Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 09.12.2018
Exécuté par PC (11-12-2018 19:11:23)
Exécuté depuis C:\Users\PC\Desktop
Windows 10 Home Version 1803 17134.407 (X64) (2018-05-22 12:04:22)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-2855313945-304041659-1602283824-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2855313945-304041659-1602283824-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2855313945-304041659-1602283824-1005 - Limited - Enabled)
Invité (S-1-5-21-2855313945-304041659-1602283824-501 - Limited - Disabled)
PC (S-1-5-21-2855313945-304041659-1602283824-1001 - Administrator - Enabled) => C:\Users\PC
WDAGUtilityAccount (S-1-5-21-2855313945-304041659-1602283824-504 - Limited - Disabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Avira Antivirus (Disabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Disabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

µTorrent (HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\uTorrent) (Version: 3.5.4.44846 - BitTorrent Inc.)
7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
Age of Empires: Definitive Edition [FULL REMOVAL] (HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\{1F36588A-148D-4BED-AD83-12C63E1F780E}_is1) (Version: 1.3.5101.2 - Microsoft Studios)
ANT Drivers Installer x64 (HKLM\...\{6301BFFA-5192-498B-8DA5-7790B46F3F32}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)
ASUS Share Link (HKLM-x32\...\{c3bcc1e3-f950-439c-bcae-f01283e9f2a4}_is1) (Version: 1.0.27.0911 - ASUSTEK)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 70.0.917.103 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden
Avira (HKLM-x32\...\{0C16993B-1BAF-489D-8BF7-8D38B1E113BB}) (Version: 1.2.115.14232 - Avira Operations GmbH & Co. KG) Hidden
Avira (HKLM-x32\...\{b883705a-0784-4d1e-9766-601e8d66945a}) (Version: 1.2.115.14232 - Avira Operations GmbH & Co. KG)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.43.24 - Avira Operations GmbH & Co. KG)
Betternet for Windows (HKLM-x32\...\{2E77104D-96E1-4A9C-86F2-C7CF4C70EB35}) (Version: 3.6.0.0 - Betternet Technologies Inc.)
Brother MFL-Pro Suite DCP-J140W (HKLM-x32\...\{2FF959E3-FFE4-46C4-96DA-03F26BCFEFCC}) (Version: 1.1.5.0 - Brother Industries, Ltd.)
Camfrog Web Advanced 2.0 ActiveX Plugin (remove only) (HKLM-x32\...\CFWebAdvancedU2) (Version: - )
CCleaner (HKLM\...\CCleaner) (Version: 5.26 - Piriform)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0275 - Disc Soft Ltd)
dBpoweramp (HKLM-x32\...\dBpoweramp) (Version: Release 16.0 - Illustrate)
dBpoweramp [Multi Encoder] Codec (HKLM-x32\...\dBpoweramp [Multi Encoder] Codec) (Version: Release 4 - Illustrate)
DVDFab (x64) 10.0.9.2 (10/05/2018) (HKLM-x32\...\DVDFab 10(x64)) (Version: 10.0.9.2 - DVDFab.cn.)
Elevated Installer (HKLM-x32\...\{6B3B3A8E-38BF-40C3-A5C3-156467AF0068}) (Version: 6.7.2.0 - Garmin Ltd or its subsidiaries) Hidden
Exact Audio Copy 1.3 (HKLM-x32\...\Exact Audio Copy) (Version: 1.3 - Andre Wiethoff)
Far Cry 5 (HKLM-x32\...\{FC45BA43-8F9A-41CF-BD12-89F3E1D8EE01}_is1) (Version: 1.4.0.0 - Ubisoft)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.1.0.5096 - Foxit Software Inc.)
Galerie de photos (HKLM-x32\...\{446CC8CE-0E90-44F7-ADD0-774B243EF090}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Garmin Express (HKLM-x32\...\{5e03a6d1-c5b2-48e0-8827-6f9d2fae79b1}) (Version: 6.7.2.0 - Garmin Ltd or its subsidiaries)
Garmin Express (HKLM-x32\...\{EAD45040-85CD-42A8-BEA7-5FF268626DD5}) (Version: 6.7.2.0 - Garmin Ltd or its subsidiaries) Hidden
Gears of War 4 [FULL REMOVAL] (HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\{99C9D5F5-E53A-41EF-9DFC-1E319FF6B33E}_is1) (Version: 12.0.0.2 - Microsoft Studios)
GIMP 2.10.6 (HKLM\...\GIMP-2_is1) (Version: 2.10.6 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.80 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden
Herramientas de corrección de Microsoft Office 2016: español (HKLM\...\{90160000-001F-0C0A-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1017 - Intel Corporation)
Intel(R) Network Connections 22.3.108.0 (HKLM\...\PROSetDX) (Version: 22.3.108.0 - Intel)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.10.0.1016 - Intel Corporation)
Intel® CCF Manager (HKLM-x32\...\{0f3d8dd5-54af-4404-a01c-4967e485a065}) (Version: 3.0.13.2211 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IP-TV Player 49.1 (HKLM-x32\...\IP-TV_Player) (Version: 49.1 - ADSL Club Co Ltd)
IsoBuster 4.1 (HKLM-x32\...\IsoBuster_is1) (Version: 4.1 - Smart Projects)
Logiciel pour périphérique à chipset Intel® (HKLM-x32\...\{f3e3c5dd-edd0-406b-8aa2-ce5acb93660e}) (Version: 10.0.14 - Intel(R) Corporation) Hidden
Logitech - Assistant pour jeux vidéo 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.)
