Additional scan result of Farbar Recovery Scan Tool (x64) Version: 05-02-2017
Ran by David (09-02-2017 08:18:22)
Running from C:\Users\David\Downloads
Windows 7 Ultimate Service Pack 1 (X64) (2014-01-05 05:57:10)
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-768809636-1414782620-3286814988-500 - Administrator - Disabled)
David (S-1-5-21-768809636-1414782620-3286814988-1000 - Administrator - Enabled) => C:\Users\David
Guest (S-1-5-21-768809636-1414782620-3286814988-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-768809636-1414782620-3286814988-1003 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: ESET NOD32 Antivirus 8.0 (Enabled - Out of date) {19259FAE-8396-A113-46DB-15B0E7DFA289}
AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: ESET NOD32 Antivirus 8.0 (Enabled - Out of date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

ALSong 2.71 (HKLM-x32\...\ALSong_is1) (Version: v2.71 - ESTsoft Corp.)
ALTools Update (HKLM-x32\...\ALUpdate_is1) (Version: v11.4 - ESTsoft Corp.)
Avery Wizard 5.0 (HKLM\...\{FC3B3A5D-7058-4627-9F1E-F95CC38B6054}) (Version: 5.0.5 - Avery)
Canon MP280 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MP280_series) (Version: - Canon Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 4.11 - Piriform)
CutePDF Writer 3.0 (HKLM\...\CutePDF Writer Installation) (Version: 3.0 - CutePDF.com)
ESET NOD32 Antivirus (HKLM\...\{8175D51C-4E72-4E8B-9169-99B80B81B691}) (Version: 8.0.319.1 - ESET, spol s r. o.)
GIMP 2.8.6 (HKLM\...\GIMP-2_is1) (Version: 2.8.6 - The GIMP Team)
HP Deskjet 2510 series Basic Device Software (HKLM\...\{293CC68A-32BA-4BA4-84BD-0DCF6583566F}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
ImageJ 1.48v (HKLM\...\ImageJ_is1) (Version: - NIH)
Microsoft .NET Framework 4.5.1 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)
NVIDIA HD Audio Driver 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDFCreator (HKLM\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 2.0.2 - pdfforge)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (Version: - Microsoft) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.2.11.1 - Synaptics Incorporated)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
Unknown Device Identifier 8.01 (HKLM\...\Unknown Device Identifier_is1) (Version: 8.01 - Huntersoft)
Update for Skype for Business 2015 (KB2889853) 64-Bit Edition (HKLM\...\{90150000-012B-0409-1000-0000000FF1CE}_Office15.PROPLUS_{40930C8E-A677-414C-A72F-DFDEB10738FB}) (Version: - Microsoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)
WhoCrashed 5.53 (HKLM\...\WhoCrashed_is1) (Version: - Resplendence Software Projects Sp.)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-768809636-1414782620-3286814988-1000_Classes\CLSID\{0207CA76-8233-4478-9A40-607AC304C435}\InprocServer32 -> C:\Users\David\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH)
CustomCLSID: HKU\S-1-5-21-768809636-1414782620-3286814988-1000_Classes\CLSID\{2BB2DE4F-FCDF-46F2-9723-5B1959E1BDE0}\InprocServer32 -> C:\Users\David\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH)
CustomCLSID: HKU\S-1-5-21-768809636-1414782620-3286814988-1000_Classes\CLSID\{95775FC2-FFFA-4432-A4BC-352AB1A84581}\InprocServer32 -> C:\Users\David\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH)
CustomCLSID: HKU\S-1-5-21-768809636-1414782620-3286814988-1000_Classes\CLSID\{BE892433-7479-4231-AB95-A313BDA3D409}\InprocServer32 -> C:\Users\David\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH)
CustomCLSID: HKU\S-1-5-21-768809636-1414782620-3286814988-1000_Classes\CLSID\{D0E9EEAE-9AC7-4204-BA07-B72DD6077E82}\InprocServer32 -> C:\Users\David\AppData\Roaming\Avery\Avery Wizard 5.0\AvWizRes.dll (Avery Products Corporation. Envel Informationssysteme GmbH.)
CustomCLSID: HKU\S-1-5-21-768809636-1414782620-3286814988-1000_Classes\CLSID\{D2776BCC-5F09-4068-B4E2-7EE1202F95CF}\InprocServer32 -> C:\Users\David\AppData\Roaming\Avery\Avery Wizard 5.0\EnvBCode.ocx (Envel Informationssysteme GmbH)

