Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 15-11-2017 Exécuté par Maurice (16-11-2017 13:11:02) Exécuté depuis C:\Users\Maurice\Desktop Windows 8.1 (Update) (X64) (2013-12-03 11:17:28) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-981503625-3735549741-1778780651-500 - Administrator - Disabled) HomeGroupUser$ (S-1-5-21-981503625-3735549741-1778780651-1003 - Limited - Enabled) Invité (S-1-5-21-981503625-3735549741-1778780651-501 - Limited - Enabled) Maurice (S-1-5-21-981503625-3735549741-1778780651-1001 - Administrator - Enabled) => C:\Users\Maurice ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adblock Plus pour IE (32-bits et 64-bits) (HKLM\...\{40F6FB81-1B50-443B-A8E0-BC70E62CFB21}) (Version: 1.6 - Eyeo GmbH) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.009.20044 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 4.0.0.1390 - Adobe Systems Incorporated) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Alabama Smith: Escape from Pompeii (HKLM-x32\...\BFG-Alabama Smith - Escape from Pompeii) (Version: - ) Alex Gordon (HKLM-x32\...\BFG-Alex Gordon) (Version: - ) Alice Greenfingers 2 (HKLM-x32\...\BFG-Alice Greenfingers 2) (Version: - ) Annabel (HKLM-x32\...\BFG-Annabel) (Version: - ) Apple Application Support (HKLM-x32\...\{46F044A5-CE8B-4196-984E-5BD6525E361D}) (Version: 2.3.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.) Aqua Words (HKLM-x32\...\BFG-Aqua Words) (Version: - ) Atlantis - Sky Patrol ™ (HKLM-x32\...\BFG-Atlantis - Sky Patrol) (Version: - ) Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team) AviSynth 2.5 (HKLM-x32\...\AviSynth) (Version: - ) Big Fish: Game Manager (HKLM-x32\...\BFGC) (Version: 3.3.0.2 - ) Birds on a Wire (HKLM-x32\...\BFG-Birds on a Wire) (Version: - ) BlackBerry Desktop Software 7.1 (HKLM-x32\...\{BE5B0450-DCCB-4FE9-93E2-3B38D88A745B}) (Version: 7.1.0.41 - Research In Motion Ltd.) Hidden BlackBerry Desktop Software 7.1 (HKLM-x32\...\BlackBerry_Desktop) (Version: 7.1.0.41 - Research In Motion Ltd.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Brother MFL-Pro Suite MFC-9320CW (HKLM-x32\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 3.0.3.0 - Brother Industries, Ltd.) Cérébral Challenge (HKLM-x32\...\BFG-Cerebral Challenge) (Version: - ) CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform) Chicken Invaders 3 Christmas Edition (HKLM-x32\...\BFG-Chicken Invaders 3 Christmas Edition) (Version: - ) Chicken Invaders 4: Ultimate Omelette (HKLM-x32\...\BFG-Chicken Invaders 4 - Ultimate Omelette) (Version: - ) CodeStuff Starter (HKLM-x32\...\CodeStuff Starter) (Version: 5.6.2.9 - CodeStuff) Configuration DivX (HKLM-x32\...\DivX Setup) (Version: 2.6.3.52 - DivX, LLC) Content Transfer (HKLM-x32\...\{CFADE4AF-C0CF-4A04-A776-741318F1658F}) (Version: 1.3.0.23190 - Sony Corporation) ConvertHelper 3.1.1 (HKLM\...\{27CC6AB1-E72B-4179-AF1A-EAE507EBAF52}}_is1) (Version: - DownloadHelper) Corel PaintShop Pro X5 (HKLM-x32\...\_{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation) Corel PaintShop Pro X5 (HKLM-x32\...\{15180A90-1FC0-47E4-A150-3AECEF07B3B6}) (Version: 15.2.0.12 - Corel Corporation) Hidden CrystalDiskInfo 4.1.4 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 4.1.4 - Crystal Dew World) CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3519.58 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Defraggler (HKLM\...\Defraggler) (Version: 2.21 - Piriform) Desktop-Reminder 2 (HKLM-x32\...\{288487BA-D8C5-4C81-BD89-C7E49DD48E18}) (Version: 2.128 - Polenter - Software Solutions) Hidden Desktop-Reminder 2 (HKLM-x32\...