Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version:20-07-2015
Ran by Alex at 2015-07-24 15:46:03
Running from C:\Users\pc\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrateur (S-1-5-21-2100114692-3946319985-2531810569-500 - Administrator - Disabled)
Alex (S-1-5-21-2100114692-3946319985-2531810569-1000 - Administrator - Enabled) => C:\Users\pc
Invité (S-1-5-21-2100114692-3946319985-2531810569-501 - Limited - Disabled) => C:\Users\Invité
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Ad-Aware Antivirus (HKLM-x32\...\{944167EA-7F89-4705-8DCD-1D63B53141B0}) (Version: 10.5.3.4405 - Lavasoft)
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AA1000000001}) (Version: 10.1.8 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Blender (HKLM\...\Blender) (Version: 2.71 - Blender Foundation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{3792811C-832F-4392-B44A-24092901EDDC}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
Camtasia Studio 8 (HKLM-x32\...\{904AC0F0-F69E-467E-A719-B083940F608A}) (Version: 8.5.2.1999 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.37.0 - International GeoGebra Institute)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216030FF}) (Version: 6.0.300 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
Lexmark 2300 Series (HKLM\...\Lexmark 2300 Series) (Version: - Lexmark International, Inc.)
Lexmark 2300 Series (HKLM-x32\...\Lexmark 2300 Series) (Version: - Lexmark International, Inc.)
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft IntelliType Pro 8.1 (HKLM\...\Microsoft IntelliType Pro 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\OneDriveSetup.exe) (Version: 17.3.5907.0716 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MirrorOp Receiver (HKLM-x32\...\MirrorOp Receiver_is1) (Version: 0.2.17.8 - Awind Inc.)
Mise à jour Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version: - Microsoft)
Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version: - Microsoft)
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version: - Microsoft)
Mise à jour Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version: - Microsoft)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 35.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 35.0 (x86 fr)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
msxml4 (HKLM-x32\...\{5AE3D9F1-9E9E-4015-8787-E22705AA32C5}) (Version: 1.0.0 - Default Company Name)
OpenOffice 4.1.1 (HKLM-x32\...\{121727D5-FDF3-4723-BA57-EB383440ED72}) (Version: 4.11.9775 - Apache Software Foundation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{BE686891-3C56-4714-AFEF-341A7867BA80}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
SEAF By C_XX (HKLM-x32\...\SEAF) (Version: - C_XX)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.2 - Synaptics Incorporated)
Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{DD51BA84-F589-4939-B5FE-5538B3DCC12E}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5280698D-EE40-4A94-9E69-ED2E2B1E12A2}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5280698D-EE40-4A94-9E69-ED2E2B1E12A2}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{5280698D-EE40-4A94-9E69-ED2E2B1E12A2}) (Version: - Microsoft)
VBA (3821b) (x32 Version: 6.01.00.1234 - Microsoft Corporation) Hidden
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll No File
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2011-06-30 20:07 - 00000864 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FFAC4F-0A51-46A0-B61A-A3F0AAB67953} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-04-13] (Microsoft Corporation)
Task: {0D61E623-3B96-44BA-8EF3-1344B08BDD5B} - System32\Tasks\{5CF029FE-750C-482D-9B9E-994113B6A81C} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\Sims3Setup.exe" -c -runfromtemp -l0x040c -removeonly
Task: {10DD8127-D4F8-45D4-8112-DDB853216D93} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {15B1EFAF-7934-47AE-A50E-A5CAE394A077} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {404DA1C7-E18D-4C3D-A0DC-512A61930333} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {423FE348-8A0B-4129-AB09-F8A11BF43A67} - System32\Tasks\{E5F90237-ED65-4CE7-9BA8-A1E893BCF011} => pcalua.exe -a C:\Users\pc\Downloads\WBFSManager3.0.1-RTW-x86\setup.exe -d C:\Users\pc\Downloads\WBFSManager3.0.1-RTW-x86
Task: {46BE67CE-65B1-4688-A5E6-4CCE347FF56D} - System32\Tasks\{4E1B630B-375B-4C2C-8C7A-B6E51CB31F18} => pcalua.exe -a C:\Users\pc\Desktop\BusdemoE_setup\BusdemoE_setup.exe -d C:\Users\pc\Desktop\BusdemoE_setup
Task: {524E3A5E-0940-479E-8536-78B2A4825294} - System32\Tasks\{A9D1347F-24E2-417D-AAB6-84EFF7015500} => Iexplore.exe http://ui.skype.com/ui/0/6.21.0.104/fr/abandoninstall?page=tsProgressBar
Task: {58570C1F-0FEF-43BF-8E3A-8B57688A5BB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-13] (Google Inc.)
