Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 02-06-2017
Exécuté par Paul (05-06-2017 15:04:23)
Exécuté depuis C:\Users\Paul.carrefour\Downloads
Windows 10 Home Version 1607 (X64) (2016-09-04 16:44:21)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-3198978865-8073276-2940033688-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3198978865-8073276-2940033688-503 - Limited - Disabled)
epcs (S-1-5-21-3198978865-8073276-2940033688-1002 - Administrator - Enabled) => C:\Users\epcs
Invité (S-1-5-21-3198978865-8073276-2940033688-501 - Limited - Disabled)
Paul (S-1-5-21-3198978865-8073276-2940033688-1005 - Administrator - Enabled) => C:\Users\Paul.carrefour
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Ansel (Version: 376.82 - NVIDIA Corporation) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.2928 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4128 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3026 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.4.3021 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1.3024 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1.2922 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Souls: Prepare to Die Edition (HKLM\...\Steam App 211420) (Version: - FromSoftware)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Discord (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dofus Beta (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\1D98FB2F-73F1-419A-A159-521B0F645CFB-2) (Version: - Ankama)
Dragonica version 0.915.0 (HKLM-x32\...\{18066704-D2D7-4CFE-A3FE-0613B130AD4F}_is1) (Version: 0.915.0 - Dragonica.fr)
Dropbox (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Étude pour l'amélioration du produit HP ENVY 4500 series (HKLM\...\{E7070584-A668-4E46-B47F-D05988C3B46F}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.18 - Echobit, LLC)
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.271.0 - International GeoGebra Institute)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hewlett-Packard ACLM.NET v1.2.2.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{AE2F1669-5B1F-47C5-B639-78D74DD0BCE4}) (Version: 6.0.9.1 - Nom de votre société)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{61245005-66F1-4001-AEE8-2E2D36F65C28}) (Version: 1.1.0.0 - Hewlett-Packard)
HP ENVY 4500 series Aide (HKLM-x32\...\{BAF28CCD-121D-4C6C-B29D-4F7B51B2D1B4}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Quick Start (HKLM-x32\...\{B9494F9E-5EA9-4C70-9F38-659F5E6C0BF3}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6838.4521 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{C88F84E5-AE23-44BD-922C-2ABEACACAF7A}) (Version: 7.2.23.56 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{1C5BBAD8-4079-4014-8803-751333FBC112}) (Version: 1.0.8 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Utility Center (HKLM\...\{A48BD764-CFDF-40A5-A07A-710908044F5D}) (Version: 2.2.2 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.6.1 - Hewlett-Packard Company)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4248 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
iScreen 1.8.5.2 (HKLM-x32\...\iScreen_is1) (Version: - Supertec)
Kit EtiqPC Carrefour France (HKLM\...\{024ABEA4-3687-4481-B9C3-D66B248FF5FF}_is1) (Version: 2.0.6 - Supertec)
K-Lite Codec Pack 10.2.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LibreOffice 5.2.5.1 (HKLM-x32\...\{79CD8EA1-DEB1-4582-9E41-8634223BDCD4}) (Version: 5.2.5.1 - The Document Foundation)
LibUSB-Win32-0.1.10.1 (HKLM-x32\...\LibUSB-Win32_is1) (Version: 0.1.10.1 - LibUSB-Win32)
Logiciel de base du périphérique HP ENVY 4500 series (HKLM\...\{416B7C51-4126-489B-BC41-31A527FF00C6}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Logitech - Assistant pour jeux vidéo 8.76 (HKLM\...\Logitech Gaming Software) (Version: 8.76.155 - Logitech Inc.)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version: - Nadeo)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.8067.2115 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{0f8bbc41-a65c-4ba1-af69-aacd12d13f5b}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mises à jour NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 43.0.3 (x86 fr) (HKLM-x32\...\Mozilla Firefox 43.0.3 (x86 fr)) (Version: 43.0.3 - Mozilla)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nox APP Player (HKLM-x32\...\Nox) (Version: 3.8.0.0 - Duodian Technology Co. Ltd.)
NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Pilote graphique 376.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.82 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7967.2073 - Microsoft Corporation) Hidden
osu! (HKLM-x32\...\{eceb0805-3896-44ea-b344-4c2dab945100}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Panneau de configuration NVIDIA 376.82 (Version: 376.82 - NVIDIA Corporation) Hidden
Python 3.5.0 (64-bit) (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\{e599f76f-2b95-44da-a280-77548b1b2a21}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.0 Core Interpreter (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Development Libraries (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Documentation (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Executables (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Launcher (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 pip Bootstrap (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Standard Library (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Tcl/Tk Support (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Test Suite (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Utility Scripts (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 1.1.9200.15 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.15.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6923 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.12.0906 - REALTEK Semiconductor Corp.)
Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix)
SafeZone Stable 3.55.2393.607 (x32 Version: 3.55.2393.607 - Avast Software) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.2.4.10 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TI Connect™ (HKLM-x32\...\{D06BA64C-4447-49B4-B99D-E85BEA9E1035}) (Version: 4.0.0.218 - Texas Instruments Inc.)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Wooxy version 1.2 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.2 - Chewy)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {1098781F-6B5D-413D-A34B-B2227CFCCF6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-09-02] (Synaptics Incorporated)
Task: {1348D817-11A3-4656-A3DE-FF859FF0DC78} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-12] (Adobe Systems Incorporated)
Task: {210A6180-ED43-46F7-A2D2-D80050DE773A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-04] (Google Inc.)
Task: {2F57A56C-E62E-4FE5-B741-441C6178894C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-12] (Adobe Systems Incorporated)
Task: {32856775-3422-4791-BF01-1E9DAB659ACB} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-14] (Microsoft Corporation)
Task: {51308C88-252F-43FB-BCE6-8CC75A5B5494} - \WPD\SqmUpload_S-1-5-21-3198978865-8073276-2940033688-1005 -> Pas de fichier <==== ATTENTION
Task: {563A431F-77CB-4624-A5F9-5860B6CA8D1A} - System32\Tasks\HPCustParticipation HP ENVY 4500 series => C:\Program Files\HP\HP ENVY 4500 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
Task: {5EF6D16F-C730-476B-A1C9-C49728B9B9C0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-05-23] (Microsoft Corporation)
Task: {5F75A052-B722-4B5C-B174-B3308ABE0F7D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Paul.carrefour\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {6E69456D-146D-43B9-8FDA-DA7119DA4E4A} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {70D629ED-309A-4D71-B860-8EA43CF330C0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
Task: {77C543B8-CEDC-418D-B9FA-2FB9F3B35A87} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-14] (Microsoft Corporation)
Task: {7A90A233-1128-494D-ADCA-9346862CAB0B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-05-28] ()
Task: {850ABF36-3E17-44AF-9342-A83FA865D64A} - System32\Tasks\SafeZone scheduled Autoupdate 1468412203 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {8C23C927-940B-4D97-91C3-0AE741640EA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-04] (Google Inc.)
