Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 20-11-2016 01
Exécuté par ritter (22-11-2016 09:15:38)
Exécuté depuis C:\Users\ritter\Desktop
Windows 7 Professional Service Pack 1 (X64) (2016-06-28 04:16:39)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-3421957732-2022287142-4054442351-500 - Administrator - Disabled)
Didier Ritter (S-1-5-21-3421957732-2022287142-4054442351-1002 - Administrator - Enabled) => C:\Users\Didier Ritter
Invité (S-1-5-21-3421957732-2022287142-4054442351-501 - Limited - Disabled)
SophosSAUFE-0412-aaa (S-1-5-21-3421957732-2022287142-4054442351-1004 - Limited - Enabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Sophos Anti-Virus (Enabled - Up to date) {6BABF8F7-3EB6-BD1D-9167-8C5ECA060A29}
AS: Sophos Anti-Virus (Enabled - Up to date) {D0CA1913-188C-B293-ABD7-B72CB1814094}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

ActiveCheck component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Flash Player 23 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 23.0.0.207 - Adobe Systems Incorporated)
APLI-DECADRY Soft SE (HKLM-x32\...\APLI-DECADRY Soft SE) (Version: 2.0 - APLI PAPER S.A. )
Apple Application Support (32 bits) (HKLM-x32\...\{29DB9165-5FC1-48F0-9188-26123F526848}) (Version: 5.0.1 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{5905C8CF-1C88-4478-A48E-4E458AD1BC7E}) (Version: 5.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{D4D86CB2-2370-4691-8272-3869EDED6C64}) (Version: 10.0.0.18 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
Application de bureau Autodesk (HKLM-x32\...\Autodesk Desktop App) (Version: 6.1.0.272 - Autodesk)
ArcSoft TotalMedia (HKLM-x32\...\ArcSoft TotalMedia) (Version: 2.0.39.12 - ArcSoft)
ArcSoft TotalMedia (x32 Version: 1.0.48.25 - ArcSoft) Hidden
Atheros Driver Installation Program (HKLM-x32\...\{C3A32068-8AB1-4327-BB16-BED9C6219DC7}) (Version: 9.2 - Atheros)
ATI Catalyst Install Manager (HKLM\...\{63E42DE7-C468-31B0-E373-173C67C87B88}) (Version: 3.0.820.0 - ATI Technologies, Inc.)
AutoCAD LT 2017 - Français (French) (Version: 21.0.52.0 - Autodesk) Hidden
AutoCAD LT 2017 - Français (French) (Version: 21.0.52.7 - Autodesk) Hidden
AutoCAD LT 2017 Language Pack - Français (French) (Version: 21.0.52.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2017 (HKLM-x32\...\{8ED2ED41-4455-449D-993C-751C039089B9}) (Version: 15.11.3.0 - Autodesk)
Autodesk AutoCAD LT 2017 - Français (French) (HKLM\...\AutoCAD LT 2017 - Français (French)) (Version: 21.0.52.0 - Autodesk)
Autodesk AutoCAD LT 2017 - Français (French) Hotfix 2 (HKLM\...\AutoCAD LT 2017 - English Hotfix 2) (Version: 21.0.52.7 - Autodesk)
Autodesk AutoCAD LT 2017 - Français (French) Hotfix 3 (HKLM\...\AutoCAD LT 2017 - English Hotfix 3) (Version: 21.0.52.9 - Autodesk)
Autodesk License Service (x64) - 3.1 (HKLM\...\{EB6FE58F-8576-4272-BB9C-6B47D9EDFA4D}) (Version: 3.1.26.0 - Autodesk)
Autodesk Material Library 2017 (HKLM-x32\...\{8FB9F735-D64C-4991-8D91-4CDDAB1ABDEE}) (Version: 15.11.3.0 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2017 (HKLM-x32\...\{3FBFBC43-9882-43FA-B979-2D53896747B3}) (Version: 15.11.3.0 - Autodesk)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 2.3.35.6237 - BlueStack Systems, Inc.)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.02.000.55 - Atheros Communications)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother Software Suite (HKLM-x32\...\{DD98C438-D769-4677-AA87-3481FA32D20C}) (Version: 2.0.0.0 - Brother Industries, Ltd.)
chartInstall (HKLM-x32\...\{2CF96265-0F15-4645-8440-625BDC5516A2}) (Version: 1.5.6 - MEMSOFT)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
CopyTrans Control Center désinstallation uniquement (HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\...\CopyTrans Suite) (Version: 4.013 - WindSolutions)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dashlane (HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\...\Dashlane) (Version: 4.6.3.20593 - Dashlane, Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 7.3.6.321 - Foxit Software Inc.)
Galerie de photos Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Google Drive (HKLM-x32\...\{3D7AB4D4-2E45-4986-BAC5-5B3CEED21FAA}) (Version: 1.32.3592.6117 - Google, Inc.)
Google Photos Backup (HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\...\Google Photos Backup) (Version: 1.1.2.13 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
