Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 01.01.2019
Exécuté par Nasser (03-01-2019 08:08:51)
Exécuté depuis C:\Users\Nasser\Desktop
Windows 7 Professional Service Pack 1 (X64) (2015-12-29 11:01:51)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-2889287705-4184576696-1483232929-500 - Administrator - Disabled)
HAMADOU (S-1-5-21-2889287705-4184576696-1483232929-1000 - Administrator - Enabled) => C:\Users\HAMADOU
HomeGroupUser$ (S-1-5-21-2889287705-4184576696-1483232929-1018 - Limited - Enabled)
Invité (S-1-5-21-2889287705-4184576696-1483232929-501 - Limited - Disabled)
Nafissa (S-1-5-21-2889287705-4184576696-1483232929-1001 - Limited - Enabled) => C:\Users\Nafissa
Naima (S-1-5-21-2889287705-4184576696-1483232929-1005 - Limited - Enabled) => C:\Users\Naima
Nasser (S-1-5-21-2889287705-4184576696-1483232929-1004 - Administrator - Enabled) => C:\Users\Nasser
Rayel (S-1-5-21-2889287705-4184576696-1483232929-1003 - Limited - Enabled) => C:\Users\Rayel
SANIA VIDOUFACK (S-1-5-21-2889287705-4184576696-1483232929-1024 - Limited - Enabled) => C:\Users\SANIA VIDOUFACK
Yasmine (S-1-5-21-2889287705-4184576696-1483232929-1002 - Limited - Enabled) => C:\Users\Yasmine
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
µTorrent (HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\uTorrent) (Version: 3.5.5.44954 - BitTorrent Inc.)
7-Zip 18.01 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1801-000001000000}) (Version: 18.01.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 19.010.20064 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
AOMEI Partition Assistant Standard Edition 6.0 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.)
ASUS Flash Tool (HKLM-x32\...\{1FE691A3-0C01-4B55-83F1-67DB5F53FBD7}) (Version: 1.0.0.45 - ASUS)
ASUS PC Link (HKLM-x32\...\{52AE8601-EA55-456E-80A9-7FB48E82CF81}_is1) (Version: 3.0.22.1029 - ASUSTEK)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 18.2.5964 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 70.1.973.111 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden
Camtel EVDO-Huawei (HKLM-x32\...\Camtel EVDO-Huawei) (Version: 21.005.20.00.613 - Huawei Technologies Co.,Ltd)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd)
Étude pour l'amélioration du produit HP Deskjet 2540 series (HKLM\...\{56A56F89-6A40-4990-9EFF-E7CEA8B8CD35}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Foxit PhantomPDF (HKLM-x32\...\{B23B55B8-89D9-11E8-8772-000C296BF2A5}) (Version: 9.2.0.9297 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.2.0.9297 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
HP Deskjet 2540 series Aide (HKLM-x32\...\{2FAD0F16-4309-4D22-AE73-F4CCA737D013}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
IDM Crack 6.30 build 7 (HKLM-x32\...\IDM Crack 6.30 build 7) (Version: 6.30 build 7 - Crackingpatching.com Team)
Intel Android Device USB driver (HKLM\...\Intel Android Device USB driver) (Version: 1.10.0 - Intel)
Intel(R) Network Connections 22.9.6.0 (HKLM\...\PROSetDX) (Version: 22.9.6.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Java 8 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Java SE Development Kit 8 Update 71 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180710}) (Version: 8.0.710.15 - Oracle Corporation)
KingRoot °æ±¾ 3.2.0 (HKLM-x32\...\{FA3B7324-9EB4-4ADC-84D0-5461BE113832}_is1) (Version: 3.2.0 - KingRoot)
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)
Logiciel de base du périphérique HP Deskjet 2540 series (HKLM\...\{A6B70741-D7EF-45ED-BF4E-AE40751780A0}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Malwarebytes version 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{4D243BA7-9AC4-46D1-90E5-EEB88974F501}) (Version: 2.0.687.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}) (Version: 2.0.687.0 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.4.2 (HKLM-x32\...\{1901BAF7-7E78-4041-BC88-D0EE5DD1DFD9}_is1) (Version: 1.4.2 - Sam Rodberg)
MIRACLE (HKLM-x32\...\MIRACLE) (Version: 1.00 - Miracle Team)
MKV Player 2.1.23 (HKLM-x32\...\MKV Player_is1) (Version: - )
Module linguistique de Microsoft .NET Framework 4.5 - FRA (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50709 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Opera Stable 57.0.3098.106 (HKLM-x32\...\Opera 57.0.3098.106) (Version: 57.0.3098.106 - Opera Software)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Package de pilotes Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
Package de pilotes Windows - Intel (MEIx64) System (03/28/2016 11.0.5.1189) (HKLM\...\63CEF5543DBF9887E6220C5C2F7F85C2D4C726D5) (Version: 03/28/2016 11.0.5.1189 - Intel)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.9.0 - Prolific Technology INC)
Programme d'installation Atheros Client (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: - Atheros)
Project64 version 2.3.0.210 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.0.210 - )
QPST 2.7 (HKLM-x32\...\{B3305241-A2F4-4625-A3ED-45CF5E905A7A}) (Version: 2.7.472 - Qualcomm Technologies, Inc.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{0DF70CB6-553A-4C57-8E6D-87635EECFB78}) (Version: 1.00.0145 - ALFA NETWORK INC.)
Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.23.0 - SAMSUNG Electronics Co., Ltd.)
SMADAV version 10.5.1 (HKLM-x32\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 10.5.1 - SmadSoft)
Software Informer 1.5.1334.0 (HKLM\...\Software Informer_is1) (Version: - Informer Technologies, Inc.)
Total Video Converter 3.71 100812 (HKLM-x32\...\Total Video Converter 3.71_is1) (Version: - EffectMatrix Inc.)
Trojan Remover 6.9.3.2939 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.3.2939 - Simply Super Software)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{8B3A877E-1B73-464A-AD21-9F26A0682AC6}) (Version: - Microsoft)
UPS Communicator 1.21 (HKLM-x32\...\{FF366935-7605-4630-A541-18D0A4A7C56F}_is1) (Version: 1.21 - Legrand)
USB Serial Port Driver (x64) (HKLM-x32\...\{53012BD2-D1A3-4530-9AE2-B0C503B5C1C2}) (Version: 2013.30.0.313 - Nokia)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.1 - VideoLAN)
WinDirStat 1.1.2 (HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\WinDirStat) (Version: - )
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wise Driver Care 2.2 (HKLM-x32\...\Wise Driver Care_is1) (Version: 2.2 - WiseCleaner.com, Inc.)
