Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 29-08-2016 Exécuté par kilian (30-08-2016 21:12:19) Exécuté depuis C:\Users\kilian\Desktop Windows 10 Home Version 1607 (X64) (2016-08-28 09:23:31) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-2092775352-3354947105-1837627873-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2092775352-3354947105-1837627873-503 - Limited - Disabled) Invité (S-1-5-21-2092775352-3354947105-1837627873-501 - Limited - Disabled) kilian (S-1-5-21-2092775352-3354947105-1837627873-1002 - Administrator - Enabled) => C:\Users\kilian ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Emsisoft Anti-Malware (Disabled - Up to date) {D1196F3E-3487-585D-3681-0661BD157EC3} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Bitdefender Antivirus (Enabled - Up to date) {3FB17364-4FCC-0FA7-6BBF-973897395371} AS: Bitdefender Antispyware (Enabled - Up to date) {84D09280-69F6-0029-510F-AC4AECBE19CC} AS: Emsisoft Anti-Malware (Disabled - Up to date) {6A788EDA-12BD-57D3-0C31-3D13C692347E} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Pare-feu (Enabled) {078AF241-05A3-0EFF-40E0-3E0D69EA140A} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Flash Player 10 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 10.3.183.90 - Adobe Systems Incorporated) Ancient Weapon Sounds (HKLM-x32\...\{E00A5837-482C-4DCE-B4CC-D16B343374E1}) (Version: 2.1.1 - Screaming Bee) Ansel (Version: 372.54 - NVIDIA Corporation) Hidden Apple Application Support (32 bits) (HKLM-x32\...\{FE5C2FAA-118D-4509-B51D-3F71CC9E1B3E}) (Version: 4.3 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{2937FD88-C9D6-4B82-B539-37CD0A572F42}) (Version: 4.3 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{2E4AF2A6-50EA-4260-9BA4-5E582D11879A}) (Version: 9.3.0.15 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Arma 3 (HKLM\...\Steam App 107410) (Version: - Bohemia Interactive) Avast Browser Cleanup (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\Avast Browser Cleanup) (Version: 12.1.2272.125 - AVAST Software) Batch Converter Plug-In (HKLM-x32\...\{11BEA44C-BCFE-405E-9C76-33EF407A4354}) (Version: 4.0.4 - Screaming Bee) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.25.1378 - Bitdefender) Bitdefender Internet Security 2016 (HKLM\...\Bitdefender) (Version: 20.0.25.1378 - Bitdefender) Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Call of Duty: Black Ops III (HKLM\...\Steam App 311210) (Version: - Treyarch) CCleaner (HKLM\...\CCleaner) (Version: 5.19 - Piriform) Comic Sound Pack (HKLM-x32\...\{91C78DA1-800F-4ACE-B6F6-206F7617D69E}) (Version: 2.1.1 - Screaming Bee) Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve) Crucial Storage Executive (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\Crucial Storage Executive 3.20.042015.06) (Version: 3.20.042015.06 - Crucial) Curse (HKLM-x32\...\{F36ED29E-33E1-48AB-95DA-2498AD41A9A0}) (Version: 6.0.0.0 - Curse) Deep Space Voices (HKLM-x32\...\{67CEC218-B250-4B4C-B23F-A597EC8DB153}) (Version: 3.3.1 - Screaming Bee) DERBI salvapantallas ScreenSaver (HKLM-x32\...\DERBI salvapantallas.scr) (Version: - ) DJ Streaming Plug-In (HKLM-x32\...\{956F54F5-0AA4-441D-8933-7B45F4F56F74}) (Version: 4.3.0 - Screaming Bee) Dofus (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\2744A393-554C-4E35-A24F-DEF0392B4484-2) (Version: - Ankama) Dofus Beta (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\1D98FB2F-73F1-419A-A159-521B0F645CFB-2) (Version: - Ankama) Dragonica version 0.915.0 (HKLM-x32\...\{18066704-D2D7-4CFE-A3FE-0613B130AD4F}_is1) (Version: 0.915.0 - Dragonica.fr) Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 11.10 - Emsisoft Ltd.) Fantasy Sound Pack (HKLM-x32\...\{B53415F5-4060-48DA-ABB8-00F768158F47}) (Version: 1.1.1 - Screaming Bee) Fantasy Voice Pack (HKLM-x32\...\{5F4C3E1F-87FC-41BD-B219-E4156BBD8AE5}) (Version: 1.3.2 - Screaming Bee) Farm Animal Sounds (HKLM-x32\...\{F290F841-044D-44EF-9E51-FFFEA7FEE2D7}) (Version: 1.1.1 - Screaming Bee) Female Voice Pack (HKLM-x32\...\{D947A225-8C23-4E52-866E-CF3967476BFC}) (Version: 3.3.2 - Screaming Bee) Furry Voices for Second Life (HKLM-x32\...\{2032DA39-C844-43AE-B638-6A4F7496686E}) (Version: 1.3.1 - Screaming Bee) Galactic Voices (HKLM-x32\...\{891D8FC9-726D-46F2-ADC0-E060A6EB1DC3}) (Version: 1.3.1 - Screaming Bee) Garry's Mod (HKLM\...\Steam App 4000) (Version: - Facepunch Studios) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 52.0.2743.116 - Google Inc.) Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.31.1000 - Intel Corporation) InterActual Player (HKLM-x32\...\InterActual Player) (Version: - ) iTunes (HKLM\...\{A31C5565-90D9-4615-AE13-94D86C3836C7}) (Version: 12.3.3.17 - Apple Inc.) Jokers (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\Jokers) (Version: - ) Logiciel pour périphérique à chipset Intel® (x32 Version: 10.0.24 - Intel(R) Corporation) Hidden M.M.O.TE (HKLM\...\{00BBCDAA-659F-4EEC-9A68-A541D349977F}) (Version: 7.0.43.0 - Mad Catz Inc) M.M.O.TE Game Profiles (HKLM-x32\...\{BD5A801B-7F3C-432D-8F12-5083FA186F37}) (Version: 1.0.0.0 - Mad Catz Inc) Male Voice Pack (HKLM-x32\...\{2CC32E0E-9A10-4BCC-94F0-614F85375F59}) (Version: 1.3.1 - Screaming Bee) Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: - ) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: - ) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: - ) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Mises à jour NVIDIA 2.11.4.0 (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Modern War Sounds (HKLM-x32\...\{A514E94F-C436-44C3-A1E9-1F58CD352669}) (Version: 1.0.1 - Screaming Bee) MorphVOX Pro (HKLM-x32\...\{1DDBB040-3BEB-4057-90BB-B38B5E081D1B}) (Version: 4.3.21 - Screaming Bee) MorphVOX Pro (HKLM-x32\...\{4bfc0d50-0417-46a0-ab1e-475fb1a90916}) (Version: 4.4.17.22603 - Screaming Bee) MorphVOX Pro (x32 Version: 4.4.17.22603 - Screaming Bee) Hidden MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD) NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{200F4AEE-982C-48EA-AC85-EF36FEB662C2}) (Version: 1.0.0.34 - NETGEAR) NETGEAR A6210 Genie (HKLM-x32\...