Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 16-10-2017
Exécuté par Alain (16-10-2017 20:56:57)
Exécuté depuis C:\Users\Alain\Downloads
Windows 10 Home Version 1607 170917-1700 (X64) (2016-10-02 07:17:47)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-1599166857-3055814703-3485144955-500 - Administrator - Disabled)
Alain (S-1-5-21-1599166857-3055814703-3485144955-1001 - Administrator - Enabled) => C:\Users\Alain
DefaultAccount (S-1-5-21-1599166857-3055814703-3485144955-503 - Limited - Disabled)
Invité (S-1-5-21-1599166857-3055814703-3485144955-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Application Blizzard (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.7.2314 - AVAST Software)
Catalyst Control Center Next Localization BR (HKLM\...\{AC657D40-C276-A0D5-A993-3A615777D4CC}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{3A6948ED-B6B5-6400-1958-93E40754CB53}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{510EE898-615E-2713-BC49-26EC34480991}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{AAEBD1C8-500E-5572-9458-B8AAE5ED749E}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{1BFD9D85-0CB5-EBF5-7B4F-0124670B7A35}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{919FA8EA-161E-7055-0E5B-26ADAE443FF6}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{D59046B1-1904-8655-AAD8-217906DFE188}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{908CA417-46EF-ED61-755F-245852BF0DEF}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{CAF61868-C3A1-813F-C9B5-171A54B78090}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{2BE3D8FA-B9B7-FF01-E06A-D2EF575EB607}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{78CE64DD-0276-DDCE-E95A-459BCE9C6EA6}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{B62E9588-2BCE-E181-667C-46A40C168A9A}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{BF70D2F2-109F-A854-E052-47B16A356FC0}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{ADCC2B3E-DB4B-A8A1-5C55-7CA5C0708A0D}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{A7289BEC-BC3D-A8DE-6531-9BEFDCA5368C}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{D439A9AE-BC26-52A1-B78A-6804A6899696}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{E7FA07C0-D488-6837-7A50-567C1767315E}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{60F542F9-9742-D516-7F02-D382A07F69B3}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{B6724C22-0F33-A59E-26D3-F645E95C5BA2}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{0F07DF38-5869-90B4-8BA3-F720CE3A03E9}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{680E8421-5338-0C68-2AFE-77438FCC14B0}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.6.4925 - Nom de votre société) Hidden
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Discord (HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Droid4X (HKLM-x32\...\Droid4X) (Version: 0.10.5 - Haiyu Dongxiang Co.,Ltd.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.1.1043 - Intel Corporation)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
KB4023057 (HKLM\...\{0C050BEE-16BE-4998-8959-2A421433DB6E}) (Version: 2.5.0.0 - Microsoft Corporation)
Krita (x64) 3.3.0.2 (HKLM\...\Krita_x64) (Version: 3.3.0.2 - Krita Foundation)
League of Legends (HKLM-x32\...\{11B73856-A062-4E6B-A80E-A3F380BBAB65}) (Version: 4.2.1 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: - )
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 56.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 56.0.1 (x64 fr)) (Version: 56.0.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 4.3.12_ZZZZ (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
osu! (HKLM-x32\...\{650185ab-1948-4423-92e3-f732d4631763}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Pentablet version 1.3.5.170818 (HKLM\...\{5DAB8C1A-6D8E-467D-BE62-AC13087AA950}_is1) (Version: 1.3.5.170818 - XPPEN Technology)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Twitch (HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers: [ Report64] -> {C7D0BD5D-B11A-47DB-BB14-7F930B3F7705} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ YoukuModShlExt64] -> {314711D6-6B45-4AF7-83D8-DCD8537FD241} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-03-08] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {00DDF36E-4081-4B29-BCAC-911DB2F0B819} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {1BB22950-09F0-4B46-A82B-F71B4D595B28} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {1CBB0D94-9CD3-4C07-8296-24B147F2DED8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-09-25] (HP Inc.)
Task: {225EB3B8-9A53-43C7-9294-8EEA13082EE5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-09-25] (HP Inc.)
Task: {2A19F782-FDA5-4580-A81F-6BD2DBB76959} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {2A320D71-AA23-48CF-8F58-03C90F8ABDD5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-09-15] (HP Inc.)
