cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Additional scan result of Farbar Recovery Scan Tool (x64) Version:11-07-2015
Ran by Thierry at 2015-07-12 10:22:11
Running from C:\Users\Thierry\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrateur (S-1-5-21-3668462976-1317066156-1187799873-500 - Administrator - Disabled)
HomeGroupUser$ (S-1-5-21-3668462976-1317066156-1187799873-1004 - Limited - Enabled)
Invité (S-1-5-21-3668462976-1317066156-1187799873-501 - Limited - Disabled)
Thierry (S-1-5-21-3668462976-1317066156-1187799873-1000 - Administrator - Enabled) => C:\Users\Thierry

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Microsoft Security Essentials (Enabled - Up to date) {B7ECF8CD-0188-6703-DBA4-AA65C6ACFB0A}
AS: Microsoft Security Essentials (Enabled - Up to date) {0C8D1929-27B2-688D-E114-9117BD2BB1B7}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 14.0.0.110 - Adobe Systems Incorporated)
Adobe Flash Player 17 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.191 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.11) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AB0000000001}) (Version: 11.0.11 - Adobe Systems Incorporated)
ANT Drivers Installer x64 (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Apple Application Support (32 bits) (HKLM-x32\...\{AFA1153A-F547-409B-B837-3A0D6C5A3FEC}) (Version: 3.1.3 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{D7B824DE-DA32-4772-9E5E-39C5158136A7}) (Version: 3.1.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{C4123106-B685-48E6-B9BD-E4F911841EB4}) (Version: 8.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Assistant de connexion Windows Live (HKLM-x32\...\{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}) (Version: 5.000.818.5 - Microsoft Corporation)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.4.1.3099 - CDBurnerXP)
Cumulus 1.9.3 (HKLM-x32\...\Cumulus_is1) (Version: - Sandaysoft)
EasyWeather (HKLM-x32\...\{CE1B03BC-3C99-4580-A2AC-A41DB9B83378}) (Version: - 1.0)
e-Carte Bleue Banque Populaire (HKLM-x32\...\{B0900CB5-8EC0-43B4-9DAC-A32FE52DC864}) (Version: 2.2.7.0 - )
Elevated Installer (x32 Version: 3.2.27.0 - Garmin Ltd or its subsidiaries) Hidden
FileZilla Client 3.11.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse)
Freemake Video Converter version 4.1.3 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.3 - Ellora Assets Corporation)
FTP-Watchdog (HKLM-x32\...\{17F11602-3662-4596-9343-FD22043725FD}) (Version: 3.02.0000 - Wirth IT Design)
Galerie de photos Windows Live (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{855d8086-4275-4bd3-a7a8-b44da3a56d7a}) (Version: 3.2.27.0 - Garmin Ltd or its subsidiaries)
Garmin Express (x32 Version: 3.2.27.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express Tray (x32 Version: 3.2.27.0 - Garmin Ltd or its subsidiaries) Hidden
GIMP 2.8.0 (HKLM\...\GIMP-2_is1) (Version: 2.8.0 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.132 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
GraphWeather Version 2.0.321 (HKLM-x32\...\GraphWeather_is1) (Version: - Antoine Guilmard)
Installation Windows Live (HKLM-x32\...\WinLiveSuite_Wave3) (Version: 14.0.8117.0416 - Microsoft Corporation)
Installation Windows Live (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
iTunes (HKLM\...\{93F2A022-6C37-48B8-B241-FFABD9F60C30}) (Version: 12.1.2.27 - Apple Inc.)
