Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-10-2017
Exécuté par thierry (13-10-2017 22:00:51)
Exécuté depuis C:\Users\thierry\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-03-11 20:57:28)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-619360433-3418289920-2899325868-500 - Administrator - Disabled)
ASPNET (S-1-5-21-619360433-3418289920-2899325868-1004 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-619360433-3418289920-2899325868-1002 - Limited - Enabled)
Invité (S-1-5-21-619360433-3418289920-2899325868-501 - Limited - Disabled)
thierry (S-1-5-21-619360433-3418289920-2899325868-1001 - Administrator - Enabled) => C:\Users\thierry
UpdatusUser (S-1-5-21-619360433-3418289920-2899325868-1008 - Limited - Enabled) => C:\Users\UpdatusUser.thierry-HP
vadalle (S-1-5-21-619360433-3418289920-2899325868-1010 - Limited - Enabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
7-Data Android Recovery version 1.4 (HKLM-x32\...\{2D32F845-CC8B-4521-8B99-E5D26665C0B6}_is1) (Version: 1.4 - SharpNight Co,Ltd)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.3 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.159 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.159 - Adobe Systems Incorporated)
Amazon MP3 Downloader 1.0.17 (HKLM-x32\...\Amazon MP3 Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\Amazon Amazon Music) (Version: 5.5.1.1028 - Amazon Services LLC)
Apowersoft Convertisseur Vidéo V4.6.0 (HKLM-x32\...\{195E8D7F-292B-4B04-A6E7-E96CAF04C767}_is1) (Version: 4.6.0 - APOWERSOFT LIMITED)
Apple Application Support (32 bits) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Avast Internet Security (HKLM-x32\...\Avast Antivirus) (Version: 17.7.2314 - AVAST Software)
BlackBerry Desktop Software 7.1 (HKLM-x32\...\{BE5B0450-DCCB-4FE9-93E2-3B38D88A745B}) (Version: 7.1.0.41 - Research In Motion Ltd.) Hidden
BlackBerry Desktop Software 7.1 (HKLM-x32\...\BlackBerry_Desktop) (Version: 7.1.0.41 - Research In Motion Ltd.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
Creevity Mp3 Cover Downloader (HKLM\...\Mp3 Cover Downloader_is1) (Version: 1.4.0 - Diego Alicata)
Étude pour l'amélioration du produit HP ENVY 4520 series (HKLM\...\{86298E97-610F-4A5A-8CC9-07EEB1790566}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
Free Convert FLAC To MP3 (remove only) (HKLM\...\Free Convert FLAC To MP3) (Version: - 4dots Software)
Freemake Video Converter version 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Ellora Assets Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Dropbox Plugin (HKLM-x32\...\{184656B1-F08A-4ABC-B12B-53BA401014CB}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP ENVY 4520 series Aide (HKLM-x32\...\{D9C0AB86-384B-49FF-A667-717724F07740}) (Version: 36.0.0 - Hewlett Packard)
HP Google Drive Plugin (HKLM-x32\...\{9A000AD8-874B-416B-81E6-9DC47347C424}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP MediaSmart SmartMenu (HKLM\...\{5B08AF35-B699-4A44-BB89-3E51E70611E8}) (Version: 3.1.1.12 - Hewlett-Packard)
HP Photo Creations (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\HP Photo Creations) (Version: 1.0.0.19522 - HP)
HP Photosmart 5510 series - Enquête sur l'amélioration du produit (HKLM\...\{EF266618-8712-4A13-B10C-C1D3578250FB}) (Version: 25.0.621.0 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{ED5CE45D-842B-4C18-A002-87E16EA39BB3}) (Version: 12.8.37.11 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard)
iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
Jihosoft Photo Recovery version 7.2 (HKLM-x32\...\{399BE68C-DF00-4263-9CCB-240561B6BFBD}_is1) (Version: 7.2 - HONGKONG JIHO CO., LIMITED)
JVC Playlist Creator (HKLM-x32\...\{854832F3-EEFE-440F-BE25-FFEAE83952C3}) (Version: 1.0.0 - JVC KENWOOD)
Logiciel de base du périphérique HP ENVY 4520 series (HKLM\...\{D20015E2-CAB7-4664-B8D8-F153E9427DE2}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
Logiciel de base du périphérique HP Photosmart 5510 series (HKLM\...\{94641C2B-3419-4B5A-97E1-757BA7D2ECAD}) (Version: 25.0.621.0 - Hewlett-Packard Co.)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft .NET Framework 4.7 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Office « Démarrer en un clic » 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
monAlbumPhoto (HKLM-x32\...\monAlbumPhoto_is1) (Version: 6.5.1.2 - monAlbumPhoto)
Mozilla Firefox 56.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 56.0 (x86 fr)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.0.6478 - Mozilla)
MusicStation (HKLM-x32\...\{E74E7F63-E70F-43F2-873F-35FB66F263B2}) (Version: - )
myCANAL (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\2152390838.player.canalplus.fr) (Version: - player.canalplus.fr)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5936 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.58 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.58 - NVIDIA Corporation)
NVIDIA Pilote graphique 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.58 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.5 - NVIDIA Corporation)
Panneau de configuration NVIDIA 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 331.58 - NVIDIA Corporation) Hidden
PC Accelerate (HKLM-x32\...\PC Accelerate_is1) (Version: 2.1 - PC Accelerate)
PhoneClean (HKLM-x32\...\PhoneClean) (Version: 4.1.1.0 - iMobie Inc.)
PhoneTrans 4.9.0 (HKLM-x32\...\{37823FA5-B4AA-458A-AADA-027A95958911}}_is1) (Version: 4.9.0 - iMobie Inc.)
PhotoFiltre (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\PhotoFiltre) (Version: - )
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PVSonyDll (HKLM\...\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}) (Version: 1.00.0001 - NVIDIA Corporation) Hidden
SafeZone Stable 3.55.2393.590 (HKLM-x32\...\SafeZone 3.55.2393.590) (Version: 3.55.2393.590 - Avast Software) Hidden
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.34.0 - SAMSUNG Electronics Co., Ltd.)
Sharepod 4.2.0.0 (HKLM-x32\...\{085BCFB8-F6FB-4600-AFAB-1F6DBC7F5F99}_is1) (Version: - Macroplant LLC)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
VD64Inst (HKLM\...\{22ABA92B-6C1B-46D8-AC2B-C48EEAE172A9}) (Version: 1.00.0000 - Roxio, Inc.) Hidden
VirginMega DownloadManager V3 (HKLM-x32\...\VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1) (Version: 3.2.1 - VirginMega)
Visionneuse Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-040C-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Wondershare Dr.Fone for Android(Build 6.1.1.35) (HKLM-x32\...\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 6.1.1.35 - Wondershare Software Co.,Ltd.)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2013-03-08] (VSO Software SARL)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers1: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll [2012-04-08] (Lavasoft Limited)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2010-03-15] ()
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers1-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\WZSHLS64.DLL [2010-04-05] (WinZip Computing, S.L.)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers2: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll [2012-04-08] (Lavasoft Limited)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2013-03-08] (VSO Software SARL)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2010-03-15] ()
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers4-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\WZSHLS64.DLL [2010-04-05] (WinZip Computing, S.L.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2013-10-15] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2013-03-08] (VSO Software SARL)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers6: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll [2012-04-08] (Lavasoft Limited)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2010-03-15] ()
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers6-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\WZSHLS64.DLL [2010-04-05] (WinZip Computing, S.L.)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {041FDC6A-8ECD-4A4F-A145-83E484370B52} - System32\Tasks\{7AFA5C77-B79E-4B26-B364-7E26E38EE032} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {0919F8F1-E653-46F1-A51D-24F696DDFB46} - System32\Tasks\{3128ED01-BA4B-4927-8C59-DFABE762FC6E} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {0C9D4F19-0808-4946-B2A3-4CEA2F6416FC} - \{C0AF2323-3296-4750-8DD2-619FE41CD986} -> Pas de fichier <==== ATTENTION
Task: {15602932-40F4-4B30-BAED-244B4AF8D69B} - System32\Tasks\{117BC411-B9A8-4B86-92EB-CC79765C2A79} => C:\Program Files\iTunes\iTunes.exe [2017-07-14] (Apple Inc.)