Medieval CUE Splitter (HKLM-x32\...\{B96D2269-568B-4CBF-9332-12FAE8B158F7}) (Version: 1.2.0 - Medieval Software)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2016 (HKLM\...\Office16.PROPLUS) (Version: 16.0.4266.1001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\OneDriveSetup.exe) (Version: 18.212.1021.0008 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{f9b04b37-35d5-4a19-a51b-fcf4a8734851}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40649 (HKLM-x32\...\{5d0723d3-cff7-4e07-8d0b-ada737deb5e6}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40649 (HKLM-x32\...\{35b83883-40fa-423c-ae73-2aff7e1ea820}) (Version: 12.0.40649.5 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mises à jour NVIDIA 25.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 25.0.0.0 - NVIDIA Corporation) Hidden
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{A17946CA-18E5-4CF0-8D55-A56D804718F8}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{ED6C77F9-4D7E-447C-9EC0-9A212D075535}) (Version: 16.4.3505.0912 - Microsoft Corporation) Hidden
Mozilla Firefox 64.0 (x64 fr) (HKLM\...\Mozilla Firefox 64.0 (x64 fr)) (Version: 64.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 53.0.3 - Mozilla)
Mozilla Thunderbird 60.3.1 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 60.3.1 (x86 fr)) (Version: 60.3.1 - Mozilla)
MSI Afterburner 3.0.1 (HKLM-x32\...\Afterburner) (Version: 3.0.1 - MSI Co., LTD)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 3.0.0.05 - MSI)
NVIDIA GeForce Experience 3.6.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.6.0.74 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 399.24 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.37.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.4 - NVIDIA Corporation)
NVIDIA Pilote du contrôleur 3D Vision 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA Pilote graphique 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 399.24 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.4.10.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OpenVPN 2.3.6-I001 (HKLM-x32\...\OpenVPN) (Version: 2.3.6-I001 - )
Outils de vérification linguistique 2016 de Microsoft Office - Français (HKLM\...\{90160000-001F-040C-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Panneau de configuration NVIDIA 399.24 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 399.24 - NVIDIA Corporation) Hidden
PeerBlock 1.1+ (r691) (HKLM\...\{015C5B35-B678-451C-9AEE-821E8D69621C}_is1) (Version: 1.1.0.691 - PeerBlock, LLC)
Plex Media Server (HKLM-x32\...\{1b8e71fc-44b8-4550-9376-72db5f2746ce}) (Version: 1.11.3.4803 - Plex, Inc.)
Plex Media Server (HKLM-x32\...\{617D6B5B-FCAE-43F5-9B09-73798070833E}) (Version: 1.11.3803 - Plex, Inc.) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8281 - Realtek Semiconductor Corp.)
RivaTuner Statistics Server 6.1.2 (HKLM-x32\...\RTSS) (Version: 6.1.2 - Unwinder)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0370 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController) (Version: 3.6.0.74 - NVIDIA Corporation) Hidden
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.)
Sniper: Ghost Warrior 3 (HKLM-x32\...\Sniper: Ghost Warrior 3_is1) (Version: - )
SoulseekQt version 2017.2.20 (HKLM-x32\...\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1) (Version: 2017.2.20 - Soulseek LLC)
Spectro (HKLM-x32\...\{1F8D186D-8C5C-4589-BC28-1A8964CA74A6}) (Version: 1.0.93 - )
State of Decay 2 [FULL REMOVAL] (HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\{CA2279C5-4639-4D05-B274-8792AB07AC35}_is1) (Version: 1.3160.34.2 - Microsoft Studios)
STCServ (HKLM\...\{A954D353-9DAF-4916-8E71-F1E959EBCD1E}) (Version: 3.0.0.1783 - Intel Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Stopping Plex (HKLM-x32\...\{E70B9551-B5D4-41BC-AB7C-EE44025F77DC}) (Version: 1.11.3803 - Plex, Inc.) Hidden
Super macro 3.1 (HKLM-x32\...\Super macro) (Version: 3.1 - )
Taalprogramma's voor Microsoft Office 2016 - Nederlands (HKLM\...\{90160000-001F-0413-1000-0000000FF1CE}) (Version: 16.0.4266.1001 - Microsoft Corporation) Hidden
TemWebRTCPlugin (HKLM-x32\...\{9F09ABD7-9BE9-4683-8006-080B6CD0D039}) (Version: 0.8.889 - Temasys)
TV 3L PC version 2.1.6.0 (HKLM-x32\...\{D8CE29B4-FEA1-46F1-B773-1B5FE502C740}_is1) (Version: 2.1.6.0 - Smart PC Soft, LTD.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{C5FDDED7-DEC7-48B4-AFD8-DFB8A0FD199A}) (Version: 2.51.0.0 - Microsoft Corporation)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VSO Blu-ray Converter Ultimate 4 (HKLM-x32\...\{{09C9A74C-783C-425A-AD2E-F0EA3DE67247}_is1) (Version: 4.0.0.84 - VSO Software)
Web Companion (HKLM-x32\...\{db5e9ca0-df14-415c-bf2d-2d7bd7cd6398}) (Version: 4.4.1950.3825 - Lavasoft)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3505.0912 - Microsoft Corporation)
WinRAR 5.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
Wolfenstein II (HKLM-x32\...\Wolfenstein II_is1) (Version: - )
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Wondershare Video Converter Ultimate(Build 10.2.3.163) (HKLM-x32\...\Video Converter Ultimate_is1) (Version: 10.2.3.163 - Wondershare Software)
Worms W.M.D (HKLM-x32\...\Worms W.M.D_is1) (Version: - )

