Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version:21-06-2015 01
Ran by manuel at 2015-06-21 17:35:31
Running from C:\Users\manuel\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrateur (S-1-5-21-109147421-2626192411-2511064847-500 - Administrator - Disabled)
Invité (S-1-5-21-109147421-2626192411-2511064847-501 - Limited - Disabled)
manuel (S-1-5-21-109147421-2626192411-2511064847-1001 - Administrator - Enabled) => C:\Users\manuel
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\uTorrent) (Version: 3.4.2.36318 - BitTorrent Inc.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2004 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2000 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.03.2004.4 - Acer Incorporated)
Accelerer PC (HKLM\...\PCSU-SL_is1) (Version: 3.9.7.1 - Speedchecker Limited)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2004 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.160 - Adobe Systems Incorporated)
Adobe Flash Player 18 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 18.0.0.186 - Adobe Systems Incorporated)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.0.6 - IObit)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.07.2004.0 - Acer Incorporated)
Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 1.6.10.1246 - Avira Operations GmbH & Co. KG)
BetterMarkIt (HKLM-x32\...\A65C21AF-66C1-4966-35BC-4D87A46904E5) (Version: - BetterMarkIt-software) <==== ATTENTION
BietteoRPrioceChec (HKLM-x32\...\{4E5FE462-1A84-47B4-3411-C72434AAD86C}) (Version: - "") <==== ATTENTION
CCleaner (remove only) (HKLM-x32\...\CCleaner) (Version: - Piriform)
Centre Souris et Claviers Microsoft (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Centre Souris et Claviers Microsoft (Version: 2.3.188.0 - Microsoft Corporation) Hidden
Cinema Video 1.8V12.04 (HKLM-x32\...\Cinema Video 1.8V12.04) (Version: 1.36.01.22 - Cinema VideoV12.04) <==== ATTENTION
Classic Shell (HKLM\...\{7C129CF8-199F-4269-AAEE-60B5D8D716E2}) (Version: 4.2.1 - IvoSoft)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit)
ETDWare PS/2-X64 11.6.28.201_WHQL (HKLM\...\Elantech) (Version: 11.6.28.201 - ELAN Microelectronic Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
HD4Good (HKLM-x32\...\HD4Good) (Version: 1.36.01.22 - Buca Apps)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.0.4.30 - IObit)
LightningDownloader (HKLM-x32\...\{0F44DC3H-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - LightningDownloader)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
LuckYoCoupon (HKLM-x32\...\{BA5D43C9-D633-D0EC-CFEA-2ABA974B333D}) (Version: - "") <==== ATTENTION
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Messenger (HKLM-x32\...\rencontre-affinites) (Version: 3.9.8.10 - Rentabiliweb)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 fr) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 fr)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NorwhalIntern (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{361859b7}) (Version: - NorwhalIntern) <==== ATTENTION
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
Opera Stable 29.0.1795.60 (HKLM-x32\...\Opera 29.0.1795.60) (Version: 29.0.1795.60 - Opera Software ASA)
PokerStars.be (HKLM-x32\...\PokerStars.be) (Version: - PokerStars.be)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
PriceFountain (remove only) (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\PriceFountain) (Version: 1.1.0.8 - Price Fountain) <==== ATTENTION!
PrIceMeiinuS (HKLM-x32\...\{06B99631-BFA2-3B7A-F58B-D067C2BA59B7}) (Version: - ) <==== ATTENTION
QQueenCouupon (HKLM-x32\...\{3DE8A1D7-C77F-E02A-70DD-31D29EC5B988}) (Version: - "") <==== ATTENTION
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.20 - Qualcomm Atheros Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.23 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.28145 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
ReOOyalShopperAApPP (HKLM-x32\...\{F6423EE4-93D8-FA04-D09D-A8598F6EFDFD}) (Version: - "") <==== ATTENTION
SalesMagonuet (HKLM-x32\...\{3119AFD3-545C-0955-573A-494F62E61990}) (Version: - "") <==== ATTENTION
Search Snacks 1.10.0.5 (HKLM-x32\...\SearchSnacks_1.10.0.5) (Version: 1.10.0.5 - Search Snacks)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
Smileys We Love Toolbar for IE (HKLM-x32\...\{5D57E386-D294-41BA-9146-FADE0C76EB2A}) (Version: 3.0.27 - SqueekyChocolate, LLC) <==== ATTENTION
Softonic for Windows (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\Softonic for Windows) (Version: 1.5.11 - Softonic International S.L.) <==== ATTENTION
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
Ultimate Guitar Chord Finder Tuner (HKLM-x32\...\{AE9B04F2-E9E8-162C-829B-52C116B3EFCC}) (Version: - "") <==== ATTENTION
UltraCoupon (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - UltraCoupon) <==== ATTENTION
Update for PriceFountain (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\Price Fountain) (Version: - Update for PriceFountain) <==== ATTENTION
Video Bookmarks (HKLM-x32\...\{E370F69F-ED3F-925F-31FC-14D1329A713B}) (Version: - "")
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
11-06-2015 12:52:32 Windows Update
18-06-2015 23:22:28 Point de contrôle planifié
21-06-2015 16:28:29 Classic Shell installé
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {062B80CD-C59B-42A0-9444-62A3DC487F96} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-06-11] (Microsoft Corporation)
Task: {0CD96075-79A6-494F-BCA8-3D11F1C28022} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {0D52FA8F-7D89-45CB-9423-57CD96BF05C5} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro 3.16\OptProLauncher.exe <==== ATTENTION
Task: {0FD2BF1C-5C79-429D-BC71-9830680DB0DE} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)
Task: {1796914F-A0CA-4CAF-A0E5-CE2BA370F34D} - System32\Tasks\Program Manager => C:\Program Files (x86)\Common Files\ProgramManager\ProgramManager.exe
Task: {1CC0F1EB-28F7-44BB-A117-FAC083A81448} - System32\Tasks\AviraSpeedup => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [2015-06-17] (Avira Operations GmbH & Co. KG)
Task: {23E00B63-8F61-4C9A-9989-94A2BC613E9C} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-16] (Microsoft Corporation)
Task: {2E81E189-C181-4D2A-BE43-1956C0FA90F6} - System32\Tasks\PC SpeedUp Service Deactivator => C:\Program Files (x86)\Accelerer PC\PCSUSD.exe [2015-04-07] () <==== ATTENTION
Task: {37700458-742A-4F36-ADF2-465B9DEA6AAF} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {452A804E-6A6C-4578-905A-92CB5467CCED} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001UA => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-18] (Facebook Inc.)
