Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 01.09.2018 03
Ran by Myriam (02-09-2018 13:27:01)
Running from C:\Users\Myriam\Desktop
Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86) (2018-08-17 13:58:06)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3945864450-1861996533-2604320779-500 - Administrator - Disabled)
Guest (S-1-5-21-3945864450-1861996533-2604320779-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3945864450-1861996533-2604320779-1002 - Limited - Enabled)
Myriam (S-1-5-21-3945864450-1861996533-2604320779-1001 - Administrator - Enabled) => C:\Users\Myriam
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC - Français (HKLM\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.011.20058 - Adobe Systems Incorporated)
Avira (HKLM\...\{532da46c-2aa3-4588-a4a2-b02bc641bf95}) (Version: 1.2.119.17994 - Avira Operations GmbH & Co. KG)
Avira (HKLM\...\{9620D4C2-CF5B-4DBE-8103-CC9DAB0871C6}) (Version: 1.2.119.17994 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.39.5 - Avira Operations GmbH & Co. KG)
Désinstallation de l'imprimante EPSON XP-412 413 415 Series (HKLM\...\EPSON XP-412 413 415 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM\...\{60A3CB9F-4429-4C7A-AA97-77CC4FE10671}) (Version: 4.4.9 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Google Chrome (HKLM\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Manuels EPSON (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.1.0 - SEIKO EPSON CORPORATION)
Microsoft .NET Framework 4.6 Hotfix Rollup (KB3099851) (HKLM\...\{A87B6F1D-8D16-3749-90BE-92F6FADE0BF6}) (Version: 4.6.00129 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x86) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Ontrack® EasyRecovery™ Professional for Windows (HKLM\...\Ontrack® EasyRecovery™ Professional for Windows_is1) (Version: 12.0.0.2 - Kroll Ontrack)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
ShadowExplorer 0.9 (HKLM\...\ShadowExplorer_is1) (Version: 0.9.462.0 - ShadowExplorer.com)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3945864450-1861996533-2604320779-1001_Classes\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\localserver32 -> C:\Program Files\TotalAV\TotalAV.exe => No File
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2018-08-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2018-08-14] (Avira Operations GmbH & Co. KG)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {230F2E83-43ED-4B00-AC74-C2EF4B17386C} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {2C59ECAF-3A27-4640-9F4B-519B05BDD70F} - \Microsoft\Windows\MUI\LPRemove -> No File <==== ATTENTION
Task: {3053C045-2F9B-42F7-9930-322507C3D197} - System32\Tasks\EPSON XP-412 413 415 Series Invitation {1B79D826-194F-4BA7-97B4-E58AB1E96116} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {71FACA7F-8554-47F8-86F6-893F3A68BDBA} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {A63D04B3-0A66-4A78-9955-32E5921F248B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
Task: {AAF68AB3-6E16-4035-95A1-349A6BF161D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2018-08-17] (Google Inc.)
Task: {BC86A455-17A8-46B2-9FA3-7421081D179A} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files\Avira\Antivirus\avgnt.exe [2018-08-14] (Avira Operations GmbH & Co. KG)
Task: {C4DDC95B-BFA1-4398-960D-EF79961EAB22} - System32\Tasks\EPSON XP-412 413 415 Series Update {1B79D826-194F-4BA7-97B4-E58AB1E96116} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {CACCA932-A953-4568-A5C0-BF239F80FBAB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2018-08-17] (Google Inc.)