HP ESU for Microsoft Windows 7 (HKLM-x32\...\{CFC1988A-F492-4BC5-B6F7-683A95718AE9}) (Version: 1.1.11.1 - Hewlett-Packard Company)
HP LaserJet Professional M1130-M1210 MFP Series (HKLM\...\HP LaserJet Professional M1130-M1210 MFP Series) (Version: - )
HP LaserJet Professional M1210 MFP Series Fax Installer (HKLM\...\{E94AE378-725A-41FF-BA24-397469D27FC8}) (Version: 1.3.0 - HP)
HP LaserJet Professional M1210 MFP Series Toolbox (HKLM\...\{F958F851-8DBE-420C-9D37-5ECBB6C61148}) (Version: 1.0.17 - Hewlett-Packard)
HP LaserJet Toolbox (HKLM\...\{2E8A793D-E275-46A2-BAB3-35FB95ACED57}) (Version: 3.0.0 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{EB72DB50-C935-4C26-8349-69828F198902}) (Version: 12.5.32.37 - HP)
HP System Default Settings (HKLM-x32\...\{54C65FE7-83BD-4A5B-A9B4-41F793C5F241}) (Version: 2.1.2 - Hewlett-Packard Company)
HP Wallpaper (HKLM-x32\...\{11C9A461-DD9D-4C71-85A4-6DCE7F99CC44}) (Version: 2.00 - Hewlett-Packard Company)
HP Webcam Driver (HKLM-x32\...\{399C37FB-08AF-493B-BFED-20FBD85EDF7F}) (Version: 5.8.50058.0 - Sonix)
HPAsset component for HP Active Support Library (x32 Version: 3.0.0.3 - Hewlett-Packard) Hidden
hppLaserJetService (x32 Version: 001.003.000145 - Hewlett-Packard) Hidden
hppM1130M1210SeriesLaserJetService (x32 Version: 001.003.00073 - Hewlett-Packard) Hidden
hppusgM1130M1210Series (x32 Version: 1.0.0.2 - Hewlett-Packard) Hidden
HPSSupply (HKLM-x32\...\{7902E313-FF0F-4493-ACB1-A8147B78DCD0}) (Version: 2.1.1.0000 - Hewlett Packard Development Company L.P.)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6325.0 - IDT)
Intel(R) Display Audio Driver (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 6.14.00.3074 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 10.1.2.1004 - Intel Corporation)
iTunes (HKLM\...\{9946A4F7-E0FD-4A33-82D1-06CBFFBBB9F9}) (Version: 12.5.1.21 - Apple Inc.)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
JMicron Flash Media Controller Driver (HKLM-x32\...\{26604C7E-A313-4D12-867F-7C6E7820BE4C}) (Version: 1.0.57.2 - JMicron Technology Corp.)
LINE (HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\...\LINE) (Version: 4.10.2.1257 - LINE Corporation)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MarketResearch (x32 Version: 130.0.374.000 - Hewlett-Packard) Hidden
Microsoft .NET Framework 4.6.1 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23026 (HKLM-x32\...\{e46eca4f-393b-40df-9f49-076faf788d83}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft_VC90_CRT_x86 (HKLM-x32\...\{DF2035BE-5820-4965-BD97-7FAF8D4A7879}) (Version: 1.0.0 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Mozilla Firefox 50.0 (x86 fr) (HKLM-x32\...\Mozilla Firefox 50.0 (x86 fr)) (Version: 50.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 50.0.0.6152 - Mozilla)
Mozilla Thunderbird 45.4.0 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 45.4.0 (x86 fr)) (Version: 45.4.0 - Mozilla)
Nvu 1.0 (HKLM-x32\...\Nvu_is1) (Version: 1.0 - Linspire Inc.)
OpenVPN 2.3.11-I001 (HKLM\...\OpenVPN) (Version: 2.3.11-I001 - )
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.4.0 - pdfforge GmbH)
PhoneClean (HKLM-x32\...\PhoneClean) (Version: 4.0.6.0 - iMobie Inc.)
PX Profile Update (x32 Version: 1.00.1. - AMD) Hidden
Raccolta foto di Windows Live (x32 Version: 15.4.3502.0922 - Microsoft Corporation) Hidden
Realtek Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{F7E7F0CB-AA41-4D5A-B6F2-8E6738EB063F}) (Version: 1.12.0016 - Realtek)
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Renesas Electronics USB 3.0 Host Controller Driver (x32 Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Scan To (HKLM\...\{E8A34AC8-0137-4515-A94B-0A0946DDC251}) (Version: 2.0.1 - HP)
SDK (x32 Version: 2.24.025 - Portrait Displays, Inc.) Hidden
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (HKLM\...\{90140000-0011-0000-1000-0000000FF1CE}_Office14.PROPLUS_{A3364707-2F53-4C83-8F68-C9877A9080C7}) (Version: - Microsoft)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 64-Bit Edition (Version: - Microsoft) Hidden
Skype™ 7.26 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.26.101 - Skype Technologies S.A.)
SolidWorks eDrawings 2011 SP0 (HKLM-x32\...\{52A73A2E-2478-45E5-A390-8C0A6F525678}) (Version: 11.0.720 - Dassault Systèmes SolidWorks Corp.)
