Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 24-09-2017
Exécuté par juju (24-09-2017 21:55:46)
Exécuté depuis C:\Users\juju\Desktop
Windows 10 Pro Version 1703 (X64) (2017-04-14 13:10:07)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-354535326-3952727230-2364937556-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-354535326-3952727230-2364937556-503 - Limited - Disabled)
Invité (S-1-5-21-354535326-3952727230-2364937556-501 - Limited - Disabled)
juju (S-1-5-21-354535326-3952727230-2364937556-1001 - Administrator - Enabled) => C:\Users\juju

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: ESET Internet Security (Enabled - Up to date) {EC1D6F37-E411-475A-DF50-12FF7FE4AC70}
AS: ESET Internet Security (Enabled - Up to date) {577C8ED3-C22B-48D4-E5E0-298D0463E6CD}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Pare-feu personnel d'ESET (Enabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

7-Zip 16.04 (x64) (HKLM\...\7-Zip) (Version: 16.04 - Igor Pavlov)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 23.0.0.257 - Adobe Systems Incorporated)
Adobe Flash Player 26 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 26.0.0.151 - Adobe Systems Incorporated)
Agarest: Generations of War (HKLM\...\Steam App 237890) (Version: - Idea Factory)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.69 - NVIDIA Corporation) Hidden
Application Blizzard (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version: - Studio Wildcard)
ARK: Survival Of The Fittest (HKLM\...\Steam App 407530) (Version: - Studio Wildcard)
ASUS PCE-AC68 WLAN Card Utilities/Driver (HKLM-x32\...\{39BD9681-D3B1-435C-A0C1-F87C68513401}) (Version: 2.0.8.8 - ASUS)
Black Desert Online (HKLM-x32\...\{C1F96C92-7B8C-485F-A9CD-37A0708A2A60}) (Version: 1.0.0.6 - Kakao Games Europe B.V.)
BlasterX Acoustic Engine Pro (HKLM-x32\...\{18B69B8B-F2BF-45B6-844A-673E90436F9F}) (Version: 1.01.15 - Creative Technology Limited)
BlasterX Acoustic Engine Pro Extras (HKLM-x32\...\{181E01EF-AF4A-458D-A28C-2CB32CFF9A7F}) (Version: 1.0 - Creative Technology Limited)
BlazBlue: Chronophantasma Extend (HKLM\...\Steam App 388750) (Version: - Arc System Works)
BlueStacks 3 (HKLM-x32\...\BlueStacks) (Version: 3.7.44.1625 - BlueStack Systems, Inc.)
Corsair Utility Engine (HKLM-x32\...\{46A3EEB3-8F6F-4BC4-9A53-CDE33D089D08}) (Version: 1.16.42 - Corsair)
Creative ASIO (USB) (HKLM-x32\...\Creative_ASIO(USB)) (Version: 1.02 - Creative Technology Limited)
Democracy 3 (HKLM\...\Steam App 245470) (Version: - Positech Games)
Deus Ex: Human Revolution (HKLM\...\Steam App 28050) (Version: - Eidos Montreal)
Discord (HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Drakkar Valkyrie version 1.0 (HKLM-x32\...\{4C68C5CE-3BE7-495B-A8B5-755CB56E17A4}_is1) (Version: 1.0 - VALKYRIE)
ESET Internet Security (HKLM\...\{C65B8D3D-CCA5-469C-A7D4-FC08A6BE5EA3}) (Version: 10.1.219.1 - ESET, spol. s r.o.)
Euro Truck Simulator 2 (HKLM\...\Steam App 227300) (Version: - SCS Software)
Fallout 3 - Game of the Year Edition (HKLM\...\Steam App 22370) (Version: - Bethesda Game Studios)
Fallout 4 (HKLM\...\Steam App 377160) (Version: - Bethesda Game Studios)
FINAL FANTASY VII (HKLM\...\Steam App 39140) (Version: - Square Enix)
FINAL FANTASY X/X-2 HD Remaster (HKLM\...\Steam App 359870) (Version: - SQUARE ENIX)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation)
Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden
Glary Utilities 5.84 (HKLM-x32\...\Glary Utilities 5) (Version: 5.84.0.105 - Glarysoft Ltd)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment)
HITMAN™ (HKLM\...\Steam App 236870) (Version: - Io-Interactive)
Hyper Light Drifter (HKLM\...\Steam App 257850) (Version: - Heart Machine)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.10.0.1016 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{BF46D11E-638D-4254-A7BD-E9B355C4ECEA}) (Version: 5.0.10.2850 - Intel Corporation)
Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 16.0.8326.2107 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Visual Basic Power Packs 3.0 (HKLM-x32\...\{7B4D193B-D76D-308B-8B12-5D9BB1CBCE6C}) (Version: 9.0.30214 - Microsoft)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{02A39130-2CF3-30CA-8623-30F6071A4221}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation)
Mozilla Firefox 54.0.1 (x86 fr) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 fr)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 54.0.1.6388 - Mozilla)
Neo-Midgar - Retraduction Final Fantasy VII (HKLM-x32\...\Neo-Midgar-8796) (Version: 1.0 - FF7.fr)
Nox APP Player (HKLM-x32\...\Nox) (Version: 5.0.0.0 - Duodian Technology Co. Ltd.)
NVIDIA Logiciel système PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 385.69 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Pilote graphique 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.69 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-040C-1000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
Opera Stable 47.0.2631.71 (HKLM-x32\...\Opera 47.0.2631.71) (Version: 47.0.2631.71 - Opera Software)
Oracle VM VirtualBox 5.1.26 (HKLM\...\{11A88BD5-F059-4743-81D9-1432AC9C3D4E}) (Version: 5.1.26 - Oracle Corporation)
Panneau de configuration NVIDIA 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 385.69 - NVIDIA Corporation) Hidden