Task: {94164B37-7C97-40D6-B4B3-6BCB21698784} - \WPD\SqmUpload_S-1-5-21-3198978865-8073276-2940033688-1004 -> Pas de fichier <==== ATTENTION
Task: {A29B58F9-C3EA-430D-9E61-64BF1AE073DD} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-03-12] (CyberLink)
Task: {A370118E-418B-495D-B736-E316B3262E18} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-05-28] (Microsoft Corporation)
Task: {BB068CFB-AB47-408E-8DAA-342FC4ADA15F} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-11] (AVAST Software)
Task: {BFFB23C0-F58C-4FDF-ADDE-E44591BE317C} - \WPD\SqmUpload_S-1-5-21-3198978865-8073276-2940033688-1002 -> Pas de fichier <==== ATTENTION
Task: {C916C7CA-81E4-4580-81E5-BE6551D93386} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-05-28] ()
Task: {D4D18E0B-7BD8-46AB-B890-3791267BCB42} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-13] (AVAST Software)
Task: {D861FFD0-6C23-41CA-BFBC-AAB9529385AB} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {DBA6EADF-577C-4663-92D9-48C90EF54FAB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {E0FB6BEE-8085-45F7-A5A6-DE69A38C214F} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)
Task: {E98CB6A5-0DC7-4631-A86C-0E65AB0A4915} - System32\Tasks\{B7C00A88-4F0E-45DA-9FB0-38F944E355C8} => Chrome.exe hxxp://ui.skype.com/ui/0/6.21.0.104/fr/abandoninstall?page=tsProgressBar
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2017-06-03 18:22 - 2017-05-31 11:09 - 02270664 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-09-04 18:11 - 2017-02-06 13:37 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2017-05-10 21:15 - 2017-04-28 02:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-07-25 13:00 - 2015-07-25 13:00 - 00404912 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-09-15 19:58 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-14 19:51 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-14 19:53 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-14 19:53 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-14 19:53 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-10 21:15 - 2017-04-28 01:36 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-05-10 21:15 - 2017-04-28 01:36 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-10 21:15 - 2017-04-28 01:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-05-26 12:34 - 2017-05-26 12:42 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-05-26 12:34 - 2017-05-26 12:42 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-05-26 12:34 - 2017-05-26 12:42 - 43202048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-05-26 12:34 - 2017-05-26 12:42 - 02442752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\skypert.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-11-20 23:41 - 2015-11-20 23:41 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-11-20 23:41 - 2015-11-20 23:41 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-12-06 16:09 - 2016-12-06 16:09 - 00069632 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2013-10-15 13:46 - 2011-10-14 21:17 - 00158536 _____ () C:\WINDOWS\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcc3d64.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2013-10-15 13:43 - 2013-05-08 23:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2013-10-15 14:11 - 2013-03-12 16:51 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-03-12 22:53 - 2013-03-12 22:53 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-11 23:14 - 2017-01-04 15:28 - 01958912 _____ () C:\Users\Paul.carrefour\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-01-14 22:24 - 2017-01-14 22:24 - 01082880 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-01-14 22:24 - 2017-01-14 22:24 - 03750400 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-01-14 22:24 - 2017-01-14 22:24 - 00914432 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-01-14 22:24 - 2017-01-14 22:24 - 01127424 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
2017-06-04 20:21 - 2017-06-04 20:21 - 00148992 _____ () \\?\C:\Users\Paul.carrefour\AppData\Local\Temp\8148.tmp.node
2017-01-14 22:24 - 2017-05-03 20:52 - 02658296 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-01-14 22:24 - 2017-03-26 20:37 - 02665976 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
2017-01-11 23:14 - 2017-01-04 15:28 - 02278912 _____ () C:\Users\Paul.carrefour\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-01-11 23:14 - 2017-01-04 15:28 - 00096768 _____ () C:\Users\Paul.carrefour\AppData\Local\Discord\app-0.0.297\libegl.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3198978865-8073276-2940033688-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Paul.carrefour\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{54d464fc-9bc4-4033-a4ca-e6ca21a6f23f}.jpg
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\StartupApproved\Run: => "BingSvc"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{878B7BD2-38C2-48EA-BA93-AD66F752813E}] => (Block) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [{3971698B-20FF-41C9-9A47-6DB5C591BE06}] => (Block) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [UDP Query User{F8983AC1-E07E-4D50-B0D0-64FF3D586602}C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe] => (Allow) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [TCP Query User{B4425BC6-CF86-42F9-8DF5-F19EA4F7310D}C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe] => (Allow) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [{3FD8618B-19DF-401F-A550-EA56CA0D507A}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{4C7D8810-CDD0-41EA-84F5-1B88D221FD17}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{B81554B1-A421-4644-BCD3-32A6F334DF47}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{56FDB680-F62F-4984-A83B-B0FB93D38B43}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{82D1FCA9-BEA3-47E5-9318-2CD426AE1215}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{A542FB28-13B0-43F1-91D9-C87A2EE2726D}] => (Allow) C:\Program Files\Echobit\Evolve\EvoSvc.exe
FirewallRules: [{470A8E60-16F2-4371-A8FB-889D7A73F1B0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A1E8E40A-CCA0-4051-895B-BA5283E9F4A9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2680DD5C-F34B-4488-A260-2E90280AE661}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{848D40A9-5365-4C72-B420-32F9F8DF2F56}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B2DD3EF2-3670-4540-898E-B543D16B0CD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [UDP Query User{D3C9095D-E1F8-4CE6-B91B-8DFAC6110C8F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{9A8E7B44-C61E-4BA0-BD6E-A8BEB63815BA}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{23304C8E-D874-41E3-A848-72DCE1C764B0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{DDD9DE2F-9CC8-43FD-9632-5837789FF85D}] => (Allow) LPort=2869
FirewallRules: [{EA855AA0-86BB-4B5B-A91E-07D2E19856DF}] => (Allow) LPort=1900
FirewallRules: [{A0D5D74C-BF89-486D-B9AE-76FD3BF7CBF4}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
FirewallRules: [{1F9BAADD-3D5A-4B05-8905-136B8D495FDB}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
