Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 27-11-2017 Exécuté par Julien (28-11-2017 16:07:26) Exécuté depuis C:\Users\Julien\Desktop Windows 10 Home Version 1703 15063.729 (X64) (2017-05-21 11:05:14) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-970853976-2373757950-4284530701-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-970853976-2373757950-4284530701-503 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-970853976-2373757950-4284530701-1003 - Limited - Enabled) Invité (S-1-5-21-970853976-2373757950-4284530701-501 - Limited - Disabled) Julien (S-1-5-21-970853976-2373757950-4284530701-1001 - Administrator - Enabled) => C:\Users\Julien _TamaAcct (S-1-5-21-970853976-2373757950-4284530701-1004 - Limited - Enabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) ACD/Labs Software in C:\ACDFREE12\ (HKLM-x32\...\ACDLabs in C__ACDFREE12_) (Version: v12.00, FREE - ACD/Labs) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Reader X (10.1.16) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.16 - Adobe Systems Incorporated) Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 368.81 - NVIDIA Corporation) Hidden ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 1.2.1 - ASUS) ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.3.9 - ASUS) Avira (HKLM-x32\...\{79C4A62C-8CC2-44AC-91FE-1299A215B4B7}) (Version: 1.2.98.29730 - Avira Operations GmbH & Co. KG) Hidden Avira (HKLM-x32\...\{f5da837f-e932-4f55-995c-7e97c5cbebdd}) (Version: 1.2.98.29730 - Avira Operations GmbH & Co. KG) Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.33.24 - Avira Operations GmbH & Co. KG) Battlefield Heroes (HKLM-x32\...\{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}) (Version: - EA Digital illusions) Bitnami WordPress Module (HKLM-x32\...\Bitnami WordPress Module 3.8.3-0) (Version: 3.8.3-0 - Bitnami) Canon MG5200 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5200_series) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.37 - Piriform) Clownfish for Skype (HKLM-x32\...\Clownfish) (Version: - ) Conseiller de mise à niveau vers Windows 7 (HKLM-x32\...\{9D10CB57-B085-44c3-B435-2D193BA153F0}) (Version: 2.0.5000.0 - Microsoft Corporation) Discord (HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\Discord) (Version: 0.0.298 - Discord Inc.) Discord (HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\Discord) (Version: 0.0.298 - Discord Inc.) EPSON Scan (HKLM-x32\...\EPSON Scanner) (Version: - Seiko Epson Corporation) Epson Software Updater (HKLM-x32\...\{6DBD132B-7F42-4594-BBE7-0BB677EB2926}) (Version: 4.4.2 - SEIKO EPSON CORPORATION) EPSON XP-225 Series Printer Uninstall (HKLM\...\EPSON XP-225 Series) (Version: - SEIKO EPSON Corporation) Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited) Fast Boot (HKLM\...\{13F4A7F3-EABC-4261-AF6B-1317777F0755}) (Version: 1.0.10 - ASUS) Flashtool (HKLM-x32\...\Flashtool) (Version: 0.9.19.8 - Androxyde) foobar2000 v1.3.6 (HKLM-x32\...\foobar2000) (Version: 1.3.6 - Peter Pawlowski) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.) Google Earth (HKLM-x32\...\{F6430171-B86B-4639-839E-374913E7911D}) (Version: 7.1.8.3036 - Google) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation) Intel(R) Turbo Boost Technology Monitor 2.0 (HKLM\...\{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}) (Version: 2.1.23.0 - Intel) Intel® CCF Manager (HKLM-x32\...\{0f3d8dd5-54af-4404-a01c-4967e485a065}) (Version: 3.0.13.2211 - Intel Corporation) Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation) League of Legends (HKLM-x32\...\{11B73856-A062-4E6B-A80E-A3F380BBAB65}) (Version: 4.2.1 - Riot Games) Hidden League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games) Ma-Config.com (64 bits) (HKLM\...\{3F3C0D7A-FA11-41D5-A3DB-A1F2944577BD}) (Version: 8.0.0.5 - Cybelsoft) Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes) Manager (HKLM-x32\...\{8DED36D9-54D6-4127-A112-5A1BA1CDD66B}) (Version: 5.0.26.33533 - 2017 pdfforge GmbH. All rights reserved) Hidden MATLAB R2009b (HKLM\...\MatlabR2009b) (Version: 7.9 - The MathWorks, Inc.) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Office 2003 Web Components (HKLM-x32\...\{90120000-00A4-0409-0000-0000000FF1CE}) (Version: 12.0.6213.1000 - Microsoft Corporation) Microsoft Office Professionnel Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: - ) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: - ) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: - ) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU (HKLM\...\Microsoft Visual Studio 2005 Remote Debugger Light (x64) - ENU) (Version: - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang) Mises à jour NVIDIA 2.11.4.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.11.4.1 - NVIDIA Corporation) Hidden Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 47.0.2 (x86 fr) (HKLM-x32\...\Mozilla Firefox 47.0.2 (x86 fr)) (Version: 47.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.2.6148 - Mozilla) Mumble 1.2.8 (HKLM-x32\...\{5D198290-6E7D-426C-9AF0-8DA34CC7E596}) (Version: 1.2.8 - Thorvald Natvig) NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation) Package de pilotes Windows - ASUS Tek. Corporation (ATP) Mouse (07/27/2015 7.0.0.7) (HKLM\...\A877FD5856151D202B724718A4F58CF0089A558C) (Version: 07/27/2015 7.0.0.7 - ASUS Tek. Corporation) Panneau de configuration NVIDIA 369.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 369.09 - NVIDIA Corporation) Hidden PC3D Viewer (HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\PC3D Viewer) (Version: - NCBI) PC3D Viewer (HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\PC3D Viewer) (Version: - NCBI) PDF Architect 5 (HKLM-x32\...\PDF Architect 5) (Version: 5.0.22.32360 - pdfforge GmbH) PDF Architect 5 Create Module (HKLM\...\{0E25DE98-E56E-4259-B554-F1360BB2DC22}) (Version: 5.0.28.34044 - pdfforge GmbH) Hidden PDF Architect 5 Edit Module (HKLM\...