Pro Evolution Soccer 2016 (HKLM\...\Steam App 375960) (Version: - Konami Digital Entertainment)
Pro Evolution Soccer 2017 (HKLM\...\Steam App 456610) (Version: - Konami Digital Entertainment)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
VMware Player (HKLM\...\{E5DF3245-80CF-48E8-AE2F-22D4D2DDD805}) (Version: 12.5.7 - VMware, Inc.)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - LunarG, Inc.) Hidden
WAKFU (HKLM\...\Steam App 215080) (Version: - Ankama Studio)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Zemana AntiMalware (HKLM-x32\...\{8F0CD7D1-42F3-4195-95CD-833578D45057}_is1) (Version: 2.74.0.150 - Zemana Ltd.)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-354535326-3952727230-2364937556-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-354535326-3952727230-2364937556-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-354535326-3952727230-2364937556-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-354535326-3952727230-2364937556-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-354535326-3952727230-2364937556-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-354535326-3952727230-2364937556-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
ContextMenuHandlers1: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-07-02] ()
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-06-13] (ESET)
ContextMenuHandlers1: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers2: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-06-13] (ESET)
ContextMenuHandlers2: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Player\vmdkShellExt.dll [2017-06-19] (VMware, Inc.)
ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Player\x64\vmdkShellExt64.dll [2017-06-19] (VMware, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-09-16] (NVIDIA Corporation)
ContextMenuHandlers6: [2.0 Zemana AntiMalware] -> {6ABB1C11-E261-4CEA-BBB5-3836225689DD} => C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll [2017-07-02] ()
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [ESET Smart Security - Context Menu Shell Extension] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET Security\shellExt.dll [2017-06-13] (ESET)
ContextMenuHandlers6: [Glary Utilities] -> {B3C418F8-922B-4faf-915E-59BC14448CF7} => C:\Program Files (x86)\Glary Utilities 5\x64\ContextHandler.dll [2016-06-23] (Glarysoft Ltd)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0CE522B5-70E0-4FB7-9D57-FD7144B8C585} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {2F91C5BD-8841-4071-B425-C663556B5F75} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
Task: {3645231E-E99F-4C08-A977-E59CB8194B34} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe
Task: {39163C64-F373-4970-872B-33331997D578} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {391D830B-476B-4DED-966E-B082E7DCA4B0} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_26_0_0_151_pepper.exe [2017-08-11] (Adobe Systems Incorporated)
Task: {412AD5F0-70AC-4825-8C98-B233DEA987A6} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe
Task: {4BB829C5-FE55-4F06-BA57-319EEE57F4D9} - System32\Tasks\GU5SkipUAC => C:\Program Files (x86)\Glary Utilities 5\Integrator.exe [2017-09-15] (Glarysoft Ltd)
Task: {5543312F-7CC5-4B64-90AF-E2337CD2DEEE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()
Task: {58BEA230-92B8-4E48-9C27-9EACE991E2B5} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19] (NVIDIA Corporation)
Task: {642C86D8-0CC4-432E-8090-405E33E10195} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-09-19] (NVIDIA Corporation)
Task: {8E251EC8-6E9A-4DE5-8A71-777C3E0BFE5C} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
Task: {A429F65B-A8CC-40AA-A9A6-B0E0D85A8503} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {A5E2AEA2-FE49-41BB-A4EF-1822713ED816} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-19] ()
Task: {B29C8DD9-0800-48B0-A585-9EBA59E61D93} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {B3411DDB-C228-49CD-9DCE-331EEFB15E31} - System32\Tasks\Opera scheduled Autoupdate 1495224290 => C:\Program Files\Opera\launcher.exe [2017-08-25] (Opera Software)
Task: {B6D77AEE-707C-44A7-BA08-25C13A6A2C78} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-09-19] (NVIDIA Corporation)
Task: {CCD1541B-681F-4272-9D22-2DF23006A449} - System32\Tasks\CAM => C:\Program Files (x86)\NZXT\CAM\CAM_V3.exe
Task: {D0D5629E-D2D4-4E6A-9709-C27E150E62DD} - System32\Tasks\PCEAC68WLANMGR => C:\Program Files (x86)\ASUS\PCE-AC68 WLAN Card Utilities\WlanMgr.exe [2014-06-06] (ASUS)
Task: {D77A1732-7EBA-4B74-8A38-E9D17F4CABAE} - System32\Tasks\BDAntiCryptoWallTask => C:\Program Files\Bitdefender\Tools\BDAntiRansomware\BDAntiRansomware.exe
Task: {DD5A3E36-6E9D-4B5F-9BD2-854A653EB903} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-09-19] (Microsoft Corporation)
Task: {E7491D92-ECC9-4A2F-A831-C86378EE0B77} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2017-09-19] (Microsoft Corporation)
Task: {ECCF1E7B-A8E4-456D-8DF3-11AA919BBCCE} - System32\Tasks\GlaryInitialize 5 => C:\Program Files (x86)\Glary Utilities 5\Initialize.exe [2017-09-15] (Glarysoft Ltd)
Task: {F73CB67D-33D7-4B5E-9DE6-671F8F95EE04} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-09-19] (NVIDIA Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Raccourcis & WMI ========================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)