\Desktop-Reminder 2) (Version: 2.128 - Polenter - Software Solutions) Dessinez, C'est Disney 3 Studio Graphique (HKLM-x32\...\{AF767F06-A1F3-11D5-AA2E-0008C760B784}) (Version: - ) EBP Btrieve 8.6 (HKLM-x32\...\{747D0A04-5BDA-478D-A010-68CCCBE4D15A}) (Version: 1.0 - EBP) Hidden EBP Btrieve 8.6 (HKLM-x32\...\EBP Btrieve 8.6) (Version: - EBP) EBP Comptabilité 12.0 (HKLM-x32\...\{6B83B811-B170-4EFF-9AC9-E5A350C8F210}) (Version: 12.0 - EBP) Hidden EBP Comptabilité 12.0 (HKLM-x32\...\EBP Comptabilité 12.0) (Version: - EBP) e-Carte Bleue Société Générale (HKLM-x32\...\{C55A3E95-021D-4C7B-A8CA-E66BD27468FD}) (Version: 5.6.0.0 - e-Carte Bleue Société Générale) Farm Frenzy 2 (HKLM-x32\...\BFG-Farm Frenzy 2) (Version: - ) Farm Frenzy 3: L'Age de Glace (HKLM-x32\...\BFG-Farm Frenzy 3 - L'Age de Glace) (Version: - ) Fashion Craze (HKLM-x32\...\BFG-Fashion Craze) (Version: - ) FileHippo.com Update Checker (HKLM-x32\...\FileHippo.com) (Version: - FileHippo.com) Fishdom (HKLM-x32\...\BFG-Fishdom) (Version: - ) Free Devis Factures 2 (HKLM-x32\...\FREE DEVIS FACTURES 2) (Version: 2.0.395.0 - Free Devis Factures) FreeStyle Libre (HKLM-x32\...\FreeStyle Libre 1.0) (Version: 1.0 - Abbott Diabetes Care) Frogs in Love (HKLM-x32\...\BFG-Frogs in Love) (Version: - ) Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden HDD Regenerator (HKLM-x32\...\{97A39919-9FEA-48B7-AB2B-4F99212D1E98}) (Version: 20.11.0011 - Abstradrome) ICA (HKLM-x32\...\{1563C6F2-E9B5-42DE-9EA6-207C9A8C2DFB}) (Version: 15.0.0.183 - Corel Corporation) Hidden Insaniquarium (HKLM-x32\...\BFG-Insaniquarium) (Version: - ) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3412 - Intel Corporation) IPM_PSP_COM (HKLM-x32\...\{154B0B16-ABCD-4A06-B0B7-8146B7A89B25}) (Version: 15.0.0.183 - Corel Corporation) Hidden Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation) Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden LG PC Suite II (HKLM-x32\...\{14DCD95A-EBA3-4BF0-B7EF-533852E99BE6}) (Version: 2.00.0000 - LG PC Suite) LG PC Suite II (HKLM-x32\...\{8D8E4C50-3A16-44AB-9034-373E7BD9C1A8}) (Version: 2.00.0000 - LG PC Suite) Hidden LG USB Modem Driver (HKLM-x32\...\{C3ABE126-2BB2-4246-BFE1-6797679B3579}) (Version: 4.9.5.1 - LG Electronics) Luxor 3 (HKLM-x32\...\BFG-Luxor 3) (Version: - ) Ma-Config.com (64 bits) (HKLM\...\{EA05AB38-4729-427E-9859-84933E278B51}) (Version: 7.1.1.0 - Cybelsoft) Mahjongg Dimensions Deluxe (HKLM-x32\...\BFG-Mahjongg Dimensions Deluxe) (Version: - ) Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) MergeModule_x64 (HKLM\...\{12DCC5A7-0100-4433-B4FF-217A3C5DC83B}) (Version: 9.3.00 - Sony Corporation) Hidden MergeModule_x86 (HKLM-x32\...\{DD7721BB-CF1C-4DC9-AD87-8D5FB75413B7}) (Version: 9.3.00 - Sony Corporation) Hidden Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-0409-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation) Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Works 6-9 Converter (HKLM-x32\...\{95140000-0137-040C-0000-0000000FF1CE}) (Version: 14.0.6120.5002 - Microsoft Corporation) Mise à jour Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version: - Microsoft) Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version: - Microsoft) Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version: - Microsoft) Mise à jour Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version: - Microsoft) Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 56.0.2 (x64 fr) (HKLM\...\Mozilla Firefox 56.0.2 (x64 fr)) (Version: 56.