Task: {E9D28B28-AD7B-4F7C-BFD2-1E00F8A722B6} - System32\Tasks\UpdaterChromeApp2 => "C:\Program Files\Google\Chrome\Application\chrome.exe" www.localdrive.win/
Task: {F7DDF4C3-97E4-4E72-851B-6BAE5B5AE6DA} - System32\Tasks\UpdaterChromeApp => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" www.localdrive.win/
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\EPSON XP-412 413 415 Series Invitation {1B79D826-194F-4BA7-97B4-E58AB1E96116}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE
Task: C:\Windows\Tasks\EPSON XP-412 413 415 Series Update {1B79D826-194F-4BA7-97B4-E58AB1E96116}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE:/EXE:{1B79D826-194F-4BA7-97B4-E58AB1E96116} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2013-09-05 00:14 - 2013-09-05 00:14 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2018-08-17 16:44 - 2018-08-14 14:47 - 001204472 _____ () C:\Program Files\Avira\Antivirus\crypto-42.dll
2018-08-17 16:44 - 2018-08-14 14:47 - 000243352 _____ () C:\Program Files\Avira\Antivirus\ssl-44.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 002260824 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\swiftshader\libglesv2.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 000124248 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\swiftshader\libegl.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 004076888 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\libglesv2.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 000096088 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3945864450-1861996533-2604320779-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 212.27.40.240 - 212.27.40.241
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{46DD47D2-C00F-45E0-826F-6A982876DC35}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{10B403DF-3700-4598-8D91-2877A2F1F434}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{DEEDF4A1-5484-419C-9D0A-1959EB6FE723}] => (Allow) LPort=1688
FirewallRules: [{4B072E33-DC6C-4AA5-A4D3-45FE43E74060}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{E7BF1EA6-5D15-4C06-8F79-B9AB892F9880}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
==================== Restore Points =========================
17-08-2018 16:00:59 Windows Modules Installer
17-08-2018 16:22:27 Windows Update
17-08-2018 16:50:14 Windows Update
17-08-2018 17:10:18 Windows Update
17-08-2018 18:50:32 Installation du package de pilotes : EPSON Imprimantes
17-08-2018 19:01:24 Installed EpsonNet Print
18-08-2018 03:02:05 Windows Update
18-08-2018 11:43:48 Windows Update
18-08-2018 12:48:48 Windows Update
18-08-2018 15:59:02 Windows Update
18-08-2018 20:35:13 Windows Update
23-08-2018 13:19:27 Windows Update
26-08-2018 14:02:03 Windows Update
30-08-2018 12:46:20 Windows Update
==================== Faulty Device Manager Devices =============
Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Coprocesseur
Description: Coprocesseur
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/02/2018 12:13:01 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme WINWORD.EXE version 14.0.7211.5000 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : a94
Heure de début : 01d442a572c2b8e0
Heure de fin : 14
Chemin d’accès de l’application : C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ID de rapport : bea37ec1-ae98-11e8-9b86-00242107871f
Error: (09/02/2018 11:38:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/30/2018 12:41:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/29/2018 05:20:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/29/2018 11:36:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/28/2018 01:43:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/26/2018 05:04:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/26/2018 01:57:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
System errors:
=============
Error: (09/02/2018 11:37:43 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (09/02/2018 11:37:43 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (08/30/2018 12:40:30 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (08/30/2018 12:40:30 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (08/29/2018 05:19:43 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (08/29/2018 05:19:43 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (08/29/2018 11:35:50 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (08/29/2018 11:35:50 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz
Percentage of memory in use: 66%
Total physical RAM: 3071.23 MB
Available physical RAM: 1022.32 MB
Total Virtual: 6140.82 MB
Available Virtual: 3369.45 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:195.31 GB) (Free:162.27 GB) NTFS
Drive d: () (Fixed) (Total:400.76 GB) (Free:384.97 GB) NTFS
\\?\Volume{af42e7c5-a224-11e8-b070-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: 9026388B)
Partition 1: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=400.8 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================
Ran by Myriam (02-09-2018 13:27:01)
Running from C:\Users\Myriam\Desktop
Microsoft Windows 7 Édition Familiale Premium Service Pack 1 (X86) (2018-08-17 13:58:06)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-3945864450-1861996533-2604320779-500 - Administrator - Disabled)
Guest (S-1-5-21-3945864450-1861996533-2604320779-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3945864450-1861996533-2604320779-1002 - Limited - Enabled)
Myriam (S-1-5-21-3945864450-1861996533-2604320779-1001 - Administrator - Enabled) => C:\Users\Myriam
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Microsoft Security Essentials (Enabled - Up to date) {71A27EC9-3DA6-45FC-60A7-004F623C6189}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Microsoft Security Essentials (Enabled - Up to date) {CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Acrobat Reader DC - Français (HKLM\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.011.20058 - Adobe Systems Incorporated)
Avira (HKLM\...\{532da46c-2aa3-4588-a4a2-b02bc641bf95}) (Version: 1.2.119.17994 - Avira Operations GmbH & Co. KG)
Avira (HKLM\...\{9620D4C2-CF5B-4DBE-8103-CC9DAB0871C6}) (Version: 1.2.119.17994 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.39.5 - Avira Operations GmbH & Co. KG)
Désinstallation de l'imprimante EPSON XP-412 413 415 Series (HKLM\...\EPSON XP-412 413 415 Series) (Version: - SEIKO EPSON Corporation)
EPSON Scan (HKLM\...\EPSON Scanner) (Version: - Seiko Epson Corporation)
Epson Software Updater (HKLM\...\{60A3CB9F-4429-4C7A-AA97-77CC4FE10671}) (Version: 4.4.9 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{3E31400D-274E-4647-916C-2CACC3741799}) (Version: 2.6.0 - SEIKO EPSON CORPORATION)
Google Chrome (HKLM\...\Google Chrome) (Version: 68.0.3440.106 - Google Inc.)
Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Manuels EPSON (HKLM\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.0.1.0 - SEIKO EPSON CORPORATION)
Microsoft .NET Framework 4.6 Hotfix Rollup (KB3099851) (HKLM\...\{A87B6F1D-8D16-3749-90BE-92F6FADE0BF6}) (Version: 4.6.00129 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2010 (HKLM\...\Office14.PROPLUS) (Version: 14.0.7015.1000 - Microsoft Corporation)
Microsoft Security Essentials (HKLM\...\Microsoft Security Client) (Version: 4.10.209.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x86) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86)) (Version: 10.0.50903 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x86) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x86) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Ontrack® EasyRecovery™ Professional for Windows (HKLM\...\Ontrack® EasyRecovery™ Professional for Windows_is1) (Version: 12.0.0.2 - Kroll Ontrack)
Service Pack 2 for Microsoft Office 2010 (KB2687455) 32-Bit Edition (HKLM\...\{90140000-0011-0000-0000-0000000FF1CE}_Office14.PROPLUS_{DE28B448-32E8-4E8F-84F0-A52B21A49B5B}) (Version: - Microsoft)
ShadowExplorer 0.9 (HKLM\...\ShadowExplorer_is1) (Version: 0.9.462.0 - ShadowExplorer.com)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
CustomCLSID: HKU\S-1-5-21-3945864450-1861996533-2604320779-1001_Classes\CLSID\{d79b57ed-727c-4ab8-ba67-e7c6fd30fac1}\localserver32 -> C:\Program Files\TotalAV\TotalAV.exe => No File
ContextMenuHandlers1: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2018-08-14] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers2: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers4: [EPP] -> {09A47860-11B0-4DA5-AFA5-26D86198A780} => C:\Program Files\Microsoft Security Client\shellext.dll [2016-11-14] (Microsoft Corporation)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2018-08-14] (Avira Operations GmbH & Co. KG)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {230F2E83-43ED-4B00-AC74-C2EF4B17386C} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {2C59ECAF-3A27-4640-9F4B-519B05BDD70F} - \Microsoft\Windows\MUI\LPRemove -> No File <==== ATTENTION
Task: {3053C045-2F9B-42F7-9930-322507C3D197} - System32\Tasks\EPSON XP-412 413 415 Series Invitation {1B79D826-194F-4BA7-97B4-E58AB1E96116} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {71FACA7F-8554-47F8-86F6-893F3A68BDBA} - System32\Tasks\Microsoft\Microsoft Antimalware\MpIdleTask => C:\Program Files\Microsoft Security Client\\MpCmdRun.exe [2016-11-14] (Microsoft Corporation)
Task: {A63D04B3-0A66-4A78-9955-32E5921F248B} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-03-21] (Adobe Systems Incorporated)
Task: {AAF68AB3-6E16-4035-95A1-349A6BF161D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2018-08-17] (Google Inc.)
Task: {BC86A455-17A8-46B2-9FA3-7421081D179A} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files\Avira\Antivirus\avgnt.exe [2018-08-14] (Avira Operations GmbH & Co. KG)
Task: {C4DDC95B-BFA1-4398-960D-EF79961EAB22} - System32\Tasks\EPSON XP-412 413 415 Series Update {1B79D826-194F-4BA7-97B4-E58AB1E96116} => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE [2013-02-28] (SEIKO EPSON CORPORATION)
Task: {CACCA932-A953-4568-A5C0-BF239F80FBAB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2018-08-17] (Google Inc.)
