Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 Exécuté par jeje07 (2016-03-08 19:55:31) Exécuté depuis C:\Users\jeje07\Desktop Windows 10 Pro Version 1511 (X64) (2015-11-14 08:29:54) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-1073624782-3605320356-2191874252-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1073624782-3605320356-2191874252-503 - Limited - Disabled) Invité (S-1-5-21-1073624782-3605320356-2191874252-501 - Limited - Disabled) jeje07 (S-1-5-21-1073624782-3605320356-2191874252-1001 - Administrator - Enabled) => C:\Users\jeje07 ___VMware_Conv_SA___ (S-1-5-21-1073624782-3605320356-2191874252-1002 - Limited - Enabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {19259FAE-8396-A113-46DB-15B0E7DFA289} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: ESET NOD32 Antivirus 8.0 (Enabled - Up to date) {A2447E4A-A5AC-AE9D-7C6B-2EC29C58E834} FW: Outpost Firewall Pro (Enabled) {BFD97B08-B281-A36A-4414-803D4491AB1D} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 3.5.1.209 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\{0608F2B6-4E49-4AD0-9128-C122A34CFCE1}) (Version: 20.0.0.306 - Adobe Systems Incorporated) Adobe Lightroom (HKLM-x32\...\{8048A5DF-8A70-5BE1-954B-E0FDE1BD0D0D}) (Version: 6.4 - Adobe Systems Incorporated) Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.1.2 - Adobe Systems Incorporated) Adobe Premiere Pro CC 2015 (HKLM-x32\...\{38C72D42-0672-43B1-9E05-E7631684F9A1}) (Version: 9.2.0 - Adobe Systems Incorporated) Alternate DLL Analyzer 1.431 (HKLM-x32\...\Alternate DLL Analyzer_is1) (Version: - Alternate Tools) AnmanieSMP 2.4 i (HKLM-x32\...\AnmanieSMP_is1) (Version: - Christoph Walter) Ant Renamer (HKLM-x32\...\Ant Renamer 2_is1) (Version: 2.12.0 - Ant Software) AOMEI Partition Assistant Pro Edition 5.8 (DEMO) (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-5498165BF3D1}_is1) (Version: - AOMEI Technology Co., Ltd.) archttp (HKLM-x32\...\archttp) (Version: 1.0.0.0 - ) Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{DF6C3726-7E53-4772-9763-E9F147769F51}) (Version: 3.1.6.0000 - Asmedia Technology) ASUS Xonar Essence STX Audio (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392008788}) (Version: - ASUSTeK Computer Inc.) AutoHotkey 1.1.22.09 (HKLM\...\AutoHotkey) (Version: 1.1.22.09 - Lexikos) Classic Shell (HKLM\...\{D4B3454F-7529-4F5F-851D-2C36933F7D64}) (Version: 4.2.5 - IvoSoft) Clavier+ 10.6.7 (HKLM\...\Clavier+_is1) (Version: 10.6.7 - Guillaume Ryder) DeskPins (remove only) (HKLM-x32\...\DeskPins) (Version: - ) Dexpot (HKU\S-1-5-21-1073624782-3605320356-2191874252-1001\...\Dexpot) (Version: 1.6.14 - Dexpot GbR) DiRT Rally - Patch FR 1.00 (HKLM-x32\...\DiRT Rally - Patch FR 1.00) (Version: 1.00 - TraductionJeux.com) DiRT Rally Update v1.02 (HKLM\...\ZGlydHJhbGx5_is1) (Version: 1 - ) Dual Monitor Tools (HKLM-x32\...\{14DF3258-CA2F-4166-9713-EB7BB9D55307}) (Version: 2.3.0.0 - GNE) DxO OpticsPro 10 (HKLM\...\{5D3A3424-828C-4023-9C20-996679CFDA0B}) (Version: 10.5.3 - DxO) ESET NOD32 Antivirus (HKLM\...\{5F2AE448-CD4B-40BD-B245-5F0CD06A09B0}) (Version: 8.0.319.0 - ESET, spol s r. o.) Everyday Folder Icons v 1.0 (HKLM-x32\...\Everyday Folder Icons_is1) (Version: 1.0 - ArcticLine Software) Exact Audio Copy 1.1 (HKLM-x32\...\Exact Audio Copy) (Version: 1.1 - Andre Wiethoff) Fallout 4 (HKLM-x32\...\Fallout 4_is1) (Version: - ) Fallout 4 French Language Pack (HKLM-x32\...\Fallout 4 French Language Pack_is1) (Version: - ) foobar2000 v1.3.9 (HKLM-x32\...\foobar2000) (Version: 1.3.9 - Peter Pawlowski) Greenshot 1.2.5.19 (HKLM\...\Greenshot_is1) (Version: 1.2.5.19 - Greenshot) Hard Disk Sentinel (HKLM-x32\...\Hard Disk Sentinel_is1) (Version: - HDS) HashTab 5.2.0.14 (HKLM\...\HashTab) (Version: 5.2.0.14 - Implbits Software) IcoSauve (HKLM-x32\...\IcoSauve_is1) (Version: - Pierre TORRIS) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.6.0.1029 - Intel Corporation) InternetOff 2.3, 32\64 bit edition (HKLM-x32\...