==================== Modules chargés (Avec liste blanche) ==============

2017-08-26 16:44 - 2014-10-20 14:19 - 001181544 _____ () C:\Program Files (x86)\Drakkar Valkyrie\ETGMSrv.exe
2017-06-04 21:11 - 2017-09-19 09:23 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2016-11-04 21:17 - 2017-07-02 17:33 - 000155504 _____ () C:\Program Files (x86)\Zemana AntiMalware\ZAMShellExt64.dll
2017-03-18 22:59 - 2017-03-20 07:12 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-08-23 10:52 - 2017-08-23 10:52 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-08-23 10:52 - 2017-08-23 10:52 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-08-23 10:52 - 2017-08-23 10:52 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-08-23 10:52 - 2017-08-23 10:52 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll
2016-07-14 12:25 - 2017-08-19 19:04 - 000173848 _____ () C:\Users\juju\AppData\Local\TeamSpeak 3 Client\quazip.dll
2017-04-29 22:30 - 2017-07-25 22:15 - 000019736 _____ () C:\Users\juju\AppData\Local\TeamSpeak 3 Client\libEGL.DLL
2017-04-29 22:30 - 2017-07-25 22:15 - 001980696 _____ () C:\Users\juju\AppData\Local\TeamSpeak 3 Client\libGLESv2.dll
2016-07-14 12:25 - 2017-08-19 19:04 - 000124696 _____ () C:\Users\juju\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2016-07-14 12:25 - 2017-08-19 19:04 - 000149784 _____ () C:\Users\juju\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2017-04-29 22:31 - 2017-07-25 22:16 - 000345880 _____ () C:\Users\juju\AppData\Roaming\TS3Client\plugins\clientquery_plugin_win64.dll
2017-04-29 22:31 - 2017-07-25 22:14 - 000157696 _____ () C:\Users\juju\AppData\Roaming\TS3Client\plugins\gamepad_joystick_win64.dll
2016-03-23 11:04 - 2016-03-23 11:04 - 000091136 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\LuaQtWrapperLibrary.dll
2016-03-23 11:02 - 2016-03-23 11:02 - 000224256 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\quazip.dll
2016-03-23 11:02 - 2016-03-23 11:02 - 000200704 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\lua52.dll
2017-06-04 21:11 - 2017-09-19 09:23 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-09-15 09:58 - 2017-09-15 09:58 - 000087032 _____ () C:\Program Files (x86)\Glary Utilities 5\zlib1.dll
2016-10-20 00:01 - 2017-08-04 23:19 - 000678176 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2016-10-20 00:01 - 2016-09-01 03:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2016-10-20 00:01 - 2017-09-07 06:51 - 002505504 _____ () C:\Program Files (x86)\Steam\video.dll
2016-10-20 00:01 - 2016-01-27 09:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2016-10-20 00:01 - 2016-01-27 09:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2016-10-20 00:01 - 2016-01-27 09:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2016-10-20 00:01 - 2016-01-27 09:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2016-10-20 00:01 - 2016-01-27 09:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2016-10-20 00:01 - 2016-09-01 03:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2016-10-20 00:01 - 2016-09-01 03:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2016-10-20 00:01 - 2017-09-07 06:51 - 000885024 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-10-20 00:01 - 2016-07-05 00:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-06-08 22:44 - 2017-05-17 03:54 - 000678176 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2016-12-13 00:32 - 2017-07-18 00:50 - 073115424 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2016-10-20 00:01 - 2015-09-25 01:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)


==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2016-11-03 22:24 - 2017-09-10 18:27 - 000000830 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-354535326-3952727230-2364937556-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 80.10.246.136 - 81.253.149.6
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Prompt)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2
MSCONFIG\Services: Razer Game Scanner Service => 2
MSCONFIG\Services: SystemUsageReportSvc_WILLAMETTE => 2
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "IAStorIcon"
HKLM\...\StartupApproved\Run: => "ISCT Tray"
HKLM\...\StartupApproved\Run: => "Launch LCore"
HKLM\...\StartupApproved\Run: => "ZAM"
HKLM\...\StartupApproved\Run: => "ShadowPlay"
HKLM\...\StartupApproved\Run32: => "Razer Synapse"
HKLM\...\StartupApproved\Run32: => "IAStorIcon"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "vmware-tray.exe"
HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\StartupApproved\Run: => "BlueStacks Agent"
HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\StartupApproved\Run: => "TGP"
HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\StartupApproved\Run: => "GUDelayStartup"
HKU\S-1-5-21-354535326-3952727230-2364937556-1001\...\StartupApproved\Run: => "Discord"