FirewallRules: [{6551DA2F-FF19-4955-ABF2-BEF775E2E408}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A3582E84-240F-42FA-A464-56C820839CE4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BFD1D851-88A0-4509-B1B9-ADEF7C8238C2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3AFE6819-20AA-4D0A-92F4-1F653AFC48BD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7FEF474E-1980-4C60-B59E-7BF8E97F1FF0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{474F204C-4E0A-4218-8735-A1BCB3C79A84}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{F0C8DD86-A1EB-4D86-962C-C079A9677B45}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{EBC60CF7-FC23-4EE3-9967-8CEC1AFF75F4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{8B161C13-0E6F-4B1F-8BC2-8980E9AEC7B7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{133FD3C1-1234-4979-BA83-EF4F5CE6245E}] => (Block) C:\Program Files (x86)\Supertec\iConsole.exe
FirewallRules: [{2145F6BE-8845-4ACF-B559-CE7F9A124DC1}] => (Block) C:\Program Files (x86)\Supertec\iConsole.exe
FirewallRules: [{686A3762-6C85-488E-8C3F-97AE994AF900}] => (Block) C:\Program Files (x86)\Supertec\iScreen\iScreenMonitor.exe
FirewallRules: [{7A643362-88CB-41C0-80A5-C29A659F8BDD}] => (Block) C:\Program Files (x86)\Supertec\iScreen\iScreenMonitor.exe
FirewallRules: [{4D23005B-2522-43A2-8857-C949FB79CA94}] => (Allow) LPort=5900
FirewallRules: [{57A47F89-397D-4674-86D3-D7C7CE19DCEB}] => (Allow) LPort=5800
FirewallRules: [TCP Query User{71C5D303-47AE-45E5-A00D-4B32B529A997}C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe] => (Allow) C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe
FirewallRules: [UDP Query User{96769C63-3B15-4FE6-B191-BAE4E994A749}C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe] => (Allow) C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe
FirewallRules: [TCP Query User{6E923DC4-5EFA-4678-A816-CA32525AB669}C:\program files (x86)\supertec\iconsole.exe] => (Allow) C:\program files (x86)\supertec\iconsole.exe
FirewallRules: [UDP Query User{37F0D3B2-A504-4948-90A9-7E24C9DFE5F7}C:\program files (x86)\supertec\iconsole.exe] => (Allow) C:\program files (x86)\supertec\iconsole.exe
FirewallRules: [{1EAA4632-6A7E-423B-8071-0E9146965F91}] => (Allow) C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{36B32721-9D14-4E9E-833C-EE4A0B39DE90}] => (Allow) C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{0B1E3C30-159E-4543-9351-55AEA8DD8783}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{FC10E6F6-E34E-4C48-9C00-4D505B050D21}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{1DA8B3B0-B7B9-4109-9BFB-499EE4C1C012}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
FirewallRules: [{1A9E431D-7A9B-4469-98DE-9DD74A67F796}] => (Allow) LPort=5357
FirewallRules: [{3D552E33-27A8-42E4-AB9E-7E70FC9FC1EB}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{9B76AE8A-7666-4ECB-989D-72D8DC8E3F32}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{08474DE2-D86E-4769-B14A-AA7CDD8BC32F}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{A38D99F3-09DB-4849-9137-F5414063BF94}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BFD64CFB-9FAA-444E-838D-4991E4860A74}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{5302D302-1CBB-4CB2-952F-5CBBA81F0C9F}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{031C46AA-B686-4040-9069-BD66BFBB92E6}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{7C152C66-EACF-4DE0-B788-3DF1CD340C49}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{922549D1-CF3B-4DC4-BF1A-66068B6D2F28}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F6B46042-B845-4C6C-8B7F-31A080DC51DB}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{428E01E9-27CF-4228-B9C3-5303A086AC02}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{FE4D2B10-10E1-4F19-B1DA-31B9C9AA0C8F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{05D21179-CC00-42EC-8FED-FC26594CEE2E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{E228C1A2-1A21-4226-92BB-13BB7BAE551A}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{8937226D-56AD-487E-A489-7E081A1D163B}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{5DCBE69A-6AFC-4957-A343-7F71CE513C0A}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{DCD5CC09-5E0B-41BE-93AF-E7AEB88C4D78}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{BB81F25D-D2C2-4F93-85D5-86D8961EEFA4}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{ECDFB21F-518A-43F8-B4C1-3395825777E2}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{A483F47E-8152-4837-84A5-9C3911AA70A4}] => (Allow) LPort=25565
FirewallRules: [{B4228504-8651-4EBA-99FD-D97B341940F3}] => (Allow) LPort=25565
FirewallRules: [{2403E590-CE46-4F8B-99A5-0C8C00395FE3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C5B190F5-A41D-4D13-838D-6C59D2DB0AAD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F7A6662E-8E2D-4A1E-8389-15F511C65E47}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [UDP Query User{C78ED13B-8CA8-4C8E-AB7D-7B8FE605059B}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [{EC487CD7-7B3C-4450-AA0E-0538CB172731}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{B377D104-F04D-4D77-BD6A-0CE32CDFC057}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{D2273E89-5BAD-43EE-97C2-7A80FBEF9B8D}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe
FirewallRules: [{8C9D207A-A05A-4697-8757-9E13DA9AC4EF}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe
FirewallRules: [TCP Query User{5B84F1A8-F3FD-4EC5-B32E-988695E1124F}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [UDP Query User{9C227CFC-0E8D-4EF6-BA9B-B303D2B49819}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [{AD9C425B-D9BD-4C76-9145-9214534E827C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{21E54248-4138-48FB-9C60-D89EED7D790C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{C128C67B-4E5B-4B84-A552-1594338DE759}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{D7CF52A5-4640-47CF-B49E-DC9480C9A0AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{B3FBCB67-7F9C-4E19-81D6-83E808847219}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{0AE2BFC1-8CAA-4322-9D44-1412B70593B5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{70FD6774-245D-41A7-A9A3-FF572B9C02FC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{70505610-362A-48FF-92F9-647386FDC64D}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe
FirewallRules: [TCP Query User{CF39AD0A-AE4A-49F4-84B4-8E61E7287B84}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe
FirewallRules: [UDP Query User{4F5AD2AC-D6B0-48E0-B801-D950A233F4A8}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe
==================== Points de restauration =========================
16-05-2017 19:38:54 Windows Update
23-05-2017 21:26:21 Windows Update
31-05-2017 18:52:53 Windows Update
03-06-2017 18:12:05 JRT Pre-Junkware Removal
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (06/05/2017 01:41:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17750
Error: (06/05/2017 01:41:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17750
Error: (06/05/2017 01:41:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/05/2017 01:40:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-DE-PAUL)
Description: Échec de l’activation de l’application Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (06/05/2017 01:19:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.