\{EE01D8D7-2DD0-4C43-BF42-D9C8FC8DAE99}) (Version: 5.0.28.34044 - pdfforge GmbH) Hidden PDF Architect 5 View Module (HKLM\...\{4DC94B75-B036-474D-8AC8-E2D055C95FBD}) (Version: 5.0.28.34044 - pdfforge GmbH) Hidden PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.5.3 - pdfforge GmbH) Photo Editor (HKLM-x32\...\{59693202-4035-4DE1-A33D-B0B9AEED7A24}) (Version: 4.4.0.0 - Movavi) PhotoFiltre 7 (HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\PhotoFiltre 7) (Version: - ) PhotoFiltre 7 (HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\PhotoFiltre 7) (Version: - ) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.990 - Even Balance, Inc.) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7945 - Realtek Semiconductor Corp.) Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft) SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 2.11.4.1 - NVIDIA Corporation) Hidden Skype Web Plugin (HKLM-x32\...\{EB96DF8B-65A7-4E72-BFB1-38DB36870D16}) (Version: 7.32.6.278 - Skype Technologies S.A.) Skype™ 7.39 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.39.102 - Skype Technologies S.A.) SolidWorks 2012 x64 Edition SP0 (HKLM\...\{4C66F076-D3AB-49C8-85D4-BAA6D82FCAE2}) (Version: 20.100.5022 - SolidWorks) Hidden SolidWorks 2012 x64 French Resources (HKLM\...\{D61078D4-24FE-47AC-99EA-BA10A7DC7AAA}) (Version: 20.100.5022 - Nom de votre société) Hidden SolidWorks eDrawings 2012 x64 Edition SP0 (HKLM\...\{A6B3A293-6427-4266-AE42-2BDC14C7AC2C}) (Version: 12.0.5015 - Dassault Systèmes SolidWorks Corp) Hidden SolidWorks Explorer 2012 SP0 x64 Edition (HKLM\...\{65DDB7D8-5E04-45DF-B60E-89557ED37ED2}) (Version: 20.00.5022 - SolidWorks Corporation) Hidden SolidWorks Flow Simulation 2012 SP0 x64 Edition (HKLM\...\{EB9400D5-6289-4F9F-9B79-B3528101C0C7}) (Version: 20.00.5023 - SolidWorks Corporation) Hidden STCServ (HKLM\...\{A954D353-9DAF-4916-8E71-F1E959EBCD1E}) (Version: 3.0.0.1783 - Intel Corporation) Hidden Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.6.0 - Synaptics Incorporated) TA Advantage (Thermal / Rheology) (HKLM-x32\...\{F1C4C7C2-FABF-44A5-B2EB-06D0D5A46166}) (Version: 5.5.20 - TA Instruments) Hidden TA Advantage (Thermal / Rheology) (HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\InstallShield_{F1C4C7C2-FABF-44A5-B2EB-06D0D5A46166}) (Version: 5.5.20 - TA Instruments) TA Advantage (Thermal / Rheology) (HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\InstallShield_{F1C4C7C2-FABF-44A5-B2EB-06D0D5A46166}) (Version: 5.5.20 - TA Instruments) TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) Ultimatest Battle (HKLM-x32\...\{4F7C289F-40B7-42C2-0CB1-DA20723E3FA0}) (Version: 0.22.8 - UNKNOWN) Hidden Ultimatest Battle (HKLM-x32\...\com.edioromeh.ub) (Version: 0.22.8 - UNKNOWN) USB2.0 UVC VGA WebCam (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10253 - Realtek Semiconductor Corp.) UsbFix (HKLM-x32\...\Usbfix) (Version: 7.955 - El Desaparecido - www.usbfix.net - www.sosvirus.net) Vulkan Run Time Libraries 1.0.11.1 (HKLM\...\VulkanRT1.0.11.1) (Version: 1.0.11.1 - LunarG, Inc.) Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.) Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation) WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) XAMPP (HKLM-x32\...\xampp) (Version: 1.8.3-4 - Bitnami) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-970853976-2373757950-4284530701-1001_Classes\CLSID\{41052F6E-3662-4584-BCD3-77BCCAAE8470}\InprocServer32 -> C:\Users\Julien\AppData\Local\SkypePlugin\7.32.6.278\GatewayActiveX-x64.dll (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-970853976-2373757950-4284530701-1001_Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}\InprocServer32 -> C:\Users\Julien\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\amd64\FileCoAuthLib64.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-970853976-2373757950-4284530701-1001_Classes\CLSID\{60813F68-E9F7-4B3C-80B4-A76A66211660}\localserver32 -> C:\Users\Julien\AppData\Local\SkypePlugin\7.32.6.278\GatewayVersion-x64.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-970853976-2373757950-4284530701-1001_Classes\CLSID\{CBF9CD8C-2714-4F36-B76A-43E6C7547BC2}\localserver32 -> C:\Users\Julien\AppData\Local\SkypePlugin\7.32.6.278\EdgeCalling.exe (Skype Technologies S.A.) CustomCLSID: HKU\S-1-5-21-970853976-2373757950-4284530701-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Julien\AppData\Local\Microsoft\OneDrive\17.3.7076.1026\amd64\FileSyncApi64.dll => Pas de fichier ShellIconOverlayIdentifiers: [AsusWSShellExt_B] -> {6D4133E5-0742-4ADC-8A8C-9303440F7190} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\ASUSWSShellExt64.dll [2011-05-25] (eCareme Technologies, Inc.) ShellIconOverlayIdentifiers: [AsusWSShellExt_O] -> {64174815-8D98-4CE6-8646-4C039977D808} => C:\Program Files (x86)\ASUS\ASUS WebStorage\3.0.108.222\ASUSWSShellExt64.dll [2011-05-25] (eCareme Technologies, Inc.) ShellIconOverlayIdentifiers-x32-x32: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\SysWOW64\AcSignIcon.dll [2003-02-14] (Autodesk) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Pas de fichier ContextMenuHandlers1: [PDFArchitect5_ManagerExt] -> {00B7B69F-6774-4906-9C7F-7D117A3644A9} => C:\Program Files\PDF Architect 5\creator-context-menu.dll [2017-07-05] (pdfforge GmbH) ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Windows\System32\mscoree.dll [2017-03-18] (Microsoft Corporation) ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-11-17] (Avira Operations GmbH & Co. KG) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-14] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal) ContextMenuHandlers3: [BackupContextMenuExtension] -> {b1b96b20-da1d-4a3c-92c1-7229b32f2325} => C:\Windows\System32\mscoree.dll [2017-03-18] (Microsoft Corporation) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Pas de fichier ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2017-03-09] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-08-01] (NVIDIA Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\AntiVir Desktop\shlext64.dll [2017-11-17] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-14] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-14] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {01C995FF-D178-4E7B-AC4A-9E950006A207} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {03AF91A4-8904-4A14-940F-1C24294FB8A4} - System32\Tasks\IntelBootstrapCCDashExe => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [2015-03-16] (Intel® Corporation) Task: {0837D897-84CB-4E30-A8DD-807937A81DFC} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe Task: {08BF66B0-059C-4C9A-A04F-68DCA6D9C250} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated) Task: {0B3022E3-1822-42D2-853B-060D9B16FE85} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {0F1FC558-90E6-41AA-8D37-4FBE69053762} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe Task: {0F8D66A2-C401-4D16-8E96-DFA4F8F4932D} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe Task: {148318FC-5974-4508-A415-B3AFD16E5DDB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe Task: {1C1CD1AE-467F-45BA-8425-13F357063638} - System32\Tasks\{9D346BF8-683F-4F3D-8D8D-113F3F80B191} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/6.16.0.105/fr/go/help.faq.installer?LastError=1638 Task: {1C9AA7B3-77C0-4F74-9D56-280498B6437C} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION Task: {24C2B308-71B0-48E4-927C-E2BF0947FE67} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Pas de fichier <==== ATTENTION Task: {24F1EF9F-AA39-4B8D-B304-12960644ECFB} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-11-08] (Piriform Ltd) Task: {26D1F777-352A-496A-996B-DA1F46BDDECA} - System32\Tasks\Avira SystrayStartTrigger => Avira.SystrayStartTrigger.exe Task: {2911A25C-2960-4B63-81E6-C112CA4B633B} - \Microsoft\Windows\Setup\gwx\rundetector -> Pas de fichier <==== ATTENTION Task: {29308477-8F7E-4D4F-92D5-F1534E61B6F5} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {30DFCA40-DB93-4376-AF23-76D0EE24177C} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-970853976-2373757950-4284530701-1001 => C:\Users\Julien\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe Task: {3316B29E-4BF2-4ED1-989D-8325F7449758} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {33F2C264-54AC-4EF1-8604-9F8A40D65020} - \OfficeSoftwareProtectionPlatform\SvcRestartTask -> Pas de fichier <==== ATTENTION Task: {365A9086-4A89-4012-9111-EA9442C1C340} - System32\Tasks\EPSON XP-225 Series Update {998B0796-857A-4189-85D9-F5820418D384} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNFE.EXE [2013-11-22] (SEIKO EPSON CORPORATION) Task: {36C596FB-A5DB-4A91-9070-E76A48344A7B} - System32\Tasks\{22A41749-AAAB-4FCB-8DF1-8940F4E8EDA0} => C:\Windows\system32\pcalua.exe -a "C:\program files (x86)\avira\antivir desktop\setup.exe" -d C:\Windows\SysWOW64 -c /MODIFY Task: {37057963-6B36-4FD7-B1C7-8838B5E7C456} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe Task: {3C9616B2-742C-4820-AFAE-F3D2459E9677} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {3D966D87-5FE5-4FBC-8E90-DB0F48E454DB} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe Task: {3E3E65EA-6693-4ACC-947D-206853F50D65} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe Task: {42145BE5-4059-431F-919A-1A381C5966DE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {42BF7BBF-C794-4599-BC6D-149FC8B49582} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Pas de fichier <==== ATTENTION Task: {45539920-3F9D-4489-9902-7C12798BFF30} - \Microsoft\Windows\Setup\EOONotify -> Pas de fichier <==== ATTENTION Task: {4D5DA7DD-9C2F-4032-9074-4C59EBAF38D7} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-970853976-2373757950-4284530701-1001UA => C:\Users\Julien\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-24] (Facebook Inc.) Task: {4EE04BCF-938A-4D78-87A7-44A09D96F14E} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Pas de fichier <==== ATTENTION Task: {4F896221-34CA-452C-B9A7-8A1EEBA9BC11} - System32\Tasks\{A6295EF1-11C3-464D-868B-D7F6C45C25FC} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\ZHPFix\ZHPhep.exe" -d "C:\Program Files (x86)\ZHPFix" Task: {52073651-EE28-46D2-919B-76C4A7BB703C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-11-08] (Piriform Ltd) Task: {52F5F354-C011-473A-BB3E-24BF57539DA4} - System32\Tasks\{2C6DA97D-19A1-4937-B35A-36D118E88630} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/6.16.0.105/fr/go/help.faq.installer?LastError=1638 Task: {5EF7DD62-BD13-4706-A9CF-BF5726B6144B} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Pas de fichier <==== ATTENTION Task: {5EFA77BD-F7EC-4B29-8B6B-EF0FFB8512F7} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION Task: {60221B22-2426-49C3-9945-2990C1D854ED} - System32\Tasks\{BF531AC8-8BDA-4F88-9966-9274D9902DE6} => C:\Program Files (x86)\Mumble\mumble.exe Task: {663688DF-7B90-4D84-A6EE-7030C9FF1217} - System32\Tasks\ASUS SmartLogon Console Sensor => C:\Program Files (x86)\ASUS\SmartLogon\sensorsrv.exe [2010-11-15] (ASUS) Task: {6FECF9BE-AED8-4627-80ED-91FF5361960F} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe Task: {766CF8D7-76D5-494E-ADD6-A9F3D1801B3F} - System32\Tasks\{0651B7CF-44AA-4617-8246-15CE9B99D9B7} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/6.16.0.105/fr/go/help.faq.installer?LastError=1638 Task: {76F9FF1E-26EB-45A7-89BC-98C6C3C27186} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe Task: {773492A6-4F08-4DAF-9C1B-778BC17ACAED} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe Task: {78588675-6CF3-4E50-B5B1-1EC34EAA2F6B} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe Task: {79CD57FE-45A2-4399-B197-B1009E464E7B} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION Task: {7DDF9673-8D0B-4652-B795-1BEAD1206B65} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {7E0376E7-6E86-4AA4-93E3-94A605255E17} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-970853976-2373757950-4284530701-1001Core => C:\Users\Julien\AppData\Local\Facebook\Update\FacebookUpdate.exe [2012-11-24] (Facebook Inc.) Task: {7E4F2089-705A-4C6F-90FE-4E249D2FB26E} - System32\Tasks\{442E22F7-65E7-41C3-A9B3-EAC22BE0C83A} => C:\Windows\system32\pcalua.exe -a D:\setupPC3Dv2.exe -d C:\Users\Julien\Desktop Task: {89989F2F-601F-496B-9497-3D14E14DCDF2} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [2016-12-04] (Realtek Semiconductor) Task: {8BDDB50A-894A-44C8-8F18-AC996B599520} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.) Task: {8DC372C3-A743-411A-A58C-050FE49B4FDC} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION Task: {9191BAB0-9E64-425C-8253-25071B4EA422} - \Feven 1.7-updater -> Pas de fichier <==== ATTENTION Task: {95826173-776E-4F76-A591-A4F046232585} - System32\Tasks\{4D8DBB7F-042B-45F5-BE78-046EB74115D4} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.18.0.105/fr/go/help.faq.installer?LastError=1638 Task: {99018DB2-2F3D-4D5B-93D2-387140EE7CCD} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-10-07] (AsusTek) Task: {9B179E60-59E7-4C47-BF01-3C9B73D78927} - System32\Tasks\{C86B93C4-2B33-4922-8893-A98985620547} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.18.0.105/fr/go/help.faq.installer?LastError=1638 Task: {A0C8F41D-0E41-4166-B711-1CC76F6E91EF} - System32\Tasks\{467A8C76-4890-4CAC-81BF-812C57171F3A} => "c:\program files (x86)\google\chrome\application\chrome.exe" hxxp://ui.skype.com/ui/0/6.18.60.106/fr/go/help.faq.installer?LastError=1638 Task: {A46AB62B-4380-410C-A2F2-41331B4FF092} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Pas de fichier <==== ATTENTION Task: {A6AC0AA8-294F-42CD-A558-E34580FCBB93} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Pas de fichier <==== ATTENTION Task: {A98F4216-7F00-460E-8FE1-EE41E4482150} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Pas de fichier <==== ATTENTION Task: {AA921623-B84A-4EC8-A6DA-5D46323FC6D9} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe Task: {AF5EE970-709C-443E-9336-215012B943FE} - System32\Tasks\Driver Booster SkipUAC (Julien) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe Task: {B797B070-5986-4A8C-91DF-54F225F04E7A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-15] (Adobe Systems Incorporated) Task: {B8017BEA-2B5A-4DAF-A579-ECE6FFCBC9C2} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [2017-11-17] (Avira Operations GmbH & Co. KG) Task: {C778374C-94FE-41B0-B705-5FC952201AC0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe Task: {C86A47F2-3C9D-4B60-B72A-4BC7679917E9} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-12-04] (Realtek Semiconductor) Task: {CCCBEC76-9101-40FF-BE88-00CE18D27B48} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Pas de fichier <==== ATTENTION Task: {D028715B-2B9B-431A-8678-1468A570DF51} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2016-12-04] (Realtek Semiconductor) Task: {D1D223BF-0EB9-4146-983C-0726CDE08331} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-15] (Adobe Systems Incorporated) Task: {D6D2AE0B-E49D-40E8-BD53-37CADEEEC135} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2012-02-16] (ASUS) Task: {DAE41F35-2F0B-481E-9FA9-F75AC1272754} - System32\Tasks\{95C14C86-F5FB-4EFA-95A7-158265663CDA} => C:\Program Files (x86)\Mumble\mumble.exe Task: {DD548504-31EE-43FF-A573-1E9BCB56DC76} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe Task: {E959E007-A71C-4952-8EA8-22DE146D6227} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe Task: {E9882D2E-BF5B-40E0-9973-119A3F598B65} - System32\Tasks\ATKOSD2 => C:\Program Files (x86)\ASUS\ATK Package\ATKOSD2\ATKOSD2.exe [2011-07-21] (ASUS) Task: {F0496437-71B1-4E96-9E9C-3BC2F52CDE46} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {F40DF344-B3A5-49A3-964E-52ED331C310D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION Task: {F47CDEC3-ECC1-4B21-AC3E-D3D8734637B8} - System32\Tasks\{79CE403A-3CFA-4EDF-BDBD-F936FA6BDFEF} => C:\Program Files (x86)\Mumble\mumble.exe Task: {FACB8164-0888-403B-B4E6-7F59329EA90F} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe Task: {FBC8485F-A585-489F-8E2C-C65FEABC1BEF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe Task: {FDED98A8-60E0-4F36-88F2-62EA79AD63A3} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {FFEE4F98-789F-4BC5-9EBF-91D4AC658C46} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\EPSON XP-225 Series Update {998B0796-857A-4189-85D9-F5820418D384}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSNFE.EXE:/EXE:{998B0796-857A-4189-85D9-F5820418D384} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-970853976-2373757950-4284530701-1001Core.job => C:\Users\Julien\AppData\Local\Facebook\Update\FacebookUpdate.exe Task: C:\WINDOWS\Tasks\FacebookUpdateTaskUserS-1-5-21-970853976-2373757950-4284530701-1001UA.job => C:\Users\Julien\AppData\Local\Facebook\Update\FacebookUpdate.exe ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2014-05-06 19:38 - 2014-05-06 19:59 - 000076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe 2016-12-26 20:25 - 2017-10-04 13:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2016-12-26 20:25 - 2017-10-04 13:15 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-05-21 11:24 - 2016-08-01 13:54 - 000133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2017-03-18 21:58 - 2017-03-18 21:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2013-09-05 00:17 - 2013-09-05 00:17 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2017-03-18 21:59 - 2017-03-20 06:11 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-11-11 20:50 - 2017-11-11 20:54 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-11-11 20:50 - 2017-11-11 20:54 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-11-11 20:50 - 2017-11-11 20:54 - 025461760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-11-07 09:09 - 2017-11-07 09:11 - 002552832 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\skypert.dll 2017-11-11 20:50 - 2017-11-11 20:54 - 000685056 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2017-03-09 01:16 - 2017-03-09 01:16 - 000112264 _____ () C:\Windows\System32\IccLibDll_x64.dll 2017-09-14 18:02 - 2017-09-14 18:03 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2017-11-01 15:32 - 2017-11-01 15:42 - 001919680 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40675.