Sophos Anti-Virus (HKLM-x32\...\{09863DA9-7A9B-4430-9561-E04D178D7017}) (Version: 10.6.3.537 - Sophos Limited)
Sophos AutoUpdate (HKLM-x32\...\{BCF53039-A7FC-4C79-A3E3-437AE28FD918}) (Version: 5.2.0.276 - Sophos Limited)
Sophos Network Threat Protection (HKLM\...\{66967E5F-43E8-4402-87A4-04685EE5C2CB}) (Version: 1.2.2.50 - Sophos Limited)
Sophos Remote Management System (HKLM-x32\...\{FED1005D-CBC8-45D5-A288-FFC7BB304121}) (Version: 4.0.6 - Sophos Limited)
Sophos System Protection (HKLM-x32\...\{1093B57D-A613-47F3-90CF-0FD5C5DCFFE6}) (Version: 1.3.0 - Sophos Limited)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.13.0 - Synaptics Incorporated)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamViewer 8 (HKLM-x32\...\TeamViewer 8) (Version: 8.0.44109 - TeamViewer)
Telegram Desktop version 0.10.19 (HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 0.10.19 - Telegram Messenger LLP)
TomTom HOME (HKLM-x32\...\{B581E191-A2C1-4CE3-907E-9FE3C728750C}) (Version: 2.9.91 - Nom de votre société)
Validity Fingerprint Sensor Driver (HKLM\...\{FFC3E41D-2C2B-45B7-9AD9-5EA19572DD26}) (Version: 4.3.117.0 - Validity Sensors, Inc.)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation)
WinRAR 5.31 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.0 - win.rar GmbH)
WinZip 14.5 (HKLM-x32\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240BD}) (Version: 14.5.9095 - WinZip Computing, S.L. )
WMV9/VC-1 Video Playback (Version: 1.00.0000 - ATI Technologies Inc.) Hidden
Xobni (HKLM-x32\...\XobniMain) (Version: 1.9.5.13282 - Xobni Corp.)
Xobni Core (x32 Version: 1.0.0 - Xobni, Inc.) Hidden
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-4068479684-1111740649-3668020536-2092_Classes\CLSID\{590C4387-5EBD-4D46-8A84-CD0BA2EF2856}\InprocServer32 -> C:\Users\ritter\AppData\Local\Google\Update\1.3.30.3\psuser_64.dll => Pas de fichier
CustomCLSID: HKU\S-1-5-21-4068479684-1111740649-3668020536-2092_Classes\CLSID\{59B55F04-DE14-4BB8-92FF-C4A22EF2E5F4}\InprocServer32 -> C:\Users\ritter\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)
CustomCLSID: HKU\S-1-5-21-4068479684-1111740649-3668020536-2092_Classes\CLSID\{720DB9AF-D62C-4ED0-A377-429C22312852}\localserver32 -> C:\Program Files\Autodesk\AutoCAD LT 2017\acadlt.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-4068479684-1111740649-3668020536-2092_Classes\CLSID\{74F5CC00-49A9-11CF-A2F9-444553540000}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD LT 2017\fr-FR\acadltficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-4068479684-1111740649-3668020536-2092_Classes\CLSID\{E8CF3E55-F919-49D9-ABC0-948E6CB34B9F}\InprocServer32 -> C:\Users\ritter\AppData\Local\Google\Update\1.3.31.5\psuser_64.dll (Google Inc.)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {06237A40-37F6-440E-BE67-8F8C983D0101} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-29] (Google Inc.)
Task: {292F6026-E7CB-4B7E-AF14-D14322ECD6BF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2016-05-09] (Hewlett-Packard)
Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Pas de fichier <==== ATTENTION
Task: {5296A764-6B33-48E2-9BB2-5DC04D19F268} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {54E1CE51-B5A2-4B2A-830D-704FD0D0C8FD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Tuneup => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {58C3CDB1-0868-4A43-9F46-26C2B0D08D4B} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4068479684-1111740649-3668020536-2092Core => C:\Users\ritter\AppData\Local\Google\Update\GoogleUpdate.exe [2016-07-24] (Google Inc.)
Task: {5F0A6366-16E6-4190-8DDD-2BB5C7FC646A} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-4068479684-1111740649-3668020536-2092UA => C:\Users\ritter\AppData\Local\Google\Update\GoogleUpdate.exe [2016-07-24] (Google Inc.)
Task: {6D85AAEF-B866-4300-9A9C-8BFFECEC5AB2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-06-29] (Google Inc.)
Task: {9062AD56-4EB8-4C6B-887B-E5E04C724E6D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2016-08-03] (HP Inc.)
Task: {A32BFF66-88C1-45B8-96DC-E93FB5384511} - System32\Tasks\HPCeeScheduleForFE-0412-DRI$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Pas de fichier <==== ATTENTION
Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Pas de fichier <==== ATTENTION
Task: {D637B334-78DD-478C-B3CF-D3D97E4F0EAD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Pas de fichier <==== ATTENTION

