Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 15-03-2017
Ran by BENOIT (03-04-2017 13:13:22)
Running from C:\Users\BENOIT\Desktop
Windows 8 Pro (X64) (2016-12-01 18:55:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1964106924-3907787032-3269760916-500 - Administrator - Disabled)
BENOIT (S-1-5-21-1964106924-3907787032-3269760916-1001 - Administrator - Enabled) => C:\Users\BENOIT
Guest (S-1-5-21-1964106924-3907787032-3269760916-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1964106924-3907787032-3269760916-1003 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
AIO_CDB_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.27 - Piriform)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
deskapp (HKLM-x32\...\{C5098A80-A438-42E1-ADC3-874262D1EAF3}) (Version: 1.1.0 - deskapp)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
F300 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F300_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
F300Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Assistant (HKLM-x32\...\{4780AF24-213D-4187-86F2-0014A6D6077B}) (Version: 8.3.50.9 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{B11FEAD6-F19E-473E-A8B1-AE58C058F575}) (Version: 12.5.32.203 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.13.125.1 - Intel Security)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Malwarebytes version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProplusRetail - fr-fr) (Version: 16.0.7967.2030 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\OneDriveSetup.exe) (Version: 17.3.6390.0509 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 51.0.1 (x86 fr) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 fr)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7967.2030 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7967.2030 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7668.2066 - Microsoft Corporation) Hidden
Pirate101 (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\{662140BE-138C-4DC1-B4CD-B62C6C855A25}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.)
ROBLOX Player for BENOIT (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
ROBLOX Studio for BENOIT (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - ROBLOX Corporation)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Unity Web Player (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\UnityWebPlayer) (Version: 5.3.7f1 - Unity Technologies ApS)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1964106924-3907787032-3269760916-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\BENOIT\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_2\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-1964106924-3907787032-3269760916-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\BENOIT\AppData\Local\Roblox\Versions\version-398bf2b17c844b38\RobloxProxy64.dll (ROBLOX Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {2FC450CC-C254-4869-9F35-24E45972A8B5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-03-31] (Microsoft Corporation)
Task: {353F88D5-437E-4EE1-A5A3-F7EB5B7EBBDB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {4EE80537-DEAB-40EC-B299-E6C3351F807B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-20] (Microsoft Corporation)
Task: {5602D8F6-C35C-420D-82D3-103A529864D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {6BBE6D56-0455-4B06-8092-807EEF9C9DDF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-14] (Adobe Systems Incorporated)
Task: {7BDD31BB-9D9F-41F6-A0BB-DAB64822EC3B} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-03-01] (McAfee, Inc.)
Task: {9114C691-4ABD-4384-A416-FD372F756F3C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-20] (Microsoft Corporation)
Task: {A6024DAD-311B-4EC7-B2B5-AD24009517CA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-02-08] (Piriform Ltd)
Task: {B439D195-DDA8-4F6C-A07C-7077DFE9DD9C} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {CD7F6568-B943-4457-B7B0-C45CA33F1840} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-03-31] (Microsoft Corporation)
Task: {D354CDA5-AA28-4479-B40F-F92B4B225019} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.)
Task: {DF02A0FE-4FA2-4E2F-9E12-E7ACCE59C2AE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-03-10] (HP Inc.)
Task: {E825472D-A9F3-444E-A1F0-0D61866312A1} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {F1079332-71CF-4C7F-829F-A4ACDAA5DF8F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-03-02] (HP Inc.)
Task: {F1329AF7-27D0-469A-ACF2-8E7C3324E828} - System32\Tasks\{D298D207-CBA7-4E9D-9CCF-3838BB5308BD} => Firefox.exe hxxps://ui.skype.com/ui/0/7.32.0.104/pp/abandoninstall?source=lightinstaller&page=tsMain
Task: {FE4B7B2E-4042-40C7-B879-71228FA8B878} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\HPCeeScheduleForBENOIT.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\BENOIT\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Boxfat\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Boxfat\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Boxfat\Application\chrome.exe (Google Inc.)