Opération :
Opération asynchrone en cours d’exécution
Contexte :
État actuel: DoSnapshotSet
Error: (06/05/2017 01:19:04 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (06/04/2017 10:41:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname PC-de-Paul.local already in use; will try PC-de-Paul-2.local instead
Error: (06/04/2017 10:41:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 PC-de-Paul.local. Addr 192.168.1.39
Error: (06/04/2017 10:41:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.39:5353 16 PC-de-Paul.local. AAAA 2A01:0E35:8B5A:0760:0DDE:5732:24DD:0CA4
Error: (06/04/2017 10:02:46 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.
Opération :
Opération asynchrone en cours d’exécution
Contexte :
État actuel: DoSnapshotSet
Erreurs système:
=============
Error: (06/05/2017 01:40:58 AM) (Source: DCOM) (EventID: 10010) (User: PC-DE-PAUL)
Description: Le serveur WindowsDefaultLockScreen ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (06/05/2017 01:40:48 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (06/05/2017 01:40:46 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service CyberLink PowerDVD 12 Media Server Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (06/05/2017 01:33:01 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: AUTORITE NT)
Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée en exécutant Reset/Recover.adapter.
Code : 8 0x0 0x0
Error: (06/05/2017 01:32:57 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: AUTORITE NT)
Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée en exécutant Reset/Recover.adapter.
Code : 2 0xdeaddeed 0xeeec
Error: (06/05/2017 01:32:57 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: AUTORITE NT)
Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée en exécutant Reset/Recover.adapter.
Code : 1 0xc 0x4
Error: (06/04/2017 10:02:42 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
Error: (06/04/2017 10:02:42 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
Error: (06/04/2017 10:02:41 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
Error: (06/04/2017 10:02:41 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
CodeIntegrity:
===================================
Date: 2017-06-04 22:02:42.878
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 22:02:42.865
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 22:02:41.981
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 22:02:41.912
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 12:04:32.565
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 12:04:32.553
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 12:04:31.973
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-24 18:18:30.436
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-01-24 18:18:29.709
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
Pourcentage de mémoire utilisée: 39%
Mémoire physique - RAM - totale: 7962.15 MB
Mémoire physique - RAM - disponible: 4854.04 MB
Mémoire virtuelle totale: 16666.15 MB
Mémoire virtuelle disponible: 13293.84 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:905.82 GB) (Free:715.6 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (RECOVERY) (Fixed) (Total:23.97 GB) (Free:2.42 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2F859EC)
Partition: GPT.
==================== Fin de Addition.txt ============================
Exécuté par Paul (05-06-2017 15:04:23)
Exécuté depuis C:\Users\Paul.carrefour\Downloads
Windows 10 Home Version 1607 (X64) (2016-09-04 16:44:21)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-3198978865-8073276-2940033688-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3198978865-8073276-2940033688-503 - Limited - Disabled)
epcs (S-1-5-21-3198978865-8073276-2940033688-1002 - Administrator - Enabled) => C:\Users\epcs
Invité (S-1-5-21-3198978865-8073276-2940033688-501 - Limited - Disabled)
Paul (S-1-5-21-3198978865-8073276-2940033688-1005 - Administrator - Enabled) => C:\Users\Paul.carrefour
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 22.0.0.153 - Adobe Systems Incorporated)
Adobe Flash Player 25 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 25.0.0.171 - Adobe Systems Incorporated)
Ansel (Version: 376.82 - NVIDIA Corporation) Hidden
Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.4.2294 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BitRaider Web Client (HKLM-x32\...\BitRaider Web Client) (Version: 1.1.9.9 - BitRaider, LLC)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.)
CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.2928 - CyberLink Corp.)
Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4128 - CyberLink Corp.)
CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3026 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.4.3021 - CyberLink Corp.)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1.3024 - CyberLink Corp.)
CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1.2922 - CyberLink Corp.)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dark Souls: Prepare to Die Edition (HKLM\...\Steam App 211420) (Version: - FromSoftware)
DisableMSDefender (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Discord (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\Discord) (Version: 0.0.297 - Hammer & Chisel, Inc.)
Dofus Beta (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\1D98FB2F-73F1-419A-A159-521B0F645CFB-2) (Version: - Ankama)
Dragonica version 0.915.0 (HKLM-x32\...\{18066704-D2D7-4CFE-A3FE-0613B130AD4F}_is1) (Version: 0.915.0 - Dragonica.fr)
Dropbox (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\Dropbox) (Version: 2.6.24 - Dropbox, Inc.)
Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company)
Étude pour l'amélioration du produit HP ENVY 4500 series (HKLM\...\{E7070584-A668-4E46-B47F-D05988C3B46F}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.18 - Echobit, LLC)
Galerie de photos (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.271.0 - International GeoGebra Institute)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.110 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.5 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
Hewlett-Packard ACLM.NET v1.2.2.1 (x32 Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP 3D DriveGuard (HKLM-x32\...\{AE2F1669-5B1F-47C5-B639-78D74DD0BCE4}) (Version: 6.0.9.1 - Nom de votre société)
HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd)
HP Connected Music (Meridian - player) (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\HPConnectedMusic) (Version: 1.1 (build 112) hp - Meridian Audio Ltd)
HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company)
HP Documentation (HKLM-x32\...\{61245005-66F1-4001-AEE8-2E2D36F65C28}) (Version: 1.1.0.0 - Hewlett-Packard)
HP ENVY 4500 series Aide (HKLM-x32\...\{BAF28CCD-121D-4C6C-B29D-4F7B51B2D1B4}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Quick Start (HKLM-x32\...\{B9494F9E-5EA9-4C70-9F38-659F5E6C0BF3}) (Version: 1.0.4660.30220 - Hewlett-Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.6838.4521 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{C88F84E5-AE23-44BD-922C-2ABEACACAF7A}) (Version: 7.2.23.56 - Hewlett-Packard Company)
HP System Event Utility (HKLM-x32\...\{1C5BBAD8-4079-4014-8803-751333FBC112}) (Version: 1.0.8 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Utility Center (HKLM\...\{A48BD764-CFDF-40A5-A07A-710908044F5D}) (Version: 2.2.2 - Hewlett-Packard Company)
HP Wireless Button Driver (HKLM-x32\...\{941DE69D-6CEE-4171-8F1F-3D7E352AA498}) (Version: 1.0.6.1 - Hewlett-Packard Company)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.3.1520 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4248 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.6.0.1033 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 3.0.0.66956 - Intel Corporation)
iScreen 1.8.5.2 (HKLM-x32\...\iScreen_is1) (Version: - Supertec)
Kit EtiqPC Carrefour France (HKLM\...\{024ABEA4-3687-4481-B9C3-D66B248FF5FF}_is1) (Version: 2.0.6 - Supertec)
K-Lite Codec Pack 10.2.0 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 10.2.0 - )
LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LibreOffice 5.2.5.1 (HKLM-x32\...\{79CD8EA1-DEB1-4582-9E41-8634223BDCD4}) (Version: 5.2.5.1 - The Document Foundation)
LibUSB-Win32-0.1.10.1 (HKLM-x32\...\LibUSB-Win32_is1) (Version: 0.1.10.1 - LibUSB-Win32)
Logiciel de base du périphérique HP ENVY 4500 series (HKLM\...\{416B7C51-4126-489B-BC41-31A527FF00C6}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Logitech - Assistant pour jeux vidéo 8.76 (HKLM\...\Logitech Gaming Software) (Version: 8.76.155 - Logitech Inc.)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
ManiaPlanet (HKLM-x32\...\ManiaPlanet_is1) (Version: - Nadeo)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.8067.2115 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\OneDriveSetup.exe) (Version: 17.3.6799.0327 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{0f8bbc41-a65c-4ba1-af69-aacd12d13f5b}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Mises à jour NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Movie Maker (x32 Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 43.0.3 (x86 fr) (HKLM-x32\...\Mozilla Firefox 43.0.3 (x86 fr)) (Version: 43.0.3 - Mozilla)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version: - NCSOFT)
Nox APP Player (HKLM-x32\...\Nox) (Version: 3.8.0.0 - Duodian Technology Co. Ltd.)
NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Pilote graphique 376.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.82 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.8067.2115 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7967.2073 - Microsoft Corporation) Hidden
osu! (HKLM-x32\...\{eceb0805-3896-44ea-b344-4c2dab945100}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Panneau de configuration NVIDIA 376.82 (Version: 376.82 - NVIDIA Corporation) Hidden
Python 3.5.0 (64-bit) (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\{e599f76f-2b95-44da-a280-77548b1b2a21}) (Version: 3.5.150.0 - Python Software Foundation)
Python 3.5.0 Core Interpreter (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Development Libraries (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Documentation (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Executables (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Launcher (32-bit) (x32 Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 pip Bootstrap (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Standard Library (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Tcl/Tk Support (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Test Suite (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Python 3.5.0 Utility Scripts (64-bit) (Version: 3.5.150.0 - Python Software Foundation) Hidden
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 1.1.9200.15 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.15.410.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6923 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.00.12.0906 - REALTEK Semiconductor Corp.)
Rocket League (HKLM\...\Steam App 252950) (Version: - Psyonix)
SafeZone Stable 3.55.2393.607 (x32 Version: 3.55.2393.607 - Avast Software) Hidden
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Skype™ 7.36 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.36.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\Spotify) (Version: 1.0.42.151.g19de0aa6 - Spotify AB)
swMSM (x32 Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.2.4.10 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TI Connect™ (HKLM-x32\...\{D06BA64C-4447-49B4-B99D-E85BEA9E1035}) (Version: 4.0.0.218 - Texas Instruments Inc.)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version: - Nadeo)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
Wooxy version 1.2 (HKLM-x32\...\{C183CD14-47D8-4F98-AF06-4744CB834C8E}_is1) (Version: 1.2 - Chewy)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3198978865-8073276-2940033688-1005_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\DropboxExt64.22.dll (Dropbox, Inc.)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {1098781F-6B5D-413D-A34B-B2227CFCCF6A} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2016-09-02] (Synaptics Incorporated)
Task: {1348D817-11A3-4656-A3DE-FF859FF0DC78} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_25_0_0_171_pepper.exe [2017-05-12] (Adobe Systems Incorporated)
Task: {210A6180-ED43-46F7-A2D2-D80050DE773A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-04] (Google Inc.)
Task: {2F57A56C-E62E-4FE5-B741-441C6178894C} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-05-12] (Adobe Systems Incorporated)
Task: {32856775-3422-4791-BF01-1E9DAB659ACB} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-14] (Microsoft Corporation)
Task: {51308C88-252F-43FB-BCE6-8CC75A5B5494} - \WPD\SqmUpload_S-1-5-21-3198978865-8073276-2940033688-1005 -> Pas de fichier <==== ATTENTION
Task: {563A431F-77CB-4624-A5F9-5860B6CA8D1A} - System32\Tasks\HPCustParticipation HP ENVY 4500 series => C:\Program Files\HP\HP ENVY 4500 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
Task: {5EF6D16F-C730-476B-A1C9-C49728B9B9C0} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-05-23] (Microsoft Corporation)
Task: {5F75A052-B722-4B5C-B174-B3308ABE0F7D} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Paul.carrefour\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {6E69456D-146D-43B9-8FDA-DA7119DA4E4A} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.)
