Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-10-2017
Exécuté par fab (12-10-2017 18:06:32)
Exécuté depuis C:\Users\fab\Desktop
Windows 10 Home Version 1703 170317-1834 (X64) (2017-07-17 17:02:38)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-2421246952-3946286028-1138560727-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2421246952-3946286028-1138560727-503 - Limited - Disabled)
fab (S-1-5-21-2421246952-3946286028-1138560727-1000 - Administrator - Enabled) => C:\Users\fab
HomeGroupUser$ (S-1-5-21-2421246952-3946286028-1138560727-1007 - Limited - Enabled)
Invité (S-1-5-21-2421246952-3946286028-1138560727-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
ACDSee Ultimate 10 (64-bits) (HKLM\...\{F1BD782B-A54A-4BC1-9A4E-CF64CFF019BD}) (Version: 10.0.0.846 - ACD Systems International Inc.)
ActiveState Komodo Edit 10.2.3 (HKLM-x32\...\{80375DA2-CFB8-4DC3-9E01-9AC82443C88B}) (Version: 10.2.3 - ActiveState Software Inc.)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 17.012.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Dreamweaver CS6 (HKLM-x32\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.159 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Affinity Photo Trial (HKLM\...\{8FD1B683-89C5-4E7D-838A-9AADE52734F5}) (Version: 1.5.1.54 - Serif (Europe) Ltd)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 376.19 - NVIDIA Corporation) Hidden
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.38.1 - Asmedia Technology)
Bullzip MS Access to MySQL 5.1.0.242 (HKLM-x32\...\Bullzip MS Access to MySQL_is1) (Version: - Bullzip)
Canon SELPHY CP1200 (HKLM\...\Canon SELPHY CP1200) (Version: 1.1.0.1 - Canon INC.)
Convert VOB to AVI (HKLM-x32\...\{5FE0C13A-63F1-4394-88A8-2D8722A75FE0}_is1) (Version: - www.convertvobtoavi.com)
Corel PaintShop Pro X7 (HKLM-x32\...\_{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.4.0.11 - Corel Corporation)
Corel Update Manager (HKLM-x32\...\{BB18D072-77A2-4E92-8E6D-A1D072BA0DD3}) (Version: 2.4.244 - Corel corporation) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.5.1.0230 - Disc Soft Ltd)
GlassFish Server Open Source Edition 4.1.1 (HKLM\...\nbi-glassfish-mod-4.1.1.0.1) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
HitFilm Movie Studio Plugins (HKLM\...\{C076B8B9-235E-49F7-B3B2-CCCFC27CCE5F}) (Version: 1.0.0.0 - FXhome)
HP DeskJet 3700 series Aide (HKLM-x32\...\{CDCD1F51-D1D8-4B3B-B1EF-9E5C370D0C7B}) (Version: 40.0.0 - HP)
HP Dropbox Plugin (HKLM-x32\...\{6401399A-F5DA-4C04-87AA-E8107DF00751}) (Version: 36.0.41.58587 - HP)
HP Google Drive Plugin (HKLM-x32\...\{63BCC696-0FB4-4E9C-8144-2DA4F248FC17}) (Version: 36.0.41.58587 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
ICA (HKLM-x32\...\{176F50D6-6857-49CE-B731-65F757EE3F0D}) (Version: 17.0.0.199 - Corel Corporation) Hidden
Intel® Hardware Accelerated Execution Manager (HKLM\...\{27276DC1-66AA-4B16-918D-5AB1EEDF09C6}) (Version: 6.0.5 - Intel Corporation)
IPM_PSP_COM64 (HKLM\...\{17704FA2-B1D2-4D5C-A23D-BDA0D2BC9CC7}) (Version: 17.0.0.199 - Corel Corporation) Hidden
Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Java SE Development Kit 8 Update 121 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180121}) (Version: 8.0.1210.13 - Oracle Corporation)
K-Lite Codec Pack 12.7.0 Full (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.7.0 - KLCP)
KMSpico (HKLM\...\{8B29D47F-92E2-4C20-9EE0-F710991F5D7C}_is1) (Version: - )
Logiciel de base du périphérique HP DeskJet 3700 series (HKLM\...\{753849E2-17C3-4092-A64C-FEB1F25A11BE}) (Version: 40.2.1085.16258 - HP Inc.)