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-2855313945-304041659-1602283824-1001_Classes\CLSID\{9486aaf1-0930-362a-962d-8e6908739c817}\InprocServer32 -> 0x16466D5B99B4D30108A096B6ECB5D301030000000E00000000000000 => Pas de fichier
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2017-06-23] (Tonec Inc.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-04-16] (Foxit Software Inc.)
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-11-22] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell1.dll [2009-12-14] (Elaborate Bytes AG)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers2: [VirtualCloneDrive] -> {B7056B8E-4F99-44f8-8CBD-282390FE5428} => C:\Program Files (x86)\Elaborate Bytes\VirtualCloneDrive\ElbyVCDShell1.dll [2009-12-14] (Elaborate Bytes AG)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-09-06] (NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-04-16] (Foxit Software Inc.)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-11-22] (Avira Operations GmbH & Co. KG)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2014-12-02] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2014-12-02] (Alexander Roshal)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {161F02D8-5A36-4EE2-BF45-22883A52E8FB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {173B7BAD-BCB2-4581-914E-94180D1D988D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-06-08] (NVIDIA Corporation)
Task: {1E9B3B20-8EAA-4CE3-8BCF-CD5D48E537E4} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-11] (Adobe Systems Incorporated)
Task: {252CD04B-FBA7-4EFF-A22B-BCBAA875C38A} - System32\Tasks\Trojan Remover => C:\Program Files\Loaris Trojan Remover\ltr.exe
Task: {257B8DE6-197D-4041-A933-575E5317F714} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-21] (Piriform Ltd)
Task: {2EF850E3-7E21-43EC-8D8C-B1D6BCD3AD14} - System32\Tasks\Avast TUNEUP Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
Task: {318F6429-B6BE-448E-99A5-17E3715C725E} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-06-08] (NVIDIA Corporation)
Task: {3476845E-15DF-499D-AF00-08582117FB68} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2018-11-22] (Avira Operations GmbH & Co. KG)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\WINDOWS\System32\AutoWorkplace.exe
Task: {39774BD9-18A7-413B-8754-88DA711F98F6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-05] (Google Inc.)
Task: {40D1AF56-04D1-4937-BECB-F2463B343EB4} - System32\Tasks\IntelBootstrapCCDashExe => C:\Program Files\Intel\ConnectCenter\bin\ICCLauncher.exe [2015-03-16] (Intel® Corporation)
Task: {41BEB935-5147-4F99-B1B2-6FD732013D9F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-09-15] (Microsoft Corporation)
Task: {42380D36-5C72-4F9B-B23B-804FC8A2C321} - System32\Tasks\S-1-5-21-2855313945-304041659-1602283824-1001\DataSenseLiveTileTask => C:\WINDOWS\System32\DataUsageLiveTileTask.exe [2018-04-12] (Microsoft Corporation)
Task: {58D2A061-6FFD-4285-AB8A-2D304BB8F10D} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-08] (NVIDIA Corporation)
Task: {5A09C82E-FA15-46A1-9558-194D44E8879D} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [2018-08-13] ()
Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] ()
Task: {6C5A1A6A-FE41-4187-A522-8FF41D491315} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
Task: {81106FB4-5FAD-47DF-836A-781CE6924250} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-09-17] (AVAST Software)
Task: {849B8D46-02D9-4A2D-AAA8-2D24F22414C5} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2018-10-29] (AVAST Software)
Task: {8653B89D-5E4D-4E49-83A5-99C3BCD2DD07} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-08] (NVIDIA Corporation)
Task: {9B9C0515-CDBE-421A-9719-3A723A193124} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-08] (NVIDIA Corporation)
Task: {9D68D774-8D85-4999-9A3D-60C8AF7E2C85} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-08] (NVIDIA Corporation)
Task: {A337B7D9-8385-4FCD-B9D9-324898AB0F12} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-08] (NVIDIA Corporation)
Task: {A501743B-026E-49AA-AE81-D1D5EC3AB510} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [2015-07-31] (Microsoft Corporation)
Task: {ABFA5129-F349-43B8-8ED3-1D2893D9CEE9} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-06-08] (NVIDIA Corporation)
Task: {ACD8AAD1-3AFF-46E7-A34B-2045FBCFAE38} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2015-07-31] (Microsoft Corporation)
Task: {B47F80D0-4E02-477B-9D7D-2E7DBD5A8D66} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-09-15] (Microsoft Corporation)
Task: {C2CC31B0-D83C-41F1-82CA-FFE6E5F0AD67} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-06-05] (Google Inc.)
Task: {C6AF3935-C1BA-4E27-8E1D-8E6706AEB93A} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-09-17] (AVAST Software)
Task: {CEB0AB3C-B405-4E4A-9D1F-269703BC73A6} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-11] (Adobe Systems Incorporated)
Task: {D9734B4E-A998-4159-8754-DFCCC1F45B8B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-09-15] (Microsoft Corporation)
Task: {E70B91FA-9C2C-4E21-A245-0C0934B7ABB7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1807.18075-0\MpCmdRun.exe [2018-09-15] (Microsoft Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Raccourcis & WMI ========================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)


Shortcut: C:\Users\PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DVDFab 10 (x64)\DVDFab (x64) Online.lnk -> hxxp://www.dvdfab.cn/?s=dvdfab10&p=x64&v=10.0.9.

