Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version:05-03-2016 01 Exécuté par Lucas (2016-03-15 07:34:36) Exécuté depuis C:\Users\Lucas\Downloads Windows 10 Pro Version 1511 (X64) (2016-01-15 08:40:00) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-2173005705-4068633014-4016122132-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2173005705-4068633014-4016122132-503 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2173005705-4068633014-4016122132-1002 - Limited - Enabled) Invité (S-1-5-21-2173005705-4068633014-4016122132-501 - Limited - Disabled) Lucas (S-1-5-21-2173005705-4068633014-4016122132-1000 - Administrator - Enabled) => C:\Users\Lucas ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) «Goodbye Deponia» 1.0 (HKLM-x32\...\«Goodbye Deponia»_is1) (Version: 1.0 - Daedalic) µTorrent (HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\uTorrent) (Version: 3.4.5.41712 - BitTorrent Inc.) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 15.009.20069 - Adobe Systems Incorporated) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated) Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.182 - Adobe Systems Incorporated) Adobe Flash Player 21 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 21.0.0.182 - Adobe Systems Incorporated) Audacity 2.1.0 (HKLM-x32\...\Audacity_is1) (Version: 2.1.0 - Audacity Team) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) CCleaner (HKLM\...\CCleaner) (Version: 5.15 - Piriform) Creative System Information (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited) DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.2.0.0114 - Disc Soft Ltd) DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd) Deponia Doomsday (HKLM-x32\...\Deponia Doomsday_is1) (Version: - ) ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) FXAA Post Process Injector (HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\FXAA Post Process Injector) (Version: - ) Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios) Gestionnaire pour appareils Windows Mobile (HKLM\...\{626672CD-BFCF-49A9-AEFE-AB0FED3BFC5B}) (Version: 6.1.6965.0 - Microsoft Corporation) Google Chrome (HKLM-x32\...\{105817D8-7339-361E-BCA0-80B068E68137}) (Version: 49.0.2623.87 - Google, Inc.) Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Grand Theft Auto IV (x32 Version: 1.0.0011.131 - Rockstar Games Inc.) Hidden Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden H1Z1: King of the Kill (HKLM-x32\...\Steam App 433850) (Version: - Daybreak Game Company) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) I Am Alive (x32 Version: 1.00.0 - Ubisoft) Hidden Java 8 Update 73 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218073F0}) (Version: 8.0.730.2 - Oracle Corporation) JavaFX 2.1.1 (HKLM-x32\...\{1111706F-666A-4037-7777-211328764D10}) (Version: 2.1.1 - Oracle Corporation) League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games) League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden LibUSB-Win32-0.1.10.1 (HKLM-x32\...\LibUSB-Win32_is1) (Version: 0.1.10.1 - LibUSB-Win32) Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft LifeCam (HKLM\...\{5CE7E3F5-9803-4F32-AA89-2D8848A80109}) (Version: 3.60.253.0 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053 (HKLM-x32\...\{770657D0-A123-3C07-8E44-1C83EC895118}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{820B6609-4C97-3A2B-B644-573B06A0F0CC}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{f9b04b37-35d5-4a19-a51b-fcf4a8734851}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3bcf8c72-b231-4d28-9f39-3405c22d8b5a}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation) Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Mises à jour NVIDIA 2.10.2.40 (Version: 2.10.2.40 - NVIDIA Corporation) Hidden MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation) MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation) MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios) NVIDIA GeForce Experience 2.10.2.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.10.2.40 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) NVIDIA Pilote 3D Vision 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 364.51 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation) NVIDIA Pilote du contrôleur 3D Vision 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation) NVIDIA Pilote graphique 364.51 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 364.51 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.) Panneau de configuration NVIDIA 364.51 (Version: 364.51 - NVIDIA Corporation) Hidden Presenter Mouse (HKLM-x32\...\{85D2342E-01E8-44E2-8892-DB68D221D003}) (Version: - ) Quake Live Mozilla Plugin (HKLM-x32\...