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll 2017-11-01 15:32 - 2017-11-01 15:42 - 001226416 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40675.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll 2017-09-26 10:57 - 2017-09-26 10:57 - 003553704 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40675.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2016-10-28 20:02 - 2016-03-31 17:57 - 000625440 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll 2012-11-26 21:19 - 2012-07-18 11:55 - 001198912 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll 2012-02-07 03:32 - 2012-02-07 03:32 - 000009216 _____ () C:\Program Files (x86)\ASUS\Splendid\GLCDdll.dll 2010-08-20 17:57 - 2010-08-20 17:57 - 000619816 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMediaLibrary.dll 2010-08-20 17:57 - 2010-08-20 17:57 - 000013096 _____ () C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvcPS.dll 2015-03-31 00:43 - 2016-06-15 02:14 - 000020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2011-06-10 18:49 - 2011-06-10 18:49 - 001163264 _____ () C:\Program Files (x86)\ASUS\Wireless Console 3\acAuth.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\ProgramData\Temp:373E1720 [120] AlternateDataStreams: C:\Users\Julien\Documents\boot:$WIMMOUNTDATA [738] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) HKU\S-1-5-21-970853976-2373757950-4284530701-1001\Software\Classes\.scr: AutoCADLTScriptFile => ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-19-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214107729\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-20-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214107992\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\S-1-5-21-970853976-2373757950-4284530701-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Julien\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\cropped-1600-900-303917.jpg HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\Control Panel\Desktop\\Wallpaper -> C:\Users\Julien\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\cropped-1600-900-303917.jpg HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214109783\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg HKU\User-4\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Téléchargement en arrière-plan de SolidWorks.lnk => C:\Windows\pss\Téléchargement en arrière-plan de SolidWorks.lnk.CommonStartup MSCONFIG\startupreg: ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe MSCONFIG\startupreg: Adobe Reader Speed Launcher => "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe" MSCONFIG\startupreg: AmIcoSinglun64 => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe MSCONFIG\startupreg: ASUS Screen Saver Protector => C:\Windows\AsScrPro.exe MSCONFIG\startupreg: CanonMyPrinter => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe /logon MSCONFIG\startupreg: CanonSolutionMenuEx => C:\Program Files (x86)\Canon\Solution Menu EX\CNSEMAIN.EXE /logon MSCONFIG\startupreg: CLMLServer => "C:\Program Files (x86)\CyberLink\Power2Go\CLMLSvc.exe" MSCONFIG\startupreg: Clownfish => "C:\Program Files (x86)\Clownfish\Clownfish.exe" MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun MSCONFIG\startupreg: Facebook Update => "C:\Users\Julien\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start MSCONFIG\startupreg: RtHDVCpl => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun MSCONFIG\startupreg: Sony PC Companion => "C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe" /Background MSCONFIG\startupreg: uTorrent => "C:\Users\Julien\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-970853976-2373757950-4284530701-1001\...\StartupApproved\Run: => "Clownfish" HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-970853976-2373757950-4284530701-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-11262017214108244\...\StartupApproved\Run: => "Clownfish" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{680D70EB-EFEA-4B2E-802F-D6CF657D3910}] => (Allow) E:\SteamLibrary\steamapps\common\GenitalJousting\GenitalJousting.exe FirewallRules: [{FBA33F9F-10FE-48DD-98AB-380218BE5A0D}] => (Allow) E:\SteamLibrary\steamapps\common\GenitalJousting\GenitalJousting.exe FirewallRules: [{7B8D9E0D-4AD9-4828-9F05-DF31DA3B4AE1}] => (Allow) E:\SteamLibrary\steamapps\common\Broforce\Broforce_beta.exe FirewallRules: [{57018EE5-D9F9-495D-B46F-CB9687242F98}] => (Allow) E:\SteamLibrary\steamapps\common\Broforce\Broforce_beta.exe FirewallRules: [{35C8A5DF-6EB6-4D16-A04A-40BFA5C2857F}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{9B6B4AB2-AF03-4DC9-AD75-7D677ED24D37}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{5A645D88-9806-468A-AE58-8743FA797629}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{0A43EBBD-F34B-470B-AD87-56B0FDAC73D0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{6FD01696-C25B-4DCD-8890-3FB9101AB9B2}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [TCP Query User{31797CB2-AE7E-483A-B41D-E9D8D9D23471}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [UDP Query User{D5987CAB-D652-429E-87D0-887329D288DD}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [TCP Query User{7505C0C7-1DD2-49D7-B023-840AE35A30F2}C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe] => (Allow) C:\program files (x86)\asus\asus smart