Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 17-09-2017 01 Exécuté par alain (18-09-2017 11:59:10) Exécuté depuis C:\Users\alain\Desktop Windows 10 Home Version 1703 (X64) (2017-06-03 09:05:24) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-4048815811-3365332052-2349944975-500 - Administrator - Disabled) alain (S-1-5-21-4048815811-3365332052-2349944975-1001 - Administrator - Enabled) => C:\Users\alain DefaultAccount (S-1-5-21-4048815811-3365332052-2349944975-503 - Limited - Disabled) Invité (S-1-5-21-4048815811-3365332052-2349944975-501 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Protection antivirus et antispyware McAfee (Disabled - Up to date) {DA9F8ED0-D0DE-39CC-F55A-51AB4CC1B556} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Protection antivirus et antispyware McAfee (Disabled - Up to date) {61FE6F34-F6E4-3642-CFEA-6AD93746FFEB} FW: Pare-feu McAfee (Disabled) {E2A40FF5-9AB1-3894-DE05-F89EB212F22D} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.7.157 - Adobe Systems, Inc.) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 4.0.0.0 - AppEx Networks) Audacity 1.3.14 (Unicode) (HKLM-x32\...\Audacity 1.3 Beta (Unicode)_is1) (Version: - Audacity Team) Auslogics Disk Defrag (HKLM-x32\...\{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1) (Version: version 3.1 - Auslogics Software Pty Ltd) Avira (HKLM-x32\...\{1B48601D-0537-4589-9952-A8989BE8249A}) (Version: 1.2.96.16095 - Avira Operations GmbH & Co. KG) Hidden Avira (HKLM-x32\...\{7c01a3b4-3454-446e-8473-8a245f962c28}) (Version: 1.2.96.16095 - Avira Operations GmbH & Co. KG) Bejeweled 3 (HKLM-x32\...\WTA-8635389c-fa30-469f-bff3-c7130cc7b8a6) (Version: 2.2.0.95 - WildTangent) Hidden Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Build-a-lot (HKLM-x32\...\WTA-00229be4-6f86-44cc-a1be-e847bba82636) (Version: 3.0.2.59 - WildTangent) Hidden Building the Great Wall of China Collector's Edition (HKLM-x32\...\WTA-f24b856b-56ab-48a5-a502-9ab2eae0d0c7) (Version: 3.0.2.48 - WildTangent) Hidden Catalyst Control Center Next Localization BR (HKLM\...\{3A8008D5-C834-1CA9-68CB-E9F49F0AB120}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{884596CF-79B1-13A0-7334-563BB3A75F45}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{223D250A-AABB-A9AA-7D07-7FA086D7BF62}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{58714532-951F-0C3A-8860-2ED7411C6D85}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{1D89886C-1BC7-978A-7790-BDF741552029}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{C2E207A0-6375-140A-3170-50737EB32D29}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{FF8A9A91-1E72-EE4A-04DA-6E7F65CB626D}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{78B5E5BC-C2B2-3439-0750-C9FC7AAE173B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{28B38E4C-1FCC-0AB9-F2CE-7079DF8CF8A5}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{6CD61388-4F40-E91A-17A1-E821F0BB92E1}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{F38E5A65-9C76-3757-9D69-672FACA088D4}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{994B3C1F-F48C-B29E-D88A-06322D70B45C}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{7C42C52E-DFF2-8BD6-5134-DCB5FBB8A5EE}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{3372CE65-1178-B53F-C228-254C7F7F118F}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{80C20F9B-C28F-E3ED-726C-86BFC24EEE3B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{16FC5B97-5AC3-056E-1A1B-FF36B790575E}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{D955A619-B0BA-FB07-0590-675FA7A127CF}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{686AF1D4-4D23-8115-9968-FE32775067C8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{168E9C24-F28F-D630-74BB-4F4D66CFC871}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{66F96B6D-33A7-938C-2910-CA9C76E00742}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{59546E97-8B2F-0F51-5191-BF19438164A8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden CCleaner (HKLM\...\CCleaner) (Version: 5.29 - Piriform) Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.) Complément Microsoft Enregistrer en tant que PDF ou XPS pour programmes Microsoft Office 2007 (HKLM-x32\...\{90120000-00B2-040C-0000-0000000FF1CE}) (Version: 12.0.4518.1014 - Microsoft Corporation) Crazy Chicken Soccer (HKLM-x32\...\WTA-dfa05c8e-abc8-4e47-881a-2f2dffce057f) (Version: 2.2.0.110 - WildTangent) Hidden CyberLink PhotoDirector (HKLM\...\{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6713 - Nom de votre société) Hidden CyberLink PhotoDirector (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6713 - CyberLink Corp.) CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.1.5418 - CyberLink Corp.) CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4.4301 - Nom de votre société) Hidden CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4.4301 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\{A9CEDD6E-4792-493e-BB35-D86D2E188A5A}) (Version: 6.0.1.4301 - CyberLink Corp.) Delicious: Emily's Wonder Wedding Premium Edition (HKLM-x32\...\WTA-b8eda24d-abb0-42fe-a23a-42863dc9a1f4) (Version: 3.0.2.59 - WildTangent) Hidden DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden Dropbox (HKLM-x32\...