56:32 PM) (Source: FolderSize) (EventID: 0) (User: )
Description: Event-ID 0

Error: (12/01/2017 10:29:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante blackops3.exe, version : 0.0.0.0, horodatage : 0x59aeed57
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000000030
ID du processus défaillant : 0x1d0c
Heure de début de l’application défaillante : 0x01d36a85f9bd8ac8
Chemin d’accès de l’application défaillante : H:\Steam\steamapps\common\Call of Duty Black Ops III\blackops3.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 1e9e6643-ac91-41a8-8ea7-007f593e4c47
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

4

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:07:43 PM »

FirewallRules: [{B35EBD41-49C5-4D3A-882F-F8F3C6DA879C}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1Trial.exe
FirewallRules: [{6AB75645-C127-4C4D-9412-7E30CD1A5280}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1Trial.exe
FirewallRules: [{607E3B98-28DD-417D-84E7-AC14706EA72C}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1.exe
FirewallRules: [{3C7DEC39-8BD4-490F-9EE6-00020EA204EE}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1.exe
FirewallRules: [{8991A425-AAD4-4EC8-B231-367C87120819}] => (Allow) D:4\STEAM\steamapps\common\Galactic Civilizations III\StardockLauncher.exe
FirewallRules: [{BA80A4D5-1B2B-406B-9CB9-49BCB2ABAEC2}] => (Allow) D:4\STEAM\steamapps\common\Galactic Civilizations III\StardockLauncher.exe
FirewallRules: [{34F81324-042F-403D-882F-FF989E154778}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Vortex The Gateway\vortex.exe
FirewallRules: [{E57E52B5-68AB-498D-8F86-BCCAF9A67B33}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Vortex The Gateway\vortex.exe
FirewallRules: [{21CA7092-7451-490C-9397-3DFE1DB16EB3}] => (Allow) D:4\STEAM\steamapps\common\Willy-Nilly Knight\wnk_game.exe
FirewallRules: [{5CCA9D2C-84E6-49D3-89A5-AD4AC0AEAC3D}] => (Allow) D:4\STEAM\steamapps\common\Willy-Nilly Knight\wnk_game.exe
FirewallRules: [{A65CEF7F-5589-49D1-8800-228E98A4C347}] => (Allow) F:\-ORIGIN-\Crysis 2\bin32\Crysis2.exe
FirewallRules: [{CADE1D89-0D0C-41F9-83EE-AB5C864B2037}] => (Allow) F:\-ORIGIN-\Crysis 2\bin32\Crysis2.exe
FirewallRules: [{C3AD6866-E085-4B93-B6A5-EDB6244EF4DF}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [TCP Query User{9CABD30C-A21F-4DAE-AFA3-CAC03D26A48C}F:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) F:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{D486040F-627B-4D39-961E-DDAFA023D022}F:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) F:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{B6C86AB5-CE94-4FDE-A16E-A529F03580CD}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{F8E1CEC1-05BD-41D1-A793-4DF3054555CE}] => (Allow) D:0\Installation_Jeux\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{F3944E83-9D6A-4301-8E8B-C9E138808777}] => (Allow) D:0\Installation_Jeux\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{63B09CB0-446C-4FC5-9451-BDC864CAA52A}] => (Allow) F:\-ORIGIN-\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{883C08C5-E1D7-4374-A1E2-72B210C840A8}] => (Allow) F:\-ORIGIN-\Mass Effect\Binaries\MassEffect.exe
FirewallRules: [{ECD8347D-DD5F-44E9-8AD2-0D539EAE3575}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Alan Wake\AlanWake.exe
FirewallRules: [{A8CD011E-BB87-473A-A784-07EB0142C9D0}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Alan Wake\AlanWake.exe
FirewallRules: [TCP Query User{03AB889A-CE1A-4724-940F-8CA6FA66ADBE}D:4\wargaming.net\gamecenter\wgc.exe] => (Allow) D:4\wargaming.net\gamecenter\wgc.exe
FirewallRules: [UDP Query User{E1FC913A-3878-4E13-83EF-1177B791BD76}D:4\wargaming.net\gamecenter\wgc.exe] => (Allow) D:4\wargaming.net\gamecenter\wgc.exe
FirewallRules: [{637DB856-4B9E-40E5-8C5C-4223831C89B7}] => (Allow) I:\UPLAY\Assassin's Creed Brotherhood\ACBSP.exe
FirewallRules: [{DDC716F6-F212-4A51-AFD7-9E48AE939981}] => (Allow) I:\UPLAY\Assassin's Creed Brotherhood\ACBSP.exe
FirewallRules: [{05A5940C-92A9-4083-A0CF-7A195964A9B9}] => (Allow) I:\UPLAY\Assassin's Creed Brotherhood\ACBMP.exe
FirewallRules: [{0F39AEFD-6E78-4BFB-9E7E-3595803B6EEE}] => (Allow) I:\UPLAY\Assassin's Creed Brotherhood\ACBMP.exe
FirewallRules: [{8724A201-03B0-4547-92F8-720A8323AA09}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{B2CB4DE7-222F-42B2-95A9-253E7750B329}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{256EE42D-788B-4D93-AA85-B9063A0277DD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{82FB74BA-81C6-4D7B-8DB5-D29A0BF0DEFE}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{B3D50056-7BD7-4EA0-83B9-B297DFFBA3AD}] => (Allow) I:\UPLAY\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{A070BB0E-A706-4B35-ABD8-05C1919B29FA}] => (Allow) I:\UPLAY\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{19809590-F981-4D89-B785-B9512E78E580}] => (Allow) I:\UPLAY\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{CA0FA602-111D-4E4E-9102-9DD6345E9960}] => (Allow) I:\UPLAY\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{C3077220-EEC4-4E17-92ED-B3024CF4D830}] => (Allow) D:4\STEAM\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe
FirewallRules: [{527F5200-1BEE-40D0-A388-51DF4AC11EA9}] => (Allow) D:4\STEAM\steamapps\common\ShadowOfWar\x64\ShadowOfWar.exe
FirewallRules: [{90CF56EB-3D0C-4385-844B-91BDFC8153CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CPUCores\cpucores.exe
FirewallRules: [{55194790-49BD-45CD-91C3-FD0109D38FED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CPUCores\cpucores.exe
FirewallRules: [{F91A576A-FDF6-4402-935E-7136D358F029}] => (Allow) D:0\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{4474A2D7-89D6-4B2F-BBA1-D20C65184BEF}] => (Allow) D:0\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{9A8A83A4-F313-471E-BE72-C013A6D2BD79}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{E27FE8CF-2C5F-4A08-B538-385F8701ED06}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{5D0DA464-69AD-4226-9E3A-499E399A0A32}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{2C2842D6-2366-4232-A909-2318CFA472C6}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{3E2B5419-8F7A-42AA-96BE-5EC7FF8D89A7}] => (Allow) D:4\STEAM\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{134E23B8-4A76-42E3-AC6E-9C16AF913F8B}] => (Allow) D:4\STEAM\steamapps\common\Divinity Original Sin Enhanced Edition\Shipping\EoCApp.exe
FirewallRules: [{55D17C2F-12C9-4101-8BF9-D85B10DED5EA}] => (Allow) D:0\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{C3A6A961-F301-4DB2-8E38-B2C14BE7DC1D}] => (Allow) D:0\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{91914BBC-D0DB-4B1A-A848-8B0625A025A5}] => (Allow) D:0\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{CB5C1843-BB6B-4A25-816F-6582C262EAFD}] => (Allow) D:0\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{1B2D9004-B8CE-4C70-B15E-3BC78C289137}] => (Allow) D:0\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{A8BD67B9-38D2-46C7-9537-AC9A535171F3}] => (Allow) D:0\Steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{F269C0CF-5F7A-4E86-B554-CE00A5965BBD}] => (Allow) D:0\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{8214ACCD-875A-488A-BB64-9885CE4EB4F6}] => (Allow) D:0\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{52767415-F907-4E90-B4F9-47BEC0DE3736}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Mad Max\MadMax.exe
FirewallRules: [{96F98267-F3A2-4503-B315-0D47D51F840F}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Mad Max\MadMax.exe
FirewallRules: [{AA5D39DA-9564-42F1-AA6D-7AD239929CA3}] => (Allow) D:0\Steam\steamapps\common\Sniper Elite 4\Launcher\SniperElite4.exe
FirewallRules: [{F6156F49-004F-4561-8272-6473FC696EA7}] => (Allow) D:0\Steam\steamapps\common\Sniper Elite 4\Launcher\SniperElite4.exe
FirewallRules: [{5D2C42FC-2646-40C2-A436-236F4FF85949}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{B0F35776-0BA2-4D73-9399-2DB7ADEAE5E7}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{FEE45EBC-491B-45B1-8264-B9DDD1D1A7DF}] => (Allow) I:\STEAM\steamapps\common\Rise of Nations\patriots.exe
FirewallRules: [{9453C5D5-5CA0-48CD-AA2E-02D6E83DA3E5}] => (Allow) I:\STEAM\steamapps\common\Rise of Nations\patriots.exe
FirewallRules: [{393982D3-E511-4062-B524-8FFA13A097D8}] => (Allow) F:\STEAM\steamapps\common\ELEX\system\ELEX.exe
FirewallRules: [{A283F859-95DA-4FC1-B592-B787AC8ED117}] => (Allow) F:\STEAM\steamapps\common\ELEX\system\ELEX.exe
FirewallRules: [{9B692C97-E460-4BEA-9A11-8AB82350D563}] => (Allow) D:4\STEAM\steamapps\common\Tyranny\Tyranny.exe
FirewallRules: [{92440AB0-4508-4C72-9823-65C91D951D25}] => (Allow) D:4\STEAM\steamapps\common\Tyranny\Tyranny.exe
FirewallRules: [{F4E3421F-9EAD-48C5-B924-EFA31C76F2DF}] => (Allow) I:\STEAM\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{A4872A3F-BD0F-4362-B711-5D1EF3F2AF93}] => (Allow) I:\STEAM\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{00AF7573-5C3D-4D1F-AD97-7E36E3F78E5E}] => (Allow) F:\STEAM\steamapps\common\Rise of Nations\patriots.exe
FirewallRules: [{4176765F-3412-4075-82EC-A3AD817B5D95}] => (Allow) F:\STEAM\steamapps\common\Rise of Nations\patriots.exe
FirewallRules: [{19EEF44A-8EBA-4E08-86CA-F14B1B07BAE5}] => (Allow) F:\STEAM\steamapps\common\Aarklash Legacy\Aarklash.exe
FirewallRules: [{56C5B40E-0F57-4976-9CD5-B84D3261D0A1}] => (Allow) F:\STEAM\steamapps\common\Aarklash Legacy\Aarklash.exe
FirewallRules: [{0496722A-674D-41EE-8258-448ECF8A8EAE}] => (Allow) D:0\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe
FirewallRules: [{574314CF-4D84-4CC0-9C94-D7912B14B230}] => (Allow) D:0\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe
FirewallRules: [{081C270E-55C2-45CC-B630-F5CED363D88C}] => (Allow) F:\Far Cry Primal\bin\FCPrimal.exe
FirewallRules: [{5E21D704-BE7F-4EE6-BFC7-56BA6913B712}] => (Allow) I:\STEAM\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{03940075-9848-4BEC-8B9E-A28ADEE856E1}] => (Allow) I:\STEAM\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{240DF73E-93B7-40C5-B997-338F90B6D6CB}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\The Incredible Adventures of Van Helsing II\VanHelsing.exe
FirewallRules: [{9A9B2518-5CF7-4878-9370-DE6AD76A8C4A}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\The Incredible Adventures of Van Helsing II\VanHelsing.exe
FirewallRules: [{1C15BDB2-84FA-4211-8574-22261194404B}] => (Allow) D:0\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{1D5B61DF-28F9-4E9F-838C-54ACA54E46E0}] => (Allow) D:0\Steam\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{9BF9DB7C-B211-46DF-AE90-F569C099D99A}] => (Allow) D:0\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{E084529D-12A8-48E0-8A95-21CF76D6B8DB}] => (Allow) D:0\Steam\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{6CB5EDD2-CE79-4C37-B469-77A8FD05677B}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Wolcen\win_x64\Wolcen.exe
FirewallRules: [{A9C7900E-8563-481C-967D-8CE1E8C12310}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Wolcen\win_x64\Wolcen.exe
FirewallRules: [{E9700EDD-84F7-40E9-8061-60FB88425902}] => (Allow) D:0\Steam\steamapps\common\Sang-Froid Tales of Werewolves\SangFroid.exe
FirewallRules: [{D5C0DB97-A544-43C4-BF13-F9256EFBEC77}] => (Allow) D:0\Steam\steamapps\common\Sang-Froid Tales of Werewolves\SangFroid.exe
FirewallRules: [{4373C867-A5CB-4B82-90E5-D12D03BDA1B0}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\the-haunted-hells-reach\Binaries\Win32\HauntedGame.exe
FirewallRules: [{6B6BF3A5-1640-450A-8B6E-730BC9C7CADD}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\the-haunted-hells-reach\Binaries\Win32\HauntedGame.exe
FirewallRules: [{26E2014C-99DF-47F6-B811-5A25210F9DC9}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2.exe
FirewallRules: [{6FD8ADE4-F154-4E88-A676-00D5B5BA1FE7}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2.exe
FirewallRules: [{CD648FD0-0C0D-4C35-9770-34A3DAF4FC90}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{078CCAEA-42C8-470C-A2D9-B64A06F04815}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{C32CB427-4CE8-468B-95E5-77FEEA445D4A}] => (Allow) D:0\Steam\steamapps\common\The Bards Tale\The Bard's Tale.exe
FirewallRules: [{77E78B60-24BE-4729-A8FD-F04B0399289B}] => (Allow) D:0\Steam\steamapps\common\The Bards Tale\The Bard's Tale.exe
FirewallRules: [{71489573-A89B-4129-81EC-828FA619036E}] => (Allow) D:0\Steam\steamapps\common\The Bards Tale\Config\The Bard's Setup.exe
FirewallRules: [{2DC76224-FAF1-4957-A586-8A32B4C6368B}] => (Allow) D:0\Steam\steamapps\common\The Bards Tale\Config\The Bard's Setup.exe
FirewallRules: [{21725386-DB1C-4ADE-AF60-932E852DB75F}] => (Allow) D:0\Steam\steamapps\common\DepthHunter2\dh2.exe
FirewallRules: [{D6435CDF-A18D-4E2F-9AA4-B94700A895A8}] => (Allow) D:0\Steam\steamapps\common\DepthHunter2\dh2.exe
FirewallRules: [{5AD59908-B97F-4018-B0CB-5B1F44597B9A}] => (Allow) D:0\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{4774CB16-8780-456F-BD4D-EA3008599808}] => (Allow) D:0\Steam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{1239673C-1EE0-4B70-A83A-DF9FB610BAA0}] => (Allow) D:0\Steam\steamapps\common\Lichdom Battlemage\Bin64\LichdomBattlemage.exe
FirewallRules: [{19D52B9A-632F-472D-AD01-CD8DEA33D3CB}] => (Allow) D:0\Steam\steamapps\common\Lichdom Battlemage\Bin64\LichdomBattlemage.exe
FirewallRules: [{C167B2C9-8890-44EC-A559-4A32CC7401D7}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{46C9D6BD-B912-489B-AC73-3AF7C3B5ABE0}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\SteamVRPerformanceTest\bin\win64\vr.exe
FirewallRules: [{766D6944-E75F-4CBD-9F9A-E97E73171987}] => (Allow) D:0\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{546DA76B-4711-455C-A5A1-D73CE942C517}] => (Allow) D:0\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{6E63402F-9A35-4DB4-934E-23264954962B}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Tales of Zestiria\Tales of Zestiria.exe
FirewallRules: [{E53A8EA1-2F34-4C83-B640-E726A35C7B3B}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Tales of Zestiria\Tales of Zestiria.exe
FirewallRules: [{0090FD5C-0B8A-4C61-8C4C-03A79B843A2D}] => (Allow) D:0\Steam\steamapps\common\The Incredible Adventures of Van Helsing III\VanHelsing.exe
FirewallRules: [{FF42E26C-A527-4C75-B4B3-3D9F7A2E395C}] => (Allow) D:0\Steam\steamapps\common\The Incredible Adventures of Van Helsing III\VanHelsing.exe
FirewallRules: [{A5E006C7-F1E6-41BE-823B-B24A865121EB}] => (Allow) F:\STEAM\steamapps\common\Shiness\Binaries\Win64\ShinessGame.exe
FirewallRules: [{3B87258A-133C-486F-84AC-AD71E454269A}] => (Allow) F:\STEAM\steamapps\common\Shiness\Binaries\Win64\ShinessGame.exe
FirewallRules: [{D257F784-4B9E-40C3-84F5-3FF1C114C393}] => (Allow) D:0\Steam\steamapps\common\Tales of Symphonia\TOS.exe
FirewallRules: [{4DF26D7E-6259-4649-AF28-DA7D307DCC0B}] => (Allow) D:0\Steam\steamapps\common\Tales of Symphonia\TOS.exe
FirewallRules: [{F25CF00F-0544-46D6-ACB5-9AFBDDF42375}] => (Allow) F:\STEAM\steamapps\common\Shadow Complex Remastered\Binaries\Win32\ShadowComplex-Win32.exe
FirewallRules: [{F0B9EA8C-40FB-4171-B7E6-47B81C92ACE6}] => (Allow) F:\STEAM\steamapps\common\Shadow Complex Remastered\Binaries\Win32\ShadowComplex-Win32.exe
FirewallRules: [{4E4CE0AC-413F-4FDC-B75A-E00D0661904B}] => (Allow) D:4\STEAM\steamapps\common\BioShock Remastered\Build\Final\BioshockHD.exe
FirewallRules: [{73E0814C-0E66-476C-A687-982C95EF917C}] => (Allow) D:4\STEAM\steamapps\common\BioShock Remastered\Build\Final\BioshockHD.exe
FirewallRules: [{144B0472-1FF9-49BF-B324-F3A021EF8346}] => (Allow) D:4\STEAM\steamapps\common\BioShock 2 Remastered\Build\Final\Bioshock2HD.exe
FirewallRules: [{1EF42343-1A3D-4F47-A8AA-A4AD27F63F53}] => (Allow) D:4\STEAM\steamapps\common\BioShock 2 Remastered\Build\Final\Bioshock2HD.exe
FirewallRules: [{45A62AB4-B4B3-458D-A053-6A8BA19812D3}] => (Allow) D:0\Steam\steamapps\common\WRC 6\WRC6.exe
FirewallRules: [{A18FEDB2-6DCB-4C5C-940F-F8A4D6402C6D}] => (Allow) D:0\Steam\steamapps\common\WRC 6\WRC6.exe
FirewallRules: [{10226E47-DF0F-483A-964B-C8BE79D60809}] => (Allow) D:4\STEAM\steamapps\common\Subnautica\Subnautica.exe
FirewallRules: [{030F1068-79A8-452B-9137-B82D0D65B939}] => (Allow) D:4\STEAM\steamapps\common\Subnautica\Subnautica.exe
FirewallRules: [{188AB6A6-547B-4E3F-AC5D-5521DFA93AE7}] => (Allow) D:4\STEAM\steamapps\common\theHunterCotW\theHunterCotW_F.exe
FirewallRules: [{B39F92B3-B63A-4B59-A765-63CD9B13BB10}] => (Allow) D:4\STEAM\steamapps\common\theHunterCotW\theHunterCotW_F.exe
FirewallRules: [{9BEBF187-9062-403F-90CA-7B4B05CCA441}] => (Allow) D:4\STEAM\steamapps\common\The Surge\bin\TheSurge.exe
FirewallRules: [{1FC808EA-C031-4D11-B4C5-C00DD8BA6B0D}] => (Allow) D:4\STEAM\steamapps\common\The Surge\bin\TheSurge.exe
FirewallRules: [{99FAF72D-65BC-4775-BFA3-D2D0AF15B310}] => (Allow) I:\STEAM\steamapps\common\Prey\Binaries\Danielle\x64\Release\Prey.exe
FirewallRules: [{6F452164-82C8-4B29-83F2-8C59352BA8E2}] => (Allow) I:\STEAM\steamapps\common\Prey\Binaries\Danielle\x64\Release\Prey.exe
FirewallRules: [{3233B367-401D-4152-84AF-91D04F2CB2A6}] => (Allow) F:\STEAM\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe
FirewallRules: [{7B6B4086-2884-4638-8077-5548CE57BEBA}] => (Allow) F:\STEAM\steamapps\common\The Bureau\Binaries\Win32\TheBureau.exe