Task: {4E5E97F5-4D8E-4887-962A-E311C28CB53E} - \RegClean Pro No Task File <==== ATTENTION
Task: {52CCE4EF-BA1B-4E6C-A8C2-3FFF7D5871CD} - System32\Tasks\PC-Mechanic Startup => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: {59A5CF2A-CFB1-4C7C-9B39-2D6D2718A830} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-16] (Microsoft Corporation)
Task: {59F9CC08-C987-40C6-A38C-8145A10A22AC} - System32\Tasks\Opera scheduled Autoupdate 1428873121 => C:\Program Files (x86)\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {6A5E5897-048F-42CC-B9AB-E2F0A52476A1} - \avaavaevy No Task File <==== ATTENTION
Task: {6FC73F40-4033-4410-A36A-B9931D5CDEDB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-18] (Adobe Systems Incorporated)
Task: {743F8AA8-1050-4A06-98E9-6A8D265FFC90} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {8243A2EF-5FEB-4624-A58D-20F82842D9A4} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {8450C38D-018E-4740-8CD4-BD4C5129D0FC} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {87AA9B62-BB1E-402C-9540-4935453BB835} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {8C24912A-63B5-4C58-86FB-E2BB4D48B5C5} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-03] (Acer Incorporate)
Task: {9C1FB932-A806-4716-BA00-C3F397277B3E} - System32\Tasks\PC-Mechanic Maintenance => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: {9EA7E221-3C41-4E0D-B183-3719C3A8E7D4} - System32\Tasks\Driver Booster SkipUAC (manuel) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {9F4F86C7-4152-407B-8E3E-8BB3908110E7} - \SearchSnacks Auto Updater 1.10.0.5 Core No Task File <==== ATTENTION
Task: {A9D702E5-CF4B-4876-AF1C-8B332149CC95} - System32\Tasks\Uninstaller_SkipUac_manuel => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {AE786CB8-4CE0-439A-9C7B-1867289FA84F} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {AE9F6354-F7F5-4871-ADC9-F831E65DF118} - System32\Tasks\Driver Booster SkipUAC (Système) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {BE0624D9-F95C-4EFC-AA29-7CFFDC4024B5} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe
Task: {BE7CB0E9-072E-4B77-B7C6-98E672B60648} - System32\Tasks\PC-Mechanic Subscription => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: {CCF73238-097D-4649-9FED-29FC34D18F86} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
Task: {D2DA9715-70DD-4B48-86AD-6C4F1E12DF87} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {D86273F9-D68F-4891-AA24-2B30A35A39B4} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION
Task: {E82C53D3-1BFC-4115-A1FD-93B43DF655C5} - System32\Tasks\ASC7_SkipUac_manuel => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
Task: {E8EA2DA7-264E-4970-9CE8-FD7815B057C5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-05-06] (Acer)
Task: {EB9C8563-E3AD-42AC-AFFE-34F721A05356} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-04-16] (Microsoft Corporation)
Task: {F5655E16-F19D-49B3-853F-8D4101937AAA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001Core => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-18] (Facebook Inc.)
Task: {FC42952B-BCD2-43DC-A0EB-AE4F2211C4BA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-16] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ASC7_SkipUac_manuel.job => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001Core.job => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001UA.job => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\PC SpeedUp Service Deactivator.job => C:\Program Files (x86)\Accelerer PC\PCSUSD.exe <==== ATTENTION
Task: C:\Windows\Tasks\PC-Mechanic Maintenance.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: C:\Windows\Tasks\PC-Mechanic Startup.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: C:\Windows\Tasks\PC-Mechanic Subscription.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_manuel.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
==================== Loaded Modules (Whitelisted) ==============
2015-04-12 23:13 - 2015-04-07 09:45 - 00445640 _____ () C:\Program Files (x86)\Accelerer PC\PCSUService.exe
2013-12-24 11:22 - 2013-12-24 11:22 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-12-24 11:20 - 2013-12-24 11:20 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2015-05-06 16:14 - 2015-05-06 16:14 - 00092928 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
2013-12-24 11:26 - 2013-12-24 11:26 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2015-05-06 16:14 - 2015-05-06 16:14 - 00090368 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
2014-10-28 03:49 - 2013-10-25 13:08 - 00517408 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2015-04-12 23:13 - 2015-04-07 09:45 - 00583968 _____ () C:\Program Files (x86)\Accelerer PC\sqlite3.dll
2014-10-28 03:49 - 2013-01-15 19:48 - 00348992 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl
2014-10-28 03:49 - 2013-01-15 19:48 - 00183616 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl
2014-10-28 03:49 - 2013-01-15 19:48 - 00051008 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2014-10-28 03:49 - 2013-01-15 19:47 - 00893248 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00203008 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00654552 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00641792 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00119552 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2015-06-07 14:36 - 2015-06-07 14:36 - 00015616 _____ () C:\Windows\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2015-05-06 10:08 - 2015-05-06 10:08 - 00013568 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2015-05-06 10:06 - 2015-05-06 10:06 - 00277096 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2015-05-06 16:15 - 2015-05-06 16:15 - 00279296 _____ () C:\Program Files (x86)\Acer\abDocs\libcurl.dll
2014-03-21 13:23 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\manuel\SkyDrive:ms-properties
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\100sexlinks.com -> 100sexlinks.com
There are 4791 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\manuel\AppData\Local\Microsoft\Windows\INetCache\IE\6A5EUQEW\20141119_145524[1].jpg
DNS Servers: 109.88.203.3 - 62.197.111.140