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.2 - Mozilla) Mozilla Thunderbird 38.5.0 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 38.5.0 (x86 fr)) (Version: 38.5.0 - Mozilla) Mushroom Age (HKLM-x32\...\BFG-Mushroom Age) (Version: - ) National Geographic ™ presents: Herod's Lost Tomb (HKLM-x32\...\BFG-Herods Lost Tomb) (Version: - ) Neptune's Secret (HKLM-x32\...\BFG-Neptune's Secret) (Version: - ) Paint Shop Pro 7 (HKLM-x32\...\{0F211D27-C463-43A9-9B8A-12CA8D6D90DE}) (Version: 7.0.0.0000 - Jasc Software Inc) PC Inspector File Recovery (HKLM-x32\...\{0DD140D3-9563-481E-AA75-BA457CBDAEF2}) (Version: 4.0 - ) Peggle Deluxe (HKLM-x32\...\BFG-Peggle Deluxe) (Version: - ) Pervasive System Analyzer (HKLM-x32\...\Pervasive System Analyzer) (Version: - ) Pervasive.SQL V8 Workgroup (v8.6) (HKLM-x32\...\{5FCFC78C-438A-4F4D-B266-E32B8468BAFC}) (Version: 8.60.192.033 - Pervasive Software Inc. ) Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.) PMB_ModeEditor (HKLM-x32\...\{D5318740-B088-4B1A-B6A8-1F90A172CCD1}) (Version: 9.3.00 - Sony Corporation) Hidden PMB_ServiceUploader (HKLM-x32\...\{E7FDF11C-12BB-4D6F-9B6D-F8E488C776DC}) (Version: 10.1.00 - Sony Corporation) Hidden PowerpointImageExtractor (HKLM-x32\...\PowerpointImageExtractor_is1) (Version: V 1.2b (hxxp://alainlecomte.free.fr/Download.htm) - ) PSPPContent (HKLM-x32\...\{1522E36C-3739-41E4-8CD3-A4AFEA70086A}) (Version: 15.2.0.12 - Corel Corporation) Hidden PSPPHelp (HKLM-x32\...\{153DD765-C8C6-4893-8CEF-D965351D82EC}) (Version: 15.0.0.183 - Corel Corporation) Hidden PSPPro64 (HKLM\...\{1551A29F-B1B0-43CA-90B5-E6E5186F683E}) (Version: 15.0.0.183 - Corel Corporation) Hidden Puzzle Express (HKLM-x32\...\BFG-Puzzle Express) (Version: - ) Puzzling Paws (HKLM-x32\...\BFG-Puzzling Paws) (Version: - ) Rapport (HKLM-x32\...\{1DD81E7D-0D28-4CEB-87B2-C041A4FCB215}) (Version: 3.5.1404.19 - Trusteer) Hidden Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.) Setup (HKLM-x32\...\{15002A1B-C1E7-4E91-A3EC-5502BF924A32}) (Version: 15.0.0.183 - Nom de votre société) Hidden SFR web trotter (HKLM-x32\...\SFR web trotter) (Version: 1.12.01.287 - Huawei Technologies Co.,Ltd) Sheep's Quest (HKLM-x32\...\BFG-Sheep's Quest) (Version: - ) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.104 - Skype Technologies S.A.) Stellar Phoenix Photo Recovery v3.2 (HKLM-x32\...\Stellar Phoenix Photo Recovery_is1) (Version: - Stellar Information Systems Ltd) Strike Ball 3 (HKLM-x32\...\BFG-Strike Ball 3) (Version: - ) Sudoku V 3.0.2 (HKLM-x32\...\Sudoku_is1) (Version: - Olivier RAVET) Supercow (HKLM-x32\...\BFG-Supercow) (Version: - ) TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.17396 - TeamViewer) TreeSize Free V3.3.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 3.3.2 - JAM Software) True Image 2013 (HKLM-x32\...\{500FD1D4-D3FC-44A0-8187-66B6BD167B48}) (Version: 16.0.5551 - Acronis) Hidden True Image 2013 (HKLM-x32\...\{500FD1D4-D3FC-44A0-8187-66B6BD167B48}Visible) (Version: 16.0.5551 - Acronis) Trusteer Sécurité des points d'accès (HKLM-x32\...\Rapport_msi) (Version: 3.5.1404.19 - Trusteer) Turtle Odyssey 2 (HKLM-x32\...\BFG-Turtle Odyssey 2) (Version: - ) Unchecky v1.1 (HKLM-x32\...\Unchecky) (Version: 1.1 - Reason Software Company Inc.) Unlocker 1.9.2 (HKLM\...\Unlocker) (Version: 1.9.2 - Cedrick Collomb) Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) VC80CRTRedist - 8.0.50727.6195 (HKLM-x32\...\{933B4015-4618-4716-A828-5289FC03165F}) (Version: 1.2.0 - DivX, Inc) Hidden Visionneuse Microsoft PowerPoint (HKLM-x32\...