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [{1524B12F-16E7-4913-855B-0650E47F81D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pro Evolution Soccer 2017\PES2017.exe
FirewallRules: [{382F30B0-44A0-43C3-A9D2-D3290B3811B8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pro Evolution Soccer 2017\PES2017.exe
FirewallRules: [UDP Query User{9AE6FB2F-A17C-4827-9779-8A9A6BF259BD}I:\citra\citra-qt.exe] => (Allow) I:\citra\citra-qt.exe
FirewallRules: [TCP Query User{F263E046-D5B4-4232-BDB1-8F7B2A10C036}I:\citra\citra-qt.exe] => (Allow) I:\citra\citra-qt.exe
FirewallRules: [{1C08CB48-D4E5-4D8C-9718-C53E1609BA3F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{CAEC1781-5630-40DA-9385-1C657E40A43B}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{B71B1B45-E0B8-4766-BC99-9D6E655B7283}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{0859BA97-0954-4A9D-A7EF-92A815568313}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{4938E99E-E9B9-4743-A716-D60E4C37C2F0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{32BE9D68-B0A2-44D2-B463-3CBAC2E31D09}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6F49D5C7-74B4-4718-9BEF-E76A220EE6A5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{D430E0FE-83B9-435E-92CC-4B2E5DE87308}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{58295A6E-CE63-4658-BE36-1634AABCC083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{07E0192A-B26B-43E2-B386-62A7FA7DDC30}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{F65E25FE-3200-47F5-8AB1-7AE6789E5899}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{7AD48481-2634-47B8-9DBC-C3DCF2B0BC4D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{CB3F1ACB-892D-40EC-BCDE-F75925F30428}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe
FirewallRules: [{896D67B9-6513-4BE8-BABF-1FBC1E8F7CB7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe
FirewallRules: [{88317658-B02C-4F22-8346-F005DA2BA363}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pro Evolution Soccer 2016\PES2016.exe
FirewallRules: [{0F79F713-C040-4FC0-A0E3-C100A3D068BE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Pro Evolution Soccer 2016\PES2016.exe
FirewallRules: [{98F03CFF-7BA3-4384-979D-124FF4DECE55}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{A4362BA1-BAEF-4ED2-94E4-603DE390F631}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Democracy 3\Democracy3.exe
FirewallRules: [{5987F883-91B6-468F-9545-F60A9AA9A57D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HyperLightDrifter\HyperLightDrifter.exe
FirewallRules: [{1384E317-A7D5-4191-B0B0-3569811F29B9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\HyperLightDrifter\HyperLightDrifter.exe
FirewallRules: [{FEB2EB3A-E26C-452D-BF64-4C615CBEEC6B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY FFX&FFX-2 HD Remaster\FFX&X-2_LAUNCHER.exe
FirewallRules: [{490587D8-419E-4186-917A-EE825B0DC9EC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY FFX&FFX-2 HD Remaster\FFX&X-2_LAUNCHER.exe
FirewallRules: [{62C40B94-C9C5-43CD-A7F8-88A9BDB04F67}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlazBlue Chronophantasma Extend\BBCPEX.exe
FirewallRules: [{59E6CE31-F74E-46E5-9A51-13CF91A491EE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlazBlue Chronophantasma Extend\BBCPEX.exe
FirewallRules: [{A2B0AFB1-2455-437C-835F-62B42DF79D6A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{C19FDB57-F87A-49ED-9613-7035657AAFE2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Agarest Generations of War\Agarest.exe