Zenfone flashtool (HKLM-x32\...\{0DE02CEC-9B23-4BDC-BEBA-86BA6008A430}) (Version: 2.0.0 - XDA Blogs) Hidden
Zenfone flashtool (HKLM-x32\...\Zenfone flashtool 2.0.0) (Version: 2.0.0 - XDA Blogs)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2018-05-12] (Tonec Inc.)
ShellIconOverlayIdentifiers: [!BTSync2.3.8Done] -> {581FFA04-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [!BTSync2.3.8RO] -> {581FFA03-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [!BTSync2.3.8RW] -> {581FFA02-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [!BTSync2.3.8Done] -> {581FFA04-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [!BTSync2.3.8RO] -> {581FFA03-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [!BTSync2.3.8RW] -> {581FFA02-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ContextMenuHandlers1: [Foxit_ConvertToPDF] -> {C5269811-4A29-4818-A4BB-111F9FC63A5F} => C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers3: [SmadExt] -> {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} => C:\Program Files (x86)\SMADAV\SmadExtc64.dll [2013-11-27] (Smadsoft)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> Pas de fichier
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2014-01-02] (Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2015-06-05] (Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ContextMenuHandlers6: [Foxit_ConvertToPDF] -> {C5269811-4A29-4818-A4BB-111F9FC63A5F} => C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> Pas de fichier
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2014-01-02] (Piriform Ltd)
ContextMenuHandlers6: [SmadExt] -> {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} => C:\Program Files (x86)\SMADAV\SmadExtc64.dll [2013-11-27] (Smadsoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {006B087B-22FC-4112-A5C8-7973065EBF87} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-11] (Piriform Ltd)
Task: {07579CE1-B478-416F-9515-46654F77CD65} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {111D2678-D059-4C8D-9549-338C7E4FA20A} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe
Task: {2498180C-2DDD-48C9-AF2A-85F093DD46B7} - System32\Tasks\smadav => C:\Program Files (x86)\Smadav\SMΔRTP.exe [2016-02-07] (Smadsoft)
Task: {39CED3E6-EC04-4C38-8B5E-CB5CEF9F4255} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {3BF64D96-B31E-4925-8ADE-34D418DAAB6A} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [2018-10-24] (AVAST Software)
Task: {49649757-58E0-4FFD-911A-CF3B58E286A7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-29] (Google Inc.)
Task: {4C29B696-1403-4921-84F0-89637BADF920} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-12-18] (AVAST Software)
Task: {5D32A5EC-2E7A-4B08-96A1-1B03D237D942} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(1): %windir%\system32\GWX\GWXUXWorker.exe -> /ScheduleUpgradeReminderTime
Task: {5D32A5EC-2E7A-4B08-96A1-1B03D237D942} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {66A698D5-1C5D-4314-BEFF-7D9AE529CE50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {66A698D5-1C5D-4314-BEFF-7D9AE529CE50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {7A90A557-CBAB-4E06-90DD-102D756853C9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-08] (Adobe Systems Incorporated)
Task: {7DB8D22E-6761-4803-87C6-6DFFD27421E7} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {7DB8D22E-6761-4803-87C6-6DFFD27421E7} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {83CB8155-753F-42E3-B3EB-15EFF0530C9D} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-08] (Adobe Systems Incorporated)
Task: {8950CAE0-2B21-4448-8305-9DB7CF46F03C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {8950CAE0-2B21-4448-8305-9DB7CF46F03C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {8950CAE0-2B21-4448-8305-9DB7CF46F03C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {9E46EEC6-E326-459E-BA9B-B283D34D62C1} - System32\Tasks\Opera scheduled Autoupdate 1529499489 => C:\Program Files\Opera\launcher.exe [2018-12-19] (Opera Software)
Task: {ACB4618F-74E4-4190-9686-35C3CE376F69} - System32\Tasks\SoftwareInformerService => C:\Program Files\Software Informer\softinfo.exe [2018-01-31] (Informer Technologies, Inc.)
Task: {AD8079B8-FD5C-41B3-926E-4D46AF64D4D6} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-12-18] (AVAST Software)
Task: {B6195867-6FA1-4DDD-80F6-391954AFBF79} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
Task: {CD42627D-ABDB-460C-A97D-5A1023CDC3F7} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D06FD6C0-D85D-46FF-9373-8565826B0BFE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-11] (Piriform Ltd)
Task: {D5BAB667-99A5-41E9-AB43-7F73F9700B55} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-12-18] (AVAST Software)
Task: {DCBC8FCC-C399-4092-BCDA-9D5478080322} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-29] (Google Inc.)
Task: {FC5CB56C-AB8F-4E0E-ADD8-479DBE1341DE} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {FE92623C-67AE-4B3F-9FF0-D3DF6A3710EA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-11-03] (AVAST Software)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\Nasser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Bureau à distance Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Nasser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\facebook.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software) -> www.facebook.com
==================== Modules chargés (Avec liste blanche) ==============
2013-10-17 15:27 - 2013-10-17 15:27 - 000166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2019-01-02 21:44 - 2018-11-21 11:07 - 002842608 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2019-01-02 21:44 - 2018-11-15 11:01 - 002712432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000728792 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2015-11-18 10:08 - 2012-09-12 14:09 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2018-12-28 17:51 - 2015-10-29 16:58 - 000051712 _____ () C:\Program Files (x86)\ASUS\PC Link\ASUSUtility.dll
2018-12-28 17:50 - 2015-08-12 16:29 - 001009664 _____ () C:\Program Files (x86)\ASUS\PC Link\tools\adb.exe
2018-12-28 17:50 - 2015-08-12 16:29 - 005467527 _____ () C:\Program Files (x86)\ASUS\PC Link\tools\pclink_connect.exe
2018-12-18 12:27 - 2018-12-12 06:11 - 005237216 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\libglesv2.dll
2018-12-18 12:27 - 2018-12-12 06:11 - 000117216 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\libegl.dll
2012-10-01 18:56 - 2012-10-01 18:56 - 000240256 _____ () C:\Program Files\Microsoft Office\Office15\IEAWSDC.DLL
2018-12-18 20:29 - 2018-12-18 20:29 - 000919256 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2019-01-02 18:56 - 2019-01-02 18:56 - 005740176 _____ () C:\Program Files\AVAST Software\Avast\defs\19010204\algo.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000496344 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000150744 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 001112280 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2016-01-15 00:38 - 2009-12-09 21:20 - 000126976 _____ () C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\EnumDevLib.dll
2018-12-18 14:47 - 2018-12-18 14:47 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-12-18 20:41 - 2016-09-12 14:53 - 048936448 _____ () C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\TEMP:6DDED7D9 [149]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [192]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2009-07-14 03:34 - 2019-01-02 22:09 - 000001035 _____ C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 75.126.120.203
127.0.0.1 46.4.58.71
127.0.0.1 46.4.62.150
127.0.0.1 46.4.28.80
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\adb;;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64
HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Nasser\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation)
FirewallRules: [{4FD5CC08-1B5F-495B-9DDD-5E9FB06D571C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation)
FirewallRules: [{6A1AB90E-F857-4961-B4D6-FAB822E364F5}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation)
FirewallRules: [{B093DE69-DDD6-4443-9CF4-6CD885D1A452}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation)
FirewallRules: [{FAC46E52-6179-4260-9EF3-93925E8DCFA4}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation)
FirewallRules: [{3A99E411-F5C1-48CF-974E-EB90FFB748CD}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
FirewallRules: [{B673B664-BB00-4053-B552-4D6A1F41902A}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
FirewallRules: [{1C0835B6-2B85-4F4A-8358-ABF623B3D821}] => (Allow) LPort=1542
FirewallRules: [{252D8E83-2392-4D2D-8FF8-67965EE18406}] => (Allow) LPort=1542
FirewallRules: [{4ACDAC7A-DAD6-48FD-BF9F-7628242A9444}] => (Allow) LPort=53
FirewallRules: [{110DE3C5-F5C4-4AB9-B79B-B8AD5ED5DE78}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\DeviceSetup.exe (Hewlett-Packard Co.)