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {06B21B82-7A73-4D49-A1B5-118D606BA24D} - System32\Tasks\GoogleUpdateTaskMachineUA1d005e4c3374a53 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-11] (Google Inc.)
Task: {2F2CB286-327B-4235-B0A3-2786E9DE406D} - System32\Tasks\GoogleUpdateTaskMachineCore1cf6c4923c5cc4c => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-11] (Google Inc.)
Task: {31FF9A32-B935-424D-B6DF-1806C25B57FF} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-02-06] (Dropbox, Inc.)
Task: {39B969D1-8214-4E06-84A3-31A17A2468B9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {49A8528F-0427-4E3A-A246-0BC4F211CF7B} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\OatTask =>
Task: {5CB35100-1D1B-4265-9D41-282091C216B5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2015-09-28] (Hewlett-Packard Company)
Task: {5D29D9F3-1402-4C8C-9305-390EA8909C45} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\ESTsoft\ALSong\ALSong.exe [2015-03-20] (ESTsoft Corp.)
Task: {64C6CEA1-8D2C-4B1F-A4F4-C78015794688} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {737E2B3D-49D5-41C8-B19C-E05FB8A390F6} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [2017-02-06] (Dropbox, Inc.)
Task: {74884296-D115-481C-BC91-D2C747A69016} - System32\Tasks\{F2BA39CE-1F1D-4FBB-A698-275F8FEC1FCD} => pcalua.exe -a F:\Setup\Setup.exe -d F:\Setup
Task: {C7243AA2-80AD-4634-9455-4E1526BCEBBB} - System32\Tasks\{ECEB2F5D-6DE0-4EF6-935F-F026B56F03A7} => pcalua.exe -a F:\Support\GameLauncher\UbisoftGameLauncherInstaller.exe -d F:\Support\GameLauncher
Task: {C7A38E16-CF64-4EDA-8FF5-F151702D0225} - System32\Tasks\{CEA4D1A9-3777-4C51-B697-942686F2C0BF} => Firefox.exe hxxp://www.skype.com/go/downloading?source=lightinstaller&ver=6.11.0.102&LastError=12002
Task: {D28E4CF6-30C4-497F-A341-0E7BCE63DDFE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-23] (Microsoft Corporation)
Task: {D5C42C14-8576-4387-A13C-97D064D56ED7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {F1733A55-EF1C-4812-9170-9A26B1AB3066} - System32\Tasks\GoogleUpdateTaskMachineUA1cf4ed08b83d1f3 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-11] (Google Inc.)
Task: {FA025AAF-A7FF-4949-BE8F-B310DA7C58DD} - System32\Tasks\Microsoft\Windows\MemDiag => C:\Windows\system32\mdres.exe [2009-07-14] (Microsoft Corporation)
Task: {FFD31083-CCF2-4DB1-A924-C92F3A5EC6AE} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2015-09-27] (Hewlett-Packard)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1cf6c4923c5cc4c.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1cf4ed08b83d1f3.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA1d005e4c3374a53.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Shortcuts =============================

(The entries could be listed to be restored or removed.)