Task: {587BDA63-7475-4797-B916-F9D6A6A1B927} - System32\Tasks\{5AEEE940-8AD7-493E-A2C4-81ECF96194D1} => pcalua.exe -a C:\Users\pc\Downloads\RailSimulator_Demo.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {6AC4B38B-368B-4A1C-A7F4-0AEFCF085D8A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {71527494-5DA7-4077-AE4E-955F51D7F36F} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7482B403-B2F6-4B82-BE4E-C884FA5AC292} - System32\Tasks\{8559A875-AFC9-4C47-A2F8-3D29234DC3B2} => pcalua.exe -a C:\Users\pc\AppData\Local\Temp\Temp1_train_simulator_tfs_ratp.exe.zip\train_simulator_tfs_ratp.exe
Task: {7574F302-A1A9-4708-8ACF-3780BE67391D} - \Test TimeTrigger No Task File <==== ATTENTION
Task: {76661E28-C9FE-48A4-9E70-D8FC72B05E43} - System32\Tasks\{1F08F97B-0BDE-441D-AB14-C2C41ED58098} => pcalua.exe -a E:\netsetup.exe -d E:\
Task: {79673679-5678-437B-9C3A-2C91351CAAF3} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2100114692-3946319985-2531810569-1000 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {79740850-D30E-4DEE-873A-B5B068535002} - System32\Tasks\{B369FBB8-AE4F-41B2-B605-D0DC33696E85} => Iexplore.exe http://ui.skype.com/ui/0/7.3.60.101/fr/abandoninstall?page=tsProgressBar
Task: {82714954-EEF3-4E08-A5BA-E86D541F72B4} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {8526253C-9B23-4BDB-824A-E9B87C3B8867} - System32\Tasks\{254D9F83-C3D7-43E4-891C-75F1963A7738} => pcalua.exe -a "C:\Program Files (x86)\Bus Simulator 2008 Demo\unins000.exe"
Task: {8BE61690-5717-4AF2-93A8-A9A4245D8C07} - System32\Tasks\{10DA861F-76B1-4562-BD85-8BFACA261D4A} => pcalua.exe -a D:\Applications\setup.exe -d D:\Applications
Task: {8D0E4B3D-6A58-4404-AA09-7D0D727EAD04} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {95C1F395-A9AB-4090-A41C-7F0A054236E7} - System32\Tasks\{93EAB2E7-AEC4-4FC5-84E0-73ECE37B4485} => pcalua.exe -a "C:\Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9PHWA0U8\CogiBase_Setup_Win.exe" -d C:\Users\pc\Desktop
Task: {96F03A6D-B38A-43C2-90BA-906AAD5F05CC} - System32\Tasks\4392 => Wscript.exe C:\Users\pc\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {9C5AB584-7258-4940-9A5F-49996EE314AB} - System32\Tasks\{9C790B58-E9CB-457B-8927-01C414B50E9E} => pcalua.exe -a "C:\Users\pc\Local Settings\Application Data\Bundled software uninstaller\biclient.exe" -c /affid uninstall /id uninstall /name "Bundled software uninstaller"
Task: {A130D49B-9303-4308-9647-74D8B87AC430} - System32\Tasks\{E138EAA9-8A69-4924-9214-E8AB3EAFC013} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{B94C6815-7BCC-4124-AC39-9208A06FFFA7}\setup.exe" -c -runfromtemp -l0x040c -removeonly
Task: {A202241A-D408-4501-B7BD-07600E163510} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)
Task: {A4560568-58A6-4205-921F-F99C6A0D3890} - System32\Tasks\{E3AA4059-EC76-4301-B3EC-E7FBE9F0CB7D} => pcalua.exe -a "C:\Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2VYASGU1\grand_theft_auto_vice_city_ultimatevicecity.exe" -d C:\Users\pc\Desktop
Task: {A6A6E49F-4116-4E69-9D25-584D5AF9486F} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {B8B2C1D7-0980-4E2B-9BCC-844E7DA2D63D} - System32\Tasks\{C3DE168B-18B7-4CBB-8FF9-507F753B5478} => Iexplore.exe http://ui.skype.com/ui/0/6.3.73.107.456/fr/abandoninstall?page=tsProgressBar
Task: {C1FEAC68-71DC-4C23-AC9B-10A454ACBEA5} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {DB28CC65-130C-415F-8869-AA80DCFC8028} - System32\Tasks\{553F2A05-E042-4DC5-854B-2B3E9A10E908} => pcalua.exe -a "C:\Users\pc\Desktop\Documents\Crack\Les sims 3\Sims3EP11Setup.exe" -d "C:\Users\pc\Desktop\Documents\Crack\Les sims 3"
Task: {DBCD4536-FA86-4C02-B052-0E2D77572487} - System32\Tasks\{1BB12308-9894-497D-898D-11E8E88CF360} => pcalua.exe -a "C:\Program Files (x86)\Pinnacle\Studio 16\programs\PinnacleStudio.EXE" -d "C:\Program Files (x86)\Pinnacle\Studio 16\programs\"
Task: {DF5FD873-3978-4C1C-9782-972F87ED55CA} - System32\Tasks\{8522DAF9-F591-4B8A-88AE-3F11250FBED9} => pcalua.exe -a C:\Users\pc\Desktop\Sims3EP11Setup.exe -d C:\Users\pc\Desktop
Task: {E5EBF7B5-CD49-4E99-8D98-D5D3EE45DBB9} - System32\Tasks\Microsoft Office 15 Sync Maintenance for PC-ALEX-Alex PC-Alex => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2015-04-14] (Microsoft Corporation)
Task: {E77B7F59-EE37-46A0-BBF4-A5BF0849E900} - System32\Tasks\{D9E268B5-543C-4E6B-942D-9803DDDD0209} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2015-06-29] (Skype Technologies S.A.)
Task: {E97EB0CD-7E9D-4B1C-8503-7144001AEA0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-13] (Google Inc.)
Task: {EFBDDA42-9087-4F4A-B92E-B0D29A0A4C85} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {F11CC770-7156-4F99-8E56-AAB195581D73} - System32\Tasks\{E18EDA8B-225F-4CFB-93CC-05F41125D0FA} => pcalua.exe -a C:\Users\pc\AppData\Local\Temp\Temp2_train.zip\Install.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2015-04-22 20:29 - 2015-04-22 20:29 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-22 20:29 - 2015-04-22 20:29 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-07-23 22:41 - 2015-07-23 22:41 - 02957312 _____ () C:\Program Files\AVAST Software\Avast\defs\15072301\algo.dll
2011-06-30 21:39 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\EnumDevLib.dll
2014-03-05 23:13 - 2005-06-14 18:08 - 00196608 _____ () C:\Program Files (x86)\Lexmark 2300 Series\iptk.dll
2015-04-22 20:30 - 2015-04-22 20:30 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-07-14 17:17 - 2015-07-13 23:55 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libglesv2.dll
2015-07-14 17:17 - 2015-07-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libegl.dll
2015-07-14 17:17 - 2015-07-13 23:55 - 16308040 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\pc\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\pc\SkyDrive.old:ms-properties
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\StartupFolder: => "MediaServerTray.lnk"
HKLM\...\StartupApproved\Run: => "lxcgmon.exe"
HKLM\...\StartupApproved\Run: => "EzPrint"
HKLM\...\StartupApproved\Run32: => "Ad-Aware Antivirus"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "lxcgmon.exe"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\StartupFolder: => "Envoyer à OneNote.lnk"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "RailAlert"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "Skype"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [{3C831E15-5CAA-40E6-9567-2E95F647A1D6}] => (Allow) LPort=48113
FirewallRules: [{AB56FCD8-EA9C-4714-8FF7-47C5B695126B}] => (Allow) LPort=48113
FirewallRules: [{1EC335C9-D2C1-4919-B0A3-712F19708C55}] => (Allow) C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtWLan.exe
FirewallRules: [{2363CC6D-9AC0-491B-B4D3-D053D41CA988}] => (Allow) C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtWLan.exe
FirewallRules: [{B8889424-BA70-4CF8-AEB8-9B7BFA0D8745}] => (Allow) LPort=1542
FirewallRules: [{A39A885A-B0DA-42DA-BDA4-0AAC41DB5765}] => (Allow) LPort=1542
FirewallRules: [{4C3A00EB-7D7F-4517-BFB5-D6B7E716EF65}] => (Allow) LPort=53
FirewallRules: [{06F083FA-A1D0-4CAD-BED1-7BA96DB7EC0A}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{4ABE4990-CE6B-4E87-B804-470440AA184E}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{AD111C6D-FB7F-4E21-806A-324B2F24810A}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{D99FD889-7DCB-42E5-981D-7F8D2B93B785}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{6A0C09C2-2AB8-4804-8CE8-A3A293D155B0}] => (Allow) LPort=48114