Task: {18975B63-B1A0-4B7A-8F2F-AB82CE0D13C4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFReport.exe [2013-11-04] (Hewlett-Packard Company)
Task: {1D57D09F-A6E3-4CD5-85ED-524C5110EB70} - \{889E89E7-663C-493B-85CA-33C49793CEBF} -> Pas de fichier <==== ATTENTION
Task: {1DDDE51D-3182-4074-86EF-F439B5062919} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {20AADE5D-7F73-47D5-9E59-88AC320A326E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {20ACBC10-A2BC-43FE-975E-FA14CF644E07} - System32\Tasks\NUSchedule => C:\Program Files (x86)\Norton Utilities 15\nu.exe [2012-10-06] (Symantec Corporation)
Task: {229A0D69-7A5A-47FA-A960-FF6637FA2849} - \{465D234C-E0EE-411F-BE1E-D563590B4BB9} -> Pas de fichier <==== ATTENTION
Task: {28A5D244-CF09-423E-9F04-CEBA6C7049E6} - System32\Tasks\{06BF9513-5A00-4CD5-9899-F037A9744D7D} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {29199DA0-4F86-4C02-86EF-902CEB5C6233} - \{AF91889B-6A8A-486E-91EC-04A02F2A136B} -> Pas de fichier <==== ATTENTION
Task: {2DEB54AB-4170-4365-8715-082454A8B9C9} - \{B132FB64-4A53-497B-8EB7-41921C06647E} -> Pas de fichier <==== ATTENTION
Task: {2FBC34F9-27DE-4ADA-B9DD-4504A1FB599D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-03] (Google Inc.)
Task: {35A3088E-EAD8-4EC9-9D76-8A6EE70FB4EC} - \{5799EAEF-8B4E-4122-B244-FA8B14BD5891} -> Pas de fichier <==== ATTENTION
Task: {36F9E0F2-0EE8-4CB7-BD8B-C3D9C41C2DF4} - System32\Tasks\{1730EB12-208E-4B41-BA74-7C0C814634EE} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {37064094-5E6D-4D08-8CDF-9E817E4D4AA5} - System32\Tasks\HPCustParticipation HP ENVY 4520 series => C:\Program Files\HP\HP ENVY 4520 series\Bin\HPCustPartic.exe [2015-03-09] (Hewlett-Packard Development Company, LP)
Task: {3AEF716B-F0AC-451D-A817-938AFD6F10FF} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
Task: {44679E9B-39DF-4223-A1A5-346EAB919864} - \{676F27C1-EBD5-49E5-9C23-4EC12DAFE11B} -> Pas de fichier <==== ATTENTION
Task: {4AFB6B2A-ADBF-415B-A5C3-63ABB7F12AA5} - \{5D2566FC-3FCA-4640-8AD2-DA5496794766} -> Pas de fichier <==== ATTENTION
Task: {4AFBF4C3-E3CE-484C-8EE4-CD32A342B89F} - System32\Tasks\HP Photo Creations Communicator => C:\Users\thierry\AppData\Roaming\HP Photo Creations\Communicator.exe [2011-11-18] ()
Task: {50A5F7BC-3CB6-4DB2-8B41-0F7A022F33EF} - System32\Tasks\{92896C0C-83C7-4778-97A5-1A382444C222} => C:\Program Files\iTunes\iTunes.exe [2017-07-14] (Apple Inc.)
Task: {545C941E-8A84-4033-A75A-241C728A67A9} - \{94AC72D9-8FD0-4081-BB58-0E5398865862} -> Pas de fichier <==== ATTENTION
Task: {56CC7B97-BA42-4F12-A994-04082515EA4E} - \{BF40CC2A-D558-41D8-B33D-72D3DC5043B6} -> Pas de fichier <==== ATTENTION
Task: {5B201464-92DA-4ADD-AB25-BA6F2E24A52D} - System32\Tasks\{B29314DA-48E2-4E16-B247-858CCEB9FC5C} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {5C9EBD09-9A3C-4B51-A770-FA5ED209B1CF} - \{1977A2D2-C902-4537-B86F-71A92399337F} -> Pas de fichier <==== ATTENTION
Task: {5CB8A5FC-CAA3-4C38-80FF-88EA89D54115} - \{D408AE54-C84F-488D-AC95-C2297B97D19D} -> Pas de fichier <==== ATTENTION
Task: {5E7CEF65-FD5D-49C6-9740-0AB934A60709} - \{DFB1DBF0-854E-416B-BDF3-F64351960972} -> Pas de fichier <==== ATTENTION
Task: {5EF1F92D-4BB6-4C64-8D8B-CA84A9FDAA54} - \{3F1A85AA-64FD-41AA-91A5-42C33409C2A1} -> Pas de fichier <==== ATTENTION
Task: {63EB1E18-E821-49AF-912E-314B76A72FA3} - System32\Tasks\SafeZone scheduled Autoupdate 1460917620 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {6835E8FC-2049-4F29-A15D-219EB7D31539} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {6E25C666-E3B9-40B8-BA03-FD6312232445} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {705EAE4B-FCDC-4776-90E3-12F3C1A791A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {7335D99D-C26F-4546-B058-E9417F4D4CEF} - \{F0914C6D-321B-44BC-8049-BC206B8C4BE2} -> Pas de fichier <==== ATTENTION
Task: {760CF4A9-9689-4A5B-A1A7-BEA29652A900} - System32\Tasks\{E7FFFDC5-44A3-4F20-B419-71181C8D5363} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {99122525-9CF6-4BA2-B0B0-F122E44946DE} - System32\Tasks\{18AAD0E8-8B61-4C34-8C58-3B9181B87D4F} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {9E39A0E3-3780-4D14-ABFA-6449D69C93D4} - System32\Tasks\{28DC0145-7E5F-4114-9B5E-4169482FB698} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {A356DE3A-57CA-4159-A885-CA79FD6236B5} - \Test TimeTrigger -> Pas de fichier <==== ATTENTION
Task: {A6ABF395-98B4-403D-806E-B7597A9E84EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-11-04] (HP Inc.)
Task: {A93F452A-0219-4410-B6E5-61A5C0A5795E} - \{0D80A5DC-BAFE-4641-BF65-F766D6DA8A09} -> Pas de fichier <==== ATTENTION
Task: {B2F35EAB-B9A1-46D6-94DD-8675F0576704} - \{26CA0760-A24C-401C-A5C9-CE287C08CA2C} -> Pas de fichier <==== ATTENTION
Task: {B3A79F12-A12E-4C1B-A078-EB206FEF6948} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-03] (Google Inc.)
Task: {B3B715EC-FC1D-4C82-9EBF-94795BFD4756} - System32\Tasks\{FBF2450E-E6A6-4138-9FD7-893C8CB69291} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {C5BFA30B-955F-4C44-8CB3-88DEFCCC23FA} - \{2BE32E82-59ED-4794-8748-1FEC4664D632} -> Pas de fichier <==== ATTENTION
Task: {C7F1D50B-260D-49B2-B3A0-5A089C1D7D1F} - \{382BEB51-8F15-44AF-98EB-A3FF4CF7173A} -> Pas de fichier <==== ATTENTION
Task: {CB5BBCB7-9C63-4287-A314-52F9BE553B68} - System32\Tasks\{E5788E48-2178-42B6-B82A-38E4703B3A22} => C:\Program Files\iTunes\iTunes.exe [2017-07-14] (Apple Inc.)
Task: {D8AFC4D0-1FEF-4E89-A565-051556AFA163} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-11] (Adobe Systems Incorporated)
Task: {E6AD4373-4AFC-48CF-B9FF-279972E20E4A} - \{CE49651E-779C-4005-AD14-737D3C89B7B9} -> Pas de fichier <==== ATTENTION
Task: {E7918E1C-44AB-44F6-9025-C01CB1F82B15} - System32\Tasks\{77AC4CFC-B22E-4F73-9B1C-300E3D49ECD1} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {E94FE3D7-02AA-4258-9925-035E16699E8A} - System32\Tasks\HPCustParticipation HP Photosmart 5510 series => C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPCustPartic.exe [2011-09-16] (Hewlett-Packard Co.)
