Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version:12-10-2015 Exécuté par Armanes (2015-10-13 09:15:39) Exécuté depuis C:\Users\Armanes\Desktop Windows 10 Home (X64) (2015-09-16 17:18:28) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-2152033959-3468424527-2552610105-500 - Administrator - Disabled) => C:\Users\Administrator Armanes (S-1-5-21-2152033959-3468424527-2552610105-1001 - Administrator - Enabled) => C:\Users\Armanes DefaultAccount (S-1-5-21-2152033959-3468424527-2552610105-503 - Limited - Disabled) Invité (S-1-5-21-2152033959-3468424527-2552610105-501 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) µTorrent (HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 18.0.0.199 - Adobe Systems Incorporated) Advanced SystemCare 8 (HKLM-x32\...\Advanced SystemCare 8_is1) (Version: 8.4.0 - IObit) ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.6 - ASUS) ASUS Screen Saver (HKLM-x32\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.2 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS) ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS) ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.7 - ASUS) ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5710.52 - CyberLink Corp.) ASUSDVD (x32 Version: 10.0.5710.52 - CyberLink Corp.) Hidden AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK) ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0031 - ASUS) CCleaner (HKLM\...\CCleaner) (Version: 5.10 - Piriform) Dofus Beta (HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\1D98FB2F-73F1-419A-A159-521B0F645CFB-2) (Version: - Ankama) Driver Booster 2.4 (HKLM-x32\...\Driver Booster_is1) (Version: 2.4 - IObit) Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.101 - Google Inc.) Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2105 - Intel Corporation) Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3325 - Intel Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.3.0.5 - IObit) Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation) Magicite version 1.6 (HKLM-x32\...\{03F2DF1A-6319-4DBD-8795-48E864FB27BA}_is1) (Version: 1.6 - REVOLUTiONiT) Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Mises à jour NVIDIA 2.5.14.5 (Version: 2.5.14.5 - NVIDIA Corporation) Hidden Mumble 1.2.8 (HKLM-x32\...\{5D198290-6E7D-426C-9AF0-8DA34CC7E596}) (Version: 1.2.8 - Thorvald Natvig) NVIDIA GeForce Experience 2.5.14.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.5.14.5 - NVIDIA Corporation) NVIDIA Graphics Driver 332.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 332.04 - NVIDIA Corporation) NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation) Package de pilotes Windows - ASUS (ATP) Mouse (08/01/2015 10.0.0.5) (HKLM\...\B267A462F49A1ACD7A2EC5C262BA0DC7D7B23891) (Version: 08/01/2015 10.0.0.5 - ASUS) Panneau de configuration NVIDIA 353.54 (Version: 353.54 - NVIDIA Corporation) Hidden Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.312 - Qualcomm Atheros Communications) Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7553 - Realtek Semiconductor Corp.) SHIELD Streaming (Version: 4.1.3000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.5.14.5 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation) Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.2 - IObit) Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.10.25 - WildTangent) WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS) ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Points de restauration ========================= 27-09-2015 09:55:54 Driver Booster : Intel(R) 8 Series Chipset Family SATA AHCI Controller 02-10-2015 20:31:37 Windows Update 04-10-2015 10:41:41 Driver Booster : Intel(R) 8 Series LPC Controller (Premium SKU) - 9C43 10-10-2015 21:49:17 Windows Update 11-10-2015 10:41:43 Driver Booster : Intel(R) 8 Series SMBus Controller - 9C22 ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {02C6786A-4337-45BD-BA67-3BB372C965C2} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] () Task: {0A5A6E86-E727-4CC2-B3BA-CCB4F8AD8CE0} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2015-08-30] (Realtek Semiconductor) Task: {1AD3BFC9-D311-43C3-BCBF-D91063B1EE38} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {1C0FC5C2-0F42-4DAC-9F4E-94F0C21F1A55} - System32\Tasks\ASC8_SkipUac_Armanes => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe [2015-08-17] (IObit) Task: {1C590619-F547-4AD7-9B12-706E6B8BD44A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-09-16] (Piriform Ltd) Task: {1E2BF923-FCEF-474E-ABFA-B547F55BC4F4} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-30] (Realtek Semiconductor) Task: {271FF52D-252E-4292-83DD-FF1F1E189DC2} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS) Task: {27A2E2F8-10F5-4C80-85ED-26490C39B192} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION Task: {2942C404-9665-4511-B8AD-5ACD0589F070} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION Task: {2A221C72-1B2D-4D0A-B1BD-8837276AF5EF} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe Task: {2BA1DB17-60A5-4AA7-BB4F-BB8A65441ABD} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2015-07-06] (IObit) Task: {2D0EF8B9-1A73-435F-B027-F72D09B8B85F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION Task: {383F5DF6-4838-415E-86AB-FFC729F0C0C5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION Task: {3E8FDA04-6A77-482F-965B-50726D8A8525} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {3F97D329-3597-4BFA-9897-7DB1C2128AFA} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-08-30] (Realtek Semiconductor) Task: {58D20D1A-9819-4C23-AC84-1EB24E5F4E0A} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION Task: {5BB93497-DA5E-46CC-8458-DBD43EBA154D} - System32\Tasks\Driver Booster SkipUAC (Armanes) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2015-07-06] (IObit) Task: {629B9182-8A9C-4856-BBF8-B26F5347BB11} - System32\Tasks\ASC8_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 8\Monitor.exe [2015-08-12] (IObit) Task: {6490C49E-84CE-4145-BC1A-D17A59499C80} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-26] (Microsoft Corporation) Task: {680A718F-206C-414C-942A-298AAF43AD18} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.) Task: {6BA00EA1-DF70-4734-B2DC-B4A013ABA2F0} - System32\Tasks\Uninstaller_SkipUac_Armanes => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [2015-05-20] (IObit) Task: {7184331B-AF9D-4E9C-BC45-43BD928CFDDC} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2015-07-06] (IObit) Task: {786CE227-B8DC-4975-9B8A-B607524285E1} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-09-23] (AsusTek) Task: {7F144A81-6162-473D-B60F-A155B7C16E1B} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-08-29] (ASUSTek Computer Inc.) Task: {82ACEB3B-05FF-4009-A96D-53863182BBCD} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION Task: {8E007A0E-95D2-4613-908A-BB7CE88B9E04} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION Task: {94F307E9-C718-421C-B9B0-8118F715726C} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION Task: {9C79473E-B80E-4F40-B887-36F30B1F8734} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION Task: {BB9FCD52-94D3-4D7E-B1D3-DA152AD614A7} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2013-08-29] () Task: {CB77A9AD-18C7-4474-A160-0AB5A8A0731B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {F07AD246-FD08-4B91-AEE0-519D4FDD7782} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION Task: {FEA1D453-2FED-4E73-8F70-4DD589411629} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-08-29] (ASUS) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\ASC8_SkipUac_Armanes.job => C:\Program Files (x86)\IObit\Advanced SystemCare 8\ASC.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\Uninstaller_SkipUac_Armanes.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe ==================== Modules chargés (Avec liste blanche) ============== 2015-07-10 13:00 - 2015-07-10 13:00 - 00028160 _____ () C:\WINDOWS\SYSTEM32\efsext.dll 2015-09-16 16:54 - 2015-09-16 16:54 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll 2015-09-16 16:54 - 2015-09-16 16:54 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll 2015-09-16 16:08 - 2015-07-13 19:37 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-10-02 20:22 - 2015-09-17 08:48 - 02494712 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2013-08-29 18:01 - 2013-08-29 18:01 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll 2015-10-02 20:22 - 2015-09-17 08:48 - 02494712 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2015-07-18 00:35 - 2015-07-18 00:35 - 00396688 _____ () C:\WINDOWS\system32\igfxTray.exe 2015-10-02 20:22 - 2015-09-17 07:48 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2015-10-02 20:22 - 2015-09-17 07:44 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2015-10-02 20:21 - 2015-09-17 07:42 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-10-02 20:22 - 2015-09-17 07:42 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2015-10-02 20:22 - 2015-09-17 07:43 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\Users\Armanes\SkyDrive:ms-properties ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== EXE Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\008k.com -> 008k.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\00hq.com -> 00hq.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\0190-dialers.com -> 0190-dialers.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\01i.info -> 01i.info IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\05p.com -> 05p.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\0calories.net -> 0calories.net IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\0cj.net -> 0cj.net IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\0scan.com -> 0scan.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\1-domains-registrations.com -> 1-domains-registrations.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\1-se.com -> 1-se.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\1001movie.com -> 1001movie.com IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\1001night.biz -> 1001night.biz IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\100gal.net -> 100gal.net IE restricted site: HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\100sexlinks.com -> 100sexlinks.com Il y a 4788 plus de sites sensibles. ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Armanes\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\papier peint de la visionneuse de photos windows.jpg DNS Servers: 8.8.8.8 - 8.8.4.4 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2152033959-3468424527-2552610105-1001\...\StartupApproved\Run: => "Steam" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [UDP Query User{C5D44415-23B5-45CB-A5C6-129D72A02FD7}C:\users\armanes\downloads\fullgame142578\dst142578\bin\dontstarve_steam.exe] => (Allow) C:\users\armanes\downloads\fullgame142578\dst142578\bin\dontstarve_steam.exe FirewallRules: [TCP Query User{A0144922-5DCE-4944-AB0A-142E9B509C80}C:\users\armanes\downloads\fullgame142578\dst142578\bin\dontstarve_steam.exe] => (Allow) C:\users\armanes\downloads\fullgame142578\dst142578\bin\dontstarve_steam.exe FirewallRules: [{AB411F35-D1C8-4755-ADC1-AAA77705375C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{E03479FF-66EA-41C0-BA77-D2C22BC44831}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{91FF65D3-8C48-438C-B49F-17F2D2EBEB29}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{EA9B8503-A62C-47CD-B730-C245DD585812}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{521B07BD-19FE-4777-94DD-8612067326C0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{E1307CDF-7DCD-44D3-BCEA-509CB4281A4C}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{D686B8F0-7900-4C17-9349-E1061F6DACF0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [UDP