\InternetOff_is1) (Version: - Crystal Rich, Ltd) IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1 - IObit) Java 8 Update 74 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418074F0}) (Version: 8.0.740.2 - Oracle Corporation) Kyodai Mahjongg 2006 v1.42 (HKLM-x32\...\Kyodai Mahjongg 2006_is1) (Version: - Rene-Gilles Deberdt) Life Is Strange (HKLM-x32\...\Life Is Strange_is1) (Version: - SQUARE ENIX) LRTimelapse 4.3 (HKLM-x32\...\{3B86296C-F4C8-4FE7-8561-CC5F444098D4}}_is1) (Version: 4.3 - Gunther Wegner) Macrium Reflect Free Edition (HKLM\...\MacriumReflect) (Version: 6.1 - Paramount Software (UK) Ltd.) Macrium Reflect Free Edition (Version: 6.1.1023 - Paramount Software (UK) Ltd.) Hidden MediaInfo 0.7.83 (HKLM\...\MediaInfo) (Version: 0.7.83 - MediaArea.net) MemInfo (remove only) (HKLM-x32\...\MemInfo) (Version: - ) Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 16.0.4266.1003 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{f9b04b37-35d5-4a19-a51b-fcf4a8734851}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Module externe DxO OpticsPro 10 pour Adobe Lightroom (HKLM-x32\...\{79C97462-1598-48CD-B597-8B3C3C5A20B8}) (Version: 1.0.30 - DxO Labs) MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version: - Pavel Cvrcek) Mozilla Firefox 45.0 (x64 fr) (HKLM\...\Mozilla Firefox 45.0 (x64 fr)) (Version: 45.0 - Mozilla) MPC-HC 1.7.9 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.9 - MPC-HC Team) MSI Afterburner 4.2.0 (HKLM-x32\...\Afterburner) (Version: 4.2.0 - MSI Co., LTD) NetWorx 5.5.1 (HKLM\...\NetWorx_is1) (Version: - Softperfect) Nik Collection (HKLM-x32\...\Nik Collection) (Version: 1.2.11 - Google) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.8.8 - Notepad++ Team) NVIDIA Logiciel système PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Pilote graphique 361.82 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.82 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (Version: 16.0.4266.1003 - Microsoft Corporation) Hidden Old Calculator for Windows 10 (HKLM-x32\...\OldCalcForWin10) (Version: 1.1 - hxxp://winaero.com) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Outpost Firewall Pro 9.3 (HKLM\...\Agnitum Outpost Firewall Pro_is1) (Version: 9.3 - Agnitum, Ltd.) Panneau de configuration NVIDIA 361.82 (Version: 361.82 - NVIDIA Corporation) Hidden PC8DeviceAgent 2.1.191 (HKLM\...\PC8DeviceAgent) (Version: 2.1.191 - SRM, Inc.) PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.316.1 - Tracker Software Products Ltd) Photomatix Pro version 5.1.1 (HKLM\...\PhotomatixPro5x64_is1) (Version: 5.1.1 - HDRsoft Ltd) Process Lasso (HKLM-x32\...\ProcessLasso) (Version: 8.9.6.8 - Bitsum) Rainmeter (HKLM-x32\...\Rainmeter) (Version: 3.2.1 r2386 - ) Recuva (HKLM\...\Recuva) (Version: 1.52 - Piriform) Rise of the Tomb Raider (HKLM-x32\...\Steam App 391220) (Version: - Crystal Dynamics) RivaTuner Statistics Server 6.4.1 (HKLM-x32\...\RTSS) (Version: 6.4.1 - Unwinder) RocketDock 1.3.5 (HKLM-x32\...\RocketDock_is1) (Version: - Punk Software) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.9 - Rockstar Games) scrabbleproB 1.1.7 (HKLM-x32\...\scrabbleproB_is1) (Version: - scrabblepro) Ski Challenge 16 (HKU\S-1-5-21-1073624782-3605320356-2191874252-1001\...\sc16-GAMETWIST_MAIN) (Version: - ) Soldats Inconnus Mémoires de la Grande Guerre 1.0.140373 (HKLM-x32\...\Soldats Inconnus Mémoires de la Grande Guerre 1.0.140373) (Version: 1.0.140373 - Huyustus) Speccy (HKLM\...\Speccy) (Version: 1.29 - Piriform) SRM Install CDRom 6.42.18 (HKLM-x32\...\{6B3C0CE2-AB22-4800-9413-5DDB652E95FA}) (Version: 6.42.18 - SRM) SRMX (HKLM-x32\...\{de.srm.srmx.Main}}_is1) (Version: 3.1.429 - SRM) Startup Delayer v3.0 (build 364) (HKLM-x32\...\Startup Delayer) (Version: 3.0 (build 364) - r2 Studios) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) SuperCopier2 (HKLM-x32\...\SuperCopier2) (Version: - ) Switcher 2.0.0 (HKLM-x32\...