FirewallRules: [{5E2C2878-4970-4B76-9311-BF0C91D5EC39}] => (Allow) LPort=5357
FirewallRules: [{AEB80C98-A83B-484C-BAFA-A1C5ED56BDE4}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett-Packard Co.)
FirewallRules: [{EC714D25-DD76-4A4C-AC26-0C65DE4AA65B}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{51117311-D06D-49BB-BE53-81278718F698}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{95B96193-E543-41BE-B2E8-55C037318BA8}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{8C42C380-A18C-4DF3-8085-CAD414175D95}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{F224A538-C100-452A-B726-DDDFB458140C}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{542AFB1D-7E8C-42A3-A73E-4F0D0C00060F}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [TCP Query User{2A405555-C03A-4F18-913B-0FF18FF704BD}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [UDP Query User{786A00E9-5A61-4B3D-A12F-4EC1D271DD21}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [TCP Query User{E69764E5-B5F8-43A5-BAEC-0E91EB10A9BA}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [UDP Query User{C5A7B4B1-7CCA-429D-B896-985930942358}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [{2EEF5813-AE32-4AEF-9E81-DDD294D1D6E1}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{2AE6BB02-C79B-48BC-860A-90BA65469CCA}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{731F894C-DB30-4B55-9D83-095AFDD1560E}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{66788C5F-730D-42A1-A1ED-03AFF41B729A}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{42D3E865-9A3D-4B05-9721-55C71339B75D}] => (Allow) LPort=53
FirewallRules: [{DA54AFD2-7113-41A0-98E2-D29B46E2990B}] => (Allow) LPort=500
FirewallRules: [{2C1F2AAE-AA8A-467A-AD58-D9F4957651C9}] => (Allow) LPort=4500
FirewallRules: [{89D20F88-853C-4E1C-BB27-26E3FD586BF7}] => (Allow) LPort=500
FirewallRules: [{A73C4BA7-1853-4773-8F8E-E29CFFF58C88}] => (Allow) LPort=4500
FirewallRules: [{971C5480-69E1-40AC-88A6-78F028F11417}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe (BlueStack Systems, Inc.)
FirewallRules: [{87537882-3028-4534-96CA-CBFCEAA40022}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.)
FirewallRules: [{981D724E-168E-44C6-BBE1-834F46F074A2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.)
FirewallRules: [TCP Query User{7050B54E-D599-490E-AFDC-EFECBAFDB4A7}C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe ()
FirewallRules: [UDP Query User{BE506022-6C4A-4494-B413-AB7F87779538}C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe ()
FirewallRules: [{5E6D0B11-9A28-4BFE-BCF4-319EE557A4DD}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{DAB72384-47DF-4990-8572-E08C1802EEA6}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{C91AD569-5006-4439-B6C9-F955A2BD1C2D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{135C0B80-E76D-4225-A5AB-BB9808CC37CA}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{61633C39-C109-4E6B-A8E4-D999BB5D421D}] => (Allow) C:\Program Files\Opera\56.0.3051.116\opera.exe (Opera Software)
FirewallRules: [{03BF2607-8CAA-4EA7-9999-40C2F1E511FB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
FirewallRules: [{936E1081-CE0B-4DAC-89CC-5BE8DBAC789F}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software)
FirewallRules: [{15F2628C-F463-4D6E-9D95-CC8DEAAFF97E}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{80540A3B-8A91-445E-806B-603B07D29527}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{4990AA6D-4742-4A08-A14A-86FEA9B2D833}] => (Allow) C:\Program Files\Opera\57.0.3098.106\opera.exe (Opera Software)
FirewallRules: [TCP Query User{A85F3AB0-38B7-47E2-8360-68CB55BC0AAF}C:\program files\java\jre1.8.0_71\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe (Oracle Corporation)
FirewallRules: [UDP Query User{498D8ED6-EB52-43CE-9F1F-53D4340DC57A}C:\program files\java\jre1.8.0_71\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe (Oracle Corporation)
FirewallRules: [{F1CA4E58-53F6-440A-912A-A7089CDACAAD}] => (Allow) C:\Program Files (x86)\ASUS\PC Link\PCLinkService.exe (ASUS)
==================== Points de restauration =========================
02-01-2019 19:30:27 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MediaTek PreLoader USB VCOM (Android) (COM32)
Description: MediaTek PreLoader USB VCOM (Android)
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: MediaTek Inc.
Service: wdm_usb
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Clavier standard PS/2
Description: Clavier standard PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Claviers standard)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ZAM Helper Driver
Description: ZAM Helper Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ZAM Guard Driver
Description: ZAM Guard Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM_Guard
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Intel(R) 82579LM Gigabit Network Connection
Description: Intel(R) 82579LM Gigabit Network Connection
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1cexpress
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (01/03/2019 07:54:45 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Un problème a empêché l’envoi des données du Programme d’amélioration des services à Microsoft (erreur 80004005).