Task: {E9D28B28-AD7B-4F7C-BFD2-1E00F8A722B6} - System32\Tasks\UpdaterChromeApp2 => "C:\Program Files\Google\Chrome\Application\chrome.exe" www.localdrive.win/
Task: {F7DDF4C3-97E4-4E72-851B-6BAE5B5AE6DA} - System32\Tasks\UpdaterChromeApp => "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" www.localdrive.win/
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\EPSON XP-412 413 415 Series Invitation {1B79D826-194F-4BA7-97B4-E58AB1E96116}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE
Task: C:\Windows\Tasks\EPSON XP-412 413 415 Series Update {1B79D826-194F-4BA7-97B4-E58AB1E96116}.job => C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FTSLEE.EXE:/EXE:{1B79D826-194F-4BA7-97B4-E58AB1E96116} /F:UpdateSystèmeĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
==================== Loaded Modules (Whitelisted) ==============
2013-09-05 00:14 - 2013-09-05 00:14 - 004300456 _____ () C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF
2018-08-17 16:44 - 2018-08-14 14:47 - 001204472 _____ () C:\Program Files\Avira\Antivirus\crypto-42.dll
2018-08-17 16:44 - 2018-08-14 14:47 - 000243352 _____ () C:\Program Files\Avira\Antivirus\ssl-44.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 002260824 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\swiftshader\libglesv2.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 000124248 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\swiftshader\libegl.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 004076888 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\libglesv2.dll
2018-08-17 16:15 - 2018-08-08 02:55 - 000096088 _____ () C:\Program Files\Google\Chrome\Application\68.0.3440.106\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-3945864450-1861996533-2604320779-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Myriam\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 212.27.40.240 - 212.27.40.241
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{46DD47D2-C00F-45E0-826F-6A982876DC35}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
FirewallRules: [{10B403DF-3700-4598-8D91-2877A2F1F434}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
FirewallRules: [{DEEDF4A1-5484-419C-9D0A-1959EB6FE723}] => (Allow) LPort=1688
FirewallRules: [{4B072E33-DC6C-4AA5-A4D3-45FE43E74060}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
FirewallRules: [{E7BF1EA6-5D15-4C06-8F79-B9AB892F9880}] => (Allow) C:\Program Files\KMSpico\Service_KMS.exe
==================== Restore Points =========================
17-08-2018 16:00:59 Windows Modules Installer
17-08-2018 16:22:27 Windows Update
17-08-2018 16:50:14 Windows Update
17-08-2018 17:10:18 Windows Update
17-08-2018 18:50:32 Installation du package de pilotes : EPSON Imprimantes
17-08-2018 19:01:24 Installed EpsonNet Print
18-08-2018 03:02:05 Windows Update
18-08-2018 11:43:48 Windows Update
18-08-2018 12:48:48 Windows Update
18-08-2018 15:59:02 Windows Update
18-08-2018 20:35:13 Windows Update
23-08-2018 13:19:27 Windows Update
26-08-2018 14:02:03 Windows Update
30-08-2018 12:46:20 Windows Update
==================== Faulty Device Manager Devices =============
Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Coprocesseur
Description: Coprocesseur
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Event log errors: =========================
Application errors:
==================
Error: (09/02/2018 12:13:01 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme WINWORD.EXE version 14.0.7211.5000 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : a94
Heure de début : 01d442a572c2b8e0
Heure de fin : 14
Chemin d’accès de l’application : C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
ID de rapport : bea37ec1-ae98-11e8-9b86-00242107871f
Error: (09/02/2018 11:38:26 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/30/2018 12:41:11 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/29/2018 05:20:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/29/2018 11:36:58 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/28/2018 01:43:08 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/26/2018 05:04:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (08/26/2018 01:57:44 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
System errors:
=============
Error: (09/02/2018 11:37:43 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (09/02/2018 11:37:43 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (08/30/2018 12:40:30 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (08/30/2018 12:40:30 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (08/29/2018 05:19:43 PM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (08/29/2018 05:19:43 PM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
Error: (08/29/2018 11:35:50 AM) (Source: atikmdag) (EventID: 10261) (User: )
Description: Display is not active
Error: (08/29/2018 11:35:50 AM) (Source: atikmdag) (EventID: 19468) (User: )
Description: CPLIB :: General - Invalid Parameter
==================== Memory info ===========================
Processor: Intel(R) Pentium(R) Dual CPU E2220 @ 2.40GHz
Percentage of memory in use: 66%
Total physical RAM: 3071.23 MB
Available physical RAM: 1022.32 MB
Total Virtual: 6140.82 MB
Available Virtual: 3369.45 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:195.31 GB) (Free:162.27 GB) NTFS
Drive d: () (Fixed) (Total:400.76 GB) (Free:384.97 GB) NTFS
\\?\Volume{af42e7c5-a224-11e8-b070-806e6f6e6963}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 596.2 GB) (Disk ID: 9026388B)
Partition 1: (Not Active) - (Size=195.3 GB) - (Type=07 NTFS)
Partition 2: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=400.8 GB) - (Type=07 NTFS)
==================== End of Addition.txt ============================