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\windows\Tasks\Adobe Flash Player Updater.job => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4068479684-1111740649-3668020536-2092Core.job => C:\Users\ritter\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-4068479684-1111740649-3668020536-2092UA.job => C:\Users\ritter\AppData\Local\Google\Update\GoogleUpdate.exe
Task: C:\windows\Tasks\HPCeeScheduleForFE-0412-DRI$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Raccourcis =============================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)

==================== Modules chargés (Avec liste blanche) ==============

2016-06-29 21:30 - 2012-09-29 13:25 - 00409088 _____ () C:\windows\System32\HPM1210LM.DLL
2016-06-29 21:30 - 2012-09-29 13:25 - 00074240 _____ () C:\windows\system32\spool\PRTPROCS\x64\HPM1210PP.DLL
2016-11-21 16:26 - 2016-11-10 14:59 - 00536960 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\DashlanePlugin.exe
2016-06-30 11:16 - 2016-06-30 11:16 - 00233608 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\http.plg
2016-06-30 11:16 - 2016-06-30 11:16 - 00140696 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ip.plg
2016-06-30 11:16 - 2016-06-30 11:16 - 00119344 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\ipv6.plg
2016-06-30 11:15 - 2016-06-30 11:15 - 00076704 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\portmap.plg
2016-06-30 11:15 - 2016-06-30 11:15 - 00165000 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\tcp.plg
2016-06-30 11:16 - 2016-06-30 11:16 - 00148440 _____ () C:\Program Files\Sophos\Sophos Network Threat Protection\bin\plugins\udp.plg
2016-11-11 19:24 - 2016-09-26 10:02 - 00068016 _____ () C:\Program Files (x86)\iMobie\PhoneClean\iTunesMobileDevice.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-09-01 17:12 - 2016-09-01 17:12 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-06-29 21:00 - 2005-04-22 05:36 - 00143360 _____ () C:\windows\system32\BrSNMP64.dll
2016-05-10 08:41 - 2016-05-10 08:41 - 00446304 _____ () C:\Program Files\OpenVPN\bin\openvpn-gui.exe
2016-05-10 08:41 - 2016-05-10 08:41 - 00226432 _____ () C:\Program Files\OpenVPN\bin\liblzo2-2.dll
2016-05-10 08:41 - 2016-05-10 08:41 - 00123000 _____ () C:\Program Files\OpenVPN\bin\libpkcs11-helper-1.dll
2016-06-29 21:30 - 2012-09-29 13:26 - 03120128 _____ () C:\windows\system32\spool\DRIVERS\x64\3\hpm1210su.dll
2016-06-29 21:30 - 2012-09-29 13:53 - 01038336 _____ () C:\windows\system32\spool\DRIVERS\x64\3\HPM1210GC.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 00346496 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWDebugDll_win32.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 00441216 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWDebug.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 00471424 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWUtils.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 63181696 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWExternLib.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 00292736 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWMainLib_win.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 06322048 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWData.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 07602560 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWApplication.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 13827456 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWMainLib.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 02285440 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\KWMainLibData.4.6.3.20593.dll
2016-11-21 16:25 - 2016-11-10 14:52 - 00334208 _____ () C:\Users\ritter\AppData\Roaming\Dashlane\4.6.3.20593\bin\Firefox_Extension\{442718d9-475e-452a-b3e1-fb1ee16b8e9f}\components\Kwift_DP.4.6.3.20593.dll
2016-11-22 07:32 - 2016-11-22 07:32 - 00098816 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32api.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00110080 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\pywintypes27.dll
2016-11-22 07:32 - 2016-11-22 07:32 - 00364544 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\pythoncom27.dll
2016-11-22 07:32 - 2016-11-22 07:32 - 00320512 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32com.shell.shell.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00914432 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_hashlib.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 01176576 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._core_.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00806400 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._gdi_.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00816128 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._windows_.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 01067008 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._controls_.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00733184 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._misc_.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00682496 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\pysqlite2._sqlite.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00088064 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_ctypes.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00686080 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\unicodedata.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00119808 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32file.