Task: {EA046AC6-3D03-41AA-AF9E-1735F509B267} - \{567013D4-52E0-4367-A598-55214403EC13} -> Pas de fichier <==== ATTENTION
Task: {EF35E718-076C-4444-92AE-42F111352A14} - \{047E327A-B8BB-4488-858F-E7A78027C5CF} -> Pas de fichier <==== ATTENTION
Task: {F0EE2BBC-D2C7-48BC-8FC9-B79C0450293D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {F3CE0F0D-C48F-49C4-B146-8C8C8FD1B4A2} - \{5D32FBA6-F439-44B4-8D0A-639AF09BA43B} -> Pas de fichier <==== ATTENTION
Task: {F449C840-0CF7-4442-8FAD-E4A73DCCEE84} - \{012B1AA2-BF13-450A-961A-8A9E1DC34893} -> Pas de fichier <==== ATTENTION
Task: {FE09A611-FA2B-446C-9AB6-D3B8978A78AD} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-10-08] (AVAST Software)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\Users\thierry\AppData\Roaming\HP Photo Creations\Communicator.exe
Task: C:\Windows\Tasks\NUSchedule.job => C:\Program Files (x86)\Norton Utilities 15\nu.exe
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
Shortcut: C:\Users\thierry\Favorites\Site de téléchargement NCH Software.lnk -> hxxp://www.nch.com.au/fr/index.htm
==================== Modules chargés (Avec liste blanche) ==============
2013-01-25 10:34 - 2013-10-15 23:47 - 000102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-11-27 16:20 - 2010-03-15 12:28 - 000052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000067408 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000169832 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000846752 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000286712 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2017-07-14 10:26 - 2017-07-14 10:26 - 001354040 _____ () C:\Program Files\iTunes\libxml2.dll
2017-07-14 10:27 - 2017-07-14 10:27 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll
2017-03-02 17:54 - 2016-12-12 03:47 - 000068016 _____ () C:\Program Files (x86)\iMobie\PhoneClean\iTunesMobileDevice.dll
2017-10-08 11:51 - 2017-08-14 11:34 - 000080896 ____N () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
2017-09-19 22:34 - 2017-09-19 22:34 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-09-07 18:12 - 2017-09-07 18:12 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000151104 _____ () C:\Program Files\AVAST Software\Avast\network_notifications.dll
2017-10-13 15:12 - 2017-10-13 15:12 - 005880504 _____ () C:\Program Files\AVAST Software\Avast\defs\17101306\algo.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000700656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000241448 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2017-07-29 21:38 - 2017-07-29 21:38 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2016-03-02 21:48 - 2017-03-23 09:49 - 001506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2016-03-02 21:48 - 2016-07-21 10:54 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\thierry:zylomtest [0]
AlternateDataStreams: C:\Users\thierry:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVUS} [36]
AlternateDataStreams: C:\ProgramData\TEMP:9307EB9C [137]
AlternateDataStreams: C:\ProgramData\TEMP:D287FACF [102]
AlternateDataStreams: C:\ProgramData\TEMP:D3A96964 [184]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avas_service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avss_service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tpavdrw_service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tpmgma_service => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Il y a 7888 plus de sites.
IE trusted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\webcompanion.com -> hxxp://webcompanion.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123simsen.com -> www.123simsen.com
Il y a 7888 plus de sites.
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123simsen.com -> www.123simsen.com
Il y a 7887 plus de sites.
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2009-07-14 04:34 - 2017-07-30 09:46 - 001356236 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
Il y a 15500 plus de lignes.
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-619360433-3418289920-2899325868-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\startupfolder: C:^Users^thierry^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnkStartup
MSCONFIG\startupreg: Amazon Music => "C:\Users\thierry\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: BlackBerryAutoUpdate => C:\Program Files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: HPAdvisorDock => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe
MSCONFIG\startupreg: hpsysdrv => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesHelper => C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: Magic Desktop for HP notification => "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"
MSCONFIG\startupreg: NeroCheck => C:\Windows\system32\NeroCheck.exe
MSCONFIG\startupreg: PeerBlock => C:\Program Files\PeerBlock\peerblock.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
MSCONFIG\startupreg: RIMBBLaunchAgent.exe => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
MSCONFIG\startupreg: RIMDeviceManager => "C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" -RunServer
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SmartMenu => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\thierry\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{2D039446-05B1-4CCE-A515-86ED17B599AB}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE
FirewallRules: [{2109A91B-4144-4308-B0CB-C521F7AB50B4}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{F7DDEFE2-00D0-45CF-A5FC-00DBE2E45556}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe
FirewallRules: [{155AF8BF-CE4E-4C86-8470-4BBFE4366979}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe
FirewallRules: [{FFDD8046-2887-4964-AE9C-03B7A226F0B6}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe
FirewallRules: [{06E9E553-B3C3-4187-8D94-6E34889C62F8}] => (Allow) svchost.exe
FirewallRules: [{9C9DEA84-2E6E-4E19-86A7-F34FAE0901F6}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{438CAF6D-7175-45D4-9827-FB05D607DA0D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{712B3017-C2F7-4ADE-BFB1-94B9DDE8ED6C}] => (Allow) LPort=2869
FirewallRules: [{76FD2F31-B288-4B93-BB14-A3F0DB05373E}] => (Allow) LPort=1900
FirewallRules: [{5117B9AA-1DF4-4264-8BC8-66AE99D1817E}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5B1E12C0-E927-4107-9EA9-77ED56478E7B}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{1BE867EF-C670-4E2B-B03D-4594B8FEB371}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{822FB6EC-5114-4DBA-83E9-FD4FC860D522}] => (Allow) LPort=7000
FirewallRules: [{97B32E54-ED20-48EC-838F-649AE294E3BE}] => (Allow) LPort=7000
FirewallRules: [{130593A0-097B-448C-84C1-A68F1D7C36BE}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{1BE98CF9-B20F-4EB5-B1AA-7A92EB82CBC8}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{6F557D8E-CBAD-41B2-8B1A-EA406C0DDDD4}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\DeviceSetup.exe
FirewallRules: [{74CA6E37-6AC8-4F97-A7A1-3134EE8C0BAC}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{7E81C4E9-2C5F-4F8E-BC17-C29398BBCB81}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{053D8327-F02B-4B96-83E5-B0FC8058191C}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{9A233633-9565-4668-BBDA-CD496B7124CA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C66D310C-B936-418C-AEAD-C73F5E923046}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{D926131B-47ED-4024-8D33-537CA64DFF30}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B264FFF2-53E8-40F7-8447-56AEF3EF7332}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{90419885-7C63-4403-8AD4-50B863205B8A}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{330BAD8B-10F3-42AA-950F-B9153E82CFA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4F359B08-6CA7-4DD5-B4DC-1A24CB967828}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{18A8DA15-CB01-4825-83C4-24840FCDA627}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DBBCEC38-3440-4263-B445-C290B73A2C45}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{20EFAC61-7454-4EAC-A3E3-6DD2499115CD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7A561F35-8BD9-4C2F-9987-3E1E0061DACC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D951E1D2-8E50-4A86-A721-764589CE26C0}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561_0\SZBrowser.exe
FirewallRules: [{8C170A99-2A30-4536-B886-8489E643A3C8}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{E6967DDC-5D51-4639-88D4-447F09B3EDD5}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [TCP Query User{7DEF40FF-0379-4CE7-A226-F6B96C0C270B}C:\users\thierry\appdata\local\amazon music\amazon music helper.exe] => (Block) C:\users\thierry\appdata\local\amazon music\amazon music helper.exe
FirewallRules: [UDP Query User{D79BE984-F082-49AA-A39B-B4EDD0B08E6F}C:\users\thierry\appdata\local\amazon music\amazon music helper.exe] => (Block) C:\users\thierry\appdata\local\amazon music\amazon music helper.exe
FirewallRules: [{8C7314B6-50AE-437D-9333-58C187AA6124}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe
FirewallRules: [{50F2B5AC-05CC-4FD9-BCAB-92C5405271CA}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe
FirewallRules: [{0E4CB7DD-7C37-478F-9668-132CBF492A04}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{BF912A47-4D24-4BAB-B637-0FEEB126651E}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\DeviceSetup.exe
FirewallRules: [{47AAA643-1848-420B-9518-08AFFB8F70E8}] => (Allow) LPort=5357
FirewallRules: [{322B24F1-1227-4283-9352-067578558057}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{706FDA62-7A25-4754-A9F5-B5CB9BBE2231}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Points de restauration =========================
08-10-2017 10:03:02 Made by Norton Utilities äå
08-10-2017 11:41:51 Installed Movie Joiner v4
08-10-2017 11:43:26 Removed Movie Joiner v4
08-10-2017 19:00:07 Sauvegarde Windows
08-10-2017 19:15:39 Made by Norton Utilities äå
08-10-2017 21:59:20 Made by Norton Utilities äå
08-10-2017 22:02:29 JRT Pre-Junkware Removal
09-10-2017 07:05:55 Made by Norton Utilities äå
11-10-2017 10:20:09 Windows Update
11-10-2017 21:37:54 Made by Norton Utilities äå
12-10-2017 21:07:33 Made by Norton Utilities äå
13-10-2017 21:22:32 Made by Norton Utilities äå
13-10-2017 21:23:18 Removed QuickTime 7
13-10-2017 21:29:24 Removed Java 8 Update 60
13-10-2017 21:30:31 Removed Java 8 Update 77
13-10-2017 21:31:33 Removed Java 8 Update 91
13-10-2017 21:41:22 Restore Point Created by FRST
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Carte Microsoft ISATAP
Description: Carte Microsoft ISATAP
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: SBRE
Description: SBRE
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SBRE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ezplay device ...