Java 7 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417045FF}) (Version: 7.0.450 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.550 - Oracle)
Java 8 Update 5 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418005FF}) (Version: 8.0.50 - Oracle Corporation)
Java SE Development Kit 7 Update 45 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0170450}) (Version: 1.7.0.450 - Oracle)
Junk Mail filter update (x32 Version: 14.0.8117.416 - Microsoft Corporation) Hidden
K-Lite Codec Pack 11.0.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.0.0 - )
La boite a couleurs version 1.6.15 (HKLM-x32\...\La boite a couleurs_is1) (Version: - )
LiveWeb (HKLM-x32\...\{F0A7B33E-C872-42C8-B1A9-55450809DAFF}) (Version: 4.00 - Shyam Pillai)
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
MergeModule_x64 (Version: 9.0.02 - Sony Corporation) Hidden
MergeModule_x86 (x32 Version: 9.0.02 - Sony Corporation) Hidden
Microsoft .NET Framework 4.5.1 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2010 (HKLM-x32\...\Office14.PROPLUSR) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.8.204.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.1.5 - )
Outil de téléchargement Windows Live (HKLM-x32\...\{205C6BDD-7B73-42DE-8505-9A093F35A238}) (Version: 14.0.8014.1029 - Microsoft Corporation)
Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Paint.NET v3.31 (HKLM\...\{51AFB69C-1C54-4C77-A888-2860F8CD3E7E}) (Version: 3.31.0 - dotPDN LLC)
PlayMemories Home (HKLM-x32\...\{93AA5B49-0994-4EF6-80F3-868C9CEA88ED}) (Version: 4.0.02.10030 - Sony Corporation)
PMB_ModeEditor (x32 Version: 9.0.02 - Sony Corporation) Hidden
PMB_ServiceUploader (x32 Version: 9.0.02 - Sony Corporation) Hidden
PSIM 9.3.2 Demo Version (HKLM-x32\...\{563F6838-0781-42BA-B610-462E985626DF}) (Version: 9.3.2 - Powersim)
RealDownloader (x32 Version: 1.3.0 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.0 - RealNetworks)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6449 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
Secure Download Manager (HKLM-x32\...\{0E2C6C50-A909-462E-9586-ADF103881BBF}) (Version: 3.0.5 - e-academy Inc.)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM-x32\...\{91140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUSR_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
SOHLib for PlayMemories Home (Version: 1.0.3.02170 - Sony Corporation) Hidden
SUPER © v2015.build.64+Recorder (2015/02/13) version v2015.buil (HKLM-x32\...\{8E2A29E2-96BF-8759-4DA7-5C16C90729A4}_is1) (Version: v2015.build.64+Recorder - eRightSoft)
Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.0.111 - MSI)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Utilitaire client sans fil TP-LINK (HKLM-x32\...\{BD9FA1D6-DFA7-4C89-8956-D96CCC7A296A}) (Version: 7.0 - TP-LINK)
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
VoiceOver Kit (HKLM-x32\...\{6B4AD1A9-E73A-4184-9D6B-072F8A3C5EBA}) (Version: 1.42.128.0 - Apple Inc.)
Windows Live FolderShare (HKLM-x32\...\{76810709-A7D3-468D-9167-A1780C1E766C}) (Version: 14.0.8117.416 - Microsoft Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 4.20 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
WordBiz 1.8.6 (HKLM-x32\...\WordBiz_0) (Version: - )
WordBiz version 1.8 (HKLM-x32\...\Internet Scrabble Club_is1) (Version: 1.8 - Internet Scrabble Club)
Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.3) (Version: 1.3.3 - Xvid Team)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== Restore Points =========================