Task: {2D693D63-39C0-492C-8441-BB4BA278DC34} - System32\Tasks\Eteindre => shutdown [Argument = /s/f]
Task: {39679ACF-9A8E-4AE9-BCC4-FD283AF52E33} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe
Task: {632EC4A5-C229-4A32-819B-EB264E692D75} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-18] (Adobe Systems Incorporated)
Task: {6A59969E-94DD-4BD1-B0B6-464A00DE044B} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Alain\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {73600A6B-B86A-4EAA-AB53-166DF4251D8B} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {84360DC6-9ED3-4111-96B8-978186E242CD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {A08B0BBE-3427-4207-B2B6-8E18E94E6948} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-10-15] (AVAST Software)
Task: {AE7BF49E-28AB-43FD-9C7F-04071024F2A4} - System32\Tasks\{DBD8086F-3B48-4966-9F9B-C525C3AC6141} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Alain\Downloads\epson374749eu.exe -d C:\Users\Alain\Downloads
Task: {B61A1989-E1A0-4F7A-9AEE-01AE27E9B219} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {B82ECFDF-A5C7-4DEB-ABEB-9784B619EC88} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {CA387A67-169A-41B5-9024-7B994FCFA0EA} - System32\Tasks\HPDAS => C:\Program [Argument = Files\HP\HP ePrint\HP.DeliveryAndStatus.Desktop.App.exe /CheckJobs]
Task: {CD63184F-CDED-4706-91E4-28270397E65D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {D14198EA-C02E-4178-8B3B-FAD4E5A3B14A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {D31BC8BE-CCC4-4ABF-87D8-409C597219FA} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2016-09-21] ()
Task: {EFBD63B0-74B7-4AA1-BAE0-03BA4F300C02} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe
Task: {F0A37F53-D40F-4EE2-B57A-866F44B49FE4} - System32\Tasks\HPCeeScheduleForAlain => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForAlain.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-09-25 17:38 - 2017-09-07 08:01 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-04-26 18:32 - 2017-04-26 18:32 - 000598528 _____ () C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll
2016-10-02 09:35 - 2016-10-02 09:35 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 07:09 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 07:10 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 07:10 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 07:10 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-10-11 12:31 - 2017-09-18 04:13 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-10-11 12:31 - 2017-09-18 04:14 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-10-11 12:31 - 2017-09-18 04:16 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-09-26 06:33 - 2017-09-26 06:34 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-09-26 06:33 - 2017-09-26 06:34 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-09-26 06:33 - 2017-09-26 06:34 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-09-26 06:33 - 2017-09-26 06:34 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll
2014-05-16 14:02 - 2014-05-16 14:02 - 004478752 _____ () C:\Program Files\Oracle\VirtualBox\VBoxRT.dll
2014-05-16 14:02 - 2014-05-16 14:02 - 000376096 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll
2014-05-16 14:03 - 2014-05-16 14:03 - 000164640 _____ () C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
2014-05-16 14:04 - 2014-05-16 14:04 - 002469664 _____ () C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000671520 _____ () C:\Program Files\Oracle\VirtualBox\VBoxREM.dll
2014-05-16 14:04 - 2014-05-16 14:04 - 000030496 _____ () C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000047392 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000048928 _____ () C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000046368 _____ () C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 002412832 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000201504 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2016-11-10 22:53 - 2016-06-13 09:19 - 000031704 _____ () C:\Program Files\Droid4Xext\VTx6443s.dll
2014-05-16 14:04 - 2014-05-16 14:04 - 000041248 _____ () C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL
2017-10-11 06:14 - 2017-10-11 06:14 - 034988544 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Music.UI.exe
2017-10-11 06:14 - 2017-10-11 06:14 - 009214464 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 06:33 - 2017-09-26 06:33 - 000957952 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll
2017-09-26 17:26 - 2017-09-26 17:26 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-11 06:14 - 2017-10-11 06:14 - 013224960 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Music.Visuals.dll
2017-10-11 06:15 - 2017-10-11 06:18 - 001226416 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2017-04-07 07:36 - 2017-04-07 07:37 - 001695440 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2017-09-26 06:27 - 2017-09-26 06:28 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-11 06:13 - 2017-10-11 06:13 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-10-11 06:13 - 2017-10-11 06:13 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-10-15 16:42 - 2017-10-15 16:42 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000700656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\Alain\AppData\Local\Temp:$DATA [16]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\Services: 0220971483045137mcinstcleanup => 2
MSCONFIG\Services: AdaptiveSleepService => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: BTDevManager => 2