Description: ezplay device ...
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: ElRawDisk
Description: ElRawDisk
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ElRawDisk
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Carte Microsoft ISATAP
Description: Carte Microsoft ISATAP
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (10/13/2017 09:45:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante FreemakeUtilsService.exe, version : 1.0.0.0, horodatage : 0x59916057
Nom du module défaillant : KERNELBASE.dll, version : 6.1.7601.23915, horodatage : 0x59b94abb
Code d’exception : 0xe0434352
Décalage d’erreur : 0x0000c54f
ID du processus défaillant : 0x808
Heure de début de l’application défaillante : 0x01d3445bbfce99ca
Chemin d’accès de l’application défaillante : C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Chemin d’accès du module défaillant: C:\Windows\syswow64\KERNELBASE.dll
ID de rapport : 10f3cd39-b04f-11e7-9529-d48564107f28
Error: (10/13/2017 09:45:23 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : FreemakeUtilsService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.IO.FileNotFoundException
à FreemakeUtilsService.Statistics.Manager.ApplyNewTargetsConfigs()
à FreemakeUtilsService.Statistics.Manager.TargetsConfigSyncCompleted(System.Object, System.EventArgs)
à FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
à System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs)
à System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object)
à System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
à System.Threading.ThreadPoolWorkQueue.Dispatch()
à System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Erreurs système:
=============
Error: (10/13/2017 09:46:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
ASPI32
ElRawDisk
SBRE
Error: (10/13/2017 09:46:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Freemake Improver s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/13/2017 09:43:21 PM) (Source: Disk) (EventID: 7) (User: )
Description: Le périphérique \Device\Harddisk0\DR0 comporte un bloc défectueux.
Error: (10/13/2017 09:43:19 PM) (Source: Disk) (EventID: 7) (User: )
Description: Le périphérique \Device\Harddisk0\DR0 comporte un bloc défectueux.
Error: (10/13/2017 09:42:12 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Le Gestionnaire de services de contrôle a essayé d’entreprendre une action corrective (Redémarrer le service) après la fin inattendue du service Windows Search, mais cette action a échoué en raison de l’erreur suivante :
Une instance du service s’exécute déjà.
Error: (10/13/2017 09:42:09 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Le serveur {9E175B6D-F52A-11D8-B9A5-505054503030} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (10/13/2017 09:41:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Windows Search s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 30000 millisecondes : Redémarrer le service.
Error: (10/13/2017 09:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Spybot-S&D 2 Updating Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/13/2017 09:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service NVIDIA Update Service Daemon s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/13/2017 09:41:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Norton SpeedDisk Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service.
CodeIntegrity:
===================================
Date: 2015-08-05 21:14:26.076
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-05 21:14:26.030
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-05 21:14:25.983
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-05 21:14:25.952
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.181
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.141
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.091
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.051
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:17:09.187
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:17:09.147
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
==================== Infos Mémoire ===========================
Processeur: Pentium(R) Dual-Core CPU E5500 @ 2.80GHz
Pourcentage de mémoire utilisée: 48%
Mémoire physique - RAM - totale: 4095.24 MB
Mémoire physique - RAM - disponible: 2122.36 MB
Mémoire virtuelle totale: 8188.67 MB
Mémoire virtuelle disponible: 5747.57 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:685.29 GB) (Free:260.29 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:13.25 GB) (Free:1.61 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 698.6 GB) (Disk ID: 6199F0E0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=685.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.3 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================
Exécuté par thierry (13-10-2017 22:00:51)
Exécuté depuis C:\Users\thierry\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2011-03-11 20:57:28)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-619360433-3418289920-2899325868-500 - Administrator - Disabled)
ASPNET (S-1-5-21-619360433-3418289920-2899325868-1004 - Limited - Enabled)
HomeGroupUser$ (S-1-5-21-619360433-3418289920-2899325868-1002 - Limited - Enabled)
Invité (S-1-5-21-619360433-3418289920-2899325868-501 - Limited - Disabled)
thierry (S-1-5-21-619360433-3418289920-2899325868-1001 - Administrator - Enabled) => C:\Users\thierry
UpdatusUser (S-1-5-21-619360433-3418289920-2899325868-1008 - Limited - Enabled) => C:\Users\UpdatusUser.thierry-HP
vadalle (S-1-5-21-619360433-3418289920-2899325868-1010 - Limited - Enabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
7-Data Android Recovery version 1.4 (HKLM-x32\...\{2D32F845-CC8B-4521-8B99-E5D26665C0B6}_is1) (Version: 1.4 - SharpNight Co,Ltd)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe Digital Editions 4.0 (HKLM-x32\...\Adobe Digital Editions 4.0) (Version: 4.0.3 - Adobe Systems Incorporated)
Adobe Flash Player 27 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 27.0.0.159 - Adobe Systems Incorporated)
Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.159 - Adobe Systems Incorporated)
Amazon MP3 Downloader 1.0.17 (HKLM-x32\...\Amazon MP3 Downloader) (Version: 1.0.17 - Amazon Services LLC)
Amazon Music (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\Amazon Amazon Music) (Version: 5.5.1.1028 - Amazon Services LLC)
Apowersoft Convertisseur Vidéo V4.6.0 (HKLM-x32\...\{195E8D7F-292B-4B04-A6E7-E96CAF04C767}_is1) (Version: 4.6.0 - APOWERSOFT LIMITED)
Apple Application Support (32 bits) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Avast Internet Security (HKLM-x32\...\Avast Antivirus) (Version: 17.7.2314 - AVAST Software)
BlackBerry Desktop Software 7.1 (HKLM-x32\...\{BE5B0450-DCCB-4FE9-93E2-3B38D88A745B}) (Version: 7.1.0.41 - Research In Motion Ltd.) Hidden
BlackBerry Desktop Software 7.1 (HKLM-x32\...\BlackBerry_Desktop) (Version: 7.1.0.41 - Research In Motion Ltd.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
Creevity Mp3 Cover Downloader (HKLM\...\Mp3 Cover Downloader_is1) (Version: 1.4.0 - Diego Alicata)
Étude pour l'amélioration du produit HP ENVY 4520 series (HKLM\...\{86298E97-610F-4A5A-8CC9-07EEB1790566}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
Free Convert FLAC To MP3 (remove only) (HKLM\...\Free Convert FLAC To MP3) (Version: - 4dots Software)
Freemake Video Converter version 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Ellora Assets Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP Dropbox Plugin (HKLM-x32\...\{184656B1-F08A-4ABC-B12B-53BA401014CB}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP ENVY 4520 series Aide (HKLM-x32\...\{D9C0AB86-384B-49FF-A667-717724F07740}) (Version: 36.0.0 - Hewlett Packard)
HP Google Drive Plugin (HKLM-x32\...\{9A000AD8-874B-416B-81E6-9DC47347C424}) (Version: 36.0.31.53050 - Hewlett-Packard Co.)