FirewallRules: [{F11FA64C-D99D-42F0-8FC7-007506EA0C16}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D5A4E8FB-C7BA-443E-B418-BACA098DCD70}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{E428ADD6-1A65-4010-A453-A9807D7C638D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{78FCE249-7999-4838-B596-A08FBA740CA0}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{C3264673-51FE-452F-A288-4CB5ACCEFAE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{08EBE2BE-2642-4582-8284-82F0912EA3FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{B5BAFCCE-D0C0-499A-9EC2-66CB75D2673D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{97BA55FA-85D9-4440-A2C8-8A7DF9DC59E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{DD2B118C-14D2-419B-9417-FE9850106420}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{315FDB72-7E85-4CD6-BECB-7AA8D320D19C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{6EE613A6-B113-4378-91A9-4DC8BCB9BF48}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{837CCA4D-B488-4EA6-A249-DF41853AE444}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{4A163153-F4A9-45E4-B8BB-C09BF45A0726}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{1D071FBB-8E6A-40D0-BE55-29B262A8DEB7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5F63BCC4-38A9-450C-AD35-3CF55CA707FF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{62E01AD6-E101-4507-A20F-AD66CB4ABCD7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Hitman™\Launcher.exe
FirewallRules: [{5E715477-5AB6-4E0D-98C2-F1BBD9318CE3}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{42150A56-5C79-4EBF-9400-382D61E23CAE}] => (Allow) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
FirewallRules: [{7B69F2C5-F9FC-4F09-9959-E0D7763F4752}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe
FirewallRules: [{DBD577B3-EA45-4B96-BEED-4C40A2FB00A0}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe
FirewallRules: [{17B67612-71D6-40BD-8F59-E02DF6D5E1EA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{5E3A1344-059E-4604-8706-003531A14C0E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{40A678D9-9F61-4986-97BD-029A48D03DE3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{AAFF5B7C-2DD7-4551-855F-C4EEA6A72570}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{3AA4126E-5466-4483-B321-534619B92A73}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{7D5D61BD-4B4A-4B89-AA75-CC1A2B40543D}] => (Allow) C:\Program Files\Opera\47.0.2631.55\opera.exe
FirewallRules: [{EAF75358-DE56-4649-8CA5-896F5DAD9555}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{CF64D853-9A47-44D7-9BF5-43E40C21BE0C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{C0772A68-B8E6-4973-8CE4-C9C643724BA0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{56BB7DA7-393B-41AE-BE92-428CF2BA0A32}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{8B649115-51AD-411C-B004-13775DDDE2E8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{21775F51-A310-456C-A9F3-86479D1E0269}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{F07B5E85-E088-425F-9BEB-814D96C00763}] => (Allow) C:\Program Files\Opera\47.0.2631.71\opera.exe
FirewallRules: [{4DA64E38-A99C-4092-A747-65F2DB73FB7E}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe
FirewallRules: [{49D41EEC-F68F-4F04-8F4F-0A4A22613241}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{8F20E9F4-C6CA-4EA6-B059-EF83A04E8E5E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{CF50A67B-7786-4070-BD80-91AA7D475932}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{D8BA4D4E-FFB9-487C-8FC1-C6C013249BAF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{29AD350C-447F-44B7-8496-27D7D12A2E2C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{3B9F2F05-836E-46D2-A4F9-E18434D07A93}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ARK SOTF\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{7742A7C4-3FFB-48F7-9107-DEFF424FEB6A}] => (Allow) LPort=9143
FirewallRules: [{D0B97DE9-A9D2-4B20-8859-AA2BCFB52AC7}] => (Allow) LPort=2333
FirewallRules: [{1C827788-713B-4152-8E97-1705F3F49219}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{0151DC7B-A473-4E56-9D43-740492F8B334}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{6700C8C5-F6E1-4D6B-9751-874D8A0BBA21}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{ADA4BC8A-D4B7-40C4-ABC6-98BD7875008F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{AE7F3CCB-7129-459D-82F8-7C585017DA38}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe

==================== Points de restauration =========================

22-09-2017 21:07:57 Windows Update

==================== Éléments en erreur du Gestionnaire de périphériques =============

Name: VirtualBox Host-Only Ethernet Adapter
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VirtualBox Host-Only Ethernet Adapter #2
Description: VirtualBox Host-Only Ethernet Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Oracle Corporation
Service: VBoxNetAdp
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet1
Description: VMware Virtual Ethernet Adapter for VMnet1
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: VMware Virtual Ethernet Adapter for VMnet8
Description: VMware Virtual Ethernet Adapter for VMnet8
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: VMware, Inc.
Service: VMnetAdapter
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.

Name: Killer E2200 Gigabit Ethernet Controller
Description: Contrôleur Killer E2200 Gigabit Ethernet
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Rivet Networks
Service: KillerEth
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (09/24/2017 07:02:31 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.


Opération :
Opération asynchrone en cours d’exécution

Contexte :
État actuel: DoSnapshotSet

Error: (09/24/2017 06:01:33 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.


Opération :
Opération asynchrone en cours d’exécution

Contexte :
État actuel: DoSnapshotSet

Error: (09/24/2017 05:27:41 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Setup.exe version 1.5.61.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.

ID de processus : 67d0

Heure de début : 01d335493b2f3d6d

Heure de fin : 4294967295

Chemin d'accès de l'application : C:\Users\juju\AppData\Local\Temp\SAMSUNG\USB Drivers\Setup.exe

ID de rapport : 89df9fd3-b839-4178-9028-7f913fb26a83

Nom complet du package défaillant :

ID de l'application relative au package défaillant :

Error: (09/23/2017 10:37:26 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme Integrator.exe version 5.84.0.105 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.

ID de processus : 3734

Heure de début : 01d3344704fc3ac5

Heure de fin : 319

Chemin d'accès de l'application : C:\Program Files (x86)\Glary Utilities 5\Integrator.exe

ID de rapport : 8c1db42b-3fd0-4299-a10e-364bdd24f656

Nom complet du package défaillant :

ID de l'application relative au package défaillant :

Error: (09/22/2017 08:55:29 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.