Error: (04/01/2010 07:07:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (04/01/2010 07:03:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (01/03/2019 05:45:04 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (01/02/2019 11:11:33 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Un problème a empêché l’envoi des données du Programme d’amélioration des services à Microsoft (erreur 80004005).
Error: (01/02/2019 06:54:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (01/02/2019 06:40:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Miracle Box_Cracked 2.58.exe, version : 2.5.8.0, horodatage : 0x2a425e19
Nom du module défaillant : Miracle Box_Cracked 2.58.exe, version : 2.5.8.0, horodatage : 0x2a425e19
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000049d7
ID du processus défaillant : 0x2144
Heure de début de l’application défaillante : 0x01d4a258313853cb
Chemin d’accès de l’application défaillante : C:\Users\Nasser\Documents\RAKUTEN\LOGIS ET DOCS\APPLICATIONS\Hacking Flashage Formatage\Projet Miracle Box tools\Miracle Box\Miracle Box 2.58 + Loader\Miracle Box_Cracked 2.58\Miracle Box_Cracked 2.58.exe
Chemin d’accès du module défaillant: C:\Users\Nasser\Documents\RAKUTEN\LOGIS ET DOCS\APPLICATIONS\Hacking Flashage Formatage\Projet Miracle Box tools\Miracle Box\Miracle Box 2.58 + Loader\Miracle Box_Cracked 2.58\Miracle Box_Cracked 2.58.exe
ID de rapport : efb039a3-0e50-11e9-8ec4-939c98b8af68
Error: (01/02/2019 04:03:57 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Un problème a empêché l’envoi des données du Programme d’amélioration des services à Microsoft (erreur 80004005).
Erreurs système:
=============
Error: (04/01/2010 07:08:01 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service HWDeviceService64.exe s’est terminé de façon inattendue pour la 1ème fois.
Error: (04/01/2010 07:06:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Camtel EVDO-Huawei. OUC n’a pas pu démarrer en raison de l’erreur :
Camtel EVDO-Huawei. OUC n’est pas une application Win32 valide.
Error: (04/01/2010 07:06:38 AM) (Source: e1cexpress) (EventID: 24) (User: )
Description: Intel(R) 82579LM Gigabit Network Connection
PROBLÈME : impossible de démarrer la carte réseau.
ACTION : installez le dernier pilote depuis "http://www.intel.com/support/go/network/adapter/home.htm".
Error: (04/01/2010 07:06:33 AM) (Source: volmgr) (EventID: 46) (User: )
Description: L'initialisation du fichier de vidage sur incident a échoué.
Error: (04/01/2010 07:04:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service HWDeviceService64.exe s’est terminé de façon inattendue pour la 1ème fois.
Error: (04/01/2010 07:01:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Camtel EVDO-Huawei. OUC n’a pas pu démarrer en raison de l’erreur :
Camtel EVDO-Huawei. OUC n’est pas une application Win32 valide.
Error: (04/01/2010 07:01:16 AM) (Source: e1cexpress) (EventID: 24) (User: )
Description: Intel(R) 82579LM Gigabit Network Connection
PROBLÈME : impossible de démarrer la carte réseau.
ACTION : installez le dernier pilote depuis "http://www.intel.com/support/go/network/adapter/home.htm".
Error: (04/01/2010 07:01:36 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 06:08:35 le 01/04/2010 n’était pas prévu.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz
Pourcentage de mémoire utilisée: 42%
Mémoire physique - RAM - totale: 8080.02 MB
Mémoire physique - RAM - disponible: 4684.29 MB
Mémoire virtuelle totale: 8078.22 MB
Mémoire virtuelle disponible: 4762.34 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:458.18 GB) (Free:167.1 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:7.48 GB) (Free:0.73 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
\\?\Volume{dc6a39c4-ae1a-11e5-a7a5-806e6f6e6963}\ (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 2CE0A2B8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=458.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=7.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================
Exécuté par Nasser (03-01-2019 08:08:51)
Exécuté depuis C:\Users\Nasser\Desktop
Windows 7 Professional Service Pack 1 (X64) (2015-12-29 11:01:51)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-2889287705-4184576696-1483232929-500 - Administrator - Disabled)
HAMADOU (S-1-5-21-2889287705-4184576696-1483232929-1000 - Administrator - Enabled) => C:\Users\HAMADOU
HomeGroupUser$ (S-1-5-21-2889287705-4184576696-1483232929-1018 - Limited - Enabled)
Invité (S-1-5-21-2889287705-4184576696-1483232929-501 - Limited - Disabled)
Nafissa (S-1-5-21-2889287705-4184576696-1483232929-1001 - Limited - Enabled) => C:\Users\Nafissa
Naima (S-1-5-21-2889287705-4184576696-1483232929-1005 - Limited - Enabled) => C:\Users\Naima
Nasser (S-1-5-21-2889287705-4184576696-1483232929-1004 - Administrator - Enabled) => C:\Users\Nasser
Rayel (S-1-5-21-2889287705-4184576696-1483232929-1003 - Limited - Enabled) => C:\Users\Rayel
SANIA VIDOUFACK (S-1-5-21-2889287705-4184576696-1483232929-1024 - Limited - Enabled) => C:\Users\SANIA VIDOUFACK
Yasmine (S-1-5-21-2889287705-4184576696-1483232929-1002 - Limited - Enabled) => C:\Users\Yasmine
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
µTorrent (HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\uTorrent) (Version: 3.5.5.44954 - BitTorrent Inc.)
7-Zip 18.01 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1801-000001000000}) (Version: 18.01.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 19.010.20064 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated)
AOMEI Partition Assistant Standard Edition 6.0 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.)
ASUS Flash Tool (HKLM-x32\...\{1FE691A3-0C01-4B55-83F1-67DB5F53FBD7}) (Version: 1.0.0.45 - ASUS)
ASUS PC Link (HKLM-x32\...\{52AE8601-EA55-456E-80A9-7FB48E82CF81}_is1) (Version: 3.0.22.1029 - ASUSTEK)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 18.8.2356 - AVAST Software)
Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 18.2.5964 - AVAST Software)
Avast Secure Browser (HKLM-x32\...\Avast Secure Browser) (Version: 70.1.973.111 - AVAST Software)
Avast Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.4.154.333 - AVAST Software) Hidden
Camtel EVDO-Huawei (HKLM-x32\...\Camtel EVDO-Huawei) (Version: 21.005.20.00.613 - Huawei Technologies Co.,Ltd)
CCleaner (HKLM\...\CCleaner) (Version: 5.46 - Piriform)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.6.0.0283 - Disc Soft Ltd)
Étude pour l'amélioration du produit HP Deskjet 2540 series (HKLM\...\{56A56F89-6A40-4990-9EFF-E7CEA8B8CD35}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Foxit PhantomPDF (HKLM-x32\...\{B23B55B8-89D9-11E8-8772-000C296BF2A5}) (Version: 9.2.0.9297 - Foxit Software Inc.)