==================== Modules chargés (Avec liste blanche) ==============

2018-04-12 00:34 - 2018-04-12 00:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll
2018-04-12 00:34 - 2018-04-12 00:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2017-06-25 19:36 - 2014-01-28 04:16 - 000936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
2017-06-26 08:57 - 2017-06-08 02:45 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000025888 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
2018-08-24 11:44 - 2018-11-17 09:19 - 000017696 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.Service.Logger.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000037664 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WcfService.dll
2018-11-14 09:24 - 2018-11-01 07:55 - 002185216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2018-10-04 08:11 - 2018-10-04 08:13 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.76.0_x64__kzf8qxf38zg5c\ImagePipelineNative.dll
2018-12-11 17:27 - 2018-12-11 17:29 - 000060416 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.76.0_x64__kzf8qxf38zg5c\ChakraBridge.dll
2018-12-11 17:27 - 2018-12-11 17:29 - 000182272 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_14.35.76.0_x64__kzf8qxf38zg5c\SkypeBackgroundHost.exe
2018-12-11 17:29 - 2018-12-11 17:30 - 034870272 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Video.UI.exe
2018-12-11 17:29 - 2018-12-11 17:30 - 000292352 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\SharedUI.dll
2017-12-01 09:28 - 2017-12-01 09:28 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll
2018-12-11 17:29 - 2018-12-11 17:30 - 004202208 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-12-11 17:29 - 2018-12-11 17:30 - 005967872 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\EntCommon.dll
2018-12-11 17:29 - 2018-12-11 17:30 - 009072128 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18102.12011.0_x64__8wekyb3d8bbwe\EntPlat.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 000908568 _____ () C:\Program Files\Logitech Gaming Software\libGLESv2.dll
2017-10-20 04:29 - 2017-10-20 04:29 - 001096824 _____ () C:\Program Files\Logitech Gaming Software\platforms\qwindows.dll
2015-03-07 01:07 - 2015-03-07 01:07 - 000060184 _____ () C:\Program Files\Logitech Gaming Software\libEGL.dll
2017-10-20 04:29 - 2017-10-20 04:29 - 000241784 _____ () C:\Program Files\Logitech Gaming Software\imageformats\qjpeg.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000077824 _____ () C:\Program Files\Logitech Gaming Software\LAClient\zlib.dll
2017-10-20 04:02 - 2017-10-20 04:02 - 000144896 _____ () C:\Program Files\Logitech Gaming Software\LAClient\libssh2.dll
2018-11-09 07:11 - 2018-10-30 19:06 - 001057056 _____ () M:\Program Files (x86)\Steam\bin\cef\cef.win7x64\SDL2.dll
2018-10-12 22:07 - 2018-09-23 01:00 - 102804768 _____ () M:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libcef.dll
2016-12-16 21:03 - 2016-12-16 21:03 - 000054488 _____ () C:\Program Files\CCleaner\branding.dll
2016-12-21 18:49 - 2016-12-21 18:49 - 000069632 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll
2018-10-12 22:07 - 2018-09-23 01:00 - 004866336 _____ () M:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libglesv2.dll
2018-10-12 22:07 - 2018-09-23 01:00 - 000116000 _____ () M:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libegl.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2018-11-16 09:24 - 2018-11-16 09:27 - 066031104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 003715072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2018-08-17 14:51 - 2018-08-17 14:52 - 002480640 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\opencv_imgproc320.dll
2018-08-17 14:51 - 2018-08-17 14:52 - 002280960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\opencv_core320.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll
2018-03-30 08:36 - 2018-03-30 08:41 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll
2017-12-15 17:49 - 2017-12-15 18:00 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 000036352 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 014097920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 003569152 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 002863616 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2018-08-31 18:19 - 2018-08-31 18:20 - 000973312 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2018-07-26 20:34 - 2018-07-26 20:35 - 004584960 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-11-16 09:24 - 2018-11-16 09:27 - 000146432 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18091.17210.0_x64__8wekyb3d8bbwe\SKU.dll
2018-11-06 11:09 - 2018-11-06 11:09 - 000194048 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll
2018-11-06 11:09 - 2018-11-06 11:09 - 002538056 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-11-06 11:09 - 2018-11-06 11:09 - 001754112 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11810.1001.12.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.dll
2018-11-29 06:37 - 2018-11-29 06:38 - 032247296 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18102.10531.0_x64__8wekyb3d8bbwe\Music.UI.exe
2018-11-29 06:37 - 2018-11-29 06:38 - 000292352 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18102.10531.0_x64__8wekyb3d8bbwe\SharedUI.dll
2017-12-01 09:28 - 2017-12-01 09:28 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18102.10531.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll
2018-11-29 06:37 - 2018-11-29 06:38 - 004202208 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18102.10531.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2018-11-29 06:37 - 2018-11-29 06:38 - 005967872 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18102.10531.0_x64__8wekyb3d8bbwe\EntCommon.dll
2018-11-22 10:52 - 2018-11-22 12:52 - 000244672 _____ () C:\Program Files (x86)\Avira\Antivirus\ssl-44.dll
2018-11-22 10:52 - 2018-11-22 12:52 - 001205792 _____ () C:\Program Files (x86)\Avira\Antivirus\crypto-42.dll
2017-06-25 19:36 - 2018-12-11 17:33 - 000033280 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll
2017-06-25 19:36 - 2014-01-28 04:16 - 000104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000083432 _____ () C:\Program Files (x86)\Plex\Plex Media Server\zlib.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000203240 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libidn.dll