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00108544 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32security.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00007168 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\hashobjs_ext.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00017920 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\thumbnails_ext.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00088064 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\usb_ext.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00012800 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\common.time34.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00018432 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32event.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00167936 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32gui.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00046080 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_socket.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 01303552 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_ssl.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00128512 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_elementtree.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00127488 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\pyexpat.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00038912 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32inet.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00036864 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_psutil_windows.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00524248 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\windows._lib_cacheinvalidation.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00011264 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32crypt.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00123392 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._wizard.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00077312 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._html2.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00027648 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_multiprocessing.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00020480 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\_yappi.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00035840 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32process.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00078848 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\wx._animate.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00024064 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32pipe.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00010240 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\select.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00025600 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32pdh.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00017408 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32profile.pyd
2016-11-22 07:32 - 2016-11-22 07:32 - 00022528 ____R () C:\Users\ritter\AppData\Local\Temp\_MEI30002\win32ts.pyd
2016-11-09 12:35 - 2016-11-09 12:35 - 04041680 _____ () C:\Users\ritter\AppData\Local\LINE\bin\4.10.2.1257\ampkit_windows.dll
2016-11-09 12:36 - 2016-11-09 12:36 - 00123344 _____ () C:\Users\ritter\AppData\Local\LINE\bin\4.10.2.1257\PlayerHelper.dll
2016-06-30 10:34 - 2016-06-30 10:34 - 01276680 _____ () C:\Program Files (x86)\Sophos\Remote Management System\ACE.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00075016 _____ () C:\Program Files (x86)\Sophos\Remote Management System\ACE_SSL.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 01094408 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00254216 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_SSLIOP.dll
2016-06-30 10:34 - 2016-06-30 10:34 - 00465160 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_AnyTypeCode.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00511752 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_PortableServer.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00087816 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_Valuetype.dll
2016-06-30 10:34 - 2016-06-30 10:34 - 00059144 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_CodecFactory.dll
2016-06-30 10:34 - 2016-06-30 10:34 - 00149768 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_PI.dll
2016-06-30 10:33 - 2016-06-30 10:33 - 00832264 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_Security.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00044808 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_Svc_Utils.dll
2016-06-30 10:34 - 2016-06-30 10:34 - 00069384 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_PI_Server.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00347400 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_DynamicAny.dll
2016-06-30 10:35 - 2016-06-30 10:35 - 00052488 _____ () C:\Program Files (x86)\Sophos\Remote Management System\TAO_Codeset.dll
2016-11-09 12:35 - 2016-11-09 12:35 - 00875000 _____ () C:\Users\ritter\AppData\Local\LINE\bin\4.10.2.1257\LinePlayer\LPEngine.dll
2016-07-02 20:17 - 2016-07-02 20:17 - 00169472 _____ () C:\windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\61a733954a0da9a5988d596c76b2b891\IsdiInterop.ni.dll
2016-06-28 05:24 - 2011-01-13 02:56 - 00058880 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)