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 9.2.0.9297 - Foxit Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 71.0.3578.98 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
HP Deskjet 2540 series Aide (HKLM-x32\...\{2FAD0F16-4309-4D22-AE73-F4CCA737D013}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
IDM Crack 6.30 build 7 (HKLM-x32\...\IDM Crack 6.30 build 7) (Version: 6.30 build 7 - Crackingpatching.com Team)
Intel Android Device USB driver (HKLM\...\Intel Android Device USB driver) (Version: 1.10.0 - Intel)
Intel(R) Network Connections 22.9.6.0 (HKLM\...\PROSetDX) (Version: 22.9.6.0 - Intel)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.4229 - Intel Corporation)
Intel(R) SDK for OpenCL - CPU Only Runtime Package (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version: 2.0.0.37149 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC)
Java 8 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418071F0}) (Version: 8.0.710.15 - Oracle Corporation)
Java SE Development Kit 8 Update 71 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180710}) (Version: 8.0.710.15 - Oracle Corporation)
KingRoot °æ±¾ 3.2.0 (HKLM-x32\...\{FA3B7324-9EB4-4ADC-84D0-5461BE113832}_is1) (Version: 3.2.0 - KingRoot)
LinuxLive USB Creator (HKLM-x32\...\LinuxLive USB Creator) (Version: 2.9 - Thibaut Lauziere)
Logiciel de base du périphérique HP Deskjet 2540 series (HKLM\...\{A6B70741-D7EF-45ED-BF4E-AE40751780A0}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
Malwarebytes version 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{4D243BA7-9AC4-46D1-90E5-EEB88974F501}) (Version: 2.0.687.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{05B49229-22A2-4F88-842A-BBC2EBE1CCF6}) (Version: 2.0.687.0 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Minimal ADB and Fastboot version 1.4.2 (HKLM-x32\...\{1901BAF7-7E78-4041-BC88-D0EE5DD1DFD9}_is1) (Version: 1.4.2 - Sam Rodberg)
MIRACLE (HKLM-x32\...\MIRACLE) (Version: 1.00 - Miracle Team)
MKV Player 2.1.23 (HKLM-x32\...\MKV Player_is1) (Version: - )
Module linguistique de Microsoft .NET Framework 4.5 - FRA (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50709 - Microsoft Corporation)
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Opera Stable 57.0.3098.106 (HKLM-x32\...\Opera 57.0.3098.106) (Version: 57.0.3098.106 - Opera Software)
Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Package de pilotes Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (08/28/2014 11.0.0000.00000) (HKLM\...\092555911492C6959D2596D612F52DCA71881CA2) (Version: 08/28/2014 11.0.0000.00000 - Google, Inc.)
Package de pilotes Windows - Intel (MEIx64) System (03/28/2016 11.0.5.1189) (HKLM\...\63CEF5543DBF9887E6220C5C2F7F85C2D4C726D5) (Version: 03/28/2016 11.0.5.1189 - Intel)
PL-2303 USB-to-Serial (HKLM-x32\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: 1.9.0 - Prolific Technology INC)
Programme d'installation Atheros Client (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: - Atheros)
Project64 version 2.3.0.210 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.0.210 - )
QPST 2.7 (HKLM-x32\...\{B3305241-A2F4-4625-A3ED-45CF5E905A7A}) (Version: 2.7.472 - Qualcomm Technologies, Inc.)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{0DF70CB6-553A-4C57-8E6D-87635EECFB78}) (Version: 1.00.0145 - ALFA NETWORK INC.)
Recuva (HKLM\...\Recuva) (Version: 1.50 - Piriform)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
SAMSUNG USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.23.0 - SAMSUNG Electronics Co., Ltd.)
SMADAV version 10.5.1 (HKLM-x32\...\{8B9FA5FF-3E61-4658-B0DA-E6DDB46D6BAD}_is1) (Version: 10.5.1 - SmadSoft)
Software Informer 1.5.1334.0 (HKLM\...\Software Informer_is1) (Version: - Informer Technologies, Inc.)
Total Video Converter 3.71 100812 (HKLM-x32\...\Total Video Converter 3.71_is1) (Version: - EffectMatrix Inc.)
Trojan Remover 6.9.3.2939 (HKLM-x32\...\Trojan Remover_is1) (Version: 6.9.3.2939 - Simply Super Software)
Update for Skype for Business 2015 (KB3039776) 64-Bit Edition (HKLM\...\{90150000-012B-040C-1000-0000000FF1CE}_Office15.PROPLUS_{8B3A877E-1B73-464A-AD21-9F26A0682AC6}) (Version: - Microsoft)
UPS Communicator 1.21 (HKLM-x32\...\{FF366935-7605-4630-A541-18D0A4A7C56F}_is1) (Version: 1.21 - Legrand)
USB Serial Port Driver (x64) (HKLM-x32\...\{53012BD2-D1A3-4530-9AE2-B0C503B5C1C2}) (Version: 2013.30.0.313 - Nokia)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.1 - VideoLAN)
WinDirStat 1.1.2 (HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\WinDirStat) (Version: - )
WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
Wise Driver Care 2.2 (HKLM-x32\...\Wise Driver Care_is1) (Version: 2.2 - WiseCleaner.com, Inc.)
Zenfone flashtool (HKLM-x32\...\{0DE02CEC-9B23-4BDC-BEBA-86BA6008A430}) (Version: 2.0.0 - XDA Blogs) Hidden
Zenfone flashtool (HKLM-x32\...\Zenfone flashtool 2.0.0) (Version: 2.0.0 - XDA Blogs)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2018-05-12] (Tonec Inc.)