2017-06-26 08:57 - 2017-06-08 02:45 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 001083368 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxml2.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000115688 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_core-vc80-3_0.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000059880 _____ () C:\Program Files (x86)\Plex\Plex Media Server\soci_sqlite3-vc80-3_0.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000025576 _____ () C:\Program Files (x86)\Plex\Plex Media Server\lyric_lite.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000772072 _____ () C:\Program Files (x86)\Plex\Plex Media Server\tag.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 001741288 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_imgproc2411.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 001962984 _____ () C:\Program Files (x86)\Plex\Plex Media Server\opencv_core2411.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 001549104 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libstdc++-6.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000127136 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libgcc_s_dw2-1.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000050152 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_socket.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000071656 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ssl.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000024552 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_hashlib.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000041448 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\simplejson\_speedups.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000930280 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\etree.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000190952 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libxslt.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000074728 _____ () C:\Program Files (x86)\Plex\Plex Media Server\libexslt.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000218088 _____ () C:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\objectify.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000018920 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\select.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000095720 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ctypes.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000143336 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\pyexpat.pyd
2018-02-15 19:09 - 2018-02-15 19:09 - 000694248 _____ () C:\Program Files (x86)\Plex\Plex Media Server\DLLs\unicodedata.pyd
2018-11-09 07:11 - 2018-10-30 19:06 - 000879904 _____ () M:\Program Files (x86)\Steam\SDL2.dll
2018-11-29 06:28 - 2018-11-26 21:29 - 002649376 _____ () M:\Program Files (x86)\Steam\video.dll
2018-07-25 08:38 - 2016-09-01 02:02 - 004969248 _____ () M:\Program Files (x86)\Steam\v8.dll
2018-07-25 08:38 - 2017-12-20 02:43 - 000351520 _____ () M:\Program Files (x86)\Steam\libavresample-3.dll
2018-07-25 08:38 - 2017-12-20 02:43 - 000695584 _____ () M:\Program Files (x86)\Steam\libavformat-57.dll
2018-07-25 08:38 - 2017-12-20 02:43 - 000847136 _____ () M:\Program Files (x86)\Steam\libavutil-55.dll
2018-07-25 08:38 - 2017-12-20 02:43 - 000783648 _____ () M:\Program Files (x86)\Steam\libswscale-4.dll
2018-07-25 08:38 - 2016-09-01 02:02 - 001195296 _____ () M:\Program Files (x86)\Steam\icuuc.dll
2018-07-25 08:38 - 2016-09-01 02:02 - 001563936 _____ () M:\Program Files (x86)\Steam\icui18n.dll
2018-07-25 08:38 - 2017-12-20 02:43 - 005137696 _____ () M:\Program Files (x86)\Steam\libavcodec-57.dll
2018-11-29 06:28 - 2018-11-26 21:29 - 001028384 _____ () M:\Program Files (x86)\Steam\bin\chromehtml.DLL
2018-07-25 08:38 - 2016-07-04 23:17 - 000266560 _____ () M:\Program Files (x86)\Steam\openvr_api.dll
2018-02-15 19:09 - 2018-02-15 19:09 - 000064488 _____ () C:\Program Files (x86)\Plex\Plex Media Server\TeVii.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000120608 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.AppCore.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000105248 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Utils.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000373536 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SearchProtect.Business.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000059168 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.adblocker.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000067360 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.Events.dll
2018-08-24 11:44 - 2018-11-17 09:19 - 000084256 _____ () C:\Program Files (x86)\Lavasoft\Web Companion\Application\Lavasoft.SysInfo.dll
2017-04-18 04:45 - 2017-04-18 04:45 - 001227264 _____ () C:\Program Files (x86)\Garmin\Express\CefSharp.Core.dll
2017-04-09 22:49 - 2017-04-09 22:49 - 067109376 _____ () C:\Program Files (x86)\Garmin\Express\libcef.dll
2017-05-08 09:35 - 2017-05-08 09:35 - 000325632 _____ () C:\Program Files (x86)\Garmin\Express\GpsImgWrapper.dll
2018-08-13 14:50 - 2018-08-13 14:50 - 000073216 _____ () C:\Program Files (x86)\Garmin\Express\FixBootSector.dll
2017-04-18 04:45 - 2017-04-18 04:45 - 000808960 _____ () C:\Program Files (x86)\Garmin\Express\CefSharp.BrowserSubprocess.Core.dll
2017-04-09 22:49 - 2017-04-09 22:49 - 002246144 _____ () C:\Program Files (x86)\Garmin\Express\libglesv2.dll
2017-04-09 22:49 - 2017-04-09 22:49 - 000079360 _____ () C:\Program Files (x86)\Garmin\Express\libegl.dll
2017-07-08 17:12 - 2009-02-27 15:38 - 000139264 ____R () C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2017-07-08 17:13 - 2017-11-07 18:55 - 000137728 _____ () C:\Program Files (x86)\ControlCenter4\BrCcAssoc.dll
2018-05-24 09:57 - 2017-11-07 18:55 - 000440832 _____ () C:\Program Files (x86)\ControlCenter4\Track.dll
2017-07-08 17:13 - 2017-11-07 19:04 - 000096256 _____ () C:\Program Files (x86)\ControlCenter4\BrCcLFre.dll
2017-07-08 17:13 - 2017-08-18 10:23 - 000087552 _____ () C:\Program Files (x86)\ControlCenter4\BrCcDlgRc.dll
2017-07-08 17:13 - 2017-08-18 10:23 - 017974784 _____ () C:\Program Files (x86)\ControlCenter4\BrCcGrImg.dll
2018-06-28 11:26 - 2016-07-21 09:54 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2018-06-28 11:26 - 2017-03-23 08:49 - 001506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2014-03-20 10:43 - 2014-03-20 10:43 - 001241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\Nouveau dossier:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Compressed:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Documents:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Music:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Programs:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Rajout d'un "BON PLAN" EN BAS DE CE - accroche_moi_files:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Video:Shareaza.GUID [16]
AlternateDataStreams: C:\Users\PC\Downloads\Wr520-ED:Shareaza.GUID [16]