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "ApnTBMon"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\StartupFolder: => "Messenger.lnk"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\StartupFolder: => "YesMessenger.lnk"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "EpicScale"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "Optimizer Pro"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "Softonic for Windows"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{609E3F17-ECE0-498B-A0E3-B7015F965A79}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{C6776762-CD4E-466E-841C-F8C9F31873AC}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{5F04CC39-3309-46C6-AF7E-D401E125C550}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{95C4D4ED-46A7-4026-9E36-A3485293B8FF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{88E1CB2E-23E7-4BEC-94C3-0543FE8418C8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{198B751D-BD59-4D00-AE6E-40B399F17828}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{12E91F39-5BBD-4FD2-A19E-0DC6A45E0536}] => (Allow) C:\Users\manuel\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{E009A318-49A3-40ED-BB78-50BC8CB78180}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{AA9379D6-E4C9-4A40-A72F-654EB33BFF13}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [TCP Query User{2E8F5917-D544-4B1F-A40C-7F2F1A200A9B}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{D792E5A9-BA6C-4A2C-ADCD-1AE48B2B3780}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [{314070AB-8A35-40F3-9BCB-1968B403D187}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{04A6DA44-59D6-4445-B38E-7ADB0AFDFA91}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D395EF5F-3E56-4B0D-8698-BCF7F7E5D56D}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{DE449716-95B4-49C2-96F5-94E83A8C91D2}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{98EE0155-4C07-418C-8BFC-164B48145245}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D21CD6E1-117A-450D-A61D-EE51B2C1A938}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{06198773-44A9-4A5C-9371-83BAE1BBE688}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{30E6972A-8266-4721-8673-64A409DF90F7}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [TCP Query User{0FBBF2C4-5422-48B9-AA11-7E5505A23942}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{FDD79493-6AD0-4B2A-89BA-AB27A13AF1B1}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [TCP Query User{D2E1B5AE-01BC-4DCF-90FE-7D39B3429641}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{5F8B69E5-87EA-453F-8F83-3C2A776BBB98}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{C6EEAB57-5224-4895-B0BB-AF01793A8B97}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{ABF95381-6727-47E9-BBE7-0C1700A29D32}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{D6DFBE8B-9FAE-499C-940A-45A517AC1AFD}] => (Allow) C:\Users\manuel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F18C581E-B52B-4170-AA15-E4A2953DB48C}] => (Allow) C:\Users\manuel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0E338ECA-F3E8-453A-8B1C-E6DC39EC5158}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{21706934-D629-4718-9A54-86385C326F06}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{B08D5754-06BB-4239-9482-5D164D666885}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{D22B5E84-605F-4A63-BF90-74635F9D272C}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{F845A8F6-A888-48B0-A60B-0D0E1FE6A153}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{67AF39FB-5A4A-4F43-980C-3542B50D5A17}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{AAEBD7EB-E116-4D77-B71D-2D6C699A9518}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{FD04E207-824A-4901-941D-7EE614FD89E8}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [TCP Query User{0A71CB66-D2C9-48F8-BC3E-CA514DF161B8}C:\users\manuel\desktop\utorrent_3_4_2_36318.exe] => (Allow) C:\users\manuel\desktop\utorrent_3_4_2_36318.exe
FirewallRules: [UDP Query User{3CF9A704-6944-4DBC-A16E-EAF38DD93CB5}C:\users\manuel\desktop\utorrent_3_4_2_36318.exe] => (Allow) C:\users\manuel\desktop\utorrent_3_4_2_36318.exe
FirewallRules: [{AA4531CC-70B1-42D4-86CA-ED7F5660989F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F4EE5CE3-F6CE-46B7-82F5-A71FC405E332}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{68E39481-8251-4260-8774-207942E0DD75}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{C67F91C3-55B9-4FDF-B1D6-1961827F2522}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{CA683340-16A0-440F-B046-5AA55B3E6BBD}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [UDP Query User{C8640625-18DC-4782-9ED7-191E6E9B2B14}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [TCP Query User{B58EEA27-EEC6-4D83-9FF8-5930EC0F4535}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [UDP Query User{14DE146D-94CF-44B5-941C-638DE3399053}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [{E0D1A37C-5B81-47D0-B5A9-1AE6063F4D8D}] => (Allow) C:\Users\manuel\Downloads\360TS_Setup_Mini(1).exe
FirewallRules: [{61893ABF-65A7-46C0-B005-8FAFFAC42CE5}] => (Allow) C:\Users\manuel\Downloads\360TS_Setup_Mini(1).exe
FirewallRules: [TCP Query User{6ED7D3F2-D5C4-44AB-8544-77D7606F2469}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [UDP Query User{B08A9102-CC47-4925-A23F-AEC1DAB8A9FC}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [{E15E76A2-6AFF-4B12-9F62-453ACF744102}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
System errors:
=============
Error: (06/21/2015 05:11:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service decodit s’est terminé de façon inattendue pour la 1ème fois.
Error: (06/21/2015 04:50:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.Studios.Wordament.
Error: (06/21/2015 04:50:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : AccuWeather.AccuWeatherforWindows8.
Error: (06/21/2015 04:48:17 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : 7digitalLtd.7digitalMusicStore.
Error: (06/21/2015 04:48:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : MAGIX.MusicMakerJam.
Error: (06/21/2015 04:48:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : WildTangentGames.-GamesApp-.