\Dropbox) (Version: 34.4.22 - Dropbox, Inc.) Dropbox 25 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 1.0.8.2 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.59.1 - Dropbox, Inc.) Hidden Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{7BAC3F7A-B963-468E-982E-B5608A87408D}) (Version: 4.4.4 - SEIKO EPSON CORPORATION) EPSON SX420W Series Printer Uninstall (HKLM\...\EPSON SX420W Series) (Version: - SEIKO EPSON Corporation) Evernote v. 5.8.6 (HKLM-x32\...\{FEDC7C10-EF67-11E4-9B07-00505695D7B0}) (Version: 5.8.6.7519 - Evernote Corp.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 60.0.3112.113 - Google Inc.) Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden HP Documentation (HKLM\...\HP_Documentation) (Version: - HP) HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8293.5264 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{61EB474B-67A6-47F4-B1B7-386851BAB3D0}) (Version: 8.4.19.3 - Hewlett-Packard Company) HP Support Solutions Framework (HKLM-x32\...\{87C5FC04-4C14-41A4-9C45-A5A0A6554E82}) (Version: 12.7.27.15 - Hewlett-Packard Company) HP System Event Utility (HKLM-x32\...\{8B4EE87E-6D40-4C91-B5E8-0DC77DC412F1}) (Version: 1.4.1 - Hewlett-Packard Company) HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - Hewlett-Packard Company) HP Wireless Button Driver (HKLM-x32\...\{EFA01423-3857-468C-B7B6-F30AA08E50BC}) (Version: 1.1.5.1 - Hewlett-Packard Company) Jeux WildTangent (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent) Jewel Match 3 (HKLM-x32\...\WTA-6ffbeb99-f633-4203-81a8-35ca6cdeec4a) (Version: 2.2.0.97 - WildTangent) Hidden Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes) MediaInfo 0.7.80 (HKLM\...\MediaInfo) (Version: 0.7.80 - MediaArea.net) Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProplusRetail - fr-fr) (Version: 16.0.8431.2079 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation) Module de compatibilité pour Microsoft Office System 2007 (HKLM-x32\...\{90120000-0020-040C-0000-0000000FF1CE}) (Version: 12.0.6514.5001 - Microsoft Corporation) OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Nom de votre société) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.8326.2076 - Microsoft Corporation) Hidden PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.317.1 - Tracker Software Products Ltd) PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.23.2-r122830-release - Plays.tv, LLC) Polar Bowler 1st Frame (HKLM-x32\...\WTA-fe889a14-edf1-47f6-aa22-365d77a985a6) (Version: 3.0.2.59 - WildTangent) Hidden Ranch Rush 2 - Premium Edition (HKLM-x32\...\WTA-ee2eccc2-ebb0-44be-978a-e5c40ca8eb76) (Version: 2.2.0.97 - WildTangent) Hidden Raptr (HKLM-x32\...\Raptr) (Version: 5.2.6-r115593-release - Raptr, Inc) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.3.370.87 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.1.505.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7730 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.58 - REALTEK Semiconductor Corp.) Runefall (HKLM-x32\...\WTA-a5895498-eb1f-46c9-8d1f-ff0f28f23e17) (Version: 3.0.2.126 - WildTangent) Hidden Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.61.0 - Samsung Electronics Co., Ltd.) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Skype™ 7.29 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.29.102 - Skype Technologies S.A.) Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) Hidden Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.1.17054.16 - Samsung Electronics Co., Ltd.) SumatraPDF (HKLM-x32\...\SumatraPDF) (Version: 2.3.2 - Krzysztof Kowalczyk) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.11.45 - Synaptics Incorporated) Tablette Wacom (HKLM\...\Wacom Tablet Driver) (Version: 6.3.21-10 - Wacom Technology Corp.) TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.82216 - TeamViewer) Trinklit Supreme (HKLM-x32\...\WTA-7e9f2c70-cf17-4ce2-83bf-e991a356eee7) (Version: 2.2.0.98 - WildTangent) Hidden Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden Vacation Quest™ - Australia (HKLM-x32\...\WTA-845584a7-caf7-441e-b5ad-44548415cd18) (Version: 3.0.2.59 - WildTangent) Hidden VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN) Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1) (Version: 1.0.3.1 - LunarG, Inc.) WebTablet FB Plugin 32 bit (HKLM-x32\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) WebTablet FB Plugin 64 bit (HKLM\...\Wacom WebTabletPlugin for Internet Explorer and Netscape) (Version: 2.1.0.7 - Wacom Technology Corp.) Wedding Dash (HKLM-x32\...\WTA-7ada74a5-f871-41e8-b0b3-96b282bdafb7) (Version: 2.2.0.95 - WildTangent) Hidden WildTangent Games App pour HP (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.0.11.16 - WildTangent) Hidden Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation) WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH) WPS Office (9.1.0.5113) (HKLM-x32\...\Kingsoft Office) (Version: 9.1.0.5113 - Kingsoft Corp.) Youda Jewel Shop (HKLM-x32\...