==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)


==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2855313945-304041659-1602283824-1001\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts contenu: ==========================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2013-08-22 14:25 - 2018-11-15 17:43 - 000000956 _____ C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1 license.avira.com
127.0.0.1 62.146.210.6
127.0.0.1 62.146.210.10

==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-2855313945-304041659-1602283824-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\PC\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\880156.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.


==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [{90B625B2-08D8-4D1C-89E8-365324087EB7}] => (Allow) C:\Program Files (x86)\IP-TV Player\IpTvPlayer.exe
FirewallRules: [{14FA7026-22C6-4AC4-88B7-2B047934956F}] => (Allow) C:\Program Files (x86)\IP-TV Player\IpTvPlayer.exe
FirewallRules: [{5B1061BD-B294-445D-9E0D-B002D9856CA0}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe
FirewallRules: [{FF66D29B-A6CD-4485-84C5-1754DED624F5}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe
FirewallRules: [{694E77B3-E289-468E-B785-86E65D2959C9}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe
FirewallRules: [{092BF5DA-9AF6-429E-AD26-FBCB2F8E824F}] => (Allow) C:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe
FirewallRules: [{FF2FACD0-4EF9-40A0-8124-DDCF46DB580D}] => (Allow) C:\Program Files (x86)\Shareaza\Shareaza.exe
FirewallRules: [{130496F3-62F3-4D5F-A7B2-2DF484ADC2B7}] => (Allow) C:\Program Files (x86)\Shareaza\Shareaza.exe
FirewallRules: [{7AC6A364-3884-4E28-A380-B0C1B320BAF2}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{4DF0739B-24AD-447E-A26D-92D833EA0261}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6E16AAB4-D9C7-426C-AA49-2DA81B03F026}] => (Allow) M:\Program Files (x86)\Steam\steamapps\common\Days of War\DaysOfWar.exe
FirewallRules: [{F270166D-C23A-436C-B5AC-218F4AB89DF7}] => (Allow) M:\Program Files (x86)\Steam\steamapps\common\Days of War\DaysOfWar.exe
FirewallRules: [{24413679-A2C5-4188-97FF-5D5ED7054A60}] => (Allow) M:\Program Files (x86)\Steam\steamapps\common\Day of Defeat Source\hl2.exe
FirewallRules: [{64057BCE-A678-41EF-AB07-2D04A91B37F8}] => (Allow) M:\Program Files (x86)\Steam\steamapps\common\Day of Defeat Source\hl2.exe
FirewallRules: [{CDA6884D-3DE9-4305-AE8E-40482420B2D4}] => (Allow) M:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{6008E2EF-0E8E-4893-9CED-41E578565C61}] => (Allow) M:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{EA04206B-603F-40CB-9FDD-76EFD3E60EA2}] => (Allow) M:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{935E16A1-4EAE-463B-A8AD-7612F12012DE}] => (Allow) M:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [UDP Query User{9F2F9E61-4A87-4939-BFB4-B9A0BF727E2B}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{8733350B-EC9A-41A1-B2B5-3E0788B5E12E}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [{B863AB8D-DA6B-4011-A9C6-85BAB7E3CAC1}] => (Allow) LPort=1900
FirewallRules: [{77F16881-4844-4CFC-8DC3-579F4627C8EB}] => (Allow) LPort=2869
FirewallRules: [{A48B1B1A-D66A-4BC5-8713-879E2CA2B93D}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4F48711E-C873-4D36-9BE1-BA9C93F7EC75}] => (Allow) C:\Users\Administrator\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{7759A3D4-1818-414F-A380-E78413286FB6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{0C58CEF4-9751-4832-887B-12580EA2AFCD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{9BC39352-D140-4922-A77E-1D9681A91FA9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{1AF1BCB8-49B5-48EE-8311-B88ED344227B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9E87D27E-87AC-4B12-9733-D5E5D214B5CE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B5B0C2D8-C99E-4E5C-ACB7-BB1E82E3106D}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{992B2447-B38A-4DBD-A1DF-724A2417A648}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{A681996E-712F-4831-823E-785B74851E85}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe
FirewallRules: [{5B29BB5A-D134-4A94-BDD0-4DE0B16435BC}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{B78FC54A-6DDE-4A69-9885-72ACE6A2E73F}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [TCP Query User{EC8DCF6E-70AA-43A7-9ADF-7065075EF828}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [UDP Query User{BFFE5092-4F23-4798-B661-080488AB89D2}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe
FirewallRules: [TCP Query User{A740D5A6-298B-4739-B9C4-17E1065907B9}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [UDP Query User{BA3EE219-E9BE-4640-8E4B-257D3224BC19}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [TCP Query User{10DA869C-19E8-4CC6-BB04-6625696FAB3C}C:\program files (x86)\stealthnet\stealthnet.exe] => (Allow) C:\program files (x86)\stealthnet\stealthnet.exe
FirewallRules: [UDP Query User{6D8763FF-46E0-4DC5-8358-9D9C3659760C}C:\program files (x86)\stealthnet\stealthnet.exe] => (Allow) C:\program files (x86)\stealthnet\stealthnet.exe
FirewallRules: [{4E62AEBB-AA4B-4664-93DF-F17A40FEDB21}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe
FirewallRules: [{845CD235-388A-4647-940B-3BCCCE99AB42}] => (Allow) C:\Program Files\Shareaza\Shareaza.exe
FirewallRules: [{5A9BA04D-E042-4366-B155-CF8887A2A244}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{F0AE6415-2937-44DE-8A07-75C5972BD17E}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{39EB0E66-2DE2-480F-997E-F672E7B98106}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{CAC5FE2C-02F6-482E-A239-DB26F51B2B09}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{EFEBAC96-25E8-4F62-9578-662881E03CAD}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{D00CAFF3-4DD7-45DC-9FB6-EC3D45F5EB43}] => (Allow) C:\Program Files (x86)\ASUS\Share Link\ShareLink.exe
FirewallRules: [{C19A42C2-5421-4D7C-B704-BA65BCF39BD9}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{6B958CC7-E77C-4760-A468-F47ABCAF9ACE}] => (Allow) C:\Program Files\Intel\STCServ\STCServ.exe
FirewallRules: [{26164D52-58B2-498E-8736-2F268BE7D676}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{0B90F32A-A094-4E9A-9DCA-C531CF0F9DD8}] => (Allow) C:\Program Files\Microsoft Office\Office16\lync.exe
FirewallRules: [{3EDEFC11-D4AB-45FF-9E2E-2C024061D450}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [{8FE2377E-8847-4A6A-B12A-C3CDA6C204C0}] => (Allow) C:\Program Files\Microsoft Office\Office16\UcMapi.exe
FirewallRules: [TCP Query User{F421722F-9F52-4DCB-9EBF-64964E76C509}M:\games\sniper - ghost warrior 3\win_x64\sgw3.exe] => (Allow) M:\games\sniper - ghost warrior 3\win_x64\sgw3.exe
FirewallRules: [UDP Query User{122D6347-AE67-482B-B9FD-110FCF54EAC6}M:\games\sniper - ghost warrior 3\win_x64\sgw3.exe] => (Allow) M:\games\sniper - ghost warrior 3\win_x64\sgw3.exe
FirewallRules: [{55FF8505-B84B-4739-B7A9-BB0ED9021DA8}] => (Allow) C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{7562369F-4DD2-4BF9-9325-47A03AE61568}] => (Allow) C:\Users\PC\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{E93E4B9E-58DC-42D1-A690-3A928D08E1B3}] => (Allow) M:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{CDBAED8B-1C03-4F19-9234-974BC5BD67EE}] => (Allow) M:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
FirewallRules: [{904D810E-09C9-45CF-B6BC-782EFAF6A9AA}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
FirewallRules: [{A7F66BC4-A975-4374-B81A-EE973525D347}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
FirewallRules: [{4DADC412-D923-4C31-B316-D521A5346216}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
FirewallRules: [{F0793AB8-3EE4-4130-AA49-82E4693794D5}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{573B7883-5B6A-4F7E-A3EF-22D36B23AFFB}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{E69BF598-48D7-420F-AE22-46D934747F64}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
FirewallRules: [{C9DFF5F8-F260-440D-AC84-AE62130AA3A8}] => (Allow) C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe
FirewallRules: [{2F3B495F-543F-4664-885F-349343CFD5BC}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [{D0E482BE-692D-4DD0-842F-4DD170DA774C}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe
FirewallRules: [TCP Query User{59F18958-0172-49DA-9F99-355E5FC8D648}M:\program files (x86)\steam\steamapps\common\days of war\daysofwar\binaries\win64\daysofwar-win64-shipping.exe] => (Allow) M:\program files (x86)\steam\steamapps\common\days of war\daysofwar\binaries\win64\daysofwar-win64-shipping.exe
FirewallRules: [UDP Query User{EE41E627-CDCF-494C-9C1A-ED03E3BACD9B}M:\program files (x86)\steam\steamapps\common\days of war\daysofwar\binaries\win64\daysofwar-win64-shipping.exe] => (Allow) M:\program files (x86)\steam\steamapps\common\days of war\daysofwar\binaries\win64\daysofwar-win64-shipping.exe
FirewallRules: [{1BAABD54-F1DE-4628-97A2-1F0A5346F8A8}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe
FirewallRules: [TCP Query User{1B3BCB5E-2DCE-4B47-B5FA-68627A5FED44}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Block) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [UDP Query User{2526FA71-D6D4-42C4-8AAC-D97E4B94187E}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Block) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [{751ACD73-22B1-46E7-B80E-9F6D395B540B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Points de restauration =========================