MSCONFIG\Services: CltMngSvc => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: dbupdate => 2
MSCONFIG\Services: dbupdatem => 3
MSCONFIG\Services: Disc Soft Lite Bus Service => 3
MSCONFIG\Services: Droid4XService => 2
MSCONFIG\Services: Ds3Service => 2
MSCONFIG\Services: esifsvc => 2
MSCONFIG\Services: GamesAppIntegrationService => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HiPatchService => 2
MSCONFIG\Services: HomeNetSvc => 2
MSCONFIG\Services: hpqwmiex => 3
MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2
MSCONFIG\Services: HPWMISVC => 2
MSCONFIG\Services: igfxCUIService2.0.0.0 => 2
MSCONFIG\Services: Intel(R) Capability Licensing Service TCP IP Interface => 3
MSCONFIG\Services: jhi_service => 2
MSCONFIG\Services: MBAMService => 3
MSCONFIG\Services: McAWFwk => 3
MSCONFIG\Services: mcbootdelaystartsvc => 2
MSCONFIG\Services: mccspsvc => 2
MSCONFIG\Services: McNaiAnn => 2
MSCONFIG\Services: McODS => 3
MSCONFIG\Services: mcpltsvc => 2
MSCONFIG\Services: McProxy => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: MSK80Service => 2
MSCONFIG\Services: PenTabletService => 2
MSCONFIG\Services: ProductAgentService => 2
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: RtkAudioService => 2
MSCONFIG\Services: SecureLine => 2
MSCONFIG\Services: ServiceDevMgmt => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: SynTPEnhService => 2
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run: => "BtServer"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "HPMessageService"
HKLM\...\StartupApproved\Run32: => "HPRadioMgr"
HKLM\...\StartupApproved\Run32: => "PowerDVD14Agent"
HKLM\...\StartupApproved\Run32: => "PenTabletClient"
HKLM\...\StartupApproved\Run32: => "YoukuMediaCenter"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "iKu"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "YoukuMediaCenter"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "ytbrowser"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [TCP Query User{163C967D-3B14-43AD-A3E3-110C4FDAEE4E}C:\program files (x86)\droid4x\droid4x.exe] => (Block) C:\program files (x86)\droid4x\droid4x.exe
FirewallRules: [UDP Query User{1EA5838E-BF70-4ED2-A470-8CA39D0CE520}C:\program files (x86)\droid4x\droid4x.exe] => (Block) C:\program files (x86)\droid4x\droid4x.exe
FirewallRules: [{13CF8399-0BEB-40C5-87BC-B0CFC5DF3F8A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{78DB749E-E738-4A12-8708-DB5F0105AD60}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6C9980BB-C156-41C2-9917-1DDDBC8BB931}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{60AFE999-348D-4155-9A2A-D57DED941B9B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{A8D6099E-61BC-4BD0-A1AF-987DC5600A3A}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{AB3160C9-1B0E-4996-844C-2B9E13016511}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{6B1F5522-4D41-4F19-AC26-333A7AEFB0ED}] => (Allow) LPort=59055
FirewallRules: [{D88A32A3-C10E-4801-BA0E-5992BDD0129D}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{495DD50E-AC83-4F1C-8266-B44D1D8D483B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{5A36C8AF-6574-44C3-BD4F-DF6DE13A4C06}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{65507D03-23AB-4D57-9E43-65043F1A9C12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe
FirewallRules: [{33DB4453-DFFB-4E44-AC3A-98B3435751C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe
FirewallRules: [{45C158B3-0B66-4E35-9EBC-AF168564B973}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5BAB1F21-CC5F-4DDB-80FC-FC3C7C8308A6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{72B30783-E83A-4871-A363-3CEC64B8DE99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{6AAA66DE-0034-465C-A18E-D0D7A27A8F28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{821C7028-8467-4E90-B26D-64939557F329}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe
FirewallRules: [TCP Query User{021B8744-26F0-4EFA-9995-537E66BD4494}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{BB1438D1-979E-4829-9780-2BD34CE1F347}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{3958C7B8-144C-42E1-9FFC-8F4C9E20F644}C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [UDP Query User{58727505-F098-464F-B285-D2BE013F045C}C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{81D5EFE1-CF90-4541-A496-59850607AB40}] => (Block) C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{F916637C-5FB8-4A7A-AB65-B43029B7E801}] => (Allow) C:\Program Files (x86)\Droid4X\Droid4X.exe
FirewallRules: [{64A0DEBC-9381-4DDD-8D9E-6AD248AC401B}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe
FirewallRules: [{8549B181-E732-4D90-B70D-8C00C1B5C6B0}] => (Allow) C:\Program Files\Oracle\VirtualBox\vboxheadless.exe
FirewallRules: [{F45FF258-C321-4890-B9C5-1815585EEC1D}] => (Allow) C:\Program Files (x86)\Droid4X\MultiMgr.exe
==================== Points de restauration =========================
09-10-2017 18:56:07 Point de contrôle planifié
14-10-2017 08:34:59 Windows Update
16-10-2017 18:35:11 Sauvegarde Windows
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (10/16/2017 07:43:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-G4EL7NNF)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147024894 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (10/16/2017 06:52:57 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Échec de la sauvegarde. Erreur : Espace insuffisant sur ce lecteur. Pour enregistrer la sauvegarde, supprimez les données inutiles dont d'anciennes copies de secours. Autre possibilité : modifiez vos paramètres de sauvegarde. (0x81000005).