5

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:07:03 PM »

FirewallRules: [{F9DB2D72-FB6D-40EA-8DB3-F81DBA965645}] => (Allow) G:\Steam\steamapps\common\Sniper Elite 4\Launcher\SniperElite4.exe
FirewallRules: [{DF63E2E3-9988-4DC7-9410-4EB22F4A76D9}] => (Allow) G:\Steam\steamapps\common\Sniper Elite 4\Launcher\SniperElite4.exe
FirewallRules: [{9A0EE7CF-46AA-476D-9DC5-AE13A39083F0}] => (Allow) F:\STEAM\steamapps\common\Ride 2\Ride2X64.exe
FirewallRules: [{98F18A56-B8D9-4B6F-8EC0-344776F28E96}] => (Allow) F:\STEAM\steamapps\common\Ride 2\Ride2X64.exe
FirewallRules: [{4C4592F6-79B9-4FC1-A199-8413592A7B53}] => (Allow) F:\STEAM\steamapps\common\FINAL FANTASY FFX&FFX-2 HD Remaster\FFX&X-2_LAUNCHER.exe
FirewallRules: [{4F2C296E-B51C-4601-8725-235C422638AE}] => (Allow) F:\STEAM\steamapps\common\FINAL FANTASY FFX&FFX-2 HD Remaster\FFX&X-2_LAUNCHER.exe
FirewallRules: [{7E33597A-2DCE-466E-A5FB-95533C08669B}] => (Allow) F:\STEAM\steamapps\common\Test Drive Unlimited 2\UpLauncher.exe
FirewallRules: [{ACFECC43-97EE-4F00-85EC-8EF4C4656E6C}] => (Allow) F:\STEAM\steamapps\common\Test Drive Unlimited 2\UpLauncher.exe
FirewallRules: [{296AB971-48B8-4616-9138-927813C06AA8}] => (Allow) F:\STEAM\steamapps\common\Dragon Quest Heroes\DQH.exe
FirewallRules: [{FEFA905C-37AE-4749-8F1E-C976D925DD42}] => (Allow) F:\STEAM\steamapps\common\Dragon Quest Heroes\DQH.exe
FirewallRules: [{86FDEE93-5C8B-46AF-8F9E-B08723E22ECF}] => (Allow) F:\STEAM\steamapps\common\Dragon Quest Heroes\Config.exe
FirewallRules: [{B3ADE1BE-7A74-41A9-9186-04839090F073}] => (Allow) F:\STEAM\steamapps\common\Dragon Quest Heroes\Config.exe
FirewallRules: [{FF7F3303-BE14-4463-BC15-87374DCE28A2}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Titan Quest Anniversary Edition\TQ.exe
FirewallRules: [{E2706EB1-B38E-40D4-9544-2AC4119FAB1E}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Titan Quest Anniversary Edition\TQ.exe
FirewallRules: [{E19B3B96-228F-4E34-8745-FD25AEF03FBC}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe
FirewallRules: [{16948F0B-6E58-40D7-BD19-F2EE7EF52599}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Titan Quest Anniversary Edition\WorkshopTool\TQWorkshopTool.exe
FirewallRules: [{2A29E500-3C14-478D-8CA1-57FCA60ED10D}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{2CC8B32A-CDB1-4365-A8AF-4E240C5ECFF1}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{283CC5D7-4B12-45DB-A055-1FD982D0784C}] => (Allow) F:\-ORIGIN-\Need for Speed\NFS16.exe
FirewallRules: [{15367C53-E498-4FF6-B46C-BFF7699F1F09}] => (Allow) F:\-ORIGIN-\Need for Speed\NFS16.exe
FirewallRules: [{C95C8BB8-0534-4EF9-9987-B9F5E52FAE3C}] => (Allow) F:\-ORIGIN-\Need for Speed\NFS16_trial.exe
FirewallRules: [{DBB07AEB-62A6-4EB5-8FFB-6B4A26511FB0}] => (Allow) F:\-ORIGIN-\Need for Speed\NFS16_trial.exe
FirewallRules: [{C65BEB00-6F63-47A0-AFE9-90F4AA2CB1A6}] => (Allow) F:\-ORIGIN-\Need for Speed(TM) Rivals\NFS14_x86.exe
FirewallRules: [{87057898-92A2-480E-8B81-A769396F9AA8}] => (Allow) F:\-ORIGIN-\Need for Speed(TM) Rivals\NFS14_x86.exe
FirewallRules: [{BBC1B43B-2CA4-4FD9-B574-F1C348EB203B}] => (Allow) F:\-ORIGIN-\Need for Speed(TM) Rivals\NFS14.exe
FirewallRules: [{6224D89C-15D6-4193-9F1E-8175AF6D29A4}] => (Allow) F:\-ORIGIN-\Need for Speed(TM) Rivals\NFS14.exe
FirewallRules: [{0A276D68-C96A-4FBD-B033-15C1E1306CB0}] => (Allow) F:\-ORIGIN-\FIFA 17\FIFASetup\fifaconfig.exe
FirewallRules: [{C5032DD9-DBAC-4B49-BC44-8A3338DAE590}] => (Allow) F:\-ORIGIN-\FIFA 17\FIFASetup\fifaconfig.exe
FirewallRules: [{549C0CDF-8740-4E38-90A2-4853F3C92BF6}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1Trial.exe
FirewallRules: [{DBCADD2B-EF3C-415A-A638-B768F57067B2}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1Trial.exe
FirewallRules: [{9D5D0498-2C81-403E-8398-C9D307C4B814}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1.exe
FirewallRules: [{CBB094D0-E170-4BE6-9669-FC8DD86FBDD7}] => (Allow) F:\-ORIGIN-\Battlefield 1\bf1.exe
FirewallRules: [{4BCD2AF9-78BC-455C-BE73-1CCB1EB157B4}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{CF527AD2-7F2E-493C-A83B-BDA8E3AB5BBC}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{6DBE0C92-8468-404C-BF41-10BB54A142EA}] => (Allow) F:\-ORIGIN-\Battlefield 4\BFLauncher.exe
FirewallRules: [{00765AB4-9D88-456F-AB2E-EF4661EBA343}] => (Allow) F:\-ORIGIN-\Battlefield 4\BFLauncher.exe
FirewallRules: [{74F216B8-BB8B-470C-A2A6-C288B70CBF13}] => (Allow) F:\-ORIGIN-\Battlefield 4\BFLauncher_x86.exe
FirewallRules: [{4391DB17-4F1E-4254-972B-2E7BA4F5F36A}] => (Allow) F:\-ORIGIN-\Battlefield 4\BFLauncher_x86.exe
FirewallRules: [{F9009460-DC3A-46D2-9691-885CA296D241}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C6D0F6E2-858C-48B9-850D-4D9AC152337A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B55E1EE4-FC4B-4A59-975D-5F4BE6BC571D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{6C8473D6-C4AC-4F11-994F-7ACECBA60EED}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{378A40AC-F50A-4D21-B414-874D9E375305}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{BE65A556-3449-431B-9866-5F3C2BF027F6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{7F6ABF67-6280-4AC3-B39D-832E6AF3C2D7}] => (Allow) F:\-ORIGIN-\BFH\BFHWebHelper.exe
FirewallRules: [{4968E461-F19F-466A-B180-77955C0BE39E}] => (Allow) F:\-ORIGIN-\BFH\BFHWebHelper.exe
FirewallRules: [{EA624A70-E2BF-4683-AE60-A1BC8037CC68}] => (Allow) F:\STEAM\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe
FirewallRules: [{727506EF-6F80-4954-8166-2A08912E506D}] => (Allow) F:\STEAM\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe
FirewallRules: [{50407D89-0431-46D6-9952-ADCD998173AB}] => (Allow) G:\Steam\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe
FirewallRules: [{C4F1D465-C2EA-4FE1-AC2D-E4F5BDE70B20}] => (Allow) G:\Steam\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe
FirewallRules: [{E7AA2FB6-769D-4315-B4EB-B810CBA3B228}] => (Allow) F:\STEAM\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{BC9FB619-E099-45A7-9B10-1ABF49FA0D7C}] => (Allow) F:\STEAM\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{0E0B5AAF-6CBD-414F-8E52-10945028366F}] => (Allow) F:\STEAM\steamapps\common\Farming Simulator 17\x86\FarmingSimulator2017Game.exe
FirewallRules: [{EADF9C80-6342-45A7-A449-072AC5DC05DF}] => (Allow) F:\STEAM\steamapps\common\Farming Simulator 17\x86\FarmingSimulator2017Game.exe
FirewallRules: [{D5271927-95E6-44CC-A496-79A7816AA157}] => (Allow) G:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{55817A6F-736E-4AA7-AA7A-A184F4DFAA83}] => (Allow) G:\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{7CB9C80D-D05B-4EE6-A105-11D5613400E4}] => (Allow) G:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{F70F6844-8C88-441E-8434-33BA22B46D5C}] => (Allow) G:\Steam\steamapps\common\Dishonored2\Dishonored2.exe
FirewallRules: [{1C78298F-EDBA-4E1C-992F-0220149E7048}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{F5EDF7DE-7D4F-4C63-A923-07BAC1E18D6E}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\No Man's Sky\Binaries\NMS.exe
FirewallRules: [{6E4121B3-BA2C-4CE7-A5C6-9A5CDDBE871A}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Mafia III\launcher.exe
FirewallRules: [{32124F25-30FB-4656-9B40-9A4C5422D1D2}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Mafia III\launcher.exe
FirewallRules: [{CC6CEC1C-3BA2-463F-90F8-1FDD1AE44DF2}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Call of Duty - Infinite Warfare\iw7_ship.exe
FirewallRules: [{C7583002-8677-4CF7-89BC-8D56FFAD29CD}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Call of Duty - Infinite Warfare\iw7_ship.exe
FirewallRules: [TCP Query User{93888FAE-192B-4D96-BEB2-CACCE1C712EF}F:\-origin-\star wars battlefront\starwarsbattlefront.exe] => (Allow) F:\-origin-\star wars battlefront\starwarsbattlefront.exe
FirewallRules: [UDP Query User{E734D6C0-07C7-4451-BC03-86197F9DA169}F:\-origin-\star wars battlefront\starwarsbattlefront.exe] => (Allow) F:\-origin-\star wars battlefront\starwarsbattlefront.exe
FirewallRules: [TCP Query User{C6232FE1-5F8E-474A-AF8A-FE75557242CF}D:\-jeux-\- steam -\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [UDP Query User{F6F7E939-FF28-417C-AD5B-9A2477A73A4C}D:\-jeux-\- steam -\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\elite dangerous\products\elite-dangerous-64\elitedangerous64.exe
FirewallRules: [{9BD09B10-B7C1-48BE-B914-847D93F1514F}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{381CD9C4-B980-4CA3-9B83-FCA191BA5DF1}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [TCP Query User{00A4B5D9-C56E-4C8D-A581-6F497EAC55D5}D:\-jeux-\- steam -\steamapps\common\divinity original sin enhanced edition\shipping\eocapp.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\divinity original sin enhanced edition\shipping\eocapp.exe
FirewallRules: [UDP Query User{81D492E7-A051-4913-82F9-FA384A0ADD49}D:\-jeux-\- steam -\steamapps\common\divinity original sin enhanced edition\shipping\eocapp.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\divinity original sin enhanced edition\shipping\eocapp.exe
FirewallRules: [{3E0FC7DA-424E-4529-861D-288411EF0E9F}] => (Allow) F:\Steep\steep.exe
FirewallRules: [TCP Query User{60D4CD9B-062A-473B-BB27-FB0E755BBB85}I:\diablo iii\x64\diablo iii64.exe] => (Allow) I:\diablo iii\x64\diablo iii64.exe
FirewallRules: [UDP Query User{A3CAB979-013D-43D3-B90F-56B7D224113F}I:\diablo iii\x64\diablo iii64.exe] => (Allow) I:\diablo iii\x64\diablo iii64.exe
FirewallRules: [{A5C848BB-92DF-4629-A8CD-629E74629C5D}] => (Block) I:\diablo iii\x64\diablo iii64.exe
FirewallRules: [{34F6B9DA-ADDF-4978-97E6-34BBBD229E59}] => (Block) I:\diablo iii\x64\diablo iii64.exe
FirewallRules: [{36871603-01DE-4CB1-B487-347F72A399F8}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2.exe
FirewallRules: [{D37443F7-BC0F-49E4-8714-6F89116798A0}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2.exe
FirewallRules: [{3B37B619-2631-40FE-A12F-C54841D72C0C}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{D6CBF9D3-939C-415A-AEC5-C66D8FB6FB62}] => (Allow) F:\-ORIGIN-\Titanfall2\Titanfall2_trial.exe
FirewallRules: [{CDCC25A9-D55D-41A5-A012-C12C5EBB79DA}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{EAC55D2B-A083-4484-8921-9AB5FF7726A9}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{FE7BC2A5-F4CC-444D-A71D-BC8F584707D7}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{EFB9EB56-8A76-4A73-8B70-6B804FAF2230}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{4D7384F9-DA73-4E83-8537-FADECB6B8D03}] => (Allow) G:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{22DF5AA0-F94C-44A9-8B7A-719435D08C62}] => (Allow) G:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{1426FF78-6820-4D17-B5BA-80B48C001F20}] => (Allow) G:\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{3C4A7B72-063E-4EA0-A6EA-4D45D667737B}] => (Allow) G:\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{EEA4B2CD-5EBB-48DF-8BD9-DBCCB148885A}] => (Allow) G:\Steam\steamapps\common\Styx Shards of Darkness\Styx2.exe
FirewallRules: [{CF8D47A7-C94A-47E9-963A-AF39A1D6FF43}] => (Allow) G:\Steam\steamapps\common\Styx Shards of Darkness\Styx2.exe
FirewallRules: [{59F1D5E7-B53C-49B0-94E6-32BCEF26FB93}] => (Allow) D:5\Steam\steamapps\common\HardWest\HardWest.exe
FirewallRules: [{5E9C312F-629E-4D59-B352-C50BE9089903}] => (Allow) D:5\Steam\steamapps\common\HardWest\HardWest.exe
FirewallRules: [{F4ED5E12-B6C8-4AED-A77E-6CBDCB33C105}] => (Allow) D:5\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{F2CD5798-0E74-4556-9DF2-DCF744C98FCD}] => (Allow) D:5\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [TCP Query User{9761957B-F36A-4861-A6E2-2EAF30644DE3}F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{E2A14C08-F057-48D2-AD96-C62F96F04A89}F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{C0A24085-30E6-4FF9-9BD2-57F30A3AB085}F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{CC9E29FE-8157-4339-9FEC-CB29D9BFEE23}F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) F:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [TCP Query User{969E1CE2-E08B-4AD6-9B0F-E81CB2557167}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [UDP Query User{025F55F3-0360-486C-96F6-85DAD31FA876}F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) F:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe
FirewallRules: [{F549011E-1942-4ACB-8E8D-EAB0867820F2}] => (Allow) D:6\Steam\steamapps\common\WRC 6\WRC6.exe
FirewallRules: [{41E9400C-61CE-48FF-881C-AB5D2FF58DEF}] => (Allow) D:6\Steam\steamapps\common\WRC 6\WRC6.exe
FirewallRules: [{8023E9FB-D89F-4339-9071-AA11B1445AD1}] => (Allow) D:6\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{42532DC6-1BE6-48BF-9454-5A7B429A635B}] => (Allow) D:6\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{77F7C08B-0B3B-4E07-91BC-9CD47F9084C4}] => (Allow) D:4\STEAM\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe
FirewallRules: [{76947D0F-F68D-4565-BA0D-C1C085C65260}] => (Allow) D:4\STEAM\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe
FirewallRules: [{961B51C8-B4A4-4A3F-994C-160463E2E67A}] => (Allow) D:6\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{E35EAF60-4A1B-4E90-B08D-A12CB51F0E21}] => (Allow) D:6\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [TCP Query User{6F9CD461-4047-479E-BBD7-2720DCCFDEE8}F:\-origin-\bfh\bfh.exe] => (Allow) F:\-origin-\bfh\bfh.exe
FirewallRules: [UDP Query User{EB1E5E05-E40E-464A-A5B9-7A42BFA89709}F:\-origin-\bfh\bfh.exe] => (Allow) F:\-origin-\bfh\bfh.exe
FirewallRules: [{DC3FEFEF-A173-43A1-A6C5-C10BE23F1037}] => (Allow) I:\STEAM\steamapps\common\Aarklash Legacy\Aarklash.exe
FirewallRules: [{B3D4607B-6A05-4C0F-9548-1D7E6BE4BE35}] => (Allow) I:\STEAM\steamapps\common\Aarklash Legacy\Aarklash.exe
FirewallRules: [{31262A59-025F-49BB-9AA7-2A673B815EC4}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Battle Chasers Nightwar\BC.exe
FirewallRules: [{EDD00862-D915-4483-B07F-C202D0875714}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Battle Chasers Nightwar\BC.exe
FirewallRules: [{E28D1EAD-1095-448E-BC93-64F5B0741042}] => (Allow) I:\ORIGIN\BFH\BFHWebHelper.exe
FirewallRules: [{AE1F6D56-9C60-4AB1-A945-B5B2BAC8E060}] => (Allow) I:\ORIGIN\BFH\BFHWebHelper.exe
FirewallRules: [TCP Query User{7D28BBC0-8780-4006-808C-3EB3AED5CC06}I:\origin\bfh\bfh.exe] => (Allow) I:\origin\bfh\bfh.exe
FirewallRules: [UDP Query User{9A2C0119-923C-4DB4-B1F3-CD9A962C9482}I:\origin\bfh\bfh.exe] => (Allow) I:\origin\bfh\bfh.exe
FirewallRules: [{714CCF6C-C12A-4DAF-9D7D-492FE9577C6A}] => (Allow) D:0\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{BFE750A4-8E96-4F4E-8137-FE0364382125}] => (Allow) D:0\Steam\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{DF7EBCE6-BE18-453B-99D2-2B1E808DE9A6}] => (Allow) D:0\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{4A584A14-14D3-44D6-9035-48EBBB4DF437}] => (Allow) D:0\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [TCP Query User{77C1925F-2219-428B-AA81-535297FAC3AE}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe
FirewallRules: [UDP Query User{0B5638C5-3C37-4273-ADD3-D6595420D6D6}C:\program files (x86)\windscribe\wsappcontrol.exe] => (Allow) C:\program files (x86)\windscribe\wsappcontrol.exe
FirewallRules: [{04B86650-0E66-4D9F-923F-3702B4D7A79A}] => (Allow) D:0\Steam\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe
FirewallRules: [{354B6444-59B2-498C-BC16-C427DDFCA7BD}] => (Allow) D:0\Steam\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe
FirewallRules: [{73ADAC08-54F8-4F24-89ED-13CBDDE789D8}] => (Allow) F:\STEAM\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{E606D1BB-9404-4B65-956C-CA6450DE1136}] => (Allow) F:\STEAM\steamapps\common\Farming Simulator 17\x64\FarmingSimulator2017Game.exe
FirewallRules: [{FD6C0671-FA4E-4A45-85BF-356AC2740485}] => (Allow) D:4\STEAM\steamapps\common\Depth\Binaries\Win32\DepthGame.exe
FirewallRules: [{8DEEDC84-A37C-4677-871F-5A4A78D10FD9}] => (Allow) D:4\STEAM\steamapps\common\Depth\Binaries\Win32\DepthGame.exe
FirewallRules: [{58BF98EF-7D77-4F45-BB49-595CE8E6A9DB}] => (Allow) F:\STEAM\steamapps\common\Wolfenstein.II.The.New.Colossus\NewColossus_x64vk.exe
FirewallRules: [{CC6DB446-5953-424E-8C24-5858ECB9FC26}] => (Allow) F:\STEAM\steamapps\common\Wolfenstein.II.The.New.Colossus\NewColossus_x64vk.exe
FirewallRules: [TCP Query User{36EC8D17-0FB2-4BDE-830B-20E691B272B2}D:4\destiny 2\destiny2.exe] => (Allow) D:4\destiny 2\destiny2.exe
FirewallRules: [UDP Query User{FE7477D0-BB1A-4EE5-AA62-20B48C8A6B14}D:4\destiny 2\destiny2.exe] => (Allow) D:4\destiny 2\destiny2.exe
FirewallRules: [{5FA9C754-1A10-4006-B202-8FD4FB0DC1D6}] => (Allow) I:\UPLAY\Assassin's Creed Origins\ACOrigins.exe
FirewallRules: [{246F9E8F-463D-4B4F-85F8-F6CAEC5F8980}] => (Allow) I:\UPLAY\Assassin's Creed Origins\ACOrigins.exe
FirewallRules: [{880AB777-23CE-4CDA-A82A-D198C026F015}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Nioh\nioh.exe
FirewallRules: [{4F7AA0F8-FE02-4BDD-AEE4-CF4893328FAA}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Nioh\nioh.exe
FirewallRules: [{1AA1EDEA-011A-4C41-BB5A-D320B1BB119E}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Nioh\nioh_launcher.exe
FirewallRules: [{C73E34CC-3189-4BCD-8C9C-2DD0F4352C33}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Nioh\nioh_launcher.exe