\{95140000-00AF-040C-0000-0000000FF1CE}) (Version: 14.0.7015.1000 - Microsoft Corporation) VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies) WinRAR 5.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH) Word Mojo Gold (HKLM-x32\...\BFG-Word Mojo Gold) (Version: - ) XnView 2.34 (HKLM-x32\...\XnView_is1) (Version: 2.34 - Gougelet Pierre-e) ZebHelpProcess 2.41 (HKLM-x32\...\Zeb Help Process_is1) (Version: 2.41 - Nicolas Coolman) ZebHelpProcess 2016 (HKLM-x32\...\ZebHelpProcess_is1) (Version: 2015 - Nicolas Coolman) ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-981503625-3735549741-1778780651-1001_Classes\CLSID\{162C6FB5-44D3-435B-903D-E613FA093FB5}\InprocServer32 -> C:\Users\Maurice\AppData\Local\Microsoft\OneDrive\17.3.6998.0830\amd64\FileCoAuthLib64.dll => Pas de fichier ContextMenuHandlers1: [Corel PaintShop Pro X5] -> {D6D67107-2AFB-41D4-97E3-4F6ED2A21FF8} => c:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PSPContextMenu64.dll [2012-07-20] (Corel Software, Inc.) ContextMenuHandlers1: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2013-02-06] (Piriform Ltd) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers2: [Corel PaintShop Pro X5] -> {D6D67107-2AFB-41D4-97E3-4F6ED2A21FF8} => c:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PSPContextMenu64.dll [2012-07-20] (Corel Software, Inc.) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers3: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] () ContextMenuHandlers4: [Corel PaintShop Pro X5] -> {D6D67107-2AFB-41D4-97E3-4F6ED2A21FF8} => c:\Program Files (x86)\Corel\Corel PaintShop Pro X5\PSPContextMenu64.dll [2012-07-20] (Corel Software, Inc.) ContextMenuHandlers4: [MSSE] -> {0365FE2C-F183-4091-AC82-BFC39FB75C49} => -> Pas de fichier ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Pas de fichier ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Pas de fichier ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\WINDOWS\system32\igfxpph.dll [2014-01-25] (Intel Corporation) ContextMenuHandlers6: [DefragglerShellExtension] -> {4380C993-0C43-4E02-9A7A-0D40B6EA7590} => C:\Program Files\Defraggler\DefragglerShell64.dll [2013-02-06] (Piriform Ltd) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Pas de fichier ContextMenuHandlers6: [UnlockerShellExtension] -> {DDE4BEEB-DDE6-48fd-8EB5-035C09923F83} => C:\Program Files\Unlocker\UnlockerCOM.dll [2010-07-15] () ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2013-12-01] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2013-12-01] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {2B2EC089-2648-428C-96DD-AE7C23C0C39E} - System32\Tasks\START SKYDRIVE => C:\WINDOWS\System32\SkyDrive.exe [2014-10-31] (Microsoft Corporation) Task: {57BC0FF8-1419-44CF-AE0E-F90DF230F782} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd) Task: {616E9448-2AF5-42AB-A1CB-9D2AF63F432C} - System32\Tasks\{07117381-D12B-46B4-9D88-EE957A69964B} => C:\WINDOWS\system32\pcalua.exe -a G:\Setup\SETUP.EXE -d G:\Setup Task: {68129F82-F07E-4D4D-BC08-520B05812948} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-29] (Google Inc.) Task: {6913ABA1-286D-467B-A0EA-370AD4723E27} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2017-10-11] (Microsoft Corporation) Task: {81ACF03B-09AA-4898-9BE7-13D497AD556A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-29] (Google Inc.) Task: {96F28C2E-3608-4C9F-AC3F-0AF7E233A8DF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated) Task: {BE4886DA-33E3-40AB-84DE-6DC0CC432569} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-15] (Adobe