\InstallShield_{CBFDA180-F247-4C51-9B2D-B3A7E34666C9}) (Version: 1.0.0.32 - NETGEAR) NETGEAR A6210 Genie (x32 Version: 1.0.0.34 - NETGEAR) Hidden NETGEAR Genie (HKLM-x32\...\NETGEAR Genie) (Version: 2.2.27.1 - NETGEAR Inc.) NETGEAR WNDA3100v2 wireless USB 2.0 adapter (HKLM-x32\...\{3C7839E7-21F4-49E0-B4D5-AC8ED818CCB0}) (Version: 2.2.0.3 - NETGEAR) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.7 - Notepad++ Team) NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation) NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation) NVIDIA Pilote 3D Vision 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.54 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation) NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation) NVIDIA Pilote graphique 372.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.54 - NVIDIA Corporation) NVIDIA Son virtuel Miracast 353.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 353.62 - NVIDIA Corporation) OpenIV (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\OpenIV) (Version: 2.8.703 - .black/OpenIV Team) Panneau de configuration NVIDIA 372.54 (Version: 372.54 - NVIDIA Corporation) Hidden Personality Voices (HKLM-x32\...\{4B886E97-AF5B-46F0-9F48-6BE03149D972}) (Version: 1.0.1 - Screaming Bee) PhotoFiltre 7 (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\PhotoFiltre 7) (Version: - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games) Rust (HKLM\...\Steam App 252490) (Version: - Facepunch Studios) Sci-Fi 2 Sound Pack (HKLM-x32\...\{62DC2D57-7AB8-4181-994B-C62D55FCE6F4}) (Version: 1.3.1 - Screaming Bee) Sci-Fi Sound Pack (HKLM-x32\...\{D16C611D-CA6F-402B-9EDA-9862CF4A701B}) (Version: 1.1.1 - Screaming Bee) Sci-Fi Voice Pack (HKLM-x32\...\{BC038C91-D3C6-4E43-8439-B65976FE7937}) (Version: 1.3.1 - Screaming Bee) SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation) Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.) Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 3.11.3464.0 - Hi-Rez Studios) Special Effects Voices (HKLM-x32\...\{913C4C4F-9E3E-41A6-A614-1BDC1352A225}) (Version: 1.0.2 - Screaming Bee) Spooky Sounds (HKLM-x32\...\{F71EBF86-9A73-44C0-A674-55FA3E4A8428}) (Version: 2.1.1 - Screaming Bee) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\TeamSpeak 3 Client) (Version: 3.0.17 - TeamSpeak Systems GmbH) Translator Fun Voice Pack (HKLM-x32\...\{C39768C1-82E7-4466-8526-2D8AC44B768F}) (Version: 1.5.1 - Screaming Bee) Uplay (HKLM-x32\...\Uplay) (Version: 21.1 - Ubisoft) Voice Splicer Plug-In (HKLM-x32\...\{5A53F620-6A7A-4362-94AD-12D9FCB856E1}) (Version: 4.2.11 - Screaming Bee) Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1-2) (Version: 1.0.11.1 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.11.1 (Version: 1.0.11.1 - LunarG, Inc.) Hidden Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version: - Ubisoft) WinRAR 5.21 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH) WinSCP 5.1.8 (HKLM-x32\...\winscp3_is1) (Version: 5.1.8 - Martin Prikryl) Workplace Backgrounds (HKLM-x32\...\{13304708-E115-4044-82DA-88A6F5424359}) (Version: 1.0.0 - Screaming Bee) World of Tanks (HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812eu}_is1) (Version: - Wargaming.net) XSplit Broadcaster (HKLM-x32\...\{C044C55C-DE04-428A-B84A-F8FA1CEF081F}) (Version: 2.7.1602.2231 - SplitmediaLabs) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-2092775352-3354947105-1837627873-1002_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\kilian\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler) CustomCLSID: HKU\S-1-5-21-2092775352-3354947105-1837627873-1002_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\kilian\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler) CustomCLSID: HKU\S-1-5-21-2092775352-3354947105-1837627873-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\kilian\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\FileCoAuth.exe (Microsoft Corporation) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {07ACF83B-B967-47F7-A2E8-DB275A5F772D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION Task: {0BE98271-E51E-4023-8FA1-456927E06308} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Pas de fichier <==== ATTENTION Task: {23F31129-D6BC-4AC8-A92B-92964AF877C2} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-06-10] (Piriform Ltd) Task: {2BA6E5D1-FFD2-4E81-841B-B43FD4EC1290} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION Task: {2E83EBFA-0C3C-45E3-86FD-0EE3BFA855F3} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe Task: {3A00780F-25CA-4D6A-8B33-FB02558F9D1E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION Task: {3A4FBE50-4898-48F8-8C70-4375F51A6B8E} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {3EF05435-F8F4-4884-B8D8-905FE3F15A20} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION Task: {626804CF-1E6A-4BA4-85D3-9BF532C3F3F7} - \WPD\SqmUpload_S-1-5-21-2092775352-3354947105-1837627873-1001 -> Pas de fichier <==== ATTENTION Task: {78DBDB7D-64F9-4230-87EE-FE4276A4224A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-08-10] (Microsoft Corporation) Task: {90F00109-D714-452F-AE11-9963A69AEBE6} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\kilian\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe [2016-08-28] (Microsoft Corporation) Task: {921276ED-81A9-49F8-907C-41C17271FD2B} - System32\Tasks\avastBCLS-1-5-21-2092775352-3354947105-1837627873-1002 => C:\Users\kilian\AppData\Roaming\AVAST Software\Browser Cleanup\BCUSched.exe [2016-06-27] (AVAST Software) Task: {B74B41D4-5E48-4D25-BDFA-0F02D25B93C3} - System32\Tasks\Bitdefender Update Product Data_A17FD818A96743FAB28AC221BEB4B2C8 => C:\Program Files\Bitdefender\Bitdefender 2015\bdproductdata.exe Task: {B89394F9-8F5B-47F8-ACF1-2D82A699EFE0} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2016-04-18] (Bitdefender) Task: {B893C48B-E480-4769-B739-1FCDF0D31BB9} - System32\Tasks\Driver Booster SkipUAC (kilian) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe Task: {BE970FA4-BBCC-44E0-82E8-BEAD3E7124AE} - \WPD\SqmUpload_S-1-5-21-2092775352-3354947105-1837627873-1002 -> Pas de fichier <==== ATTENTION Task: {C520FB2F-9EB3-45A7-AE3C-F7026FFC441E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION Task: {D3025439-320A-449C-9A48-E5B7FA3E2B3D} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) Task: {DA07CDB7-1B58-4B55-BBBB-5137E7EDA32C} - System32\Tasks\avast! BCU UpdateS-1-5-21-2092775352-3354947105-1837627873-1002 => C:\Users\kilian\AppData\Roaming\AVAST Software\Browser Cleanup\BCUUpdate.exe [2015-03-18] (AVAST Software) Task: {DCBDF0A6-3385-4FDA-A049-D58901B43A4E} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION Task: {EA9F5CCC-B1E8-4A1E-A3EE-B1F4A122306C} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION Task: {F0C56C94-B62B-492F-8845-E6BB23F032F5} - \Optimize Start Menu Cache Files-S-1-5-21-2092775352-3354947105-1837627873-1001 -> Pas de fichier <==== ATTENTION Task: {F5979C59-E49A-4C56-877F-267A06529E8C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis ============================= (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\kilian\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7dc2e4d4ae6cc8f4\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=qudachmupishplalily ==================== Modules chargés (Avec liste blanche) ============== 2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-03-10 08:30 - 2013-09-03 14:29 - 00101328 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\bdmetrics.dll 2016-05-09 18:05 - 2016-05-09 18:05 - 01006336 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_004\ashttpbr.mdl 2016-05-09 18:05 - 2016-05-09 18:05 - 00541952 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_004\ashttpdsp.mdl 2016-05-09 18:05 - 2016-05-09 18:05 - 03035488 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_004\ashttpph.mdl 2016-05-09 18:05 - 2016-05-09 18:05 - 01541440 _____ () C:\Program Files\Bitdefender\Bitdefender 2016\otengines_02251_004\ashttprbl.mdl 2016-08-28 10:50 - 2016-08-11 14:27 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-03-18 22:56 - 2016-03-18 22:56 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2016-03-18 22:56 - 2016-03-18 22:56 - 01329936 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-08-28 10:51 - 2013-05-07 08:45 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\atkexComSvc.exe 2015-09-17 18:42 - 2015-09-17 18:42 - 00192232 _____ () C:\Program Files (x86)\NETGEAR\A6210\NetgearSwitchUSB.exe 2016-03-31 17:30 - 2016-06-14 22:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2015-12-16 17:51 - 2016-06-14 22:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-03-31 17:30 - 2016-06-14 22:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll 2016-03-31 17:30 - 2016-06-14 22:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2015-08-24 16:03 - 2013-11-11 15:10 - 00307928 _____ () C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvc.exe 2016-03-31 17:30 - 2016-06-14 22:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll 2016-03-31 17:30 - 2016-06-14 22:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll 2016-03-31 17:30 - 2016-06-14 22:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll 2016-02-08 22:05 - 2016-06-14 22:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll 2016-07-16 13:42 - 2016-07-16 13:42 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-08-28 11:29 - 2016-08-28 11:29 - 01864384 _____ () C:\Users\kilian\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\amd64\ClientTelemetry.dll 2016-07-16 13:42 - 2016-07-16 13:42 - 00130048 _____ () C:\WINDOWS\SYSTEM32\CHARTV.dll 2016-03-31 17:30 - 2016-06-14 22:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll 2016-03-31 17:30 - 2016-06-14 22:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll 2016-07-16 13:42 - 2016-07-16 13:42 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2015-09-18 11:03 - 2015-09-18 11:03 - 12451840 _____ () C:\Program Files\Mad Catz\M.M.O.TE\Pr0fileEditor_Forms.dll 2015-09-18 11:03 - 2015-09-18 11:03 - 00311296 _____ () C:\Program Files\Mad Catz\M.M.O.TE\fr\Pr0fileEditor_Forms.resources.dll 2015-07-18 14:36 - 2016-06-14 22:03 - 00165824 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\gamecaster64.dll 2015-07-18 14:36 - 2016-06-14 22:03 - 00861120 _____ () C:\Program Files\NVIDIA Corporation\ShadowPlay\twitchsdk64.dll 2012-10-16 15:54 - 2012-10-16 15:54 - 01041736 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe 2012-09-25 08:06 - 2012-09-25 08:06 - 00122696 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe 2015-08-24 16:03 - 2013-12-09 17:01 - 08385240 _____ () C:\Program Files (x86)\NETGEAR\WNDA3100v2\WNDA3100v2.exe 2016-08-30 08:45 - 2016-08-30 08:45 - 00071168 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2016-08-30 08:45 - 2016-08-30 08:45 - 00178176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.7.113.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 01401344 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 09761280 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 01033728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 02438144 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 04046848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Signals.dll 2016-08-28 11:44 - 2016-08-28 11:44 - 01475584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll 2016-08-28 10:51 - 2016-08-30 21:04 - 00035984 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll 2016-08-28 10:51 - 2013-05-07 08:45 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.01.02\ATKEX.dll 2015-08-24 16:03 - 2013-12-05 14:00 - 00380928 _____ () C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiLib.dll 2015-07-19 21:33 - 2016-06-14 22:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 02537472 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QtCore4.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 09814016 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QtGui4.dll 2012-05-10 04:34 - 2012-05-10 04:34 - 00011362 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\mingwm10.dll 2012-05-10 04:34 - 2012-05-10 04:34 - 00043008 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\libgcc_s_dw2-1.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00478720 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\Genie.