HP MediaSmart SmartMenu (HKLM\...\{5B08AF35-B699-4A44-BB89-3E51E70611E8}) (Version: 3.1.1.12 - Hewlett-Packard)
HP Photo Creations (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\HP Photo Creations) (Version: 1.0.0.19522 - HP)
HP Photosmart 5510 series - Enquête sur l'amélioration du produit (HKLM\...\{EF266618-8712-4A13-B10C-C1D3578250FB}) (Version: 25.0.621.0 - Hewlett-Packard Co.)
HP Support Solutions Framework (HKLM-x32\...\{ED5CE45D-842B-4C18-A002-87E16EA39BB3}) (Version: 12.8.37.11 - Hewlett-Packard Company)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HP Vision Hardware Diagnostics (HKLM\...\{D79A02E9-6713-4335-9668-AAC7474C0C0E}) (Version: 2.1.2.27173 - Hewlett-Packard)
iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
Jihosoft Photo Recovery version 7.2 (HKLM-x32\...\{399BE68C-DF00-4263-9CCB-240561B6BFBD}_is1) (Version: 7.2 - HONGKONG JIHO CO., LIMITED)
JVC Playlist Creator (HKLM-x32\...\{854832F3-EEFE-440F-BE25-FFEAE83952C3}) (Version: 1.0.0 - JVC KENWOOD)
Logiciel de base du périphérique HP ENVY 4520 series (HKLM\...\{D20015E2-CAB7-4664-B8D8-F153E9427DE2}) (Version: 36.0.72.54013 - Hewlett-Packard Co.)
Logiciel de base du périphérique HP Photosmart 5510 series (HKLM\...\{94641C2B-3419-4B5A-97E1-757BA7D2ECAD}) (Version: 25.0.621.0 - Hewlett-Packard Co.)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft .NET Framework 4.7 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation)
Microsoft Office « Démarrer en un clic » 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4734.1000 - Microsoft Corporation)
Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP1 x64 English (HKLM\...\{F83779DF-E1F5-43A2-A7BE-732F856FADB7}) (Version: 3.5.5692.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
monAlbumPhoto (HKLM-x32\...\monAlbumPhoto_is1) (Version: 6.5.1.2 - monAlbumPhoto)
Mozilla Firefox 56.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 56.0 (x86 fr)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 56.0.0.6478 - Mozilla)
MusicStation (HKLM-x32\...\{E74E7F63-E70F-43F2-873F-35FB66F263B2}) (Version: - )
myCANAL (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\2152390838.player.canalplus.fr) (Version: - player.canalplus.fr)
NVIDIA Display Control Panel (HKLM\...\NVIDIA Display Control Panel) (Version: 6.14.12.5936 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 331.58 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.26.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.26.4 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 331.58 - NVIDIA Corporation)
NVIDIA Pilote graphique 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 331.58 - NVIDIA Corporation)
NVIDIA Virtual Audio 1.2.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver) (Version: 1.2.5 - NVIDIA Corporation)
Panneau de configuration NVIDIA 331.58 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 331.58 - NVIDIA Corporation) Hidden
PC Accelerate (HKLM-x32\...\PC Accelerate_is1) (Version: 2.1 - PC Accelerate)
PhoneClean (HKLM-x32\...\PhoneClean) (Version: 4.1.1.0 - iMobie Inc.)
PhoneTrans 4.9.0 (HKLM-x32\...\{37823FA5-B4AA-458A-AADA-027A95958911}}_is1) (Version: 4.9.0 - iMobie Inc.)
PhotoFiltre (HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\PhotoFiltre) (Version: - )
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
PVSonyDll (HKLM\...\{3D3E663D-4E7E-4577-A560-7ECDDD45548A}) (Version: 1.00.0001 - NVIDIA Corporation) Hidden
SafeZone Stable 3.55.2393.590 (HKLM-x32\...\SafeZone 3.55.2393.590) (Version: 3.55.2393.590 - Avast Software) Hidden
SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.34.0 - SAMSUNG Electronics Co., Ltd.)
Sharepod 4.2.0.0 (HKLM-x32\...\{085BCFB8-F6FB-4600-AFAB-1F6DBC7F5F99}_is1) (Version: - Macroplant LLC)
Tunatic (HKLM-x32\...\Tunatic) (Version: - )
VD64Inst (HKLM\...\{22ABA92B-6C1B-46D8-AC2B-C48EEAE172A9}) (Version: 1.00.0000 - Roxio, Inc.) Hidden
VirginMega DownloadManager V3 (HKLM-x32\...\VirginMega.DownloadManager.v3.4AE6D9B37411D7D7A2C457954142B8FA4EE6E198.1) (Version: 3.2.1 - VirginMega)
Visionneuse Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-040C-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation)
Wondershare Dr.Fone for Android(Build 6.1.1.35) (HKLM-x32\...\{1DB91A95-C548-4BA5-9D4C-18C7DEAAC39F}_is1) (Version: 6.1.1.35 - Wondershare Software Co.,Ltd.)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers1: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2013-03-08] (VSO Software SARL)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers1: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll [2012-04-08] (Lavasoft Limited)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2010-03-15] ()
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers1-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\WZSHLS64.DLL [2010-04-05] (WinZip Computing, S.L.)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers2: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll [2012-04-08] (Lavasoft Limited)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2013-03-08] (VSO Software SARL)
ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2010-03-15] ()
ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers4-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\WZSHLS64.DLL [2010-04-05] (WinZip Computing, S.L.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2013-10-15] (NVIDIA Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-08] (AVAST Software)
ContextMenuHandlers6: [CopyToCD] -> {39F0FA09-4451-4477-9D23-4B9ADDEEF838} => C:\Program Files (x86)\VSO\common\CTShell.dll [2013-03-08] (VSO Software SARL)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => -> Pas de fichier
ContextMenuHandlers6: [LavasoftShellExt] -> {DCE027F7-16A4-4BEE-9BE7-74F80EE3738F} => C:\Program Files (x86)\Lavasoft\Ad-Aware\ShellExt_64.dll [2012-04-08] (Lavasoft Limited)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll -> Pas de fichier
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2010-03-15] ()
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2010-03-15] ()
ContextMenuHandlers6-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files (x86)\WinZip\WZSHLS64.DLL [2010-04-05] (WinZip Computing, S.L.)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {041FDC6A-8ECD-4A4F-A145-83E484370B52} - System32\Tasks\{7AFA5C77-B79E-4B26-B364-7E26E38EE032} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {0919F8F1-E653-46F1-A51D-24F696DDFB46} - System32\Tasks\{3128ED01-BA4B-4927-8C59-DFABE762FC6E} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {0C9D4F19-0808-4946-B2A3-4CEA2F6416FC} - \{C0AF2323-3296-4750-8DD2-619FE41CD986} -> Pas de fichier <==== ATTENTION
Task: {15602932-40F4-4B30-BAED-244B4AF8D69B} - System32\Tasks\{117BC411-B9A8-4B86-92EB-CC79765C2A79} => C:\Program Files\iTunes\iTunes.exe [2017-07-14] (Apple Inc.)
Task: {18975B63-B1A0-4B7A-8F2F-AB82CE0D13C4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPSFReport.exe [2013-11-04] (Hewlett-Packard Company)
Task: {1D57D09F-A6E3-4CD5-85ED-524C5110EB70} - \{889E89E7-663C-493B-85CA-33C49793CEBF} -> Pas de fichier <==== ATTENTION
Task: {1DDDE51D-3182-4074-86EF-F439B5062919} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {20AADE5D-7F73-47D5-9E59-88AC320A326E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company)
Task: {20ACBC10-A2BC-43FE-975E-FA14CF644E07} - System32\Tasks\NUSchedule => C:\Program Files (x86)\Norton Utilities 15\nu.exe [2012-10-06] (Symantec Corporation)
Task: {229A0D69-7A5A-47FA-A960-FF6637FA2849} - \{465D234C-E0EE-411F-BE1E-D563590B4BB9} -> Pas de fichier <==== ATTENTION
Task: {28A5D244-CF09-423E-9F04-CEBA6C7049E6} - System32\Tasks\{06BF9513-5A00-4CD5-9899-F037A9744D7D} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {29199DA0-4F86-4C02-86EF-902CEB5C6233} - \{AF91889B-6A8A-486E-91EC-04A02F2A136B} -> Pas de fichier <==== ATTENTION
Task: {2DEB54AB-4170-4365-8715-082454A8B9C9} - \{B132FB64-4A53-497B-8EB7-41921C06647E} -> Pas de fichier <==== ATTENTION
Task: {2FBC34F9-27DE-4ADA-B9DD-4504A1FB599D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-03] (Google Inc.)