01-07-2015 09:05:47 Windows Update
04-07-2015 09:33:17 Windows Update
05-07-2015 19:02:05 Removed Boxore Client
06-07-2015 14:18:35 OTL Restore Point - 06/07/2015 14:18:31
06-07-2015 14:29:32 OTL Restore Point - 06/07/2015 14:29:32
07-07-2015 09:10:14 Removed AMD Catalyst Install Manager
08-07-2015 09:03:46 Windows Update
09-07-2015 18:07:30 ZHPFix Restore System Point
11-07-2015 09:27:45 Windows Update

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2014-06-18 17:44 - 00000828 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {141F666C-F4AF-4D8A-9756-315DBF7EBC9B} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-3668462976-1317066156-1187799873-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {1A47A201-81EC-44D9-A33C-23797E378785} - System32\Tasks\Java Update Scheduler => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2014-03-18] (Oracle Corporation)
Task: {1CC716FA-E412-489A-839B-07550D86E343} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2015-02-18] ()
Task: {2A2019F3-6502-4C97-ABBC-2B8C34703122} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {330AD219-3F5D-401D-AB7F-F08AAD03D2E8} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-3668462976-1317066156-1187799873-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2012-11-29] (RealNetworks, Inc.)
Task: {33121313-2620-4A36-9122-FF066B4665D1} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {36BE36F8-1CCC-4EC7-9FDD-F6880502B5F1} - System32\Tasks\Dsoinvsopsod => C:\ProgramData\Dsoinvsopsod\1.0.1.0\ownifneb.exe
Task: {40D6DE3C-05C3-4F49-9253-068179DB68E2} - System32\Tasks\RNUpgradeHelperLogonPrompt_Thierry => C:\Users\Thierry\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\13.00\agent\rnupgagent.exe [2015-07-06] (RealNetworks, Inc.)
Task: {47426DAC-4BC5-42DB-A4B6-9FB6CA4C4341} - System32\Tasks\RNUpgradeHelperResumePrompt_Thierry => C:\Users\Thierry\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\13.00\agent\rnupgagent.exe [2015-07-06] (RealNetworks, Inc.)
Task: {4A443C52-EA48-46F2-A489-D1C9988171C2} - System32\Tasks\Programme de mise à jour en ligne de Adobe => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-06-12] (Adobe Systems Incorporated)
Task: {4B7270C3-C2DD-471A-8E64-E3B9CF40088B} - System32\Tasks\ReclaimerUpdateXML_Thierry => C:\Users\Thierry\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\13.00\agent\rnupgagent.exe [2015-07-06] (RealNetworks, Inc.)
Task: {4F67B3E9-9915-4CC8-BD3A-F61AF6816D07} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {59393456-A7EF-4674-85AB-5F66C0B540E1} - System32\Tasks\{DB882629-BEF1-4493-BE9D-04C37F4A9A26} => pcalua.exe -a C:\Users\Thierry\AppData\Roaming\omniboxes\UninstallManager.exe -c -ptid=amt
Task: {6118E816-5767-40AE-9FD6-21867AC4F590} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-20] (Google Inc.)
Task: {64687D3E-6B59-4329-94A1-95FA4B3AF8BD} - System32\Tasks\{77C6C516-0335-4619-922E-B4C242A559A4} => pcalua.exe -a C:\Users\Thierry\AppData\Roaming\mystartsearch\UninstallManager.exe -c -ptid=cmi
Task: {65C9C00F-9B06-460F-86A1-0F7D4099C76A} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-3668462976-1317066156-1187799873-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {692DF26B-658B-4795-B337-526597A05884} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-3668462976-1317066156-1187799873-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2012-11-29] (RealNetworks, Inc.)