==================== Loaded Modules (Whitelisted) ==============
2016-12-01 20:06 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-02-09 19:22 - 2017-02-09 19:22 - 00959168 _____ () C:\Users\BENOIT\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_2\amd64\ClientTelemetry.dll
2017-03-23 13:57 - 2017-04-01 09:16 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-03 05:32 - 2016-12-03 05:32 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2017-03-22 22:15 - 2017-03-22 03:23 - 00106496 _____ () c:\programdata\microsoft\phone tools\corecon\12.0\addons\sdkfilesver.dll
2017-02-09 19:22 - 2017-02-09 19:22 - 00679624 _____ () C:\Users\BENOIT\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_2\ClientTelemetry.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2012-07-26 06:26 - 2017-02-09 18:20 - 00007503 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B106ABAC-7DE5-448D-ADFC-76D7137F155B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{61134E87-B28F-4654-8D61-06419B4284D9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{CF26BEC8-5776-4DD1-8F58-87082710B809}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{4B3AAB22-F7E4-4C9D-AB25-C99815FB68ED}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{A97C0C7A-3140-4419-AC0E-9A5844CDFC09}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{7C077B9D-A3D0-4C2E-845F-BDF88A15C0BB}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{8BFEF012-44EA-4504-AB8B-F0263F05F4A0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{FE761652-A16E-4BB5-9380-B65600F860FA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{5DC94BFF-DB1F-4F40-AB87-ED1A32EB6ABF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{D6CE3601-3051-4DAB-8933-1456CD079DD4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{130917D3-4BA8-4EFA-A9E1-DB08ACD879F5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{FB64661E-5FF9-4311-A849-F227B46CE3AE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{AE1A3C2B-B639-40FA-8745-2F2024A6B003}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{C3339192-853D-4D1C-8BF3-B28976025725}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{AEC7A4EA-7D50-4FAE-A55E-E8E8A035F50F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{E92172F3-D950-4B5A-AC0E-862D17372C46}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{6E18DBA9-9317-4D41-8A10-D9380313A876}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{B76FB925-F76E-4758-8DF0-6F49DC97822B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{5C15780E-621B-4FFB-A29A-2429887B0DEF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{34E7D1A9-09B4-49E6-A6D5-8CADEF635CCF}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{71C7E76C-9E39-4CAC-B6B6-B00F3F23D57A}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{089D5A9D-D443-4E73-8E98-8A527B1D3C15}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4E4843DE-6DF9-4F01-BE3E-2AF84C50C52D}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B34D96BE-19DD-4F98-A664-C623F2ECBDA8}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{90A97790-A2FA-4F26-BC4F-AC85FBBFC663}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1BF5F6CB-93EC-40A2-AB5E-CE56D9C890AB}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F7757C85-E278-4404-9497-7BE563E0203D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0238A221-9DE5-4836-9460-892CCFFE794D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B1C3F136-A37E-4DCC-9985-23E94EEA9626}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [UDP Query User{27E14A62-1D04-4536-81AA-A66A7FF1263F}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [{316CA42E-368F-491F-917E-C31D58A27CEC}] => (Allow) C:\Program Files (x86)\Boxfat\Application\chrome.exe
FirewallRules: [{16FDA67E-E64A-4DF7-882D-5582F20A2C14}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
==================== Restore Points =========================
15-03-2017 09:05:54 Windows Update
23-03-2017 14:57:11 Scheduled Checkpoint
31-03-2017 13:46:04 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/03/2017 12:58:34 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/03/2017 12:58:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/02/2017 08:20:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante plugin-container.exe, version : 51.0.0.6288, horodatage : 0x58cf8f1f
Nom du module défaillant : webplayer_win.dll, version : 5.3.7.18311, horodatage : 0x58108dd8
Code d’exception : 0xc0000005
Décalage d’erreur : 0x003e6fa5
ID du processus défaillant : 0xe34
Heure de début de l’application défaillante : 0x01d2abe2da22a0d5