Task: {35A3088E-EAD8-4EC9-9D76-8A6EE70FB4EC} - \{5799EAEF-8B4E-4122-B244-FA8B14BD5891} -> Pas de fichier <==== ATTENTION
Task: {36F9E0F2-0EE8-4CB7-BD8B-C3D9C41C2DF4} - System32\Tasks\{1730EB12-208E-4B41-BA74-7C0C814634EE} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {37064094-5E6D-4D08-8CDF-9E817E4D4AA5} - System32\Tasks\HPCustParticipation HP ENVY 4520 series => C:\Program Files\HP\HP ENVY 4520 series\Bin\HPCustPartic.exe [2015-03-09] (Hewlett-Packard Development Company, LP)
Task: {3AEF716B-F0AC-451D-A817-938AFD6F10FF} - System32\Tasks\RecoveryCDWin7 => C:\Program Files (x86)\Hewlett-Packard\HP Setup\RemEngine.exe [2010-05-25] ()
Task: {44679E9B-39DF-4223-A1A5-346EAB919864} - \{676F27C1-EBD5-49E5-9C23-4EC12DAFE11B} -> Pas de fichier <==== ATTENTION
Task: {4AFB6B2A-ADBF-415B-A5C3-63ABB7F12AA5} - \{5D2566FC-3FCA-4640-8AD2-DA5496794766} -> Pas de fichier <==== ATTENTION
Task: {4AFBF4C3-E3CE-484C-8EE4-CD32A342B89F} - System32\Tasks\HP Photo Creations Communicator => C:\Users\thierry\AppData\Roaming\HP Photo Creations\Communicator.exe [2011-11-18] ()
Task: {50A5F7BC-3CB6-4DB2-8B41-0F7A022F33EF} - System32\Tasks\{92896C0C-83C7-4778-97A5-1A382444C222} => C:\Program Files\iTunes\iTunes.exe [2017-07-14] (Apple Inc.)
Task: {545C941E-8A84-4033-A75A-241C728A67A9} - \{94AC72D9-8FD0-4081-BB58-0E5398865862} -> Pas de fichier <==== ATTENTION
Task: {56CC7B97-BA42-4F12-A994-04082515EA4E} - \{BF40CC2A-D558-41D8-B33D-72D3DC5043B6} -> Pas de fichier <==== ATTENTION
Task: {5B201464-92DA-4ADD-AB25-BA6F2E24A52D} - System32\Tasks\{B29314DA-48E2-4E16-B247-858CCEB9FC5C} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {5C9EBD09-9A3C-4B51-A770-FA5ED209B1CF} - \{1977A2D2-C902-4537-B86F-71A92399337F} -> Pas de fichier <==== ATTENTION
Task: {5CB8A5FC-CAA3-4C38-80FF-88EA89D54115} - \{D408AE54-C84F-488D-AC95-C2297B97D19D} -> Pas de fichier <==== ATTENTION
Task: {5E7CEF65-FD5D-49C6-9740-0AB934A60709} - \{DFB1DBF0-854E-416B-BDF3-F64351960972} -> Pas de fichier <==== ATTENTION
Task: {5EF1F92D-4BB6-4C64-8D8B-CA84A9FDAA54} - \{3F1A85AA-64FD-41AA-91A5-42C33409C2A1} -> Pas de fichier <==== ATTENTION
Task: {63EB1E18-E821-49AF-912E-314B76A72FA3} - System32\Tasks\SafeZone scheduled Autoupdate 1460917620 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software)
Task: {6835E8FC-2049-4F29-A15D-219EB7D31539} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {6E25C666-E3B9-40B8-BA03-FD6312232445} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {705EAE4B-FCDC-4776-90E3-12F3C1A791A9} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {7335D99D-C26F-4546-B058-E9417F4D4CEF} - \{F0914C6D-321B-44BC-8049-BC206B8C4BE2} -> Pas de fichier <==== ATTENTION
Task: {760CF4A9-9689-4A5B-A1A7-BEA29652A900} - System32\Tasks\{E7FFFDC5-44A3-4F20-B419-71181C8D5363} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {99122525-9CF6-4BA2-B0B0-F122E44946DE} - System32\Tasks\{18AAD0E8-8B61-4C34-8C58-3B9181B87D4F} => C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVH.EXE [2010-01-13] (Microsoft Corporation)
Task: {9E39A0E3-3780-4D14-ABFA-6449D69C93D4} - System32\Tasks\{28DC0145-7E5F-4114-9B5E-4169482FB698} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {A356DE3A-57CA-4159-A885-CA79FD6236B5} - \Test TimeTrigger -> Pas de fichier <==== ATTENTION
Task: {A6ABF395-98B4-403D-806E-B7597A9E84EC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2015-11-04] (HP Inc.)
Task: {A93F452A-0219-4410-B6E5-61A5C0A5795E} - \{0D80A5DC-BAFE-4641-BF65-F766D6DA8A09} -> Pas de fichier <==== ATTENTION
Task: {B2F35EAB-B9A1-46D6-94DD-8675F0576704} - \{26CA0760-A24C-401C-A5C9-CE287C08CA2C} -> Pas de fichier <==== ATTENTION
Task: {B3A79F12-A12E-4C1B-A078-EB206FEF6948} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-02-03] (Google Inc.)
Task: {B3B715EC-FC1D-4C82-9EBF-94795BFD4756} - System32\Tasks\{FBF2450E-E6A6-4138-9FD7-893C8CB69291} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {C5BFA30B-955F-4C44-8CB3-88DEFCCC23FA} - \{2BE32E82-59ED-4794-8748-1FEC4664D632} -> Pas de fichier <==== ATTENTION
Task: {C7F1D50B-260D-49B2-B3A0-5A089C1D7D1F} - \{382BEB51-8F15-44AF-98EB-A3FF4CF7173A} -> Pas de fichier <==== ATTENTION
Task: {CB5BBCB7-9C63-4287-A314-52F9BE553B68} - System32\Tasks\{E5788E48-2178-42B6-B82A-38E4703B3A22} => C:\Program Files\iTunes\iTunes.exe [2017-07-14] (Apple Inc.)
Task: {D8AFC4D0-1FEF-4E89-A565-051556AFA163} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-11] (Adobe Systems Incorporated)
Task: {E6AD4373-4AFC-48CF-B9FF-279972E20E4A} - \{CE49651E-779C-4005-AD14-737D3C89B7B9} -> Pas de fichier <==== ATTENTION
Task: {E7918E1C-44AB-44F6-9025-C01CB1F82B15} - System32\Tasks\{77AC4CFC-B22E-4F73-9B1C-300E3D49ECD1} => C:\Users\thierry\ZHPCleaner.exe [2016-02-28] ()
Task: {E94FE3D7-02AA-4258-9925-035E16699E8A} - System32\Tasks\HPCustParticipation HP Photosmart 5510 series => C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPCustPartic.exe [2011-09-16] (Hewlett-Packard Co.)