\WTA-fcdcae05-5b45-4341-a7b0-f8b66ed41df1) (Version: 3.0.2.51 - WildTangent) Hidden ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers: [EldosIconOverlay-cbfs6] -> {1CC65DB6-5C6B-4DA1-B1FB-5CE069BD77FB} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-21] (/n software, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [EldosIconOverlay-cbfs6] -> {1CC65DB6-5C6B-4DA1-B1FB-5CE069BD77FB} => C:\WINDOWS\system32\cbfsMntNtf6.dll [2016-09-21] (/n software, Inc.) ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-11-18] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-11-18] (Alexander Roshal) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes) ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2016-07-18] (Advanced Micro Devices, Inc.) ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.18.0.dll [2017-09-14] (Dropbox, Inc.) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamext.dll [2016-03-10] (Malwarebytes) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2017-09-14] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2015-11-18] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2015-11-18] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0278519B-FCF6-4717-9484-7C0A730F23F1} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent Task: {037872AB-711C-4900-81BC-112A8D904745} - System32\Tasks\{2A972744-8703-4783-9F64-5AB2F920FEDE} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/4.2.0.169.259/fr/abandoninstall?source=lightinstaller&page=tsMain&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;ienotdefaultbrowser2 Task: {1FAA85FF-8771-4604-9AFE-EF45026B3BD3} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-08-15] () Task: {31AA891B-5EEA-4BD1-A21D-3FAC6090A0B0} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-09-13] (Microsoft Corporation) Task: {34571EB9-61E5-4C8D-B138-6D30503FF881} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-12] (Google Inc.) Task: {371B651F-C199-4E5E-B171-58B040142937} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-04-12] (Google Inc.) Task: {38D68A8E-A81B-4F5B-BFEF-C32B7E48E6EC} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {428A56C5-3692-456E-AE47-F8CAEDA92C95} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe Task: {44A980E2-7BC9-4E23-BD33-FF38FF0AD553} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-12-07] (HP Inc.) Task: {456E654E-046E-417A-B17C-8095678AC0FE} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [2016-04-19] (Tracker Software Products (Canada) Ltd.) Task: {481D7B26-78B8-4325-A164-A883C63ABA51} - System32\Tasks\HPCeeScheduleForalain => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard) Task: {58F597B3-4D2E-49CB-95AA-A178438CA002} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2015-06-19] () Task: {61B98625-D6BE-4E27-B5F8-407E72C80D9A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.) Task: {6F9F5FAE-20D7-4DD3-8EA2-1A436F3631F7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-09-01] (HP Inc.) Task: {7333504B-0853-4165-9CF1-79717EEDC186} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-09-13] (Microsoft Corporation) Task: {825A46EA-108B-4725-AA89-BEBC3C8EDCCE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-08-15] () Task: {86949E3D-A2DD-412D-9F32-C2C35EAB9B3F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation) Task: {96530770-F2F2-4C74-867D-AF11E1131DD3} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-09] (Dropbox, Inc.) Task: {A2D73ECD-5DC2-4A1C-8FBB-DD0A186C3F5D} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [2016-07-18] (Advanced Micro Devices, Inc.) Task: {A6B97B05-546A-4500-BC16-0F7FFE9759F2} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {A99576B5-A2A6-42B6-BE11-79501BECD400} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.) Task: {ACCD795D-441C-4EE1-9646-A3C03D9668D1} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-04-11] (Piriform Ltd) Task: {BA96EC9B-845E-4E34-8278-74AD2BB54852} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2015-12-09] (Dropbox, Inc.) Task: {C2202ADB-1158-426E-B7DC-E76D22724CB0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-08-14] (HP Inc.) Task: {C58D9DE6-42A6-4307-8A78-CAC2B9C68CCE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-08-14] (HP Inc.) Task: {E898A4CB-5C2F-4AF8-88E2-39B8386C66B5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-04-07] (HP Inc.) Task: {E96C9E65-039F-47C1-8FBA-42376F75EA7A} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.) Task: {EEEB3AD5-0A7C-45D2-B0A3-CB449F92B747} - System32\Tasks\{EE24B631-8D95-460A-9A30-AB093039B7AC} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/4.2.0.169.259/fr/abandoninstall?source=lightinstaller&page=tsProblems&LastError=404&installinfo=google-toolbar:notoffered;ienotdefaultbrowser2,google-chrome:notoffered;ienotdefaultbrowser2 Task: {FFDFB65F-4584-4231-A225-A650A458FF82} - System32\Tasks\{B58AA6AE-4EBD-4654-A7DB-06E5EED325EE} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/7.21.0.100/fr/abandoninstall?source=lightinstaller&page=tsMain (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForalain.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2015-09-12 12:55 - 2014-04-14 17:59 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-04-15 20:23 - 2017-04-05 20:21 - 001658320 _____ () C:\Program Files\Tablet\Wacom\libxml2.dll 2017-03-18 21:59 - 2017-03-20 06:11 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2015-06-25 16:34 - 2015-06-25 16:34 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll 2015-06-25 16:37 - 2015-06-25 16:37 - 000739840 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll 2015-06-25 16:35 - 2015-06-25 16:35 - 000014336 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll 2015-06-25 16:38 - 2015-06-25 16:38 - 000071168 _____ () C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll 2015-06-25 15:53 - 2015-06-25 15:53 - 000011776 _____ () C:\Program Files\AMD\CNext\CNext\libEGL.dll 2015-06-25 15:51 - 2015-06-25 15:51 - 002013696 _____ () C:\Program Files\AMD\CNext\CNext\libGLESv2.dll 2016-07-18 16:48 - 2016-07-18 16:48 - 000138752 _____ () C:\Program Files\AMD\ATI.ACE\A4\AdaptiveSleepService.exe 2017-09-14 08:53 - 2017-09-14 08:53 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2017-09-14 08:53 - 2017-09-14 08:53 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll 2017-09-14 08:53 - 2017-09-14 08:53 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.21.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll 2017-09-12 08:53 - 2017-09-12 08:53 - 000020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2017-09-12 08:53 - 2017-09-12 08:53 - 029621760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2017-08-18 08:24 - 2017-08-18 08:25 - 000358912 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll 2017-08-18 08:24 - 2017-08-18 08:25 - 002536448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2017-09-12 08:53 - 2017-09-12 08:53 - 020305920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2017-08-18 08:24 - 2017-08-18 08:25 - 002415104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2017-09-12 08:53 - 2017-09-12 08:53 - 003028992 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2017-06-03 10:45 - 2017-06-03 10:45 - 003139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2017-06-03 10:47 - 2017-06-03 10:47 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll 2017-08-18 08:25 - 2017-08-18 08:25 - 001370112 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2017-05-10 21:43 - 2017-05-10 21:43 - 000033280 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\cx_Logging.cp35-win32.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 000103424 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 000111616 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes35.dll 2017-05-10 21:43 - 2017-05-10 21:43 - 000041984 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 000405504 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom35.dll 2017-05-10 21:43 - 2017-05-10 21:43 - 000173568 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 001934336 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 000077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 001780736 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 000505856 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd 2017-05-10 21:43 - 2017-05-10 21:43 - 003812864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd 2015-04-30 12:17 - 2015-04-30 12:17 - 000321032 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll 2015-04-30 12:17 - 2015-04-30 12:17 - 000439304 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll 2017-08-28 20:41 - 2017-08-23 08:31 - 002881368 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libglesv2.dll 2017-08-28 20:41 - 2017-08-23 08:31 - 000086360 _____ () C:\Program Files (x86)\Google\Chrome\Application\60.0.3112.113\libegl.dll 2017-08-23 09:24 - 2017-08-23 09:24 - 000094920 _____ () C:\Program Files (x86)\Microsoft Office\Root\Office16\officevoicemanager.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2015-07-10 12:04 - 2015-07-10 12:02 - 000000824 __RSH C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\alain\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\img1.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == HKLM\...\StartupApproved\Run32: => "PowerDVD14Agent" HKLM\...\StartupApproved\Run32: => "Dropbox" HKLM\...\StartupApproved\Run32: => "PlaysTV" HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-4048815811-3365332052-2349944975-1001\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{2C1001E9-9126-4814-8867-882AE8E9EF38}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{EE746276-82B4-46F2-AE88-1BC2615AE1B3}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{213F62FF-6277-4EB3-81F5-D9877A625D56}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{4C0A59BE-CDF9-45C5-B4B7-866A4AB8F35E}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{DF7694CC-2D7C-4EF7-B6EC-822A3B21F98A}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{CA31AEB2-04F1-4B91-8F75-B23DE18F07E3}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{1A706339-1033-4B26-B729-7D1B800AE32D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{9565285F-3950-4D03-8C2C-0A7CA337CB6D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{2D6EFBA0-CFEF-4FCF-833A-9CC9DC82EBF7}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{741B328C-37D3-489E-BF02-74C50A08D2E4}] => (Allow) c:\Program