==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SAVService => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SntpService => ""="service"

==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)

HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\Software\Classes\.scr: AutoCADLTScriptFile => C:\windows\system32\notepad.exe "%1"

==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2009-07-14 03:34 - 2016-07-05 07:40 - 00000824 ____A C:\windows\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-4068479684-1111740649-3668020536-2092\Control Panel\Desktop\\Wallpaper -> C:\Users\ritter\AppData\Roaming\Mozilla\Firefox\Fond d’écran.bmp
DNS Servers: 192.168.0.39 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

MSCONFIG\startupreg: ADSKAppManager => "C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe" -tray
MSCONFIG\startupreg: AthBtTray => "C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"
MSCONFIG\startupreg: AtherosBtStack => "C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
MSCONFIG\startupreg: ControlCenter4 => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe /autorun
MSCONFIG\startupreg: DTRun => c:\Program Files (x86)\ArcSoft\TotalMedia Suite\TotalMedia Theatre 3\uDTRun.exe
MSCONFIG\startupreg: File Sanitizer => C:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
MSCONFIG\startupreg: Google Photos Backup => "C:\Users\ritter\AppData\Local\Programs\Google\Google Photos Backup\Google Photos Backup.exe" /autostart
MSCONFIG\startupreg: Google Update => "C:\Users\ritter\AppData\Local\Google\Update\GoogleUpdate.exe" /c
MSCONFIG\startupreg: HotKeysCmds => C:\windows\system32\hkcmd.exe
MSCONFIG\startupreg: HPUsageTrackingLEDM => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\"
MSCONFIG\startupreg: IAStorIcon => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
MSCONFIG\startupreg: IgfxTray => C:\windows\system32\igfxtray.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: LINE => "C:\Users\ritter\AppData\Local\LINE\bin\LineLauncher.exe" --booting
MSCONFIG\startupreg: NUSB3MON => "c:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe
MSCONFIG\startupreg: Persistence => C:\windows\system32\igfxpers.exe
MSCONFIG\startupreg: Sophos AutoUpdate Monitor => C:\Program Files (x86)\Sophos\AutoUpdate\almon.exe
MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
MSCONFIG\startupreg: SynTPEnh => %ProgramFiles%\Synaptics\SynTP\SynTPEnh.exe
MSCONFIG\startupreg: TomTomHOME.exe => "C:\Program Files (x86)\TomTom HOME 2\TomTomHOMERunner.exe" -s