Task: {EA046AC6-3D03-41AA-AF9E-1735F509B267} - \{567013D4-52E0-4367-A598-55214403EC13} -> Pas de fichier <==== ATTENTION
Task: {EF35E718-076C-4444-92AE-42F111352A14} - \{047E327A-B8BB-4488-858F-E7A78027C5CF} -> Pas de fichier <==== ATTENTION
Task: {F0EE2BBC-D2C7-48BC-8FC9-B79C0450293D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {F3CE0F0D-C48F-49C4-B146-8C8C8FD1B4A2} - \{5D32FBA6-F439-44B4-8D0A-639AF09BA43B} -> Pas de fichier <==== ATTENTION
Task: {F449C840-0CF7-4442-8FAD-E4A73DCCEE84} - \{012B1AA2-BF13-450A-961A-8A9E1DC34893} -> Pas de fichier <==== ATTENTION
Task: {FE09A611-FA2B-446C-9AB6-D3B8978A78AD} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-10-08] (AVAST Software)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\HP Photo Creations Communicator.job => C:\Users\thierry\AppData\Roaming\HP Photo Creations\Communicator.exe
Task: C:\Windows\Tasks\NUSchedule.job => C:\Program Files (x86)\Norton Utilities 15\nu.exe
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
Shortcut: C:\Users\thierry\Favorites\Site de téléchargement NCH Software.lnk -> hxxp://www.nch.com.au/fr/index.htm
==================== Modules chargés (Avec liste blanche) ==============
2013-01-25 10:34 - 2013-10-15 23:47 - 000102176 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2012-11-27 16:20 - 2010-03-15 12:28 - 000052224 _____ () C:\Program Files (x86)\WinRAR\rarext64.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000067408 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000169832 _____ () c:\Program Files\AVAST Software\Avast\x64\vaarclient.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000846752 _____ () C:\Program Files\AVAST Software\Avast\x64\ffl2.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000286712 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2017-07-14 10:26 - 2017-07-14 10:26 - 001354040 _____ () C:\Program Files\iTunes\libxml2.dll
2017-07-14 10:27 - 2017-07-14 10:27 - 000092472 _____ () C:\Program Files\iTunes\zlib1.dll
2017-03-02 17:54 - 2016-12-12 03:47 - 000068016 _____ () C:\Program Files (x86)\iMobie\PhoneClean\iTunesMobileDevice.dll
2017-10-08 11:51 - 2017-08-14 11:34 - 000080896 ____N () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
2017-09-19 22:34 - 2017-09-19 22:34 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2017-09-07 18:12 - 2017-09-07 18:12 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000151104 _____ () C:\Program Files\AVAST Software\Avast\network_notifications.dll
2017-10-13 15:12 - 2017-10-13 15:12 - 005880504 _____ () C:\Program Files\AVAST Software\Avast\defs\17101306\algo.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000700656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000241448 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2017-07-29 21:38 - 2017-07-29 21:38 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-10-08 19:34 - 2017-10-08 19:34 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2016-03-02 21:48 - 2017-03-23 09:49 - 001506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2016-03-02 21:48 - 2016-07-21 10:54 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\thierry:zylomtest [0]
AlternateDataStreams: C:\Users\thierry:zylomtr{000HQ7FF-AD7A-3FG3-VK8A-25GG67KOIVUS} [36]
AlternateDataStreams: C:\ProgramData\TEMP:9307EB9C [137]
AlternateDataStreams: C:\ProgramData\TEMP:D287FACF [102]
AlternateDataStreams: C:\ProgramData\TEMP:D3A96964 [184]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avas_service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\avss_service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tpavdrw_service => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\tpmgma_service => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Il y a 7888 plus de sites.
IE trusted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\webcompanion.com -> hxxp://webcompanion.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1001\...\123simsen.com -> www.123simsen.com
Il y a 7888 plus de sites.
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-619360433-3418289920-2899325868-1008\...\123simsen.com -> www.123simsen.com
Il y a 7887 plus de sites.
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2009-07-14 04:34 - 2017-07-30 09:46 - 001356236 ____R C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
Il y a 15500 plus de lignes.
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-619360433-3418289920-2899325868-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\thierry\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\startupfolder: C:^Users^thierry^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^OpenOffice.org 3.3.lnk => C:\Windows\pss\OpenOffice.org 3.3.lnkStartup
MSCONFIG\startupreg: Amazon Music => "C:\Users\thierry\AppData\Local\Amazon Music\Amazon Music Helper.exe"
MSCONFIG\startupreg: BlackBerryAutoUpdate => C:\Program Files (x86)\Common Files\Research In Motion\Auto Update\RIMAutoUpdate.exe /background
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: HPAdvisorDock => C:\Program Files (x86)\Hewlett-Packard\HP Advisor\DOCK\HPAdvisorDock.exe
MSCONFIG\startupreg: hpsysdrv => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesHelper => C:\Program Files (x86)\Samsung\Kies\KiesHelper.exe /s
MSCONFIG\startupreg: KiesPreload => C:\Program Files (x86)\Samsung\Kies\Kies.exe /preload
MSCONFIG\startupreg: KiesTrayAgent => C:\Program Files (x86)\Samsung\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: Magic Desktop for HP notification => "C:\ProgramData\Easybits Magic Desktop for HP\mdhpSUN.exe"
MSCONFIG\startupreg: NeroCheck => C:\Windows\system32\NeroCheck.exe
MSCONFIG\startupreg: PeerBlock => C:\Program Files\PeerBlock\peerblock.exe
MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\qttask.exe" -atboottime
MSCONFIG\startupreg: RIMBBLaunchAgent.exe => C:\Program Files (x86)\Common Files\Research In Motion\USB Drivers\RIMBBLaunchAgent.exe
MSCONFIG\startupreg: RIMDeviceManager => "C:\Program Files (x86)\Common Files\Research In Motion\RIMDeviceManager\RIMDeviceManager.exe" -RunServer
MSCONFIG\startupreg: SDTray => "C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe"
MSCONFIG\startupreg: SmartMenu => C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe /background
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: swg => "C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe"
MSCONFIG\startupreg: uTorrent => "C:\Users\thierry\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
MSCONFIG\startupreg: Wondershare Helper Compact.exe => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{2D039446-05B1-4CCE-A515-86ED17B599AB}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE
FirewallRules: [{2109A91B-4144-4308-B0CB-C521F7AB50B4}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe
FirewallRules: [{F7DDEFE2-00D0-45CF-A5FC-00DBE2E45556}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe
FirewallRules: [{155AF8BF-CE4E-4C86-8470-4BBFE4366979}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe
FirewallRules: [{FFDD8046-2887-4964-AE9C-03B7A226F0B6}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe
FirewallRules: [{06E9E553-B3C3-4187-8D94-6E34889C62F8}] => (Allow) svchost.exe
FirewallRules: [{9C9DEA84-2E6E-4E19-86A7-F34FAE0901F6}] => (Allow) C:\Program Files (x86)\Windows Live\Sync\WindowsLiveSync.exe
FirewallRules: [{438CAF6D-7175-45D4-9827-FB05D607DA0D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{712B3017-C2F7-4ADE-BFB1-94B9DDE8ED6C}] => (Allow) LPort=2869
FirewallRules: [{76FD2F31-B288-4B93-BB14-A3F0DB05373E}] => (Allow) LPort=1900
FirewallRules: [{5117B9AA-1DF4-4264-8BC8-66AE99D1817E}] => (Allow) C:\Program Files (x86)\Windows Live\Mesh\MOE.exe
FirewallRules: [{5B1E12C0-E927-4107-9EA9-77ED56478E7B}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{1BE867EF-C670-4E2B-B03D-4594B8FEB371}] => (Allow) C:\Windows\System32\migwiz\migwiz.exe
FirewallRules: [{822FB6EC-5114-4DBA-83E9-FD4FC860D522}] => (Allow) LPort=7000
FirewallRules: [{97B32E54-ED20-48EC-838F-649AE294E3BE}] => (Allow) LPort=7000
FirewallRules: [{130593A0-097B-448C-84C1-A68F1D7C36BE}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{1BE98CF9-B20F-4EB5-B1AA-7A92EB82CBC8}] => (Allow) C:\Windows\SysWOW64\muzapp.exe
FirewallRules: [{6F557D8E-CBAD-41B2-8B1A-EA406C0DDDD4}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\DeviceSetup.exe
FirewallRules: [{74CA6E37-6AC8-4F97-A7A1-3134EE8C0BAC}] => (Allow) C:\Program Files\HP\HP Photosmart 5510 series\Bin\HPNetworkCommunicator.exe
FirewallRules: [{7E81C4E9-2C5F-4F8E-BC17-C29398BBCB81}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{053D8327-F02B-4B96-83E5-B0FC8058191C}] => (Allow) C:\Windows\SysWOW64\msiexec.exe
FirewallRules: [{9A233633-9565-4668-BBDA-CD496B7124CA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C66D310C-B936-418C-AEAD-C73F5E923046}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{D926131B-47ED-4024-8D33-537CA64DFF30}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{B264FFF2-53E8-40F7-8447-56AEF3EF7332}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{90419885-7C63-4403-8AD4-50B863205B8A}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe
FirewallRules: [{330BAD8B-10F3-42AA-950F-B9153E82CFA3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4F359B08-6CA7-4DD5-B4DC-1A24CB967828}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{18A8DA15-CB01-4825-83C4-24840FCDA627}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{DBBCEC38-3440-4263-B445-C290B73A2C45}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{20EFAC61-7454-4EAC-A3E3-6DD2499115CD}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{7A561F35-8BD9-4C2F-9987-3E1E0061DACC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D951E1D2-8E50-4A86-A721-764589CE26C0}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561_0\SZBrowser.exe
FirewallRules: [{8C170A99-2A30-4536-B886-8489E643A3C8}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{E6967DDC-5D51-4639-88D4-447F09B3EDD5}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [TCP Query User{7DEF40FF-0379-4CE7-A226-F6B96C0C270B}C:\users\thierry\appdata\local\amazon music\amazon music helper.exe] => (Block) C:\users\thierry\appdata\local\amazon music\amazon music helper.exe
FirewallRules: [UDP Query User{D79BE984-F082-49AA-A39B-B4EDD0B08E6F}C:\users\thierry\appdata\local\amazon music\amazon music helper.exe] => (Block) C:\users\thierry\appdata\local\amazon music\amazon music helper.exe
FirewallRules: [{8C7314B6-50AE-437D-9333-58C187AA6124}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe
FirewallRules: [{50F2B5AC-05CC-4FD9-BCAB-92C5405271CA}] => (Allow) C:\Program Files (x86)\Apowersoft\Video Converter Studio\Video Converter Studio.exe
FirewallRules: [{0E4CB7DD-7C37-478F-9668-132CBF492A04}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{BF912A47-4D24-4BAB-B637-0FEEB126651E}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\DeviceSetup.exe
FirewallRules: [{47AAA643-1848-420B-9518-08AFFB8F70E8}] => (Allow) LPort=5357
FirewallRules: [{322B24F1-1227-4283-9352-067578558057}] => (Allow) C:\Program Files\HP\HP ENVY 4520 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{706FDA62-7A25-4754-A9F5-B5CB9BBE2231}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
==================== Points de restauration =========================
08-10-2017 10:03:02 Made by Norton Utilities äå
08-10-2017 11:41:51 Installed Movie Joiner v4
08-10-2017 11:43:26 Removed Movie Joiner v4
08-10-2017 19:00:07 Sauvegarde Windows
08-10-2017 19:15:39 Made by Norton Utilities äå
08-10-2017 21:59:20 Made by Norton Utilities äå
08-10-2017 22:02:29 JRT Pre-Junkware Removal
09-10-2017 07:05:55 Made by Norton Utilities äå
11-10-2017 10:20:09 Windows Update
11-10-2017 21:37:54 Made by Norton Utilities äå
12-10-2017 21:07:33 Made by Norton Utilities äå
13-10-2017 21:22:32 Made by Norton Utilities äå
13-10-2017 21:23:18 Removed QuickTime 7
13-10-2017 21:29:24 Removed Java 8 Update 60
13-10-2017 21:30:31 Removed Java 8 Update 77
13-10-2017 21:31:33 Removed Java 8 Update 91
13-10-2017 21:41:22 Restore Point Created by FRST
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Carte Microsoft ISATAP
Description: Carte Microsoft ISATAP
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Microsoft Teredo Tunneling Adapter
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: SBRE
Description: SBRE
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: SBRE
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ezplay device ...
Description: ezplay device ...
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: ElRawDisk
Description: ElRawDisk
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ElRawDisk
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: avast! SecureLine TAP Adapter v3
Description: avast! SecureLine TAP Adapter v3
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TAP-Windows Provider V9
Service: aswTap
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
Name: Carte Microsoft ISATAP
Description: Carte Microsoft ISATAP
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (10/13/2017 09:45:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante FreemakeUtilsService.exe, version : 1.0.0.0, horodatage : 0x59916057
Nom du module défaillant : KERNELBASE.dll, version : 6.1.7601.23915, horodatage : 0x59b94abb
Code d’exception : 0xe0434352
Décalage d’erreur : 0x0000c54f
ID du processus défaillant : 0x808
Heure de début de l’application défaillante : 0x01d3445bbfce99ca
Chemin d’accès de l’application défaillante : C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe
Chemin d’accès du module défaillant: C:\Windows\syswow64\KERNELBASE.dll
ID de rapport : 10f3cd39-b04f-11e7-9529-d48564107f28
Error: (10/13/2017 09:45:23 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : FreemakeUtilsService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.IO.FileNotFoundException
à FreemakeUtilsService.Statistics.Manager.ApplyNewTargetsConfigs()
à FreemakeUtilsService.Statistics.Manager.TargetsConfigSyncCompleted(System.Object, System.EventArgs)
à FreemakeUtilsService.Common.Synchronizer.OnWorkerCompleted(System.Object, System.ComponentModel.RunWorkerCompletedEventArgs)
à System.ComponentModel.BackgroundWorker.OnRunWorkerCompleted(System.ComponentModel.RunWorkerCompletedEventArgs)
à System.ComponentModel.BackgroundWorker.AsyncOperationCompleted(System.Object)
à System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
à System.Threading.ThreadPoolWorkQueue.Dispatch()
à System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()
Erreurs système:
=============
Error: (10/13/2017 09:46:44 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Le pilote de démarrage système ou d’amorçage suivant n’a pas pu se charger :
ASPI32
ElRawDisk
SBRE
Error: (10/13/2017 09:46:44 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Freemake Improver s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/13/2017 09:43:21 PM) (Source: Disk) (EventID: 7) (User: )
Description: Le périphérique \Device\Harddisk0\DR0 comporte un bloc défectueux.
Error: (10/13/2017 09:43:19 PM) (Source: Disk) (EventID: 7) (User: )
Description: Le périphérique \Device\Harddisk0\DR0 comporte un bloc défectueux.
Error: (10/13/2017 09:42:12 PM) (Source: Service Control Manager) (EventID: 7032) (User: )
Description: Le Gestionnaire de services de contrôle a essayé d’entreprendre une action corrective (Redémarrer le service) après la fin inattendue du service Windows Search, mais cette action a échoué en raison de l’erreur suivante :
Une instance du service s’exécute déjà.
Error: (10/13/2017 09:42:09 PM) (Source: DCOM) (EventID: 10010) (User: )
Description: Le serveur {9E175B6D-F52A-11D8-B9A5-505054503030} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (10/13/2017 09:41:40 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Windows Search s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 30000 millisecondes : Redémarrer le service.
Error: (10/13/2017 09:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Spybot-S&D 2 Updating Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/13/2017 09:41:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service NVIDIA Update Service Daemon s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/13/2017 09:41:39 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Norton SpeedDisk Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service.
CodeIntegrity:
===================================
Date: 2015-08-05 21:14:26.076
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-05 21:14:26.030
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-05 21:14:25.983
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-05 21:14:25.952
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.181
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.141
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.091
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:19:40.051
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:17:09.187
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
Date: 2015-08-02 14:17:09.147
Description: Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\Users\thierry\AppData\Local\Temp\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.
==================== Infos Mémoire ===========================
Processeur: Pentium(R) Dual-Core CPU E5500 @ 2.80GHz
Pourcentage de mémoire utilisée: 48%
Mémoire physique - RAM - totale: 4095.24 MB
Mémoire physique - RAM - disponible: 2122.36 MB
Mémoire virtuelle totale: 8188.67 MB
Mémoire virtuelle disponible: 5747.57 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:685.29 GB) (Free:260.29 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:13.25 GB) (Free:1.61 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows XP) (Size: 698.6 GB) (Disk ID: 6199F0E0)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=685.3 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=13.3 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================