Files\CyberLink\PowerDirector12\PDR10.EXE FirewallRules: [{8CAD61E4-2D7F-46DF-B12C-C2D57153FEF6}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe FirewallRules: [{2C683F07-2C35-4925-A6FF-BDED335F9648}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe FirewallRules: [{303ADAED-1268-4A58-8CF6-5D5FE24FA1BC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe FirewallRules: [{E8CD2A97-5691-447A-A2D3-DE0E7A0DB9AC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe FirewallRules: [{23951466-0C81-4784-8763-FC0F80D26A8C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe FirewallRules: [{15BF95C4-0A3B-46C7-B454-317ADC1D8A2E}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{36FE1A22-9D6B-495E-B6FA-E30B8ADB76F6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{8FE0DD01-B036-4BC9-BD48-4C475838523D}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{7FC82CA6-1787-428D-A1BD-3E7924207C0B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{DD8BEEBE-F145-476F-BA95-64CE64533986}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{7B2A3E2B-75CE-4831-9E8B-073EDACAB994}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{8A7F2489-3F0A-4645-933B-8F2980DFC3AF}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe FirewallRules: [{407ED156-992D-427B-AE36-2BABF0752B54}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [{AD0462E2-9D21-488C-BF6E-721BF6BDBE8A}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe FirewallRules: [TCP Query User{A80137C5-6CBA-412B-A1EC-D75758F79773}C:\Users\alain\Desktop\pre-scan_6_04.04.2016.1.exe] => (Allow) C:\Users\alain\Desktop\pre-scan_6_04.04.2016.1.exe FirewallRules: [UDP Query User{8086F52E-78FA-489A-B2C4-2651DAE624EB}C:\Users\alain\Desktop\pre-scan_6_04.04.2016.1.exe] => (Allow) C:\Users\alain\Desktop\pre-scan_6_04.04.2016.1.exe FirewallRules: [TCP Query User{17603E79-B324-4CFA-B345-4226CC65E6FE}C:\users\alain\desktop\pre-scan_6_04.04.2016.1.exe] => (Block) C:\users\alain\desktop\pre-scan_6_04.04.2016.1.exe FirewallRules: [UDP Query User{A36F92E8-6E29-4AE8-BB28-04DC37701928}C:\users\alain\desktop\pre-scan_6_04.04.2016.1.exe] => (Block) C:\users\alain\desktop\pre-scan_6_04.04.2016.1.exe FirewallRules: [{B1DFCF03-431F-44F5-9CB8-B154B80CA747}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{912C784D-A0BB-4F9F-9C29-7DD6A12DB736}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{09B5645A-F0DC-4B33-A086-DC2C1005D457}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{7D6F18BE-3F07-433B-8BF3-3E8EE3D2C77C}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{784510DB-B434-41A5-B529-3E3542581AEE}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{710AE317-9BAE-4081-B49A-4DC15CEBB2B5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{78C3342E-394B-4350-B568-BD9C6B68D1DD}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{DBB8B0E9-953B-464C-805C-1FC8C981BB32}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{C3681261-04F8-4ED2-97DE-67BC6C4AB54A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{E6BF194B-6800-4F83-86FE-1FD1B9A5C61F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{8917FB5C-01A3-4361-9B29-B7B2A136030B}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe ==================== Points de restauration ========================= 11-09-2017 10:56:30 Point de contrôle planifié 17-09-2017 10:29:10 Installed Epson Software Updater ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (09/18/2017 09:05:38 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante svchost.exe, version : 10.0.15063.0, horodatage : 0x02799ef5 Nom du module défaillant : ntdll.dll, version : 10.0.15063.608, horodatage : 0x8274fd8b Code d’exception : 0xc0000409 Décalage d’erreur : 0x00000000000aa020 ID du processus défaillant : 0x420 Heure de début de l’application défaillante : 0x01d3304c0d660d63 Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\svchost.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : ac154647-9a27-4cc1-9df4-31525c6bc9ea Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (09/18/2017 08:52:26 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Avira.ServiceHost.exe, version : 1.2.96.16095, horodatage : 0x59a6790a Nom du module défaillant : KERNELBASE.dll, version : 10.0.15063.608, horodatage : 0xadaa6ed6 Code d’exception : 0xe0434352 Décalage d’erreur : 0x000eb832 ID du processus défaillant : 0x17c0 Heure de début de l’application défaillante : 0x01d330530ed45e50 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll ID de rapport : 9bf5fa83-5c67-4a12-bd4b-9d11ead3dd90 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (09/18/2017 08:52:25 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application : Avira.ServiceHost.exe Version du Framework : v4.0.30319 Description : le processus a été arrêté en raison d'une exception non gérée. Informations sur l'exception : System.UnauthorizedAccessException à System.IO.