Logiciel pour périphérique à chipset Intel® (HKLM-x32\...\{bb0592a7-5772-4736-9d55-2402740085db}) (Version: 10.1.1.38 - Intel(R) Corporation) Hidden
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{DD8FF2F3-0D97-4CF3-AF78-FA0E1B242244}) (Version: 2.0.60926.0 - Microsoft Corporation)
Microsoft Money (HKLM-x32\...\Money2005b) (Version: 14 - Microsoft)
Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 16.0.8431.2107 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2421246952-3946286028-1138560727-1000\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft SharePoint Designer 2013 (HKLM\...\Office15.SharePointDesigner) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2017 (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 1.11.33284.727 - Microsoft Corporation)
Mises à jour NVIDIA 2.13.0.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 2.13.0.21 - NVIDIA Corporation) Hidden
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Movie Studio Platinum 13.0 (64-bit) (HKLM\...\{F44ABE80-74D6-11E4-8F5A-F04DA23A5C58}) (Version: 13.0.943 - Sony)
Mozilla Firefox 56.0 (x64 fr) (HKLM\...\Mozilla Firefox 56.0 (x64 fr)) (Version: 56.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0 - Mozilla)
NetBeans IDE 8.2 (HKLM\...\nbi-nb-base-8.2.0.0.201610071157) (Version: 8.2 - NetBeans.org)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 376.54 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.34.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.17 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Pilote graphique 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 376.54 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2107 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2107 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2107 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Panneau de configuration NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden
Pinnacle Studio 18 - Install Manager (HKLM\...\{39B53CC2-EE72-44E6-800D-C61A6465BF1A}) (Version: 18.0.234 - Corel Corporation)
Pinnacle Studio 18 (HKLM\...\{11FB47FB-B341-4FD8-A505-E4C0CC0536C1}) (Version: 18.5.1.827 - Corel Corporation)
PSPPContent (HKLM-x32\...\{17289BF4-5826-447B-A20A-738044D0B3E5}) (Version: 17.0.0.199 - Corel Corporation) Hidden
PSPPHelp (HKLM-x32\...\{1735F0DE-B173-4116-BABC-653A12FB9238}) (Version: 17.0.0.199 - Corel Corporation) Hidden
PSPPro64 (HKLM\...\{17511557-C430-486A-AB5A-87A8134B2613}) (Version: 17.0.0.199 - Corel Corporation) Hidden
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.12.1007.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8004 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.)
Service Pack 1 for Microsoft Office 2013 (KB2850036) 64-Bit Edition (HKLM\...\{90150000-0017-0000-1000-0000000FF1CE}_Office15.SharePointDesigner_{67A083C6-0A9E-48E8-BC90-C1EDA8028ED4}) (Version: - Microsoft)
Setup (HKLM-x32\...\{17088A4E-3CF3-4F12-926D-2A9E8085B8EC}) (Version: 17.0.0.199 - Nom de votre société) Hidden
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Sweet Home 3D version 5.4 (HKLM\...\Sweet Home 3D_is1) (Version: 5.4 - eTeks)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
vs_filehandler_amd64 (HKLM-x32\...\{DDEF2BD0-F728-4D04-A085-B5ACC9ADC311}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{2512A3CE-E1E4-46D5-8B40-28DA3AE2261E}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{384F31FB-B99D-48A7-9D72-E1FEBEC2201A}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{0F2742A7-6A64-46A2-94AE-22F19808BE2F}) (Version: 15.0.26711 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{853FD6F3-0BC9-414A-986B-90EF538DBAA1}) (Version: 15.0.26621 - Microsoft Corporation) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WINDEV Mobile 21 Express (HKU\S-1-5-21-2421246952-3946286028-1138560727-1000\...\WinDevMobile21Express) (Version: - PC SOFT)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
Wondershare Video Converter Ultimate(Build 9.0.2.1) (HKLM-x32\...\Wondershare Video Converter Ultimate_is1) (Version: 9.0.2.1 - Wondershare Software)
XAMPP (HKLM-x32\...\xampp) (Version: 7.1.9-0 - Bitnami)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ContextMenuHandlers1: [PicaViewCtxMenuShlExt] -> {F3CBBA61-EE3F-4D6D-B1C6-B3474E579936} => C:\Program Files\Common Files\ACD Systems\PicaView\ACDSeePV.dll [2015-10-08] (ACD Systems International Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\WINDOWS\SysWOW64\WSCM64.dll [2015-02-27] ()
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation)
ContextMenuHandlers5: [WorkFolders] -> {E61BF828-5E63-4287-BEF1-60B1A4FDE0E3} => -> Pas de fichier
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {180F6061-A8A3-45A1-B2D9-A9886F92B7B1} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {1906050F-341A-4322-9320-D0CB467000C5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {1B68D38C-9492-4AC1-A060-12CE04DA1FEC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-12] (Google Inc.)