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Firefox\plugin-container.exe
Chemin d’accès du module défaillant: C:\Users\BENOIT\AppData\LocalLow\Unity\WebPlayer\player\Beta-5.35.x.x\webplayer_win.dll
ID de rapport : 6d5a5c6e-17d9-11e7-be81-00270e0f70f2
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/02/2017 07:56:39 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/02/2017 07:56:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/01/2017 07:38:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante plugin-container.exe, version : 51.0.0.6288, horodatage : 0x58cf8f1f
Nom du module défaillant : webplayer_win.dll, version : 5.3.7.18311, horodatage : 0x58108dd8
Code d’exception : 0xc0000005
Décalage d’erreur : 0x003e6fa5
ID du processus défaillant : 0x8c4
Heure de début de l’application défaillante : 0x01d2ab154d2760d3
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Firefox\plugin-container.exe
Chemin d’accès du module défaillant: C:\Users\BENOIT\AppData\LocalLow\Unity\WebPlayer\player\Beta-5.35.x.x\webplayer_win.dll
ID de rapport : 6cae748b-170a-11e7-be81-00270e0f70f2
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/01/2017 07:24:44 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/01/2017 07:24:39 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/01/2017 11:34:45 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur.
Error: (04/01/2017 11:33:32 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
System errors:
=============
Error: (04/01/2017 11:28:12 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 10:54:55 AM le 4/1/2017 n’était pas prévu.
Error: (03/31/2017 03:49:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Windows Media Player Network Sharing Service s’est arrêté avec l’erreur :
Tentative de référence à un jeton qui n’existe pas.
Error: (03/31/2017 08:20:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Interactive Services Detection s’est arrêté avec l’erreur :
Fonction incorrecte.
Error: (03/28/2017 07:57:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070643 : Definition Update for Windows Defender - KB2267602 (Definition 1.239.313.0).
Error: (03/27/2017 06:33:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Windows Defender Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 100 millisecondes : Run the configured recovery program.
Error: (03/24/2017 11:29:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070643 : Definition Update for Windows Defender - KB2267602 (Definition 1.239.135.0).
Error: (03/24/2017 11:24:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Update Service(FirefoxU) n’a pas pu démarrer en raison de l’erreur :
Le chemin d’accès spécifié est introuvable.
Error: (03/23/2017 02:09:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Update Service(FirefoxU) n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (03/23/2017 02:06:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service WSServiceComponent n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (03/23/2017 02:06:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Installer TrueKey n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz
Percentage of memory in use: 34%
Total physical RAM: 3957.37 MB
Available physical RAM: 2597.26 MB
Total Virtual: 5109.37 MB
Available Virtual: 3203.34 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:243.8 GB) (Free:181.52 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:221.61 GB) (Free:215.53 GB) NTFS
Drive f: (TOSHIBA) (Removable) (Total:7.21 GB) (Free:6.43 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B7527FEE)
Partition 1: (Active) - (Size=243.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=221.6 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 7.2 GB) (Disk ID: 5E566D13)
Partition 1: (Not Active) - (Size=7.2 GB) - (Type=0B)
==================== End of Addition.txt ============================
Ran by BENOIT (03-04-2017 13:13:22)
Running from C:\Users\BENOIT\Desktop
Windows 8 Pro (X64) (2016-12-01 18:55:22)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1964106924-3907787032-3269760916-500 - Administrator - Disabled)
BENOIT (S-1-5-21-1964106924-3907787032-3269760916-1001 - Administrator - Enabled) => C:\Users\BENOIT
Guest (S-1-5-21-1964106924-3907787032-3269760916-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1964106924-3907787032-3269760916-1003 - Limited - Enabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
64 Bit HP CIO Components Installer (Version: 7.2.8 - Hewlett-Packard) Hidden
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.127 - Adobe Systems Incorporated)