__Error.WinIOError(Int32, System.String) à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean) à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean) à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean) à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean) à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding) à Avira.OE.WinCore.Utility.UnbufferedFileWriter.WriteAllText(System.String, System.String, System.Text.Encoding) à Avira.OE.WinCore.SettingsDocument.SaveToFile() à Avira.OE.WinCore.SettingsDocument.Dispose() à Avira.OE.WinCore.DataStorage.SetApplicationProperty(System.String, System.String) à Avira.OE.WinCore.TokenProvider.set_OauthAccessToken(System.String) à Avira.OE.WinCore.AcpOauthValidator.SaveToken(Avira.OE.WinCore.Interface.AcpOAuthToken, Avira.OE.WinCore.JsonWebToken`1) à Avira.OE.WinCore.AcpOauthValidator.OnAuthenticationFinished(System.Object, Avira.OE.WinCore.AcpOAuthEventArgs) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.WinCore.AcpOAuthenticator.OnTokenReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.WinCore.BackendRepository.OnReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à System.EventHandler`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].Invoke(System.Object, System.__Canon) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.AcpCommunicatorChannel.AcpMessageReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.AcpMessageTarget.OnAcpMessageReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.SecureConnection.SecureSocket_MessageReceived(System.Object, WebSocket4Net.MessageReceivedEventArgs) à WebSocket4Net.WebSocket.FireMessageReceived(System.String) à WebSocket4Net.Command.Text.ExecuteCommand(WebSocket4Net.WebSocket, WebSocket4Net.WebSocketCommandInfo) à WebSocket4Net.WebSocket.ExecuteCommand(WebSocket4Net.WebSocketCommandInfo) à WebSocket4Net.WebSocket.OnDataReceived(Byte[], Int32, Int32) à WebSocket4Net.WebSocket.client_DataReceived(System.Object, SuperSocket.ClientEngine.DataEventArgs) à SuperSocket.ClientEngine.ClientSession.OnDataReceived(Byte[], Int32, Int32) à SuperSocket.ClientEngine.SslStreamTcpSession.OnDataRead(System.IAsyncResult) à System.Net.LazyAsyncResult.Complete(IntPtr) à System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) à System.Net.Security._SslStream.ProcessFrameBody(Int32, Byte[], Int32, Int32, System.Net.AsyncProtocolRequest) à System.Net.Security._SslStream.ReadFrameCallback(System.Net.AsyncProtocolRequest) à System.Net.AsyncProtocolRequest.CompleteRequest(Int32) à System.Net.FixedSizeReader.CheckCompletionBeforeNextRead(Int32) à System.Net.FixedSizeReader.ReadCallback(System.IAsyncResult) à System.Net.LazyAsyncResult.Complete(IntPtr) à System.Net.ContextAwareResult.CompleteCallback(System.Object) à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) à System.Net.ContextAwareResult.Complete(IntPtr) à System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) à System.Net.Sockets.BaseOverlappedAsyncResult.CompletionPortCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) à System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) Error: (09/18/2017 08:52:10 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Avira.ServiceHost.exe, version : 1.2.96.16095, horodatage : 0x59a6790a Nom du module défaillant : KERNELBASE.dll, version : 10.0.15063.608, horodatage : 0xadaa6ed6 Code d’exception : 0xe0434352 Décalage d’erreur : 0x000eb832 ID du processus défaillant : 0x438 Heure de début de l’application défaillante : 0x01d3305300e51048 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll ID de rapport : 1553cecc-ba59-4acf-9650-0dfd9bad8e36 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (09/18/2017 08:52:07 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application : Avira.ServiceHost.exe Version du Framework : v4.0.30319 Description : le processus a été arrêté en raison d'une exception non gérée. Informations sur l'exception : System.UnauthorizedAccessException à System.IO.__Error.WinIOError(Int32, System.String) à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean) à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean) à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean) à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean) à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding) à Avira.OE.WinCore.Utility.UnbufferedFileWriter.WriteAllText(System.String, System.String, System.Text.Encoding) à Avira.OE.WinCore.SettingsDocument.SaveToFile() à Avira.OE.WinCore.SettingsDocument.Dispose() à Avira.OE.WinCore.DataStorage.SetApplicationProperty(System.String, System.String) à Avira.OE.WinCore.TokenProvider.set_OauthAccessToken(System.String) à Avira.OE.WinCore.AcpOauthValidator.SaveToken(Avira.OE.WinCore.Interface.AcpOAuthToken, Avira.OE.WinCore.JsonWebToken`1) à Avira.OE.WinCore.AcpOauthValidator.OnAuthenticationFinished(System.Object, Avira.OE.WinCore.AcpOAuthEventArgs) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.WinCore.AcpOAuthenticator.OnTokenReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.WinCore.BackendRepository.OnReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à System.EventHandler`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].Invoke(System.Object, System.