Error: (10/16/2017 06:52:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (10/16/2017 06:35:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (10/16/2017 06:34:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (10/16/2017 06:29:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-G4EL7NNF)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147024894 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (10/16/2017 06:16:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-G4EL7NNF)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147024894 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (10/16/2017 05:38:58 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Event-ID 256
Error: (10/16/2017 05:38:58 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Event-ID 256
Error: (10/16/2017 05:38:58 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Event-ID 256
Erreurs système:
=============
Error: (10/16/2017 07:59:54 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (10/16/2017 07:43:09 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-G4EL7NNF)
Description: Impossible de démarrer un serveur DCOM : App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca en tant que Non disponible/Non disponible. L’erreur
« 2 »
s’est produite lors du démarrage de la commande :
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
Error: (10/16/2017 06:29:23 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-G4EL7NNF)
Description: Impossible de démarrer un serveur DCOM : App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca en tant que Non disponible/Non disponible. L’erreur
« 2 »
s’est produite lors du démarrage de la commande :
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
Error: (10/16/2017 06:16:19 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-G4EL7NNF)
Description: Impossible de démarrer un serveur DCOM : App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca en tant que Non disponible/Non disponible. L’erreur
« 2 »
s’est produite lors du démarrage de la commande :
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
Error: (10/16/2017 05:45:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070003 : 9WZDNCRFJBBG-Microsoft.WindowsCamera.
Error: (10/16/2017 05:45:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070003 : 9WZDNCRFJBH4-Microsoft.Windows.Photos.
Error: (10/16/2017 05:45:22 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070003 : 9WZDNCRFJ3TJ-4DF9E0F8.Netflix.
Error: (10/16/2017 05:41:01 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
Accès refusé.
Error: (10/16/2017 05:41:01 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
Accès refusé.
Error: (10/16/2017 05:40:58 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
Accès refusé.
CodeIntegrity:
===================================
Date: 2017-10-13 20:04:15.510
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-10 16:26:24.476
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-08 20:06:19.768
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-06 13:28:59.323
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-03 11:05:08.107
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-01 17:10:55.160
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-26 14:21:37.067
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-25 18:27:06.257
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-25 16:57:05.904
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-25 16:45:30.564
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz
Pourcentage de mémoire utilisée: 38%
Mémoire physique - RAM - totale: 8104.07 MB
Mémoire physique - RAM - disponible: 4967.89 MB
Mémoire virtuelle totale: 8616.07 MB
Mémoire virtuelle disponible: 5259.13 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:913.86 GB) (Free:810.64 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:15.68 GB) (Free:0 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9272D938)
Partition: GPT.
==================== Fin de Addition.txt ============================
Exécuté par Alain (16-10-2017 20:56:57)
Exécuté depuis C:\Users\Alain\Downloads
Windows 10 Home Version 1607 170917-1700 (X64) (2016-10-02 07:17:47)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-1599166857-3055814703-3485144955-500 - Administrator - Disabled)
Alain (S-1-5-21-1599166857-3055814703-3485144955-1001 - Administrator - Enabled) => C:\Users\Alain
DefaultAccount (S-1-5-21-1599166857-3055814703-3485144955-503 - Limited - Disabled)
Invité (S-1-5-21-1599166857-3055814703-3485144955-501 - Limited - Disabled)
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Application Blizzard (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.7.2314 - AVAST Software)
Catalyst Control Center Next Localization BR (HKLM\...