Systems Incorporated) Task: {BE8AEA87-91C1-4746-85D8-7CDE23D78075} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-15] (Adobe Systems Incorporated) Task: {C8698905-78A8-45DC-8BD9-6F8A23A1B71F} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2010-07-15 05:44 - 2010-07-15 05:44 - 000020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll 2016-04-01 07:52 - 2016-01-19 08:16 - 000285184 _____ () C:\Program Files (x86)\FreeStyle Libre\MAS.FreeStyleLibre.exe 2017-11-12 09:34 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2017-11-12 09:34 - 2017-11-01 08:54 - 002358736 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2006-12-07 15:08 - 2006-12-07 15:08 - 000032768 _____ () C:\PVSW\Bin\WGE_SRV.exe 2004-07-22 12:40 - 2004-07-22 12:40 - 000106546 _____ () C:\PVSW\BIN\W3dbsmgr.EXE 2014-03-23 16:04 - 2014-03-23 16:04 - 000557056 _____ () C:\Program Files (x86)\Trusteer\Rapport\bin\js32.dll 2004-07-22 12:19 - 2004-07-22 12:19 - 000700464 _____ () C:\PVSW\BIN\W3MKDE.DLL 2004-07-22 12:25 - 2004-07-22 12:25 - 000127026 _____ () C:\PVSW\BIN\W3COMSRV.DLL ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\ProgramData\Temp:2CB9631F [134] AlternateDataStreams: C:\ProgramData\Temp:3C846A5B [400] AlternateDataStreams: C:\ProgramData\Temp:43E95997 [428] AlternateDataStreams: C:\ProgramData\Temp:60AC3BC3 [456] AlternateDataStreams: C:\ProgramData\Temp:70B3C619 [406] AlternateDataStreams: C:\ProgramData\Temp:7631EA83 [145] AlternateDataStreams: C:\ProgramData\Temp:BABA07C2 [422] AlternateDataStreams: C:\ProgramData\Temp:EB333CFC [444] AlternateDataStreams: C:\ProgramData\Temp:F1175E1D [446] AlternateDataStreams: C:\ProgramData\Temp:FBFC061F [412] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\44926826.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\44926826.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\ma-config.com -> hxxp://ma-config.com IE trusted site: HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\ma-config.com -> hxxps://ma-config.com IE trusted site: HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\touslesdrivers.com -> hxxp://touslesdrivers.com IE restricted site: HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\skype.com -> hxxps://apps.skype.com ==================== Hosts contenu: ========================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2012-07-26 06:26 - 2017-11-16 07:07 - 000002132 _____ C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 rp.yefeneri2.com 0.0.0.0 os.yefeneri2.com 0.0.0.0 os2.yefeneri2.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com 0.0.0.0 nsis.bisrv.com 0.0.0.0 cdn.file2desktop.com 0.0.0.0 cdn.goateastcach.us 0.0.0.0 cdn.guttastatdk.us 0.0.0.0 cdn.inskinmedia.com 0.0.0.0 cdn.insta.oibundles2.com 0.0.0.0 cdn.insta.playbryte.com 0.0.0.0 cdn.llogetfastcach.us 0.0.0.0 cdn.montiera.com 0.0.0.0 cdn.msdwnld.com 0.0.0.0 cdn.mypcbackup.com 0.0.0.0 cdn.ppdownload.com 0.0.0.0 cdn.riceateastcach.us 0.0.0.0 cdn.shyapotato.us 0.0.0.0 cdn.solimba.com ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-981503625-3735549741-1778780651-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Maurice\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\Services: AeLookupSvc => 3 MSCONFIG\Services: afcdpsrv => 2 MSCONFIG\Services: Blackberry Device Manager => 3 MSCONFIG\Services: Pervasive.SQL Workgroup => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: syncagentsrv => 2 MSCONFIG\Services: TeamViewer8 => 2 HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service" HKLM\...