Task: {1C4441CD-7A32-456C-AC61-CEC8A856C1FE} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {257284B4-B103-4139-AD21-297D9935A9FC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-12] (Google Inc.)
Task: {2BCCCAB1-7A4F-465E-BA9F-A12709928AEE} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {55FE7A14-DA9A-4EAE-957A-ABE91A5813E1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {6E0A2207-5BE4-4D1F-B178-01299912BDE5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-04] (Microsoft Corporation)
Task: {6E5B67D2-41CA-4548-B674-A66822CF4257} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-29] ()
Task: {8C14681E-B696-4606-8044-9A35A0596F03} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-10-11] (Adobe Systems Incorporated)
Task: {8D448E6A-1A21-478B-A4E7-62A19F21E98D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-11] (Microsoft Corporation)
Task: {985768F9-959D-4410-9620-89D1176AA0BD} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-04] (Microsoft Corporation)
Task: {9EF7592E-7618-4EDB-8B38-E7D3B86B44D8} - System32\Tasks\Microsoft\Windows\Windows Media Sharing\UpdateLibrary => C:\Program Files\Windows Media Player\wmpnscfg.exe
Task: {AA0ECE30-14E9-4FDB-B620-4E4D088BAFF7} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {C3659C6D-B703-47B0-958E-6081DF1D490D} - System32\Tasks\CorelUpdateHelperTaskCore => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2017-09-26] (Corel Corporation)
Task: {C44966D6-9FFF-4F6D-889D-A0D38A4929AB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-10-11] (Microsoft Corporation)
Task: {C4D7A952-9EAA-41AB-8A64-64B0CF3695AE} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-07-19] (Adobe Systems Incorporated)
Task: {CB712075-EEC4-4AE7-A4C8-C6B15C403E37} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_159_pepper.exe [2017-10-11] (Adobe Systems Incorporated)
Task: {CEDAC95A-F48B-4F5F-9959-187B2EEC7CB8} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2016-12-10] ()
Task: {CF9CA1E8-1BDE-48C9-86B4-D35EECAF870D} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe [2015-08-30] (@ByELDI)
Task: {F8B99AF8-EB14-43A7-809D-39F77F4A9956} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {F950F27D-4350-465C-A697-7B9DA8E4DB7E} - System32\Tasks\CorelUpdateHelperTask => C:\Program Files (x86)\Corel\CUH\v2\CUH.exe [2017-09-26] (Corel Corporation)
Task: {FED940EE-6B56-4E00-B1A5-140F31C621B9} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-12-12 16:31 - 2016-11-17 15:44 - 001147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-12 16:31 - 2016-11-17 15:44 - 004489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-12 16:31 - 2016-11-17 15:44 - 000418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2017-10-10 11:18 - 2017-10-04 13:15 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-10-10 11:18 - 2017-10-04 13:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-07-17 18:37 - 2016-12-29 15:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-10-08 16:44 - 2015-02-27 14:38 - 000721263 _____ () C:\WINDOWS\SysWOW64\WSCM64.dll
2017-03-18 22:59 - 2017-03-20 07:11 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-10-10 08:44 - 2017-10-10 08:45 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-10-10 08:44 - 2017-10-10 08:45 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-10-10 08:44 - 2017-10-10 08:45 - 028779520 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-10-10 08:44 - 2017-10-10 08:45 - 002515968 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.4.716.0_x64__kzf8qxf38zg5c\skypert.dll
2017-10-12 17:52 - 2017-09-21 09:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll
2017-10-12 17:52 - 2017-09-21 09:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll
2017-10-11 08:56 - 2017-10-11 08:56 - 031229440 _____ () C:\WINDOWS\system32\Macromed\Flash\pepflashplayer64_27_0_0_159.dll