6

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:06:45 PM »

FirewallRules: [{837B41BD-AEB7-454F-BBC8-1D8ED0C12B8C}] => (Allow) F:\STEAM\steamapps\common\AURION_GAME\AURION_GAME\Aurion.exe
FirewallRules: [{8BFC653E-A4DD-449E-AA51-8EA68A0BA828}] => (Allow) F:\STEAM\steamapps\common\AURION_GAME\AURION_GAME\Aurion.exe
FirewallRules: [{476A622D-BA4A-483C-BAA0-969BF53F0986}] => (Allow) F:\STEAM\steamapps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe
FirewallRules: [{7ED32884-5359-4F4A-8E05-CCE756BB891A}] => (Allow) F:\STEAM\steamapps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe
FirewallRules: [{3F0E4906-F452-4DA6-ABE4-A3F512CABF2F}] => (Block) C:\users\johan\appdata\local\fivem\fivem.exe
FirewallRules: [{AA87672A-00E5-447B-87F8-5629059D25DA}] => (Block) C:\users\johan\appdata\local\fivem\fivem.exe
FirewallRules: [{E6C0609E-4899-4FBC-A494-C45C962EC7CD}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{7223F46B-F7D8-40B2-90FA-B1ECA956D991}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{7C95C767-D35E-4722-99C4-E2AE58E5F8D1}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{1D0FC297-537B-444E-9606-2428FF1C59DA}] => (Allow) D:0\Steam\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{3F3BE849-64C9-4BA9-9F5B-FC4198CEE071}] => (Allow) D:0\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{CD6ACE11-A8E5-462D-A9D4-52AE2247C8DC}] => (Allow) D:0\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{EB3199A0-0CAA-4986-BF04-935825E619D0}] => (Block) C:\program files (x86)\red bull air race\game\redbullairracethegame64.exe
FirewallRules: [{FAB8D971-1841-4ADF-9767-522FED91EF95}] => (Block) C:\program files (x86)\red bull air race\game\redbullairracethegame64.exe
FirewallRules: [UDP Query User{6635014D-C59C-42C3-8287-40668D987324}C:\program files (x86)\red bull air race\game\redbullairracethegame64.exe] => (Allow) C:\program files (x86)\red bull air race\game\redbullairracethegame64.exe
FirewallRules: [TCP Query User{3EA80365-2D28-41A9-B356-AE7012FBD978}C:\program files (x86)\red bull air race\game\redbullairracethegame64.exe] => (Allow) C:\program files (x86)\red bull air race\game\redbullairracethegame64.exe
FirewallRules: [{EC4A9BF0-781C-421C-833E-D210AEDA0E05}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{CC35AB75-4AC2-4F90-97B5-C781036597FA}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Planet Explorers\PE_Launcher.exe
FirewallRules: [{FDB6A1D0-490E-4572-A16F-63B0CBF4C59D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shiness\Binaries\Win64\ShinessGame.exe
FirewallRules: [{5FEA40A2-273B-4452-85F8-856CCD0CBAA2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shiness\Binaries\Win64\ShinessGame.exe
FirewallRules: [{8F6CE1AB-C62B-4849-B7EC-42F6CC35B397}] => (Allow) I:\UPLAY\Tom Clancy's Ghost Recon Wildlands\GRW.exe
FirewallRules: [{65BF8989-43B1-44D4-B26D-F854F6BED11C}] => (Allow) F:\STEAM\steamapps\common\Shadow Complex Remastered\Binaries\Win32\ShadowComplex-Win32.exe
FirewallRules: [{4071220D-176B-42B9-BA6A-3152A22BFD32}] => (Allow) F:\STEAM\steamapps\common\Shadow Complex Remastered\Binaries\Win32\ShadowComplex-Win32.exe
FirewallRules: [{5CA42030-FC22-4E22-856F-863A8EAA14CD}] => (Allow) F:\STEAM\steamapps\common\Earthlock\Earthlock.exe
FirewallRules: [{A4504F50-CA6A-49D5-BDF7-326BED92285E}] => (Allow) F:\STEAM\steamapps\common\Earthlock\Earthlock.exe
FirewallRules: [{5C73E62C-FDA6-4D0C-B41E-8D32EA86FF43}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{1DD0CFCE-0BDD-46C7-AF94-2756D0A6276E}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{5E2A8C34-4951-47DD-806F-121408008C09}] => (Allow) F:\STEAM\steamapps\common\Vikings - Wolves of Midgard\LaunchVi.exe
FirewallRules: [{01AE6FA3-B9F4-44B8-B6CE-70FAFE0227A7}] => (Allow) F:\STEAM\steamapps\common\Vikings - Wolves of Midgard\LaunchVi.exe
FirewallRules: [{F0B7FCC6-312E-474B-8023-80D341662A65}] => (Allow) F:\STEAM\steamapps\common\Endless Space\EndlessSpace.exe
FirewallRules: [{986FC28F-5F06-4916-AAAE-DDC8DBFF1FE7}] => (Allow) F:\STEAM\steamapps\common\Endless Space\EndlessSpace.exe
FirewallRules: [{7A11131F-3BC6-452E-AAD7-CE81E67737B0}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{50EB06F7-6346-4E30-BD28-3F299BD71850}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe
FirewallRules: [{20863C1D-2E85-4E03-A31B-9E4C9FA0B2F6}] => (Allow) F:\STEAM\steamapps\common\Driver Booster 4\DriverBooster.exe
FirewallRules: [{6A7F74E7-E6F5-4CE3-810E-1583C7330537}] => (Allow) F:\STEAM\steamapps\common\Driver Booster 4\DriverBooster.exe
FirewallRules: [{90D6DCA0-1758-46D0-9B0A-4983FD078D84}] => (Allow) F:\-ORIGIN-\Dead Space 3\deadspace3.exe
FirewallRules: [{CF38B57E-A3CF-4937-9083-BFE9FCF6FBB8}] => (Allow) F:\-ORIGIN-\Dead Space 3\deadspace3.exe
FirewallRules: [{C1135B75-0E7F-4CB2-86AE-A8EE1E180C80}] => (Allow) F:\-ORIGIN-\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{44D4E32D-997B-48BF-BC92-04C37EDE98BE}] => (Allow) F:\-ORIGIN-\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{A49BF9D8-6294-4F9B-89C3-6B9A4EFB516A}] => (Allow) F:\-ORIGIN-\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{F288007E-702B-4F90-99E7-FC9138D38BE1}] => (Allow) F:\-ORIGIN-\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{623CD04B-69CC-47AF-8150-24C167A8F8EC}] => (Block) I:\steam\steamapps\common\vikings - wolves of midgard\vikings.exe
FirewallRules: [{A10B4F7F-6360-4FAA-996F-0542044B7DB9}] => (Block) I:\steam\steamapps\common\vikings - wolves of midgard\vikings.exe
FirewallRules: [UDP Query User{E894A443-CD35-48F6-B84C-8A706F746D81}I:\steam\steamapps\common\vikings - wolves of midgard\vikings.exe] => (Allow) I:\steam\steamapps\common\vikings - wolves of midgard\vikings.exe
FirewallRules: [TCP Query User{0847537C-3B22-4C4C-84B4-68DF96BFE60A}I:\steam\steamapps\common\vikings - wolves of midgard\vikings.exe] => (Allow) I:\steam\steamapps\common\vikings - wolves of midgard\vikings.exe
FirewallRules: [{AA9F70DE-5054-4F07-AEEC-7AAFA48B6624}] => (Allow) I:\STEAM\steamapps\common\Vikings - Wolves of Midgard\LaunchVi.exe
FirewallRules: [{4EF29E2D-D97B-462E-BC35-F0B89FE4E540}] => (Allow) I:\STEAM\steamapps\common\Vikings - Wolves of Midgard\LaunchVi.exe
FirewallRules: [{AAD72116-E085-4BE2-8C08-531D8F1808C9}] => (Allow) D:0\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{B5F092AD-4792-410E-8A62-1C07E7BE6B57}] => (Allow) D:0\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{AE1CB203-410C-4468-9FA0-370B0940CAA9}] => (Block) E:\- installation jeux\- steam -\steamapps\common\koareckoning\reckoning.exe
FirewallRules: [{59ADFD0B-E5F9-443C-AC65-5A877DBAD208}] => (Block) E:\- installation jeux\- steam -\steamapps\common\koareckoning\reckoning.exe
FirewallRules: [UDP Query User{94ECE00A-168A-4FB7-BDF0-E99FC0B7EB6B}E:\- installation jeux\- steam -\steamapps\common\koareckoning\reckoning.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\koareckoning\reckoning.exe
FirewallRules: [TCP Query User{833F2EAC-86B2-4E74-9F18-195BD9FC2DAA}E:\- installation jeux\- steam -\steamapps\common\koareckoning\reckoning.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\koareckoning\reckoning.exe
FirewallRules: [{310F1A10-68FC-4366-8D85-85343F951C6C}] => (Allow) D:0\Steam\steamapps\common\DeadRising4\deadrising4.exe
FirewallRules: [{CC4158FE-2CE3-4E08-819A-251418E14946}] => (Allow) D:0\Steam\steamapps\common\DeadRising4\deadrising4.exe
FirewallRules: [{EED18412-8597-44A8-AC5E-D8CAA0438C75}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Wolcen\win_x64\Wolcen.exe
FirewallRules: [{27117099-E6FA-4BC0-8D9D-4014AF7B06B1}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Wolcen\win_x64\Wolcen.exe
FirewallRules: [UDP Query User{A8FC4B34-A18B-47C4-843C-E1B3BDB0C666}F:\-origin-\fifa 17\fifa17.exe] => (Allow) F:\-origin-\fifa 17\fifa17.exe
FirewallRules: [TCP Query User{50DF54F0-CEA0-489B-946A-C1F734051842}F:\-origin-\fifa 17\fifa17.exe] => (Allow) F:\-origin-\fifa 17\fifa17.exe
FirewallRules: [{7EA58B04-7601-4951-B3FA-3DF6D005B6F2}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{E55D753F-9948-4909-BD7A-6E1E53A005D9}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{24971CEC-2F8E-4C3B-96C7-67252FBD2089}] => (Allow) D:0\Steam\steamapps\common\Homefront_The_Revolution\Bin64\Homefront2_Release.exe
FirewallRules: [{87F7335D-3D79-4723-ADC9-71C7475D893B}] => (Allow) D:0\Steam\steamapps\common\Homefront_The_Revolution\Bin64\Homefront2_Release.exe
FirewallRules: [{1A87C8F9-757D-4D92-B424-FF55E97F25DE}] => (Allow) I:\STEAM\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{D851B9E2-EAE4-40D8-BCBD-860F2B5CBB01}] => (Allow) I:\STEAM\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{8A3E0306-518C-4D4F-B7BF-8D702013CAB2}] => (Block) E:\- installation jeux\- steam -\steamapps\common\thesolusproject\solus\binaries\win64\solus-win64-shipping.exe
FirewallRules: [{5AE6E985-4067-4B82-A9DE-DD8D19097B4C}] => (Block) E:\- installation jeux\- steam -\steamapps\common\thesolusproject\solus\binaries\win64\solus-win64-shipping.exe
FirewallRules: [UDP Query User{38933707-B232-41DA-B370-3864DDF55E3B}E:\- installation jeux\- steam -\steamapps\common\thesolusproject\solus\binaries\win64\solus-win64-shipping.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\thesolusproject\solus\binaries\win64\solus-win64-shipping.exe
FirewallRules: [TCP Query User{2AFF228A-FAE3-4F62-AC15-FB74D4491E6A}E:\- installation jeux\- steam -\steamapps\common\thesolusproject\solus\binaries\win64\solus-win64-shipping.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\thesolusproject\solus\binaries\win64\solus-win64-shipping.exe
FirewallRules: [{EB707042-A658-418D-8D03-832857007092}] => (Allow) F:\STEAM\steamapps\common\Fable Anniversary\Binaries\Win32\Fable Anniversary.exe
FirewallRules: [{250E77C9-E75D-4FE7-A435-500DCE834B62}] => (Allow) F:\STEAM\steamapps\common\Fable Anniversary\Binaries\Win32\Fable Anniversary.exe
FirewallRules: [{10E5B9BF-E168-4087-A042-7A9F868B0459}] => (Allow) F:\Tom Clancy's The Division\TheDivision.exe
FirewallRules: [{99C0F416-57A3-4644-9F41-CF7E3C6DB4A5}] => (Allow) I:\ORIGIN\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{FB56A270-20F8-4D8D-9C35-F190BF1D930F}] => (Allow) I:\ORIGIN\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{8C1B7782-5DDD-4EFD-B797-7EEEDF4F53DC}] => (Allow) I:\ORIGIN\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{EAAA58EA-813F-4C02-9A20-A4C8F973F5F5}] => (Allow) I:\ORIGIN\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [TCP Query User{6D36B897-E636-465E-8606-0B65B73A417C}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{E213839C-F68E-462A-B4AE-43710EC26DC5}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{34600411-EFDD-4362-82F3-04459AB7B5D5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E1515E17-71FC-4E3B-8F12-2DFE3BF96EB5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2F755987-1CCB-4523-9E9B-F7F8461CD01B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{03A122EC-48B4-4798-99B9-4D0D89BD226B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{F551145E-38CC-49AD-9793-ECC21C9E0EF1}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{9F5235F5-E3F7-4D73-B57E-2C4DF1BE70B7}G:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) G:\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{8DCA22D9-B2E7-4478-8142-D7C2A0735F48}H:\-[ 0 ]- steam\steamapps\common\rise of the tomb raider\rottr.exe] => (Allow) H:\-[ 0 ]- steam\steamapps\common\rise of the tomb raider\rottr.exe
FirewallRules: [UDP Query User{40366704-63D2-4C32-A271-D604D4C7D16E}H:\-[ 0 ]- steam\steamapps\common\rise of the tomb raider\rottr.exe] => (Allow) H:\-[ 0 ]- steam\steamapps\common\rise of the tomb raider\rottr.exe
FirewallRules: [{D1F29B03-DEBB-4C88-A8A2-6BD755643DDE}] => (Allow) C:\Program Files (x86)\FlyVPN\FlyVPN.exe
FirewallRules: [{FE75ECED-9644-4C28-841A-9AA4A4C989CE}] => (Allow) F:\STEAM\steamapps\common\LIGHTNING RETURNS FINAL FANTASY XIII\LRFF13.exe
FirewallRules: [{4B6E0620-8CAE-449D-904B-96D91813BF17}] => (Allow) F:\STEAM\steamapps\common\LIGHTNING RETURNS FINAL FANTASY XIII\LRFF13.exe
FirewallRules: [{39E4E9B4-3A95-4251-805B-D19256BB723A}] => (Allow) F:\STEAM\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{7D1A9710-DF17-4633-98A4-D59B5B789F0D}] => (Allow) F:\STEAM\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{2F5C7D93-26C2-47E0-838A-9883495ED994}] => (Allow) F:\STEAM\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{D8C43C66-57C7-4877-920C-567BCC765B69}] => (Allow) F:\STEAM\steamapps\common\MGS_TPP\mgsvtpp.exe
FirewallRules: [{DA41A79F-9BAF-4073-B7A9-83C180EFAB28}] => (Allow) F:\STEAM\steamapps\common\TheEvilWithin\EvilWithin.exe
FirewallRules: [{B1660F2B-C562-487E-940A-F67BFA076283}] => (Allow) F:\STEAM\steamapps\common\TheEvilWithin\EvilWithin.exe