FirewallRules: [{B0C5F1B4-8D97-410B-A328-6A842DFC09BB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25D40B6C-0B23-4537-9AED-50DA1E545611}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7ED69971-C1CF-4360-B1D8-74E0A3551583}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{BFC563CC-55FA-4B47-AE3A-F3B8A5DA60D1}C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe] => (Block) C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe
FirewallRules: [UDP Query User{0B0015E2-951C-47C3-AD80-2E570BED7FCB}C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe] => (Block) C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe
FirewallRules: [{138452CB-1DB6-4BA6-880D-C0672A856B34}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{6B0040F6-AE5B-4A32-A75F-FE37D6108F69}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{8B7C7D3C-16B8-48AD-8A8F-688C74B31557}] => (Allow) LPort=135
FirewallRules: [{8A0A5DC9-DCA9-4824-9C50-8315C7CC6AB9}] => (Allow) LPort=5000
FirewallRules: [{C7871347-E373-4148-9E6F-D5D3252DD828}] => (Allow) LPort=5001
FirewallRules: [{2A26F51E-3FD0-473B-A59C-D772437FB86B}] => (Allow) LPort=5002
FirewallRules: [{82AA0288-E3D1-43D3-9902-27DB1717735D}] => (Allow) LPort=5003
FirewallRules: [{80167A85-68C6-4916-B68D-D623AEF63BF3}] => (Allow) LPort=5004
FirewallRules: [{B5D2832C-40BE-456F-ABA5-00B75B1F3377}] => (Allow) LPort=5005
FirewallRules: [{44A22548-7F94-4F4E-BD17-98C4FFAA8A6E}] => (Allow) LPort=5006
FirewallRules: [{557FA1C8-2420-40C7-9185-DA6C612F2689}] => (Allow) LPort=5007
FirewallRules: [{B4DEB39C-AAA6-44E9-A375-41C6D2E02B32}] => (Allow) LPort=5008
FirewallRules: [{23CBF4C2-FB82-4133-B11B-596F29F8E6FE}] => (Allow) LPort=5009
FirewallRules: [{E698AC79-929B-494A-9E44-9A915FE3DB09}] => (Allow) LPort=5010
FirewallRules: [{37C7F196-A481-49B7-814C-39E3856C8979}] => (Allow) LPort=5011
FirewallRules: [{F11F4A9A-3468-4E78-875E-9966CB292AC8}] => (Allow) LPort=5012
FirewallRules: [{82EC4E65-08AF-49B8-B976-F6AC3CCD62D7}] => (Allow) LPort=5013
FirewallRules: [{910600A3-49FF-4417-8C83-39AB186D0487}] => (Allow) LPort=5014
FirewallRules: [{C45F5219-60C3-4DE2-9A11-E820F1D66B97}] => (Allow) LPort=5015
FirewallRules: [{1182278C-FEB3-48DD-BD94-2DD54AEBED5F}] => (Allow) LPort=5016
FirewallRules: [{8065A5B2-31A8-40D2-A396-4405ECC3BB01}] => (Allow) LPort=5017
FirewallRules: [{BF74A0E8-2BDA-4B4D-8C06-92CABFFA6851}] => (Allow) LPort=5018
FirewallRules: [{D5375CE1-7591-4BC7-A308-917D5DABE246}] => (Allow) LPort=5019
FirewallRules: [{72454AE5-E8F7-4B09-A674-5A0446883983}] => (Allow) LPort=5020
FirewallRules: [{0BBFE253-0C45-4385-8FCE-1ADB1FEB4B26}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcgpswx.exe
FirewallRules: [{D43AB683-D1E2-4958-9653-EE8B04422AC6}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcgpswx.exe
FirewallRules: [{B4F6DB60-5CE7-4299-9BFE-D7723144823D}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{D37DD54D-5D3D-46EB-9E22-385F27A323FE}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{95151032-E37B-4C56-9EA2-CACDFC21350A}] => (Allow) LPort=1688
FirewallRules: [{1C8AD655-87E6-43CF-88B2-2CFF53B10192}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{252D99FA-1352-4105-9D81-CDC0F8D8CCCE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{D5E278C5-FB29-4194-B7CE-2AF6A3737917}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{97D418EE-8347-40A0-B146-671230E40559}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{97B5D096-89A7-410B-BDC1-27C6E894CB0D}] => (Allow) LPort=1688
FirewallRules: [{04E8468C-F154-409A-89D1-EFFBC0C58EB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F831FE50-235E-459B-8F1A-6E9BFA6E8C92}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ED61CC95-AA92-419D-996E-5AB4E0629BF6}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{100D0531-79A0-46E5-AFFC-F9FFC482FE76}] => (Allow) LPort=2869
FirewallRules: [{E797610A-608E-4BEE-98B7-C23DABDE76E4}] => (Allow) LPort=1900
FirewallRules: [{E9F12ED3-5905-426B-BCDA-C2E7F1FD1CC2}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{B865D277-0058-4C0E-A879-9C8AC2DEAFD6}C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe] => (Allow) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [UDP Query User{CAC27E01-5C6C-4161-B70D-921233136C94}C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe] => (Allow) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [{49359CAA-5261-4F20-B265-BF4E8212A6B3}] => (Block) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [{FA7337EF-50C7-4379-922E-463D39DD9C5C}] => (Block) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [{EF6523F0-B1BD-408A-BE18-0135D634D7A3}] => (Allow) LPort=8317
FirewallRules: [{E04222F7-9F0E-4019-9D6A-6A404BB1C85C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/24/2015 03:34:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme LiveComm.exe version 17.5.9600.20911 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : cc4
Heure de début : 01d0c61494480c00
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
ID de rapport : 86c34487-3208-11e5-bf8a-001167bf3586
Nom complet du package défaillant : microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
ID de l’application relative au package défaillant : ppleae38af2e007f4358a809ac99a64a67c1
Error: (07/24/2015 03:34:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : cb4
Heure de début : 01d0c61493979de6
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 86c36b97-3208-11e5-bf8a-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/23/2015 07:23:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : a5c
Heure de début : 01d0c56bf915a66e
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 78d723a1-315f-11e5-bf89-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/20/2015 02:47:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 604
Heure de début : 01d0c2e93ad7ea7b
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 7e92492c-2edd-11e5-bf86-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/20/2015 01:57:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 550
Heure de début : 01d0c2e2674f476e
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 6e8bc73e-2ed6-11e5-bf86-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/19/2015 06:43:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_winethc.dll, version : 6.3.9600.17415, horodatage : 0x54504eb8
Nom du module défaillant : USER32.dll, version : 6.3.9600.17736, horodatage : 0x550f4336
Code d’exception : 0xc0000142
Décalage d’erreur : 0x00000000000ec180
ID du processus défaillant : 0x11d0
Heure de début de l’application défaillante : 0xrundll32.exe_winethc.dll0
Chemin d’accès de l’application défaillante : rundll32.exe_winethc.dll1
Chemin d’accès du module défaillant: rundll32.exe_winethc.dll2
ID de rapport : rundll32.exe_winethc.dll3
Nom complet du package défaillant : rundll32.exe_winethc.dll4
ID de l’application relative au package défaillant : rundll32.exe_winethc.dll5
System errors:
=============
Error: (07/24/2015 03:40:54 PM) (Source: DCOM) (EventID: 10016) (User: PC-ALEX)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}PC-ALEXAlexS-1-5-21-2100114692-3946319985-2531810569-1000LocalHost (avec LRPC)MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byS-1-15-2-2422206905-3243265546-1289495537-907675719-3548483989-2628689013-653322065
Error: (07/24/2015 03:26:36 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 15:24:40 le 24/07/2015 n’était pas prévu.