\{AC657D40-C276-A0D5-A993-3A615777D4CC}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{3A6948ED-B6B5-6400-1958-93E40754CB53}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{510EE898-615E-2713-BC49-26EC34480991}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{AAEBD1C8-500E-5572-9458-B8AAE5ED749E}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{1BFD9D85-0CB5-EBF5-7B4F-0124670B7A35}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{919FA8EA-161E-7055-0E5B-26ADAE443FF6}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{D59046B1-1904-8655-AAD8-217906DFE188}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{908CA417-46EF-ED61-755F-245852BF0DEF}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{CAF61868-C3A1-813F-C9B5-171A54B78090}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{2BE3D8FA-B9B7-FF01-E06A-D2EF575EB607}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{78CE64DD-0276-DDCE-E95A-459BCE9C6EA6}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{B62E9588-2BCE-E181-667C-46A40C168A9A}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{BF70D2F2-109F-A854-E052-47B16A356FC0}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{ADCC2B3E-DB4B-A8A1-5C55-7CA5C0708A0D}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{A7289BEC-BC3D-A8DE-6531-9BEFDCA5368C}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{D439A9AE-BC26-52A1-B78A-6804A6899696}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{E7FA07C0-D488-6837-7A50-567C1767315E}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{60F542F9-9742-D516-7F02-D382A07F69B3}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{B6724C22-0F33-A59E-26D3-F645E95C5BA2}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{0F07DF38-5869-90B4-8BA3-F720CE3A03E9}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{680E8421-5338-0C68-2AFE-77438FCC14B0}) (Version: 2016.1014.309.3855 - Advanced Micro Devices, Inc.) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 5.35 - Piriform)
CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.6.4925 - Nom de votre société) Hidden
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Discord (HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Droid4X (HKLM-x32\...\Droid4X) (Version: 0.10.5 - Haiyu Dongxiang Co.,Ltd.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.1.1043 - Intel Corporation)
Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation)
KB4023057 (HKLM\...\{0C050BEE-16BE-4998-8959-2A421433DB6E}) (Version: 2.5.0.0 - Microsoft Corporation)
Krita (x64) 3.3.0.2 (HKLM\...\Krita_x64) (Version: 3.3.0.2 - Krita Foundation)
League of Legends (HKLM-x32\...\{11B73856-A062-4E6B-A80E-A3F380BBAB65}) (Version: 4.2.1 - Riot Games) Hidden
League of Legends (HKLM-x32\...\League of Legends 4.2.1) (Version: 4.2.1 - Riot Games)
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: - )
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Mozilla Firefox 56.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 56.0.1 (x64 fr)) (Version: 56.0.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8229.2103 - Microsoft Corporation) Hidden
Oracle VM VirtualBox 4.3.12_ZZZZ (HKLM\...\{B5121457-0126-4E62-BCBF-6DC7C73D9E4A}) (Version: 4.3.12 - Oracle Corporation)
osu! (HKLM-x32\...\{650185ab-1948-4423-92e3-f732d4631763}) (Version: latest - ppy Pty Ltd)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Pentablet version 1.3.5.170818 (HKLM\...\{5DAB8C1A-6D8E-467D-BE62-AC13087AA950}_is1) (Version: 1.3.5.170818 - XPPEN Technology)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Twitch (HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1599166857-3055814703-3485144955-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers: [ Report64] -> {C7D0BD5D-B11A-47DB-BB14-7F930B3F7705} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ YoukuModShlExt64] -> {314711D6-6B45-4AF7-83D8-DCD8537FD241} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => -> Pas de fichier
ShellIconOverlayIdentifiers: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll [2017-04-26] ()
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-03-08] (Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-10-15] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {00DDF36E-4081-4B29-BCAC-911DB2F0B819} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-20] (Piriform Ltd)
Task: {1BB22950-09F0-4B46-A82B-F71B4D595B28} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {1CBB0D94-9CD3-4C07-8296-24B147F2DED8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-09-25] (HP Inc.)
Task: {225EB3B8-9A53-43C7-9294-8EEA13082EE5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-09-25] (HP Inc.)
Task: {2A19F782-FDA5-4580-A81F-6BD2DBB76959} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {2A320D71-AA23-48CF-8F58-03C90F8ABDD5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-09-15] (HP Inc.)
Task: {2D693D63-39C0-492C-8441-BB4BA278DC34} - System32\Tasks\Eteindre => shutdown [Argument = /s/f]
Task: {39679ACF-9A8E-4AE9-BCC4-FD283AF52E33} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe
Task: {632EC4A5-C229-4A32-819B-EB264E692D75} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-08-18] (Adobe Systems Incorporated)
Task: {6A59969E-94DD-4BD1-B0B6-464A00DE044B} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Alain\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {73600A6B-B86A-4EAA-AB53-166DF4251D8B} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe
Task: {84360DC6-9ED3-4111-96B8-978186E242CD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.)
Task: {A08B0BBE-3427-4207-B2B6-8E18E94E6948} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-10-15] (AVAST Software)
Task: {AE7BF49E-28AB-43FD-9C7F-04071024F2A4} - System32\Tasks\{DBD8086F-3B48-4966-9F9B-C525C3AC6141} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Alain\Downloads\epson374749eu.exe -d C:\Users\Alain\Downloads
Task: {B61A1989-E1A0-4F7A-9AEE-01AE27E9B219} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.)
Task: {B82ECFDF-A5C7-4DEB-ABEB-9784B619EC88} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2016-11-07] (HP Inc.)
Task: {CA387A67-169A-41B5-9024-7B994FCFA0EA} - System32\Tasks\HPDAS => C:\Program [Argument = Files\HP\HP ePrint\HP.DeliveryAndStatus.Desktop.App.exe /CheckJobs]
Task: {CD63184F-CDED-4706-91E4-28270397E65D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.)