7

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:06:27 PM »

FirewallRules: [TCP Query User{D5E133A9-FABB-40BA-B3A8-914097FE9551}E:\- installation jeux\- steam -\steamapps\common\planet explorers\pe_client.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\planet explorers\pe_client.exe
FirewallRules: [UDP Query User{44B68A38-C3FB-41FB-9535-8DB8CDF5E527}I:\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe] => (Allow) I:\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe
FirewallRules: [TCP Query User{E9BB4858-B4C7-4D5A-B3D1-99411170BD30}I:\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe] => (Allow) I:\steam\steamapps\common\ark\shootergame\binaries\win64\shootergameserver.exe
FirewallRules: [{DF79F117-59CD-4A77-A1A5-12A9509016BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [{DF343319-9A20-43C0-903E-3F8A656E882C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GRAV\Binaries\Win64\CAGGame-Win64-Shipping.exe
FirewallRules: [UDP Query User{17B5A92E-C2D9-4E8C-8487-AE6434AF171E}E:\- installation jeux\- steam -\steamapps\common\grav\binaries\win64\caggame-win64-shipping.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\grav\binaries\win64\caggame-win64-shipping.exe
FirewallRules: [TCP Query User{6DCC4897-4ACE-430A-A1EC-DE590C0EB67E}E:\- installation jeux\- steam -\steamapps\common\grav\binaries\win64\caggame-win64-shipping.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\grav\binaries\win64\caggame-win64-shipping.exe
FirewallRules: [UDP Query User{19DFA7F9-79F5-438C-96DE-E67A2B8EA6C3}C:\diablo iii\x64\diablo iii64.exe] => (Allow) C:\diablo iii\x64\diablo iii64.exe
FirewallRules: [TCP Query User{85C6D990-30C1-4A39-9867-6D6B3EB06704}C:\diablo iii\x64\diablo iii64.exe] => (Allow) C:\diablo iii\x64\diablo iii64.exe
FirewallRules: [{BDB8E455-0B94-4CA8-B328-A2975D2B1360}] => (Allow) F:\STEAM\steamapps\common\Blades of Time\bladesoftime.exe
FirewallRules: [{3D9EA3C6-12A1-4037-BCA7-8DBEBFAF3189}] => (Allow) F:\STEAM\steamapps\common\Blades of Time\bladesoftime.exe
FirewallRules: [{5FD647EE-0EB3-4BFD-BEFE-6F3AD94D71AB}] => (Allow) F:\STEAM\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{80A5DADD-593D-4263-8CB8-381DA7EA18E6}] => (Allow) F:\STEAM\steamapps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [UDP Query User{C4667054-A868-4E15-8202-278C1D37A3E5}F:\steam\steamapps\common\hunting simulator\hunter\binaries\win64\hunter-win64-shipping.exe] => (Allow) F:\steam\steamapps\common\hunting simulator\hunter\binaries\win64\hunter-win64-shipping.exe
FirewallRules: [TCP Query User{4AC3C738-71CB-45D6-AB39-7661B2C7B1E6}F:\steam\steamapps\common\hunting simulator\hunter\binaries\win64\hunter-win64-shipping.exe] => (Allow) F:\steam\steamapps\common\hunting simulator\hunter\binaries\win64\hunter-win64-shipping.exe
FirewallRules: [{393C7B4D-8329-499C-889A-546DA4BF48E2}] => (Allow) F:\STEAM\steamapps\common\Hunting Simulator\Hunter.exe
FirewallRules: [{63BA023F-4418-4934-9915-F18A727DB4E4}] => (Allow) F:\STEAM\steamapps\common\Hunting Simulator\Hunter.exe
FirewallRules: [{85091B6A-40B9-479A-A279-286D7708FC74}] => (Allow) F:\STEAM\steamapps\common\Sky Break\Sky Break.exe
FirewallRules: [{D08FEE14-0C22-44E5-96D0-0F0C93552DFE}] => (Allow) F:\STEAM\steamapps\common\Sky Break\Sky Break.exe
FirewallRules: [{DB1311F4-6CC8-4F68-B521-A6AED7FA29BF}] => (Allow) F:\STEAM\steamapps\common\Game of Thrones\Binaries\Win32\ShippingPC-AGOTGame.exe
FirewallRules: [{6C61584C-EE4A-4CB0-869A-7344BF7CCE70}] => (Allow) F:\STEAM\steamapps\common\Game of Thrones\Binaries\Win32\ShippingPC-AGOTGame.exe
FirewallRules: [{FBAD9089-6F6C-40F5-A014-D99ABAD79660}] => (Allow) F:\STEAM\steamapps\common\Faery - Legends of Avalon\FaerySteam.exe
FirewallRules: [{1EE4A851-494B-48D5-A705-5095D3653114}] => (Allow) F:\STEAM\steamapps\common\Faery - Legends of Avalon\FaerySteam.exe
FirewallRules: [{A0C339C6-24D6-4AB4-B5AF-1EF45E38E9BC}] => (Allow) F:\STEAM\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe
FirewallRules: [{499BCB5A-AC77-4A84-AAB9-486204320F35}] => (Allow) F:\STEAM\steamapps\common\Deus Ex Mankind Divided\retail\DXMD.exe
FirewallRules: [{73E1F50F-C41B-4AD0-BBA4-5C75C0F6FE4D}] => (Allow) F:\STEAM\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{0CD07DA3-0FED-441F-B7B0-13A66EB3169A}] => (Allow) F:\STEAM\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{148ECC30-9832-4B54-A782-20B947E1DBE2}] => (Allow) F:\STEAM\steamapps\common\Prey\Binaries\Danielle\x64\Release\Prey.exe
FirewallRules: [{7615F031-E3B6-440A-87CC-E26EFC3AB5C0}] => (Allow) F:\STEAM\steamapps\common\Prey\Binaries\Danielle\x64\Release\Prey.exe
FirewallRules: [UDP Query User{F17EEF4A-7F4E-4818-B436-F4D547A9CF9A}D:0\steam\steamapps\common\alien isolation\ai.exe] => (Allow) D:0\steam\steamapps\common\alien isolation\ai.exe
FirewallRules: [TCP Query User{17F892C8-2534-4D23-9ADF-B295640E1825}D:0\steam\steamapps\common\alien isolation\ai.exe] => (Allow) D:0\steam\steamapps\common\alien isolation\ai.exe
FirewallRules: [{92A03ADC-6578-4006-BEF1-0CFA4A28F2F7}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{C2F097EA-1BA3-46EF-8ACF-BB2D2921AD50}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Grim Dawn\Grim Dawn.exe
FirewallRules: [{2A7E8A56-DEA3-4268-BC5B-F9352FC4B76E}] => (Allow) D:0\Steam\steamapps\common\DeadRising4\deadrising4.exe
FirewallRules: [{470B931D-75D9-40FB-ACAD-DB5388994B3B}] => (Allow) D:0\Steam\steamapps\common\DeadRising4\deadrising4.exe
FirewallRules: [{67AB6D4E-C914-497A-B547-CDD379D834BC}] => (Allow) F:\STEAM\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{C071DF0A-FF02-4669-B969-96E442C309D5}] => (Allow) F:\STEAM\steamapps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{A54D6BA6-24B2-41AE-8CF3-FD64C9DEF903}] => (Allow) F:\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{2D875E6B-D887-4A0E-AD5B-E7B34165651F}] => (Allow) F:\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{4147751F-C474-471C-98C1-78763A3FB4A9}] => (Allow) F:\STEAM\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{A7B69BED-F886-4B09-B6AE-7419A4ADE483}] => (Allow) F:\STEAM\steamapps\common\Wolfenstein.The.New.Order\WolfNewOrder_x64.exe
FirewallRules: [{E388131D-DA48-40BF-A2A8-B2F0B05C5059}] => (Allow) F:\STEAM\steamapps\common\Metro Last Light Redux\metro.exe
FirewallRules: [{996288F1-C696-4B36-8CC1-AD30B00F731E}] => (Allow) F:\STEAM\steamapps\common\Metro Last Light Redux\metro.exe
FirewallRules: [UDP Query User{F1CBEF0A-36A0-451B-8E20-6B0F32920B0D}F:\-origin-\need for speed\nfs16.exe] => (Allow) F:\-origin-\need for speed\nfs16.exe
FirewallRules: [TCP Query User{9AA31165-03F5-4BD0-A73C-49055137CEDF}F:\-origin-\need for speed\nfs16.exe] => (Allow) F:\-origin-\need for speed\nfs16.exe
FirewallRules: [{9863244C-C2A3-4ED3-B2F0-5E7F94D6D538}] => (Allow) F:\-ORIGIN-\FIFA 17\FIFASetup\fifaconfig.exe
FirewallRules: [{6F4C1201-6A4C-45CA-814D-E3EC5C01C77D}] => (Allow) F:\-ORIGIN-\FIFA 17\FIFASetup\fifaconfig.exe
FirewallRules: [UDP Query User{090A6313-75C9-43F0-B46B-E8232B03532F}D:0\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:0\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{4C8B99A8-4B99-4CA0-A89B-2403F56263E5}D:0\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:0\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{1093036E-C9F7-4127-BB0D-73A4E627E647}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [{C36749D6-6DC8-4FE2-8B57-E4B7DD491411}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Victor Vran\VictorVranSteam.exe
FirewallRules: [UDP Query User{63CECF88-FF54-4548-B293-A679A53062AC}E:\- installation jeux\- steam -\steamapps\common\assettocorsa\acs.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\assettocorsa\acs.exe
FirewallRules: [TCP Query User{9742A279-AF40-4389-BEBB-DDD543F7032B}E:\- installation jeux\- steam -\steamapps\common\assettocorsa\acs.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\assettocorsa\acs.exe
FirewallRules: [{1308E77A-173E-4461-B43E-7360EAED42F7}] => (Allow) F:\WATCH_DOGS2\EAC.exe
FirewallRules: [{7F660DEE-C01E-4BA1-8E42-BB31BA57A734}] => (Allow) F:\WATCH_DOGS2\EAC.exe
FirewallRules: [{676B3723-5F27-4A9C-8F79-357AEFAFA019}] => (Allow) F:\WATCH_DOGS2\bin\WatchDogs2.exe
FirewallRules: [{36861BD7-E691-4E94-BFE6-5051680CD26F}] => (Allow) F:\WATCH_DOGS2\bin\WatchDogs2.exe
FirewallRules: [UDP Query User{273FCD66-8B62-4D9A-8830-41CD656A5D8D}D:0\steam\steamapps\common\quantumbreak\dx11\quantumbreak.exe] => (Allow) D:0\steam\steamapps\common\quantumbreak\dx11\quantumbreak.exe
FirewallRules: [TCP Query User{02EA6FEF-E728-4070-AFC8-8193533FD8A0}D:0\steam\steamapps\common\quantumbreak\dx11\quantumbreak.exe] => (Allow) D:0\steam\steamapps\common\quantumbreak\dx11\quantumbreak.exe
FirewallRules: [{A26F5B19-4082-416D-A075-7581DDE9AA17}] => (Allow) D:5\UBI\Assassin's Creed III\AC3MP.exe
FirewallRules: [{0986DAD0-3779-400F-9441-B0BFDCC1170A}] => (Allow) D:5\UBI\Assassin's Creed III\AC3MP.exe
FirewallRules: [{25897A7F-783E-4D3F-B8B0-190BD61A3759}] => (Allow) D:5\UBI\Assassin's Creed III\AC3SP.exe
FirewallRules: [{ADEDAEDB-EEC9-45BD-9AB8-51360CFA09EB}] => (Allow) D:5\UBI\Assassin's Creed III\AC3SP.exe
FirewallRules: [{EA1DA3AA-1A0A-4F57-AA06-5811621BDD25}] => (Allow) F:\STEAM\steamapps\common\DysanTheShapeshifter\ds.exe
FirewallRules: [{D08C157F-4932-43CA-AC84-DC3C3DDD3CF6}] => (Allow) F:\STEAM\steamapps\common\DysanTheShapeshifter\ds.exe
FirewallRules: [{5CDC0027-45F1-410B-8C3D-C4B58C3B9ACD}] => (Allow) F:\STEAM\steamapps\common\The Incredible Adventures of Van Helsing\VanHelsing.exe
FirewallRules: [{220BB315-954F-4CA4-8EBF-43FDED33D43D}] => (Allow) F:\STEAM\steamapps\common\The Incredible Adventures of Van Helsing\VanHelsing.exe
FirewallRules: [{E7B8523D-68C4-4A10-A30F-52D4FEEA7E98}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shiness\Binaries\Win64\ShinessGame.exe
FirewallRules: [{8A7423DC-C27A-493C-8C30-45B03E40369D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Shiness\Binaries\Win64\ShinessGame.exe
FirewallRules: [UDP Query User{54F0E40E-CC01-40A4-8767-61D5A379AB0A}D:0\steam\steamapps\common\styx shards of darkness\styx2\binaries\win64\styx2-win64-shipping.exe] => (Allow) D:0\steam\steamapps\common\styx shards of darkness\styx2\binaries\win64\styx2-win64-shipping.exe
FirewallRules: [TCP Query User{A051E1A1-496F-43B7-AB65-8875BA47B486}D:0\steam\steamapps\common\styx shards of darkness\styx2\binaries\win64\styx2-win64-shipping.exe] => (Allow) D:0\steam\steamapps\common\styx shards of darkness\styx2\binaries\win64\styx2-win64-shipping.exe
FirewallRules: [{E09ABC0A-B423-42BE-B0E5-91153B2E9A3E}] => (Allow) F:\STEAM\steamapps\common\Legend of Kay Anniversary\legendofkay.exe
FirewallRules: [{C5838255-E70E-4C84-9A06-1AC36E4A7C6B}] => (Allow) F:\STEAM\steamapps\common\Legend of Kay Anniversary\legendofkay.exe
FirewallRules: [{AF107452-C8BC-425D-9BF4-D928B2F75CF6}] => (Allow) E:3\JeuxSteam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{99F35BC7-F9C7-4642-B25F-394DE6931DD6}] => (Allow) E:3\JeuxSteam\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{4C8D1229-6F6F-460F-9F12-68F2A5F45118}] => (Allow) E:3\ORIGIN\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{BA478DF2-8718-46EF-B352-3E9D1A23A285}] => (Allow) E:3\ORIGIN\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{628F4463-56CF-4A30-8D91-38BFC0C9C29F}] => (Allow) D:5\JeuxSteam\steamapps\common\divinity2_dev_cut\Autorun.exe
FirewallRules: [{7AA63854-361A-4487-BC76-A1192801CAF3}] => (Allow) D:5\JeuxSteam\steamapps\common\divinity2_dev_cut\Autorun.exe
FirewallRules: [{3E17BC04-CEF4-49C5-B407-970EBB3DFE63}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{C452E5A9-3013-4EB7-9FC9-3A99E2F62920}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Drakensang\drakensang.exe
FirewallRules: [{FD4EDF8C-50E1-49C6-B010-3CA1AF625A22}] => (Allow) F:\STEAM\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{D4B28DAA-3704-4BCA-921D-F0C428E07C57}] => (Allow) F:\STEAM\steamapps\common\mordheim\mordheim.exe
FirewallRules: [{54BF61ED-EF79-4D63-8F62-0447086E0B42}] => (Allow) F:\STEAM\steamapps\common\Firewatch\Firewatch.exe
FirewallRules: [{B7001EC3-7EB1-48EE-B2D9-E246BD1DE7D6}] => (Allow) F:\STEAM\steamapps\common\Firewatch\Firewatch.exe
FirewallRules: [{995497CB-462F-4742-A424-F5930ECFCA25}] => (Allow) F:\STEAM\steamapps\common\SETSUNA\SETSUNA.exe
FirewallRules: [{0E85CB30-91CD-440D-AB21-9CA0CB1D42B6}] => (Allow) F:\STEAM\steamapps\common\SETSUNA\SETSUNA.exe
FirewallRules: [{677B64D6-7834-4C13-8CFB-B9CB861D29F6}] => (Allow) F:\STEAM\steamapps\common\Stories Path of Destinies\Stories\Binaries\Win64\Stories.exe
FirewallRules: [{4BAFDCFE-6FB2-4733-9D1A-3E0844CD0054}] => (Allow) F:\STEAM\steamapps\common\Stories Path of Destinies\Stories\Binaries\Win64\Stories.exe
FirewallRules: [{0C23AC31-AC37-4246-B7DB-79D75CF3465F}] => (Allow) F:\STEAM\steamapps\common\Bayonetta\Bayonetta.exe
FirewallRules: [{3468595C-EE39-4484-9527-72986EBE25F4}] => (Allow) F:\STEAM\steamapps\common\Bayonetta\Bayonetta.exe
FirewallRules: [{67DD53AD-A01D-420F-B6BE-6E0AF96885AE}] => (Allow) D:0\Steam\steamapps\common\NieRAutomata\NieRAutomata.exe
FirewallRules: [{2C9379B2-9047-4AF3-B93A-F87ABB088920}] => (Allow) D:0\Steam\steamapps\common\NieRAutomata\NieRAutomata.exe
FirewallRules: [UDP Query User{64A823D0-3543-48FB-B29B-F3FDA47B6AEB}F:\-origin-\need for speed(tm) rivals\nfs14.exe] => (Allow) F:\-origin-\need for speed(tm) rivals\nfs14.exe
FirewallRules: [TCP Query User{53557A17-9EE2-4203-9088-7F968DCF8F7F}F:\-origin-\need for speed(tm) rivals\nfs14.exe] => (Allow) F:\-origin-\need for speed(tm) rivals\nfs14.exe
FirewallRules: [{54B1D292-375F-4E46-ABC8-5FB55A1776B1}] => (Allow) D:2\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{9CEBF430-4819-4D72-892F-BB98F7FFE0DA}] => (Allow) D:2\Steam\steamapps\common\ASTRONEER Early Access\Astro.exe
FirewallRules: [{37085A55-ACFC-4BE3-ADAE-8FF2043710FC}] => (Block) D:2\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{6334DFCA-B1E8-4026-9FBC-F809D10350D3}] => (Block) D:2\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{9987051D-1799-462E-8C47-B54105C97306}D:2\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:2\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{5938F4C8-8843-4D4C-8A77-18F60CF81064}D:2\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:2\steam\steamapps\common\grand theft auto v\gta5.exe

