Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x86) Version: 02-07-2016
Exécuté par Walid SAH (2016-07-07 10:35:32)
Exécuté depuis C:\Users\Walid SAH\Desktop
Microsoft Windows 10 Professionnel Version 1511 (X86) (2016-03-02 04:19:26)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-691611659-2595466276-322701303-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-691611659-2595466276-322701303-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-691611659-2595466276-322701303-1007 - Limited - Enabled)
Invité (S-1-5-21-691611659-2595466276-322701303-501 - Limited - Disabled)
Walid SAH (S-1-5-21-691611659-2595466276-322701303-1003 - Administrator - Enabled) => C:\Users\Walid SAH
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
µTorrent (HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7-Zip 9.20 (HKLM\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Ace Stream Media 3.1.0 (HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\AceStream) (Version: 3.1.0 - Ace Stream Media) <==== ATTENTION
Adobe Acrobat Reader DC - Français (HKLM\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 20.0.0.233 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Baidu Browser (HKLM\...\Spark) (Version: 43.19 Preview - Baidu Inc.)
Baidu PC Faster (HKLM\...\Baidu PC Faster 5.1.0.0) (Version: 5.1.3.126764 - Baidu, Inc.) <==== ATTENTION
Cheating-Death 4.33.4 (HKLM\...\Cheating-Death) (Version: - )
Classic Shell (HKLM\...\{E0E49E80-19DE-43FE-BFF2-8C58DDF3C7F9}) (Version: 4.1.0 - IvoSoft)
Counter-Strike 1.6 (HKLM\...\Counter-Strike 1.6_is1) (Version: Counter-Strike 1.6 No Steam - KingSOFT DVD)
EagleGet version 2.0.4.4 (HKLM\...\{F6D8142A-B30B-454B-9EE0-08A7B997DFE4}_is1) (Version: 2.0.4.4 - EagleGet)
Google Chrome (HKLM\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.)
Google Update Helper (Version: 1.3.30.3 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Kodi (HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Kodi) (Version: - XBMC-Foundation)
League of Legends (HKLM\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
League of Legends (Version: 4.1.2 - Riot Games) Hidden
Meditel Internet (HKLM\...\MeditelInternet) (Version: 4.0.3.2 - Meditel Internet)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x86) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
Realtek Card Reader (HKLM\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.00.0000 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)
Skype™ 7.24 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
SopCast 4.0.0 (HKLM\...\SopCast) (Version: 4.0.0 - www.sopcast.com)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.5.2 - Krzysztof Kowalczyk)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.95 - Synaptics Incorporated)
Update for Skype for Business 2015 (KB3039776) 32-Bit Edition (HKLM\...\{90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{8D97B9A2-D73D-4CB6-9D1F-D25178AC4EDE}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3115033) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BD10518F-3463-429E-8761-0AEDCEEA6297}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3115033) 32-Bit Edition (HKLM\...\{90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{BD10518F-3463-429E-8761-0AEDCEEA6297}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-691611659-2595466276-322701303-1003_Classes\CLSID\{79690976-ED6E-403C-BBBA-F8928B5EDE17}\InprocServer32 -> C:\Users\Walid SAH\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies)
CustomCLSID: HKU\S-1-5-21-691611659-2595466276-322701303-1003_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-691611659-2595466276-322701303-1003_Classes\CLSID\{9843d1f9-641f-5b9a-bc7c-f59bba9a8f25}\InprocServer32 -> C:\Program Files\EagleGet\npEagleget.dll (EagleGet)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {06074ED5-67F2-42B2-B11A-E160DBFB9F9C} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Duplicaterecord.js" <==== ATTENTION
Task: {18BD8A41-334A-477F-9850-F238FDF9FACC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {237B474E-A09B-4DEF-9FFE-FED564599C60} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-25] (Google Inc.)
Task: {2D92E2E8-4B6B-4486-93A5-A722591CD3D3} - System32\Tasks\{7B827735-2AAC-4495-B15B-275716C88098} => pcalua.exe -a "C:\Program Files\Counter-Strike 1.6\unins000.exe"
Task: {32C64227-FE6C-45EC-82F3-9B1248654DE5} - \WPD\SqmUpload_S-1-5-21-691611659-2595466276-322701303-1001 -> Pas de fichier <==== ATTENTION
Task: {3C7E0EC2-02FC-4B63-99EC-7F5FE3B28509} - System32\Tasks\Baidu PC Faster Update => C:\Program Files\PC Faster\5.1.0.0\Updater.exe [2015-05-07] (Baidu, Inc.) <==== ATTENTION
Task: {3F123D48-0C9A-4B15-A074-3CE582DBA93E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {545CD351-763D-4670-B107-61EE610CB30A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {5EBEA3B3-4A9E-45CB-94C4-A0B1DDD90805} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {5F5AB09C-8A82-4786-BE8C-1B73F36E133B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {5FF9ADC1-72A8-4E33-B4A5-6544D871EA90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-17] (Adobe Systems Incorporated)
Task: {62A1C477-3C7D-4CB6-AF6B-412EE3AB7700} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {65AFAC7C-0357-44D9-8BB1-EAADA622D570} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcTrigger
Task: {6E9EE00C-6BB6-4C99-9E58-12CB24330F5D} - System32\Tasks\SparkUpdater => C:\Program Files\baidu\Baidu Browser\SparkUpdate.exe [2016-03-07] (Baidu.com, Inc.)
Task: {7B29F41C-7199-4013-A6A0-121FED92A475} - \Optimize Start Menu Cache Files-S-1-5-21-691611659-2595466276-322701303-1001 -> Pas de fichier <==== ATTENTION
Task: {95BFE562-6034-4E85-8502-E49277130CFF} - System32\Tasks\Baidu PC Faster Service => C:\Program Files\PC Faster\5.1.0.0\PCFasterSvc.exe [2015-05-07] (Baidu, Inc.) <==== ATTENTION
Task: {9959B6E9-4BBC-48E2-9A40-FD53E56F711B} - \Chaekgrewege Verfier -> Pas de fichier <==== ATTENTION
Task: {A089BA56-C676-41BC-9037-0E5024442F8D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {BD183DB8-9B76-4D50-BA45-9F109B6C3D19} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {C77E1297-4FE8-4B26-99FF-CF6D76E3CDCC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {CD5DAE15-67C3-4CF0-A0F6-D3AB3A7B385C} - System32\Tasks\{398E3964-E54F-43A3-AFFB-C8C3BF95B569} => pcalua.exe -a "C:\Program Files\LuDaShi\uninst.exe"
Task: {D3E68CD2-431D-4538-97B0-99FA1A03A133} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-25] (Google Inc.)