Task: {D14198EA-C02E-4178-8B3B-FAD4E5A3B14A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe
Task: {D31BC8BE-CCC4-4ABF-87D8-409C597219FA} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [2016-09-21] ()
Task: {EFBD63B0-74B7-4AA1-BAE0-03BA4F300C02} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe
Task: {F0A37F53-D40F-4EE2-B57A-866F44B49FE4} - System32\Tasks\HPCeeScheduleForAlain => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForAlain.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-09-25 17:38 - 2017-09-07 08:01 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2017-04-26 18:32 - 2017-04-26 18:32 - 000598528 _____ () C:\Users\Alain\AppData\Local\MEGAsync\ShellExtX64.dll
2016-10-02 09:35 - 2016-10-02 09:35 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-15 07:09 - 2017-03-04 08:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-03-15 07:10 - 2017-03-04 08:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-15 07:10 - 2017-03-04 08:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-15 07:10 - 2017-03-04 08:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-10-11 12:31 - 2017-09-18 04:13 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-10-11 12:31 - 2017-09-18 04:14 - 002424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-10-11 12:31 - 2017-09-18 04:16 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-09-26 06:33 - 2017-09-26 06:34 - 000074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-09-26 06:33 - 2017-09-26 06:34 - 000203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-09-26 06:33 - 2017-09-26 06:34 - 036162048 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-09-26 06:33 - 2017-09-26 06:34 - 002237952 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.856.0_x64__kzf8qxf38zg5c\skypert.dll
2014-05-16 14:02 - 2014-05-16 14:02 - 004478752 _____ () C:\Program Files\Oracle\VirtualBox\VBoxRT.dll
2014-05-16 14:02 - 2014-05-16 14:02 - 000376096 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDDU.dll
2014-05-16 14:03 - 2014-05-16 14:03 - 000164640 _____ () C:\Program Files\Oracle\VirtualBox\VBoxHeadless.exe
2014-05-16 14:04 - 2014-05-16 14:04 - 002469664 _____ () C:\Program Files\Oracle\VirtualBox\VBoxVMM.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000671520 _____ () C:\Program Files\Oracle\VirtualBox\VBoxREM.dll
2014-05-16 14:04 - 2014-05-16 14:04 - 000030496 _____ () C:\Program Files\Oracle\VirtualBox\VBoxSharedClipboard.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000047392 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDragAndDropSvc.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000048928 _____ () C:\Program Files\Oracle\VirtualBox\VBoxGuestPropSvc.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000046368 _____ () C:\Program Files\Oracle\VirtualBox\VBoxGuestControlSvc.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 002412832 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDD.DLL
2014-05-16 14:04 - 2014-05-16 14:04 - 000201504 _____ () C:\Program Files\Oracle\VirtualBox\VBoxDD2.dll
2016-11-10 22:53 - 2016-06-13 09:19 - 000031704 _____ () C:\Program Files\Droid4Xext\VTx6443s.dll
2014-05-16 14:04 - 2014-05-16 14:04 - 000041248 _____ () C:\Program Files\Oracle\VirtualBox\VBoxSharedFolders.DLL
2017-10-11 06:14 - 2017-10-11 06:14 - 034988544 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Music.UI.exe
2017-10-11 06:14 - 2017-10-11 06:14 - 009214464 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-09-26 06:33 - 2017-09-26 06:33 - 000957952 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll
2017-09-26 17:26 - 2017-09-26 17:26 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-11 06:14 - 2017-10-11 06:14 - 013224960 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17083.18321.0_x64__8wekyb3d8bbwe\Music.Visuals.dll
2017-10-11 06:15 - 2017-10-11 06:18 - 001226416 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2017-04-07 07:36 - 2017-04-07 07:37 - 001695440 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8600.40525.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2017-09-26 06:27 - 2017-09-26 06:28 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-11 06:13 - 2017-10-11 06:13 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-10-11 06:13 - 2017-10-11 06:13 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.30.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-10-15 16:42 - 2017-10-15 16:42 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-10-15 16:43 - 2017-10-15 16:43 - 000700656 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\Users\Alain\AppData\Local\Temp:$DATA [16]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img1.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\Services: 0220971483045137mcinstcleanup => 2
MSCONFIG\Services: AdaptiveSleepService => 2
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: AMD External Events Utility => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: BTDevManager => 2
MSCONFIG\Services: CltMngSvc => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: dbupdate => 2
MSCONFIG\Services: dbupdatem => 3
MSCONFIG\Services: Disc Soft Lite Bus Service => 3
MSCONFIG\Services: Droid4XService => 2
MSCONFIG\Services: Ds3Service => 2
MSCONFIG\Services: esifsvc => 2
MSCONFIG\Services: GamesAppIntegrationService => 2
MSCONFIG\Services: GamesAppService => 3
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HiPatchService => 2