8

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:05:44 PM »

FirewallRules: [{5212ACD3-96D2-43B6-826B-B721CF34436B}] => (Allow) C:\Program Files (x86)\Windscribe\Windscribe.exe
FirewallRules: [{CFB6A663-F804-4B6F-A465-5C8083DF3C7C}] => (Allow) C:\Program Files (x86)\Windscribe\Windscribe.exe
FirewallRules: [{59CFB142-8E4E-49C0-8350-386D8CFB7972}] => (Allow) C:\Program Files (x86)\Windscribe\Windscribe.exe
FirewallRules: [{F0CCFE61-7E19-4989-9EBF-A9FCA560D7B8}] => (Allow) C:\Program Files (x86)\Windscribe\Windscribe.exe
FirewallRules: [{41AEFB36-52BE-47AC-8B80-026D2BC80742}] => (Allow) I:\STEAM\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{614E0EAE-5B81-44BD-8D67-7691FAF9A0A5}] => (Allow) I:\STEAM\steamapps\common\Risen 3\system\Risen3.exe
FirewallRules: [{6E31DB86-3F96-4B14-81B2-3375767CE9BF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{7C88284F-D346-41EF-B47D-B96C2BA19CAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{19C85745-FC88-4016-A669-D0FEDB37E256}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{5D1F19FB-662C-4E8A-B7FE-23F8253FAA18}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{7762BFB3-C427-4856-A5D8-E3BF0230FF93}] => (Allow) E:\- Installation Jeux\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{E498F955-2D30-4D46-AAC3-CE2B2D4A4390}] => (Allow) E:\- Installation Jeux\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{57F99B51-6B90-479F-9E44-DD6CF80DAF14}] => (Allow) E:\- Installation Jeux\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{6C141B19-EAD4-4519-B116-ACFCBD2DDA6B}] => (Allow) E:\- Installation Jeux\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{7CFFB69C-1821-4A36-BDD9-B4CD7636BCAC}] => (Allow) F:\-ORIGIN-\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{7238B669-F0AB-436B-BEC4-4E6B799583AF}] => (Allow) F:\-ORIGIN-\Mass Effect Andromeda\MassEffectAndromeda.exe
FirewallRules: [{A7B4D5D9-9B94-4CB2-917E-8250E75BA533}] => (Allow) F:\-ORIGIN-\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [{8F0EC376-FEDC-4BA4-A33C-63BFE6C73A4E}] => (Allow) F:\-ORIGIN-\Mass Effect Andromeda\MassEffectAndromedaTrial.exe
FirewallRules: [UDP Query User{5CE2BE59-6E3A-4BE4-804F-50625DEBF2A6}F:\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) F:\steam\steamapps\common\lord of the rings online\lotroclient.exe
FirewallRules: [TCP Query User{6A4F911A-D5BD-4807-AEAE-91DA525360A6}F:\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) F:\steam\steamapps\common\lord of the rings online\lotroclient.exe
FirewallRules: [{3412D3F6-46F2-499C-88C2-9C83EDB1A3E7}] => (Allow) I:\STEAM\steamapps\common\Ember\Ember.exe
FirewallRules: [{43FF6626-D99A-4CB5-AA4E-1F203F515207}] => (Allow) I:\STEAM\steamapps\common\Ember\Ember.exe
FirewallRules: [{619384CE-40FB-4653-AC19-D87769B93997}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{43521F33-3F08-41B1-AECC-3D46C4CAF1A9}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [UDP Query User{88E64766-AF08-4BD3-A877-383FE38144A9}I:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe] => (Allow) I:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe
FirewallRules: [TCP Query User{511A6C4F-2A06-47F9-BA83-917B938FAAC6}I:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe] => (Allow) I:\steam\steamapps\common\gigantic\binaries\win64\rxgame-win64-shipping.exe
FirewallRules: [UDP Query User{5BB90843-D136-4220-8932-886D5D6C32E8}D:\-jeux-\- steam -\steamapps\common\7 days to die\7daystodie.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [TCP Query User{46AB36A5-B5E9-4325-A1B8-37DCC82E9547}D:\-jeux-\- steam -\steamapps\common\7 days to die\7daystodie.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\7 days to die\7daystodie.exe
FirewallRules: [{9C79911B-F12A-48CA-A777-B3917AF844EB}] => (Allow) C:\Program Files (x86)\PlayStationNow\unidater.exe
FirewallRules: [{8E2D1FCB-9EB3-4A1E-BAA5-025122B6DE24}] => (Allow) C:\Users\Johan\AppData\Local\Gaikai\CrashReports\dumpupload.exe
FirewallRules: [{E6F1A930-2A7A-4A5C-8820-3FEA30B12947}] => (Allow) C:\Program Files (x86)\PlayStationNow\psnowlauncher.exe
FirewallRules: [{56414A22-02C8-44B7-B134-1505DF3BCA7B}] => (Allow) I:\STEAM\steamapps\common\Secret World Legends\ClientPatcher.exe
FirewallRules: [{7EE91F6C-A890-491E-9A93-804B2A656090}] => (Allow) I:\STEAM\steamapps\common\Secret World Legends\ClientPatcher.exe
FirewallRules: [{90E3D9E3-49CB-47BD-A2D0-CA59CA9A516A}] => (Allow) F:\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{0B474470-505B-486D-AF73-D63E5A96A063}] => (Allow) F:\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{4DF4C74B-8E4E-4471-B91C-52637D599B13}] => (Allow) F:\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{F412DBDC-D97D-46A4-8585-FBDD223D58B8}] => (Allow) F:\Far Cry 4\bin\FarCry4.exe
FirewallRules: [UDP Query User{A9781D03-0475-4B39-85FE-FC3D095EA05E}I:\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) I:\steam\steamapps\common\h1z1 king of the kill\h1z1.exe
FirewallRules: [TCP Query User{8A1D7E7C-4CC6-4DEC-8282-B977C7F026C0}I:\steam\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) I:\steam\steamapps\common\h1z1 king of the kill\h1z1.exe
FirewallRules: [{251055A3-7AF6-46D8-846C-77CB7AB97FF9}] => (Allow) I:\STEAM\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [{8422E2F3-9CFC-401C-A875-2D4360FCBE1C}] => (Allow) I:\STEAM\steamapps\common\H1Z1 King of the Kill\LaunchPad.exe
FirewallRules: [UDP Query User{CE8D44BC-AA9B-4487-9C42-94BE5266AE19}E:\- installation jeux\- steam -\steamapps\common\kholat\kholat\binaries\win64\kholat-win64-shipping.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\kholat\kholat\binaries\win64\kholat-win64-shipping.exe
FirewallRules: [TCP Query User{938E3509-9D6D-41BE-BF99-12DFDDA340CD}E:\- installation jeux\- steam -\steamapps\common\kholat\kholat\binaries\win64\kholat-win64-shipping.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\kholat\kholat\binaries\win64\kholat-win64-shipping.exe
FirewallRules: [UDP Query User{337F2C3B-7196-497A-B1FA-75D6AC5AE3CA}I:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) I:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [TCP Query User{51509556-25CC-443C-BF44-7246C73FF5B2}I:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe] => (Allow) I:\steam\steamapps\common\pubg\tslgame\binaries\win64\tslgame.exe
FirewallRules: [{BA18818A-E07B-4FF7-8111-726C7F724F1F}] => (Allow) I:\STEAM\steamapps\common\Portal Knights\portal_knights_x64.exe
FirewallRules: [{F67EC206-F2DE-41FC-99D5-34FE748417BF}] => (Allow) I:\STEAM\steamapps\common\Portal Knights\portal_knights_x64.exe
FirewallRules: [UDP Query User{52801C02-C4C1-4498-873B-5B86AF6F18A1}C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [TCP Query User{67AB6A46-A92D-4F4E-8351-B1AC69990B93}C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{961DD2FA-794B-4028-9526-C62B4555D0F6}D:\-jeux-\- steam -\steamapps\common\adr1ft\adr1ft\binaries\win64\adr1ft-win64-shipping.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\adr1ft\adr1ft\binaries\win64\adr1ft-win64-shipping.exe
FirewallRules: [TCP Query User{06ADBF54-8F80-410B-B8F6-43AC19551C15}D:\-jeux-\- steam -\steamapps\common\adr1ft\adr1ft\binaries\win64\adr1ft-win64-shipping.exe] => (Allow) D:\-jeux-\- steam -\steamapps\common\adr1ft\adr1ft\binaries\win64\adr1ft-win64-shipping.exe
FirewallRules: [{9636AD0C-4C85-4CE3-9C70-CB7ACE0CE182}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [{B229913C-EBC0-40B3-9A25-1728D5F17D03}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\The Witcher 3\bin\x64\witcher3.exe
FirewallRules: [UDP Query User{4C8990B0-CCDE-47DE-B236-D168F3B4CAC1}D:0\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => (Allow) D:0\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [TCP Query User{6327D649-D54E-4570-8AF8-6C86FF02338F}D:0\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe] => (Allow) D:0\steam\steamapps\common\astroneer early access\astro\binaries\win64\astro-win64-shipping.exe
FirewallRules: [{FCD78E19-5B8D-475C-885D-C3D8D9B49A25}] => (Allow) F:\Tom Clancy's Ghost Recon Wildlands\GRW.exe
FirewallRules: [{DF0B28AB-BCC6-43D9-9B2E-57C883D4BF4A}] => (Allow) D:0\Installation_Jeux\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{188188FA-6714-48FA-84B7-4A5BFDACBDDD}] => (Allow) D:0\Installation_Jeux\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{EBAFEC66-D82D-486F-B7A1-CD812480B8DF}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Knights of the Old Republic II\swkotor2.exe
FirewallRules: [{2DEBA427-5F1C-4169-B915-F81595000019}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Knights of the Old Republic II\swkotor2.exe
FirewallRules: [{E44DB430-88DB-4293-904E-7914B0F4B2C3}] => (Allow) I:\STEAM\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{BF04E0BF-5DD9-433F-89D5-A08B968620A7}] => (Allow) I:\STEAM\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8A704B45-F44B-433E-B136-80CCD8EB801C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{7238C730-59CD-472A-8C33-AFE9D429D9CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{2687070C-9DC3-4B8E-B6E4-8B0078DBB361}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{CBADC7B0-E030-441F-98FB-05E8A7EE4294}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Remember Me\Binaries\Win32\RememberMe.exe
FirewallRules: [{EB9ECF01-F5C9-4382-90CD-D5F5C5F19207}] => (Allow) I:\STEAM\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe
FirewallRules: [{24E60196-56EB-421B-827B-BAF3454025AE}] => (Allow) I:\STEAM\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe
FirewallRules: [{D3809B11-57F6-45F1-8E4A-7948F5ED7372}] => (Allow) I:\STEAM\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe
FirewallRules: [{5F206AC8-D24D-4724-B1CB-ED8D5E842C8F}] => (Allow) I:\STEAM\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe
FirewallRules: [{6953FA05-535F-4E54-9FEB-EEF0DEDC0308}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [{B8E8A002-E47B-4705-BC6B-2837B28613A3}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\7 Days To Die\7dLauncher.exe
FirewallRules: [UDP Query User{1D827D16-8FF4-4132-B246-2AA1FB5EA1C2}C:\program files (x86)\arc\arcchat.exe] => (Allow) C:\program files (x86)\arc\arcchat.exe
FirewallRules: [TCP Query User{7457702C-9F7E-49FB-A789-ADDA0CA19392}C:\program files (x86)\arc\arcchat.exe] => (Allow) C:\program files (x86)\arc\arcchat.exe
FirewallRules: [{01D57859-6B55-4E37-A46F-1DFBAC8610CC}] => (Allow) F:\Tom Clancy's Ghost Recon Wildlands\GRW.exe
FirewallRules: [{5C1150B9-DE9A-4F7E-8403-1B44988C599C}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Sacred 2 Gold\system\sacred2.exe
FirewallRules: [{F4626F51-0DBB-4A80-A1FE-771EC6231DF3}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Sacred 2 Gold\system\sacred2.exe
FirewallRules: [UDP Query User{CB4FC386-CA19-458B-82DF-21EB8292DB92}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [TCP Query User{BF1010EE-3FB9-4F37-B893-ED0A17E3AFA9}C:\program files (x86)\secondlifeviewer\slvoice.exe] => (Allow) C:\program files (x86)\secondlifeviewer\slvoice.exe
FirewallRules: [{E3D744AF-65A8-44BA-A6A3-B569D148BDAA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShareX\ShareX_Launcher.exe
FirewallRules: [{5BD359E5-7DEA-4E25-9BAD-97B56FC2FE31}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ShareX\ShareX_Launcher.exe
FirewallRules: [{515336B1-2039-481C-BCEC-998B9D1AEAB3}] => (Allow) I:\STEAM\steamapps\common\DepthHunter2\dh2.exe
FirewallRules: [{A9E47FF6-EF0E-427F-BDF1-22885E51DE31}] => (Allow) I:\STEAM\steamapps\common\DepthHunter2\dh2.exe
FirewallRules: [{55DF1BB0-2A79-45BE-ADC6-9BA30A6E1A39}] => (Allow) I:\STEAM\steamapps\common\Sacred 2 Gold\system\sacred2.exe
FirewallRules: [{E51D253F-C095-4D71-B315-41695E2F6860}] => (Allow) I:\STEAM\steamapps\common\Sacred 2 Gold\system\sacred2.exe
FirewallRules: [{F20E60C7-1CE9-44C0-B996-7119B70270AB}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\KHOLAT\Kholat.exe
FirewallRules: [{5032771D-9336-4B43-AC1D-0033D3FC8521}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\KHOLAT\Kholat.exe
FirewallRules: [UDP Query User{8AA45821-CD96-436C-925F-BD0C663455EB}I:\wiiu\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe] => (Allow) I:\wiiu\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe
FirewallRules: [TCP Query User{43DCD255-BDE3-4738-88AE-5356FB0BF793}I:\wiiu\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe] => (Allow) I:\wiiu\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe
FirewallRules: [UDP Query User{57B2A04A-175C-482A-99AF-E60F09073FE0}C:\users\johan\desktop\••emulatauers••\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe] => (Allow) C:\users\johan\desktop\••emulatauers••\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe
FirewallRules: [TCP Query User{2447DEBE-9E0D-4010-BC30-5ABFCEE7E127}C:\users\johan\desktop\••emulatauers••\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe] => (Allow) C:\users\johan\desktop\••emulatauers••\••-façon01-••\wii u usb helper\wiiu_usb_helper.exe
FirewallRules: [{82E87881-2CC0-45A7-B410-7990CC13C2D2}] => (Allow) I:\STEAM\steamapps\common\Legends of Iskaria\Game.exe
FirewallRules: [{0C16E49F-B0AF-4F97-B7C7-26CAA935A3F6}] => (Allow) I:\STEAM\steamapps\common\Legends of Iskaria\Game.exe
FirewallRules: [UDP Query User{716CD9D5-6153-418B-A903-F36802E0B698}E:\- installation jeux\- steam -\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\h1z1 king of the kill\h1z1.exe
FirewallRules: [TCP Query User{E162A4AB-8496-4124-8538-4F94EFC70287}E:\- installation jeux\- steam -\steamapps\common\h1z1 king of the kill\h1z1.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\h1z1 king of the kill\h1z1.exe
FirewallRules: [{5B34E449-2A9B-42B2-A1F3-C2B865A88F86}] => (Allow) F:\STEAM\steamapps\common\How To Survive Third Person\Detect.exe
FirewallRules: [{DFFE6A5F-2D20-4096-A9BA-6F4972B300F8}] => (Allow) F:\STEAM\steamapps\common\How To Survive Third Person\Detect.exe
FirewallRules: [{3C11CB41-518B-4B8A-8567-81EAEA2B0204}] => (Allow) F:\STEAM\steamapps\common\How To Survive Third Person\HowToSurvive.exe
FirewallRules: [{44D0F9A0-91FB-413B-8640-6D426F596C7A}] => (Allow) F:\STEAM\steamapps\common\How To Survive Third Person\HowToSurvive.exe
FirewallRules: [UDP Query User{AC4CD659-FF6F-4140-80AD-71B69659A976}E:\- installation jeux\- steam -\steamapps\common\planet explorers\pe_client.exe] => (Allow) E:\- installation jeux\- steam -\steamapps\common\planet explorers\pe_client.exe

9

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:05:21 PM »