ShellIconOverlayIdentifiers: [!BTSync2.3.8Done] -> {581FFA04-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [!BTSync2.3.8RO] -> {581FFA03-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [!BTSync2.3.8RW] -> {581FFA02-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ShellIconOverlayIdentifiers-x32: [!BTSync2.3.8Done] -> {581FFA04-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [!BTSync2.3.8RO] -> {581FFA03-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ShellIconOverlayIdentifiers-x32: [!BTSync2.3.8RW] -> {581FFA02-FC33-0008-0302-95003A5CDE89} => C:\ProgramData\BitTorrent Sync\ShellExtensionOverlay64_230.dll -> Pas de fichier
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ContextMenuHandlers1: [Foxit_ConvertToPDF] -> {C5269811-4A29-4818-A4BB-111F9FC63A5F} => C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers1: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers3: [SmadExt] -> {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} => C:\Program Files (x86)\SMADAV\SmadExtc64.dll [2013-11-27] (Smadsoft)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> Pas de fichier
ContextMenuHandlers4: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2014-01-02] (Piriform Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2015-06-05] (Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2018-01-28] (Igor Pavlov)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-12-18] (AVAST Software)
ContextMenuHandlers6: [Foxit_ConvertToPDF] -> {C5269811-4A29-4818-A4BB-111F9FC63A5F} => C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers6: [Foxit_ConvertToPDF_Reader] -> {A94757A0-0226-426F-B4F1-4DF381C630D3} => C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\ConvertToPDFShellExtension_x64.dll [2018-07-13] (Foxit Software Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes)
ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => -> Pas de fichier
ContextMenuHandlers6: [RecuvaShellExt] -> {435E5DF5-2510-463C-B223-BDA47006D002} => C:\Program Files\Recuva\RecuvaShell64.dll [2014-01-02] (Piriform Ltd)
ContextMenuHandlers6: [SmadExt] -> {8AB81E72-CB2F-11D3-8D3B-AC2F34F1FA3C} => C:\Program Files (x86)\SMADAV\SmadExtc64.dll [2013-11-27] (Smadsoft)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {006B087B-22FC-4112-A5C8-7973065EBF87} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-09-11] (Piriform Ltd)
Task: {07579CE1-B478-416F-9515-46654F77CD65} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {111D2678-D059-4C8D-9549-338C7E4FA20A} - System32\Tasks\BlueStacksHelper => C:\ProgramData\BlueStacks\Client\Helper\BlueStacksHelper.exe
Task: {2498180C-2DDD-48C9-AF2A-85F093DD46B7} - System32\Tasks\smadav => C:\Program Files (x86)\Smadav\SMΔRTP.exe [2016-02-07] (Smadsoft)
Task: {39CED3E6-EC04-4C38-8B5E-CB5CEF9F4255} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated)
Task: {3BF64D96-B31E-4925-8ADE-34D418DAAB6A} - System32\Tasks\Avast Cleanup Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [2018-10-24] (AVAST Software)
Task: {49649757-58E0-4FFD-911A-CF3B58E286A7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-29] (Google Inc.)
Task: {4C29B696-1403-4921-84F0-89637BADF920} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-12-18] (AVAST Software)
Task: {5D32A5EC-2E7A-4B08-96A1-1B03D237D942} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(1): %windir%\system32\GWX\GWXUXWorker.exe -> /ScheduleUpgradeReminderTime
Task: {5D32A5EC-2E7A-4B08-96A1-1B03D237D942} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {66A698D5-1C5D-4314-BEFF-7D9AE529CE50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent
Task: {66A698D5-1C5D-4314-BEFF-7D9AE529CE50} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {7A90A557-CBAB-4E06-90DD-102D756853C9} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-08] (Adobe Systems Incorporated)
Task: {7DB8D22E-6761-4803-87C6-6DFFD27421E7} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {7DB8D22E-6761-4803-87C6-6DFFD27421E7} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {83CB8155-753F-42E3-B3EB-15EFF0530C9D} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-08] (Adobe Systems Incorporated)
Task: {8950CAE0-2B21-4448-8305-9DB7CF46F03C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig
Task: {8950CAE0-2B21-4448-8305-9DB7CF46F03C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent
Task: {8950CAE0-2B21-4448-8305-9DB7CF46F03C} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2016-02-17] (Microsoft Corporation)
Task: {9E46EEC6-E326-459E-BA9B-B283D34D62C1} - System32\Tasks\Opera scheduled Autoupdate 1529499489 => C:\Program Files\Opera\launcher.exe [2018-12-19] (Opera Software)
Task: {ACB4618F-74E4-4190-9686-35C3CE376F69} - System32\Tasks\SoftwareInformerService => C:\Program Files\Software Informer\softinfo.exe [2018-01-31] (Informer Technologies, Inc.)
Task: {AD8079B8-FD5C-41B3-926E-4D46AF64D4D6} - System32\Tasks\AvastUpdateTaskMachineCore => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-12-18] (AVAST Software)
Task: {B6195867-6FA1-4DDD-80F6-391954AFBF79} - System32\Tasks\HPCustParticipation HP Deskjet 2540 series => C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPCustPartic.exe [2013-08-13] (Hewlett-Packard Co.)
Task: {CD42627D-ABDB-460C-A97D-5A1023CDC3F7} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe
Task: {D06FD6C0-D85D-46FF-9373-8565826B0BFE} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-09-11] (Piriform Ltd)
Task: {D5BAB667-99A5-41E9-AB43-7F73F9700B55} - System32\Tasks\AvastUpdateTaskMachineUA => C:\Program Files (x86)\AVAST Software\Browser\Update\AvastBrowserUpdate.exe [2018-12-18] (AVAST Software)
Task: {DCBC8FCC-C399-4092-BCDA-9D5478080322} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-01-29] (Google Inc.)