2016-12-12 16:31 - 2016-11-17 15:44 - 000018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-12-12 16:31 - 2016-11-17 15:44 - 003774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-12-12 16:31 - 2016-11-17 15:44 - 000900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-12-12 16:31 - 2016-11-17 12:20 - 000506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-12-12 16:31 - 2016-11-17 12:20 - 000252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-12-12 16:31 - 2016-11-17 12:20 - 002809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-12-12 16:31 - 2016-11-17 12:20 - 000245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-12-12 16:31 - 2016-11-17 12:20 - 000436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-12-12 16:31 - 2016-11-17 12:20 - 000338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-12-12 16:31 - 2016-11-17 12:20 - 000968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxldtlfudivq`qsp`27hfm [0]
AlternateDataStreams: C:\ProgramData\TEMP:B6AC352B [131]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-12-12 14:38 - 2017-09-19 08:34 - 000001693 _____ C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 activate.adobe.com
127.0.0.1 practivate.adobe.com
127.0.0.1 ereg.adobe.com
127.0.0.1 activate.wip3.adobe.com
127.0.0.1 wip3.adobe.com
127.0.0.1 3dns-3.adobe.com
127.0.0.1 3dns-2.adobe.com
127.0.0.1 adobe-dns.adobe.com
127.0.0.1 adobe-dns-2.adobe.com
127.0.0.1 adobe-dns-3.adobe.com
127.0.0.1 ereg.wip3.adobe.com
127.0.0.1 activate-sea.adobe.com
127.0.0.1 wwis-dubc1-vip60.adobe.com
127.0.0.1 activate-sjc0.adobe.com
127.0.0.1 adobe.activate.com
127.0.0.1 hl2rcv.adobe.com
127.0.0.1 209.34.83.73:443
127.0.0.1 209.34.83.73:43
127.0.0.1 209.34.83.73
127.0.0.1 209.34.83.67:443
127.0.0.1 209.34.83.67:43
127.0.0.1 209.34.83.67
127.0.0.1 ood.opsource.net
127.0.0.1 CRL.VERISIGN.NET
127.0.0.1 199.7.52.190:80
127.0.0.1 199.7.52.190
127.0.0.1 adobeereg.com
127.0.0.1 OCSP.SPO1.VERISIGN.COM
127.0.0.1 199.7.54.72:80
127.0.0.1 199.7.54.72
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-2421246952-3946286028-1138560727-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\fab\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\bull_rider_by_clasixart-d4sg813.jpg
DNS Servers: 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{E81B7C8E-3BE3-474B-B890-52E7F7683D75}] => (Allow) C:\Program Files\HP\HP DeskJet 3700 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{CEBD16CC-E548-4040-A322-0F0DD20A5B88}] => (Allow) LPort=5357
FirewallRules: [{97B93E8A-7B04-471F-A242-ED8BE2097249}] => (Allow) C:\Program Files\HP\HP DeskJet 3700 series\Bin\DeviceSetup.exe
FirewallRules: [{DCF6B070-BD89-4BD1-A82C-40CC33E6EAEC}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS46DC\HPDiagnosticCoreUI.exe
FirewallRules: [{36FDF519-36F1-48CF-A86D-DAD1D4146F17}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS46DC\HPDiagnosticCoreUI.exe
FirewallRules: [{EF2A7A96-F08C-48D8-9CAF-185A25EF091B}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS3D86\HPDiagnosticCoreUI.exe
FirewallRules: [{A40807D1-F7E7-4078-AD55-3796D48D5BB1}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS3D86\HPDiagnosticCoreUI.exe
FirewallRules: [{E4C37711-2403-45D3-918A-C9E5C2ED3D22}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS318B\HPDiagnosticCoreUI.exe
FirewallRules: [{EEC05EE9-93CC-44A4-9A63-DC7A54F1F9B6}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS318B\HPDiagnosticCoreUI.exe
FirewallRules: [{CB12F486-3851-4B27-9B4D-6221C1743B57}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS30DE\HPDiagnosticCoreUI.exe
FirewallRules: [{A5DF6B7D-823B-4C37-99E4-0D9C1E0F8E99}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS30DE\HPDiagnosticCoreUI.exe
FirewallRules: [UDP Query User{A924A145-DEFA-46D1-9ED8-7FBB85376FFF}C:\program files\android\android studio\jre\bin\java.exe] => (Allow) C:\program files\android\android studio\jre\bin\java.exe