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [VirtualPC-In-UDP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-UDP-2] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [VirtualPC-In-TCP-1] => (Allow) %SystemRoot%\System32\vpc.exe
FirewallRules: [{378F5AE0-29BE-4FB1-A025-622573ED7744}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{92D21149-C10A-48CF-A1AA-4271503E5AFB}] => (Allow) LPort=2869
FirewallRules: [{A4522E36-05CF-4099-B431-21A021329DDD}] => (Allow) LPort=1900
FirewallRules: [{C849FC84-D224-43A0-A666-7B4F15F8699C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A82C3F35-758F-4AD5-B666-209858B07C02}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{A6D66E1B-22B5-4E9F-927A-09CC25A50E4F}C:\users\didier ritter\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\didier ritter\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{16811320-D036-4667-BFF1-2E61ED1D02A0}C:\users\didier ritter\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\didier ritter\appdata\local\akamai\netsession_win.exe
FirewallRules: [{FAF46C7E-2DF7-46DD-A4FA-ECE71E6AC96B}] => (Allow) C:\Users\Didier Ritter\AppData\Local\Temp\7zS6420\ProductInst64.exe
FirewallRules: [{E22C3CA8-3F69-4B44-928E-9793181BA2E2}] => (Allow) C:\Users\Didier Ritter\AppData\Local\Temp\7zS6420\ProductInst64.exe
FirewallRules: [{415BFE6B-B13A-4B19-9F2D-B84ABBF74C8F}] => (Allow) LPort=9100
FirewallRules: [{F016B514-E4A9-439D-BE8B-8CD7350825D4}] => (Allow) LPort=427
FirewallRules: [{E5062962-3D97-4FE3-B90F-6C36B855B3A8}] => (Allow) LPort=161
FirewallRules: [{1AB3040D-D142-4BE2-BC10-58ECB80080B3}] => (Allow) LPort=427
FirewallRules: [TCP Query User{AF03201A-3AD3-4A0B-ACEA-00846B23E0E7}C:\users\didier ritter\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\didier ritter\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{618BDB77-CBA4-44C2-89F6-802B4AFB6E2E}C:\users\didier ritter\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\didier ritter\appdata\local\akamai\netsession_win.exe
FirewallRules: [{3B438FF6-4FCB-40DA-9350-56696C81375D}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{7043133A-11B6-44D0-B9E2-B447920BFA0E}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer.exe
FirewallRules: [{59EA7574-C3FC-4576-AFD6-4C2999183585}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [{E2836CE0-BC87-4EB7-863A-3F0589879D62}] => (Allow) C:\Program Files (x86)\TeamViewer\Version8\TeamViewer_Service.exe
FirewallRules: [TCP Query User{B06B2562-D77D-4A50-A079-3AB0FA3F34A8}C:\users\ritter\appdata\local\line\bin\4.7.1.1037\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.7.1.1037\line.exe
FirewallRules: [UDP Query User{98545A62-55BC-4DA0-B654-FA6DC8D1A42D}C:\users\ritter\appdata\local\line\bin\4.7.1.1037\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.7.1.1037\line.exe
FirewallRules: [{D68C8D56-9C6D-40E2-896E-096C243F0C9B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{EC91E83E-3DDD-4874-AAC1-F141E59995F7}] => (Allow) LPort=1688
FirewallRules: [{58AC0EFC-F32F-4E54-834F-DCED9E981AFF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{78E2E0B7-B1FD-4F3D-B8EE-C9A5CA0ED855}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B14BFEE3-AA25-421C-8817-3CD44524C6B6}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{9099985F-3394-46BF-AD82-13494391899F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [TCP Query User{3F14AB4F-38C0-4A1A-A3F7-4DB59C3E802E}C:\users\ritter\appdata\local\line\bin\4.8.1.1112\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.8.1.1112\line.exe
FirewallRules: [UDP Query User{B1F569A7-2788-40FD-8CA4-EE978B53E266}C:\users\ritter\appdata\local\line\bin\4.8.1.1112\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.8.1.1112\line.exe
FirewallRules: [TCP Query User{8F62A530-10C3-41A6-9C6D-6F1D7B3CC834}C:\users\ritter\appdata\local\line\bin\4.8.3.1130\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.8.3.1130\line.exe
FirewallRules: [UDP Query User{E6A67F83-6E95-45C4-8ADB-76BA86422A27}C:\users\ritter\appdata\local\line\bin\4.8.3.1130\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.8.3.1130\line.exe
FirewallRules: [TCP Query User{5B476EB8-9AE2-4E15-B5D5-592095583FC6}C:\users\ritter\appdata\local\line\bin\4.9.0.1147\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.9.0.1147\line.exe
FirewallRules: [UDP Query User{4E343096-7BA1-4050-A06B-C690D2B9AF50}C:\users\ritter\appdata\local\line\bin\4.9.0.1147\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.9.0.1147\line.exe
FirewallRules: [{FA0E84AE-D4FE-4232-966E-76A877DE4DB6}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{2673377B-3701-4413-A0AD-8E48DFC53D16}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [UDP Query User{8A9D8263-B433-4CC9-BDF8-55575D60BF63}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Allow) C:\program files (x86)\mozilla firefox\plugin-container.exe
FirewallRules: [TCP Query User{E22C78B0-565D-4E8D-81D5-0A11390335B1}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [UDP Query User{07C737EB-C7D0-4134-8BAE-4F0872135951}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe
FirewallRules: [TCP Query User{E6D42109-D1D5-4D99-A4DA-1E9161EE4604}C:\users\ritter\appdata\local\line\bin\4.10.0.1237\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.10.0.1237\line.exe
FirewallRules: [UDP Query User{75D14324-7674-4FFE-BC42-291967CD8BD2}C:\users\ritter\appdata\local\line\bin\4.10.0.1237\line.exe] => (Allow) C:\users\ritter\appdata\local\line\bin\4.10.0.1237\line.exe