Task: {FC5CB56C-AB8F-4E0E-ADD8-479DBE1341DE} - System32\Tasks\AutoKMS => C:\Windows\AutoKMS\AutoKMS.exe
Task: {FE92623C-67AE-4B3F-9FF0-D3DF6A3710EA} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\avast software\overseer\overseer.exe [2018-11-03] (AVAST Software)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
ShortcutWithArgument: C:\Users\Nasser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Bureau à distance Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->
ShortcutWithArgument: C:\Users\Nasser\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\facebook.lnk -> C:\Program Files\Opera\launcher.exe (Opera Software) -> www.facebook.com
==================== Modules chargés (Avec liste blanche) ==============
2013-10-17 15:27 - 2013-10-17 15:27 - 000166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2019-01-02 21:44 - 2018-11-21 11:07 - 002842608 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2019-01-02 21:44 - 2018-11-15 11:01 - 002712432 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000728792 _____ () c:\Program Files\AVAST Software\Avast\x64\StreamBack.dll
2015-11-18 10:08 - 2012-09-12 14:09 - 000094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2018-12-28 17:51 - 2015-10-29 16:58 - 000051712 _____ () C:\Program Files (x86)\ASUS\PC Link\ASUSUtility.dll
2018-12-28 17:50 - 2015-08-12 16:29 - 001009664 _____ () C:\Program Files (x86)\ASUS\PC Link\tools\adb.exe
2018-12-28 17:50 - 2015-08-12 16:29 - 005467527 _____ () C:\Program Files (x86)\ASUS\PC Link\tools\pclink_connect.exe
2018-12-18 12:27 - 2018-12-12 06:11 - 005237216 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\libglesv2.dll
2018-12-18 12:27 - 2018-12-12 06:11 - 000117216 _____ () C:\Program Files (x86)\Google\Chrome\Application\71.0.3578.98\libegl.dll
2012-10-01 18:56 - 2012-10-01 18:56 - 000240256 _____ () C:\Program Files\Microsoft Office\Office15\IEAWSDC.DLL
2018-12-18 20:29 - 2018-12-18 20:29 - 000919256 _____ () C:\Program Files\AVAST Software\Avast\anen.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000596696 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll
2019-01-02 18:56 - 2019-01-02 18:56 - 005740176 _____ () C:\Program Files\AVAST Software\Avast\defs\19010204\algo.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000496344 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 000150744 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll
2018-12-18 20:29 - 2018-12-18 20:29 - 001112280 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll
2016-01-15 00:38 - 2009-12-09 21:20 - 000126976 _____ () C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\EnumDevLib.dll
2018-12-18 14:47 - 2018-12-18 14:47 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2018-12-18 20:41 - 2016-09-12 14:53 - 048936448 _____ () C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\TEMP:6DDED7D9 [149]
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [192]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\...\webcompanion.com -> hxxp://webcompanion.com
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2009-07-14 03:34 - 2019-01-02 22:09 - 000001035 _____ C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 75.126.120.203
127.0.0.1 46.4.58.71
127.0.0.1 46.4.62.150
127.0.0.1 46.4.28.80
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\ProgramData\Oracle\Java\javapath;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\adb;;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64
HKU\S-1-5-21-2889287705-4184576696-1483232929-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Nasser\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Corporation)
FirewallRules: [{4FD5CC08-1B5F-495B-9DDD-5E9FB06D571C}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation)
FirewallRules: [{6A1AB90E-F857-4961-B4D6-FAB822E364F5}] => (Allow) C:\Program Files\Microsoft Office\Office15\lync.exe (Microsoft Corporation)
FirewallRules: [{B093DE69-DDD6-4443-9CF4-6CD885D1A452}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation)
FirewallRules: [{FAC46E52-6179-4260-9EF3-93925E8DCFA4}] => (Allow) C:\Program Files\Microsoft Office\Office15\UcMapi.exe (Microsoft Corporation)
FirewallRules: [{3A99E411-F5C1-48CF-974E-EB90FFB748CD}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
FirewallRules: [{B673B664-BB00-4053-B552-4D6A1F41902A}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RtWLan.exe (Realtek Semiconductor Corp.)
FirewallRules: [{1C0835B6-2B85-4F4A-8358-ABF623B3D821}] => (Allow) LPort=1542
FirewallRules: [{252D8E83-2392-4D2D-8FF8-67965EE18406}] => (Allow) LPort=1542
FirewallRules: [{4ACDAC7A-DAD6-48FD-BF9F-7628242A9444}] => (Allow) LPort=53
FirewallRules: [{110DE3C5-F5C4-4AB9-B79B-B8AD5ED5DE78}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\DeviceSetup.exe (Hewlett-Packard Co.)
FirewallRules: [{5E2C2878-4970-4B76-9311-BF0C91D5EC39}] => (Allow) LPort=5357
FirewallRules: [{AEB80C98-A83B-484C-BAFA-A1C5ED56BDE4}] => (Allow) C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPNetworkCommunicatorCom.exe (Hewlett-Packard Co.)
FirewallRules: [{EC714D25-DD76-4A4C-AC26-0C65DE4AA65B}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{51117311-D06D-49BB-BE53-81278718F698}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{95B96193-E543-41BE-B2E8-55C037318BA8}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{8C42C380-A18C-4DF3-8085-CAD414175D95}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{F224A538-C100-452A-B726-DDDFB458140C}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{542AFB1D-7E8C-42A3-A73E-4F0D0C00060F}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [TCP Query User{2A405555-C03A-4F18-913B-0FF18FF704BD}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [UDP Query User{786A00E9-5A61-4B3D-A12F-4EC1D271DD21}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [TCP Query User{E69764E5-B5F8-43A5-BAEC-0E91EB10A9BA}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [UDP Query User{C5A7B4B1-7CCA-429D-B896-985930942358}C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.4.9_43085.exe ()
FirewallRules: [{2EEF5813-AE32-4AEF-9E81-DDD294D1D6E1}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{2AE6BB02-C79B-48BC-860A-90BA65469CCA}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{731F894C-DB30-4B55-9D83-095AFDD1560E}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{66788C5F-730D-42A1-A1ED-03AFF41B729A}] => (Allow) C:\Program Files (x86)\REALTEK\RTL8187 Wireless LAN Utility\RTLDHCP.exe ()
FirewallRules: [{42D3E865-9A3D-4B05-9721-55C71339B75D}] => (Allow) LPort=53
FirewallRules: [{DA54AFD2-7113-41A0-98E2-D29B46E2990B}] => (Allow) LPort=500
FirewallRules: [{2C1F2AAE-AA8A-467A-AD58-D9F4957651C9}] => (Allow) LPort=4500
FirewallRules: [{89D20F88-853C-4E1C-BB27-26E3FD586BF7}] => (Allow) LPort=500
FirewallRules: [{A73C4BA7-1853-4773-8F8E-E29CFFF58C88}] => (Allow) LPort=4500
FirewallRules: [{971C5480-69E1-40AC-88A6-78F028F11417}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe (BlueStack Systems, Inc.)
FirewallRules: [{87537882-3028-4534-96CA-CBFCEAA40022}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.)
FirewallRules: [{981D724E-168E-44C6-BBE1-834F46F074A2}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.)