Task: {E765808B-D353-4FD2-B0D4-349DDF4CA0BE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-06-14] (Microsoft Corporation)
Task: {F7AFD263-E37C-4079-9CD2-B36BD377DED4} - \WPD\SqmUpload_S-1-5-21-691611659-2595466276-322701303-1002 -> Pas de fichier <==== ATTENTION
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION
Shortcut: C:\Users\Public\Desktop\Facebook.lnk -> hxxp://www.facebook.comLC:\Program Files\baidu\Baidu Browser\resource\application\Image\facebook.ico (Pas de fichier)
Shortcut: C:\Users\Public\Desktop\Google.lnk -> hxxp://www.google.comJC:\Program Files\baidu\Baidu Browser\resource\application\Image\google.ico (Pas de fichier)
==================== Modules chargés (Avec liste blanche) ==============
2015-09-25 16:20 - 2015-08-19 07:22 - 00235520 _____ () C:\Program Files\EagleGet\EGMonitor.exe
2015-09-25 16:20 - 2015-08-19 07:22 - 01001984 _____ () C:\Program Files\EagleGet\util.dll
2015-09-25 16:20 - 2014-07-17 01:13 - 00397312 _____ () C:\Program Files\EagleGet\sqlite3.dll
2016-05-07 17:00 - 2014-05-22 16:53 - 00346680 _____ () C:\Program Files\MeditelInternet\MeditelInternet_Service.exe
2015-10-30 05:44 - 2015-10-30 05:44 - 00149504 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-14 00:18 - 2016-03-29 09:37 - 01862008 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-14 00:18 - 2016-03-29 09:37 - 01862008 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-05-24 23:47 - 2016-05-24 23:47 - 00679624 _____ () C:\Users\Walid SAH\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-03-02 02:48 - 2016-03-02 02:48 - 00070656 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-11 23:52 - 2016-04-23 04:20 - 00316416 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-06-14 20:50 - 2016-05-28 03:59 - 05340672 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-06-14 20:50 - 2016-05-28 03:54 - 00471552 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-06-14 20:50 - 2016-05-28 03:54 - 02366976 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-06-14 20:50 - 2016-05-28 03:57 - 02656768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-05-07 17:00 - 2014-05-22 16:53 - 00928312 _____ () C:\Program Files\MeditelInternet\MeditelInternet_Launcher.exe
2016-05-07 17:00 - 2014-05-22 16:53 - 00258560 _____ () C:\Program Files\MeditelInternet\WtgMobileBroadband7.dll
2015-09-25 16:20 - 2015-08-19 07:22 - 00220672 _____ () C:\Program Files\EagleGet\CrashRpt.dll
2015-09-25 16:20 - 2013-09-14 20:31 - 00053760 _____ () C:\Program Files\EagleGet\zlib.dll
2015-09-25 16:20 - 2015-08-19 07:22 - 00840192 _____ () C:\Program Files\EagleGet\ssl.dll
2015-09-24 10:34 - 2016-05-19 00:37 - 00027000 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\ace_engine.exe
2015-09-24 10:35 - 2016-05-19 00:37 - 00314880 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.Core.pyd
2011-06-12 13:09 - 2011-06-12 13:09 - 00038400 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_socket.pyd
2011-06-12 13:09 - 2011-06-12 13:09 - 00720896 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_ssl.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00287232 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_hashlib.pyd
2015-04-16 12:27 - 2015-04-16 12:27 - 00018944 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pycompat.pyd
2014-01-23 11:37 - 2014-01-23 11:37 - 00036352 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_psutil_mswindows.pyd
2012-02-07 16:37 - 2012-02-07 16:37 - 00098816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32api.pyd
2012-02-07 16:35 - 2012-02-07 16:35 - 00110080 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\pywintypes27.dll
2012-02-07 16:38 - 2012-02-07 16:38 - 00358912 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\pythoncom27.dll
2012-02-07 16:36 - 2012-02-07 16:36 - 00111616 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32file.pyd
2012-02-07 16:36 - 2012-02-07 16:36 - 00024064 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32pdh.pyd
2015-04-16 12:27 - 2015-04-16 12:27 - 02386432 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pywebrtc.pyd
2015-09-24 10:31 - 2016-05-19 00:37 - 03031552 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.live.pyd
2013-12-21 13:20 - 2013-12-21 13:20 - 00053248 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_blist.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00106496 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_ctypes.pyd
2013-12-21 13:20 - 2013-12-21 13:20 - 00040448 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\bitarray._bitarray.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00011776 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\select.pyd
2015-09-07 15:23 - 2016-05-19 00:37 - 00242792 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pysegmenter.pyd
2015-04-16 12:29 - 2015-04-16 12:29 - 00112142 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\libgcc_s_dw2-1.dll
2011-01-18 21:56 - 2011-01-18 21:56 - 00334336 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\M2Crypto.__m2crypto.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00152576 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\pyexpat.pyd
2011-02-13 15:02 - 2011-02-13 15:02 - 00031232 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\Crypto.Cipher.AES.pyd
2015-09-24 10:52 - 2016-05-19 00:37 - 04481024 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.CoreApp.pyd
2016-05-19 02:58 - 2016-05-19 00:37 - 00014848 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\netifaces.pyd
2010-10-10 22:23 - 2010-10-10 22:23 - 00723968 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\apsw.pyd
2013-01-29 16:20 - 2013-01-29 16:20 - 00082944 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\cpyamf.util.pyd
2011-07-15 19:37 - 2011-07-15 19:37 - 00981504 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._core_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00746496 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._gdi_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00670720 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._windows_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00966144 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._controls_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00674816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._misc_.pyd
2012-02-07 16:37 - 2012-02-07 16:37 - 00167424 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32gui.pyd
2012-02-07 16:36 - 2012-02-07 16:36 - 00035840 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32process.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00688128 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\unicodedata.pyd
2015-04-16 12:29 - 2015-04-16 12:29 - 00061952 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\miniupnpc.pyd
2013-01-29 16:20 - 2013-01-29 16:20 - 00066048 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\cpyamf.amf0.pyd
2015-09-25 05:56 - 2016-03-07 22:05 - 00983352 _____ () C:\Program Files\baidu\Baidu Browser\Spark.exe