FirewallRules: [TCP Query User{227A60A6-38A0-4DEB-978F-C54F625952E1}C:\program files\android\android studio\jre\bin\java.exe] => (Allow) C:\program files\android\android studio\jre\bin\java.exe
FirewallRules: [UDP Query User{546924B4-A007-4522-AB60-7453FE792C2B}C:\program files\java\jdk1.8.0_121\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_121\bin\java.exe
FirewallRules: [TCP Query User{2209EFE7-0506-4412-836F-54A749374583}C:\program files\java\jdk1.8.0_121\bin\java.exe] => (Allow) C:\program files\java\jdk1.8.0_121\bin\java.exe
FirewallRules: [{FF966587-1C54-4F88-BB8F-94A68B405FBC}] => (Allow) C:\Program Files\Pinnacle\Studio 20\programs\UMI.exe
FirewallRules: [{C39F0777-B912-4678-810B-4504A5CAD738}] => (Allow) C:\Program Files\Pinnacle\Studio 20\programs\UMI.exe
FirewallRules: [{4975C1F3-AFDD-4764-A758-F9D92E8B57B7}] => (Allow) C:\Program Files\Pinnacle\Studio 20\programs\NGStudio.exe
FirewallRules: [{864326B4-185D-4432-87F4-E24CD2987F85}] => (Allow) C:\Program Files\Pinnacle\Studio 20\programs\NGStudio.exe
FirewallRules: [{0A7E0DB0-3147-4B55-9291-B51E05E47653}] => (Allow) C:\Program Files\Pinnacle\Studio 20\programs\RM.exe
FirewallRules: [{6CAFFB39-713A-4AFD-8D04-B58F660B6122}] => (Allow) C:\Program Files\Pinnacle\Studio 20\programs\RM.exe
FirewallRules: [{A34B1D27-245C-44B0-A9A4-75B893420CF8}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS7323\HPDiagnosticCoreUI.exe
FirewallRules: [{B433B397-ADD9-4CAD-916D-55DF48CFF274}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS7323\HPDiagnosticCoreUI.exe
FirewallRules: [{10BB0176-D463-461A-9300-CA71FFB13BB3}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS6B5A\HPDiagnosticCoreUI.exe
FirewallRules: [{9E286606-54FA-4EC1-9CD2-1E4CC394E24B}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS6B5A\HPDiagnosticCoreUI.exe
FirewallRules: [{1EABF859-DE91-4589-BC05-5F687F7DE6DF}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS606C\HPDiagnosticCoreUI.exe
FirewallRules: [{65CA8475-34BD-41EC-B016-A6B38450AEC0}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS606C\HPDiagnosticCoreUI.exe
FirewallRules: [{52F9B6FF-4104-4396-9C21-1F148E662985}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS5FF6\HPDiagnosticCoreUI.exe
FirewallRules: [{E772876A-512E-4EA3-BCED-CFA8C67EEAAA}] => (Allow) C:\Users\fab\AppData\Local\Temp\7zS5FF6\HPDiagnosticCoreUI.exe
FirewallRules: [{A32A0554-C7A6-4231-8754-14EAFB1977AE}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\UMI.exe
FirewallRules: [{F4A466D5-2AED-4DAA-B7C0-2DB521F71C5C}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\UMI.exe
FirewallRules: [{14FBBA6F-F84D-4CBC-9B77-226EB45732A6}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\NGStudio.exe
FirewallRules: [{973C1592-03DF-4EA8-A4A8-454188D83866}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\NGStudio.exe
FirewallRules: [{24C09BDC-1093-4D81-B742-4E1B3A12DC92}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\RM.exe
FirewallRules: [{2AB0CE2B-CE02-4033-89B2-751C2C8F94CB}] => (Allow) C:\Program Files\Pinnacle\Studio 18\programs\RM.exe
FirewallRules: [{0E268A98-CA35-4BD6-86B0-2B4B193D637B}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{1708D197-4CB2-4C5E-8839-C4050540C505}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{74419BEA-38C5-4FBB-9BA9-F231B8B6CE38}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe
FirewallRules: [{9F8FD798-1A4B-4CEC-A1A6-16862C846159}] => (Allow) C:\Program Files\Andy\SetupFiles\AndyDoctor.exe
FirewallRules: [{5DCA6193-A52E-48F8-BD79-9CD1A533EBCD}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{8943482E-E1BE-4AA4-9018-5012BA449139}] => (Allow) C:\Program Files\Andy\SetupFiles\VMwareCheck.exe
FirewallRules: [{0FFA116D-531E-4ECD-8BF3-624A3BEF65DD}] => (Allow) C:\Users\fab\AppData\Local\Temp\RemoveTemp.exe
FirewallRules: [{C4CB5B7A-BB1A-4996-9784-DCBB8D144C5E}] => (Allow) C:\Users\fab\AppData\Local\Temp\RemoveTemp.exe