Error: (06/21/2015 04:48:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.BingFoodAndDrink.
Error: (06/21/2015 04:48:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.Reader.
Error: (06/21/2015 04:47:56 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.BingNews.
Error: (06/21/2015 04:47:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : AMZNMobileLLC.KindleforWindows8.
Microsoft Office:
=========================
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
Percentage of memory in use: 80%
Total physical RAM: 3978.27 MB
Available physical RAM: 762.89 MB
Total Pagefile: 8330.27 MB
Available Pagefile: 4202.55 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:446.95 GB) (Free:349.08 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: C9F5C2E7)
Partition: GPT Partition Type.
==================== End of log ============================
Ran by manuel at 2015-06-21 17:35:31
Running from C:\Users\manuel\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrateur (S-1-5-21-109147421-2626192411-2511064847-500 - Administrator - Disabled)
Invité (S-1-5-21-109147421-2626192411-2511064847-501 - Limited - Disabled)
manuel (S-1-5-21-109147421-2626192411-2511064847-1001 - Administrator - Enabled) => C:\Users\manuel
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\uTorrent) (Version: 3.4.2.36318 - BitTorrent Inc.)
abDocs (HKLM-x32\...\{CA4FE8B0-298C-4E5D-A486-F33B126D6A0A}) (Version: 1.07.2004 - Acer Incorporated)
abDocs Office AddIn (HKLM-x32\...\{DCBF3379-246B-47E1-8173-639B63940838}) (Version: 3.02.2000 - Acer Incorporated)
abPhoto (HKLM-x32\...\{B5AD89F2-03D3-4206-8487-018298007DD0}) (Version: 3.03.2004.4 - Acer Incorporated)
Accelerer PC (HKLM\...\PCSU-SL_is1) (Version: 3.9.7.1 - Speedchecker Limited)
Acer Launch Manager (HKLM\...\{C18D55BD-1EC6-466D-B763-8EEDDDA9100E}) (Version: 8.00.8101 - Acer Incorporated)
Acer Portal (HKLM-x32\...\{A5AD0B17-F34D-49BE-A157-C8B3D52ACD13}) (Version: 3.06.2004 - Acer Incorporated)
Acer Quick Access (HKLM\...\{C1FA525F-D701-4B31-9D32-504FC0CF0B98}) (Version: 1.00.3000 - Acer Incorporated)
Acer Recovery Management (HKLM\...\{07F2005A-8CAC-4A4B-83A2-DA98A722CA61}) (Version: 6.00.8100 - Acer Incorporated)
Acer Remote Files (HKLM\...\{13885028-098C-4799-9B71-27DAC96502D5}) (Version: 1.00.3007 - Acer Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.160 - Adobe Systems Incorporated)
Adobe Flash Player 18 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 18.0.0.186 - Adobe Systems Incorporated)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.0.6 - IObit)
AOP Framework (HKLM-x32\...\{4A37A114-702F-4055-A4B6-16571D4A5353}) (Version: 3.07.2004.0 - Acer Incorporated)
Avira (HKLM-x32\...\{8467e01f-0496-42ce-b247-88ef205b4880}) (Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG)
Avira (x32 Version: 1.1.40.29239 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.11.574 - Avira Operations GmbH & Co. KG)
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 1.6.10.1246 - Avira Operations GmbH & Co. KG)
BetterMarkIt (HKLM-x32\...\A65C21AF-66C1-4966-35BC-4D87A46904E5) (Version: - BetterMarkIt-software) <==== ATTENTION
BietteoRPrioceChec (HKLM-x32\...\{4E5FE462-1A84-47B4-3411-C72434AAD86C}) (Version: - "") <==== ATTENTION
CCleaner (remove only) (HKLM-x32\...\CCleaner) (Version: - Piriform)
Centre Souris et Claviers Microsoft (HKLM\...\Microsoft Mouse and Keyboard Center) (Version: 2.3.188.0 - Microsoft Corporation)
Centre Souris et Claviers Microsoft (Version: 2.3.188.0 - Microsoft Corporation) Hidden
Cinema Video 1.8V12.04 (HKLM-x32\...\Cinema Video 1.8V12.04) (Version: 1.36.01.22 - Cinema VideoV12.04) <==== ATTENTION
Classic Shell (HKLM\...\{7C129CF8-199F-4269-AAEE-60B5D8D716E2}) (Version: 4.2.1 - IvoSoft)
CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.3126.57 - CyberLink Corp.)
Driver Booster 2.1 (HKLM-x32\...\Driver Booster_is1) (Version: 2.1 - IObit)
ETDWare PS/2-X64 11.6.28.201_WHQL (HKLM\...\Elantech) (Version: 11.6.28.201 - ELAN Microelectronic Corp.)