2015-09-25 05:56 - 2016-03-07 22:05 - 00430904 _____ () C:\Program Files\baidu\Baidu Browser\bdminiopenssl.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 01018168 _____ () C:\Program Files\baidu\Baidu Browser\bdxui.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00219448 _____ () C:\Program Files\baidu\Baidu Browser\bdbrowsertray.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00410936 _____ () C:\Program Files\baidu\Baidu Browser\bdxctrl.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00521016 _____ () C:\Program Files\baidu\Baidu Browser\xnet.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00276792 _____ () C:\Program Files\baidu\Baidu Browser\p2squery.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00581432 _____ () C:\Program Files\baidu\Baidu Browser\bdstatreport.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00321848 _____ () C:\Program Files\baidu\Baidu Browser\bdaccount.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00116024 _____ () C:\Program Files\baidu\Baidu Browser\SparkSafe.dll
2015-09-25 05:57 - 2015-09-25 05:57 - 00083088 _____ () C:\Users\Walid SAH\AppData\Roaming\baidu\Spark\sysdata\ExtApp\SnapImg\SnapImg.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 01281848 _____ () C:\Program Files\baidu\Baidu Browser\libglesv2.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00080696 _____ () C:\Program Files\baidu\Baidu Browser\libegl.dll
2014-10-01 16:37 - 2015-11-10 10:31 - 00027000 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\ace_update.exe
2011-06-12 13:09 - 2011-06-12 13:09 - 00038400 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\_socket.pyd
2011-06-12 13:09 - 2011-06-12 13:09 - 00720896 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\_ssl.pyd
2011-07-15 19:37 - 2011-07-15 19:37 - 00981504 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._core_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00746496 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._gdi_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00670720 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._windows_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00966144 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._controls_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00674816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._misc_.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00287232 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\_hashlib.pyd
2011-01-18 21:56 - 2011-01-18 21:56 - 00334336 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\M2Crypto.__m2crypto.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00011776 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\select.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00152576 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\pyexpat.pyd
2012-02-07 16:37 - 2012-02-07 16:37 - 00098816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\win32api.pyd
2012-02-07 16:35 - 2012-02-07 16:35 - 00110080 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\pywintypes27.dll
2012-02-07 16:38 - 2012-02-07 16:38 - 00358912 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\pythoncom27.dll
2012-02-07 16:36 - 2012-02-07 16:36 - 00111616 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\win32file.pyd
2012-02-07 16:36 - 2012-02-07 16:36 - 00024064 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\win32pdh.pyd
2016-04-19 00:20 - 2016-04-19 00:21 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-19 00:20 - 2016-04-19 00:21 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 00:20 - 2016-04-19 00:21 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2013-08-22 06:13 - 2016-06-15 17:56 - 00001054 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\Control Panel\Desktop\\Wallpaper -> c:\users\walid sah\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{c7fa11e0-d693-485c-9659-a226ebf82236}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\...\StartupApproved\Run: => " QQPCTray"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{BF95710D-514E-4DE9-9028-EF1C4B61931A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{929DDED6-4B8D-4664-8BAB-6C395C436254}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{3C363133-6E67-4FDA-A0C0-24006911C43E}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{3B39F75A-D146-41BC-90D1-8AC93B9C497F}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [UDP Query User{5D1873A6-9171-4FB8-B1FE-F4294F46BE3C}C:\program files\sopcast\sopcast.exe] => (Allow) C:\program files\sopcast\sopcast.exe
FirewallRules: [TCP Query User{6D1D6DDA-372C-4F91-AB0F-3095023C6C62}C:\program files\sopcast\sopcast.exe] => (Allow) C:\program files\sopcast\sopcast.exe
FirewallRules: [UDP Query User{4DCFD55E-C70E-4007-B7D5-490A45632B3A}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [TCP Query User{20582BF1-831E-4C44-95AC-138455D14378}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{B8675DDF-1D93-43E1-B2CA-DF3CEE5E12AF}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [TCP Query User{2B3F5DF2-232B-4564-87B6-CCCA66F8769A}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [TCP Query User{8D0F1AC8-F62D-492E-B8B6-F97331C8BD32}C:\windows.old\program files\baidu\spark\bdtray.exe] => (Allow) C:\windows.old\program files\baidu\spark\bdtray.exe
FirewallRules: [UDP Query User{70FB0825-12E9-4FEF-A789-32ADE16FACCA}C:\windows.old\program files\baidu\spark\bdtray.exe] => (Allow) C:\windows.old\program files\baidu\spark\bdtray.exe
FirewallRules: [TCP Query User{EAAE01E4-9EE7-49FF-9DAF-F522D9D01177}C:\windows.old\program files\skype\phone\skype.exe] => (Allow) C:\windows.old\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{FECA0A24-388C-40FC-B386-6175EC4ECA16}C:\windows.old\program files\skype\phone\skype.exe] => (Allow) C:\windows.old\program files\skype\phone\skype.exe
FirewallRules: [{61831604-B99C-46D5-9B23-0E14EF797866}] => (Allow) C:\Program Files\baidu\Baidu Browser\Spark.exe
FirewallRules: [{82FF0E14-E3A9-4A47-8263-3ADB7CFE986B}] => (Allow) C:\Program Files\baidu\Baidu Browser\Spark.exe
FirewallRules: [{A21094E3-960D-494F-8AC0-D19EA148A913}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D4D73C59-6CAB-4B0A-BD6C-AC95C289D34F}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BA737B70-233A-4AD9-8B77-5B053EE3F0CC}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{A875ED9A-ED2D-4A2C-A3E9-64B1237ED8BE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{D424AA13-3325-402D-90A6-0851C5A6604C}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{E04AC457-57B7-4785-B1DE-C90BA73C5565}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{A4C94136-D793-4E30-9169-7684CBA4B80E}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [UDP Query User{B42A505C-0D49-44F4-83E0-E7785EA702DC}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [TCP Query User{64C45379-7243-4A4F-98F0-CAA770491CB2}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{A5ACE70A-2C6C-4A91-8831-17F1467AF751}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [TCP Query User{1DE0EA0B-0CDB-45D1-89AD-06BD742C7B35}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{1F092CD7-43D0-4690-A99D-E537C9C9935D}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [TCP Query User{6D22EEF9-E86B-4507-B10F-63F4E78726AB}C:\program files\counter-strike 1.6\hl.exe] => (Allow) C:\program files\counter-strike 1.6\hl.exe
FirewallRules: [UDP Query User{EB6C0FD6-0FAB-4FC2-AEFB-9B75182FDC3A}C:\program files\counter-strike 1.6\hl.exe] => (Allow) C:\program files\counter-strike 1.6\hl.exe
FirewallRules: [TCP Query User{30683499-CEB9-4FB8-8698-CF53C3B02447}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Block) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{11885EC4-4751-4D37-A393-27F50E375CA8}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Block) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{200B527A-7709-4F8C-BBF1-BE48ADE779FD}] => (Allow) C:\program files\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{6B9166D6-8173-4AAF-A56F-03CB4983F46A}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