__Canon) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.AcpCommunicatorChannel.AcpMessageReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.AcpMessageTarget.OnAcpMessageReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.SecureConnection.SecureSocket_MessageReceived(System.Object, WebSocket4Net.MessageReceivedEventArgs) à WebSocket4Net.WebSocket.FireMessageReceived(System.String) à WebSocket4Net.Command.Text.ExecuteCommand(WebSocket4Net.WebSocket, WebSocket4Net.WebSocketCommandInfo) à WebSocket4Net.WebSocket.ExecuteCommand(WebSocket4Net.WebSocketCommandInfo) à WebSocket4Net.WebSocket.OnDataReceived(Byte[], Int32, Int32) à WebSocket4Net.WebSocket.client_DataReceived(System.Object, SuperSocket.ClientEngine.DataEventArgs) à SuperSocket.ClientEngine.ClientSession.OnDataReceived(Byte[], Int32, Int32) à SuperSocket.ClientEngine.SslStreamTcpSession.OnDataRead(System.IAsyncResult) à System.Net.LazyAsyncResult.Complete(IntPtr) à System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) à System.Net.Security._SslStream.ProcessFrameBody(Int32, Byte[], Int32, Int32, System.Net.AsyncProtocolRequest) à System.Net.Security._SslStream.ReadFrameCallback(System.Net.AsyncProtocolRequest) à System.Net.AsyncProtocolRequest.CompleteRequest(Int32) à System.Net.FixedSizeReader.CheckCompletionBeforeNextRead(Int32) à System.Net.FixedSizeReader.ReadCallback(System.IAsyncResult) à System.Net.LazyAsyncResult.Complete(IntPtr) à System.Net.ContextAwareResult.CompleteCallback(System.Object) à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) à System.Net.ContextAwareResult.Complete(IntPtr) à System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) à System.Net.Sockets.BaseOverlappedAsyncResult.CompletionPortCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) à System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) Error: (09/18/2017 08:16:02 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: La création du contexte d’activation a échoué pour « c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_CacheAgent.exe.Manifest ». Assembly dépendant PDR.X,type="win32",version="1.0.0.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé. Error: (09/18/2017 08:16:02 AM) (Source: SideBySide) (EventID: 33) (User: ) Description: La création du contexte d’activation a échoué pour « c:\Program Files\CyberLink\PhotoDirector\Kernel\CES\CES_AudioCacheAgent.exe.Manifest ». Assembly dépendant PDR.X,type="win32",version="1.0.0.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé. Error: (09/18/2017 08:03:57 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Avira.ServiceHost.exe, version : 1.2.96.16095, horodatage : 0x59a6790a Nom du module défaillant : KERNELBASE.dll, version : 10.0.15063.608, horodatage : 0xadaa6ed6 Code d’exception : 0xe0434352 Décalage d’erreur : 0x000eb832 ID du processus défaillant : 0x2340 Heure de début de l’application défaillante : 0x01d3304c48e3ef6a Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll ID de rapport : 153feabc-44b3-4ca3-bd7a-06e643d72dbf Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (09/18/2017 08:03:56 AM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Application : Avira.ServiceHost.exe Version du Framework : v4.0.30319 Description : le processus a été arrêté en raison d'une exception non gérée. Informations sur l'exception : System.UnauthorizedAccessException à System.IO.__Error.WinIOError(Int32, System.String) à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean) à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean) à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean) à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean) à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding) à Avira.OE.WinCore.Utility.UnbufferedFileWriter.WriteAllText(System.String, System.String, System.Text.Encoding) à Avira.OE.WinCore.SettingsDocument.SaveToFile() à Avira.OE.WinCore.SettingsDocument.Dispose() à Avira.OE.WinCore.DataStorage.SetApplicationProperty(System.String, System.String) à Avira.OE.WinCore.TokenProvider.set_OauthAccessToken(System.String) à Avira.OE.WinCore.AcpOauthValidator.SaveToken(Avira.OE.WinCore.Interface.AcpOAuthToken, Avira.OE.WinCore.JsonWebToken`1) à Avira.OE.WinCore.AcpOauthValidator.OnAuthenticationFinished(System.Object, Avira.OE.WinCore.AcpOAuthEventArgs) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.WinCore.AcpOAuthenticator.OnTokenReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.WinCore.BackendRepository.OnReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à System.EventHandler`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].Invoke(System.Object, System.__Canon) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.AcpCommunicatorChannel.AcpMessageReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.AcpMessageTarget.OnAcpMessageReceived(System.Object, Avira.OE.WinCore.Interface.MessageReceivedEventArgs`1) à Avira.OE.WinCore.EventHandlerExtensions.SafeInvoke[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]](System.EventHandler`1, System.Object, System.