==================== MSCONFIG/TASK MANAGER éléments désactivés ==


==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [{33CC2557-7842-4562-ADA6-456857C6F630}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{56C30D56-1A3F-4CF4-AE9F-ABF27F318201}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{D43F3BCE-9CAA-4CF2-81AE-21C4CEA3FFEF}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{1450254A-D421-4CB4-9FD8-D916A9EE6B86}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{A3FC3138-0095-46A0-A7A3-C95EFA42B31D}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{ECA58A0C-F0C3-4335-B4B1-6180768EB61A}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{AF3775FB-D1E0-404C-91C7-36CA9DF1E4DF}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{C2FF2FEC-6881-48DA-A946-6B15733397F0}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{0C63A1A3-6FB6-481A-A65A-2F60080084FB}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{A97FFE1D-54FF-48AD-981F-0D3AC4635460}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{3029DA09-BC8A-414C-B0F5-5D52E070D988}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{9E1DEA20-F2E8-4ABE-B08C-4B1704CD67EE}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{C6CE22E7-6B0A-4D8B-A154-F0513C2545D7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crazy Taxi\AppLauncher.exe
FirewallRules: [{1209691C-284B-4EB4-AE19-E58B1F8B279B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Crazy Taxi\AppLauncher.exe
FirewallRules: [UDP Query User{7D50FAEB-2F86-4812-8FD4-AC1D3725CAED}D:4\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:4\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe
FirewallRules: [TCP Query User{3940A276-6371-45F3-A3B9-30447BDA2CCD}D:4\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) D:4\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe
FirewallRules: [{D2B968C6-1043-4B7E-B6E9-8ECD5AD3C40A}] => (Allow) D:4\STEAM\steamapps\common\ABZU\AbzuGame.exe
FirewallRules: [{8302CE2E-3B5A-4625-BD5C-6953CF185E2B}] => (Allow) D:4\STEAM\steamapps\common\ABZU\AbzuGame.exe
FirewallRules: [{2443DD3B-EB01-4BC4-962A-B5DBF947EA63}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{26CC1B64-A777-495E-B5D7-2BDA1E602842}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Yonder The Cloud Catcher Chronicles\YonderCCC.exe
FirewallRules: [{D5DF186F-8A83-4B7A-856E-E1D957D0F215}] => (Allow) D:4\ORIGIN\STAR WARS Battlefront II Multiplayer Beta\starwarsbattlefrontii.exe
FirewallRules: [{D097AF6F-1E7C-4E1F-BBDC-78693018261A}] => (Allow) D:4\ORIGIN\STAR WARS Battlefront II Multiplayer Beta\starwarsbattlefrontii.exe
FirewallRules: [{D84657E7-8871-482D-A201-8CC5A1630C5C}] => (Allow) D:0\Steam\steamapps\common\DDDA\DDDA.exe
FirewallRules: [{A992373D-D864-4C99-8414-43487D393153}] => (Allow) D:0\Steam\steamapps\common\DDDA\DDDA.exe
FirewallRules: [{C453DCBD-07FF-4E44-B588-F23161D4F6D9}] => (Allow) D:8\STEAM\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe
FirewallRules: [{B97C7392-5ACC-4F35-B257-5DE07A9F5C96}] => (Allow) D:8\STEAM\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe
FirewallRules: [{C7CEBA41-0E33-44B1-9BD5-02195B493CF9}] => (Allow) I:\STEAM\steamapps\common\Battle Chasers Nightwar\BC.exe
FirewallRules: [{03C0D06F-2ED3-4604-93D5-C38F2F17C6B3}] => (Allow) I:\STEAM\steamapps\common\Battle Chasers Nightwar\BC.exe
FirewallRules: [{8F9C5243-661D-4B6D-A7F4-544816B9670F}] => (Allow) D:8\STEAM\steamapps\common\Tyranny\Tyranny.exe
FirewallRules: [{B691D4BD-3927-4DF6-8079-1891B4DB65AA}] => (Allow) D:8\STEAM\steamapps\common\Tyranny\Tyranny.exe
FirewallRules: [{B431EDBC-C1BE-4823-A48D-BEB4D7C40924}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{04CBB33A-3A46-473C-B7A9-88F97CF98E75}] => (Allow) E:\- Installation Jeux\- Steam -\steamapps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{F66F9674-DF6A-47AD-BED4-2EE784AA1283}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Submerged\Submerged\Binaries\Win64\Submerged-Win64-Shipping.exe
FirewallRules: [{75A4C8C0-3725-4294-BEB5-3342C7DB9A5D}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Submerged\Submerged\Binaries\Win64\Submerged-Win64-Shipping.exe
FirewallRules: [{A5F25597-AD93-43D2-9410-66ECCFDDD160}] => (Allow) D:4\STEAM\steamapps\common\Call of Duty WWII Beta\s2_mp64_ship.exe
FirewallRules: [{5ADE5B55-E415-4BE6-91C2-E84C50E5E0C6}] => (Allow) D:4\STEAM\steamapps\common\Call of Duty WWII Beta\s2_mp64_ship.exe
FirewallRules: [UDP Query User{5AECDEA3-891A-4969-A441-04E613B691A3}D:4\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) D:4\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [TCP Query User{AE552FFD-8DE9-4862-A7C9-17EC5F1C8E8F}D:4\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) D:4\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{BF9600D4-CA83-4429-A4D3-9C86F2559DF4}] => (Allow) D:4\STEAM\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{C9876698-6FBD-4261-8B62-BDB3DC1A4F67}] => (Allow) D:4\STEAM\steamapps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{EB326F96-E8FD-4027-A0A4-B37248087AC0}] => (Allow) D:4\STEAM\steamapps\common\ConSim2015\ConSim2015.exe
FirewallRules: [{7588EFDB-6640-4F67-85FB-4FD323AEEF6C}] => (Allow) D:4\STEAM\steamapps\common\ConSim2015\ConSim2015.exe
FirewallRules: [{EAEBED48-F641-499C-9BC2-13D68C3CC4BB}] => (Allow) D:4\STEAM\steamapps\common\X-Blades\launcher.exe
FirewallRules: [{EFFBC51C-FC2E-4CB5-AC7A-DA3B8FC5B2D2}] => (Allow) D:4\STEAM\steamapps\common\X-Blades\launcher.exe
FirewallRules: [{35CF1DC2-731B-41D9-8B6B-D5467B14FFD1}] => (Allow) D:4\STEAM\steamapps\common\Morrowind\Morrowind Launcher.exe
FirewallRules: [{A9AEFB10-B3E3-4849-80D2-C6CA73B4E71A}] => (Allow) D:4\STEAM\steamapps\common\Morrowind\Morrowind Launcher.exe
FirewallRules: [{ABD49400-BF7C-47BA-8475-01C3E03259C3}] => (Allow) D:4\STEAM\steamapps\common\HardWest\HardWest.exe
FirewallRules: [{7DB539A6-069A-4AC2-9CFF-E0E790CFF459}] => (Allow) D:4\STEAM\steamapps\common\HardWest\HardWest.exe
FirewallRules: [{22D7DADF-296F-451A-8AA0-C566408B4042}] => (Allow) D:4\STEAM\steamapps\common\Oblivion\OblivionLauncher.exe
FirewallRules: [{7EBB437F-FAA9-48BD-AC38-F5777CA49F76}] => (Allow) D:4\STEAM\steamapps\common\Oblivion\OblivionLauncher.exe
FirewallRules: [{C95F9E15-7B17-4D1A-B8F6-D5E4C935EF62}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Fallout Shelter\FalloutShelter.exe
FirewallRules: [{50F7B173-AD31-4C45-9ED8-576F211A1908}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Fallout Shelter\FalloutShelter.exe
FirewallRules: [{13EBAC6A-A07B-4C5A-BD0D-021319BD4CFD}] => (Allow) D:0\Steam\steamapps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{D1E17FB3-2EB6-4AAD-A46C-C84127BEE3B0}] => (Allow) D:0\Steam\steamapps\common\Deus Ex Human Revolution Director's Cut\DXHRDC.exe
FirewallRules: [{EE1FC014-A393-4E7D-99CD-6A6266E5D645}] => (Allow) I:\STEAM\steamapps\common\Inquisitor\Game\Inquisitor.exe
FirewallRules: [{FF1E15E4-4592-4680-8022-9E13BDA86EAC}] => (Allow) I:\STEAM\steamapps\common\Inquisitor\Game\Inquisitor.exe
FirewallRules: [{749537A8-8893-444A-853C-EE842FC0338C}] => (Allow) D:0\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{892F72AB-891A-4809-9BE7-3C37955B9ADF}] => (Allow) D:0\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\BrothersLauncher.exe
FirewallRules: [{9F02CCAB-E6FC-4C9B-82F6-BB5EC47CC670}] => (Allow) D:0\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{231A49D2-B10D-4A11-AE57-3867E856627C}] => (Allow) D:0\Steam\steamapps\common\Brothers - A Tale of Two Sons\Binaries\Win32\Brothers.exe
FirewallRules: [{F113411C-75B0-4FA3-A31C-16EF52B4BA28}] => (Allow) D:4\STEAM\steamapps\common\Raiders of the Broken Planet\bin\Raiders.exe
FirewallRules: [{119C6311-DED2-4A15-9D4D-3F08569DCCCF}] => (Allow) D:4\STEAM\steamapps\common\Raiders of the Broken Planet\bin\Raiders.exe
FirewallRules: [{1E1E8A9D-6365-4DB3-ADEB-D4169663355C}] => (Allow) D:0\Steam\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{855B9C0A-AA83-4176-8A4A-4E9CA9A9D29C}] => (Allow) D:0\Steam\steamapps\common\South Park - The Stick of Truth\South Park - The Stick of Truth.exe
FirewallRules: [{504470AB-DA33-4110-BEE5-23F03A0A9F11}] => (Allow) D:4\ORIGIN\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{3379B791-627C-4FBF-AB90-2399EB5629A1}] => (Allow) D:4\ORIGIN\Mass Effect 3\Binaries\Win32\MassEffect3.exe
FirewallRules: [{E5267D31-A8B5-484C-B78E-D2BD13D57FEF}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Two Worlds II\TwoWorlds2.exe
FirewallRules: [{E0D0D9AF-4487-4857-991D-546D8EFC8372}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Two Worlds II\TwoWorlds2.exe
FirewallRules: [{BF7934FB-4D9E-4BF3-957E-2636194D2D32}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Two Worlds II\TwoWorlds2_DX10.exe
FirewallRules: [{16508357-6828-4886-BF3C-8905A08769FD}] => (Allow) D:\-JEUX-\- STEAM -\steamapps\common\Two Worlds II\TwoWorlds2_DX10.exe
FirewallRules: [{4E62758B-85E4-4D35-A9BF-DA531EE3A5F8}] => (Allow) D:4\STEAM\steamapps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{A0EC6A65-2AF5-4AF0-A99D-89206015B5B8}] => (Allow) D:4\STEAM\steamapps\common\SpecOps_TheLine\Binaries\Win32\SpecOpsTheLine.exe
FirewallRules: [{480AB0EF-F15A-482C-8DB7-6D147FD65E43}] => (Allow) D:4\STEAM\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{94A01DEA-628B-410A-B5BE-51217C9C8C98}] => (Allow) D:4\STEAM\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{E1FE0CC4-F30E-40A1-B24D-59D779C2992A}] => (Allow) D:4\STEAM\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{85262B6E-72B2-4DC0-B2F5-A37F188D33B2}] => (Allow) D:4\STEAM\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{44FA0A91-15F2-4B06-8B1B-58660424E962}] => (Allow) D:0\Steam\steamapps\common\Tyranny\Tyranny.exe
FirewallRules: [{5991F536-56F5-4A9E-968D-64FDA4D314FE}] => (Allow) D:0\Steam\steamapps\common\Tyranny\Tyranny.exe
FirewallRules: [{076599BC-8140-4D6B-92E4-3E01BFA62E80}] => (Allow) D:0\Steam\steamapps\common\Styx Shards of Darkness\Styx2.exe
FirewallRules: [{BBC15E2C-783D-4943-B6B2-CD4E3998A5D0}] => (Allow) D:0\Steam\steamapps\common\Styx Shards of Darkness\Styx2.exe
FirewallRules: [{37E06415-1A8B-4F84-8D1B-A310924E6073}] => (Allow) D:4\STEAM\steamapps\common\Joe Dever’s Lone Wolf\lonewolf.exe
FirewallRules: [{4BFE7409-127C-4B3E-BB25-43FBE7CDD657}] => (Allow) D:4\STEAM\steamapps\common\Joe Dever’s Lone Wolf\lonewolf.exe
FirewallRules: [{97BC3E7B-01D7-4E31-B741-A92F3DC366A6}] => (Allow) I:\STEAM\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{807469A3-2939-4A5D-B01F-85D006B8B217}] => (Allow) I:\STEAM\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{404B1622-5EB6-43E4-88CA-569797E00D12}] => (Allow) D:4\STEAM\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{27978C2F-102A-4E85-A7D5-9E6F39F5994F}] => (Allow) D:4\STEAM\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{D2FA37E8-1E81-4E55-852D-67C3AE5F45C5}] => (Allow) D:9\STEAM\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{8DD022B9-E756-45DB-8F03-F1B2C0A3556F}] => (Allow) D:9\STEAM\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{49EAC12A-2521-4D61-AAD1-C319DAA4F0B3}] => (Allow) F:\STEAM\steamapps\common\Ember\Ember.exe
FirewallRules: [{532E91D9-F977-40DE-B71A-2162AE584CC9}] => (Allow) F:\STEAM\steamapps\common\Ember\Ember.exe
FirewallRules: [UDP Query User{12E9BAEF-844B-4CF9-A26D-A179B7DB74E3}I:\destiny 2\destiny2.exe] => (Allow) I:\destiny 2\destiny2.exe
FirewallRules: [TCP Query User{DD64D3D6-2A9E-4568-B860-DCAA5A4E8B35}I:\destiny 2\destiny2.exe] => (Allow) I:\destiny 2\destiny2.exe
FirewallRules: [{24B12D09-D9A8-47A1-878D-88D45D442A72}] => (Allow) I:\STEAM\steamapps\common\TreeOfLife\Client2\Client2.exe
FirewallRules: [{5A571000-6F83-4B16-B541-8DAAAB4F1825}] => (Allow) I:\STEAM\steamapps\common\TreeOfLife\Client2\Client2.exe
FirewallRules: [UDP Query User{884DF3A8-5709-4F32-B251-11D7155FFFE8}I:\steam\steamapps\common\fallout 4\fallout4.exe] => (Allow) I:\steam\steamapps\common\fallout 4\fallout4.exe
FirewallRules: [TCP Query User{9C776D7E-20DF-4770-9A3F-61249592942F}I:\steam\steamapps\common\fallout 4\fallout4.exe] => (Allow) I:\steam\steamapps\common\fallout 4\fallout4.exe
FirewallRules: [UDP Query User{76BC3EFB-0643-437B-B380-FB37F5D18886}F:\forhonor\forhonor.exe] => (Allow) F:\forhonor\forhonor.exe
FirewallRules: [TCP Query User{276F585D-0905-4BB5-8DEB-E29466D0B68B}F:\forhonor\forhonor.exe] => (Allow) F:\forhonor\forhonor.exe
FirewallRules: [{EF04C7C6-4F5E-4F35-BB72-28AC1D8FBEF1}] => (Allow) I:\STEAM\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{A4547C61-6A2A-4EDF-BF2D-82143AD927E8}] => (Allow) I:\STEAM\steamapps\common\Shadow Warrior\sw.exe
FirewallRules: [{A5FD5EE5-2750-475E-9B4D-4C642680AE29}] => (Allow) I:\STEAM\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{C4BAC188-128C-4030-B72F-89FACE4DCE49}] => (Allow) I:\STEAM\steamapps\common\Shadow Warrior\dx11\launcher.exe
FirewallRules: [{D3F9A26F-4AAF-4024-8E99-F9C1A0250BBF}] => (Allow) D:0\Steam\steamapps\common\Sacred 2 Gold\system\sacred2.exe
FirewallRules: [{30FEC336-842A-4B9A-BD55-ADFE24F2FC87}] => (Allow) D:0\Steam\steamapps\common\Sacred 2 Gold\system\sacred2.exe
FirewallRules: [{42F3FD10-1658-40B7-9496-B28138934CDD}] => (Allow) D:0\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe
FirewallRules: [{C775232A-1532-4DBF-A8C2-7D72E33530E0}] => (Allow) D:0\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox.exe
FirewallRules: [{2E88FB42-1DDE-49FD-A80C-A32943C30781}] => (Allow) D:0\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe
FirewallRules: [{F7D83EF2-3F24-4044-950B-8F87CFFD739B}] => (Allow) D:0\Steam\steamapps\common\Conan Exiles\ConanSandbox\Binaries\Win64\ConanSandbox_BE.exe
FirewallRules: [{2AD77627-09FC-4722-80EC-1B1BC66121C6}] => (Allow) D:0\Steam\steamapps\common\Secret World Legends\ClientPatcher.exe
FirewallRules: [{04E9385E-76B9-4255-9010-7850F9C9B2D8}] => (Allow) D:0\Steam\steamapps\common\Secret World Legends\ClientPatcher.exe
FirewallRules: [{BFFBDBCA-A742-4FFE-9D1B-D6E07F47BBE8}] => (Allow) F:\STEAM\steamapps\common\Portal Knights\portal_knights_x64.exe
FirewallRules: [{4651FD43-4C7D-4CEC-AB66-C019B674461B}] => (Allow) F:\STEAM\steamapps\common\Portal Knights\portal_knights_x64.exe
FirewallRules: [{6535E1CE-E3B5-44DD-B592-16DF498DBFD5}] => (Allow) D:0\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{CC31B99C-D4BD-484E-A733-AB561768891F}] => (Allow) D:0\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe

10

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:04:57 PM »