FirewallRules: [{E024C85E-62E1-47FE-9205-31B9ED1EB9AE}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
FirewallRules: [{C35269F0-F2C7-4832-9C1B-3309AE330B09}] => (Allow) C:\Program Files\LuDaShi\ComputerZTray.exe
FirewallRules: [{EEEA4A5E-1CD4-4F98-ABAE-0ECF5EE5AF49}] => (Allow) C:\Program Files\LuDaShi\ComputerZTray.exe
FirewallRules: [{2E6D4382-7F1F-4F71-B20E-011E179CA209}] => (Allow) C:\Program Files\LuDaShi\Utils\mininews.exe
FirewallRules: [{EBC1F643-4C01-4FCD-B6E5-FAE1F8A304A8}] => (Allow) C:\Program Files\LuDaShi\Utils\mininews.exe
FirewallRules: [{C95079DE-02DE-4FA5-AC66-3D6C28B5FE24}] => (Allow) C:\Program Files\baidu\SparkSafe\Spark.exe
FirewallRules: [{2C25FBF6-AE9C-4545-81AB-161B27F7E6B2}] => (Allow) C:\Program Files\baidu\SparkSafe\Spark.exe
FirewallRules: [{29594C26-7150-4C64-83B6-1112F3F481FF}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashReport.exe
FirewallRules: [{ACCA5170-C53C-40A8-A526-F4FB75BE0287}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashReport.exe
FirewallRules: [{3C7AD48F-818C-4449-B492-66C359497D2A}] => (Allow) C:\Program Files\baidu\SparkSafe\bdtray.exe
FirewallRules: [{B5D25EAF-4D78-4861-A940-B97A9D9694AE}] => (Allow) C:\Program Files\baidu\SparkSafe\bdtray.exe
FirewallRules: [{D4C071E8-60B5-43B8-AA0C-8B8F17C0EAAA}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashUL.exe
FirewallRules: [{C74893AE-F880-46F3-9164-ABEA5149F2C4}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashUL.exe
FirewallRules: [{A46A4FF8-43D8-47CD-B74F-F6697C53B13F}] => (Allow) C:\program files\common files\tencent\qqdownload\131\bugreport_xf.exe
FirewallRules: [{0662EB90-8D46-47E2-A8FF-BB7393B4BD7A}] => (Allow) C:\program files\common files\tencent\qqdownload\131\tencentdl.exe
FirewallRules: [{267C846B-65B8-4FF7-A3A4-F45CA6FCB92D}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Points de restauration =========================
02-07-2016 22:24:24 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (07/07/2016 10:31:11 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/07/2016 10:22:05 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme spark.exe version 43.23.1000.467 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.
ID de processus : 940
Heure de début : 01d1d8395de8ea7e
Heure de fin : 4
Chemin d'accès de l'application : C:\Program Files\baidu\Baidu Browser\spark.exe
ID de rapport : a18d327b-442c-11e6-a11f-f8a9638e69f8
Nom complet du package défaillant :
ID de l'application relative au package défaillant :
Error: (07/04/2016 09:53:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: WALID)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147023170 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/04/2016 04:00:53 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/03/2016 05:35:30 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/02/2016 10:24:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (07/02/2016 03:53:21 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/01/2016 12:18:39 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (06/30/2016 01:18:02 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 ».
Assembly dépendant Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (06/30/2016 01:13:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante backgroundTaskHost.exe, version : 10.0.10586.0, horodatage : 0x5632d899
Nom du module défaillant : Cortana.BackgroundTask.dll, version : 0.0.0.0, horodatage : 0x5749166b
Code d’exception : 0xc0000005
Décalage d’erreur : 0x001982b7
ID du processus défaillant : 0x1580
Heure de début de l’application défaillante : 0xbackgroundTaskHost.exe0
Chemin d’accès de l’application défaillante : backgroundTaskHost.exe1
Chemin d’accès du module défaillant: backgroundTaskHost.exe2
ID de rapport : backgroundTaskHost.exe3
Nom complet du package défaillant : backgroundTaskHost.exe4
ID de l’application relative au package défaillant : backgroundTaskHost.exe5
Erreurs système:
=============
Error: (07/05/2016 01:38:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Hôte de synchronisation_1f814 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (07/05/2016 01:38:48 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: propres à l’applicationLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
Error: (07/05/2016 01:07:23 AM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/05/2016 01:07:23 AM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/05/2016 01:07:23 AM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:40:49 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:40:49 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:39:44 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:39:43 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:39:42 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
CodeIntegrity:
===================================
Date: 2016-07-07 10:33:55.335
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:33:55.312
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:32:19.193
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:32:19.106
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.929
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.873
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.818
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.798
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.706
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EagleGet\eagleGet_x86.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.681
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EagleGet\eagleGet_x86.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Pourcentage de mémoire utilisée: 78%
Mémoire physique - RAM - totale: 2728.35 MB
Mémoire physique - RAM - disponible: 578.18 MB
Mémoire virtuelle totale: 4072.35 MB
Mémoire virtuelle disponible: 1082.93 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:195.4 GB) (Free:75 GB) NTFS
Drive d: () (Fixed) (Total:269.53 GB) (Free:268.87 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 397A8933)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=499 MB) - (Type=27)
Partition 4: (Not Active) - (Size=269.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================
Exécuté par Walid SAH (2016-07-07 10:35:32)
Exécuté depuis C:\Users\Walid SAH\Desktop
Microsoft Windows 10 Professionnel Version 1511 (X86) (2016-03-02 04:19:26)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-691611659-2595466276-322701303-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-691611659-2595466276-322701303-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-691611659-2595466276-322701303-1007 - Limited - Enabled)
Invité (S-1-5-21-691611659-2595466276-322701303-501 - Limited - Disabled)
Walid SAH (S-1-5-21-691611659-2595466276-322701303-1003 - Administrator - Enabled) => C:\Users\Walid SAH
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
µTorrent (HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\uTorrent) (Version: 3.4.7.42330 - BitTorrent Inc.)
7-Zip 9.20 (HKLM\...\{23170F69-40C1-2701-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Ace Stream Media 3.1.0 (HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\AceStream) (Version: 3.1.0 - Ace Stream Media) <==== ATTENTION
Adobe Acrobat Reader DC - Français (HKLM\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
Adobe AIR (HKLM\...\Adobe AIR) (Version: 20.0.0.233 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Baidu Browser (HKLM\...\Spark) (Version: 43.19 Preview - Baidu Inc.)