22-11-2018 09:07:51 Windows Update
01-12-2018 11:46:32 Point de contrôle planifié
07-12-2018 08:07:44 Windows Update
11-12-2018 17:12:47 Opération de restauration

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (12/11/2018 05:25:46 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (12/11/2018 05:21:45 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4040,R,98) SRUJet: L’erreur -1811 (0xfffff8ed) s’est produite lors de l’ouverture d’un fichier journal C:\WINDOWS\system32\SRU\SRU05D15.log.

Error: (12/11/2018 05:13:49 PM) (Source: System Restore) (EventID: 8210) (User: )
Description: Une erreur non spécifiée s’est produite au cours de la restauration du système : (Windows Update). Informations supplémentaires : 0x80070005.

Error: (12/11/2018 05:01:40 PM) (Source: MsiInstaller) (EventID: 11309) (User: PC_Materiel_net)
Description: Product: Online Application -- Error 1309. Error reading from file: C:\Users\PC\AppData\Roaming\Microleaves\Online Application 2.7.0\install\CFCBAA1\Version 2.6.0\Online-Guardian.exe. System error 5. Verify that the file exists and that you can access it.

Error: (12/11/2018 10:28:22 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (12/10/2018 09:26:26 AM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0

Error: (12/09/2018 10:46:14 AM) (Source: MsiInstaller) (EventID: 10005) (User: PC_Materiel_net)
Description: Product: Zimbra Desktop (64-bit) -- Zimbra Desktop (64-bit) requires Oracle Java Runtime Environment 1.6 (64-bit) or later.

Error: (12/09/2018 10:40:43 AM) (Source: MsiInstaller) (EventID: 10005) (User: PC_Materiel_net)
Description: Product: Zimbra Desktop (64-bit) -- Zimbra Desktop (64-bit) requires Oracle Java Runtime Environment 1.6 (64-bit) or later.


Erreurs système:
=============
Error: (12/11/2018 06:25:01 PM) (Source: DCOM) (EventID: 10016) (User: PC_Materiel_net)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
et l’APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
au SID PC_Materiel_net\PC de l’utilisateur (S-1-5-21-2855313945-304041659-1602283824-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy du conteneur d’applications (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:47:13 PM) (Source: DCOM) (EventID: 10016) (User: PC_Materiel_net)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID PC_Materiel_net\PC de l’utilisateur (S-1-5-21-2855313945-304041659-1602283824-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:35:33 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID
Windows.SecurityCenter.WscBrokerManager
et l’APPID
Non disponible
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:33:51 PM) (Source: DCOM) (EventID: 10016) (User: PC_Materiel_net)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID PC_Materiel_net\PC de l’utilisateur (S-1-5-21-2855313945-304041659-1602283824-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:33:30 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\SERVICE RÉSEAU de l’utilisateur (S-1-5-20) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:33:29 PM) (Source: DCOM) (EventID: 10016) (User: PC_Materiel_net)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID
{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
et l’APPID
{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}
au SID PC_Materiel_net\PC de l’utilisateur (S-1-5-21-2855313945-304041659-1602283824-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:33:29 PM) (Source: DCOM) (EventID: 10016) (User: PC_Materiel_net)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID
{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
et l’APPID
{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}
au SID PC_Materiel_net\PC de l’utilisateur (S-1-5-21-2855313945-304041659-1602283824-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (12/11/2018 05:33:29 PM) (Source: DCOM) (EventID: 10016) (User: PC_Materiel_net)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID
{7022A3B3-D004-4F52-AF11-E9E987FEE25F}
et l’APPID
{ADA41B3C-C6FD-4A08-8CC1-D6EFDE67BE7D}
au SID PC_Materiel_net\PC de l’utilisateur (S-1-5-21-2855313945-304041659-1602283824-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.