==================== Loaded Modules (Whitelisted) ==============

2014-10-14 13:57 - 2014-10-14 13:57 - 08897696 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-10-14 13:58 - 2014-10-14 13:58 - 08897696 _____ () C:\Program Files (x86)\Microsoft Office\Office15\1033\GrooveIntlResource.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

AlternateDataStreams: C:\Users\David\Desktop\HMBA311 Ecole thématique génomique fonctionnelle appliquée aux plantes méditéranéennes:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\David\Documents\cours:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\David\Documents\cours.lnk:com.dropbox.attributes [168]
AlternateDataStreams: C:\Users\David\Documents\Fiche renseignements:com.dropbox.attributes [168]

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="2"
e"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MSIServer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AudioEndpointBuilder => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Audiosrv => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MMCSS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\{4D36E96C-E325-11CE-BFC1-08002BE10318} => ""="Sound, video and game controllers"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 03:34 - 2015-12-13 00:28 - 00000826 ____A C:\Windows\system32\Drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-768809636-1414782620-3286814988-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\David\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: BDESVC => 3
MSCONFIG\Services: bthserv => 3
MSCONFIG\Services: GfExperienceService => 2
MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2
MSCONFIG\Services: McComponentHostService => 3
MSCONFIG\Services: NvNetworkService => 2
MSCONFIG\Services: NvStreamSvc => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: rpcnetp => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: Stereo Service => 2
MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^McAfee Security Scan Plus.lnk => C:\Windows\pss\McAfee Security Scan Plus.lnk.CommonStartup
MSCONFIG\startupreg: DAEMON Tools Lite => "C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe" -autorun
MSCONFIG\startupreg: iFunBox Fast App Install Handler => C:\Program Files (x86)\i-Funbox DevTeam\iFunBox.exe /tray
MSCONFIG\startupreg: ShadowPlay => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
MSCONFIG\startupreg: XboxStat => "C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe" silentrun