Baidu PC Faster (HKLM\...\Baidu PC Faster 5.1.0.0) (Version: 5.1.3.126764 - Baidu, Inc.) <==== ATTENTION
Cheating-Death 4.33.4 (HKLM\...\Cheating-Death) (Version: - )
Classic Shell (HKLM\...\{E0E49E80-19DE-43FE-BFF2-8C58DDF3C7F9}) (Version: 4.1.0 - IvoSoft)
Counter-Strike 1.6 (HKLM\...\Counter-Strike 1.6_is1) (Version: Counter-Strike 1.6 No Steam - KingSOFT DVD)
EagleGet version 2.0.4.4 (HKLM\...\{F6D8142A-B30B-454B-9EE0-08A7B997DFE4}_is1) (Version: 2.0.4.4 - EagleGet)
Google Chrome (HKLM\...\Google Chrome) (Version: 51.0.2704.103 - Google Inc.)
Google Update Helper (Version: 1.3.30.3 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4276 - Intel Corporation)
Kodi (HKU\S-1-5-21-691611659-2595466276-322701303-1003\...\Kodi) (Version: - XBMC-Foundation)
League of Legends (HKLM\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
League of Legends (Version: 4.1.2 - Riot Games) Hidden
Meditel Internet (HKLM\...\MeditelInternet) (Version: 4.0.3.2 - Meditel Internet)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x86) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9.140.248 - Google, Inc.)
Realtek Card Reader (HKLM\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.00.0000 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7548 - Realtek Semiconductor Corp.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft)
Skype™ 7.24 (HKLM\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.24.104 - Skype Technologies S.A.)
SopCast 4.0.0 (HKLM\...\SopCast) (Version: 4.0.0 - www.sopcast.com)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 2.5.2 - Krzysztof Kowalczyk)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.12.95 - Synaptics Incorporated)
Update for Skype for Business 2015 (KB3039776) 32-Bit Edition (HKLM\...\{90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{8D97B9A2-D73D-4CB6-9D1F-D25178AC4EDE}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3115033) 32-Bit Edition (HKLM\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{BD10518F-3463-429E-8761-0AEDCEEA6297}) (Version: - Microsoft)
Update for Skype for Business 2015 (KB3115033) 32-Bit Edition (HKLM\...\{90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{BD10518F-3463-429E-8761-0AEDCEEA6297}) (Version: - Microsoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WinRAR 5.21 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-691611659-2595466276-322701303-1003_Classes\CLSID\{79690976-ED6E-403C-BBBA-F8928B5EDE17}\InprocServer32 -> C:\Users\Walid SAH\AppData\Roaming\ACEStream\player\npace_plugin.dll (Innovative Digital Technologies)
CustomCLSID: HKU\S-1-5-21-691611659-2595466276-322701303-1003_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-691611659-2595466276-322701303-1003_Classes\CLSID\{9843d1f9-641f-5b9a-bc7c-f59bba9a8f25}\InprocServer32 -> C:\Program Files\EagleGet\npEagleget.dll (EagleGet)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {06074ED5-67F2-42B2-B11A-E160DBFB9F9C} - System32\Tasks\060184C3-9766-46a0-B258-F4518A0B2633 => Cscript.exe "C:\ProgramData\Duplicaterecord.js" <==== ATTENTION
Task: {18BD8A41-334A-477F-9850-F238FDF9FACC} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Pas de fichier <==== ATTENTION
Task: {237B474E-A09B-4DEF-9FFE-FED564599C60} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-25] (Google Inc.)
Task: {2D92E2E8-4B6B-4486-93A5-A722591CD3D3} - System32\Tasks\{7B827735-2AAC-4495-B15B-275716C88098} => pcalua.exe -a "C:\Program Files\Counter-Strike 1.6\unins000.exe"
Task: {32C64227-FE6C-45EC-82F3-9B1248654DE5} - \WPD\SqmUpload_S-1-5-21-691611659-2595466276-322701303-1001 -> Pas de fichier <==== ATTENTION
Task: {3C7E0EC2-02FC-4B63-99EC-7F5FE3B28509} - System32\Tasks\Baidu PC Faster Update => C:\Program Files\PC Faster\5.1.0.0\Updater.exe [2015-05-07] (Baidu, Inc.) <==== ATTENTION
Task: {3F123D48-0C9A-4B15-A074-3CE582DBA93E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {545CD351-763D-4670-B107-61EE610CB30A} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Pas de fichier <==== ATTENTION
Task: {5EBEA3B3-4A9E-45CB-94C4-A0B1DDD90805} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {5F5AB09C-8A82-4786-BE8C-1B73F36E133B} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Pas de fichier <==== ATTENTION
Task: {5FF9ADC1-72A8-4E33-B4A5-6544D871EA90} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2016-06-17] (Adobe Systems Incorporated)
Task: {62A1C477-3C7D-4CB6-AF6B-412EE3AB7700} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Pas de fichier <==== ATTENTION
Task: {65AFAC7C-0357-44D9-8BB1-EAADA622D570} - System32\Tasks\Microsoft\Windows\SoftwareProtectionPlatform\SvcTrigger
Task: {6E9EE00C-6BB6-4C99-9E58-12CB24330F5D} - System32\Tasks\SparkUpdater => C:\Program Files\baidu\Baidu Browser\SparkUpdate.exe [2016-03-07] (Baidu.com, Inc.)
Task: {7B29F41C-7199-4013-A6A0-121FED92A475} - \Optimize Start Menu Cache Files-S-1-5-21-691611659-2595466276-322701303-1001 -> Pas de fichier <==== ATTENTION
Task: {95BFE562-6034-4E85-8502-E49277130CFF} - System32\Tasks\Baidu PC Faster Service => C:\Program Files\PC Faster\5.1.0.0\PCFasterSvc.exe [2015-05-07] (Baidu, Inc.) <==== ATTENTION
Task: {9959B6E9-4BBC-48E2-9A40-FD53E56F711B} - \Chaekgrewege Verfier -> Pas de fichier <==== ATTENTION
Task: {A089BA56-C676-41BC-9037-0E5024442F8D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {BD183DB8-9B76-4D50-BA45-9F109B6C3D19} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION
Task: {C77E1297-4FE8-4B26-99FF-CF6D76E3CDCC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {CD5DAE15-67C3-4CF0-A0F6-D3AB3A7B385C} - System32\Tasks\{398E3964-E54F-43A3-AFFB-C8C3BF95B569} => pcalua.exe -a "C:\Program Files\LuDaShi\uninst.exe"
Task: {D3E68CD2-431D-4538-97B0-99FA1A03A133} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-09-25] (Google Inc.)