gesture\astpcenter\x64\asussgplusbtserver64.exe FirewallRules: [{CDBD26A9-B034-4F20-97BB-8DA8007B5CA4}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe FirewallRules: [{1D417A87-BFD7-4DE2-818C-A02DAEBD41C3}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe FirewallRules: [{8EC9B187-8DE0-459B-B618-C92C2A3896BD}] => (Allow) C:\Program Files (x86)\ASUS\Share Link\ShareLink.exe FirewallRules: [{B7D66D42-D61B-4661-8339-27DF32ED138D}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe FirewallRules: [{CF07E473-5AF1-4AE8-8741-C40482AD0B9D}] => (Allow) D:\Steam\SteamApps\common\Blockade3d\main.exe FirewallRules: [{E7C4BF88-CA4C-47E4-904F-554E4AF0DB12}] => (Allow) D:\Steam\SteamApps\common\Blockade3d\main.exe FirewallRules: [{31F92E55-070C-40AC-8040-FBE0289D3DEC}] => (Allow) D:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{5EEC9B60-D667-4899-9D79-BAF9D48D7C4D}] => (Allow) D:\Steam\SteamApps\common\Brawlhalla\Brawlhalla.exe FirewallRules: [{C6876873-36DB-4019-BF85-46D34497ACB6}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{1ACBBA80-B91E-4C68-81E5-D6C479DBD444}] => (Allow) D:\Steam\Steam.exe FirewallRules: [{22EF4216-C925-4357-A34D-BA8D27C8E1B4}] => (Allow) C:\Program Files\ma-config.com\MCDetection.exe FirewallRules: [{1F670D70-49C4-4C9A-8072-6AE96303E54B}] => (Allow) C:\Program Files\ma-config.com\MCDetection.exe FirewallRules: [{449AAE61-591A-43DD-87AC-3AEFFC94D214}] => (Block) E:\gameforgelive\games\fra_fra\aion\nclauncher.exe FirewallRules: [{09285626-DD7D-4543-9A27-A69EF2F3AD85}] => (Block) E:\gameforgelive\games\fra_fra\aion\nclauncher.exe FirewallRules: [UDP Query User{9DB97A88-E7F1-47DE-B848-12498662E0E6}E:\gameforgelive\games\fra_fra\aion\nclauncher.exe] => (Allow) E:\gameforgelive\games\fra_fra\aion\nclauncher.exe FirewallRules: [TCP Query User{ED1FD8F8-4272-4313-A04F-865C78797E40}E:\gameforgelive\games\fra_fra\aion\nclauncher.exe] => (Allow) E:\gameforgelive\games\fra_fra\aion\nclauncher.exe FirewallRules: [{5FBEEDBF-CABB-4843-A662-41B1E5B6F225}] => (Allow) E:\GameforgeLive\gfl_client.exe FirewallRules: [{F333AC4C-06F6-4537-BB4D-1F36B2E91977}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{DD419D1C-543B-4731-9836-4B54984D5397}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{DF9E7747-AD7B-46C4-BE91-7E6418A7FE60}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{01D7B393-44E6-4F7B-8F87-115A2F711A5C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{807CD541-E0C8-4802-B1BB-ED9DC03B4B9E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{07EDB519-DFE8-49A2-AC9D-FFC677A9AB9C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{CA0D7A68-104F-497A-A0FE-819BEFD64CBA}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [UDP Query User{1B2D2B05-A68C-4482-9BAC-C3260F84A373}E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{88A12C4F-992F-4CF3-B6B4-25A6B0220A71}E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Block) E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{3723B80A-1B7A-4BFA-AC18-696B63489BBF}E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{10F2E1C8-E1BF-4692-8D41-74FCB0827170}E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) E:\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [{714C12B3-30DE-4600-9441-92D904B60F56}] => (Block) D:\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [{AE44B2CE-2CA5-430B-896B-1015282CC1D9}] => (Block) D:\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [UDP Query User{2A749446-97D8-495A-A615-85D63519266A}D:\hirezgames\smite\binaries\win32\smite.exe] => (Allow) D:\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [TCP Query User{52B0EAFE-9E28-434C-A182-5B98CA045813}D:\hirezgames\smite\binaries\win32\smite.exe] => (Allow) D:\hirezgames\smite\binaries\win32\smite.exe FirewallRules: [{300DE309-4A46-400F-B979-4173C3022B4E}] => (Allow) C:\Users\Julien\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe FirewallRules: [{7DB90351-8FA3-4741-A16E-A2C7A1852580}] => (Block) C:\users\julien\desktop\games\minecraft.exe FirewallRules: [{F55BDED7-4EB7-4C16-94A5-FB55CBBA1C1C}] => (Block) C:\users\julien\desktop\games\minecraft.exe FirewallRules: [UDP Query User{8561C447-14AF-4ABD-B9B4-487789647B1A}C:\users\julien\desktop\games\minecraft.exe] => (Allow) C:\users\julien\desktop\games\minecraft.exe FirewallRules: [TCP Query User{B45B81A5-7755-41BA-9F5B-4D56E8FA73ED}C:\users\julien\desktop\games\minecraft.exe] => (Allow) C:\users\julien\desktop\games\minecraft.exe FirewallRules: [{5D18DE0B-4C8D-47DC-A5E5-4DFBA92D88ED}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{90F2D341-CF1D-490A-A250-7D2BC04A4BAA}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{A68D7834-6664-4E1E-981B-945C63E18198}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{6D8E1351-855E-48B2-9C8B-138469E0BE99}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{CAFAA784-CDBD-443D-A9E1-E2FDB6819536}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{CA5AEAA7-F0C0-439D-B1E0-E0DEE3FCA2F9}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{FA334221-1F2B-4A5A-94A3-0306D185E136}] => (Block) D:\world_of_warplanes\wowplauncher.exe FirewallRules: [{326DB3B3-5BBC-4798-B56D-876DBCCA5A8F}] => (Block) D:\world_of_warplanes\wowplauncher.exe FirewallRules: [UDP Query User{0F4A2DDB-0B2C-4948-B6CB-8F10B1E4E4E3}D:\world_of_warplanes\wowplauncher.exe] => (Allow) D:\world_of_warplanes\wowplauncher.exe FirewallRules: [TCP Query User{E46602EF-F6B8-4DB3-AB2B-5360C11E1C2C}D:\world_of_warplanes\wowplauncher.exe] => (Allow) D:\world_of_warplanes\wowplauncher.exe FirewallRules: [{E2C97CE5-9CD9-4A42-A038-E549712430EE}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{E0D0F348-FD77-4946-97A6-8A4B36EAE1E0}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{5333D402-2A74-44C2-9CCB-0F4ABB46CFA3}] => (Allow) LPort=48114 FirewallRules: [{15787712-F611-433A-B99D-4A1FED7D2776}] => (Allow) LPort=48113 FirewallRules: [{E1B4DF2B-8176-4F12-974D-ECB8DE59F12D}] => (Allow) LPort=48114 