Task: {7185BAED-709E-46D6-8AE7-5E72BCB39335} - System32\Tasks\ReclaimerUpdateFiles_Thierry => C:\Users\Thierry\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\13.00\agent\rnupgagent.exe [2015-07-06] (RealNetworks, Inc.)
Task: {9EC570AF-3D6B-4E54-9B89-B43DD62D71FB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-09] (Adobe Systems Incorporated)
Task: {A3B882D5-36A7-408E-B2AE-A4EA9375D9D4} - System32\Tasks\{03B92320-BD8C-4464-9501-DE690C5A2996} => pcalua.exe -a C:\Users\Thierry\AppData\Roaming\webssearches\UninstallManager.exe -c -ptid=exp <==== ATTENTION
Task: {BF9D518F-EDD9-40A9-BAE8-C9E9836FB7A0} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-3668462976-1317066156-1187799873-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.)
Task: {D6F4AB2C-1796-47AC-B8B8-867F2D48D936} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express Self Updater\ExpressSelfUpdater.exe [2014-12-31] ()
Task: {E130132A-E3BF-4B9C-AB77-BC2F1EA2D454} - System32\Tasks\Sony Corporation\Sony Home Network Library\SOHLib SOHDms => C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe [2014-01-16] (Sony Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2013-09-05 01:17 - 2013-09-05 01:17 - 04300456 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF
2015-06-02 17:18 - 2015-06-02 17:18 - 00043480 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext_64.dll
2012-06-18 17:24 - 2012-06-18 17:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-03-20 18:12 - 2015-03-20 18:12 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2013-05-23 17:59 - 2013-02-03 12:30 - 11648512 _____ () C:\Cumulus\cumulus.exe
2013-04-08 17:41 - 2010-11-30 21:51 - 01335296 _____ () C:\GraphWeather\GraphWeather.exe
2012-11-29 21:31 - 2012-11-29 21:31 - 00038608 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2015-02-16 10:24 - 2008-02-27 15:54 - 00061440 _____ () C:\Program Files (x86)\e-Carte Bleue Banque Populaire\ecbl-nxbp.dll
2015-06-02 17:18 - 2015-06-02 17:18 - 00039384 _____ () C:\Program Files (x86)\FileZilla FTP Client\fzshellext.dll
2013-04-08 17:41 - 2010-11-30 17:39 - 00323584 _____ () C:\GraphWeather\LanguageFr.dll
2013-04-08 17:41 - 2010-11-30 21:51 - 00970752 _____ () C:\GraphWeather\GWCore.dll
2013-04-08 17:41 - 2010-11-30 17:47 - 00421888 _____ () C:\GraphWeather\Plugins\CSV.dll
2013-09-05 01:14 - 2013-09-05 01:14 - 04300456 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2015-07-07 18:41 - 2015-07-07 05:49 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libglesv2.dll
2015-07-07 18:41 - 2015-07-07 05:49 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\libegl.dll
2015-07-07 18:41 - 2015-07-07 05:49 - 16285512 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.132\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3668462976-1317066156-1187799873-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Thierry\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{4421584D-9362-46BC-8DF2-ECBBFF64631D}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{19525D4E-D148-42E8-AFB7-C5825AD3D2EA}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{68179082-D19A-4DE6-9135-DA67EC0C93BD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{09CE7B0E-2A22-437B-BDD5-5703B04EA787}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9BE91C75-A818-48A7-9D37-2BC9A741346E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{42F21FDC-F610-4F20-9860-DFB374B6ABB6}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [UDP Query User{0BDE297F-46E8-4385-A4AA-FDBFD39B6A92}C:\program files (x86)\internet explorer\iexplore.exe] => (Allow) C:\program files (x86)\internet explorer\iexplore.exe