AIO_CDB_ProductContext (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
AIO_CDB_Software (x32 Version: 140.0.428.000 - Hewlett-Packard) Hidden
AIO_Scan (x32 Version: 130.0.421.000 - Hewlett-Packard) Hidden
BufferChm (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.27 - Piriform)
Copy (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
deskapp (HKLM-x32\...\{C5098A80-A438-42E1-ADC3-874262D1EAF3}) (Version: 1.1.0 - deskapp)
Destinations (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
DeviceDiscovery (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
DocProc (x32 Version: 140.0.185.000 - Hewlett-Packard) Hidden
F300 (x32 Version: 140.0.425.000 - Hewlett-Packard) Hidden
F300_Help (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
F300Trb (x32 Version: 82.0.242.000 - Hewlett-Packard) Hidden
Fax (x32 Version: 140.0.307.000 - Hewlett-Packard) Hidden
GPBaseService2 (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)
HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.2024 - HP Photo Creations Powered by RocketLife)
HP Photosmart Officejet and Deskjet All-In-One Driver Software (HKLM\...\{6F5B70F0-EA6C-4A5B-BB16-8390BD66B251}) (Version: 14.0 - HP)
HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)
HP Support Assistant (HKLM-x32\...\{4780AF24-213D-4187-86F2-0014A6D6077B}) (Version: 8.3.50.9 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{B11FEAD6-F19E-473E-A8B1-AE58C058F575}) (Version: 12.5.32.203 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPPhotoGadget (x32 Version: 140.0.524.000 - Hewlett-Packard) Hidden
HPProductAssistant (x32 Version: 140.0.298.000 - Hewlett-Packard) Hidden
HPSSupply (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Intel Security True Key (HKLM\...\TrueKey) (Version: 4.13.125.1 - Intel Security)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
Malwarebytes version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
MarketResearch (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProplusRetail - fr-fr) (Version: 16.0.7967.2030 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\OneDriveSetup.exe) (Version: 17.3.6390.0509 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mozilla Firefox 51.0.1 (x86 fr) (HKLM-x32\...\Mozilla Firefox 51.0.1 (x86 fr)) (Version: 51.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 51.0.1 - Mozilla)
Network64 (Version: 140.0.306.000 - Hewlett-Packard) Hidden
NVIDIA 3D Vision Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Graphics Driver 340.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 340.52 - NVIDIA Corporation)
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)
Office 16 Click-to-Run Extensibility Component (Version: 16.0.7967.2030 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7967.2030 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (Version: 16.0.7668.2066 - Microsoft Corporation) Hidden
Pirate101 (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\{662140BE-138C-4DC1-B4CD-B62C6C855A25}) (Version: 1.0.0 - KingsIsle Entertainment, Inc.)
ROBLOX Player for BENOIT (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version: - ROBLOX Corporation)
ROBLOX Studio for BENOIT (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\{2922D6F1-2865-4EFA-97A9-94EEAB3AFA14}) (Version: - ROBLOX Corporation)
Scan (x32 Version: 140.0.253.000 - Hewlett-Packard) Hidden
Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SolutionCenter (x32 Version: 140.0.299.000 - Hewlett-Packard) Hidden
Status (x32 Version: 140.0.342.000 - Hewlett-Packard) Hidden
Toolbox (x32 Version: 140.0.596.000 - Hewlett-Packard) Hidden
TrayApp (x32 Version: 140.0.297.000 - Hewlett-Packard) Hidden
Unity Web Player (HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\UnityWebPlayer) (Version: 5.3.7f1 - Unity Technologies ApS)
WebReg (x32 Version: 140.0.297.017 - Hewlett-Packard) Hidden
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-1964106924-3907787032-3269760916-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\BENOIT\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_2\amd64\FileCoAuthLib64.dll ()
CustomCLSID: HKU\S-1-5-21-1964106924-3907787032-3269760916-1001_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\BENOIT\AppData\Local\Roblox\Versions\version-398bf2b17c844b38\RobloxProxy64.dll (ROBLOX Corporation)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {2FC450CC-C254-4869-9F35-24E45972A8B5} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-03-31] (Microsoft Corporation)
Task: {353F88D5-437E-4EE1-A5A3-F7EB5B7EBBDB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.)