Task: {E765808B-D353-4FD2-B0D4-349DDF4CA0BE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-06-14] (Microsoft Corporation)
Task: {F7AFD263-E37C-4079-9CD2-B36BD377DED4} - \WPD\SqmUpload_S-1-5-21-691611659-2595466276-322701303-1002 -> Pas de fichier <==== ATTENTION
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION
Shortcut: C:\Users\Public\Desktop\Facebook.lnk -> hxxp://www.facebook.comLC:\Program Files\baidu\Baidu Browser\resource\application\Image\facebook.ico (Pas de fichier)
Shortcut: C:\Users\Public\Desktop\Google.lnk -> hxxp://www.google.comJC:\Program Files\baidu\Baidu Browser\resource\application\Image\google.ico (Pas de fichier)
==================== Modules chargés (Avec liste blanche) ==============
2015-09-25 16:20 - 2015-08-19 07:22 - 00235520 _____ () C:\Program Files\EagleGet\EGMonitor.exe
2015-09-25 16:20 - 2015-08-19 07:22 - 01001984 _____ () C:\Program Files\EagleGet\util.dll
2015-09-25 16:20 - 2014-07-17 01:13 - 00397312 _____ () C:\Program Files\EagleGet\sqlite3.dll
2016-05-07 17:00 - 2014-05-22 16:53 - 00346680 _____ () C:\Program Files\MeditelInternet\MeditelInternet_Service.exe
2015-10-30 05:44 - 2015-10-30 05:44 - 00149504 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-14 00:18 - 2016-03-29 09:37 - 01862008 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-14 00:18 - 2016-03-29 09:37 - 01862008 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2016-05-24 23:47 - 2016-05-24 23:47 - 00679624 _____ () C:\Users\Walid SAH\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\ClientTelemetry.dll
2016-03-02 02:48 - 2016-03-02 02:48 - 00070656 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-11 23:52 - 2016-04-23 04:20 - 00316416 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-06-14 20:50 - 2016-05-28 03:59 - 05340672 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-06-14 20:50 - 2016-05-28 03:54 - 00471552 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-06-14 20:50 - 2016-05-28 03:54 - 02366976 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-06-14 20:50 - 2016-05-28 03:57 - 02656768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-05-07 17:00 - 2014-05-22 16:53 - 00928312 _____ () C:\Program Files\MeditelInternet\MeditelInternet_Launcher.exe
2016-05-07 17:00 - 2014-05-22 16:53 - 00258560 _____ () C:\Program Files\MeditelInternet\WtgMobileBroadband7.dll
2015-09-25 16:20 - 2015-08-19 07:22 - 00220672 _____ () C:\Program Files\EagleGet\CrashRpt.dll
2015-09-25 16:20 - 2013-09-14 20:31 - 00053760 _____ () C:\Program Files\EagleGet\zlib.dll
2015-09-25 16:20 - 2015-08-19 07:22 - 00840192 _____ () C:\Program Files\EagleGet\ssl.dll
2015-09-24 10:34 - 2016-05-19 00:37 - 00027000 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\ace_engine.exe
2015-09-24 10:35 - 2016-05-19 00:37 - 00314880 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.Core.pyd
2011-06-12 13:09 - 2011-06-12 13:09 - 00038400 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_socket.pyd
2011-06-12 13:09 - 2011-06-12 13:09 - 00720896 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_ssl.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00287232 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_hashlib.pyd
2015-04-16 12:27 - 2015-04-16 12:27 - 00018944 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pycompat.pyd
2014-01-23 11:37 - 2014-01-23 11:37 - 00036352 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_psutil_mswindows.pyd
2012-02-07 16:37 - 2012-02-07 16:37 - 00098816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32api.pyd
2012-02-07 16:35 - 2012-02-07 16:35 - 00110080 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\pywintypes27.dll
2012-02-07 16:38 - 2012-02-07 16:38 - 00358912 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\pythoncom27.dll
2012-02-07 16:36 - 2012-02-07 16:36 - 00111616 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32file.pyd
2012-02-07 16:36 - 2012-02-07 16:36 - 00024064 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32pdh.pyd
2015-04-16 12:27 - 2015-04-16 12:27 - 02386432 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pywebrtc.pyd
2015-09-24 10:31 - 2016-05-19 00:37 - 03031552 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.live.pyd
2013-12-21 13:20 - 2013-12-21 13:20 - 00053248 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_blist.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00106496 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\_ctypes.pyd
2013-12-21 13:20 - 2013-12-21 13:20 - 00040448 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\bitarray._bitarray.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00011776 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\select.pyd
2015-09-07 15:23 - 2016-05-19 00:37 - 00242792 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.pysegmenter.pyd
2015-04-16 12:29 - 2015-04-16 12:29 - 00112142 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\libgcc_s_dw2-1.dll
2011-01-18 21:56 - 2011-01-18 21:56 - 00334336 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\M2Crypto.__m2crypto.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00152576 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\pyexpat.pyd
2011-02-13 15:02 - 2011-02-13 15:02 - 00031232 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\Crypto.Cipher.AES.pyd
2015-09-24 10:52 - 2016-05-19 00:37 - 04481024 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\acestreamengine.CoreApp.pyd
2016-05-19 02:58 - 2016-05-19 00:37 - 00014848 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\netifaces.pyd
2010-10-10 22:23 - 2010-10-10 22:23 - 00723968 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\apsw.pyd
2013-01-29 16:20 - 2013-01-29 16:20 - 00082944 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\cpyamf.util.pyd
2011-07-15 19:37 - 2011-07-15 19:37 - 00981504 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._core_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00746496 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._gdi_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00670720 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._windows_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00966144 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._controls_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00674816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\wx._misc_.pyd
2012-02-07 16:37 - 2012-02-07 16:37 - 00167424 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32gui.pyd
2012-02-07 16:36 - 2012-02-07 16:36 - 00035840 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\win32process.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00688128 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\unicodedata.pyd
2015-04-16 12:29 - 2015-04-16 12:29 - 00061952 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\miniupnpc.pyd
2013-01-29 16:20 - 2013-01-29 16:20 - 00066048 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\engine\lib\cpyamf.amf0.pyd
2015-09-25 05:56 - 2016-03-07 22:05 - 00983352 _____ () C:\Program Files\baidu\Baidu Browser\Spark.exe