FirewallRules: [{B0E81AB5-FF8B-40C4-9FCD-2E8126766586}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{74DD0B29-47FE-42E9-B5C7-E6A06B5DC5A4}] => (Allow) C:\Program Files\Andy\SetupFiles\Uninstall.exe
FirewallRules: [{6300D291-1EF7-4BEE-A70F-76F38A3533FB}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{EA32044C-32E1-4DCC-B5CA-266584A22C32}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{93AD2171-A55E-41FB-9068-F3509EE399B2}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{E05F3F61-C608-42A5-A735-A5F08394DD20}] => (Allow) C:\Program Files\Andy\AndyConsole.exe
FirewallRules: [{19C4D541-B124-4289-831A-97137A09D96C}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{0C94F318-72D6-479B-AE63-8444D055BC24}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{4834782C-24ED-40F2-8922-B2BB989D5A15}] => (Allow) C:\Users\fab\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{70C3CED3-CC50-4EB3-8A70-15FF66B9687C}] => (Allow) C:\Users\fab\AppData\Local\Temp\andy-x64\Setup.exe
FirewallRules: [{1CB158FE-3FB1-4CF5-B4D5-C384A152D9EC}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe
FirewallRules: [{8D113E17-FE16-474C-B35F-1E2E3F40A5EA}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe
FirewallRules: [{0F59DE09-285A-4EA9-93D3-8F5985D8AAE9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{C01B33EE-5E34-4F5F-ABA0-FB1521E1DAFF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8F4713A3-F69C-4C3B-B578-D98FAB31FDF6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{3D430ABF-CD6C-4A07-880D-F3F9242BF9DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{D9BCC4A5-17BA-4A9D-9860-44DD50CA2FA2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{0EBC90F4-AB82-4AF4-AC01-392A43CE10C6}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{15ED35DD-7176-4677-8881-A4161B6A64BE}C:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe] => (Allow) C:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe
FirewallRules: [UDP Query User{FAD82779-8BBA-44F1-9794-7046F22EA3F2}C:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe] => (Allow) C:\wamp64\bin\apache\apache2.4.27\bin\httpd.exe
FirewallRules: [TCP Query User{51D436EC-6726-4D53-BC9A-253146E6201C}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{2379E3E7-3607-4967-A520-818F5351E698}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{1335BEFC-985C-458C-8364-F3E717594FC5}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{0F8AB688-8AD3-4D6C-9C52-FD6EFC56D5D3}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [{113A22DE-F372-49A8-BB60-88333845E383}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{52E9B229-B8CA-42B8-8C49-5317349E0BC2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{90F713E0-3D83-4F18-9AE4-26ED681F4197}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Points de restauration =========================
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (10/12/2017 05:57:46 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: L’installation de la preuve d’achat a échoué. 0xC004E016
Pkey partiel=V2WYG
ACID=?
Erreur détaillée[?]
Error: (10/12/2017 05:55:07 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest ». Erreur dans le fichier de manifeste ou de stratégie « C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL » à la ligne 1.
L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé.
La référence est UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La définition est UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (10/12/2017 05:47:41 PM) (Source: Software Protection Platform Service) (EventID: 1017) (User: )
Description: L’installation de la preuve d’achat a échoué. 0xC004E016
Pkey partiel=V2WYG
ACID=?
Erreur détaillée[?]
Error: (10/12/2017 05:41:37 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest ». Erreur dans le fichier de manifeste ou de stratégie « C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL » à la ligne 1.