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 01553408 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SvtNetworkTool.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 00399360 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QtXml4.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 01140224 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QtNetwork4.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00229888 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Airprint.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 01062400 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Internet.dll 2012-10-17 03:41 - 2012-10-17 03:41 - 03775488 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Map.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00500736 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_NetworkProblem.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00186368 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DragonNetTool.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 01132032 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_ParentalControl.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 08295424 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Resource.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 01188352 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_RouterConfiguration.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00088064 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\QRCode.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00641536 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Statistics.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00920064 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Ui.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00438272 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\GeniePlugin_Wireless.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 00083456 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qgif4.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 00083456 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qico4.dll 2012-05-11 08:24 - 2012-05-11 08:24 - 00287232 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\imageformats\qjpeg4.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00136704 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnosePlugin.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00150528 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\DiagnoseDll.dll 2012-09-25 08:06 - 2012-09-25 08:06 - 01233389 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\drivers\libntgr_api.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00082432 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\SVTUtils.DLL 2012-10-12 02:57 - 2012-10-12 02:57 - 00083968 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\NetcardApi.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00138752 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\airprintdll.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00702464 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_Update.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00504832 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\InnerPlugin_WirelessExport.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00116224 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupApiPlugin.dll 2012-10-12 02:57 - 2012-10-12 02:57 - 00076288 _____ () C:\Program Files (x86)\NETGEAR Genie\bin\WSetupDll.dll 2016-08-29 22:33 - 2016-08-09 01:27 - 00785920 _____ () C:\Program Files\Steam\SDL2.dll 2016-08-29 22:33 - 2015-07-02 00:06 - 04962816 _____ () C:\Program Files\Steam\v8.dll 2016-08-29 22:33 - 2016-08-23 21:33 - 02321184 _____ () C:\Program Files\Steam\video.dll 2016-08-29 22:33 - 2015-07-02 00:06 - 01556992 _____ () C:\Program Files\Steam\icui18n.dll 2016-08-29 22:33 - 2015-07-02 00:06 - 01187840 _____ () C:\Program Files\Steam\icuuc.dll 2016-08-29 22:33 - 2016-01-27 09:49 - 02549760 _____ () C:\Program Files\Steam\libavcodec-56.dll 2016-08-29 22:33 - 2016-01-27 09:49 - 00491008 _____ () C:\Program Files\Steam\libavformat-56.dll 2016-08-29 22:33 - 2016-01-27 09:49 - 00332800 _____ () C:\Program Files\Steam\libavresample-2.dll 2016-08-29 22:33 - 2016-01-27 09:49 - 00442880 _____ () C:\Program Files\Steam\libavutil-54.dll 2016-08-29 22:33 - 2016-01-27 09:49 - 00485888 _____ () C:\Program Files\Steam\libswscale-3.dll 2016-08-29 22:33 - 2016-08-23 21:33 - 00835360 _____ () C:\Program Files\Steam\bin\chromehtml.DLL 2016-08-29 22:33 - 2016-07-05 00:17 - 00266560 _____ () C:\Program Files\Steam\openvr_api.dll 2015-08-31 15:46 - 2015-08-31 15:46 - 00122880 _____ () C:\Program Files (x86)\NETGEAR\A6210\Ralink.dll 2012-11-21 19:26 - 2012-11-21 19:26 - 01204224 _____ () C:\Program Files (x86)\NETGEAR\A6210\RaWLAPI.dll 2015-08-24 16:03 - 2013-11-01 17:31 - 00278528 _____ () C:\Program Files (x86)\NETGEAR\WNDA3100v2\WifiSvcLib.dll 2016-08-29 22:33 - 2016-08-04 22:56 - 49825056 _____ () C:\Program Files\Steam\bin\libcef.dll 2014-11-10 12:12 - 2014-11-10 12:12 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2016-08-19 18:07 - 2016-08-03 02:24 - 01771336 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libglesv2.dll 2016-08-19 18:07 - 2016-08-03 02:23 - 00094024 _____ () C:\Program Files (x86)\Google\Chrome\Application\52.0.2743.116\libegl.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\Users\kilian\Desktop\FRST64 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Desktop\GPU-Z.1.10.0.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\adwcleaner_6.010 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\adwcleaner_6.010 (2).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\adwcleaner_6.010.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\avast-browser-cleanup-sfx.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\camtasia.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\CFSetup395.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Championify.Windows_Setup.1-2-7.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\chromeinstall-8u51 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\chromeinstall-8u51.