Task: {70D629ED-309A-4D71-B860-8EA43CF330C0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
Task: {77C543B8-CEDC-418D-B9FA-2FB9F3B35A87} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-05-14] (Microsoft Corporation)
Task: {7A90A233-1128-494D-ADCA-9346862CAB0B} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-05-28] ()
Task: {850ABF36-3E17-44AF-9342-A83FA865D64A} - System32\Tasks\SafeZone scheduled Autoupdate 1468412203 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-05-17] (Avast Software)
Task: {8C23C927-940B-4D97-91C3-0AE741640EA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-04] (Google Inc.)
Task: {94164B37-7C97-40D6-B4B3-6BCB21698784} - \WPD\SqmUpload_S-1-5-21-3198978865-8073276-2940033688-1004 -> Pas de fichier <==== ATTENTION
Task: {A29B58F9-C3EA-430D-9E61-64BF1AE073DD} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-03-12] (CyberLink)
Task: {A370118E-418B-495D-B736-E316B3262E18} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-05-28] (Microsoft Corporation)
Task: {BB068CFB-AB47-408E-8DAA-342FC4ADA15F} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-05-11] (AVAST Software)
Task: {BFFB23C0-F58C-4FDF-ADDE-E44591BE317C} - \WPD\SqmUpload_S-1-5-21-3198978865-8073276-2940033688-1002 -> Pas de fichier <==== ATTENTION
Task: {C916C7CA-81E4-4580-81E5-BE6551D93386} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-05-28] ()
Task: {D4D18E0B-7BD8-46AB-B890-3791267BCB42} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-04-13] (AVAST Software)
Task: {D861FFD0-6C23-41CA-BFBC-AAB9529385AB} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {DBA6EADF-577C-4663-92D9-48C90EF54FAB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-06-07] (Hewlett-Packard Company)
Task: {E0FB6BEE-8085-45F7-A5A6-DE69A38C214F} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.)
Task: {E98CB6A5-0DC7-4631-A86C-0E65AB0A4915} - System32\Tasks\{B7C00A88-4F0E-45DA-9FB0-38F944E355C8} => Chrome.exe hxxp://ui.skype.com/ui/0/6.21.0.104/fr/abandoninstall?page=tsProgressBar
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Synaptics TouchPad Enhancements.job => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2017-06-03 18:22 - 2017-05-31 11:09 - 02270664 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-09-04 18:11 - 2017-02-06 13:37 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2017-05-10 21:15 - 2017-04-28 02:49 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-07-25 13:00 - 2015-07-25 13:00 - 00404912 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-09-15 19:58 - 2016-09-07 06:56 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-14 19:51 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-14 19:53 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-14 19:53 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-14 19:53 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-05-10 21:15 - 2017-04-28 01:36 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-05-10 21:15 - 2017-04-28 01:36 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-05-10 21:15 - 2017-04-28 01:37 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-05-26 12:34 - 2017-05-26 12:42 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-05-26 12:34 - 2017-05-26 12:42 - 00201728 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-05-26 12:34 - 2017-05-26 12:42 - 43202048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-05-26 12:34 - 2017-05-26 12:42 - 02442752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.16.595.0_x64__kzf8qxf38zg5c\skypert.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2015-11-20 23:41 - 2015-11-20 23:41 - 01095448 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 02:07 - 2015-03-07 02:07 - 00060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2015-11-20 23:41 - 2015-11-20 23:41 - 00240408 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2016-12-06 16:09 - 2016-12-06 16:09 - 00069632 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2013-10-15 13:46 - 2011-10-14 21:17 - 00158536 _____ () C:\WINDOWS\System32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slcc3d64.dll
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2013-10-15 13:43 - 2013-05-08 23:23 - 01199576 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-05-07 19:18 - 2016-06-14 22:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2013-10-15 14:11 - 2013-03-12 16:51 - 00626240 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMediaLibrary.dll
2013-03-12 22:53 - 2013-03-12 22:53 - 00015424 _____ () C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvcPS.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00170216 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00997896 _____ () C:\Program Files\AVAST Software\Avast\AvChrome.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 67717632 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00176992 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00223224 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00291824 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-05-11 07:33 - 2017-05-11 07:33 - 00684656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-01-11 23:14 - 2017-01-04 15:28 - 01958912 _____ () C:\Users\Paul.carrefour\AppData\Local\Discord\app-0.0.297\ffmpeg.dll
2017-01-14 22:24 - 2017-01-14 22:24 - 01082880 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_voice\discord_voice.node
2017-01-14 22:24 - 2017-01-14 22:24 - 03750400 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_voice\libdiscord.dll
2017-01-14 22:24 - 2017-01-14 22:24 - 00914432 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_utils\discord_utils.node
2017-01-14 22:24 - 2017-01-14 22:24 - 01127424 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_toaster\discord_toaster.node
2017-06-04 20:21 - 2017-06-04 20:21 - 00148992 _____ () \\?\C:\Users\Paul.carrefour\AppData\Local\Temp\8148.tmp.node
2017-01-14 22:24 - 2017-05-03 20:52 - 02658296 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_rpc\discord_rpc.node
2017-01-14 22:24 - 2017-03-26 20:37 - 02665976 _____ () \\?\C:\Users\Paul.carrefour\AppData\Roaming\discord\0.0.297\modules\discord_contact_import\discord_contact_import.node
2017-01-11 23:14 - 2017-01-04 15:28 - 02278912 _____ () C:\Users\Paul.carrefour\AppData\Local\Discord\app-0.0.297\libglesv2.dll
2017-01-11 23:14 - 2017-01-04 15:28 - 00096768 _____ () C:\Users\Paul.carrefour\AppData\Local\Discord\app-0.0.297\libegl.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2012-07-26 07:26 - 2012-07-26 07:26 - 00000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3198978865-8073276-2940033688-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\Paul.carrefour\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{54d464fc-9bc4-4033-a4ca-e6ca21a6f23f}.jpg
DNS Servers: 208.67.222.222 - 208.67.220.220
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