MSCONFIG\Services: HomeNetSvc => 2
MSCONFIG\Services: hpqwmiex => 3
MSCONFIG\Services: HPSupportSolutionsFrameworkService => 2
MSCONFIG\Services: HPWMISVC => 2
MSCONFIG\Services: igfxCUIService2.0.0.0 => 2
MSCONFIG\Services: Intel(R) Capability Licensing Service TCP IP Interface => 3
MSCONFIG\Services: jhi_service => 2
MSCONFIG\Services: MBAMService => 3
MSCONFIG\Services: McAWFwk => 3
MSCONFIG\Services: mcbootdelaystartsvc => 2
MSCONFIG\Services: mccspsvc => 2
MSCONFIG\Services: McNaiAnn => 2
MSCONFIG\Services: McODS => 3
MSCONFIG\Services: mcpltsvc => 2
MSCONFIG\Services: McProxy => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: MSK80Service => 2
MSCONFIG\Services: PenTabletService => 2
MSCONFIG\Services: ProductAgentService => 2
MSCONFIG\Services: RichVideo64 => 2
MSCONFIG\Services: RtkAudioService => 2
MSCONFIG\Services: SecureLine => 2
MSCONFIG\Services: ServiceDevMgmt => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: SynTPEnhService => 2
HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run: => "BtServer"
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "HPMessageService"
HKLM\...\StartupApproved\Run32: => "HPRadioMgr"
HKLM\...\StartupApproved\Run32: => "PowerDVD14Agent"
HKLM\...\StartupApproved\Run32: => "PenTabletClient"
HKLM\...\StartupApproved\Run32: => "YoukuMediaCenter"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "iKu"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "YoukuMediaCenter"
HKU\S-1-5-21-1599166857-3055814703-3485144955-1001\...\StartupApproved\Run: => "ytbrowser"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [TCP Query User{163C967D-3B14-43AD-A3E3-110C4FDAEE4E}C:\program files (x86)\droid4x\droid4x.exe] => (Block) C:\program files (x86)\droid4x\droid4x.exe
FirewallRules: [UDP Query User{1EA5838E-BF70-4ED2-A470-8CA39D0CE520}C:\program files (x86)\droid4x\droid4x.exe] => (Block) C:\program files (x86)\droid4x\droid4x.exe
FirewallRules: [{13CF8399-0BEB-40C5-87BC-B0CFC5DF3F8A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{78DB749E-E738-4A12-8708-DB5F0105AD60}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6C9980BB-C156-41C2-9917-1DDDBC8BB931}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{60AFE999-348D-4155-9A2A-D57DED941B9B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{A8D6099E-61BC-4BD0-A1AF-987DC5600A3A}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{AB3160C9-1B0E-4996-844C-2B9E13016511}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [{6B1F5522-4D41-4F19-AC26-333A7AEFB0ED}] => (Allow) LPort=59055
FirewallRules: [{D88A32A3-C10E-4801-BA0E-5992BDD0129D}] => (Allow) LPort=5000
FirewallRules: [TCP Query User{495DD50E-AC83-4F1C-8266-B44D1D8D483B}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{5A36C8AF-6574-44C3-BD4F-DF6DE13A4C06}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [{65507D03-23AB-4D57-9E43-65043F1A9C12}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe
FirewallRules: [{33DB4453-DFFB-4E44-AC3A-98B3435751C0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DB Xenoverse 2\bin\DBXV2.exe
FirewallRules: [{45C158B3-0B66-4E35-9EBC-AF168564B973}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{5BAB1F21-CC5F-4DDB-80FC-FC3C7C8308A6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{72B30783-E83A-4871-A363-3CEC64B8DE99}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{6AAA66DE-0034-465C-A18E-D0D7A27A8F28}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fishing Planet\FishingPlanet.exe
FirewallRules: [{821C7028-8467-4E90-B26D-64939557F329}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe
FirewallRules: [TCP Query User{021B8744-26F0-4EFA-9995-537E66BD4494}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [UDP Query User{BB1438D1-979E-4829-9780-2BD34CE1F347}C:\program files (x86)\overwatch\overwatch.exe] => (Allow) C:\program files (x86)\overwatch\overwatch.exe
FirewallRules: [TCP Query User{3958C7B8-144C-42E1-9FFC-8F4C9E20F644}C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [UDP Query User{58727505-F098-464F-B285-D2BE013F045C}C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{81D5EFE1-CF90-4541-A496-59850607AB40}] => (Block) C:\users\alain\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe
FirewallRules: [{F916637C-5FB8-4A7A-AB65-B43029B7E801}] => (Allow) C:\Program Files (x86)\Droid4X\Droid4X.exe
FirewallRules: [{64A0DEBC-9381-4DDD-8D9E-6AD248AC401B}] => (Allow) C:\Program Files (x86)\Droid4X\download\MiniThunderPlatform.exe
FirewallRules: [{8549B181-E732-4D90-B70D-8C00C1B5C6B0}] => (Allow) C:\Program Files\Oracle\VirtualBox\vboxheadless.exe
FirewallRules: [{F45FF258-C321-4890-B9C5-1815585EEC1D}] => (Allow) C:\Program Files (x86)\Droid4X\MultiMgr.exe
==================== Points de restauration =========================
09-10-2017 18:56:07 Point de contrôle planifié
14-10-2017 08:34:59 Windows Update
16-10-2017 18:35:11 Sauvegarde Windows
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (10/16/2017 07:43:09 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-G4EL7NNF)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147024894 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (10/16/2017 06:52:57 PM) (Source: Windows Backup) (EventID: 4104) (User: )
Description: Échec de la sauvegarde. Erreur : Espace insuffisant sur ce lecteur. Pour enregistrer la sauvegarde, supprimez les données inutiles dont d'anciennes copies de secours. Autre possibilité : modifiez vos paramètres de sauvegarde. (0x81000005).