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [TCP Query User{8ABAB83B-E380-474B-89F5-1D02FB31008F}C:\games\left 4 dead 2\left4dead2.exe] => C:\games\left 4 dead 2\left4dead2.exe
FirewallRules: [UDP Query User{663FDF8B-0E00-4920-982A-BCB98F088004}C:\games\left 4 dead 2\left4dead2.exe] => C:\games\left 4 dead 2\left4dead2.exe
FirewallRules: [{EEC1B7D7-3F74-4BEC-844F-33E3695D1B61}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{3FAAC6AF-F99C-4459-81A3-C57EABF5F282}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{9603A455-411E-47A3-8A7D-E74DAD021DED}] => C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{079A9AF4-A083-4C17-890E-1F614EF08AC5}] => C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{A03FF714-68DC-4707-9950-CCDF4851EA07}] => C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{7717549D-BC87-4549-880B-10BD5CC37621}] => C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{8E23C06B-030A-445A-9C43-FC591FF5E609}] => C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{5BDBCED3-2D4E-42F0-BB0B-AE75EB209ABE}] => C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{BD8556D6-5DEE-4EBE-A03E-B24A8F9342FA}] => C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{3FB6F8A1-E7A5-415A-BB96-657838AAA89B}C:\games\starcraft\starcraft.exe] => C:\games\starcraft\starcraft.exe
FirewallRules: [UDP Query User{5F58B6D9-8E20-4643-A880-AEC58062ED55}C:\games\starcraft\starcraft.exe] => C:\games\starcraft\starcraft.exe
FirewallRules: [{F8B5B015-68C3-4FCD-B134-5A1B5B3707D2}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{2C95AF0F-D5DD-4EBD-952B-510663FE79CB}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{AC2FCF88-94A6-4773-913C-3F7232D366CC}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{4185394A-4354-4D1D-B6F2-52A300C9FECD}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{D93827A1-223B-40BC-B3A0-E05A5A8C29F8}] => C:\Program Files\HP\HP Deskjet 2510 series\Bin\USBSetup.exe
FirewallRules: [{1F6863A0-BD72-4B1E-8C60-AEEA1F7F2FDD}] => LPort=7379
FirewallRules: [{8DE370C9-C4A7-40A3-A242-F4C854C6F944}] => LPort=1969
FirewallRules: [{B8DD77CA-908F-4FC2-BB23-C3BB33F897E5}] => LPort=1221
FirewallRules: [{CCFF0D02-7DA8-4805-811B-05B1F535DB69}] => LPort=1758
FirewallRules: [TCP Query User{86646A82-3218-4CB9-9634-947FE1746633}C:\users\david\appdata\roaming\tiejo\etbo.exe] => C:\users\david\appdata\roaming\tiejo\etbo.exe
FirewallRules: [UDP Query User{AE6465FD-D1AF-4C3B-809C-C3EACEC61C90}C:\users\david\appdata\roaming\tiejo\etbo.exe] => C:\users\david\appdata\roaming\tiejo\etbo.exe
FirewallRules: [TCP Query User{7C3B919B-D94D-41A4-8136-3C9B764E4E86}C:\users\david\appdata\roaming\tiejo\etbo.exe] => C:\users\david\appdata\roaming\tiejo\etbo.exe
FirewallRules: [UDP Query User{96F5C131-C6EC-497B-9A44-AD5D0E6B68F9}C:\users\david\appdata\roaming\tiejo\etbo.exe] => C:\users\david\appdata\roaming\tiejo\etbo.exe
FirewallRules: [TCP Query User{B2583BF0-58F8-4FDF-8D73-3C9ABF9FA37A}C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe] => C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe
FirewallRules: [UDP Query User{8768230B-26D0-4293-8E7F-EDB27F176725}C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe] => C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe
FirewallRules: [TCP Query User{9005A62E-BFB0-4434-B786-76A4DA935D70}C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe] => C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe
FirewallRules: [UDP Query User{35FB3EF8-DBDA-43DD-8049-2190BF0C2DAE}C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe] => C:\users\david\appdata\roaming\cacaoweb\cacaoweb.exe
FirewallRules: [{8A1D29A4-7117-4C49-97A2-089742D51250}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{D1298FBD-2643-4F1A-8EDB-E93B2F767690}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{3B4FEFDE-BFED-4815-A0B0-084F06673511}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{3F2694BF-143D-48B3-9579-AFBB3B9158B6}] => C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{1CE0DB44-7C56-4C7B-84AE-0801FEC6F0FB}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{59489DD8-522A-4D17-AE97-F9EC9593B076}] => C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{68E4B140-56D4-4838-8233-2C0673029412}C:\program files\imagej\imagej.exe] => C:\program files\imagej\imagej.exe
FirewallRules: [UDP Query User{EEFC4D54-63F4-4891-9831-D1D98EE91F2C}C:\program files\imagej\imagej.exe] => C:\program files\imagej\imagej.exe
FirewallRules: [TCP Query User{3C763612-1F04-4C86-936D-979C7E785138}C:\program files\imagej\imagej.exe] => C:\program files\imagej\imagej.exe
FirewallRules: [UDP Query User{0BD5A182-F836-4BC3-92CD-1D29391AC714}C:\program files\imagej\imagej.exe] => C:\program files\imagej\imagej.exe
FirewallRules: [{1B6B3597-450E-4808-A957-537FB595E203}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A217C77B-CE56-4784-A9BD-0EFBDE7434B9}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{C1F939CC-A68D-405E-9B34-319061B6C1DC}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{95238122-4365-4D58-B316-FEC1B69D512C}C:\program files (x86)\mozilla firefox\firefox.exe] => C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{A8D96618-CADC-4750-B32F-0B30BA9E592B}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{1C40D0EC-0256-4A50-ACE2-D0C8C8AAAB20}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{28AEDB0F-B153-429D-BFAB-97B9E24C5DD0}] => C:\Users\David\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{0EF23E2B-482C-4014-86BF-D77DB03A3AEB}] => C:\Users\David\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{3A5FC3F6-9260-42E7-B4CD-D675225CADC4}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{43A95297-A5FC-4357-A2D0-73B18799EB95}] => C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6D084383-FF7D-4DCE-980D-D80089152634}] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe
FirewallRules: [{7BB8481C-C044-47EA-B64A-4CA481372C38}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Restore Points =========================

19-01-2016 19:29:34 Supprimé Assassin's Creed II
27-01-2016 14:38:10 Windows Update
13-01-2017 11:12:25 Windows Update

==================== Faulty Device Manager Devices =============

Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: ehdrv
Description: ehdrv
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ehdrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Ethernet Controller
Description: Ethernet Controller
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (02/08/2017 07:53:05 PM) (Source: MsiInstaller) (EventID: 11719) (User: Snow-PC)
Description: Product: TOSHIBA Value Added Package -- Error 1719.Windows Installer service could not be accessed. Contact your support personnel to verify that it is properly registered and enabled.