Task: {4EE80537-DEAB-40EC-B299-E6C3351F807B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-20] (Microsoft Corporation)
Task: {5602D8F6-C35C-420D-82D3-103A529864D2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-12-21] (HP Inc.)
Task: {6BBE6D56-0455-4B06-8092-807EEF9C9DDF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-03-14] (Adobe Systems Incorporated)
Task: {7BDD31BB-9D9F-41F6-A0BB-DAB64822EC3B} - System32\Tasks\McAfee Remediation (Prepare) => C:\Program Files\Common Files\AV\McAfee Anti-Virus And Anti-Spyware\upgrade.exe [2016-03-01] (McAfee, Inc.)
Task: {9114C691-4ABD-4384-A416-FD372F756F3C} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-03-20] (Microsoft Corporation)
Task: {A6024DAD-311B-4EC7-B2B5-AD24009517CA} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-02-08] (Piriform Ltd)
Task: {B439D195-DDA8-4F6C-A07C-7077DFE9DD9C} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {CD7F6568-B943-4457-B7B0-C45CA33F1840} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-03-31] (Microsoft Corporation)
Task: {D354CDA5-AA28-4479-B40F-F92B4B225019} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.)
Task: {DF02A0FE-4FA2-4E2F-9E12-E7ACCE59C2AE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-03-10] (HP Inc.)
Task: {E825472D-A9F3-444E-A1F0-0D61866312A1} - System32\Tasks\Microsoft\Windows\Setup\EOSNotify => C:\Windows\system32\EOSNotify.exe [2016-06-25] (Microsoft Corporation)
Task: {F1079332-71CF-4C7F-829F-A4ACDAA5DF8F} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-03-02] (HP Inc.)
Task: {F1329AF7-27D0-469A-ACF2-8E7C3324E828} - System32\Tasks\{D298D207-CBA7-4E9D-9CCF-3838BB5308BD} => Firefox.exe hxxps://ui.skype.com/ui/0/7.32.0.104/pp/abandoninstall?source=lightinstaller&page=tsMain
Task: {FE4B7B2E-4042-40C7-B879-71228FA8B878} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2016-12-07] (HP Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\HPCeeScheduleForBENOIT.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Shortcuts =============================
(The entries could be listed to be restored or removed.)
Shortcut: C:\Users\BENOIT\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files (x86)\Boxfat\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Boxfat\Application\chrome.exe (Google Inc.)
Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files (x86)\Boxfat\Application\chrome.exe (Google Inc.)