Facebook Video Calling 3.1.0.521 (HKLM-x32\...\{2091F234-EB58-4B80-8C96-8EB78C808CF7}) (Version: 3.1.521 - Skype Limited)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.124 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
HD4Good (HKLM-x32\...\HD4Good) (Version: 1.36.01.22 - Buca Apps)
Identity Card (HKLM-x32\...\{3D9CB654-99AD-4301-89C6-0D12A790767C}) (Version: 2.00.8100 - Acer Incorporated)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3496 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.0.1016 - Intel Corporation)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 4.0.4.30 - IObit)
LightningDownloader (HKLM-x32\...\{0F44DC3H-6E62-4961-A14B-95323C512F9B}_is1) (Version: 1.0 - LightningDownloader)
Live Updater (HKLM-x32\...\{EE26E302-876A-48D9-9058-3129E5B99999}) (Version: 2.00.8100 - Acer Incorporated)
LuckYoCoupon (HKLM-x32\...\{BA5D43C9-D633-D0EC-CFEA-2ABA974B333D}) (Version: - "") <==== ATTENTION
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Messenger (HKLM-x32\...\rencontre-affinites) (Version: 3.9.8.10 - Rentabiliweb)
Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4454.1510 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30514.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 fr) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 fr)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 36.0 - Mozilla)
Nero BackItUp 12 Essentials OEM.a01 (HKLM-x32\...\{551AC8F2-FEA2-4B45-ACF7-C98681233CC9}) (Version: 12.5.01200 - Nero AG)
NorwhalIntern (HKLM-x32\...\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{361859b7}) (Version: - NorwhalIntern) <==== ATTENTION
Office Addin (HKLM-x32\...\{6D2BBE1D-E600-4695-BA37-0B0E605542CC}) (Version: 2.02.2009 - Acer)
Opera Stable 29.0.1795.60 (HKLM-x32\...\Opera 29.0.1795.60) (Version: 29.0.1795.60 - Opera Software ASA)
PokerStars.be (HKLM-x32\...\PokerStars.be) (Version: - PokerStars.be)
Prerequisite installer (x32 Version: 12.0.0003 - Nero AG) Hidden
PriceFountain (remove only) (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\PriceFountain) (Version: 1.1.0.8 - Price Fountain) <==== ATTENTION!
PrIceMeiinuS (HKLM-x32\...\{06B99631-BFA2-3B7A-F58B-D067C2BA59B7}) (Version: - ) <==== ATTENTION
QQueenCouupon (HKLM-x32\...\{3DE8A1D7-C77F-E02A-70DD-31D29EC5B988}) (Version: - "") <==== ATTENTION
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.314 - Qualcomm Atheros Communications)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.20 - Qualcomm Atheros Inc.)
Qualcomm Atheros WLAN and Bluetooth Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 12.23 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.28145 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7246 - Realtek Semiconductor Corp.)
ReOOyalShopperAApPP (HKLM-x32\...\{F6423EE4-93D8-FA04-D09D-A8598F6EFDFD}) (Version: - "") <==== ATTENTION
SalesMagonuet (HKLM-x32\...\{3119AFD3-545C-0955-573A-494F62E61990}) (Version: - "") <==== ATTENTION
Search Snacks 1.10.0.5 (HKLM-x32\...\SearchSnacks_1.10.0.5) (Version: 1.10.0.5 - Search Snacks)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)
Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.102 - Skype Technologies S.A.)
Smileys We Love Toolbar for IE (HKLM-x32\...\{5D57E386-D294-41BA-9146-FADE0C76EB2A}) (Version: 3.0.27 - SqueekyChocolate, LLC) <==== ATTENTION
Softonic for Windows (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\Softonic for Windows) (Version: 1.5.11 - Softonic International S.L.) <==== ATTENTION
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
Ultimate Guitar Chord Finder Tuner (HKLM-x32\...\{AE9B04F2-E9E8-162C-829B-52C116B3EFCC}) (Version: - "") <==== ATTENTION
UltraCoupon (HKLM-x32\...\{37476589-E48E-439E-A706-56189E2ED4C4}_is1) (Version: - UltraCoupon) <==== ATTENTION
Update for PriceFountain (HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\Price Fountain) (Version: - Update for PriceFountain) <==== ATTENTION
Video Bookmarks (HKLM-x32\...\{E370F69F-ED3F-925F-31FC-14D1329A713B}) (Version: - "")
Visual Studio 2005 Tools for Office Second Edition Runtime (HKLM-x32\...\Microsoft Visual Studio 2005 Tools for Office Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime (HKLM-x32\...\Visual Studio Tools for the Office system 3.0 Runtime) (Version: - Microsoft Corporation)
Visual Studio Tools for the Office system 3.0 Runtime Service Pack 1 (KB949258) (HKLM-x32\...\{8FB53850-246A-3507-8ADE-0060093FFEA6}.KB949258) (Version: 1 - Microsoft Corporation)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
11-06-2015 12:52:32 Windows Update
18-06-2015 23:22:28 Point de contrôle planifié
21-06-2015 16:28:29 Classic Shell installé
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {062B80CD-C59B-42A0-9444-62A3DC487F96} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-06-11] (Microsoft Corporation)
Task: {0CD96075-79A6-494F-BCA8-3D11F1C28022} - System32\Tasks\Microsoft_MKC_Logon_Task_itype.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {0D52FA8F-7D89-45CB-9423-57CD96BF05C5} - System32\Tasks\Optimizer Pro Schedule => C:\Program Files (x86)\Optimizer Pro 3.16\OptProLauncher.exe <==== ATTENTION
Task: {0FD2BF1C-5C79-429D-BC71-9830680DB0DE} - System32\Tasks\ASC7_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare 7\Monitor.exe [2013-11-11] (IObit)
Task: {1796914F-A0CA-4CAF-A0E5-CE2BA370F34D} - System32\Tasks\Program Manager => C:\Program Files (x86)\Common Files\ProgramManager\ProgramManager.exe
Task: {1CC0F1EB-28F7-44BB-A117-FAC083A81448} - System32\Tasks\AviraSpeedup => C:\Program Files (x86)\Avira\AviraSpeedup\avira_system_speedup.exe [2015-06-17] (Avira Operations GmbH & Co. KG)
Task: {23E00B63-8F61-4C9A-9989-94A2BC613E9C} - System32\Tasks\Microsoft\Windows\Setup\gwx\runappraiser => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-16] (Microsoft Corporation)
Task: {2E81E189-C181-4D2A-BE43-1956C0FA90F6} - System32\Tasks\PC SpeedUp Service Deactivator => C:\Program Files (x86)\Accelerer PC\PCSUSD.exe [2015-04-07] () <==== ATTENTION
Task: {37700458-742A-4F36-ADF2-465B9DEA6AAF} - System32\Tasks\ALUAgent => C:\Program Files (x86)\Acer\Live Updater\liveupdater_agent.exe [2013-01-22] ()
Task: {452A804E-6A6C-4578-905A-92CB5467CCED} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001UA => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-18] (Facebook Inc.)