Error: (10/16/2017 06:52:56 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (10/16/2017 06:35:13 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (10/16/2017 06:34:58 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Les services de chiffrement ont échoué lors du traitement de l’appel OnIdentity() dans l’objet System Writer.
Details:
AddLegacyDriverFiles: Unable to back up image of binary Protocole LLDP (Link Layer Discovery Protocol) Microsoft.
System Error:
Accès refusé.
.
Error: (10/16/2017 06:29:23 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-G4EL7NNF)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147024894 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (10/16/2017 06:16:19 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LAPTOP-G4EL7NNF)
Description: Échec de l’activation de l’application Microsoft.Windows.Photos_8wekyb3d8bbwe!App avec l’erreur : -2147024894 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (10/16/2017 05:38:58 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Event-ID 256
Error: (10/16/2017 05:38:58 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Event-ID 256
Error: (10/16/2017 05:38:58 PM) (Source: DPTF) (EventID: 256) (User: )
Description: Event-ID 256
Erreurs système:
=============
Error: (10/16/2017 07:59:54 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (10/16/2017 07:43:09 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-G4EL7NNF)
Description: Impossible de démarrer un serveur DCOM : App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca en tant que Non disponible/Non disponible. L’erreur
« 2 »
s’est produite lors du démarrage de la commande :
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
Error: (10/16/2017 06:29:23 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-G4EL7NNF)
Description: Impossible de démarrer un serveur DCOM : App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca en tant que Non disponible/Non disponible. L’erreur
« 2 »
s’est produite lors du démarrage de la commande :
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
Error: (10/16/2017 06:16:19 PM) (Source: DCOM) (EventID: 10001) (User: LAPTOP-G4EL7NNF)
Description: Impossible de démarrer un serveur DCOM : App.AppXy9rh3t8m2jfpvhhxp6y2ksgeq77vymbq.mca en tant que Non disponible/Non disponible. L’erreur
« 2 »
s’est produite lors du démarrage de la commande :
"C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.18062.13720.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe" -ServerName:App.AppXzst44mncqdg84v7sv6p7yznqwssy6f7f.mca
Error: (10/16/2017 05:45:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070003 : 9WZDNCRFJBBG-Microsoft.WindowsCamera.
Error: (10/16/2017 05:45:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070003 : 9WZDNCRFJBH4-Microsoft.Windows.Photos.
Error: (10/16/2017 05:45:22 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070003 : 9WZDNCRFJ3TJ-4DF9E0F8.Netflix.
Error: (10/16/2017 05:41:01 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
Accès refusé.
Error: (10/16/2017 05:41:01 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
Accès refusé.
Error: (10/16/2017 05:40:58 PM) (Source: Service Control Manager) (EventID: 7006) (User: )
Description: L’appel ScRegSetValueExW a échoué pour Start avec l’erreur :
Accès refusé.
CodeIntegrity:
===================================
Date: 2017-10-13 20:04:15.510
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-10 16:26:24.476
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-08 20:06:19.768
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-06 13:28:59.323
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-03 11:05:08.107
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-10-01 17:10:55.160
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-26 14:21:37.067
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\WINDOWS\System32\amdhdl64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-25 18:27:06.257
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-25 16:57:05.904
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-09-25 16:45:30.564
Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz
Pourcentage de mémoire utilisée: 38%
Mémoire physique - RAM - totale: 8104.07 MB
Mémoire physique - RAM - disponible: 4967.89 MB
Mémoire virtuelle totale: 8616.07 MB
Mémoire virtuelle disponible: 5259.13 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:913.86 GB) (Free:810.64 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:15.68 GB) (Free:0 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9272D938)
Partition: GPT.
==================== Fin de Addition.txt ============================