Error: (07/24/2015 01:13:25 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:25 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:25 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:24 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:24 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:24 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:20 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:20 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office:
=========================
Error: (07/24/2015 03:34:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20911cc401d0c61494480c004294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe86c34487-3208-11e5-bf8a-001167bf3586microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (07/24/2015 03:34:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.17415cb401d0c61493979de64294967295C:\WINDOWS\system32\wwahost.exe86c36b97-3208-11e5-bf8a-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/23/2015 07:23:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.17415a5c01d0c56bf915a66e4294967295C:\WINDOWS\system32\wwahost.exe78d723a1-315f-11e5-bf89-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/20/2015 02:47:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.1741560401d0c2e93ad7ea7b4294967295C:\WINDOWS\system32\wwahost.exe7e92492c-2edd-11e5-bf86-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/20/2015 01:57:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.1741555001d0c2e2674f476e4294967295C:\WINDOWS\system32\wwahost.exe6e8bc73e-2ed6-11e5-bf86-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/19/2015 06:43:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec18011d001d0c2421104d4b4C:\WINDOWS\System32\rundll32.exeUSER32.dll4fc12ce5-2e35-11e5-bf85-001167bf3586
CodeIntegrity Errors:
===================================
Date: 2015-07-17 19:59:04.393
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchmemanb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:03.925
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:03.159
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchmedhhp.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:02.690
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:01.550
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchmesmga.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:01.081
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:00.565
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:58:58.815
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:58:58.346
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:58:57.190
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Celeron(R) CPU 900 @ 2.20GHz
Percentage of memory in use: 52%
Total physical RAM: 2936.88 MB
Available physical RAM: 1382.54 MB
Total Virtual: 5880.88 MB
Available Virtual: 4145.47 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:116.21 GB) (Free:21.98 GB) NTFS ==>[drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 3536F53F)
Partition 1: (Active) - (Size=116.2 GB) - (Type=07 NTFS)
==================== End of log ============================
Ran by Alex at 2015-07-24 15:46:03
Running from C:\Users\pc\Desktop
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrateur (S-1-5-21-2100114692-3946319985-2531810569-500 - Administrator - Disabled)
Alex (S-1-5-21-2100114692-3946319985-2531810569-1000 - Administrator - Enabled) => C:\Users\pc
Invité (S-1-5-21-2100114692-3946319985-2531810569-501 - Limited - Disabled) => C:\Users\Invité
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\uTorrent) (Version: 3.4.2.35702 - BitTorrent Inc.)
Ad-Aware Antivirus (HKLM-x32\...\{944167EA-7F89-4705-8DCD-1D63B53141B0}) (Version: 10.5.3.4405 - Lavasoft)
Adblock Plus for IE (32-bit and 64-bit) (HKLM\...\{C23EE7CE-C1A3-4F94-A8F0-9E0AC9C6DE6E}) (Version: 1.1 - Eyeo GmbH)
Adblock Plus for IE (HKLM-x32\...\{fd97d1e2-368a-4cd9-af63-8eeff938044a}) (Version: 1.1 - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.356 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Reader X (10.1.8) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AA1000000001}) (Version: 10.1.8 - Adobe Systems Incorporated)
Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software)
Blender (HKLM\...\Blender) (Version: 2.71 - Blender Foundation)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{3792811C-832F-4392-B44A-24092901EDDC}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
Camtasia Studio 8 (HKLM-x32\...\{904AC0F0-F69E-467E-A719-B083940F608A}) (Version: 8.5.2.1999 - TechSmith Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.47.1.0333 - Disc Soft Ltd)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GeoGebra 5 (HKLM-x32\...\GeoGebra 5) (Version: 5.0.37.0 - International GeoGebra Institute)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.134 - Google Inc.)
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
HD Tune 2.55 (HKLM-x32\...\HD Tune_is1) (Version: - EFD Software)
Intel(R) Graphics Media Accelerator Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2869 - Intel Corporation)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217025FF}) (Version: 7.0.510 - Oracle)
Java(TM) 6 Update 30 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83216030FF}) (Version: 6.0.300 - Oracle)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
Lexmark 2300 Series (HKLM\...\Lexmark 2300 Series) (Version: - Lexmark International, Inc.)
Lexmark 2300 Series (HKLM-x32\...\Lexmark 2300 Series) (Version: - Lexmark International, Inc.)
Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft IntelliPoint 8.1 (HKLM\...\Microsoft IntelliPoint 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft IntelliType Pro 8.1 (HKLM\...\Microsoft IntelliType Pro 8.1) (Version: 8.15.406.0 - Microsoft)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Outlook Connector (HKLM-x32\...\{95140000-007A-040C-0000-0000000FF1CE}) (Version: 14.0.5118.5000 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\OneDriveSetup.exe) (Version: 17.3.5907.0716 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{2C303EE0-A595-3543-A71A-931C7AC40EDE}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
MirrorOp Receiver (HKLM-x32\...\MirrorOp Receiver_is1) (Version: 0.2.17.8 - Awind Inc.)