Windows Defender:
===================================
Date: 2018-09-16 16:21:54.041
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nom : Trojan:Win32/Bluteal.B!rfn
ID : 2147727314
Gravité : Grave
Catégorie : Cheval de Troie
Chemin : file:_C:\Users\PC\Desktop\StateofDec2Updatev20DLC+v21\State.of.Decay.2.Update.v2.0.incl.DLC+v2.1-CODEX\2-state.of.decay.2.update.v2.1\CODEX\AppFiles\WinStore.Love.Auth.dll
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Protection en temps réel
Utilisateur : PC_Materiel_net\PC
Nom du processus : C:\Windows\explorer.exe
Version de la signature : AV: 1.275.1293.0, AS: 1.275.1293.0, NIS: 1.275.1293.0
Version du moteur : AM: 1.1.15200.1, NIS: 1.1.15200.1

Date: 2018-09-16 16:20:30.221
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nom : Trojan:Win32/Bluteal.B!rfn
ID : 2147727314
Gravité : Grave
Catégorie : Cheval de Troie
Chemin : appmodel:_Microsoft.Dayton.cd6932997e_1.3160.34.2_x64__8wekyb3d8bbwe; file:_C:\Users\PC\UniversalApps\State of Decay 2\AppFiles\WinStore.Love.Auth.dll
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Protection en temps réel
Utilisateur : PC_Materiel_net\PC
Nom du processus : C:\Users\PC\UniversalApps\State of Decay 2\AppFiles\StateOfDecay2\Binaries\UWP64\StateOfDecay2-UWP64-Shipping.exe
Version de la signature : AV: 1.275.1293.0, AS: 1.275.1293.0, NIS: 1.275.1293.0
Version du moteur : AM: 1.1.15200.1, NIS: 1.1.15200.1

Date: 2018-09-16 16:20:05.267
Description:
Antivirus Windows Defender a détecté un logiciel malveillant ou potentiellement indésirable.
Pour plus d’informations, reportez-vous aux éléments suivants :
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bluteal.B!rfn&threatid=2147727314&enterprise=0
Nom : Trojan:Win32/Bluteal.B!rfn
ID : 2147727314
Gravité : Grave
Catégorie : Cheval de Troie
Chemin : file:_C:\Users\PC\UniversalApps\State of Decay 2\AppFiles\WinStore.Love.Auth.dll
Origine de la détection : Ordinateur local
Type de détection : Concret
Source de détection : Protection en temps réel
Utilisateur : PC_Materiel_net\PC
Nom du processus : C:\Users\PC\UniversalApps\State of Decay 2\AppFiles\StateOfDecay2\Binaries\UWP64\StateOfDecay2-UWP64-Shipping.exe
Version de la signature : AV: 1.275.1293.0, AS: 1.275.1293.0, NIS: 1.275.1293.0
Version du moteur : AM: 1.1.15200.1, NIS: 1.1.15200.1

==================== Infos Mémoire ===========================

Processeur: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Pourcentage de mémoire utilisée: 31%
Mémoire physique - RAM - totale: 8134.89 MB
Mémoire physique - RAM - disponible: 5546.16 MB
Mémoire virtuelle totale: 9414.89 MB
Mémoire virtuelle disponible: 5787.86 MB

==================== Lecteurs ================================

Drive c: () (Fixed) (Total:229.69 GB) (Free:60.34 GB) NTFS
Drive e: (disque) (Fixed) (Total:398.17 GB) (Free:263.94 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive f: (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS
Drive g: (Nouveau nom) (Fixed) (Total:337.89 GB) (Free:123.61 GB) NTFS
Drive h: (telechargement) (Fixed) (Total:317.38 GB) (Free:38.51 GB) NTFS
Drive i: (sauvegarde windows) (Fixed) (Total:232.88 GB) (Free:212.07 GB) NTFS
Drive j: () (Fixed) (Total:407.23 GB) (Free:63.91 GB) NTFS
Drive k: (video) (Fixed) (Total:402.35 GB) (Free:240.82 GB) NTFS
Drive l: () (Fixed) (Total:139.64 GB) (Free:93.09 GB) NTFS
Drive m: (install jeux) (Fixed) (Total:488.92 GB) (Free:210.35 GB) NTFS
Drive n: (System) (Fixed) (Total:0.34 GB) (Free:0.07 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]

\\?\Volume{e299ccf2-4a05-11e7-8254-806e6f6e6963}\ () (Fixed) (Total:0.44 GB) (Free:0.11 GB) NTFS
\\?\Volume{e299ccf3-4a05-11e7-8254-806e6f6e6963}\ (Recovery Image) (Fixed) (Total:8 GB) (Free:0.91 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 8FC49E05)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=229.7 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=450 MB) - (Type=27)
Partition 4: (Not Active) - (Size=8 GB) - (Type=27)

========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: D12E1ED2)
Partition 1: (Active) - (Size=398.2 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=407.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=402.3 GB) - (Type=07 NTFS)
Partition 4: (Not Active) - (Size=655.3 GB) - (Type=0F Extended)

========================================================
Disk: 2 (Size: 232.9 GB) (Disk ID: 3DCD3DCC)
Partition 1: (Not Active) - (Size=232.9 GB) - (Type=0F Extended)

========================================================
Disk: 3 (Protective MBR) (Size: 489 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 4 (Size: 139.7 GB) (Disk ID: BC7DBC7D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=139.6 GB) - (Type=07 NTFS)

==================== Fin de Addition.txt ============================