Error: (02/08/2017 07:52:54 PM) (Source: MsiInstaller) (EventID: 11719) (User: Snow-PC)
Description: Produit : TOSHIBA Hardware Setup -- Erreur 1719. Impossible d’accéder au service Windows Installer. Ceci peut se produire si le programme d’installation de Windows n’est pas bien installé. Contactez votre support technique pour assistance.

Error: (02/08/2017 07:17:09 PM) (Source: System Restore) (EventID: 8193) (User: )
Description: Failed to create restore point (Process = C:\Users\David\AppData\Local\Temp\{CB229498-4845-4769-B32A-2FCF51BB9EF0}\setup.exe -removeonly -media_path:"c:\program files (x86)\installshield installation information\{3108c217-be83-42e4-ae9e-a56a2a92e549}\" -tempdisk1folder:"C:\Users\David\AppData\Local\Temp\{CB229498-4845-4769-B32A-2FCF51BB9EF0}\"; Description = Supprimé Atheros Communications Inc.(R) AR81Family Gigabit/Fast Hí™&; Error = 0x8007043c).

Error: (02/05/2017 11:17:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: ShovelKnight.exe, version: 0.0.0.0, time stamp: 0x53a90406
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19045, time stamp: 0x56258f05
Exception code: 0x80000003
Fault offset: 0x0001322c
Faulting process id: 0x754
Faulting application start time: 0x01d27ffd98b63a2f
Faulting application path: C:\GOG Games\Shovel Knight\ShovelKnight.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: e359516f-ebf0-11e6-9333-e89a8ff73b80

Error: (01/19/2017 09:51:47 AM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF).

Error: (01/13/2017 11:11:42 AM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF).

Error: (01/27/2016 02:36:11 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF).

Error: (01/19/2016 07:28:42 PM) (Source: MsiInstaller) (EventID: 1024) (User: Snow-PC)
Description: Product: Adobe Acrobat Reader DC - Français - Update '{AC76BA86-7AD7-0000-2550-AC0F0A4E5800}' could not be installed. Error code 1625. Windows Installer can create logs to help troubleshoot issues with installing software packages. Use the following link for instructions on turning on logging support: http://go.microsoft.com/fwlink/?LinkId=23127

Error: (01/19/2016 07:22:53 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF).

Error: (01/19/2016 07:19:44 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: The backup was not successful. The error is: Windows Backup had to skip all the drives included in backup. Make sure that the drives are plugged in and working correctly. (0x810000FF).


System errors:
=============
Error: (02/09/2017 08:18:33 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolume2.

Error: (02/09/2017 08:17:26 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolume2.

Error: (02/09/2017 07:54:54 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The HomeGroup Provider service depends on the Function Discovery Provider Host service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (02/09/2017 07:54:54 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (02/09/2017 07:54:54 AM) (Source: DCOM) (EventID: 10005) (User: )
Description: DCOM got error "1084" attempting to start the service WSearch with arguments "" in order to run the server:
{7D096C5F-AC08-4F1F-BEB7-5C22C517CE39}

Error: (02/09/2017 07:54:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (02/09/2017 07:54:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (02/09/2017 07:54:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (02/09/2017 07:54:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.

Error: (02/09/2017 07:54:52 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
The dependency service or group failed to start.


==================== Memory info ===========================

Processor: Intel(R) Core(TM) i5-2430M CPU @ 2.40GHz
Percentage of memory in use: 38%
Total physical RAM: 4077.86 MB
Available physical RAM: 2511.33 MB
Total Virtual: 8153.93 MB
Available Virtual: 6655.37 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:596.07 GB) (Free:336.43 GB) NTFS
Drive d: (MyDisc) (CDROM) (Total:1.4 GB) (Free:0 GB) CDFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 596.2 GB) (Disk ID: 3F938C99)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=596.1 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================