Opération :
Opération asynchrone en cours d’exécution

Contexte :
État actuel: DoSnapshotSet

Error: (09/22/2017 08:54:30 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005, Accès refusé.
.
Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.


Opération :
Données du rédacteur en cours de collecte

Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID d’instance du rédacteur: {5bfbb0ba-4479-4bba-a81a-0c30ce91a70b}

Error: (09/21/2017 11:27:14 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Cemu.exe, version : 1.9.1.0, horodatage : 0x599ce4bd
Nom du module défaillant : Cemu.exe, version : 1.9.1.0, horodatage : 0x599ce4bd
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000000dee5a
ID du processus défaillant : 0x549c
Heure de début de l’application défaillante : 0x01d33320599a262d
Chemin d’accès de l’application défaillante : C:\Users\juju\Downloads\cemu_1.9.1\Cemu.exe
Chemin d’accès du module défaillant: C:\Users\juju\Downloads\cemu_1.9.1\Cemu.exe
ID de rapport : 30aecfa6-c1f9-4a17-864d-97d6c4644764
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (09/21/2017 09:51:19 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Cemu.exe, version : 1.9.1.0, horodatage : 0x599ce4bd
Nom du module défaillant : Cemu.exe, version : 1.9.1.0, horodatage : 0x599ce4bd
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000000dee5a
ID du processus défaillant : 0x2964
Heure de début de l’application défaillante : 0x01d33312f6a588ad
Chemin d’accès de l’application défaillante : C:\Users\juju\Downloads\cemu_1.9.1\Cemu.exe
Chemin d’accès du module défaillant: C:\Users\juju\Downloads\cemu_1.9.1\Cemu.exe
ID de rapport : 124580da-899a-4da2-aad0-13be5842f9b1
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (09/20/2017 12:51:47 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme MultiPlayerManager.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.

ID de processus : 7ea4

Heure de début : 01d3316fb683f4b5

Heure de fin : 4294967295

Chemin d'accès de l'application : C:\Program Files (x86)\Nox\bin\MultiPlayerManager.exe

ID de rapport : 8694d7fe-5590-42b4-8655-4d89e93462a1

Nom complet du package défaillant :

ID de l'application relative au package défaillant :

Error: (09/18/2017 11:17:57 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante mame64.exe, version : 0.189.0.0, horodatage : 0x001b30c0
Nom du module défaillant : dbghelp.dll_unloaded, version : 10.0.15063.250, horodatage : 0xed6376f8
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000000e49f0
ID du processus défaillant : 0xb6c8
Heure de début de l’application défaillante : 0x01d330c3996828b9
Chemin d’accès de l’application défaillante : C:\Users\juju\Downloads\MAME\mame64.exe
Chemin d’accès du module défaillant: dbghelp.dll
ID de rapport : 969f6fd8-f1e1-4536-93c9-273b78645918
Nom complet du package défaillant :
ID de l’application relative au package défaillant :


Erreurs système:
=============
Error: (09/24/2017 09:55:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:35 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.

Error: (09/24/2017 09:55:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service BCM42RLY n’a pas pu démarrer en raison de l’erreur :
Le fichier spécifié est introuvable.


CodeIntegrity:
===================================
Date: 2017-09-22 21:38:02.135
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-22 21:38:02.021
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-22 21:38:01.975
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-20 20:18:38.729
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-20 20:18:38.618
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-20 20:18:38.560
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-18 13:10:22.565
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-18 13:10:22.495
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-18 13:10:22.438
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.

Date: 2017-09-17 22:03:59.227
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\ESET\ESET Security\eplgEdge.dll that did not meet the Store signing level requirements.


==================== Infos Mémoire ===========================

Processeur: Intel(R) Core(TM) i5-4670K CPU @ 3.40GHz
Pourcentage de mémoire utilisée: 33%
Mémoire physique - RAM - totale: 16328.24 MB
Mémoire physique - RAM - disponible: 10875.95 MB
Mémoire virtuelle totale: 17352.24 MB
Mémoire virtuelle disponible: 11818.58 MB

==================== Lecteurs ================================

Drive c: () (Fixed) (Total:1862.46 GB) (Free:1035.59 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (Size: 1863 GB) (Disk ID: 0DE6F4AD)

Partition: GPT.

==================== Fin de Addition.txt ============================