\{F7DB6677-661D-4835-AAD8-1B7F4C98D7CE}) (Version: 2.0.0 - Bao Nguyen) SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 7.5.19.0 - 2BrightSparks) Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium) The Bat! v7.1.12 (64-bit) (HKLM\...\{244BF24D-E799-475F-BA46-0EFC63C39C72}) (Version: 7.1.12 - Ritlabs, SRL) Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.8.0 - Tweaking.com) VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.8.0 - Elaborate Bytes) VLC media player (HKLM\...\VLC media player) (Version: 2.2.2 - VideoLAN) VMware vCenter Converter Standalone (HKLM-x32\...\{E9CC0208-D63B-4c63-90B1-598F99981D9F}) (Version: 6.0.0.2716716 - VMware, Inc.) VMware Workstation (HKLM\...\{4E3CD3D0-7F82-4B44-A3D9-A4000522B529}) (Version: 12.1.0 - VMware, Inc.) Win7 MAC Address Changer version 1.9.5 (HKLM-x32\...\{F9A76116-6D56-4CEA-830E-E95C168DC95B}_is1) (Version: 1.9.5 - Zokali) Windows 10 Manager (HKU\S-1-5-21-1073624782-3605320356-2191874252-1001\...\Windows 10 Manager 1.0.9) (Version: 1.0.9 - Yamicsoft) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 5.30 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH) WinSplit Revolution (v11.04) (HKLM-x32\...\WinSplit Revolution) (Version: 11.04 - Raphael Lencrerot) WinUAE (HKLM-x32\...\{8AF30406-0DBC-4F26-9F69-073B6EC6C66E}) (Version: 3.2.0.0 - Arabuusimiehet) Wireshark 2.0.0 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.0 - The Wireshark developer community, hxxps://www.wireshark.org) XnConvert 1.71 (HKLM\...\XnConvert_is1) (Version: 1.71 - Gougelet Pierre-e) XnView Shell Extension 3.5.1 (64bits) (HKLM\...\XnView Shell Extension_is1) (Version: 3.5.1 - Gougelet Pierre-e) XnViewMP 0.78 (HKLM\...\XnViewMP_is1) (Version: 0.78 - Gougelet Pierre-e) xrecode II 1.0.0.227 (HKLM-x32\...\{AFE83615-88BE-47F6-B3E4-A3FEF8B7B57F}_is1) (Version: - ) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-1073624782-3605320356-2191874252-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-AF32EFA7D0B8}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-1073624782-3605320356-2191874252-1001_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\jeje07\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\FileCoAuth.exe (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-1073624782-3605320356-2191874252-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0779144C-BEAA-4498-9CB2-F8949C64D0D9} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-08-15] (Microsoft Corporation) Task: {09323380-4901-4D20-9A20-D3897471F2AA} - System32\Tasks\Process Lasso Core Engine Only => C:\Program Files\Process Lasso\processgovernor.exe [2016-02-24] (Bitsum LLC) Task: {151B737C-08BF-4228-A34D-90845CC216E6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-02-09] (Microsoft Corporation) Task: {1E7AEDA6-84F1-429D-9291-BA779C79D2D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-02] (Google Inc.) Task: {2FC6FC1E-7A5E-411C-B536-3BF860AEDF9C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2015-10-18] (Microsoft Corporation) Task: {4E73E806-F0D6-48FA-AC96-5F5A5E6DF355} - System32\Tasks\Dexpot\2 => C:\Program Files (x86)\Dexpot\autodex.exe [2014-01-03] (Dexpot GbR) <==== ATTENTION Task: {55FF1C06-4E21-4CA2-9A88-B02A43BFFABA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [2015-10-18] (Microsoft Corporation) Task: {67ECE433-5BDA-42D6-B20E-BA6C5D1CF8F8} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-gokpok@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-01-07] (Adobe Systems Incorporated) Task: {9A4BA988-47ED-488B-8796-3718FCB60B5E} - System32\Tasks\Process Lasso Management Console (GUI) => C:\Program Files\Process Lasso\processlasso.exe [2016-02-24] (Bitsum LLC) Task: {A4A6D0B8-9C91-4E9B-B095-48CE1919A2B3} - System32\Tasks\HardDiskSentinel\Hard Disk Sentinel_jeje07 => C:\Program Files (x86)\Hard Disk Sentinel\HDSentinel.exe [2015-11-04] (H.D.S. Hungary) Task: {B1B576C4-9E18-4531-BD73-7F6C52E132B9} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-17] (Adobe Systems Incorporated) Task: {BF5DB3DF-8D2C-478C-A622-3589C88EE210} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\WINDOWS\system32\MRT.exe [2016-02-09] (Microsoft Corporation) Task: {CECD6FB7-DCFC-4846-99DD-82AFB8F0E628} - System32\Tasks\Open Hardware Monitor\Startup => C:\Program Files (x86)\OpenHardwareMonitor\OpenHardwareMonitor.exe [2014-12-31] () Task: {CFC4C5DF-C574-43C4-85F6-7E07A0274A17} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-12-02] (Google Inc.) Task: {E719D390-CFF7-4DD8-9B44-4251CE567589} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2015-08-15] (Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Raccourcis ============================= (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2015-11-25 18:09 - 2015-11-25 18:09 - 01301696 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll 2015-05-05 03:05 - 2015-05-05 03:05 - 00191704 _____ () C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\LIBEXPAT.dll 2015-05-05 03:05 - 2015-05-05 03:05 - 00388824 _____ () C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\ssoClient.dll 2015-05-05 03:04 - 2015-05-05 03:04 - 01301720 _____ () C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\libxml2.dll 2015-05-05 03:05 - 2015-05-05 03:05 - 00086744 _____ () C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\mspack.dll 2015-05-05 03:03 - 2015-05-05 03:03 - 00542936 _____ () C:\Program Files (x86)\VMware\VMware vCenter Converter Standalone\sqlite3.dll 2015-10-12 20:33 - 2015-10-10 22:19 - 00143360 ____N () C:\Program Files\ASUS Xonar Essence STX Audio\Customapp\VmixP8.dll 2015-10-12 20:33 - 2015-10-12 20:35 - 00200704 _____ () C:\Windows\SysWOW64\HsMgr.exe 2015-10-23 14:08 - 2013-10-07 10:47 - 03158328 _____ () C:\Program Files (x86)\InternetOff\InternetOff.exe 2011-04-12 21:53 - 2011-04-12 21:53 - 00013312 _____ () C:\Program Files (x86)\WinSplit Revolution\WinSplitHook32.DLL 2015-10-12 21:43 - 2007-09-02 12:57 - 00069632 _____ () C:\Program Files (x86)\RocketDock\RocketDock.dll 2011-04-12 21:53 - 2011-04-12 21:53 - 03951616 _____ () C:\Program Files (x86)\WinSplit Revolution\WinSplit.exe 2011-04-12 21:53 - 2011-04-12 21:53 - 00011264 _____ () C:\Program Files (x86)\WinSplit Revolution\WinSplitLib.dll 2011-04-12 21:53 - 2011-04-12 21:53 - 00015872 _____ () C:\Program Files (x86)\WinSplit Revolution\WinSplitDrvr32.exe 2015-10-13 09:47 - 2014-10-03 13:06 - 00014848 _____ () C:\volumouse-x64\volumouse32.exe 2015-10-12 21:43 - 2007-09-02 12:58 - 00495616 _____ () C:\Program Files (x86)\RocketDock\RocketDock.exe 2015-10-13 09:14 - 2014-04-07 11:18 - 02592256 _____ () C:\Users\jeje07\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Système\Gest\Gest.exe ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\acssrv => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\acssrv => ""="Service" ==================== EXE Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: ========================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2015-07-10 12:04 - 2016-02-12 11:00 - 00282604 ____A C:\WINDOWS\system32\Drivers\etc\hosts 0.0.0.0 vortex.data.microsoft.com 0.0.0.0 vortex-win.data.microsoft.com 0.0.0.0 telecommand.telemetry.microsoft.com 0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net 0.0.0.0 oca.telemetry.microsoft.com 0.0.0.0 sqm.telemetry.microsoft.com 0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net 0.0.0.0 watson.telemetry.microsoft.com 0.0.0.0 watson.telemetry.microsoft.com.nsatc.net 0.0.0.0 redir.metaservices.microsoft.com 0.0.0.0 choice.microsoft.com 0.0.0.0 choice.microsoft.com.nsatc.net 0.0.0.0 wes.df.telemetry.microsoft.com 0.0.0.0 services.wes.df.telemetry.microsoft.com 0.0.0.0 sqm.df.telemetry.microsoft.com 0.0.0.0 telemetry.microsoft.com 0.0.0.0 watson.ppe.telemetry.microsoft.com 0.0.0.0 telemetry.appex.bing.net 0.0.0.0 telemetry.urs.microsoft.com 0.0.0.0 telemetry.appex.bing.net:443 0.0.0.0 settings-sandbox.data.microsoft.com 0.0.0.0 survey.watson.microsoft.com 0.0.0.0 watson.live.com 0.0.0.0 watson.microsoft.com 0.0.0.0 statsfe2.ws.microsoft.com 0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com 0.0.0.0 compatexchange.cloudapp.net 0.0.0.0 a-0001.a-msedge.net 0.0.0.0 statsfe2.update.microsoft.com.akadns.net 0.0.0.0 sls.update.microsoft.com.akadns.net Il y a 8094 plus de lignes. ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-1073624782-3605320356-2191874252-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\jeje07\AppData\Roaming\Dexpot\Hintergrund 1.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu is disabled. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Actuellement, il n'y a pas de correction automatique pour cette section.) ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [{4F7FC5AC-C051-43E7-92FC-337EC0537D23}] => (Allow) LPort=9089 FirewallRules: [{05D36A30-CCC5-4C85-BDE7-F9DB4E30BC8A}] => (Allow) C:\Program Files\NetWorx\networx.exe FirewallRules: [{F245222B-2FCA-4BD2-AF33-0D8E904ED182}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{F807D6CC-9170-4C71-835E-CB7CD842F8A7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{DB591588-1C8A-45DE-BF1C-67D85BF53279}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0A8BD709-D0B9-43D2-9B3C-0632D672798E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{22837916-9C84-4F94-9F69-A91A5815AEC2}] => (Allow) J:\SteamLibrary\SteamApps\common\Tomb Raider\TombRaider.exe FirewallRules: [{A291DA70-A994-4877-B6DE-C51BED1FA096}] => (Allow) J:\SteamLibrary\SteamApps\common\Tomb Raider\TombRaider.exe FirewallRules: [{D7915F04-0E6B-4284-B0CA-87A5D28F52AD}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{85E2A797-309D-4A22-8E22-8F98C97547CC}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{FA8E960E-F6DA-4DC4-A2EF-522271A7CE68}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{24C027C7-1919-4BB1-B2DD-24DAD1A83E53}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{FD23A64A-0672-47F2-A1E8-77932AAE9BB6}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{F36967AB-72CF-4781-9B96-E6621E1F9AD7}] => (Allow) J:\SteamLibrary\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe FirewallRules: [{E5202F91-311C-424A-8864-63C23BD73F76}] => (Allow) J:\SteamLibrary\SteamApps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe FirewallRules: [{23C3101D-1843-4881-9223-4DA27D9D6619}] => (Allow) J:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{2C3FA992-3D60-47C6-AE60-B34D3F170BF5}] => (Allow) J:\SteamLibrary\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{EF26B807-AA1A-41F8-9081-7C45CD563CB1}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{FB2EDC37-271C-4F79-850B-19F18F5A64CA}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{FF69A4DE-7C8D-441C-B0E1-88C0E8DD2C13}] => (Allow) J:\SteamLibrary\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe FirewallRules: [{F11965A9-8FC2-4FD5-A923-67531B174473}] => (Allow) J:\SteamLibrary\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe FirewallRules: [{A5E0C2BE-96FF-4E4A-8943-37E41D97E2BC}] => (Allow) J:\SteamLibrary\SteamApps\common\pCars\pCARS64.exe FirewallRules: [{9D060240-FDF3-4AAB-95E2-167DEBE985AC}] => (Allow) J:\SteamLibrary\SteamApps\common\pCars\pCARS64.exe FirewallRules: [{22947734-561F-45D2-937B-F8852F9EF50E}] => (Allow) C:\Program Files\NetWorx\networx.exe FirewallRules: [{3B1FBC5D-CC3C-417B-BE98-2CAC858D9EA5}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe FirewallRules: [{F24FFE01-2424-4AA3-9821-C9351CDEB97D}] => (Allow) C:\Program Files\DriversCloud.com\MCDetection.exe FirewallRules: [{3B302CBF-CD28-436C-8D94-006C01778ACA}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{57D3FC03-F96A-4546-8148-FA5A4FA90985}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{10F3FBA6-EB92-4B8B-8C62-58626A12400E}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{C4BFA002-9FAB-4274-9AB9-8DFAF9F3ED10}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{FEDC8B7B-CDA6-4A85-8E00-694452B7FD8B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{71FA3FC8-5341-4E45-8BF5-6F35049961CE}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{7FA6C5AB-3886-4954-8DD3-52D267F9A1D2}] => (Allow) J:\SteamLibrary\SteamApps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{409971F0-7C7B-49FF-BC82-B93A49805D0B}] => (Allow) J:\SteamLibrary\SteamApps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{F73A88F9-BD8A-4EA9-B9D5-CD085A8ADE87}] => (Allow) C:\Program Files\NetWorx\networx.exe ==================== Points de restauration ========================= ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: VMware Virtual Ethernet Adapter for VMnet1 Description: VMware Virtual Ethernet Adapter for VMnet1 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: VMware Virtual Ethernet Adapter for VMnet8 Description: VMware Virtual Ethernet Adapter for VMnet8 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: VMware, Inc. Service: VMnetAdapter Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (03/08/2016 07:44:59 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:42:21 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante ArcHttpSrv.exe, version : 0.0.0.0, horodatage : 0x502b0b79 Nom du module défaillant : ArcHttpSrv.exe, version : 0.0.0.0, horodatage : 0x502b0b79 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00021063 ID du processus défaillant : 0x7d0 Heure de début de l’application défaillante : 0xArcHttpSrv.exe0 Chemin d’accès de l’application défaillante : ArcHttpSrv.exe1 Chemin d’accès du module défaillant: ArcHttpSrv.exe2 ID de rapport : ArcHttpSrv.exe3 Nom complet du package défaillant : ArcHttpSrv.exe4 ID de l’application relative au package défaillant : ArcHttpSrv.exe5 Error: (03/08/2016 07:38:59 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:38:59 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:36:57 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:25:58 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:19:58 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:19:58 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:17:56 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Error: (03/08/2016 07:06:58 PM) (Source: PerfNet) (EventID: 2004) (User: ) Description: Erreurs système: ============= Error: (03/08/2016 07:42:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service ArcHttpProxyServer s’est terminé de façon inattendue pour la 1ème fois. Error: (03/08/2016 05:16:55 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 05:06:18 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 05:06:13 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 04:39:58 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 04:39:55 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 04:39:31 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 03:47:02 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible Error: (03/08/2016 03:45:39 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service AdobeUpdateService s’est terminé de façon inattendue pour la 1ème fois. Error: (03/08/2016 03:45:37 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-UHL3C46) Description: "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca267CortanaUI.AppXtpp90jhw9p0njjb85kvhxpppgrqfp117.mcaNon disponibleNon disponible ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz Pourcentage de mémoire utilisée: 13% Mémoire physique - RAM - totale: 16327.85 MB Mémoire physique - RAM - disponible: 14044.78 MB Mémoire virtuelle totale: 22327.85 MB Mémoire virtuelle disponible: 19842.34 MB ==================== Lecteurs ================================ Drive c: (WINDOWS 10) (Fixed) (Total:237.99 GB) (Free:137.13 GB) NTFS Drive d: (DONNEES - Raid 0) (Fixed) (Total:11177.94 GB) (Free:4625.26 GB) NTFS Drive j: (JEUX) (Fixed) (Total:465.76 GB) (Free:70.88 GB) NTFS ==================== MBR & Table des partitions ================== ==================== Fin de Addition.txt ============================