==================== Points de restauration =========================

19-11-2016 23:17:58 Installed calibre
20-11-2016 10:03:32 Removed calibre

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (11/22/2016 07:39:34 AM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/21/2016 10:35:46 PM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/21/2016 09:25:12 PM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/21/2016 09:21:37 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Photoshop.exe version 16.0.1.168 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.

ID de processus : 1140

Heure de début : 01d24433c3e6b5cc

Heure de fin : 17

Chemin d’accès de l’application : C:\PhotoshopPortable 16 0 1\PhotoshopPortable_16.0.1\PhotoshopPortable\App\Photoshop64\Photoshop.exe

ID de rapport :

Error: (11/21/2016 04:14:51 PM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/21/2016 08:28:09 AM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/20/2016 10:05:57 PM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/20/2016 08:42:56 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante firefox.exe, version : 50.0.0.6152, horodatage : 0x581d78ba
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000005
Décalage d’erreur : 0x2ec1fa6c
ID du processus défaillant : 0xb70
Heure de début de l’application défaillante : 0x01d2435f05c6854e
Chemin d’accès de l’application défaillante : C:\Program Files (x86)\Mozilla Firefox\firefox.exe
Chemin d’accès du module défaillant: unknown
ID de rapport : 8836dee3-af59-11e6-8ca3-d0df9a91a3eb

Error: (11/20/2016 07:56:23 PM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3

Error: (11/20/2016 05:46:53 PM) (Source: Sophos Message Router) (EventID: 8005) (User: AUTORITE NT)
Description: Échec de la consultation des tables DNS lors de la tentative de résolution des adresses suivantes : ANTIVIRUS-SRV,ANTIVIRUS-SRV.abeo-erp.local,fe80::84ca:c64a:1716:3a56.%%3


Erreurs système:
=============
Error: (11/22/2016 07:41:54 AM) (Source: Service Control Manager) (EventID: 7022) (User: )
Description: Le service Windows Update est en attente de démarrage.

Error: (11/22/2016 07:38:21 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service HP Support Solutions Framework Service n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.

Error: (11/22/2016 07:38:21 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service HP Support Solutions Framework Service.

Error: (11/22/2016 07:37:48 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service HP Health Check Service n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (11/22/2016 07:33:30 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Sophos Agent n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.

Error: (11/22/2016 07:33:30 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Sophos Agent.

Error: (11/22/2016 07:32:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service McAfee Endpoint Encryption Agent n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (11/22/2016 07:32:29 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service HP LaserJet Service n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.

Error: (11/22/2016 07:32:29 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service HP LaserJet Service.

Error: (11/22/2016 07:31:55 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BlueStacks Log Rotator Service n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.


==================== Infos Mémoire ===========================

Processeur: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Pourcentage de mémoire utilisée: 35%
Mémoire physique - RAM - totale: 8126.36 MB
Mémoire physique - RAM - disponible: 5266.12 MB
Mémoire virtuelle totale: 16250.89 MB
Mémoire virtuelle disponible: 13238.29 MB

==================== Lecteurs ================================

Drive c: () (Fixed) (Total:442.67 GB) (Free:201.18 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (HP_RECOVERY) (Fixed) (Total:17.8 GB) (Free:2.64 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive e: (HP_TOOLS) (Fixed) (Total:4.99 GB) (Free:4.98 GB) FAT32

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: F2D83907)
Partition 1: (Active) - (Size=300 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=442.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=17.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=5 GB) - (Type=0C)

==================== Fin de Addition.txt ============================