HKU\S-1-5-21-3198978865-8073276-2940033688-1005\...\StartupApproved\Run: => "BingSvc"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{878B7BD2-38C2-48EA-BA93-AD66F752813E}] => (Block) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [{3971698B-20FF-41C9-9A47-6DB5C591BE06}] => (Block) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [UDP Query User{F8983AC1-E07E-4D50-B0D0-64FF3D586602}C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe] => (Allow) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [TCP Query User{B4425BC6-CF86-42F9-8DF5-F19EA4F7310D}C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe] => (Allow) C:\users\paul.carrefour\downloads\ppsspp_win (4)\ppsspp\ppssppwindows64.exe
FirewallRules: [{3FD8618B-19DF-401F-A550-EA56CA0D507A}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{4C7D8810-CDD0-41EA-84F5-1B88D221FD17}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{B81554B1-A421-4644-BCD3-32A6F334DF47}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{56FDB680-F62F-4984-A83B-B0FB93D38B43}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{82D1FCA9-BEA3-47E5-9318-2CD426AE1215}] => (Allow) C:\Program Files\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{A542FB28-13B0-43F1-91D9-C87A2EE2726D}] => (Allow) C:\Program Files\Echobit\Evolve\EvoSvc.exe
FirewallRules: [{470A8E60-16F2-4371-A8FB-889D7A73F1B0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A1E8E40A-CCA0-4051-895B-BA5283E9F4A9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{2680DD5C-F34B-4488-A260-2E90280AE661}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{848D40A9-5365-4C72-B420-32F9F8DF2F56}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{B2DD3EF2-3670-4540-898E-B543D16B0CD1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [UDP Query User{D3C9095D-E1F8-4CE6-B91B-8DFAC6110C8F}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{9A8E7B44-C61E-4BA0-BD6E-A8BEB63815BA}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{23304C8E-D874-41E3-A848-72DCE1C764B0}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{DDD9DE2F-9CC8-43FD-9632-5837789FF85D}] => (Allow) LPort=2869
FirewallRules: [{EA855AA0-86BB-4B5B-A91E-07D2E19856DF}] => (Allow) LPort=1900
FirewallRules: [{A0D5D74C-BF89-486D-B9AE-76FD3BF7CBF4}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
FirewallRules: [{1F9BAADD-3D5A-4B05-8905-136B8D495FDB}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe
FirewallRules: [{6551DA2F-FF19-4955-ABF2-BEF775E2E408}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{A3582E84-240F-42FA-A464-56C820839CE4}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BFD1D851-88A0-4509-B1B9-ADEF7C8238C2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{3AFE6819-20AA-4D0A-92F4-1F653AFC48BD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7FEF474E-1980-4C60-B59E-7BF8E97F1FF0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{474F204C-4E0A-4218-8735-A1BCB3C79A84}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
FirewallRules: [{F0C8DD86-A1EB-4D86-962C-C079A9677B45}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{EBC60CF7-FC23-4EE3-9967-8CEC1AFF75F4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{8B161C13-0E6F-4B1F-8BC2-8980E9AEC7B7}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{133FD3C1-1234-4979-BA83-EF4F5CE6245E}] => (Block) C:\Program Files (x86)\Supertec\iConsole.exe
FirewallRules: [{2145F6BE-8845-4ACF-B559-CE7F9A124DC1}] => (Block) C:\Program Files (x86)\Supertec\iConsole.exe
FirewallRules: [{686A3762-6C85-488E-8C3F-97AE994AF900}] => (Block) C:\Program Files (x86)\Supertec\iScreen\iScreenMonitor.exe
FirewallRules: [{7A643362-88CB-41C0-80A5-C29A659F8BDD}] => (Block) C:\Program Files (x86)\Supertec\iScreen\iScreenMonitor.exe
FirewallRules: [{4D23005B-2522-43A2-8857-C949FB79CA94}] => (Allow) LPort=5900
FirewallRules: [{57A47F89-397D-4674-86D3-D7C7CE19DCEB}] => (Allow) LPort=5800
FirewallRules: [TCP Query User{71C5D303-47AE-45E5-A00D-4B32B529A997}C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe] => (Allow) C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe
FirewallRules: [UDP Query User{96769C63-3B15-4FE6-B191-BAE4E994A749}C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe] => (Allow) C:\program files (x86)\supertec\iscreen\iscreenmonitor.exe
FirewallRules: [TCP Query User{6E923DC4-5EFA-4678-A816-CA32525AB669}C:\program files (x86)\supertec\iconsole.exe] => (Allow) C:\program files (x86)\supertec\iconsole.exe
FirewallRules: [UDP Query User{37F0D3B2-A504-4948-90A9-7E24C9DFE5F7}C:\program files (x86)\supertec\iconsole.exe] => (Allow) C:\program files (x86)\supertec\iconsole.exe
FirewallRules: [{1EAA4632-6A7E-423B-8071-0E9146965F91}] => (Allow) C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{36B32721-9D14-4E9E-833C-EE4A0B39DE90}] => (Allow) C:\Users\Paul.carrefour\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{0B1E3C30-159E-4543-9351-55AEA8DD8783}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{FC10E6F6-E34E-4C48-9C00-4D505B050D21}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{1DA8B3B0-B7B9-4109-9BFB-499EE4C1C012}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\DeviceSetup.exe
FirewallRules: [{1A9E431D-7A9B-4469-98DE-9DD74A67F796}] => (Allow) LPort=5357
FirewallRules: [{3D552E33-27A8-42E4-AB9E-7E70FC9FC1EB}] => (Allow) C:\Program Files\HP\HP ENVY 4500 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [TCP Query User{9B76AE8A-7666-4ECB-989D-72D8DC8E3F32}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{08474DE2-D86E-4769-B14A-AA7CDD8BC32F}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{A38D99F3-09DB-4849-9137-F5414063BF94}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BFD64CFB-9FAA-444E-838D-4991E4860A74}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{5302D302-1CBB-4CB2-952F-5CBBA81F0C9F}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{031C46AA-B686-4040-9069-BD66BFBB92E6}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{7C152C66-EACF-4DE0-B788-3DF1CD340C49}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{922549D1-CF3B-4DC4-BF1A-66068B6D2F28}C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\paul.carrefour\appdata\roaming\spotify\spotify.exe
FirewallRules: [{F6B46042-B845-4C6C-8B7F-31A080DC51DB}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{428E01E9-27CF-4228-B9C3-5303A086AC02}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{FE4D2B10-10E1-4F19-B1DA-31B9C9AA0C8F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{05D21179-CC00-42EC-8FED-FC26594CEE2E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [TCP Query User{E228C1A2-1A21-4226-92BB-13BB7BAE551A}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{8937226D-56AD-487E-A489-7E081A1D163B}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{5DCBE69A-6AFC-4957-A343-7F71CE513C0A}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{DCD5CC09-5E0B-41BE-93AF-E7AEB88C4D78}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{BB81F25D-D2C2-4F93-85D5-86D8961EEFA4}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{ECDFB21F-518A-43F8-B4C1-3395825777E2}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{A483F47E-8152-4837-84A5-9C3911AA70A4}] => (Allow) LPort=25565