2015-09-25 05:56 - 2016-03-07 22:05 - 00430904 _____ () C:\Program Files\baidu\Baidu Browser\bdminiopenssl.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 01018168 _____ () C:\Program Files\baidu\Baidu Browser\bdxui.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00219448 _____ () C:\Program Files\baidu\Baidu Browser\bdbrowsertray.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00410936 _____ () C:\Program Files\baidu\Baidu Browser\bdxctrl.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00521016 _____ () C:\Program Files\baidu\Baidu Browser\xnet.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00276792 _____ () C:\Program Files\baidu\Baidu Browser\p2squery.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00581432 _____ () C:\Program Files\baidu\Baidu Browser\bdstatreport.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00321848 _____ () C:\Program Files\baidu\Baidu Browser\bdaccount.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00116024 _____ () C:\Program Files\baidu\Baidu Browser\SparkSafe.dll
2015-09-25 05:57 - 2015-09-25 05:57 - 00083088 _____ () C:\Users\Walid SAH\AppData\Roaming\baidu\Spark\sysdata\ExtApp\SnapImg\SnapImg.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 01281848 _____ () C:\Program Files\baidu\Baidu Browser\libglesv2.dll
2015-09-25 05:56 - 2016-03-07 22:05 - 00080696 _____ () C:\Program Files\baidu\Baidu Browser\libegl.dll
2014-10-01 16:37 - 2015-11-10 10:31 - 00027000 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\ace_update.exe
2011-06-12 13:09 - 2011-06-12 13:09 - 00038400 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\_socket.pyd
2011-06-12 13:09 - 2011-06-12 13:09 - 00720896 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\_ssl.pyd
2011-07-15 19:37 - 2011-07-15 19:37 - 00981504 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._core_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00746496 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._gdi_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00670720 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._windows_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00966144 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._controls_.pyd
2011-07-15 19:38 - 2011-07-15 19:38 - 00674816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\wx._misc_.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00287232 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\_hashlib.pyd
2011-01-18 21:56 - 2011-01-18 21:56 - 00334336 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\M2Crypto.__m2crypto.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00011776 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\select.pyd
2011-06-12 13:06 - 2011-06-12 13:06 - 00152576 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\pyexpat.pyd
2012-02-07 16:37 - 2012-02-07 16:37 - 00098816 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\win32api.pyd
2012-02-07 16:35 - 2012-02-07 16:35 - 00110080 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\pywintypes27.dll
2012-02-07 16:38 - 2012-02-07 16:38 - 00358912 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\pythoncom27.dll
2012-02-07 16:36 - 2012-02-07 16:36 - 00111616 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\win32file.pyd
2012-02-07 16:36 - 2012-02-07 16:36 - 00024064 _____ () C:\Users\Walid SAH\AppData\Roaming\ACEStream\updater\lib\win32pdh.pyd
2016-04-19 00:20 - 2016-04-19 00:21 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2016-04-19 00:20 - 2016-04-19 00:21 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 00:20 - 2016-04-19 00:21 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ===============================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2013-08-22 06:13 - 2016-06-15 17:56 - 00001054 ____A C:\WINDOWS\system32\Drivers\etc\hosts
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-691611659-2595466276-322701303-1003\Control Panel\Desktop\\Wallpaper -> c:\users\walid sah\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\{c7fa11e0-d693-485c-9659-a226ebf82236}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\...\StartupApproved\Run: => " QQPCTray"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{BF95710D-514E-4DE9-9028-EF1C4B61931A}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{929DDED6-4B8D-4664-8BAB-6C395C436254}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{3C363133-6E67-4FDA-A0C0-24006911C43E}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{3B39F75A-D146-41BC-90D1-8AC93B9C497F}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [UDP Query User{5D1873A6-9171-4FB8-B1FE-F4294F46BE3C}C:\program files\sopcast\sopcast.exe] => (Allow) C:\program files\sopcast\sopcast.exe
FirewallRules: [TCP Query User{6D1D6DDA-372C-4F91-AB0F-3095023C6C62}C:\program files\sopcast\sopcast.exe] => (Allow) C:\program files\sopcast\sopcast.exe
FirewallRules: [UDP Query User{4DCFD55E-C70E-4007-B7D5-490A45632B3A}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [TCP Query User{20582BF1-831E-4C44-95AC-138455D14378}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Allow) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{B8675DDF-1D93-43E1-B2CA-DF3CEE5E12AF}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [TCP Query User{2B3F5DF2-232B-4564-87B6-CCCA66F8769A}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [TCP Query User{8D0F1AC8-F62D-492E-B8B6-F97331C8BD32}C:\windows.old\program files\baidu\spark\bdtray.exe] => (Allow) C:\windows.old\program files\baidu\spark\bdtray.exe
FirewallRules: [UDP Query User{70FB0825-12E9-4FEF-A789-32ADE16FACCA}C:\windows.old\program files\baidu\spark\bdtray.exe] => (Allow) C:\windows.old\program files\baidu\spark\bdtray.exe
FirewallRules: [TCP Query User{EAAE01E4-9EE7-49FF-9DAF-F522D9D01177}C:\windows.old\program files\skype\phone\skype.exe] => (Allow) C:\windows.old\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{FECA0A24-388C-40FC-B386-6175EC4ECA16}C:\windows.old\program files\skype\phone\skype.exe] => (Allow) C:\windows.old\program files\skype\phone\skype.exe
FirewallRules: [{61831604-B99C-46D5-9B23-0E14EF797866}] => (Allow) C:\Program Files\baidu\Baidu Browser\Spark.exe
FirewallRules: [{82FF0E14-E3A9-4A47-8263-3ADB7CFE986B}] => (Allow) C:\Program Files\baidu\Baidu Browser\Spark.exe
FirewallRules: [{A21094E3-960D-494F-8AC0-D19EA148A913}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D4D73C59-6CAB-4B0A-BD6C-AC95C289D34F}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{BA737B70-233A-4AD9-8B77-5B053EE3F0CC}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{A875ED9A-ED2D-4A2C-A3E9-64B1237ED8BE}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{D424AA13-3325-402D-90A6-0851C5A6604C}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{E04AC457-57B7-4785-B1DE-C90BA73C5565}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{A4C94136-D793-4E30-9169-7684CBA4B80E}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [UDP Query User{B42A505C-0D49-44F4-83E0-E7785EA702DC}C:\program files\kodi\kodi.exe] => (Allow) C:\program files\kodi\kodi.exe
FirewallRules: [TCP Query User{64C45379-7243-4A4F-98F0-CAA770491CB2}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{A5ACE70A-2C6C-4A91-8831-17F1467AF751}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [TCP Query User{1DE0EA0B-0CDB-45D1-89AD-06BD742C7B35}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [UDP Query User{1F092CD7-43D0-4690-A99D-E537C9C9935D}C:\program files\skype\phone\skype.exe] => (Allow) C:\program files\skype\phone\skype.exe
FirewallRules: [TCP Query User{6D22EEF9-E86B-4507-B10F-63F4E78726AB}C:\program files\counter-strike 1.6\hl.exe] => (Allow) C:\program files\counter-strike 1.6\hl.exe
FirewallRules: [UDP Query User{EB6C0FD6-0FAB-4FC2-AEFB-9B75182FDC3A}C:\program files\counter-strike 1.6\hl.exe] => (Allow) C:\program files\counter-strike 1.6\hl.exe