\StartupApproved\Run: => "HotKeysCmds" HKLM\...\StartupApproved\Run: => "IgfxTray" HKLM\...\StartupApproved\Run: => "Persistence" HKLM\...\StartupApproved\Run: => "ZAM" HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor" HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe" HKLM\...\StartupApproved\Run32: => "DivXMediaServer" HKLM\...\StartupApproved\Run32: => "DivXUpdate" HKLM\...\StartupApproved\Run32: => "PowerDVD12DMREngine" HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched" HKLM\...\StartupApproved\Run32: => "PowerDVD12Agent" HKLM\...\StartupApproved\Run32: => "APSDaemon" HKLM\...\StartupApproved\Run32: => "ControlCenter3" HKLM\...\StartupApproved\Run32: => "Acronis Scheduler2 Service" HKLM\...\StartupApproved\Run32: => "ContentTransferWMDetector.exe" HKLM\...\StartupApproved\Run32: => "FreeStyleLibreautorunexe" HKLM\...\StartupApproved\Run32: => "ProductUpdater" HKLM\...\StartupApproved\Run32: => "ZAM" HKLM\...\StartupApproved\Run32: => "Malwarebytes TrayApp" HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-981503625-3735549741-1778780651-1001\...\StartupApproved\Run: => "Mobile Partner" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{FEF66183-797A-4023-B025-70294020BF52}] => (Allow) LPort=4482 FirewallRules: [{150674F9-291E-4D10-9E4E-D7C7CD164D5F}] => (Allow) LPort=4482 FirewallRules: [{3DB18E21-CEAB-459F-8349-1666BA7C4271}] => (Allow) LPort=4481 FirewallRules: [{88396D08-F7A0-43A0-A481-7BEEB7741355}] => (Allow) LPort=4481 FirewallRules: [{B9CDBEE8-6F77-449A-A315-B76CC6844E0D}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe FirewallRules: [{D9F78F57-FDA3-48E6-A607-810F8A6039FD}] => (Allow) C:\Program Files (x86)\Research In Motion\BlackBerry Desktop\Rim.Desktop.exe FirewallRules: [{EBF091F7-7029-4050-82D4-BA050FFC301E}] => (Allow) C:\Program Files\ma-config.com\MaConfigAgent.exe FirewallRules: [{F86E0094-5AA1-427E-A39F-799495D5F1D7}] => (Allow) C:\Program Files\ma-config.com\MaConfigAgent.exe FirewallRules: [{AC63DD5B-7784-48B7-84B4-731C1E163222}] => (Allow) LPort=48114 FirewallRules: [{1BFA4C75-7E04-4A30-AA06-C40AE9A4424D}] => (Allow) LPort=48113 FirewallRules: [{4238C5E3-0CE3-4EA0-B42B-9CD770163601}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{CFA52E87-E219-48AE-9A8F-336ABECDCC8A}] => (Allow) C:\PVSW\Bin\w3dbsmgr.exe FirewallRules: [{62902BB1-FC48-43F5-A9E6-89775DB11CF2}] => (Allow) C:\PVSW\Bin\w3dbsmgr.exe FirewallRules: [{33AE326C-6D56-4D12-B185-6828B9A50C57}] => (Allow) C:\PVSW\Bin\w3dbsmgr.exe FirewallRules: [{FC851083-1EBA-4F43-8DD8-0B0B10D88154}] => (Allow) C:\PVSW\Bin\w3dbsmgr.exe FirewallRules: [{92D7696D-3D58-4491-B032-AD8AD4C079AE}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{15D24860-0976-48E4-A7B4-A66E9E72B6E6}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe FirewallRules: [{394E3F10-0644-483D-8318-E2007436EFCB}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe FirewallRules: [{FF39F30F-D6E9-46A5-B687-E05542C05B7D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe FirewallRules: [{77E3098C-CC12-4D30-8DBF-FF353D38F67B}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe FirewallRules: [{810D9F26-A420-410A-A9DF-5A5B1F0FE936}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [{9B2ED8E1-67BF-44AF-A363-745F2355C3E4}] => (Allow) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe FirewallRules: [TCP Query User{60066A25-B069-4DB8-87F0-36E80C3F2CD1}C:\windows\system32\mmc.exe] => (Block) C:\windows\system32\mmc.exe FirewallRules: [UDP Query