FirewallRules: [{F1C75F6B-9F69-4C13-88CC-B6FD0003AC3B}] => (Allow) LPort=48113 FirewallRules: [{1F2CF676-9024-46F4-A61A-ADE94313AC40}] => (Allow) LPort=48113 FirewallRules: [{6DA83DC1-205A-48EB-8EDE-32BBD194FC5E}] => (Allow) LPort=26675 FirewallRules: [{814E9EB4-64A9-4CE5-9CC1-1CFA52C4E6BF}] => (Allow) C:\Program Files\SolidWorks Corp\SolidWorks\photoview\photoview360_cl.exe FirewallRules: [{0F00B33C-C222-4CDD-BB72-5A1C96F866A4}] => (Allow) C:\Program Files\SolidWorks Corp\SolidWorks\photoview\photoview360_cl.exe FirewallRules: [{E7A341E7-DAD9-4D06-ACE4-0A13C84E09A8}] => (Allow) C:\Program Files\SolidWorks Corp\SolidWorks\photoview\photoview360.exe FirewallRules: [{ABC190FB-7BC9-439F-BBAF-4BB4A349E3D5}] => (Allow) C:\Program Files\SolidWorks Corp\SolidWorks\photoview\photoview360.exe FirewallRules: [{452708CB-4ED4-4796-9EAE-205D4653E8E8}] => (Allow) C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe FirewallRules: [{C7C7805B-667A-4779-86A5-AB236B89BC8C}] => (Allow) C:\Program Files\SolidWorks Corp\SolidWorks\swScheduler\DTSCoordinatorService.exe FirewallRules: [{20266F77-4960-4739-8604-BFE192391F46}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{1B7235A4-24D8-4096-A4FF-15A8424A0B86}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe FirewallRules: [{67F803EB-414E-4DA3-9F14-46BFAF4C1218}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe FirewallRules: [{B47DCE39-BD05-4FD0-BC5F-8FCE7C3FBB7F}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{7200A232-CB9A-4548-89E0-CF072E6C2E3E}] => (Allow) LPort=1900 FirewallRules: [{A56F99CF-933B-4F79-9B77-D54139039647}] => (Allow) LPort=2869 FirewallRules: [{56048913-2EE4-4FB6-9B10-B11FD9535645}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{154BA505-4837-4E93-915C-F8F3BDB0BCDF}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe FirewallRules: [{1DD97C5B-76DE-4654-A0DB-EED1E05177A7}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe FirewallRules: [{7EAC2D08-57B9-45D3-8A0F-792F2D32CF40}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe FirewallRules: [{B03FE7BD-28B6-406E-A12D-6CB84AEF0366}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\DBDownloader.exe FirewallRules: [{56CBB59B-BFBF-4632-9F88-36F6F755B130}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe FirewallRules: [{E3A9C912-F758-4105-AE88-BC04F0B7D999}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe FirewallRules: [{5FE75633-0B02-44EF-B122-46CB4E94005A}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [TCP Query User{E07CEAA8-6C13-48E1-8CCB-9656F8C461F5}C:\users\julien\appdata\local\skypeplugin\pluginhost.exe] => (Allow) C:\users\julien\appdata\local\skypeplugin\pluginhost.exe FirewallRules: [UDP Query User{8F4F7C26-72FC-49B9-93FA-581204ACA1B2}C:\users\julien\appdata\local\skypeplugin\pluginhost.exe] => (Allow) C:\users\julien\appdata\local\skypeplugin\pluginhost.exe FirewallRules: [TCP Query User{8BC43C07-3793-4E2A-BF9F-0462B2A6D70A}C:\users\julien\appdata\local\skypeplugin\pluginhost.exe] => (Block) C:\users\julien\appdata\local\skypeplugin\pluginhost.exe FirewallRules: [UDP Query User{5E3FA095-34B4-4741-A02B-F5723D824A21}C:\users\julien\appdata\local\skypeplugin\pluginhost.exe] => (Block) C:\users\julien\appdata\local\skypeplugin\pluginhost.exe FirewallRules: [TCP Query User{931188BC-11FA-4C33-B07B-274FCEAD7D12}D:\movavi photo editor 4\photoeditor.exe] => (Block) D:\movavi photo editor 4\photoeditor.exe FirewallRules: [UDP Query User{DD6B31FF-C81B-4CAC-A208-C7813E034707}D:\movavi photo editor 4\photoeditor.exe] => (Block) D:\movavi photo editor 4\photoeditor.exe FirewallRules: [{377B029E-32AF-475A-BD61-E62F7A38A992}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Points de restauration ========================= 26-11-2017 15:38:28 Installed Photo Editor ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (11/27/2017 09:51:58 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Julien-PC) Description: Échec de l’activation de l’application Microsoft.MicrosoftEdge_8wekyb3d8bbwe!ContentProcess avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (11/27/2017 09:51:57 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.15063.674, horodatage : 0x59cdf479 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000604 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x1c64 Heure de début de l’application défaillante : 0x01d367c183c12fb4 Chemin d’accès de l’application défaillante : C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe Chemin d’accès du module défaillant: unknown ID de rapport : 45abf876-00f3-47bf-b95f-979fb0ebce32 Nom complet du package défaillant : Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe ID de l’application relative au package défaillant : ContentProcess Error: (11/27/2017 09:51:44 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.15063.674, horodatage : 0x59cdf479 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000604 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x1c64 Heure de début de l’application défaillante : 0x01d367c183c12fb4 Chemin d’accès de l’application défaillante : C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe Chemin d’accès du module défaillant: unknown ID de rapport : d2383ecc-137e-494a-bc09-936e8f7a0a5e Nom complet du package défaillant : Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe ID de l’application relative au package défaillant : ContentProcess Error: (11/27/2017 09:50:24 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.15063.674, horodatage : 0x59cdf479 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000604 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x23a0 Heure de début de l’application défaillante : 0x01d367c1585ccd6a Chemin d’accès de l’application défaillante : C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe Chemin d’accès du module défaillant: unknown ID de rapport : 6b7adde1-6e9d-42bb-a2d9-34e587b53969 