__Canon) à Avira.OE.Communicator.SecureConnection.SecureSocket_MessageReceived(System.Object, WebSocket4Net.MessageReceivedEventArgs) à WebSocket4Net.WebSocket.FireMessageReceived(System.String) à WebSocket4Net.Command.Text.ExecuteCommand(WebSocket4Net.WebSocket, WebSocket4Net.WebSocketCommandInfo) à WebSocket4Net.WebSocket.ExecuteCommand(WebSocket4Net.WebSocketCommandInfo) à WebSocket4Net.WebSocket.OnDataReceived(Byte[], Int32, Int32) à WebSocket4Net.WebSocket.client_DataReceived(System.Object, SuperSocket.ClientEngine.DataEventArgs) à SuperSocket.ClientEngine.ClientSession.OnDataReceived(Byte[], Int32, Int32) à SuperSocket.ClientEngine.SslStreamTcpSession.OnDataRead(System.IAsyncResult) à System.Net.LazyAsyncResult.Complete(IntPtr) à System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) à System.Net.Security._SslStream.ProcessFrameBody(Int32, Byte[], Int32, Int32, System.Net.AsyncProtocolRequest) à System.Net.Security._SslStream.ReadFrameCallback(System.Net.AsyncProtocolRequest) à System.Net.AsyncProtocolRequest.CompleteRequest(Int32) à System.Net.FixedSizeReader.CheckCompletionBeforeNextRead(Int32) à System.Net.FixedSizeReader.ReadCallback(System.IAsyncResult) à System.Net.LazyAsyncResult.Complete(IntPtr) à System.Net.ContextAwareResult.CompleteCallback(System.Object) à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) à System.Net.ContextAwareResult.Complete(IntPtr) à System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr) à System.Net.Sockets.BaseOverlappedAsyncResult.CompletionPortCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) à System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32, UInt32, System.Threading.NativeOverlapped*) Error: (09/18/2017 08:03:40 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Avira.ServiceHost.exe, version : 1.2.96.16095, horodatage : 0x59a6790a Nom du module défaillant : KERNELBASE.dll, version : 10.0.15063.608, horodatage : 0xadaa6ed6 Code d’exception : 0xe0434352 Décalage d’erreur : 0x000eb832 ID du processus défaillant : 0x23c0 Heure de début de l’application défaillante : 0x01d3304c344a89f1 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe Chemin d’accès du module défaillant: C:\WINDOWS\System32\KERNELBASE.dll ID de rapport : 9e4a182f-a325-4166-ba87-b22754d97b55 Nom complet du package défaillant : ID de l’application relative au package défaillant : Erreurs système: ============= Error: (09/18/2017 09:09:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service McAfee CSP Service n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (09/18/2017 09:09:42 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service McAfee CSP Service. Error: (09/18/2017 09:09:32 AM) (Source: Service Control Manager) (EventID: 7003) (User: ) Description: Le service McAfee Home Network dépend du service suivant : Mfevtp. Ce dernier n’est peut-être pas installé. Error: (09/18/2017 09:07:51 AM) (Source: Service Control Manager) (EventID: 7011) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la réponse transactionnelle du service HPWMISVC. Error: (09/18/2017 09:06:43 AM) (Source: Service Control Manager) (EventID: 7003) (User: ) Description: Le service MSK80Service dépend du service suivant : Mfevtp. Ce dernier n’est peut-être pas installé. Error: (09/18/2017 09:06:41 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Kingsoft_WPS_UpdateService n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (09/18/2017 09:06:41 AM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Kingsoft_WPS_UpdateService. Error: (09/18/2017 09:06:40 AM) (Source: Service Control Manager) (EventID: 7003) (User: ) Description: Le service mcbootdelaystartsvc dépend du service suivant : Mfevtp. Ce dernier n’est peut-être pas installé. Error: (09/18/2017 09:06:37 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service CldFlt n’a pas pu démarrer en raison de l’erreur : Cette demande n’est pas prise en charge. Error: (09/18/2017 08:52:27 AM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Avira Service Host s’est terminé de manière inattendue. Ceci s’est produit 2 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service. CodeIntegrity: =================================== Date: 2017-09-13 20:22:17.052 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-09-13 20:22:17.047 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-10 08:43:53.768 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-10 08:43:53.763 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-09 19:28:32.743 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-09 19:28:32.737 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-03 10:45:01.611 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-03 10:45:01.606 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Infos Mémoire =========================== Processeur: AMD A6-6310 APU with AMD Radeon R4 Graphics Pourcentage de mémoire utilisée: 75% Mémoire physique - RAM - totale: 3519.01 MB Mémoire physique - RAM - disponible: 876.8 MB Mémoire virtuelle totale: 4543.01 MB Mémoire virtuelle disponible: 799.36 MB ==================== Lecteurs ================================ Drive c: (Windows) (Fixed) (Total:915.29 GB) (Free:805.19 GB) NTFS Drive d: (RECOVERY) (Fixed) (Total:14.97 GB) (Free:1.79 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: 729BCC25) Partition: GPT. ==================== Fin de Addition.txt ============================