==================== Loaded Modules (Whitelisted) ==============
2016-12-01 20:06 - 2014-07-02 19:55 - 00116568 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-02-09 19:22 - 2017-02-09 19:22 - 00959168 _____ () C:\Users\BENOIT\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_2\amd64\ClientTelemetry.dll
2017-03-23 13:57 - 2017-04-01 09:16 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-03 05:32 - 2016-12-03 05:32 - 00176048 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.0.1119.516_x64__8wekyb3d8bbwe\ModernShared\ErrorReporting\ErrorReporting.dll
2017-03-22 22:15 - 2017-03-22 03:23 - 00106496 _____ () c:\programdata\microsoft\phone tools\corecon\12.0\addons\sdkfilesver.dll
2017-02-09 19:22 - 2017-02-09 19:22 - 00679624 _____ () C:\Users\BENOIT\AppData\Local\Microsoft\OneDrive\17.3.6390.0509_2\ClientTelemetry.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2012-07-26 06:26 - 2017-02-09 18:20 - 00007503 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKU\S-1-5-21-1964106924-3907787032-3269760916-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{B106ABAC-7DE5-448D-ADFC-76D7137F155B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{61134E87-B28F-4654-8D61-06419B4284D9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe
FirewallRules: [{CF26BEC8-5776-4DD1-8F58-87082710B809}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe
FirewallRules: [{4B3AAB22-F7E4-4C9D-AB25-C99815FB68ED}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe
FirewallRules: [{A97C0C7A-3140-4419-AC0E-9A5844CDFC09}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe
FirewallRules: [{7C077B9D-A3D0-4C2E-845F-BDF88A15C0BB}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe
FirewallRules: [{8BFEF012-44EA-4504-AB8B-F0263F05F4A0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe
FirewallRules: [{FE761652-A16E-4BB5-9380-B65600F860FA}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe
FirewallRules: [{5DC94BFF-DB1F-4F40-AB87-ED1A32EB6ABF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe
FirewallRules: [{D6CE3601-3051-4DAB-8933-1456CD079DD4}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe
FirewallRules: [{130917D3-4BA8-4EFA-A9E1-DB08ACD879F5}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe
FirewallRules: [{FB64661E-5FF9-4311-A849-F227B46CE3AE}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe
FirewallRules: [{AE1A3C2B-B639-40FA-8745-2F2024A6B003}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe
FirewallRules: [{C3339192-853D-4D1C-8BF3-B28976025725}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe
FirewallRules: [{AEC7A4EA-7D50-4FAE-A55E-E8E8A035F50F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe
FirewallRules: [{E92172F3-D950-4B5A-AC0E-862D17372C46}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe
FirewallRules: [{6E18DBA9-9317-4D41-8A10-D9380313A876}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe
FirewallRules: [{B76FB925-F76E-4758-8DF0-6F49DC97822B}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe
FirewallRules: [{5C15780E-621B-4FFB-A29A-2429887B0DEF}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe
FirewallRules: [{34E7D1A9-09B4-49E6-A6D5-8CADEF635CCF}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe
FirewallRules: [{71C7E76C-9E39-4CAC-B6B6-B00F3F23D57A}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{089D5A9D-D443-4E73-8E98-8A527B1D3C15}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{4E4843DE-6DF9-4F01-BE3E-2AF84C50C52D}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{B34D96BE-19DD-4F98-A664-C623F2ECBDA8}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{90A97790-A2FA-4F26-BC4F-AC85FBBFC663}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{1BF5F6CB-93EC-40A2-AB5E-CE56D9C890AB}] => (Allow) C:\Users\BENOIT\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F7757C85-E278-4404-9497-7BE563E0203D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{0238A221-9DE5-4836-9460-892CCFFE794D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{B1C3F136-A37E-4DCC-9985-23E94EEA9626}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [UDP Query User{27E14A62-1D04-4536-81AA-A66A7FF1263F}C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_121\bin\javaw.exe
FirewallRules: [{316CA42E-368F-491F-917E-C31D58A27CEC}] => (Allow) C:\Program Files (x86)\Boxfat\Application\chrome.exe
FirewallRules: [{16FDA67E-E64A-4DF7-882D-5582F20A2C14}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
==================== Restore Points =========================
15-03-2017 09:05:54 Windows Update
23-03-2017 14:57:11 Scheduled Checkpoint
31-03-2017 13:46:04 Scheduled Checkpoint