Task: {4E5E97F5-4D8E-4887-962A-E311C28CB53E} - \RegClean Pro No Task File <==== ATTENTION
Task: {52CCE4EF-BA1B-4E6C-A8C2-3FFF7D5871CD} - System32\Tasks\PC-Mechanic Startup => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: {59A5CF2A-CFB1-4C7C-9B39-2D6D2718A830} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxcontent => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-16] (Microsoft Corporation)
Task: {59F9CC08-C987-40C6-A38C-8145A10A22AC} - System32\Tasks\Opera scheduled Autoupdate 1428873121 => C:\Program Files (x86)\Opera\launcher.exe [2015-05-18] (Opera Software)
Task: {6A5E5897-048F-42CC-B9AB-E2F0A52476A1} - \avaavaevy No Task File <==== ATTENTION
Task: {6FC73F40-4033-4410-A36A-B9931D5CDEDB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-18] (Adobe Systems Incorporated)
Task: {743F8AA8-1050-4A06-98E9-6A8D265FFC90} - System32\Tasks\Microsoft_Hardware_Launch_ipoint_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {8243A2EF-5FEB-4624-A58D-20F82842D9A4} - System32\Tasks\Launch Manager => C:\Program Files\Acer\Acer Launch Manager\LMLauncher.exe [2013-08-03] (Acer Incorporate)
Task: {8450C38D-018E-4740-8CD4-BD4C5129D0FC} - System32\Tasks\ALU => C:\Program Files (x86)\Acer\Live Updater\updater.exe [2013-07-09] ()
Task: {87AA9B62-BB1E-402C-9540-4935453BB835} - System32\Tasks\Microsoft_Hardware_Launch_itype_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe [2014-03-19] (Microsoft Corporation)
Task: {8C24912A-63B5-4C58-86FB-E2BB4D48B5C5} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [2013-08-03] (Acer Incorporate)
Task: {9C1FB932-A806-4716-BA00-C3F397277B3E} - System32\Tasks\PC-Mechanic Maintenance => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: {9EA7E221-3C41-4E0D-B183-3719C3A8E7D4} - System32\Tasks\Driver Booster SkipUAC (manuel) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {9F4F86C7-4152-407B-8E3E-8BB3908110E7} - \SearchSnacks Auto Updater 1.10.0.5 Core No Task File <==== ATTENTION
Task: {A9D702E5-CF4B-4876-AF1C-8B332149CC95} - System32\Tasks\Uninstaller_SkipUac_manuel => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
Task: {AE786CB8-4CE0-439A-9C7B-1867289FA84F} - System32\Tasks\Microsoft_MKC_Logon_Task_ipoint.exe => c:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe [2014-03-19] (Microsoft Corporation)
Task: {AE9F6354-F7F5-4871-ADC9-F831E65DF118} - System32\Tasks\Driver Booster SkipUAC (Système) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe
Task: {BE0624D9-F95C-4EFC-AA29-7CFFDC4024B5} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe
Task: {BE7CB0E9-072E-4B77-B7C6-98E672B60648} - System32\Tasks\PC-Mechanic Subscription => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: {CCF73238-097D-4649-9FED-29FC34D18F86} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe
Task: {D2DA9715-70DD-4B48-86AD-6C4F1E12DF87} - System32\Tasks\Microsoft_Hardware_Launch_mousekeyboardcenter_exe => c:\Program Files\Microsoft Mouse and Keyboard Center\mousekeyboardcenter.exe [2014-03-19] (Microsoft)
Task: {D86273F9-D68F-4891-AA24-2B30A35A39B4} - System32\Tasks\LaunchPreSignup => C:\Program Files (x86)\OLBPre\OLBPre.exe <==== ATTENTION
Task: {E82C53D3-1BFC-4115-A1FD-93B43DF655C5} - System32\Tasks\ASC7_SkipUac_manuel => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
Task: {E8EA2DA7-264E-4970-9CE8-FD7815B057C5} - System32\Tasks\AcerCloud => C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe [2015-05-06] (Acer)
Task: {EB9C8563-E3AD-42AC-AFFE-34F721A05356} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-04-16] (Microsoft Corporation)
Task: {F5655E16-F19D-49B3-853F-8D4101937AAA} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001Core => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-10-18] (Facebook Inc.)