FirewallRules: [TCP Query User{C80C45F5-4BEC-48AF-902F-3AC70E713FE5}C:\program files (x86)\real\realplayer\realplay.exe] => (Allow) C:\program files (x86)\real\realplayer\realplay.exe
FirewallRules: [UDP Query User{ADEE61D9-3788-44BB-8315-6986024010DE}C:\program files (x86)\real\realplayer\realplay.exe] => (Allow) C:\program files (x86)\real\realplayer\realplay.exe
FirewallRules: [TCP Query User{D895D80A-3EAF-4052-BD08-94055718959F}C:\program files\java\jre7\bin\javaw.exe] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{2997D83B-5159-4078-B41A-0B1CAAA7D1D5}C:\program files\java\jre7\bin\javaw.exe] => (Block) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{16BF29BA-E873-4A5A-9D9D-7A40F670EF48}C:\program files\java\jdk1.7.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.7.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{6665F2D5-B45C-4DCA-A238-8ED9F5BCEAFE}C:\program files\java\jdk1.7.0_45\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.7.0_45\bin\javaw.exe
FirewallRules: [{9A63D41C-4EBF-4083-98F3-199FEE02B2A0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{40B29609-363C-4FB4-8E78-7A3E7E6B905D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{1CAF4ABE-9020-45EA-84DF-FEF2BE271278}C:\graphweather\graphweather.exe] => (Allow) C:\graphweather\graphweather.exe
FirewallRules: [UDP Query User{2C11F228-F4AA-4B51-8B5B-6F85BEC28C07}C:\graphweather\graphweather.exe] => (Allow) C:\graphweather\graphweather.exe
FirewallRules: [TCP Query User{69A8AAAA-0DF8-4E54-BD18-DADBF53DC832}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{EDCFAE61-1649-43DD-863E-CE29D9AA3CC4}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [{24A36499-6279-4D9C-8464-37255F259463}] => (Allow) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
FirewallRules: [{13E72BE3-5218-48A9-B583-89E906E9CF9E}] => (Allow) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDms.exe
FirewallRules: [{63DB00AB-C0A2-4F78-92AD-4304981F6F54}] => (Allow) C:\Program Files (x86)\Common Files\Sony Shared\SOHLib\SOHDs.exe
FirewallRules: [{8CD48DD8-EA8A-4B27-A630-EF17F93359AD}] => (Allow) C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe
FirewallRules: [{E48B5B75-C758-4397-9513-76A4F00046E2}] => (Allow) C:\Program Files (x86)\Sony\PlayMemories Home\PMBBrowser.exe
FirewallRules: [{096103FF-5DF2-4FE7-A902-C048DC58B802}] => (Allow) C:\Users\Thierry\Downloads\Grand_guide_Marabout_du_Scrabble_Par_Michel_Charlemagne_ebook_téléchargement_gratuit_zip_downloader.exe
FirewallRules: [{8C50845F-0E6C-4FA0-8393-9E2ACC4C3593}] => (Allow) C:\Users\Thierry\Downloads\Grand_guide_Marabout_du_Scrabble_Par_Michel_Charlemagne_ebook_téléchargement_gratuit_zip_downloader.exe
FirewallRules: [{335AA520-610A-4C2F-8433-023995A56CD3}] => (Allow) C:\Users\Thierry\AppData\Local\BoBrowser\Application\bobrowser.exe
FirewallRules: [{13E2591F-0346-4922-8768-72712D7472B2}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{811818E4-0D52-4546-8811-4623999D5661}] => (Allow) C:\Program Files (x86)\Crossbrowse\Crossbrowse\Application\crossbrowse.exe
FirewallRules: [{86DE69B1-EE40-4A34-B651-E63A671EBA99}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