2017-11-15 20:37 - 2017-11-13 11:26 - 000130512 _____ () C:\Program Files (x86)\Dropbox\Client\_cffi_backend.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 001856848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._openssl.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._padding.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000145864 _____ () C:\Program Files (x86)\Dropbox\Client\pyexpat.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000116688 _____ () C:\Program Files (x86)\Dropbox\Client\pywintypes27.dll
2017-11-15 20:37 - 2017-11-13 11:26 - 000105928 _____ () C:\Program Files (x86)\Dropbox\Client\win32api.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.crt.compiled._winffi_crt.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000040248 _____ () C:\Program Files (x86)\Dropbox\Client\fastpath.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000024528 _____ () C:\Program Files (x86)\Dropbox\Client\win32event.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000043472 _____ () C:\Program Files (x86)\Dropbox\Client\win32process.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000062784 _____ () C:\Program Files (x86)\Dropbox\Client\psutil._psutil_windows.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000392656 _____ () C:\Program Files (x86)\Dropbox\Client\pythoncom27.dll
2017-11-15 20:37 - 2017-11-13 11:26 - 000020936 _____ () C:\Program Files (x86)\Dropbox\Client\mmapfile.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000124880 _____ () C:\Program Files (x86)\Dropbox\Client\win32file.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000116176 _____ () C:\Program Files (x86)\Dropbox\Client\win32security.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000392512 _____ () C:\Program Files (x86)\Dropbox\Client\win32com.shell.shell.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.kernel32.compiled._winffi_kernel32.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32clipboard.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000175560 _____ () C:\Program Files (x86)\Dropbox\Client\win32gui.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000030160 _____ () C:\Program Files (x86)\Dropbox\Client\win32pipe.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000026056 _____ () C:\Program Files (x86)\Dropbox\Client\win32job.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000048592 _____ () C:\Program Files (x86)\Dropbox\Client\win32service.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000057808 _____ () C:\Program Files (x86)\Dropbox\Client\win32evtlog.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000021824 _____ () C:\Program Files (x86)\Dropbox\Client\cpuid.compiled._cpuid.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000023368 _____ () C:\Program Files (x86)\Dropbox\Client\winshell.compiled._winshell.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000066392 _____ () C:\Program Files (x86)\Dropbox\Client\winenumhandles.compiled._WinEnumHandles.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000025432 _____ () C:\Program Files (x86)\Dropbox\Client\winscreenshot.compiled._CaptureScreenshot.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000022856 _____ () C:\Program Files (x86)\Dropbox\Client\crashpad.compiled._Crashpad.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 001796920 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtCore.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000084424 _____ () C:\Program Files (x86)\Dropbox\Client\sip.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 001956152 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtGui.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 003859264 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWidgets.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000155464 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineWidgets.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000521024 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtNetwork.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000050496 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngineCore.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000042304 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebChannel.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000131384 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKit.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000218944 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebKitWidgets.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000204096 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtPrintSupport.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000060880 _____ () C:\Program Files (x86)\Dropbox\Client\win32print.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000054608 _____ () C:\Program Files (x86)\Dropbox\Client\winrpcserver.compiled._RPCServer.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000024016 _____ () C:\Program Files (x86)\Dropbox\Client\win32profile.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000022864 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.user32.compiled._winffi_user32.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000100688 _____ () C:\Program Files (x86)\Dropbox\Client\windisplaytoast.compiled._DisplayToast.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000028616 _____ () C:\Program Files (x86)\Dropbox\Client\win32ts.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.iphlpapi.compiled._winffi_iphlpapi.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winerror.compiled._winffi_winerror.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000022360 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.wininet.compiled._winffi_wininet.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000027488 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox.infinite.win.compiled._driverinstallation.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000349128 _____ () C:\Program Files (x86)\Dropbox\Client\winxpgui.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000101184 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWinExtras.pyd
2017-11-15 20:37 - 2017-11-13 11:29 - 000023896 _____ () C:\Program Files (x86)\Dropbox\Client\winverifysignature.compiled._VerifySignature.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000025424 _____ () C:\Program Files (x86)\Dropbox\Client\librsyncffi.compiled._librsyncffi.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000036296 _____ () C:\Program Files (x86)\Dropbox\Client\librsync.dll
2017-11-15 20:37 - 2017-11-13 11:28 - 000032600 _____ () C:\Program Files (x86)\Dropbox\Client\enterprise_data.compiled._enterprise_data.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000293392 _____ () C:\Program Files (x86)\Dropbox\Client\EnterpriseDataAdapter.dll
2017-11-15 20:37 - 2017-11-13 11:28 - 000181056 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_sqlite_ext.DLL
2017-11-15 20:37 - 2017-11-13 11:29 - 000030536 _____ () C:\Program Files (x86)\Dropbox\Client\wind3d11.compiled._wind3d11.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000024368 _____ () C:\Program Files (x86)\Dropbox\Client\libEGL.DLL
2017-11-15 20:37 - 2017-11-13 11:28 - 001638200 _____ () C:\Program Files (x86)\Dropbox\Client\libGLESv2.dll
2017-11-15 20:37 - 2017-11-13 11:29 - 000026456 _____ () C:\Program Files (x86)\Dropbox\Client\winffi.winhttp.compiled._winffi_winhttp.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000545080 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQuick.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000359224 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtQml.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000038208 _____ () C:\Program Files (x86)\Dropbox\Client\PyQt5.QtWebEngine.pyd
2017-03-21 00:34 - 2017-09-09 20:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-03-21 00:34 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-03-21 00:34 - 2017-10-31 04:22 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll
2017-03-21 00:34 - 2016-01-27 08:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2017-03-21 00:34 - 2016-01-27 08:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2017-03-21 00:34 - 2016-01-27 08:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2017-03-21 00:34 - 2016-01-27 08:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2017-03-21 00:34 - 2016-01-27 08:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2017-03-21 00:34 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-03-21 00:34 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-03-21 00:34 - 2017-10-31 04:22 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-03-21 00:34 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-03-21 00:35 - 2017-08-16 23:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-06-09 07:22 - 2017-09-07 03:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-03-21 00:34 - 2015-09-25 00:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\Users\Johan\AppData\Local\Temp:$DATA​ [16]

==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)


==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2016-07-16 12:47 - 2016-07-16 12:45 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Johan\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\DKuEDLPW4AAfSvQ.jpg
DNS Servers: 109.88.203.3 - 62.197.111.140
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.

11

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:04:32 PM »

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {02F478D5-218C-443B-9CEA-B9EEEC04CAFE} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-11-16] (NVIDIA Corporation)
Task: {15D5AEDF-1F25-41DE-B38A-A366660EE849} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-16] (NVIDIA Corporation)
Task: {17728C36-1462-4DD6-A063-C56032B7AB79} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-21] (Google Inc.)
Task: {304DDB27-2B3D-4E8C-83AD-5AB96CF33451} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-15] (Adobe Systems Incorporated)
Task: {45536D6A-E9EE-4F94-915D-15844A8AFB8F} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-11-16] (NVIDIA Corporation)
Task: {85FF6692-C263-4E8D-858F-DA6598F2704A} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2017-11-26] (Overwolf LTD)
Task: {997A83E6-C6BF-49F1-BEFC-7F076A920E88} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-15] (Adobe Systems Incorporated)
Task: {A2C483E2-D115-454A-93B4-BE3BA0D33CDA} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-11-16] (NVIDIA Corporation)
Task: {AE0B309F-712F-4D55-ADC4-82F5A07DB25D} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-16] (NVIDIA Corporation)
Task: {C4AACEDD-C71C-4ECD-9666-8F711221778B} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-11-16] (NVIDIA Corporation)
Task: {D2AD9541-2483-4A91-9198-B148AD7C2AFF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-03-21] (Google Inc.)
Task: {DAC7EA9F-9782-4989-A719-1C92F446C498} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-08-16] (Dropbox, Inc.)
Task: {DBFF0F64-C4F2-4DD5-9681-DBAB6D84DEAF} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-11-16] (NVIDIA Corporation)
Task: {E6B63097-DEF9-4EEC-868D-2040759329D5} - System32\Tasks\{8E154CA1-2C3A-45B4-ABB6-9C90E45EA3E1} => C:\Windows\system32\pcalua.exe -a "C:\Users\Johan\Desktop\Nouveau dossier\ScpServer\bin\ScpService.exe" -d "C:\Users\Johan\Desktop\Nouveau dossier\ScpServer\bin"
Task: {FA560714-931E-44E7-A31F-141A9B3F2A83} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-08-16] (Dropbox, Inc.)
Task: {FF32C14F-4580-4D6F-9E8D-04F2D7DA7AE2} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-11-16] (NVIDIA Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Raccourcis & WMI ========================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)


ShortcutWithArgument: C:\Users\Johan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Authy.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=gaedmjdfmmahhbjefcbgaolhhanlaolb

==================== Modules chargés (Avec liste blanche) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-10-30 11:04 - 2017-11-14 20:56 - 000133752 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-03-22 09:56 - 2017-11-18 00:14 - 000075136 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2017-03-22 09:56 - 2017-11-18 00:14 - 000189248 _____ () C:\WINDOWS\SysWOW64\PnkBstrB.exe
2017-10-27 16:44 - 2017-11-16 02:41 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-09-29 14:42 - 2017-09-30 15:41 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-09-29 14:42 - 2017-09-30 15:41 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-11-30 16:15 - 2017-11-30 16:16 - 000087040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-11-30 16:15 - 2017-11-30 16:16 - 000202752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-11-30 16:15 - 2017-11-30 16:16 - 025600000 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-11-30 16:15 - 2017-11-30 16:16 - 002546176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\skypert.dll
2017-11-30 16:15 - 2017-11-30 16:15 - 000672256 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 000908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2017-10-20 04:29 - 2017-10-20 04:29 - 001096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 000060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2017-10-20 04:29 - 2017-10-20 04:29 - 000241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000264040 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\CameraHelperShell.exe
2017-10-20 04:02 - 2017-10-20 04:02 - 000077824 _____ () C:\Program Files\Logitech Gaming Software\LAClient\zlib.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000144896 _____ () C:\Program Files\Logitech Gaming Software\LAClient\libssh2.dll
2017-11-14 01:55 - 2017-11-10 10:57 - 004135768 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.94\libglesv2.dll
2017-11-14 01:55 - 2017-11-10 10:57 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.94\libegl.dll
2017-10-27 16:44 - 2017-11-16 02:41 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 002144104 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtCore4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 007955304 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtGui4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000341352 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\QtXml4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000028008 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QGif4.dll
2012-09-12 23:38 - 2012-09-12 23:38 - 000127336 _____ () C:\Program Files (x86)\Logitech\LWS\Webcam Software\imageformats\QJpeg4.dll
2012-09-12 23:39 - 2012-09-12 23:39 - 000336232 _____ () C:\Program Files (x86)\Common Files\logishrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
2017-05-20 16:14 - 2016-07-21 09:54 - 000137728 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\CBSCreateVC.dll
2017-05-20 16:14 - 2016-10-08 15:59 - 001506304 _____ () C:\Program Files (x86)\Common Files\iSkysoft\iSkysoft Helper Compact\DAQExp.dll
2017-11-15 20:37 - 2017-11-13 11:26 - 000725312 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_watchdog.dll
2017-11-15 20:37 - 2017-11-13 11:26 - 002075456 _____ () C:\Program Files (x86)\Dropbox\Client\dropbox_crashpad.dll
2017-11-15 20:37 - 2017-11-13 11:26 - 000100296 _____ () C:\Program Files (x86)\Dropbox\Client\_ctypes.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000018888 _____ () C:\Program Files (x86)\Dropbox\Client\select.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000020800 _____ () C:\Program Files (x86)\Dropbox\Client\tornado.speedups.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000035792 _____ () C:\Program Files (x86)\Dropbox\Client\_multiprocessing.pyd
2017-11-15 20:37 - 2017-11-13 11:26 - 000694224 _____ () C:\Program Files (x86)\Dropbox\Client\unicodedata.pyd
2017-11-15 20:37 - 2017-11-13 11:28 - 000021848 _____ () C:\Program Files (x86)\Dropbox\Client\cryptography.hazmat.bindings._constant_time.pyd

12

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:04:08 PM »

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

ShellIconOverlayIdentifiers: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-10] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-10] (Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-10] (Google)
ShellIconOverlayIdentifiers-x32: [
MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [
MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [
MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-10] (Google)
ContextMenuHandlers1: [iSkysoftVideoConverterFileOpreation] -> {BB35DE05-89D6-4D8F-95DE-A27DF8156D91} => C:\WINDOWS\SysWOW64\ISCM64.dll -> Pas de fichier
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-10] (Google)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\ProgramData\MEGAsync\ShellExtX64.dll -> Pas de fichier
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.19.0.dll [2017-11-13] (Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-11-14] (NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)

13

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:02:42 PM »

Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{9EDBA064-0381-3D1F-9096-CD1710366647}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{9B3F0A88-790D-3AD9-9F96-B19CF2746452}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{f9b04b37-35d5-4a19-a51b-fcf4a8734851}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{b3c7f59f-dc40-4be9-829c-77dd292978ea}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{4549ceb8-695a-42eb-a183-4820d542a15f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 RC Redistributable (x64) - 14.0.22816 (HKLM-x32\...\{e2495eb6-cca8-47aa-91ea-3410ca44d7b7}) (Version: 14.0.22816.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mises à jour NVIDIA 31.0.1.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 31.0.1.0 - NVIDIA Corporation) Hidden
Molotov (HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\...\Molotov) (Version: 1.6.0 - Molotov)
Mozilla Firefox 57.0 (x64 fr) (HKLM\...\Mozilla Firefox 57.0 (x64 fr)) (Version: 57.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 57.0.0.6525 - Mozilla)
MSI Afterburner 4.4.0 (HKLM-x32\...\Afterburner) (Version: 4.4.0 - MSI Co., LTD)
Need for Speed™ (HKLM-x32\...\{F8643E83-A868-4EE8-A0B9-389386830453}) (Version: 1.3.0.0 - Electronic Arts)
Need for Speed™ Rivals (HKLM-x32\...\{E0A32336-AA27-4053-99B2-C3380B7B95AC}) (Version: 1.4.0.0 - Electronic Arts)
Neverwinter Nights Diamond Edition (HKLM-x32\...\1207658890_is1) (Version: 2.1.0.21 - GOG.com)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.14 - Black Tree Gaming)
NVIDIA GeForce Experience 3.11.0.73 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.11.0.73 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 388.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.31 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Pilote graphique 388.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.31 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenCL™ runtime for Intel® Core™ and Xeon® Processors (HKLM\...\{1F6CF248-9A18-4740-BD09-281DBC8A2051}) (Version: 6.4.0.25 - Intel Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.6.6235 - Electronic Arts, Inc.)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.108.34.0 - Overwolf Ltd.)
Package de pilotes Windows - Fedict SmartCard  (11/30/2016 4.1.9) (HKLM\...\A9FBB4D4E267FA9BF2CEBF564F02DB39E147B466) (Version: 11/30/2016 4.1.9 - Fedict)
Package de pilotes Windows - Sony Computer Entertainment Inc. Wireless controller for PLAYSTATION(R)3 Driver Package (01/20/2012 1.4.0.0) (HKLM\...\D5410AE5FA467EF0F19558D5F60C991A79E11B51) (Version: 01/20/2012 1.4.0.0 - Sony Computer Entertainment Inc.)
Panneau de configuration NVIDIA 388.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 388.31 - NVIDIA Corporation) Hidden
PcCloneEX (HKLM-x32\...\PcCloneEX) (Version:  - )
PlayStation™Now (HKLM-x32\...\{19C62B5E-7594-4C8E-AD11-91BA9BB582EF}) (Version: 9.0.12 - Sony Interactive Entertainment Network America LLC)
PokerStars.be (HKLM-x32\...\PokerStars.be) (Version:  - PokerStars.be)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
RivaTuner Statistics Server 7.0.0 (HKLM-x32\...\RTSS) (Version: 7.0.0 - Unwinder)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.2.2.0 - Rockstar Games)
RogueKiller version 12.11.26.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.26.0 - Adlice Software)
Saints Row 2 (HKLM-x32\...\1430740458_is1) (Version: 2.1.0.5 - GOG.com)
South Park - The Fractured but Whole (HKLM-x32\...\Uplay Install 3088) (Version:  - Ubisoft)
Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
STAR WARS™ Battlefront™ II (HKLM-x32\...\{8a882ce0-0c0b-4eb2-850c-28ebadab4f50}) (Version: 1.0.15.34840 - Electronic Arts)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Steep (HKLM-x32\...\Uplay Install 3279) (Version:  - Ubisoft)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.3 - TeamSpeak Systems GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
Titanfall™ 2 (HKLM-x32\...\{4BD80373-FEE7-45B6-8249-6E8E98717405}) (Version: 1.0.1.2 - Electronic Arts, Inc.)
Tom Clancy's Ghost Recon Wildlands (HKLM-x32\...\Uplay Install 1771) (Version:  - Ubisoft)
Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version:  - Ubisoft)
Total War Arena EU (HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\...\TWA.EU.PRODUCTION) (Version:  - Wargaming.net)
Trackmania Turbo (HKLM-x32\...\Uplay Install 2070) (Version:  - Ubisoft)
Twitch (HKLM-x32\...\{F36ED29E-33E1-48AB-95DA-2498AD41A9A0}) (Version: 6.0.0.0 - Twitch Interactive, Inc.)
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
univcredist (HKLM-x32\...\{2d9d4a60-1d22-46c1-84bb-1de04b4715d7}) (Version: 1.0.0.0 - Motiga)
Uplay (HKLM-x32\...\Uplay) (Version: 38.0.1 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Wargaming.net Game Center (HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\...\Wargaming.net Game Center) (Version: 17.8.1.6304 - Wargaming.net)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
WATCH_DOGS2 (HKLM-x32\...\Uplay Install 2688) (Version:  - Ubisoft)
Windscribe (HKLM-x32\...\{fa690e90-ddb0-4f0c-b3f1-136c084e5fc7}_is1) (Version: 1.80 Build 30 - Windscribe Limited)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wrye Bash (HKLM-x32\...\Wrye Bash) (Version: 307.2016.1230.2300 - Wrye & Wrye Bash Development Team)