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (04/03/2017 12:58:34 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/03/2017 12:58:26 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/02/2017 08:20:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante plugin-container.exe, version : 51.0.0.6288, horodatage : 0x58cf8f1f
Nom du module défaillant : webplayer_win.dll, version : 5.3.7.18311, horodatage : 0x58108dd8
Code d’exception : 0xc0000005
Décalage d’erreur : 0x003e6fa5
ID du processus défaillant : 0xe34
Heure de début de l’application défaillante : 0x01d2abe2da22a0d5
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Firefox\plugin-container.exe
Chemin d’accès du module défaillant: C:\Users\BENOIT\AppData\LocalLow\Unity\WebPlayer\player\Beta-5.35.x.x\webplayer_win.dll
ID de rapport : 6d5a5c6e-17d9-11e7-be81-00270e0f70f2
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/02/2017 07:56:39 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/02/2017 07:56:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/01/2017 07:38:40 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante plugin-container.exe, version : 51.0.0.6288, horodatage : 0x58cf8f1f
Nom du module défaillant : webplayer_win.dll, version : 5.3.7.18311, horodatage : 0x58108dd8
Code d’exception : 0xc0000005
Décalage d’erreur : 0x003e6fa5
ID du processus défaillant : 0x8c4
Heure de début de l’application défaillante : 0x01d2ab154d2760d3
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Firefox\plugin-container.exe
Chemin d’accès du module défaillant: C:\Users\BENOIT\AppData\LocalLow\Unity\WebPlayer\player\Beta-5.35.x.x\webplayer_win.dll
ID de rapport : 6cae748b-170a-11e7-be81-00270e0f70f2
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/01/2017 07:24:44 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/01/2017 07:24:39 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/01/2017 11:34:45 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur.
Error: (04/01/2017 11:33:32 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Échec de l’activation des licences (slui.exe) avec le code d’erreur suivant :
hr=0x8007232B
Arguments de la ligne de commande :
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=a98bcd6d-5343-4603-8afe-5908e4611112;NotificationInterval=1440;Trigger=NetworkAvailable
System errors:
=============
Error: (04/01/2017 11:28:12 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 10:54:55 AM le 4/1/2017 n’était pas prévu.
Error: (03/31/2017 03:49:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Windows Media Player Network Sharing Service s’est arrêté avec l’erreur :
Tentative de référence à un jeton qui n’existe pas.
Error: (03/31/2017 08:20:05 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Interactive Services Detection s’est arrêté avec l’erreur :
Fonction incorrecte.
Error: (03/28/2017 07:57:33 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070643 : Definition Update for Windows Defender - KB2267602 (Definition 1.239.313.0).
Error: (03/27/2017 06:33:12 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Windows Defender Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 100 millisecondes : Run the configured recovery program.
Error: (03/24/2017 11:29:52 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT AUTHORITY)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070643 : Definition Update for Windows Defender - KB2267602 (Definition 1.239.135.0).
Error: (03/24/2017 11:24:22 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Update Service(FirefoxU) n’a pas pu démarrer en raison de l’erreur :
Le chemin d’accès spécifié est introuvable.
Error: (03/23/2017 02:09:36 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Update Service(FirefoxU) n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (03/23/2017 02:06:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service WSServiceComponent n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
Error: (03/23/2017 02:06:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Installer TrueKey n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3 CPU 530 @ 2.93GHz
Percentage of memory in use: 34%
Total physical RAM: 3957.37 MB
Available physical RAM: 2597.26 MB
Total Virtual: 5109.37 MB
Available Virtual: 3203.34 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:243.8 GB) (Free:181.52 GB) NTFS ==>[drive with boot components (obtained from BCD)]
Drive d: () (Fixed) (Total:221.61 GB) (Free:215.53 GB) NTFS
Drive f: (TOSHIBA) (Removable) (Total:7.21 GB) (Free:6.43 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B7527FEE)
Partition 1: (Active) - (Size=243.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=221.6 GB) - (Type=OF Extended)
========================================================
Disk: 1 (Size: 7.2 GB) (Disk ID: 5E566D13)
Partition 1: (Not Active) - (Size=7.2 GB) - (Type=0B)
==================== End of Addition.txt ============================