FirewallRules: [{B4228504-8651-4EBA-99FD-D97B341940F3}] => (Allow) LPort=25565
FirewallRules: [{2403E590-CE46-4F8B-99A5-0C8C00395FE3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C5B190F5-A41D-4D13-838D-6C59D2DB0AAD}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{F7A6662E-8E2D-4A1E-8389-15F511C65E47}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [UDP Query User{C78ED13B-8CA8-4C8E-AB7D-7B8FE605059B}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [{EC487CD7-7B3C-4450-AA0E-0538CB172731}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{B377D104-F04D-4D77-BD6A-0CE32CDFC057}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{D2273E89-5BAD-43EE-97C2-7A80FBEF9B8D}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe
FirewallRules: [{8C9D207A-A05A-4697-8757-9E13DA9AC4EF}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe
FirewallRules: [TCP Query User{5B84F1A8-F3FD-4EC5-B32E-988695E1124F}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [UDP Query User{9C227CFC-0E8D-4EF6-BA9B-B303D2B49819}C:\program files (x86)\maniaplanet\maniaplanet.exe] => (Allow) C:\program files (x86)\maniaplanet\maniaplanet.exe
FirewallRules: [{AD9C425B-D9BD-4C76-9145-9214534E827C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{21E54248-4138-48FB-9C60-D89EED7D790C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{C128C67B-4E5B-4B84-A552-1594338DE759}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{D7CF52A5-4640-47CF-B49E-DC9480C9A0AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{B3FBCB67-7F9C-4E19-81D6-83E808847219}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.596_0\SZBrowser.exe
FirewallRules: [{0AE2BFC1-8CAA-4322-9D44-1412B70593B5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{70FD6774-245D-41A7-A9A3-FF572B9C02FC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{70505610-362A-48FF-92F9-647386FDC64D}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.607\SZBrowser.exe
FirewallRules: [TCP Query User{CF39AD0A-AE4A-49F4-84B4-8E61E7287B84}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe
FirewallRules: [UDP Query User{4F5AD2AC-D6B0-48E0-B801-D950A233F4A8}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe
==================== Points de restauration =========================
16-05-2017 19:38:54 Windows Update
23-05-2017 21:26:21 Windows Update
31-05-2017 18:52:53 Windows Update
03-06-2017 18:12:05 JRT Pre-Junkware Removal
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (06/05/2017 01:41:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 17750
Error: (06/05/2017 01:41:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 17750
Error: (06/05/2017 01:41:12 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second
Error: (06/05/2017 01:40:58 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-DE-PAUL)
Description: Échec de l’activation de l’application Microsoft.LockApp_cw5n1h2txyewy!WindowsDefaultLockScreen avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (06/05/2017 01:19:32 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.
Opération :
Opération asynchrone en cours d’exécution
Contexte :
État actuel: DoSnapshotSet
Error: (06/05/2017 01:19:04 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (06/04/2017 10:41:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname PC-de-Paul.local already in use; will try PC-de-Paul-2.local instead
Error: (06/04/2017 10:41:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 PC-de-Paul.local. Addr 192.168.1.39
Error: (06/04/2017 10:41:13 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.1.39:5353 16 PC-de-Paul.local. AAAA 2A01:0E35:8B5A:0760:0DDE:5732:24DD:0CA4
Error: (06/04/2017 10:02:46 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.
Opération :
Opération asynchrone en cours d’exécution
Contexte :
État actuel: DoSnapshotSet
Erreurs système:
=============
Error: (06/05/2017 01:40:58 AM) (Source: DCOM) (EventID: 10010) (User: PC-DE-PAUL)
Description: Le serveur WindowsDefaultLockScreen ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (06/05/2017 01:40:48 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (06/05/2017 01:40:46 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service CyberLink PowerDVD 12 Media Server Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (06/05/2017 01:33:01 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: AUTORITE NT)
Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée en exécutant Reset/Recover.adapter.
Code : 8 0x0 0x0
Error: (06/05/2017 01:32:57 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: AUTORITE NT)
Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée en exécutant Reset/Recover.adapter.
Code : 2 0xdeaddeed 0xeeec
Error: (06/05/2017 01:32:57 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 4003) (User: AUTORITE NT)
Description: Le service de configuration automatique de réseau WLAN a détecté une connectivité limitée en exécutant Reset/Recover.adapter.
Code : 1 0xc 0x4
Error: (06/04/2017 10:02:42 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
Error: (06/04/2017 10:02:42 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
Error: (06/04/2017 10:02:41 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
Error: (06/04/2017 10:02:41 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\PAUL~1.CAR\AppData\Local\Temp\catchme.sys
CodeIntegrity:
===================================
Date: 2017-06-04 22:02:42.878
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 22:02:42.865
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 22:02:41.981
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 22:02:41.912
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 12:04:32.565
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 12:04:32.553
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-06-04 12:04:31.973
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\Paul.carrefour\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-01-24 18:18:30.436
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2017-01-24 18:18:29.709
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
Pourcentage de mémoire utilisée: 39%
Mémoire physique - RAM - totale: 7962.15 MB
Mémoire physique - RAM - disponible: 4854.04 MB
Mémoire virtuelle totale: 16666.15 MB
Mémoire virtuelle disponible: 13293.84 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:905.82 GB) (Free:715.6 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (RECOVERY) (Fixed) (Total:23.97 GB) (Free:2.42 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E2F859EC)
Partition: GPT.
==================== Fin de Addition.txt ============================