14

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:02:19 PM »

fichier ADDITIONAL.txt :
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 30-11-2017
Exécuté par Johan (02-12-2017 12:52:57)
Exécuté depuis C:\Users\Johan\Desktop
Windows 10 Pro Version 1709 16299.64 (X64) (2017-10-17 23:38:40)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-3725624749-1276324894-2347643319-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3725624749-1276324894-2347643319-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-3725624749-1276324894-2347643319-1000 - Limited - Disabled) => C:\Users\defaultuser0
HomeGroupUser$ (S-1-5-21-3725624749-1276324894-2347643319-1003 - Limited - Enabled)
Invité (S-1-5-21-3725624749-1276324894-2347643319-501 - Limited - Disabled)
Johan (S-1-5-21-3725624749-1276324894-2347643319-1001 - Administrator - Enabled) => C:\Users\Johan
WDAGUtilityAccount (S-1-5-21-3725624749-1276324894-2347643319-504 - Limited - Disabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated)
Application Blizzard (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Arc (HKLM-x32\...\{CED8E25B-122A-4E80-B612-7F99B93284B3}) (Version: 1.0.0.9668 - Perfect World Entertainment)
Assassin's Creed Brotherhood (HKLM-x32\...\Uplay Install 26) (Version:  - Ubisoft)
Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version:  - Ubisoft)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version:  - Ubisoft)
Assassin's Creed Origins (HKLM-x32\...\Uplay Install 3539) (Version:  - Ubisoft)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)
Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.51 - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version:  - Ubisoft)
Assistant Mise à niveau de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17384 - Microsoft Corporation)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.8.2.48475 - Electronic Arts)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.51.47047 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
Belgium e-ID middleware 4.1.20 (build 1779) (HKLM\...\{DB942AEA-93D6-4FE4-8862-180D35A71779}) (Version: 4.1.1779 - Belgian Government)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.18.5 - Bethesda Softworks)
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
Cheat Engine 6.7 (HKLM-x32\...\Cheat Engine 6.7_is1) (Version:  - Cheat Engine)
CPUID CPU-Z 1.79 (HKLM\...\CPUID CPU-Z_is1) (Version:  - )
CPUID HWMonitor 1.33 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.33 - )
Crysis 2 (HKLM-x32\...\{6033673D-2530-4587-8AD0-EB059FC263F9}) (Version: 1.9.0.0 - Electronic Arts)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
Dead Space™ 3 (HKLM-x32\...\{D4329609-4102-4F8C-B83F-7FE024EEA314}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Destiny 2 (HKLM-x32\...\Destiny 2) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Dragon Age: Origins (HKLM-x32\...\{AEC81925-9C76-4707-84A9-40696C613ED3}) (Version: 1.05.13263.0 - Electronic Arts)
Driver San Francisco (HKLM-x32\...\Uplay Install 13) (Version:  - Ubisoft)
DriversCloud.com (64 bits) (HKLM\...\{C514B5EE-C8E6-43C9-AFB9-6C1A7B3429E1}) (Version: 10.0.4.0 - Cybelsoft)
Dropbox (HKLM-x32\...\Dropbox) (Version: 39.4.49 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.65.1 - Dropbox, Inc.) Hidden
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)
FIFA 17 (HKLM-x32\...\{8C0DD062-B659-409C-9AB7-8EBD1D64D2EB}) (Version: 1.0.48.30259 - Electronic Arts)
Folder Size (64-bit) (HKLM\...\{F24FF688-7138-4CCF-A83F-71E9FB01170E}) (Version: 2.6 - Brio)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Gaming Mouse (HKLM-x32\...\$REGNAME) (Version: 1.0 - )
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
GOG.com Downloader version 3.6.0 (HKLM-x32\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Drive (HKLM-x32\...\{9BC95947-92FD-438B-A168-C01F9A5B7292}) (Version: 2.34.7529.6838 - Google, Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
INSIDE (HKLM-x32\...\1916896012_is1) (Version: 10 - GOG.com)
Intel Processor Diagnostic Tool 64bit (HKLM\...\{D011AAF9-F756-43AB-8E91-47ADF0D86394}) (Version: 4.0.0.29 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{BF46D11E-638D-4254-A7BD-E9B355C4ECEA}) (Version: 5.0.10.2850 - Intel Corporation)
iSkysoft Helper Compact 2.5.2 (HKLM-x32\...\{9BF12010-8799-41A5-A671-E9CFDE9E79F3}_is1) (Version: 2.5.2 - iSkysoft)
Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Jivaro (HKLM-x32\...\{95CF931D-DDEB-4B15-B52C-80096CB5275E}) (Version: 2.2.15.0 - Jivaro ehf)
Ladbrokes Poker (HKU\S-1-5-21-3725624749-1276324894-2347643319-1001\...\Ladbrokes.be Poker) (Version: 1.1.1.33 - Ladbrokes Poker)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
LAV Filters 0.55.3 (HKLM-x32\...\lavfilters_is1) (Version: 0.55.3 - Hendrik Leppkes)
Little Big Adventure 2 (HKLM-x32\...\1207658974_is1) (Version: 2.1.0.8 - GOG.com)
Little Nightmares (HKLM-x32\...\1433377508_is1) (Version: 1.0.29.1 - GOG.com)
Logitech - Assistant pour jeux vidéo 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
Logitech Webcam Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
Mass Effect™ (HKLM-x32\...\{44A570EE-FD93-4086-8997-2C38DFDE0019}) (Version: 1.2.20608.0 - Electronic Arts)
Mass Effect™ : Andromeda (HKLM-x32\...\{72BBCA87-9350-48BC-9E2F-6DBC1E80C993}) (Version: 1.0.0.10 - Electronic Arts)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Mass Effect™ 3 (HKLM-x32\...\{534A31BD-20F4-46b0-85CE-09778379663C}) (Version: 1.05.0.0 - Electronic Arts)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)

15

Malware removal help / Re: problem on the sites

« on: December 02, 2017, 01:01:38 PM »

2017-11-15 01:47 - 2017-10-25 03:57 - 006035968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-11-15 01:47 - 2017-10-25 03:55 - 002864640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mispace.dll
2017-11-15 01:47 - 2017-10-25 03:54 - 000022528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msdtcVSp1res.dll
2017-11-15 01:47 - 2017-10-21 13:25 - 003313968 _____ C:\WINDOWS\system32\Windows.Mirage.dll
2017-11-15 01:47 - 2017-10-20 15:17 - 002474584 _____ C:\WINDOWS\SysWOW64\Windows.Mirage.dll
2017-11-15 01:47 - 2017-10-20 06:08 - 000339968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-11-14 20:15 - 2017-11-14 20:15 - 000000000 ____D C:\Users\Johan\AppData\Roaming\Mount&Blade
2017-11-14 01:50 - 2017-11-14 01:50 - 000000000 ____D C:\WINDOWS\Panther
2017-11-13 17:14 - 2017-11-13 17:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crysis 2
2017-11-13 13:54 - 2017-11-13 20:31 - 000002109 _____ C:\Users\Johan\Desktop\ACO_bugs.txt
2017-11-13 11:26 - 2017-11-13 11:26 - 000051016 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2017-11-13 11:26 - 2017-11-13 11:26 - 000045672 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2017-11-13 11:26 - 2017-11-13 11:26 - 000045640 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2017-11-10 16:51 - 2017-11-10 16:51 - 000000000 ____D C:\ProgramData\Riot Games
2017-11-10 16:41 - 2008-07-12 08:18 - 003851784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_39.dll
2017-11-10 16:41 - 2008-07-12 08:18 - 001493528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_39.dll
2017-11-10 16:41 - 2008-07-12 08:18 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_39.dll
2017-11-05 20:26 - 2017-11-05 20:26 - 000000000 ____D C:\Users\Johan\AppData\Roaming\NVIDIA
2017-11-05 20:23 - 2017-11-05 21:28 - 000000000 ____D C:\Users\Johan\AppData\Local\Razer
2017-11-05 20:21 - 2017-11-05 21:28 - 000000000 ____D C:\ProgramData\Razer
2017-11-04 14:49 - 2017-11-04 14:49 - 000000234 _____ C:\Users\Johan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Assassin's Creed Origins.url
2017-11-02 15:17 - 2017-11-29 04:25 - 000000000 ____D C:\Users\Johan\Desktop\◄JEUX-DIVERS►
2017-11-02 15:05 - 2017-11-02 15:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-12-02 12:25 - 2017-10-27 16:38 - 000000000 ____D C:\ProgramData\NVIDIA
2017-12-02 11:32 - 2017-03-21 00:34 - 000000000 ____D C:\Program Files (x86)\Steam
2017-12-02 10:32 - 2017-04-09 19:05 - 000000000 ____D C:\Users\Johan\AppData\Local\UnrealEngine
2017-12-02 09:51 - 2017-10-18 00:41 - 002925560 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-12-02 09:51 - 2017-09-30 15:39 - 001389372 _____ C:\WINDOWS\system32\perfh00C.dat
2017-12-02 09:51 - 2017-09-30 15:39 - 000326932 _____ C:\WINDOWS\system32\perfc00C.dat
2017-12-02 09:49 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization
2017-12-02 09:47 - 2017-03-20 23:39 - 000000000 __RDL C:\Users\Johan\OneDrive
2017-12-02 09:46 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\NDF
2017-12-02 09:46 - 2017-03-21 00:26 - 000000000 ____D C:\ProgramData\LogiShrd
2017-12-02 09:45 - 2017-10-18 00:36 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-12-02 09:45 - 2017-09-29 09:45 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2017-12-02 09:45 - 2017-03-22 11:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-12-02 09:45 - 2017-03-21 11:19 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-12-02 09:44 - 2017-03-21 00:24 - 000000000 ____D C:\Users\Johan\AppData\Local\Ubisoft Game Launcher
2017-12-02 09:29 - 2017-10-18 00:30 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-12-02 08:40 - 2017-03-21 20:04 - 000000000 ____D C:\Users\Johan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2017-12-02 07:13 - 2017-10-18 00:36 - 000004170 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{59D9B3A2-4CA1-4862-B15F-0E67BEB3E811}
2017-12-01 16:08 - 2017-09-29 14:46 - 000000000 ___HD C:\Program Files\WindowsApps
2017-12-01 16:08 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-12-01 15:01 - 2017-10-18 00:32 - 000000000 ____D C:\Users\Johan
2017-12-01 13:17 - 2017-03-21 00:47 - 000000000 ____D C:\Users\Johan\AppData\Roaming\Origin
2017-12-01 13:17 - 2017-03-21 00:46 - 000000000 ____D C:\ProgramData\Origin
2017-12-01 13:07 - 2017-03-22 11:24 - 000000000 ____D C:\Users\Johan\AppData\LocalLow\Mozilla
2017-12-01 13:03 - 2017-08-23 06:56 - 000000000 ____D C:\Users\Johan\AppData\Local\PokerStars.BE
2017-12-01 13:03 - 2017-03-22 11:24 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-12-01 13:03 - 2017-03-22 11:24 - 000000000 ____D C:\Users\Johan\AppData\Roaming\Mozilla
2017-12-01 10:29 - 2017-03-21 01:33 - 000000000 ____D C:\Users\Johan\AppData\Local\CrashDumps
2017-12-01 02:15 - 2017-03-21 14:39 - 000000000 ____D C:\Users\Johan\AppData\Roaming\vlc
2017-12-01 01:47 - 2017-10-14 09:01 - 000000000 ____D C:\Users\Johan\AppData\Local\CAPCOM
2017-11-30 21:14 - 2017-10-27 16:37 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-11-30 20:41 - 2017-03-25 09:49 - 000000000 ____D C:\Program Files\RogueKiller
2017-11-30 20:39 - 2017-03-22 16:19 - 000000000 ____D C:\AdwCleaner
2017-11-30 06:19 - 2017-04-03 13:32 - 000000000 ____D C:\Users\Johan\AppData\Roaming\TS3Client
2017-11-29 19:31 - 2017-09-29 14:44 - 000000000 ____D C:\WINDOWS\INF
2017-11-29 04:30 - 2017-10-17 14:01 - 000000000 ____D C:\Users\Johan\Desktop\◄SRENNSHOT►
2017-11-28 22:47 - 2017-03-21 19:15 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2017-11-28 22:47 - 2017-03-21 00:14 - 000000000 ____D C:\ProgramData\Package Cache
2017-11-28 21:33 - 2017-04-03 13:32 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-11-28 05:03 - 2017-10-16 01:51 - 000000264 _____ C:\Users\Johan\Desktop\poker.txt
2017-11-27 23:20 - 2017-03-21 00:58 - 000000000 ____D C:\Users\Johan\AppData\Local\NVIDIA Corporation
2017-11-27 23:19 - 2017-10-27 16:44 - 000001489 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2017-11-27 23:19 - 2017-10-27 16:37 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-11-27 23:19 - 2017-10-27 16:37 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2017-11-27 21:51 - 2017-10-27 16:44 - 000000000 ____D C:\Users\Johan\AppData\Local\NVIDIA
2017-11-27 21:51 - 2017-03-21 00:35 - 000000000 ____D C:\Users\Johan\AppData\Local\Steam
2017-11-27 03:59 - 2017-10-18 00:32 - 000000000 ____D C:\Users\Johan\AppData\Local\Packages
2017-11-26 04:46 - 2017-03-31 23:26 - 000000000 ____D C:\Users\Johan\AppData\Local\Battle.net
2017-11-25 16:56 - 2017-03-31 23:25 - 000000000 ____D C:\Program Files (x86)\Blizzard App
2017-11-25 04:46 - 2017-10-23 14:02 - 000000000 ____D C:\Users\Johan\AppData\Local\ELEX
2017-11-24 13:55 - 2017-07-29 15:17 - 000773451 _____ C:\Users\Johan\AppData\Local\census.cache
2017-11-24 13:55 - 2017-07-29 15:17 - 000138459 _____ C:\Users\Johan\AppData\Local\ars.cache
2017-11-23 10:27 - 2017-03-21 00:53 - 000000000 ____D C:\Users\Johan\AppData\Local\ElevatedDiagnostics
2017-11-23 09:31 - 2017-03-21 02:44 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2017-11-23 09:31 - 2017-03-21 02:39 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2017-11-21 22:19 - 2017-04-28 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Little Nightmares [GOG.com]
2017-11-21 22:15 - 2017-04-09 22:02 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2017-11-21 10:06 - 2017-03-20 23:57 - 000545440 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-11-19 00:06 - 2017-04-22 11:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2017-11-18 00:14 - 2017-03-22 09:56 - 000189248 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe
2017-11-18 00:14 - 2017-03-22 09:56 - 000075136 _____ C:\WINDOWS\SysWOW64\PnkBstrA.exe
2017-11-17 00:00 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\rescache
2017-11-16 22:36 - 2017-03-21 12:47 - 000780328 _____ C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys
2017-11-16 21:36 - 2017-03-21 00:47 - 000000000 ____D C:\Program Files (x86)\Origin
2017-11-16 21:35 - 2017-10-27 16:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-11-16 02:41 - 2017-10-27 16:44 - 001309120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll
2017-11-16 02:41 - 2017-10-27 16:44 - 000186304 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2017-11-16 02:41 - 2017-10-27 16:44 - 000152512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2017-11-16 01:53 - 2017-04-07 10:28 - 000001951 _____ C:\WINDOWS\NvTelemetryContainerRecovery.bat
2017-11-16 01:08 - 2017-07-21 07:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mass Effect 2
2017-11-15 20:37 - 2017-08-16 13:31 - 000000000 ____D C:\Program Files (x86)\Dropbox
2017-11-15 05:28 - 2017-03-20 23:54 - 000000000 ____D C:\WINDOWS\system32\MRT
2017-11-15 05:22 - 2017-10-10 19:20 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe
2017-11-15 05:22 - 2017-03-20 23:54 - 127017032 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-11-15 05:18 - 2017-10-18 00:30 - 000239896 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-11-15 05:17 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2017-11-15 05:17 - 2017-09-29 14:46 - 000000000 ___SD C:\WINDOWS\system32\F12
2017-11-15 05:17 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\TextInput
2017-11-15 05:17 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2017-11-15 05:17 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-11-15 05:17 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\appraiser
2017-11-15 05:17 - 2017-09-29 09:45 - 000000000 ____D C:\WINDOWS\system32\Dism
2017-11-15 02:12 - 2017-10-18 00:36 - 000004764 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-11-15 02:12 - 2017-10-18 00:36 - 000004594 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-11-15 02:12 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-11-15 02:12 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\system32\Macromed
2017-11-15 01:49 - 2017-09-30 11:11 - 000047096 _____ (Wellbia.com Co., Ltd.) C:\WINDOWS\xhunter1.sys
2017-11-15 01:48 - 2017-09-29 14:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-11-15 00:32 - 2017-03-22 14:07 - 000005880 _____ C:\Users\Johan\Desktop\TEST_epson.txt
2017-11-14 20:56 - 2017-10-30 11:04 - 005960640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2017-11-14 20:56 - 2017-10-30 11:04 - 002587584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2017-11-14 20:56 - 2017-10-30 11:04 - 001766336 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2017-11-14 20:56 - 2017-10-30 11:04 - 000607352 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2017-11-14 20:56 - 2017-10-30 11:04 - 000449472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2017-11-14 20:56 - 2017-10-30 11:04 - 000123000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2017-11-14 20:56 - 2017-10-30 11:04 - 000082040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2017-11-14 20:20 - 2017-03-21 01:32 - 000000000 ____D C:\Program Files\Rockstar Games
2017-11-14 20:20 - 2017-03-21 01:32 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2017-11-14 01:55 - 2017-03-21 00:09 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-11-14 01:49 - 2017-10-18 00:36 - 000003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-11-14 01:49 - 2017-10-18 00:36 - 000003462 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-11-13 21:29 - 2017-09-29 14:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2017-11-10 07:09 - 2017-10-30 11:04 - 007855841 _____ C:\WINDOWS\system32\nvcoproc.bin
2017-11-09 17:47 - 2017-10-30 11:03 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat
2017-11-07 18:11 - 2017-03-21 00:14 - 000000000 ____D C:\Program Files\Logitech Gaming Software
2017-11-07 18:10 - 2017-03-21 00:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2017-11-03 12:19 - 2017-10-18 00:36 - 000003370 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3725624749-1276324894-2347643319-1001
2017-11-03 12:19 - 2017-03-20 23:39 - 000002452 _____ C:\Users\Johan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-11-02 23:39 - 2017-07-12 06:04 - 000000000 ____D C:\Program Files (x86)\Windscribe
2017-11-02 15:04 - 2017-07-12 06:04 - 000001144 _____ C:\Users\Public\Desktop\Windscribe.lnk

==================== Fichiers à la racine de certains dossiers =======

2017-10-02 02:05 - 2017-10-02 02:05 - 000000037 ___SH () C:\Users\Johan\AppData\Local\20986331705021ca58edc424.96250074
2017-07-29 15:17 - 2017-11-24 13:55 - 000138459 _____ () C:\Users\Johan\AppData\Local\ars.cache
2017-07-29 15:17 - 2017-11-24 13:55 - 000773451 _____ () C:\Users\Johan\AppData\Local\census.cache
2017-07-13 06:22 - 2017-07-13 06:22 - 000000093 _____ () C:\Users\Johan\AppData\Local\fusioncache.dat
2017-03-25 09:49 - 2017-03-25 09:49 - 000000036 _____ () C:\Users\Johan\AppData\Local\housecall.guid.cache

Certains fichiers dans TEMP:
====================
2017-11-30 20:39 - 2017-10-25 05:37 - 001954048 _____ (Microsoft Corporation) C:\Users\Johan\AppData\Local\Temp\dllnt_dump.dll

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-11-27 14:31

==================== Fin de FRST.txt ============================