Query User{8C04326A-5D7C-4DFA-8B65-05CD9072551C}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe FirewallRules: [TCP Query User{773A3631-870F-4A69-8DAF-09C180FE425E}C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_60\bin\javaw.exe FirewallRules: [{BBD1F34F-B95F-45F8-AE44-4E92E03D4321}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{3B4B592A-67C1-466F-9FFF-A52C93F27C2B}] => (Allow) C:\Users\Armanes\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{DACCB60E-DE86-4E65-891C-FF257CFB81C5}] => (Allow) C:\Users\Armanes\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{5140E0CE-B9EC-4320-BA73-71B439B933FA}] => (Allow) C:\Users\Armanes\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{29928B57-8760-4EEB-9482-581E650A3278}] => (Allow) C:\Users\Armanes\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{135D3ADF-82A4-4D7A-8D61-A16B4759B044}] => (Allow) C:\Users\Armanes\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{9CF68442-9145-424C-A8E4-65F660BE0E17}] => (Allow) C:\Users\Armanes\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{C7E3FD49-ABC9-4C61-A563-27AD525EA4D0}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE FirewallRules: [{4491DD6C-7B94-488D-9CF3-21403A24D49A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{257D10DA-2D5A-430D-8E7E-DC7DD569FDE4}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{22BC7BE1-20E4-4D1C-8A52-4B684A65A898}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{35D09AFD-2A8D-4934-8B2D-0DCB0389FB97}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{118DC45A-1678-465B-AC57-BBF7ABFB9596}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{3D1ACBFF-4E69-4B07-A4D7-E638629B1FDD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{22367D84-532C-4206-890F-671778BAEAD7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [TCP Query User{D1315993-8FB1-4795-86D4-CDCB9AB8F634}C:\program files (x86)\magicite\magicite.exe] => (Allow) C:\program files (x86)\magicite\magicite.exe FirewallRules: [UDP Query User{C5A99684-4632-4AD9-93CF-7435F4737BF4}C:\program files (x86)\magicite\magicite.exe] => (Allow) C:\program files (x86)\magicite\magicite.exe ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (10/13/2015 09:12:27 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-IBRAHIM) Description: Échec de l’activation de l’application Microsoft.BingFoodAndDrink_8wekyb3d8bbwe!AppexFoodAndDrink avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (10/13/2015 08:12:15 AM) (Source: DptfEvent) (EventID: 1) (User: ) Description: DptfPolicyConfigTDPService ServiceMainThread: NotifyServiceStatusRunning() failed. Error: (10/13/2015 08:12:15 AM) (Source: DptfEvent) (EventID: 2) (User: ) Description: DptfPolicyConfigTDPService NotifyServiceStatusRunning: DeviceIoControl() failed. Last error = [0x0000001f] Error: (10/13/2015 08:12:14 AM) (Source: DptfEvent) (EventID: 1) (User: ) Description: DptfProcessorParticipantService ServiceMain: ServiceStart() failed. Error: (10/13/2015 08:12:14 AM) (Source: DptfEvent) (EventID: 1) (User: ) Description: DptfProcessorParticipantService ServiceStart: ConnectToDptfProcessorDriver() failed. Error: (10/13/2015 08:12:14 AM) (Source: DptfEvent) (EventID: 2) (User: ) Description: DptfProcessorParticipantService ConnectToDptfProcessorDriver: SetupDiEnumDeviceInterfaces() failed. Last error = [0x00000103] Error: (10/13/2015 08:11:22 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: Descripteur non valide Error: (10/13/2015 08:11:22 AM) (Source: AdvancedSystemCareService8) (EventID: 0) (User: ) Description: Descripteur non valide Error: (10/13/2015 08:11:16 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-IBRAHIM) Description: Échec de l’activation de l’application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (10/12/2015 09:51:42 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-IBRAHIM) Description: Échec de l’activation de l’application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Erreurs système: ============= Error: (10/13/2015 09:13:19 AM) (Source: DCOM) (EventID: 10010) (User: AUTORITE NT) Description: {784E29F4-5EBE-4279-9948-1E8FE941646D} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} Error: (10/13/2015 08:23:21 AM) (Source: DCOM) (EventID: 10010) (User: PC-IBRAHIM) Description: {F9717507-6651-4EDB-BFF7-AE615179BCCF} CodeIntegrity: =================================== Date: 2015-10-12 20:14:11.010 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-10-11 19:58:29.120 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-10-04 20:12:49.358 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-10-03 17:54:39.130 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-09-27 20:47:29.805 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-09-17 20:20:38.623 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2015-09-16 19:30:44.976 Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i3-4010U CPU @ 1.70GHz Pourcentage de mémoire utilisée: 23% Mémoire physique - RAM - totale: 8075.4 MB Mémoire physique - RAM - disponible: 6207.03 MB Mémoire virtuelle totale: 9355.4 MB Mémoire virtuelle disponible: 7445.92 MB ==================== Lecteurs ================================ Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:162.92 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] Drive d: (DATA) (Fixed) (Total:537.8 GB) (Free:531.79 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: C2DBF84A) Partition: GPT. ==================== Fin de Addition.txt ============================