Mise à jour Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version: - Microsoft)
Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version: - Microsoft)
Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version: - Microsoft)
Mise à jour Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version: - Microsoft)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 35.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 35.0 (x86 fr)) (Version: 35.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (HKLM-x32\...\{196467F1-C11F-4F76-858B-5812ADC83B94}) (Version: 4.30.2100.0 - Microsoft Corporation)
msxml4 (HKLM-x32\...\{5AE3D9F1-9E9E-4015-8787-E22705AA32C5}) (Version: 1.0.0 - Default Company Name)
OpenOffice 4.1.1 (HKLM-x32\...\{121727D5-FDF3-4723-BA57-EB383440ED72}) (Version: 4.11.9775 - Apache Software Foundation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.6.2 - pdfforge)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.37.1229.2010 - Realtek)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{BE686891-3C56-4714-AFEF-341A7867BA80}) (Version: 1.00.0145 - REALTEK Semiconductor Corp.)
SEAF By C_XX (HKLM-x32\...\SEAF) (Version: - C_XX)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{D82063A8-7C8C-4C3B-A9BB-95138CA55D26}) (Version: - Microsoft)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.6 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.6.105 - Skype Technologies S.A.)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.8.2 - Synaptics Incorporated)
Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{DD51BA84-F589-4939-B5FE-5538B3DCC12E}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 64-Bit Edition (HKLM\...\{90150000-0011-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5280698D-EE40-4A94-9E69-ED2E2B1E12A2}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.PROPLUS_{5280698D-EE40-4A94-9E69-ED2E2B1E12A2}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3054946) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{5280698D-EE40-4A94-9E69-ED2E2B1E12A2}) (Version: - Microsoft)
VBA (3821b) (x32 Version: 6.01.00.1234 - Microsoft Corporation) Hidden
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR (HKLM-x32\...\WinRAR archiver) (Version: - )
WinRAR 5.10 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll No File
CustomCLSID: HKU\S-1-5-21-2100114692-3946319985-2531810569-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\pc\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64\FileSyncApi64.dll (Microsoft Corporation)
==================== Restore Points =========================
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:34 - 2011-06-30 20:07 - 00000864 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 validation.sls.microsoft.com
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {02FFAC4F-0A51-46A0-B61A-A3F0AAB67953} - System32\Tasks\Microsoft_Hardware_Launch_IType_exe => C:\Program Files\Microsoft IntelliType Pro\IType.exe [2011-04-13] (Microsoft Corporation)
Task: {0D61E623-3B96-44BA-8EF3-1344B08BDD5B} - System32\Tasks\{5CF029FE-750C-482D-9B9E-994113B6A81C} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}\Sims3Setup.exe" -c -runfromtemp -l0x040c -removeonly
Task: {10DD8127-D4F8-45D4-8112-DDB853216D93} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {15B1EFAF-7934-47AE-A50E-A5CAE394A077} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-04-17] (Piriform Ltd)
Task: {404DA1C7-E18D-4C3D-A0DC-512A61930333} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-14] (Adobe Systems Incorporated)
Task: {423FE348-8A0B-4129-AB09-F8A11BF43A67} - System32\Tasks\{E5F90237-ED65-4CE7-9BA8-A1E893BCF011} => pcalua.exe -a C:\Users\pc\Downloads\WBFSManager3.0.1-RTW-x86\setup.exe -d C:\Users\pc\Downloads\WBFSManager3.0.1-RTW-x86
Task: {46BE67CE-65B1-4688-A5E6-4CCE347FF56D} - System32\Tasks\{4E1B630B-375B-4C2C-8C7A-B6E51CB31F18} => pcalua.exe -a C:\Users\pc\Desktop\BusdemoE_setup\BusdemoE_setup.exe -d C:\Users\pc\Desktop\BusdemoE_setup
Task: {524E3A5E-0940-479E-8536-78B2A4825294} - System32\Tasks\{A9D1347F-24E2-417D-AAB6-84EFF7015500} => Iexplore.exe http://ui.skype.com/ui/0/6.21.0.104/fr/abandoninstall?page=tsProgressBar
Task: {58570C1F-0FEF-43BF-8E3A-8B57688A5BB9} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-13] (Google Inc.)
Task: {587BDA63-7475-4797-B916-F9D6A6A1B927} - System32\Tasks\{5AEEE940-8AD7-493E-A2C4-81ECF96194D1} => pcalua.exe -a C:\Users\pc\Downloads\RailSimulator_Demo.exe -d "C:\Program Files (x86)\Mozilla Firefox"
Task: {6AC4B38B-368B-4A1C-A7F4-0AEFCF085D8A} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {71527494-5DA7-4077-AE4E-955F51D7F36F} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7482B403-B2F6-4B82-BE4E-C884FA5AC292} - System32\Tasks\{8559A875-AFC9-4C47-A2F8-3D29234DC3B2} => pcalua.exe -a C:\Users\pc\AppData\Local\Temp\Temp1_train_simulator_tfs_ratp.exe.zip\train_simulator_tfs_ratp.exe
Task: {7574F302-A1A9-4708-8ACF-3780BE67391D} - \Test TimeTrigger No Task File <==== ATTENTION
Task: {76661E28-C9FE-48A4-9E70-D8FC72B05E43} - System32\Tasks\{1F08F97B-0BDE-441D-AB14-C2C41ED58098} => pcalua.exe -a E:\netsetup.exe -d E:\
Task: {79673679-5678-437B-9C3A-2C91351CAAF3} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-2100114692-3946319985-2531810569-1000 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {79740850-D30E-4DEE-873A-B5B068535002} - System32\Tasks\{B369FBB8-AE4F-41B2-B605-D0DC33696E85} => Iexplore.exe http://ui.skype.com/ui/0/7.3.60.101/fr/abandoninstall?page=tsProgressBar
Task: {82714954-EEF3-4E08-A5BA-E86D541F72B4} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {8526253C-9B23-4BDB-824A-E9B87C3B8867} - System32\Tasks\{254D9F83-C3D7-43E4-891C-75F1963A7738} => pcalua.exe -a "C:\Program Files (x86)\Bus Simulator 2008 Demo\unins000.exe"
Task: {8BE61690-5717-4AF2-93A8-A9A4245D8C07} - System32\Tasks\{10DA861F-76B1-4562-BD85-8BFACA261D4A} => pcalua.exe -a D:\Applications\setup.exe -d D:\Applications