Nom complet du package défaillant : Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe ID de l’application relative au package défaillant : ContentProcess Error: (11/27/2017 09:50:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Julien-PC) Description: Échec de l’activation de l’application Microsoft.MicrosoftEdge_8wekyb3d8bbwe!ContentProcess avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (11/27/2017 09:50:17 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante MicrosoftEdgeCP.exe, version : 11.0.15063.674, horodatage : 0x59cdf479 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000604 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x1d1c Heure de début de l’application défaillante : 0x01d367c1537fec6a Chemin d’accès de l’application défaillante : C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe Chemin d’accès du module défaillant: unknown ID de rapport : 0c47e6b3-8bfe-4673-90e0-9c3b4b94a03c Nom complet du package défaillant : Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe ID de l’application relative au package défaillant : ContentProcess Error: (11/26/2017 09:56:51 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: Julien-PC) Description: Échec de l’activation de l’application Microsoft.MicrosoftEdge_8wekyb3d8bbwe!MicrosoftEdge avec l’erreur : -2144927142 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel. Error: (11/26/2017 04:53:20 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme PhotoEditor.exe version 4.4.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 2a5c Heure de début : 01d366cb37c11df1 Heure de fin : 21 Chemin d'accès de l'application : C:\Program Files (x86)\Movavi\Photo Editor\PhotoEditor.exe ID de rapport : 89c7fa0d-cca5-4b90-8e66-1b6ef69123dd Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (11/26/2017 04:27:57 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme PhotoEditor.exe version 4.4.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 334c Heure de début : 01d366c64e46c62f Heure de fin : 19 Chemin d'accès de l'application : C:\Program Files (x86)\Movavi\Photo Editor\PhotoEditor.exe ID de rapport : a9a14abd-0814-4e7c-a124-2a6b5b77c136 Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (11/26/2017 03:41:48 PM) (Source: COM) (EventID: 10031) (User: ) Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {95CABCC9-BC57-4C12-B8DF-BA193232AA01} a été refusée Erreurs système: ============= Error: (11/27/2017 09:51:58 PM) (Source: DCOM) (EventID: 10010) (User: Julien-PC) Description: Le serveur Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe!ContentProcess ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/27/2017 09:50:23 PM) (Source: DCOM) (EventID: 10010) (User: Julien-PC) Description: Le serveur Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe!ContentProcess ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/26/2017 09:56:51 PM) (Source: DCOM) (EventID: 10010) (User: Julien-PC) Description: Le serveur Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe!MicrosoftEdge.AppXeb42j1vh6rk395pm0vmcx57dxqjhej5d.mca ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/26/2017 09:14:11 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Intel(R) Common Connectivity Framework n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (11/26/2017 09:14:11 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Intel(R) Common Connectivity Framework. Error: (11/26/2017 09:11:07 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} et l’APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (11/26/2017 09:11:07 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {6B3B8D23-FA8D-40B9-8DBD-B950333E2C52} et l’APPID {4839DDB7-58C2-48F5-8283-E1D1807D0D7D} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (11/26/2017 09:10:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service NetPipeActivator n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (11/26/2017 09:10:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service NetPipeActivator. Error: (11/26/2017 09:10:10 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira.ServiceHost. CodeIntegrity: =================================== Date: 2017-11-28 15:48:27.976 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-28 15:47:54.406 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-28 15:47:54.172 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:07:44.485 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:06:23.396 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:05:02.317 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:03:15.409 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:02:36.262 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:02:35.893 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-11-27 23:02:35.131 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-2450M CPU @ 2.50GHz Pourcentage de mémoire utilisée: 36% Mémoire physique - RAM - totale: 8098.14 MB Mémoire physique - RAM - disponible: 5160.01 MB Mémoire virtuelle totale: 16290.14 MB Mémoire virtuelle disponible: 13246.44 MB ==================== Lecteurs ================================ Drive c: (OS) (Fixed) (Total:185.87 GB) (Free:47.32 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)] Drive d: (DATA) (Fixed) (Total:254.46 GB) (Free:136.31 GB) NTFS Drive e: (SDATA1) (Fixed) (Total:232.87 GB) (Free:193.01 GB) NTFS Drive f: (SDATA2) (Fixed) (Total:232.89 GB) (Free:232.76 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: E3102A4B) Partition 1: (Not Active) - (Size=25 GB) - (Type=1C) Partition 2: (Active) - (Size=185.9 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) Partition 4: (Not Active) - (Size=254.5 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (Size: 465.8 GB) (Disk ID: BBC58B91) Partition 1: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.9 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================