Name: Clavier standard PS/2
Description: Clavier standard PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Claviers standard)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/12/2015 09:50:25 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: La création du contexte d’activation a échoué pour « WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"1 ». Erreur dans le fichier de manifeste ou de stratégie « WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"2 » à la ligne WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"3.
L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé.
La référence est WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1".
La définition est WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1".
Utilisez sxstrace.exe pour un diagnostic détaillé.

Error: (07/12/2015 09:50:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"1 ».
Assembly dépendant rpshellextension.1.0,language="*",type="win32",version="1.0.0.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.

Error: (07/12/2015 09:22:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2015 09:34:56 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Explorer.EXE version 6.1.7601.17567 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.

ID de processus : 628

Heure de début : 01d0bba96d40b526

Heure de fin : 7

Chemin d’accès de l’application : C:\Windows\Explorer.EXE

ID de rapport : 4fa4cb43-279f-11e5-a4e0-8c89a5824f19

Error: (07/11/2015 09:18:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante SpfService64.exe, version : 1.3.0.9090, horodatage : 0x4e684dec
Nom du module défaillant : ntdll.dll, version : 6.1.7601.18869, horodatage : 0x556366f2
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000053cfc
ID du processus défaillant : 0x7d4
Heure de début de l’application défaillante : 0xSpfService64.exe0
Chemin d’accès de l’application défaillante : SpfService64.exe1
Chemin d’accès du module défaillant: SpfService64.exe2
ID de rapport : SpfService64.exe3

Error: (07/11/2015 09:17:21 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/10/2015 08:55:55 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/09/2015 08:41:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2015 09:23:27 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2015 09:20:47 AM) (Source: Family Safety Service) (EventID: 0) (User: )
Description: IDCRL login failed. Error Code: 80048848
Username: 'thy.g1@hotmail.fr'
Proxy: '(null)'
Proxy Bypass: '(null)'
Environment: 'Production'


System errors:
=============
Error: (07/12/2015 09:21:37 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
ntcdrdrv

Error: (07/12/2015 09:21:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Garmin Core Update Service n’a pas pu démarrer en raison de l’erreur :
%%1053

Error: (07/12/2015 09:21:32 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Garmin Core Update Service.

Error: (07/11/2015 10:45:32 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E}

Error: (07/11/2015 09:26:18 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour FailureCommand avec l’erreur :
%%5

Error: (07/11/2015 09:26:15 AM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
%%5

Error: (07/11/2015 09:18:51 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service VAIO Entertainment Common Service s’est terminé de façon inattendue pour la 1ème fois.

Error: (07/11/2015 09:18:03 AM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service Spooler.

Error: (07/11/2015 09:17:18 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
ntcdrdrv

Error: (07/11/2015 09:16:59 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Garmin Core Update Service n’a pas pu démarrer en raison de l’erreur :
%%1053


Microsoft Office:
=========================
Error: (07/12/2015 09:50:25 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: WLMFDS,processorArchitecture="AMD64",type="win32",version="1.0.0.1"WLMFDS,processorArchitecture="x86",type="win32",version="1.0.0.1"C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.ExeC:\Program Files (x86)\Windows Live\Photo Gallery\WLMFDS.DLL8

Error: (07/12/2015 09:50:22 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: rpshellextension.1.0,language="*",type="win32",version="1.0.0.0"C:\Windows\Installer\{AF7EBCA4-9FAF-4DC8-8D09-67854BB84D34}\recordingmanager.exe

Error: (07/12/2015 09:22:32 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/11/2015 09:34:56 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Explorer.EXE6.1.7601.1756762801d0bba96d40b5267C:\Windows\Explorer.EXE4fa4cb43-279f-11e5-a4e0-8c89a5824f19

Error: (07/11/2015 09:18:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: SpfService64.exe1.3.0.90904e684decntdll.dll6.1.7601.18869556366f2c00000050000000000053cfc7d401d0bba9ba9a9c99C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\SPF\SpfService64.exeC:\Windows\SYSTEM32\ntdll.dll0fbea399-279d-11e5-a4e0-8c89a5824f19

Error: (07/11/2015 09:17:21 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/10/2015 08:55:55 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/09/2015 08:41:49 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2015 09:23:27 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (07/08/2015 09:20:47 AM) (Source: Family Safety Service) (EventID: 0) (User: )
Description: IDCRL login failed. Error Code: 80048848
Username: 'thy.g1@hotmail.fr'
Proxy: '(null)'
Proxy Bypass: '(null)'
Environment: 'Production'


==================== Memory info ===========================

Processor: AMD A8-3870 APU with Radeon(tm) HD Graphics
Percentage of memory in use: 44%
Total physical RAM: 3573.43 MB
Available physical RAM: 1986.98 MB
Total Virtual: 7145.06 MB
Available Virtual: 5039.8 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:247.82 GB) (Free:154.06 GB) NTFS
Drive d: () (Fixed) (Total:683.59 GB) (Free:666.57 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 69C75B94)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=247.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=683.6 GB) - (Type=07 NTFS)

==================== End of log ============================

Publicité


Signaler le contenu de ce document

Publicité