L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé.
La référence est UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La définition est UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (10/12/2017 05:23:35 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide
.
Opération :
Opération asynchrone en cours d’exécution
Contexte :
État actuel: DoSnapshotSet
Error: (10/12/2017 05:22:53 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: FAB-PC)
Description: Le package Microsoft.MicrosoftEdge_40.15063.674.0_neutral__8wekyb3d8bbwe+MicrosoftEdge a été interrompu, car sa suspension a été trop longue.
Error: (10/12/2017 05:21:40 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005, Accès refusé.
.
Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.
Opération :
Données du rédacteur en cours de collecte
Contexte :
ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
Nom du rédacteur: System Writer
ID d’instance du rédacteur: {a4c13e19-984b-42f7-bba8-b531f581c1d5}
Error: (10/12/2017 05:21:20 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest ». Erreur dans le fichier de manifeste ou de stratégie « C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL » à la ligne 1.
L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé.
La référence est UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La définition est UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (10/12/2017 08:26:37 AM) (Source: SideBySide) (EventID: 35) (User: )
Description: La création du contexte d’activation a échoué pour « C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe.Manifest ». Erreur dans le fichier de manifeste ou de stratégie « C:\Program Files (x86)\Microsoft Office\root\Office16\UccApi.DLL » à la ligne 1.
L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé.
La référence est UccApi,processorArchitecture="AMD64",type="win32",version="16.0.0.0".
La définition est UccApi,processorArchitecture="x86",type="win32",version="16.0.0.0".
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (10/11/2017 08:40:38 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante svchost.exe_stisvc, version : 10.0.15063.0, horodatage : 0x02799ef5
Nom du module défaillant : wsdapi.dll, version : 10.0.15063.0, horodatage : 0x826b6ab9
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000003e60e
ID du processus défaillant : 0xbb0
Heure de début de l’application défaillante : 0x01d342b361dfd067
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\svchost.exe
Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\wsdapi.dll
ID de rapport : a78e0ebc-7e92-4dd7-981f-9ad78842e84f
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Erreurs système:
=============
Error: (10/12/2017 05:46:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service CldFlt n’a pas pu démarrer en raison de l’erreur :
Cette demande n’est pas prise en charge.
Error: (10/12/2017 05:45:31 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Wondershare Application Framework Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/12/2017 05:45:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Service KMSELDI s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/12/2017 05:45:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Service Microsoft Office « Démarrer en un clic » s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 0 millisecondes : Redémarrer le service.
Error: (10/12/2017 05:45:30 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 1000 millisecondes : Redémarrer le service.
Error: (10/12/2017 05:45:29 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service NVIDIA Display Container LS s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 1000 millisecondes : Redémarrer le service.
Error: (10/12/2017 05:45:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Adobe Acrobat Update Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/12/2017 05:45:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Disc Soft Lite Bus Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/12/2017 05:45:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Service Google Update (gupdate) s’est terminé de façon inattendue pour la 1ème fois.
Error: (10/12/2017 05:45:29 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Corel License Validation Service V2, Powered by arvato s’est terminé de façon inattendue pour la 1ème fois.
CodeIntegrity:
===================================
Date: 2017-10-12 16:53:15.618
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:53:13.082
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:52:06.071
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:50:06.273
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:49:35.025
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:49:33.605
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:49:33.029
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:49:17.811
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:49:17.257
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
Date: 2017-10-12 16:49:16.732
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\nvspcap64.dll that did not meet the Store signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Pentium(R) CPU G645 @ 2.90GHz
Pourcentage de mémoire utilisée: 75%
Mémoire physique - RAM - totale: 4046.57 MB
Mémoire physique - RAM - disponible: 1008.46 MB
Mémoire virtuelle totale: 5168.19 MB
Mémoire virtuelle disponible: 1050.16 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:150 GB) (Free:23.03 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)]
Drive d: (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32
Drive e: (Data) (Fixed) (Total:299.8 GB) (Free:63.82 GB) NTFS
Drive g: (Musique) (Fixed) (Total:15 GB) (Free:13.72 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 516C81FA)
Partition 1: (Not Active) - (Size=260 MB) - (Type=0C)
Partition 2: (Active) - (Size=150 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=299.8 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=15 GB) - (Type=OF Extended)
==================== Fin de Addition.txt ============================