FirewallRules: [TCP Query User{30683499-CEB9-4FB8-8698-CF53C3B02447}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Block) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [UDP Query User{11885EC4-4751-4D37-A393-27F50E375CA8}C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe] => (Block) C:\users\walid sah\appdata\roaming\acestream\engine\ace_engine.exe
FirewallRules: [{200B527A-7709-4F8C-BBF1-BE48ADE779FD}] => (Allow) C:\program files\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [{6B9166D6-8173-4AAF-A56F-03CB4983F46A}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
FirewallRules: [{E024C85E-62E1-47FE-9205-31B9ED1EB9AE}] => (Allow) C:\Users\Walid SAH\AppData\Roaming\inst_buychannel_01.exe
FirewallRules: [{C35269F0-F2C7-4832-9C1B-3309AE330B09}] => (Allow) C:\Program Files\LuDaShi\ComputerZTray.exe
FirewallRules: [{EEEA4A5E-1CD4-4F98-ABAE-0ECF5EE5AF49}] => (Allow) C:\Program Files\LuDaShi\ComputerZTray.exe
FirewallRules: [{2E6D4382-7F1F-4F71-B20E-011E179CA209}] => (Allow) C:\Program Files\LuDaShi\Utils\mininews.exe
FirewallRules: [{EBC1F643-4C01-4FCD-B6E5-FAE1F8A304A8}] => (Allow) C:\Program Files\LuDaShi\Utils\mininews.exe
FirewallRules: [{C95079DE-02DE-4FA5-AC66-3D6C28B5FE24}] => (Allow) C:\Program Files\baidu\SparkSafe\Spark.exe
FirewallRules: [{2C25FBF6-AE9C-4545-81AB-161B27F7E6B2}] => (Allow) C:\Program Files\baidu\SparkSafe\Spark.exe
FirewallRules: [{29594C26-7150-4C64-83B6-1112F3F481FF}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashReport.exe
FirewallRules: [{ACCA5170-C53C-40A8-A526-F4FB75BE0287}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashReport.exe
FirewallRules: [{3C7AD48F-818C-4449-B492-66C359497D2A}] => (Allow) C:\Program Files\baidu\SparkSafe\bdtray.exe
FirewallRules: [{B5D25EAF-4D78-4861-A940-B97A9D9694AE}] => (Allow) C:\Program Files\baidu\SparkSafe\bdtray.exe
FirewallRules: [{D4C071E8-60B5-43B8-AA0C-8B8F17C0EAAA}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashUL.exe
FirewallRules: [{C74893AE-F880-46F3-9164-ABEA5149F2C4}] => (Allow) C:\Program Files\baidu\SparkSafe\CrashUL.exe
FirewallRules: [{A46A4FF8-43D8-47CD-B74F-F6697C53B13F}] => (Allow) C:\program files\common files\tencent\qqdownload\131\bugreport_xf.exe
FirewallRules: [{0662EB90-8D46-47E2-A8FF-BB7393B4BD7A}] => (Allow) C:\program files\common files\tencent\qqdownload\131\tencentdl.exe
FirewallRules: [{267C846B-65B8-4FF7-A3A4-F45CA6FCB92D}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Points de restauration =========================
02-07-2016 22:24:24 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (07/07/2016 10:31:11 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/07/2016 10:22:05 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme spark.exe version 43.23.1000.467 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.
ID de processus : 940
Heure de début : 01d1d8395de8ea7e
Heure de fin : 4
Chemin d'accès de l'application : C:\Program Files\baidu\Baidu Browser\spark.exe
ID de rapport : a18d327b-442c-11e6-a11f-f8a9638e69f8
Nom complet du package défaillant :
ID de l'application relative au package défaillant :
Error: (07/04/2016 09:53:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: WALID)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147023170 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (07/04/2016 04:00:53 PM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/03/2016 05:35:30 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/02/2016 10:24:31 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (07/02/2016 03:53:21 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (07/01/2016 12:18:39 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Subscription licensing service failed: -1073418154
Error: (06/30/2016 01:18:02 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0"1 ».
Assembly dépendant Microsoft.Windows.Common-Controls,language="*",processorArchitecture="amd64",publicKeyToken="6595b64144ccf1df",type="win32",version="6.0.0.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (06/30/2016 01:13:35 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante backgroundTaskHost.exe, version : 10.0.10586.0, horodatage : 0x5632d899
Nom du module défaillant : Cortana.BackgroundTask.dll, version : 0.0.0.0, horodatage : 0x5749166b
Code d’exception : 0xc0000005
Décalage d’erreur : 0x001982b7
ID du processus défaillant : 0x1580
Heure de début de l’application défaillante : 0xbackgroundTaskHost.exe0
Chemin d’accès de l’application défaillante : backgroundTaskHost.exe1
Chemin d’accès du module défaillant: backgroundTaskHost.exe2
ID de rapport : backgroundTaskHost.exe3
Nom complet du package défaillant : backgroundTaskHost.exe4
ID de l’application relative au package défaillant : backgroundTaskHost.exe5
Erreurs système:
=============
Error: (07/05/2016 01:38:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Hôte de synchronisation_1f814 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service.
Error: (07/05/2016 01:38:48 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: propres à l’applicationLocalActivation{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}AUTORITE NTSystèmeS-1-5-18LocalHost (avec LRPC)Non disponibleNon disponible
Error: (07/05/2016 01:07:23 AM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/05/2016 01:07:23 AM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/05/2016 01:07:23 AM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:40:49 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:40:49 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:39:44 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:39:43 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
Error: (07/04/2016 09:39:42 PM) (Source: DCOM) (EventID: 10016) (User: WALID)
Description: par défaut de l’ordinateurLocalActivation{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}WALIDWalid SAHS-1-5-21-691611659-2595466276-322701303-1003LocalHost (avec LRPC)Microsoft.Windows.Cortana_1.6.1.52_neutral_neutral_cw5n1h2txyewyS-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742
CodeIntegrity:
===================================
Date: 2016-07-07 10:33:55.335
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:33:55.312
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:32:19.193
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:32:19.106
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.929
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.873
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.818
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.798
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\drivers\eagleGet.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.706
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EagleGet\eagleGet_x86.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2016-07-07 10:21:17.681
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files\EagleGet\eagleGet_x86.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i3-3217U CPU @ 1.80GHz
Pourcentage de mémoire utilisée: 78%
Mémoire physique - RAM - totale: 2728.35 MB
Mémoire physique - RAM - disponible: 578.18 MB
Mémoire virtuelle totale: 4072.35 MB
Mémoire virtuelle disponible: 1082.93 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:195.4 GB) (Free:75 GB) NTFS
Drive d: () (Fixed) (Total:269.53 GB) (Free:268.87 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 397A8933)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=195.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=499 MB) - (Type=27)
Partition 4: (Not Active) - (Size=269.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================