Task: {8D0E4B3D-6A58-4404-AA09-7D0D727EAD04} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: {95C1F395-A9AB-4090-A41C-7F0A054236E7} - System32\Tasks\{93EAB2E7-AEC4-4FC5-84E0-73ECE37B4485} => pcalua.exe -a "C:\Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9PHWA0U8\CogiBase_Setup_Win.exe" -d C:\Users\pc\Desktop
Task: {96F03A6D-B38A-43C2-90BA-906AAD5F05CC} - System32\Tasks\4392 => Wscript.exe C:\Users\pc\AppData\Local\Temp\launchie.vbs //B <==== ATTENTION
Task: {9C5AB584-7258-4940-9A5F-49996EE314AB} - System32\Tasks\{9C790B58-E9CB-457B-8927-01C414B50E9E} => pcalua.exe -a "C:\Users\pc\Local Settings\Application Data\Bundled software uninstaller\biclient.exe" -c /affid uninstall /id uninstall /name "Bundled software uninstaller"
Task: {A130D49B-9303-4308-9647-74D8B87AC430} - System32\Tasks\{E138EAA9-8A69-4924-9214-E8AB3EAFC013} => pcalua.exe -a "C:\Program Files (x86)\InstallShield Installation Information\{B94C6815-7BCC-4124-AC39-9208A06FFFA7}\setup.exe" -c -runfromtemp -l0x040c -removeonly
Task: {A202241A-D408-4501-B7BD-07600E163510} - System32\Tasks\Microsoft_Hardware_Launch_IPoint_exe => C:\Program Files\Microsoft IntelliPoint\IPoint.exe [2011-04-13] (Microsoft Corporation)
Task: {A4560568-58A6-4205-921F-F99C6A0D3890} - System32\Tasks\{E3AA4059-EC76-4301-B3EC-E7FBE9F0CB7D} => pcalua.exe -a "C:\Users\pc\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2VYASGU1\grand_theft_auto_vice_city_ultimatevicecity.exe" -d C:\Users\pc\Desktop
Task: {A6A6E49F-4116-4E69-9D25-584D5AF9486F} - System32\Tasks\0 => Iexplore.exe <==== ATTENTION
Task: {B8B2C1D7-0980-4E2B-9BCC-844E7DA2D63D} - System32\Tasks\{C3DE168B-18B7-4CBB-8FF9-507F753B5478} => Iexplore.exe http://ui.skype.com/ui/0/6.3.73.107.456/fr/abandoninstall?page=tsProgressBar
Task: {C1FEAC68-71DC-4C23-AC9B-10A454ACBEA5} - System32\Tasks\Ad-Aware Antivirus Scheduled Scan => C:\PROGRA~2\AD-AWA~1\AdAwareLauncher.exe
Task: {DB28CC65-130C-415F-8869-AA80DCFC8028} - System32\Tasks\{553F2A05-E042-4DC5-854B-2B3E9A10E908} => pcalua.exe -a "C:\Users\pc\Desktop\Documents\Crack\Les sims 3\Sims3EP11Setup.exe" -d "C:\Users\pc\Desktop\Documents\Crack\Les sims 3"
Task: {DBCD4536-FA86-4C02-B052-0E2D77572487} - System32\Tasks\{1BB12308-9894-497D-898D-11E8E88CF360} => pcalua.exe -a "C:\Program Files (x86)\Pinnacle\Studio 16\programs\PinnacleStudio.EXE" -d "C:\Program Files (x86)\Pinnacle\Studio 16\programs\"
Task: {DF5FD873-3978-4C1C-9782-972F87ED55CA} - System32\Tasks\{8522DAF9-F591-4B8A-88AE-3F11250FBED9} => pcalua.exe -a C:\Users\pc\Desktop\Sims3EP11Setup.exe -d C:\Users\pc\Desktop
Task: {E5EBF7B5-CD49-4E99-8D98-D5D3EE45DBB9} - System32\Tasks\Microsoft Office 15 Sync Maintenance for PC-ALEX-Alex PC-Alex => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [2015-04-14] (Microsoft Corporation)
Task: {E77B7F59-EE37-46A0-BBF4-A5BF0849E900} - System32\Tasks\{D9E268B5-543C-4E6B-942D-9803DDDD0209} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2015-06-29] (Skype Technologies S.A.)
Task: {E97EB0CD-7E9D-4B1C-8503-7144001AEA0B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-05-13] (Google Inc.)
Task: {EFBDDA42-9087-4F4A-B92E-B0D29A0A4C85} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-07-03] (Microsoft Corporation)
Task: {F11CC770-7156-4F99-8E56-AAB195581D73} - System32\Tasks\{E18EDA8B-225F-4CFB-93CC-05F41125D0FA} => pcalua.exe -a C:\Users\pc\AppData\Local\Temp\Temp2_train.zip\Install.exe
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2015-04-22 20:29 - 2015-04-22 20:29 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-22 20:29 - 2015-04-22 20:29 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-07-23 22:41 - 2015-07-23 22:41 - 02957312 _____ () C:\Program Files\AVAST Software\Avast\defs\15072301\algo.dll
2011-06-30 21:39 - 2009-12-09 21:20 - 00126976 _____ () C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\EnumDevLib.dll
2014-03-05 23:13 - 2005-06-14 18:08 - 00196608 _____ () C:\Program Files (x86)\Lexmark 2300 Series\iptk.dll
2015-04-22 20:30 - 2015-04-22 20:30 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-07-14 17:17 - 2015-07-13 23:55 - 01281864 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libglesv2.dll
2015-07-14 17:17 - 2015-07-13 23:55 - 00080712 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\libegl.dll
2015-07-14 17:17 - 2015-07-13 23:55 - 16308040 _____ () C:\Program Files (x86)\Google\Chrome\Application\43.0.2357.134\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
AlternateDataStreams: C:\ProgramData\TEMP:373E1720
AlternateDataStreams: C:\Users\pc\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\pc\SkyDrive.old:ms-properties
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.1.254
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
HKLM\...\StartupApproved\StartupFolder: => "MediaServerTray.lnk"
HKLM\...\StartupApproved\Run: => "lxcgmon.exe"
HKLM\...\StartupApproved\Run: => "EzPrint"
HKLM\...\StartupApproved\Run32: => "Ad-Aware Antivirus"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "lxcgmon.exe"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "iTunesHelper"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\StartupFolder: => "Envoyer à OneNote.lnk"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "DAEMON Tools Lite"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "Lync"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "RailAlert"
HKU\S-1-5-21-2100114692-3946319985-2531810569-1000\...\StartupApproved\Run: => "Skype"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppextcomobj.exe
FirewallRules: [{3C831E15-5CAA-40E6-9567-2E95F647A1D6}] => (Allow) LPort=48113
FirewallRules: [{AB56FCD8-EA9C-4714-8FF7-47C5B695126B}] => (Allow) LPort=48113
FirewallRules: [{1EC335C9-D2C1-4919-B0A3-712F19708C55}] => (Allow) C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtWLan.exe
FirewallRules: [{2363CC6D-9AC0-491B-B4D3-D053D41CA988}] => (Allow) C:\Program Files (x86)\Realtek\RTL8187B Wireless LAN Utility\RtWLan.exe
FirewallRules: [{B8889424-BA70-4CF8-AEB8-9B7BFA0D8745}] => (Allow) LPort=1542
FirewallRules: [{A39A885A-B0DA-42DA-BDA4-0AAC41DB5765}] => (Allow) LPort=1542
FirewallRules: [{4C3A00EB-7D7F-4517-BFB5-D6B7E716EF65}] => (Allow) LPort=53