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\ChromeSetup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Cities Skylines by Nicomouk9.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\CurseClientSetup (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\CurseClientSetup (2).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\CurseClientSetup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\DiscordSetup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Dragonica_Installer.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\driver_booster_setup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\EmsisoftAntiMalwareSetup_13981239.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\FRST.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\FRST64 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\FRST64.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\gfwlivesetup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\GPU-Z.1.10.0.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Hearthstone-Setup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Heroes-of-the-Storm-Setup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\InstallSmite.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\LauncherAltisLifeFrCom (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\LauncherAltisLifeFrCom.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\mbam-setup-2.2.1.1043.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\mbam-setup-cnet.35891-2.2.1.1043 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\mbam-setup-cnet.35891-2.2.1.1043.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Minecraft (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Minecraft.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\minecraft_server.1.8.7.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\MorphVOXPro4_Install-1.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\MorphVOXPro_Install-1-RN.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Non confirmé 346189.crdownload:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\npp.6.6.7.Installer.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\ob_2acf6e_zhpcleaner (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\ob_2acf6e_zhpcleaner.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\pc-decrapifier-3.0.1 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\pc-decrapifier-3.0.1 (2).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\pc-decrapifier-3.0.1.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\Photofiltre-7.1.2.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\qbittorrent_3.2.3_setup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\setup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\setup_a3launcher.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\SkypeSetup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\SteamSetup (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\SteamSetup.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\TeamSpeak3-Client-win64-3.0.17.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\UplayInstaller.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\vc_redist.x64.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\vc_redist.x86 (1).exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\vc_redist.x86.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\winrar_5-21_fr_9632_64.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\WoT_internet_install_eu.exe:BDU [0] AlternateDataStreams: C:\Users\kilian\Downloads\ZHPDiag3.exe:BDU [0] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: ========================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2013-08-22 15:25 - 2016-08-30 21:05 - 00001006 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 down.baidu2016.com 127.0.0.1 123.sogou.com 127.0.0.1 www.czzsyzgm.com 127.0.0.1 www.czzsyzxl.com 127.0.0.1 union.baidu2019.com ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg DNS Servers: 89.2.0.1 - 89.2.0.2 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\...\StartupApproved\Run: => "MouseDriver" HKLM\...\StartupApproved\Run: => "iTunesHelper" HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\StartupApproved\StartupFolder: => "Curse.lnk" HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-2092775352-3354947105-1837627873-1002\...\StartupApproved\Run: => "OneDrive" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{46D6BC5D-D7B6-4208-AEE6-155C11C95C25}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{142F1854-C6D4-4194-BB27-C9F59D863C03}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe FirewallRules: [{7734BA58-64CE-4D6E-B258-3B35A2A3E886}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe FirewallRules: [{101417B1-49D8-47C8-96DC-8A8721171F6E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2 Demo\payday2_win32_release.exe FirewallRules: [{CAB14CFB-67B0-4488-825F-E9021BD881F8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2 Demo\payday2_win32_release.exe FirewallRules: [{F0A3A90E-0983-4B23-8767-FEFBB13C9128}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Extreme Forklifting 2\ExtremeForklifting2.exe FirewallRules: [{4E58E228-4EF3-40B9-8A9C-1394419E618F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Extreme Forklifting 2\ExtremeForklifting2.exe FirewallRules: [{BB70E105-DE65-4CEB-940D-23F3FEE00879}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MXGP2 - The Official Motocross Videogame\MXGP_2X64.exe FirewallRules: [{0C75471A-CFAF-420D-833E-DCDE42488A41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MXGP2 - The Official Motocross Videogame\MXGP_2X64.exe FirewallRules: [{6F40F1BD-E060-4926-AE5D-16F6B747F574}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe FirewallRules: [{F017590D-5EF3-4D12-A09B-A9A522B315E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe FirewallRules: [{C20E3C39-985B-4E2C-8FEC-026F5699341E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe FirewallRules: [{8E8979A9-8956-4C4A-BBC6-90997586D923}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tomb Raider\TombRaider.exe FirewallRules: [{BC410B89-535C-42A2-A7C3-6C2DC8DB7E37}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{62EDA09E-3522-4AAC-9DA5-991A16454727}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{FBDDB35F-D6EA-4C10-A74B-7F981691356C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe FirewallRules: [{5B14AE36-04FE-4851-A0D6-FE0CABF47E20}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe FirewallRules: [{AEABDFEE-0DD2-4B2B-96C0-81FAE6467C67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{2D460FA5-6773-4654-802B-C58EA0C45836}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{61AA09CB-0633-4644-A28F-25D535890F4C}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe FirewallRules: [{3BED7600-0051-4A2D-BA19-95A7DD25BF63}] => (Allow) C:\Games\World_of_Tanks\worldoftanks.exe FirewallRules: [{0E73FB4C-9288-4FA1-B8F8-7A645A1FC849}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe FirewallRules: [{14D50C52-171F-4E81-AED4-904BE734100C}] => (Allow) C:\Games\World_of_Tanks\WoTLauncher.exe FirewallRules: [{7504977D-3C20-443A-ABCB-F929DD9AD2A0}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{40E26E83-20B7-445F-AAAB-71A770652033}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{14CA4462-FC74-49E6-855A-C62C7E36DB77}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{CF00BB16-3255-44BF-BD7C-0DF380A89A05}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{41950EFA-5211-40D5-96A7-2C85A4E7FB4B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [UDP Query User{6E7DE768-501D-4916-8F9F-F829304D4602}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [TCP Query User{5F8A42A0-1B4B-4C20-9CCB-9D9C9F9168DE}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [UDP Query User{DC6AC4C5-9BC6-4AFE-AAD2-2B247E7DE8EE}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [TCP Query User{BC93D369-1D35-4B19-A573-FFED3B90121F}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [{60041576-ADCB-41A3-B399-1085336B3BF2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{BFB5123F-81B5-412B-AB6E-6D862201DAB3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{D0F8E860-E988-4A3C-8AEF-B7D759D18590}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2 Demo\bin\win_x86\eurotrucks2.exe FirewallRules: [{8D64D08E-69E6-46AC-85BA-71584DEAAB76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2 Demo\bin\win_x86\eurotrucks2.exe FirewallRules: [{B63157A5-E2BB-482F-BF2C-6A7C41D84359}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe FirewallRules: [{ECEE550E-A983-4D05-B2D4-BD86D6DFFE7F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe FirewallRules: [{C1DCAE20-4665-48E2-A315-232EF6637353}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{276A11FC-1890-4634-BDC9-ADC90ED13CB2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [UDP Query User{597CDBF1-DDDC-49DA-951C-92E18D94E8D0}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{AD005A97-762D-493F-B32F-47EC74F61019}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{706E43B0-ADA3-4129-A2A9-A2B5AC07BA34}] => (Block) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [{F84676F4-25CF-4670-9FB5-18131F52BC02}] => (Block) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [UDP Query User{51A663DF-9F92-47E4-8B46-A5A1F529E5AD}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [TCP Query User{2A18D70A-CD2E-4FD0-AB14-89BB1FF15838}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe FirewallRules: [UDP Query User{53DF46EB-81BA-434B-8637-C0AEC4E38EE3}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe FirewallRules: [TCP Query User{9EB2C969-6EC0-4BE0-9BDB-BBDAFD12FB78}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe FirewallRules: [{7295924C-7B54-4B63-A941-CFE04E90646C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe FirewallRules: [{F2C08DDF-6078-49B7-8AB0-7B905ACC3433}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe FirewallRules: [UDP Query User{4CE3B104-FA5E-48EA-AA8E-541084086A8C}C:\users\kilian\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\kilian\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{6034CD7D-0B6A-4A0E-BAD7-A57A7E818D29}C:\users\kilian\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\kilian\desktop\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{01D1FBAA-504A-4043-B6B7-674B0E5A5000}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{46270856-903E-4754-A74F-6D40F3502889}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [UDP Query User{90412CC6-4CF9-48B6-B209-EAF5E559BCB5}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{EB020F5D-5739-4B69-B027-8EB90D60B361}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{EE0F644B-E131-46F1-98AC-90F814D6DB9A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{A1BF01A7-1575-4624-898A-434A9C22FD82}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{2520E2AD-24A2-4022-9517-F136EB0FF40C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{208B0A59-F743-4E05-88F8-56F87C031FA9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{D8FAAC2E-6BDD-45E2-8784-7A6A388D2D41}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{053131F9-B519-4CD6-91E7-030300695A75}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe FirewallRules: [{30107330-C84B-46CD-BDC3-04EC4C3F3C41}] => (Allow) C:\Program Files\Rockstar Games\Grand Theft Auto V\GTA5.exe FirewallRules: [{D95BF47E-1213-4A88-99DE-3BD9D5814F4C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{65AF6B55-0D28-4BE3-95C9-6C9123D8BCA6}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{88D4F684-6851-42DC-BDBF-8EBD02AB2BCF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{0B6DEFAA-A9B0-4ADF-89FB-5757319B87BE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6AFCAF46-3B24-4FD4-96E3-F49519D64DDE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{DC511036-BBE8-4A81-B347-F56CAB8BE38A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{741F1904-A61A-40D4-9CD1-A52A3C8224DD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe FirewallRules: [{656EDA13-FB83-4307-92E6-CBC2FDB5641F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe FirewallRules: [{46B9FF59-27AA-4999-92EA-24FC812FBA98}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe FirewallRules: [{AD3B3051-2C48-4844-BC0E-223C94F7C2FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Rust\Rust.exe FirewallRules: [{E6646CB4-726A-47C2-8BFA-31B64749A64A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{C97F1FEA-A69A-4867-B1B6-B54F4069880A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cities_Skylines\Cities.exe FirewallRules: [{28319CDD-2C54-42E5-9160-1D619B6F0283}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops III Beta\BlackOps3.exe FirewallRules: [{EEC618FE-D728-452B-B8C1-CFEDE4C137CA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops III Beta\BlackOps3.exe FirewallRules: [{6BA7512C-996B-446E-91BE-D1254F272425}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe FirewallRules: [{0A7899C7-8DD9-40FB-BF03-FE819DE7B885}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe FirewallRules: [{427712B1-2EFE-47AC-996A-6778841EB3F1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMCanyon\ManiaPlanetLauncher.exe FirewallRules: [{5B202C26-9FEC-45D1-B163-DF1CE848047C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMCanyon\ManiaPlanetLauncher.exe FirewallRules: [{AE451AFF-1CC7-4FB1-83AA-09D7A43FD53F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMCanyon\ManiaPlanet.exe FirewallRules: [{068BCCD8-C24E-411A-B487-9F0A3B386746}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_TMCanyon\ManiaPlanet.exe FirewallRules: [{B7406BD9-81B7-48AF-885B-A0CBB631B765}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{41574A0B-B113-4D2C-A757-8491B8BA9DB2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe FirewallRules: [{E1852CEB-4CC3-4C41-87D7-0FA4B3A078D3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{513437CE-7C9B-4A11-8F19-5B497777E26F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{0D699EEE-CA40-4994-BB06-9E4286DD42E5}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{395E92E1-0081-4F71-B19A-5C248BA4ABE6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [TCP Query User{D39CFF39-3BB8-4A7D-A368-B9487BB23BDB}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [UDP Query User{62A743CA-629D-47AB-B8AA-204DF49A3A5F}C:\program files (x86)\netgear genie\bin\netgeargenie.exe] => (Allow) C:\program files (x86)\netgear genie\bin\netgeargenie.exe FirewallRules: [TCP Query User{622EDF25-A870-4B30-95D5-F998D9A327EF}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [UDP Query User{2821096C-4273-435D-B9AC-EF4E1F7E1BED}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe FirewallRules: [{FB1CDFA9-F1CE-42CE-9DBA-629BAD475961}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Robocraft\Robocraft.exe FirewallRules: [{20A800C1-E255-474D-BE5E-9D144F805137}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Robocraft\Robocraft.exe FirewallRules: [{E5EF673F-9308-4817-926A-D161FBFB360F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2\arma2.exe FirewallRules: [{4D656882-5ADA-4760-8E6A-ECD30C349CBA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 2\arma2.exe FirewallRules: [TCP Query User{EC8B9C52-7922-4A89-98D4-537C76AA2CA2}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe FirewallRules: [UDP Query User{18E7BB7F-563E-4FFE-B798-08617189BFC2}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe FirewallRules: [{14EAD725-9DDD-481B-B730-72A8611C1BBB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Subnautica\Subnautica.exe FirewallRules: [{1129F4FD-53CC-494E-A85C-2803EA28B74F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Subnautica\Subnautica.exe FirewallRules: [{61DC0238-8E75-4FA6-8629-F8BE6235AFCA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe FirewallRules: [{C19CCECF-1ADC-4713-97DC-2ED0F915BB1E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe FirewallRules: [{8B060156-890C-44AC-B46E-7E0970575F52}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe FirewallRules: [{E290E769-3D7F-41F9-B5A3-7396C2967C3C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warface\live\nw.exe FirewallRules: [{EFF323B9-CCE4-4C4C-9A4D-2736EAD9152E}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{5629520A-9A50-4650-94D8-8BB8A1EA3BC4}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{F3D82F6B-7AAA-4E78-8A4C-93C6DBD3BE1A}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe FirewallRules: [{AC09F147-B5B8-4878-9146-632A910AB42C}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe FirewallRules: [{0C2AD569-CD71-4DE2-A849-07D2C609AA9B}] => (Allow) C:\Program Files\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{C19826D3-636A-4476-B6A0-2FB645F318B8}] => (Allow) C:\Program Files\Steam\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{0AFAF2E4-3CF4-4492-9091-7242E2D484B3}] => (Allow) C:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{B626BA6D-3651-45D7-AB0A-C190E90A455E}] => (Allow) C:\Program Files\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{EE65FD8E-B607-43FA-A6F1-1063D63C0BD1}] => (Allow) C:\Program Files\Steam\steamapps\common\Rust\Rust.exe FirewallRules: [{F8C744FD-4DF8-490A-A4F5-9E476E2AB893}] => (Allow) C:\Program Files\Steam\steamapps\common\Rust\Rust.exe FirewallRules: [{40441787-A4F4-40E8-99CF-3721123381F5}] => (Allow) C:\Program Files\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe FirewallRules: [{EA25971E-A688-40C4-8967-DB9545D5E75E}] => (Allow) C:\Program Files\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe FirewallRules: [{7FB49B20-4C3A-4A5B-903E-3510F665D28B}] => (Allow) C:\Program Files\Steam\steamapps\common\Arma 3\arma3launcher.exe FirewallRules: [{4FEB2754-F02F-4C71-A844-59EF3D1DAA2E}] => (Allow) C:\Program Files\Steam\steamapps\common\Arma 3\arma3launcher.exe ==================== Points de restauration ========================= 28-08-2016 13:27:54 Windows Update 30-08-2016 16:32:00 Restore Point Created by FRST ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: The Broadcom 802.11 Network Adapter provides wireless local area networking. Description: NETGEAR WNDA3100v2 N600 Wireless Dual Band USB Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Netgear Service: BCMH43XX Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (08/30/2016 06:19:48 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Explorer.EXE, version : 10.0.14393.0, horodatage : 0x57899981 Nom du module défaillant : windows.immersiveshell.serviceprovider.dll, version : 10.0.14393.0, horodatage : 0x57899873 Code d’exception : 0x80270233 Décalage d’erreur : 0x0000000000033c25 ID du processus défaillant : 0x1dd0 Heure de début de l’application défaillante : 0x01d202da42bea134 Chemin d’accès de l’application défaillante : C:\WINDOWS\Explorer.EXE Chemin d’accès du module défaillant: C:\Windows\System32\windows.immersiveshell.serviceprovider.dll ID de rapport : 9ef30a77-3185-4434-9a0e-b6e5876b0d76 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (08/30/2016 04:32:01 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft. System Error: Accès refusé. . Error: (08/30/2016 04:17:21 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide . Opération : Opération asynchrone en cours d’exécution Contexte : État actuel: DoSnapshotSet Error: (08/30/2016 04:16:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer. Details: AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft. System Error: Accès refusé. . Error: (08/30/2016 04:16:37 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005, Accès refusé. . Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur. Opération : Données du rédacteur en cours de collecte Contexte : ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220} Nom du rédacteur: System Writer ID d’instance du rédacteur: {66c36e65-572a-432f-89c8-f0a1f5f37f26} Error: (08/30/2016 02:55:16 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme BlackOps3.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 444 Heure de début : 01d202bbb3d4449c Heure de fin : 4294967295 Chemin d'accès de l'application : C:\Program Files\Steam\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe ID de rapport : f8f94cb0-6eb0-11e6-830b-f079595b428d Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (08/30/2016 02:54:07 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PCGAMERKILIAN) Description: Échec de l’activation de l’application Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI avec l’erreur : -2147023673 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (08/30/2016 02:54:06 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PCGAMERKILIAN) Description: Échec de l’activation de l’application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App avec l’erreur : -2147023673 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (08/30/2016 02:49:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PCGAMERKILIAN) Description: Échec de l’activation de l’application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App avec l’erreur : -2147023673 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (08/30/2016 02:49:04 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PCGAMERKILIAN) Description: Échec de l’activation de l’application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App avec l’erreur : -2147023673 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Erreurs système: ============= Error: (08/30/2016 09:08:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Protection logicielle n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/30/2016 09:08:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Protection logicielle. Error: (08/30/2016 09:05:12 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} et l’APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (08/30/2016 09:03:34 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: AUTORITE NT) Description: 32212256844760404313041104 Error: (08/30/2016 09:03:56 PM) (Source: EventLog) (EventID: 6008) (User: ) Description: L’arrêt système précédant à 20:18:00 le ‎30/‎08/‎2016 n’était pas prévu. Error: (08/30/2016 08:00:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service Hi-Rez Studios Authenticate and Update Service s’est terminé de façon inattendue pour la 1ème fois. Error: (08/30/2016 08:00:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Windows Search s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 30000 millisecondes : Redémarrer le service. Error: (08/30/2016 08:00:24 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Apple Mobile Device Service s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 60000 millisecondes : Redémarrer le service. Error: (08/30/2016 08:00:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service MBAMService s’est terminé de façon inattendue pour la 1ème fois. Error: (08/30/2016 08:00:24 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service Intel(R) Management and Security Application Local Management Service s’est terminé de façon inattendue pour la 1ème fois. CodeIntegrity: =================================== Date: 2016-08-30 21:10:56.910 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-08-30 21:09:57.723 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-08-30 21:09:48.789 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-08-30 21:08:39.077 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-30 21:07:55.647 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. Date: 2016-08-30 21:04:56.928 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\NisSrv.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-08-30 20:03:00.479 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. Date: 2016-08-30 19:26:02.888 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. Date: 2016-08-30 19:18:01.612 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. Date: 2016-08-30 19:02:59.825 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Emsisoft Anti-Malware\a2hooks64.dll that did not meet the Windows signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-4690K CPU @ 3.50GHz Pourcentage de mémoire utilisée: 45% Mémoire physique - RAM - totale: 8134.31 MB Mémoire physique - RAM - disponible: 4428.5 MB Mémoire virtuelle totale: 24134.31 MB Mémoire virtuelle disponible: 19617.58 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:930.73 GB) (Free:440.37 GB) NTFS Drive d: (Disk1) (CDROM) (Total:7.95 GB) (Free:0 GB) UDF ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: B7F2629B) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ==================== Fin de Addition.txt ============================