Task: {FC42952B-BCD2-43DC-A0EB-AE4F2211C4BA} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-04-16] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\ASC7_SkipUac_manuel.job => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001Core.job => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-109147421-2626192411-2511064847-1001UA.job => C:\Users\manuel\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\PC SpeedUp Service Deactivator.job => C:\Program Files (x86)\Accelerer PC\PCSUSD.exe <==== ATTENTION
Task: C:\Windows\Tasks\PC-Mechanic Maintenance.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: C:\Windows\Tasks\PC-Mechanic Startup.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: C:\Windows\Tasks\PC-Mechanic Subscription.job => C:\Program Files (x86)\Uniblue\PC-Mechanic\pc-mechanic.exe
Task: C:\Windows\Tasks\Uninstaller_SkipUac_manuel.job => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe
==================== Loaded Modules (Whitelisted) ==============
2015-04-12 23:13 - 2015-04-07 09:45 - 00445640 _____ () C:\Program Files (x86)\Accelerer PC\PCSUService.exe
2013-12-24 11:22 - 2013-12-24 11:22 - 00011264 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\ActivateDesktopDebugger\ActivateDesktopDebugger.dll
2013-12-24 11:20 - 2013-12-24 11:20 - 00086016 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\Modules\Map\MAP.dll
2015-05-06 16:14 - 2015-05-06 16:14 - 00092928 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoader.exe
2013-12-24 11:26 - 2013-12-24 11:26 - 00012928 _____ () C:\Program Files (x86)\Qualcomm Atheros\Bluetooth Suite\ActivateDesktop.exe
2015-05-06 16:14 - 2015-05-06 16:14 - 00090368 _____ () C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
2014-10-28 03:49 - 2013-10-25 13:08 - 00517408 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2015-04-12 23:13 - 2015-04-07 09:45 - 00583968 _____ () C:\Program Files (x86)\Accelerer PC\sqlite3.dll
2014-10-28 03:49 - 2013-01-15 19:48 - 00348992 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madExcept_.bpl
2014-10-28 03:49 - 2013-01-15 19:48 - 00183616 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madBasic_.bpl
2014-10-28 03:49 - 2013-01-15 19:48 - 00051008 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\madDisAsm_.bpl
2014-10-28 03:49 - 2013-01-15 19:47 - 00893248 ____N () C:\Program Files (x86)\IObit\Advanced SystemCare 7\webres.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00203008 _____ () C:\Program Files (x86)\Acer\abPhoto\curllib.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00654552 _____ () C:\Program Files (x86)\Acer\abPhoto\sqlite3.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00641792 _____ () C:\Program Files (x86)\Acer\abPhoto\tag.dll
2015-05-08 10:41 - 2015-05-08 10:41 - 00119552 _____ () C:\Program Files (x86)\Acer\abPhoto\OpenLDAP.dll
2015-06-07 14:36 - 2015-06-07 14:36 - 00015616 _____ () C:\Windows\assembly\GAC_MSIL\MyService\1.0.0.1__2dfa3f50f0bed57d\MyService.dll
2015-05-06 10:08 - 2015-05-06 10:08 - 00013568 _____ () C:\Program Files (x86)\Acer\AOP Framework\ServiceInterface.dll
2015-05-06 10:06 - 2015-05-06 10:06 - 00277096 _____ () C:\Program Files (x86)\Acer\AOP Framework\libcurl.dll
2015-05-06 16:15 - 2015-05-06 16:15 - 00279296 _____ () C:\Program Files (x86)\Acer\abDocs\libcurl.dll
2014-03-21 13:23 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\Users\manuel\SkyDrive:ms-properties
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""=""
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver"
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\008k.com -> 008k.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\00hq.com -> 00hq.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0190-dialers.com -> 0190-dialers.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\01i.info -> 01i.info
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\02pmnzy5eo29bfk4.com -> 02pmnzy5eo29bfk4.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\05p.com -> 05p.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\07ic5do2myz3vzpk.com -> 07ic5do2myz3vzpk.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\08nigbmwk43i01y6.com -> 08nigbmwk43i01y6.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\093qpeuqpmz6ebfa.com -> 093qpeuqpmz6ebfa.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0calories.net -> 0calories.net
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0cj.net -> 0cj.net
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\0scan.com -> 0scan.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1-britney-spears-nude.com -> 1-britney-spears-nude.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1-domains-registrations.com -> 1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1-se.com -> 1-se.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1001movie.com -> 1001movie.com
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\1001night.biz -> 1001night.biz
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\100gal.net -> 100gal.net
IE restricted site: HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\100sexlinks.com -> 100sexlinks.com
There are 4791 more restricted sites.
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\manuel\AppData\Local\Microsoft\Windows\INetCache\IE\6A5EUQEW\20141119_145524[1].jpg
DNS Servers: 109.88.203.3 - 62.197.111.140
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\StartupFolder: => "McAfee Security Scan Plus.lnk"
HKLM\...\StartupApproved\Run32: => "ApnTBMon"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\StartupFolder: => "Messenger.lnk"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\StartupFolder: => "YesMessenger.lnk"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "EpicScale"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "Optimizer Pro"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-109147421-2626192411-2511064847-1001\...\StartupApproved\Run: => "Softonic for Windows"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{609E3F17-ECE0-498B-A0E3-B7015F965A79}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{C6776762-CD4E-466E-841C-F8C9F31873AC}] => (Allow) C:\Program Files (x86)\Nero\Nero 12\Nero BackItUp\BackItUp.exe
FirewallRules: [{5F04CC39-3309-46C6-AF7E-D401E125C550}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe
FirewallRules: [{95C4D4ED-46A7-4026-9E36-A3485293B8FF}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe
FirewallRules: [{88E1CB2E-23E7-4BEC-94C3-0543FE8418C8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe
FirewallRules: [{198B751D-BD59-4D00-AE6E-40B399F17828}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{12E91F39-5BBD-4FD2-A19E-0DC6A45E0536}] => (Allow) C:\Users\manuel\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe
FirewallRules: [{E009A318-49A3-40ED-BB78-50BC8CB78180}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [{AA9379D6-E4C9-4A40-A72F-654EB33BFF13}] => (Allow) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