User{A3714BA4-6C6C-4DD4-AA7A-5E82FEE7534F}C:\windows\system32\mmc.exe] => (Block) C:\windows\system32\mmc.exe FirewallRules: [{B302C7EA-C253-45B3-9B45-43322941E8C1}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{97A57BCB-4A3D-4689-BA09-E742439BB186}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{8401DB3C-C766-4943-A204-6194221550FF}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{883B012B-E828-4B88-9425-21E5E65B6204}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{AA33016D-F9E9-4CC7-A8FF-C1E7FB6CCB8A}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{F95D6E35-17A8-429D-8682-8F7B8344EF67}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{9316C877-2FE4-4055-8D52-996F5740D7CD}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{75F45AF4-4999-4C24-A6C1-CBAD568B38CF}] => (Allow) LPort=2869 FirewallRules: [{162B4821-91D5-42E0-A95B-DC6B21C70A92}] => (Allow) LPort=1900 FirewallRules: [{9A29DDBC-4A3B-4320-A066-91552ADB9F29}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{EE7B7BA5-3B26-4746-A9E1-E47A7C59F777}] => (Allow) LPort=1720 FirewallRules: [{78CC8123-9708-4CAB-840A-9EE82872EA65}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{6979045B-8C9B-4501-B4C0-CBB116508994}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{F1F9FA25-8D07-49A0-9736-C365DCAA1F7B}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe FirewallRules: [{7AF4A72C-1FBD-4B16-9947-F91D41FCEB53}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMR\PowerDVD12DMREngine.exe FirewallRules: [{3E3340E5-3304-4056-842E-0C3550B92841}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe FirewallRules: [{BE450BD4-CBF4-4862-B860-4DFA317985A1}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12Agent.exe FirewallRules: [{9C955D50-DD44-49B0-A3A4-D8C6AF6770B4}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe FirewallRules: [{0A2D95F8-4157-46F9-BCA5-7B564E762F79}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD Cinema\PowerDVDCinema12.exe FirewallRules: [{A061FA84-E7D5-4A1E-8663-CCEAF5B940F0}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{36F59D0A-9C68-4822-805A-5EC3F4959B66}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe ==================== Points de restauration ========================= 02-11-2017 07:19:53 Point de contrôle planifié 10-11-2017 08:04:06 Point de contrôle planifié 15-11-2017 08:37:31 Windows Update ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (11/16/2017 11:08:59 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4406 Error: (11/16/2017 11:08:59 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4406 Error: (11/16/2017 11:08:59 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/16/2017 11:08:58 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 3312 Error: (11/16/2017 11:08:58 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 3312 Error: (11/16/2017 11:08:58 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/16/2017 11:08:57 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 2203 Error: (11/16/2017 11:08:57 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 2203 Error: (11/16/2017 11:08:57 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/16/2017 11:08:55 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1094 Erreurs système: ============= Error: (11/16/2017 11:09:00 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (11/16/2017 11:08:38 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: ) Description: 4 Error: (11/16/2017 10:14:31 AM) (Source: Ntfs) (EventID: 55) (User: AUTORITE NT) Description: Une