FirewallRules: [{06F083FA-A1D0-4CAD-BED1-7BA96DB7EC0A}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{4ABE4990-CE6B-4E87-B804-470440AA184E}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{AD111C6D-FB7F-4E21-806A-324B2F24810A}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{D99FD889-7DCB-42E5-981D-7F8D2B93B785}] => (Allow) C:\Windows\SysWOW64\lxcgcoms.exe
FirewallRules: [{6A0C09C2-2AB8-4804-8CE8-A3A293D155B0}] => (Allow) LPort=48114
FirewallRules: [{B0C5F1B4-8D97-410B-A328-6A842DFC09BB}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{25D40B6C-0B23-4537-9AED-50DA1E545611}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7ED69971-C1CF-4360-B1D8-74E0A3551583}] => (Allow) C:\Users\pc\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{BFC563CC-55FA-4B47-AE3A-F3B8A5DA60D1}C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe] => (Block) C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe
FirewallRules: [UDP Query User{0B0015E2-951C-47C3-AD80-2E570BED7FCB}C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe] => (Block) C:\users\invité\appdata\local\facebook\video\skype\facebookvideocalling.exe
FirewallRules: [{138452CB-1DB6-4BA6-880D-C0672A856B34}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{6B0040F6-AE5B-4A32-A75F-FE37D6108F69}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{8B7C7D3C-16B8-48AD-8A8F-688C74B31557}] => (Allow) LPort=135
FirewallRules: [{8A0A5DC9-DCA9-4824-9C50-8315C7CC6AB9}] => (Allow) LPort=5000
FirewallRules: [{C7871347-E373-4148-9E6F-D5D3252DD828}] => (Allow) LPort=5001
FirewallRules: [{2A26F51E-3FD0-473B-A59C-D772437FB86B}] => (Allow) LPort=5002
FirewallRules: [{82AA0288-E3D1-43D3-9902-27DB1717735D}] => (Allow) LPort=5003
FirewallRules: [{80167A85-68C6-4916-B68D-D623AEF63BF3}] => (Allow) LPort=5004
FirewallRules: [{B5D2832C-40BE-456F-ABA5-00B75B1F3377}] => (Allow) LPort=5005
FirewallRules: [{44A22548-7F94-4F4E-BD17-98C4FFAA8A6E}] => (Allow) LPort=5006
FirewallRules: [{557FA1C8-2420-40C7-9185-DA6C612F2689}] => (Allow) LPort=5007
FirewallRules: [{B4DEB39C-AAA6-44E9-A375-41C6D2E02B32}] => (Allow) LPort=5008
FirewallRules: [{23CBF4C2-FB82-4133-B11B-596F29F8E6FE}] => (Allow) LPort=5009
FirewallRules: [{E698AC79-929B-494A-9E44-9A915FE3DB09}] => (Allow) LPort=5010
FirewallRules: [{37C7F196-A481-49B7-814C-39E3856C8979}] => (Allow) LPort=5011
FirewallRules: [{F11F4A9A-3468-4E78-875E-9966CB292AC8}] => (Allow) LPort=5012
FirewallRules: [{82EC4E65-08AF-49B8-B976-F6AC3CCD62D7}] => (Allow) LPort=5013
FirewallRules: [{910600A3-49FF-4417-8C83-39AB186D0487}] => (Allow) LPort=5014
FirewallRules: [{C45F5219-60C3-4DE2-9A11-E820F1D66B97}] => (Allow) LPort=5015
FirewallRules: [{1182278C-FEB3-48DD-BD94-2DD54AEBED5F}] => (Allow) LPort=5016
FirewallRules: [{8065A5B2-31A8-40D2-A396-4405ECC3BB01}] => (Allow) LPort=5017
FirewallRules: [{BF74A0E8-2BDA-4B4D-8C06-92CABFFA6851}] => (Allow) LPort=5018
FirewallRules: [{D5375CE1-7591-4BC7-A308-917D5DABE246}] => (Allow) LPort=5019
FirewallRules: [{72454AE5-E8F7-4B09-A674-5A0446883983}] => (Allow) LPort=5020
FirewallRules: [{0BBFE253-0C45-4385-8FCE-1ADB1FEB4B26}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcgpswx.exe
FirewallRules: [{D43AB683-D1E2-4958-9653-EE8B04422AC6}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcgpswx.exe
FirewallRules: [{B4F6DB60-5CE7-4299-9BFE-D7723144823D}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{D37DD54D-5D3D-46EB-9E22-385F27A323FE}] => (Allow) C:\Windows\System32\lxcgcoms.exe
FirewallRules: [{95151032-E37B-4C56-9EA2-CACDFC21350A}] => (Allow) LPort=1688
FirewallRules: [{1C8AD655-87E6-43CF-88B2-2CFF53B10192}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{252D99FA-1352-4105-9D81-CDC0F8D8CCCE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{D5E278C5-FB29-4194-B7CE-2AF6A3737917}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{97D418EE-8347-40A0-B146-671230E40559}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{97B5D096-89A7-410B-BDC1-27C6E894CB0D}] => (Allow) LPort=1688
FirewallRules: [{04E8468C-F154-409A-89D1-EFFBC0C58EB5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F831FE50-235E-459B-8F1A-6E9BFA6E8C92}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{ED61CC95-AA92-419D-996E-5AB4E0629BF6}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{100D0531-79A0-46E5-AFFC-F9FFC482FE76}] => (Allow) LPort=2869
FirewallRules: [{E797610A-608E-4BEE-98B7-C23DABDE76E4}] => (Allow) LPort=1900
FirewallRules: [{E9F12ED3-5905-426B-BCDA-C2E7F1FD1CC2}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [TCP Query User{B865D277-0058-4C0E-A879-9C8AC2DEAFD6}C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe] => (Allow) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [UDP Query User{CAC27E01-5C6C-4161-B70D-921233136C94}C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe] => (Allow) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [{49359CAA-5261-4F20-B265-BF4E8212A6B3}] => (Block) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [{FA7337EF-50C7-4379-922E-463D39DD9C5C}] => (Block) C:\program files (x86)\mirrorop receiver\mirrorop receiver.exe
FirewallRules: [{EF6523F0-B1BD-408A-BE18-0135D634D7A3}] => (Allow) LPort=8317
FirewallRules: [{E04222F7-9F0E-4019-9D6A-6A404BB1C85C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (07/24/2015 03:34:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme LiveComm.exe version 17.5.9600.20911 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : cc4
Heure de début : 01d0c61494480c00
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe
ID de rapport : 86c34487-3208-11e5-bf8a-001167bf3586
Nom complet du package défaillant : microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe
ID de l’application relative au package défaillant : ppleae38af2e007f4358a809ac99a64a67c1
Error: (07/24/2015 03:34:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : cb4
Heure de début : 01d0c61493979de6
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 86c36b97-3208-11e5-bf8a-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/23/2015 07:23:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : a5c
Heure de début : 01d0c56bf915a66e