FirewallRules: [TCP Query User{2E8F5917-D544-4B1F-A40C-7F2F1A200A9B}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{D792E5A9-BA6C-4A2C-ADCD-1AE48B2B3780}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Allow) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [{314070AB-8A35-40F3-9BCB-1968B403D187}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{04A6DA44-59D6-4445-B38E-7ADB0AFDFA91}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D395EF5F-3E56-4B0D-8698-BCF7F7E5D56D}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{DE449716-95B4-49C2-96F5-94E83A8C91D2}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{98EE0155-4C07-418C-8BFC-164B48145245}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{D21CD6E1-117A-450D-A61D-EE51B2C1A938}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\DMCDaemon.exe
FirewallRules: [{06198773-44A9-4A5C-9371-83BAE1BBE688}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [{30E6972A-8266-4721-8673-64A409DF90F7}] => (Allow) C:\Program Files (x86)\Acer\abMedia_\WindowsUpnpMV.exe
FirewallRules: [TCP Query User{0FBBF2C4-5422-48B9-AA11-7E5505A23942}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [UDP Query User{FDD79493-6AD0-4B2A-89BA-AB27A13AF1B1}C:\program files (x86)\symantec\norton online backup\nobuclient.exe] => (Block) C:\program files (x86)\symantec\norton online backup\nobuclient.exe
FirewallRules: [TCP Query User{D2E1B5AE-01BC-4DCF-90FE-7D39B3429641}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{5F8B69E5-87EA-453F-8F83-3C2A776BBB98}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{C6EEAB57-5224-4895-B0BB-AF01793A8B97}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{ABF95381-6727-47E9-BBE7-0C1700A29D32}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{D6DFBE8B-9FAE-499C-940A-45A517AC1AFD}] => (Allow) C:\Users\manuel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{F18C581E-B52B-4170-AA15-E4A2953DB48C}] => (Allow) C:\Users\manuel\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0E338ECA-F3E8-453A-8B1C-E6DC39EC5158}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{21706934-D629-4718-9A54-86385C326F06}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\DMCDaemon.exe
FirewallRules: [{B08D5754-06BB-4239-9482-5D164D666885}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{D22B5E84-605F-4A63-BF90-74635F9D272C}] => (Allow) C:\Program Files (x86)\Acer\abPhoto_\WindowsUpnp.exe
FirewallRules: [{F845A8F6-A888-48B0-A60B-0D0E1FE6A153}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{67AF39FB-5A4A-4F43-980C-3542B50D5A17}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\DMCDaemon.exe
FirewallRules: [{AAEBD7EB-E116-4D77-B71D-2D6C699A9518}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [{FD04E207-824A-4901-941D-7EE614FD89E8}] => (Allow) C:\Program Files (x86)\Acer\abPhoto\WindowsUpnp.exe
FirewallRules: [TCP Query User{0A71CB66-D2C9-48F8-BC3E-CA514DF161B8}C:\users\manuel\desktop\utorrent_3_4_2_36318.exe] => (Allow) C:\users\manuel\desktop\utorrent_3_4_2_36318.exe
FirewallRules: [UDP Query User{3CF9A704-6944-4DBC-A16E-EAF38DD93CB5}C:\users\manuel\desktop\utorrent_3_4_2_36318.exe] => (Allow) C:\users\manuel\desktop\utorrent_3_4_2_36318.exe
FirewallRules: [{AA4531CC-70B1-42D4-86CA-ED7F5660989F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F4EE5CE3-F6CE-46B7-82F5-A71FC405E332}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{68E39481-8251-4260-8774-207942E0DD75}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{C67F91C3-55B9-4FDF-B1D6-1961827F2522}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{CA683340-16A0-440F-B046-5AA55B3E6BBD}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [UDP Query User{C8640625-18DC-4782-9ED7-191E6E9B2B14}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [TCP Query User{B58EEA27-EEC6-4D83-9FF8-5930EC0F4535}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [UDP Query User{14DE146D-94CF-44B5-941C-638DE3399053}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.2_38913.exe
FirewallRules: [{E0D1A37C-5B81-47D0-B5A9-1AE6063F4D8D}] => (Allow) C:\Users\manuel\Downloads\360TS_Setup_Mini(1).exe
FirewallRules: [{61893ABF-65A7-46C0-B005-8FAFFAC42CE5}] => (Allow) C:\Users\manuel\Downloads\360TS_Setup_Mini(1).exe
FirewallRules: [TCP Query User{6ED7D3F2-D5C4-44AB-8544-77D7606F2469}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [UDP Query User{B08A9102-CC47-4925-A23F-AEC1DAB8A9FC}C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe] => (Block) C:\users\manuel\appdata\roaming\utorrent\updates\3.4.3_40298.exe
FirewallRules: [{E15E76A2-6AFF-4B12-9F62-453ACF744102}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Windows ne peut pas charger le fichier de Registre de classes.
DÉTAIL : Le Registre de configuration est endommagé.
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Windows ne peut pas charger le Registre. Ce problème est souvent causé par une mémoire insuffisante ou des droits d’accès insuffisants.
DÉTAIL - Le Registre de configuration est endommagé.
pour C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
System errors:
=============
Error: (06/21/2015 05:11:03 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service decodit s’est terminé de façon inattendue pour la 1ème fois.
Error: (06/21/2015 04:50:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.Studios.Wordament.
Error: (06/21/2015 04:50:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : AccuWeather.AccuWeatherforWindows8.
Error: (06/21/2015 04:48:17 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : 7digitalLtd.7digitalMusicStore.
Error: (06/21/2015 04:48:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : MAGIX.MusicMakerJam.
Error: (06/21/2015 04:48:11 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : WildTangentGames.-GamesApp-.
Error: (06/21/2015 04:48:05 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.BingFoodAndDrink.
Error: (06/21/2015 04:48:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.Reader.
Error: (06/21/2015 04:47:56 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : Microsoft.BingNews.
Error: (06/21/2015 04:47:51 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070002 : AMZNMobileLLC.KindleforWindows8.
Microsoft Office:
=========================
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:30:38 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 05:28:31 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1542) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
Error: (06/21/2015 04:45:29 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1508) (User: AUTORITE NT)
Description: Le Registre de configuration est endommagé.
C:\Users\manuel\AppData\Local\Microsoft\Windows\\UsrClass.dat
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-3110M CPU @ 2.40GHz
Percentage of memory in use: 80%
Total physical RAM: 3978.27 MB
Available physical RAM: 762.89 MB
Total Pagefile: 8330.27 MB
Available Pagefile: 4202.55 MB
Total Virtual: 131072 MB
Available Virtual: 131071.78 MB
==================== Drives ================================
Drive c: (Acer) (Fixed) (Total:446.95 GB) (Free:349.08 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: C9F5C2E7)
Partition: GPT Partition Type.
==================== End of log ============================