défaillance a été détectée dans la structure du système de fichiers sur le volume ??. La nature exacte de la défaillance est inconnue. Les structures de système de fichiers doivent être analysées en ligne. Error: (11/16/2017 10:14:31 AM) (Source: Ntfs) (EventID: 55) (User: AUTORITE NT) Description: Une défaillance a été détectée dans la structure du système de fichiers sur le volume ??. La nature exacte de la défaillance est inconnue. Les structures de système de fichiers doivent être analysées en ligne. Error: (11/16/2017 10:14:31 AM) (Source: Ntfs) (EventID: 55) (User: AUTORITE NT) Description: Une défaillance a été détectée dans la structure du système de fichiers sur le volume ??. La nature exacte de la défaillance est inconnue. Les structures de système de fichiers doivent être analysées en ligne. Error: (11/16/2017 10:14:31 AM) (Source: Ntfs) (EventID: 55) (User: AUTORITE NT) Description: Une défaillance a été détectée dans la structure du système de fichiers sur le volume ??. La nature exacte de la défaillance est inconnue. Les structures de système de fichiers doivent être analysées en ligne. Error: (11/16/2017 10:14:31 AM) (Source: Ntfs) (EventID: 55) (User: AUTORITE NT) Description: Une défaillance a été détectée dans la structure du système de fichiers sur le volume ??. Une défaillance a été détectée dans une structure d’index de système de fichiers. Le numéro de référence du fichier est 0x5000000000005. Le nom du fichier est « \ ». L’attribut d’index endommagé est « :$I30:$INDEX_ALLOCATION ». Error: (11/16/2017 07:08:10 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service HWDeviceService64.exe s’est terminé de façon inattendue pour la 1ème fois. Error: (11/16/2017 07:07:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Filtre de bus AGP Intel n’a pas pu démarrer en raison de l’erreur : Le service ne peut pas être démarré parce qu’il est désactivé ou qu’aucun périphérique activé ne lui est associé. Error: (11/15/2017 06:28:45 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service HWDeviceService64.exe s’est terminé de façon inattendue pour la 1ème fois. CodeIntegrity: =================================== Date: 2017-11-12 10:17:23.764 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-09-06 08:34:04.709 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-09-05 07:25:20.343 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-09-04 08:51:58.812 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-09-03 09:17:03.953 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-08-04 15:41:25.577 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2017-06-07 08:39:20.734 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-06 07:40:38.575 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-05 08:25:06.397 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2017-06-04 08:23:50.170 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-3330 CPU @ 3.00GHz Pourcentage de mémoire utilisée: 25% Mémoire physique - RAM - totale: 7884.5 MB Mémoire physique - RAM - disponible: 5895.54 MB Mémoire virtuelle totale: 8396.5 MB Mémoire virtuelle disponible: 6461.95 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:931.17 GB) (Free:799.46 GB) NTFS Drive d: (disque 2) (Fixed) (Total:931.51 GB) (Free:122 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9F65F42F) Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=931.2 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 46DA6288) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================