FirewallRules: [TCP Query User{7050B54E-D599-490E-AFDC-EFECBAFDB4A7}C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe ()
FirewallRules: [UDP Query User{BE506022-6C4A-4494-B413-AB7F87779538}C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe] => (Block) C:\users\nasser\appdata\roaming\utorrent\updates\3.5.3_44396.exe ()
FirewallRules: [{5E6D0B11-9A28-4BFE-BCF4-319EE557A4DD}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{DAB72384-47DF-4990-8572-E08C1802EEA6}] => (Allow) C:\Users\Nasser\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
FirewallRules: [{C91AD569-5006-4439-B6C9-F955A2BD1C2D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{135C0B80-E76D-4225-A5AB-BB9808CC37CA}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Ltd)
FirewallRules: [{61633C39-C109-4E6B-A8E4-D999BB5D421D}] => (Allow) C:\Program Files\Opera\56.0.3051.116\opera.exe (Opera Software)
FirewallRules: [{03BF2607-8CAA-4EA7-9999-40C2F1E511FB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
FirewallRules: [{936E1081-CE0B-4DAC-89CC-5BE8DBAC789F}] => (Allow) C:\Program Files (x86)\AVAST Software\Browser\Application\AvastBrowser.exe (AVAST Software)
FirewallRules: [{15F2628C-F463-4D6E-9D95-CC8DEAAFF97E}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{80540A3B-8A91-445E-806B-603B07D29527}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software)
FirewallRules: [{4990AA6D-4742-4A08-A14A-86FEA9B2D833}] => (Allow) C:\Program Files\Opera\57.0.3098.106\opera.exe (Opera Software)
FirewallRules: [TCP Query User{A85F3AB0-38B7-47E2-8360-68CB55BC0AAF}C:\program files\java\jre1.8.0_71\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe (Oracle Corporation)
FirewallRules: [UDP Query User{498D8ED6-EB52-43CE-9F1F-53D4340DC57A}C:\program files\java\jre1.8.0_71\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_71\bin\javaw.exe (Oracle Corporation)
FirewallRules: [{F1CA4E58-53F6-440A-912A-A7089CDACAAD}] => (Allow) C:\Program Files (x86)\ASUS\PC Link\PCLinkService.exe (ASUS)
==================== Points de restauration =========================
02-01-2019 19:30:27 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: MediaTek PreLoader USB VCOM (Android) (COM32)
Description: MediaTek PreLoader USB VCOM (Android)
Class Guid: {4d36e978-e325-11ce-bfc1-08002be10318}
Manufacturer: MediaTek Inc.
Service: wdm_usb
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Name: Clavier standard PS/2
Description: Clavier standard PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Claviers standard)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ZAM Helper Driver
Description: ZAM Helper Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: ZAM Guard Driver
Description: ZAM Guard Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer:
Service: ZAM_Guard
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Intel(R) 82579LM Gigabit Network Connection
Description: Intel(R) 82579LM Gigabit Network Connection
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Intel
Service: e1cexpress
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (01/03/2019 07:54:45 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Un problème a empêché l’envoi des données du Programme d’amélioration des services à Microsoft (erreur 80004005).
Error: (04/01/2010 07:07:19 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (04/01/2010 07:03:05 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (01/03/2019 05:45:04 AM) (Source: Office 2013 Licensing Service) (EventID: 0) (User: )
Description: Event-ID 0
Error: (01/02/2019 11:11:33 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Un problème a empêché l’envoi des données du Programme d’amélioration des services à Microsoft (erreur 80004005).
Error: (01/02/2019 06:54:17 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé.
Error: (01/02/2019 06:40:40 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Miracle Box_Cracked 2.58.exe, version : 2.5.8.0, horodatage : 0x2a425e19
Nom du module défaillant : Miracle Box_Cracked 2.58.exe, version : 2.5.8.0, horodatage : 0x2a425e19
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000049d7
ID du processus défaillant : 0x2144
Heure de début de l’application défaillante : 0x01d4a258313853cb
Chemin d’accès de l’application défaillante : C:\Users\Nasser\Documents\RAKUTEN\LOGIS ET DOCS\APPLICATIONS\Hacking Flashage Formatage\Projet Miracle Box tools\Miracle Box\Miracle Box 2.58 + Loader\Miracle Box_Cracked 2.58\Miracle Box_Cracked 2.58.exe
Chemin d’accès du module défaillant: C:\Users\Nasser\Documents\RAKUTEN\LOGIS ET DOCS\APPLICATIONS\Hacking Flashage Formatage\Projet Miracle Box tools\Miracle Box\Miracle Box 2.58 + Loader\Miracle Box_Cracked 2.58\Miracle Box_Cracked 2.58.exe
ID de rapport : efb039a3-0e50-11e9-8ec4-939c98b8af68
Error: (01/02/2019 04:03:57 AM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Un problème a empêché l’envoi des données du Programme d’amélioration des services à Microsoft (erreur 80004005).
Erreurs système:
=============
Error: (04/01/2010 07:08:01 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service HWDeviceService64.exe s’est terminé de façon inattendue pour la 1ème fois.
Error: (04/01/2010 07:06:56 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Camtel EVDO-Huawei. OUC n’a pas pu démarrer en raison de l’erreur :
Camtel EVDO-Huawei. OUC n’est pas une application Win32 valide.
Error: (04/01/2010 07:06:38 AM) (Source: e1cexpress) (EventID: 24) (User: )
Description: Intel(R) 82579LM Gigabit Network Connection
PROBLÈME : impossible de démarrer la carte réseau.
ACTION : installez le dernier pilote depuis "http://www.intel.com/support/go/network/adapter/home.htm".
Error: (04/01/2010 07:06:33 AM) (Source: volmgr) (EventID: 46) (User: )
Description: L'initialisation du fichier de vidage sur incident a échoué.
Error: (04/01/2010 07:04:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service HWDeviceService64.exe s’est terminé de façon inattendue pour la 1ème fois.
Error: (04/01/2010 07:01:45 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Camtel EVDO-Huawei. OUC n’a pas pu démarrer en raison de l’erreur :
Camtel EVDO-Huawei. OUC n’est pas une application Win32 valide.
Error: (04/01/2010 07:01:16 AM) (Source: e1cexpress) (EventID: 24) (User: )
Description: Intel(R) 82579LM Gigabit Network Connection
PROBLÈME : impossible de démarrer la carte réseau.
ACTION : installez le dernier pilote depuis "http://www.intel.com/support/go/network/adapter/home.htm".
Error: (04/01/2010 07:01:36 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 06:08:35 le 01/04/2010 n’était pas prévu.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz
Pourcentage de mémoire utilisée: 42%
Mémoire physique - RAM - totale: 8080.02 MB
Mémoire physique - RAM - disponible: 4684.29 MB
Mémoire virtuelle totale: 8078.22 MB
Mémoire virtuelle disponible: 4762.34 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:458.18 GB) (Free:167.1 GB) NTFS
Drive d: (HP_RECOVERY) (Fixed) (Total:7.48 GB) (Free:0.73 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
\\?\Volume{dc6a39c4-ae1a-11e5-a7a5-806e6f6e6963}\ (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 2CE0A2B8)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=458.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=7.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================