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 78d723a1-315f-11e5-bf89-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/20/2015 02:47:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 604
Heure de début : 01d0c2e93ad7ea7b
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 7e92492c-2edd-11e5-bf86-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/20/2015 01:57:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme wwahost.exe version 6.3.9600.17415 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 550
Heure de début : 01d0c2e2674f476e
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\WINDOWS\system32\wwahost.exe
ID de rapport : 6e8bc73e-2ed6-11e5-bf86-001167bf3586
Nom complet du package défaillant : MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0by
ID de l’application relative au package défaillant : App
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: Échec de l’activation de l’application MobilesRepublic.AppyGeek_n7gnan3nvj0by!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/19/2015 06:43:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_winethc.dll, version : 6.3.9600.17415, horodatage : 0x54504eb8
Nom du module défaillant : USER32.dll, version : 6.3.9600.17736, horodatage : 0x550f4336
Code d’exception : 0xc0000142
Décalage d’erreur : 0x00000000000ec180
ID du processus défaillant : 0x11d0
Heure de début de l’application défaillante : 0xrundll32.exe_winethc.dll0
Chemin d’accès de l’application défaillante : rundll32.exe_winethc.dll1
Chemin d’accès du module défaillant: rundll32.exe_winethc.dll2
ID de rapport : rundll32.exe_winethc.dll3
Nom complet du package défaillant : rundll32.exe_winethc.dll4
ID de l’application relative au package défaillant : rundll32.exe_winethc.dll5
System errors:
=============
Error: (07/24/2015 03:40:54 PM) (Source: DCOM) (EventID: 10016) (User: PC-ALEX)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}PC-ALEXAlexS-1-5-21-2100114692-3946319985-2531810569-1000LocalHost (avec LRPC)MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byS-1-15-2-2422206905-3243265546-1289495537-907675719-3548483989-2628689013-653322065
Error: (07/24/2015 03:26:36 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 15:24:40 le 24/07/2015 n’était pas prévu.
Error: (07/24/2015 01:13:25 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:25 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:25 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:24 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:24 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:24 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:20 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Error: (07/24/2015 01:13:20 AM) (Source: DCOM) (EventID: 10010) (User: PC-ALEX)
Description: {4545DEA0-2DFC-4906-A728-6D986BA399A9}
Microsoft Office:
=========================
Error: (07/24/2015 03:34:11 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20911cc401d0c61494480c004294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\LiveComm.exe86c34487-3208-11e5-bf8a-001167bf3586microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (07/24/2015 03:34:10 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.17415cb401d0c61493979de64294967295C:\WINDOWS\system32\wwahost.exe86c36b97-3208-11e5-bf8a-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/23/2015 07:23:05 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.17415a5c01d0c56bf915a66e4294967295C:\WINDOWS\system32\wwahost.exe78d723a1-315f-11e5-bf89-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/23/2015 04:30:03 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/20/2015 02:47:47 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.1741560401d0c2e93ad7ea7b4294967295C:\WINDOWS\system32\wwahost.exe7e92492c-2edd-11e5-bf86-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/20/2015 01:57:16 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: wwahost.exe6.3.9600.1741555001d0c2e2674f476e4294967295C:\WINDOWS\system32\wwahost.exe6e8bc73e-2ed6-11e5-bf86-001167bf3586MobilesRepublic.AppyGeek_4.3.1.0_neutral__n7gnan3nvj0byApp
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/19/2015 08:39:52 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-ALEX)
Description: MobilesRepublic.AppyGeek_n7gnan3nvj0by!App-2144927141
Error: (07/19/2015 06:43:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: rundll32.exe_winethc.dll6.3.9600.1741554504eb8USER32.dll6.3.9600.17736550f4336c000014200000000000ec18011d001d0c2421104d4b4C:\WINDOWS\System32\rundll32.exeUSER32.dll4fc12ce5-2e35-11e5-bf85-001167bf3586
CodeIntegrity Errors:
===================================
Date: 2015-07-17 19:59:04.393
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchmemanb.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:03.925
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:03.159
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchmedhhp.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:02.690
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:01.550
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchmesmga.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:01.081
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:59:00.565
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:58:58.815
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:58:58.346
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2015-07-17 19:58:57.190
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Users\pc\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Memory info ===========================
Processor: Intel(R) Celeron(R) CPU 900 @ 2.20GHz
Percentage of memory in use: 52%
Total physical RAM: 2936.88 MB
Available physical RAM: 1382.54 MB
Total Virtual: 5880.88 MB
Available Virtual: 4145.47 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:116.21 GB) (Free:21.98 GB) NTFS ==>[drive with boot components (obtained from BCD)]
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 3536F53F)
Partition 1: (Active) - (Size=116.2 GB) - (Type=07 NTFS)
==================== End of log ============================