\{FA66CFD7-0977-4C45-AACD-A8BB994B1A05}) (Version: 1.0.520 - id Software) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.46.610.2011 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6402 - Realtek Semiconductor Corp.) SHIELD Streaming (Version: 5.1.0270 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.10.2.40 - NVIDIA Corporation) Hidden Sid Meier's Civilization V (HKLM-x32\...\Sid Meier's Civilization V_is1) (Version: - ) Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.112 - Skype Technologies S.A.) Sony Mobile Update Engine (HKLM-x32\...\Update Engine) (Version: 2.14.15.201410271230 - Sony Mobile Communications Inc.) Sony PC Companion 2.10.289 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.289 - Sony) STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.28745 - Electronic Arts) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Sven Co-op (HKLM-x32\...\Steam App 225840) (Version: - Sven Co-op Team) System Requirements Lab CYRI (HKLM-x32\...\{F3FCB08B-E752-444D-86A0-0634A4F3B23D}) (Version: 6.0.8.0 - Husdawg, LLC) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH) The Witcher 2: Assassins of Kings Enhanced Edition (HKLM-x32\...\Steam App 20920) (Version: - CD PROJEKT RED) The Witcher: Enhanced Edition (HKLM-x32\...\Steam App 20900) (Version: - CD PROJEKT RED) Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.8.4 - Tweaking.com) Vegas Pro 12.0 (64-bit) (HKLM\...\{65386170-2680-11E3-ACE4-F04DA23A5C58}) (Version: 12.0.726 - Sony) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN) Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.) Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation) WinRAR 4.01 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.01.0 - win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Lucas\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {026314AF-DFEF-4C8F-8C60-76E92910B85D} - System32\Tasks\{87E00DDB-98AE-49BC-9EA8-2DE9AC0DD485} => pcalua.exe -a "C:\Program Files (x86)\Mozilla Firefox\uninstall\helper.exe" Task: {02F4E179-BCEE-4319-962C-E930DFF2C1BA} - System32\Tasks\{D06C9EDE-D426-4D96-9147-E30CD33C79B5} => C:\Program Files (x86)\Ubisoft\Assassin's Creed Revelations\ACRSP.exe Task: {05725919-F46A-46DE-A5AA-AD9BAFE77A59} - System32\Tasks\CreateExplorerShellUnelevatedTask => /NOUACCHECK Task: {0A61EF62-1CD3-4082-ABBA-04596A4BA230} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe Task: {0E6B3BA8-4D7E-405C-B2F0-6BDD03C53715} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-12] (Tweaking.com) Task: {13B295D8-FD9E-48A4-9646-78D7A6E4980A} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-03-12] (Microsoft Corporation) Task: {16121A59-E407-439B-9B01-59CDDDE28C33} - System32\Tasks\{99FFA1CE-9DBF-466D-A45A-2699CD9B9B7E} => pcalua.exe -a C:\Users\Lucas\Downloads\Windows_Movie_Maker_2.0.exe -d C:\Users\Lucas\Downloads Task: {1DA94E4C-890E-43F9-A338-2D21DEEBCD43} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe Task: {1E941C1C-EB07-45B8-9915-B8C08D58F337} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {1F09176E-D0AF-4038-B8E8-E72062253ED4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-14] (Google Inc.) Task: {25166750-7BCF-482C-B097-7A882CAE945F} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe Task: {267B5B5F-783E-4518-B81D-3866E36D0241} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe Task: {2DCAF3F5-DCC4-46B7-92C2-7415762E8BA1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe Task: {32771230-FA9B-40DA-8296-806E45D02435} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe Task: {344A2276-2C2B-4046-817A-5781ACC23D03} - System32\Tasks\{9B1CA64A-FE70-4945-863B-DA9AB0186311} => Firefox.exe hxxp://ui.skype.com/ui/0/6.3.73.105.457/fr/abandoninstall?page=tsMain Task: {3D592F78-3199-4D76-A44B-02D6E6B59026} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe Task: {402D99AC-1888-4F06-BEA3-FC1BDD01C593} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-03-14] (Google Inc.) Task: {4236E6E5-2FAF-40E4-B92B-91FB5C6FD4C3} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe Task: {44B1EFF3-09FB-4608-8B41-8A914BE2FE41} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe Task: {4695C370-6483-450B-8214-2E4058CE4F10} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe Task: {49D2B1F2-2071-44A4-A147-D2F508151433} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\WINDOWS\system32\MRT.exe [2016-03-12] (Microsoft Corporation) Task: {579F3B37-2012-4063-86AE-7FEFBD30F771} - System32\Tasks\{2F17D06F-72AF-4820-BAFC-0A215BBCEE19} => pcalua.exe -a C:\Users\Lucas\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe -c /uninstall Task: {593F0CE2-061B-423A-881F-B062FAA43812} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {5FB856D8-A91E-44F6-B293-2925B23BBB9D} - System32\Tasks\{FE03E286-9173-4577-83E3-06DD30C453DB} => pcalua.exe -a C:\Users\Lucas\AppData\Local\Temp\VSDAA1.tmp\vcredist_x86\vcredist_x86.exe -d "C:\Program Files (x86)\Opera" -c /q:a Task: {60E26A76-FA5D-4E95-914A-C14172F61BA6} - System32\Tasks\{E445BCF4-DEBF-4870-966F-252E3999757B} => c:\program files (x86)\opera\launcher.exe Task: {65C105ED-A491-4123-AF1B-0BE28033A958} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe Task: {6A340063-B162-4775-A378-1622ECE2B24D} - System32\Tasks\{FD307F12-DDC2-468C-BA4E-2AA370F74C95} => pcalua.exe -a C:\Users\Lucas\Downloads\Sixaxis-Windows\Sixaxis-Windows\Sixaxis_PS3_Win32_Driver_For_PC\libusb-win32-filter-bin-0.1.10.1.exe -d C:\Users\Lucas\Downloads\Sixaxis-Windows\Sixaxis-Windows\Sixaxis_PS3_Win32_Driver_For_PC Task: {6B4CDC69-F977-4B43-94B2-24504F7C8E0F} - System32\Tasks\{79CC46C6-AE4C-4449-A72A-D4AD80C3128E} => C:\Program Files (x86)\Mumble\mumble.exe Task: {6C962AD4-695A-4157-8C3F-589E4ED5DB98} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {6D166E70-DF0E-4859-8447-2042F794D927} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe Task: {7C879531-9B17-426E-8F5E-DA2FC262BDB0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-03-11] (Adobe Systems Incorporated) Task: {7E32E403-66F0-4608-BD9F-D07EE71D774E} - System32\Tasks\Microsoft\Microsoft Antimalware\Microsoft Antimalware Scheduled Scan => c:\Program Files\Microsoft Security Client\MpCmdRun.exe Task: {80F8CEAE-AE60-4503-BF01-F879842DBAD3} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe Task: {825C175F-7816-4F3E-9BA8-EEFC49E9D110} - System32\Tasks\MS => hxxp://gangnamgame.org Task: {8335DAF9-6E21-425F-AA73-00357724BACA} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe Task: {85746414-C9ED-4010-8A7D-FABD382A419B} - System32\Tasks\{4301C928-2493-4FC5-8F30-C40BEB109A19} => pcalua.exe -a "C:\Users\Lucas\Documents\Mes jeux\Fichers Skyrim\Mod Eclairage\Post_Process_Injector_1_3_Installer-131.exe" -d "C:\Users\Lucas\Documents\Mes jeux\Fichers Skyrim\Mod Eclairage" Task: {9B135E7C-7D2F-4443-B668-6E9F989029E7} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Pas de fichier <==== ATTENTION Task: {9E8862B9-66E7-44DA-842B-58A38FB6AC7C} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {9F60FF85-D7CF-4DF9-8039-E046F2511391} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe Task: {9F9B69EC-2808-4A3E-934D-E766B7E2B9C1} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe Task: {A1144498-8624-462C-8A0F-2451C451825D} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Pas de fichier <==== ATTENTION Task: {A3F18B43-8B3A-4E45-B9B4-CCDDDA1A505E} - System32\Tasks\{993EA842-346C-4C11-9F58-8F29C509FCED} => pcalua.exe -a F:\setup.exe -d F:\ Task: {AB4092E9-6E91-41F8-9855-04B288829C3B} - System32\Tasks\{338734F8-444F-4915-A9F4-7017B34F1AFF} => pcalua.exe -a E:\INSTALL.EXE -d E:\ Task: {B64BEF3A-42DA-4BA9-B84D-3221EC0A6C20} - System32\Tasks\{8B549A89-DD69-408A-887D-3CBABDC89A6D} => pcalua.exe -a C:\install.exe -d C:\ Task: {B6B02B04-2954-4C47-983C-41F4199DB5BA} - System32\Tasks\{0918D7CA-EFD6-4A26-88B2-E3A5E168917F} => pcalua.exe -a E:\Installer.exe -d E:\ Task: {B76B66DE-FC33-47A7-8FC8-4E384CA9116C} - System32\Tasks\{74354389-A254-4EEA-ADE0-7E2E058889DB} => C:\Users\Lucas\Documents\Mes jeux\Bioshock\Builds\Release\Bioshock.exe Task: {C1E45CAA-E518-450C-A0FB-BF7547B67899} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe Task: {C306234A-5547-4F59-9882-43D2037F4B45} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe Task: {C387BD1A-005B-4C07-ADF3-9F779BB60CB9} - System32\Tasks\{7CA242F8-C5CB-4767-A216-FAC6DEC0ED5A} => pcalua.exe -a C:\Users\Lucas\AppData\Local\Temp\VSD7732.tmp\vcredist_x86\vcredist_x86.exe -d "C:\Program Files (x86)\Opera" -c /q:a Task: {C4C18260-C12C-4E66-A1C7-E0940E102566} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated) Task: {CF465267-894F-4B2C-B9B5-59F4A23A4B3B} - System32\Tasks\{19ABEFCA-E80E-4883-A4F9-2D05E3594D30} => C:\Users\Lucas\Documents\Mes jeux\Bioshock\Builds\Release\Bioshock.exe Task: {DC0353F9-632E-42B1-9941-EFED5E940292} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe Task: {E1786E97-25C7-4577-A895-AC4C2EA4C5AA} - System32\Tasks\BaronReplays => C:\Users\Lucas\Downloads\BaronReplays\BaronReplays.exe Task: {EE9D158A-A318-444C-848D-798B15D86EB2} - System32\Tasks\{88455DCD-DFED-49E2-B877-EAE25D2A6645} => C:\Users\Lucas\Documents\Mes jeux\Bioshock\Builds\Release\Bioshock.exe Task: {F49D3264-1FFD-4517-9A4A-A7108160B993} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-02-12] (Piriform Ltd) Task: {F6E46179-EE68-405A-99D5-E1C381AF54FA} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe Task: {F702A91D-3E33-48DC-A866-2917D30A7F0C} - System32\Tasks\{0C31F1ED-EDD3-4276-8A68-EECED231DA6B} => pcalua.exe -a C:\Users\Lucas\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe -c /uninstall (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe ==================== Raccourcis ============================= (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2016-03-02 16:47 - 2016-02-23 12:27 - 02654872 _____ () c:\windows\system32\CoreUIComponents.dll 2016-03-02 05:15 - 2016-02-17 07:56 - 01416064 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2015-12-18 17:55 - 2016-02-17 07:56 - 00299392 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-03-02 05:15 - 2016-02-17 07:56 - 03613056 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-01-15 09:12 - 2016-03-08 07:42 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-03-02 16:47 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-03-02 16:47 - 2016-02-23 12:27 - 02654872 _____ () C:\WINDOWS\System32\CoreUIComponents.dll 2012-01-15 15:18 - 2011-05-28 22:05 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll 2016-01-15 09:01 - 2016-01-15 09:01 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll 2016-03-02 16:47 - 2016-02-23 09:36 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll 2016-01-15 13:52 - 2016-01-05 02:29 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2016-01-15 13:52 - 2016-01-05 02:23 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2016-01-28 21:37 - 2016-01-16 06:10 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2016-01-28 21:37 - 2016-01-16 06:13 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2016-01-22 14:02 - 2016-01-22 14:02 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeHost.exe 2014-02-28 10:14 - 2015-10-23 16:10 - 00175080 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll 2014-08-04 14:43 - 2015-10-23 16:10 - 00103400 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll 2014-08-04 14:43 - 2015-10-23 16:10 - 00108008 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll 2014-08-04 14:46 - 2015-10-23 16:10 - 00312296 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll 2014-08-04 14:46 - 2015-10-23 16:10 - 00483816 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll 2014-06-05 14:48 - 2015-09-24 17:15 - 00317440 _____ () C:\Program Files\TeamSpeak 3 Client\ssleay32.dll 2014-06-05 14:48 - 2015-09-24 17:15 - 01709056 _____ () C:\Program Files\TeamSpeak 3 Client\LIBEAY32.dll 2014-01-21 16:54 - 2016-03-14 13:25 - 01294336 _____ () C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe 2016-03-14 13:17 - 2016-03-14 13:17 - 02330112 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_launcher\releases\0.0.1.12\deploy\LoLLauncher.exe 2016-03-14 13:35 - 2016-03-14 13:35 - 04232192 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.52\deploy\LoLPatcher.exe 2016-03-14 13:35 - 2016-03-14 13:35 - 02691584 _____ () C:\Riot Games\League of Legends\RADS\projects\lol_patcher\releases\0.0.0.52\deploy\LoLPatcherUx.exe 2015-03-31 15:23 - 2016-02-17 08:02 - 00020352 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2016-03-14 08:50 - 2016-03-08 03:48 - 01676440 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libglesv2.dll 2016-03-14 08:50 - 2016-03-08 03:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\49.0.2623.87\libegl.dll 2016-01-22 14:02 - 2016-01-22 14:02 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll 2016-01-22 14:02 - 2016-01-22 14:02 - 22330368 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.13.20000.0_x86__8wekyb3d8bbwe\SkyWrap.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 26065408 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\libcef.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00739840 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\libGLESv2.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00293040 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\ortp.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00909312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\platforms\qwindows.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00130048 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\libEGL.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00020992 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\imageformats\qgif.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00021504 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\imageformats\qico.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00205312 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\imageformats\qjpeg.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00225792 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\imageformats\qmng.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00015872 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\imageformats\qsvg.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00312832 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\imageformats\qtiff.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\qml\QtQuick.2\qtquick2plugin.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00054272 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\qml\QtQuick\Layouts\qquicklayoutsplugin.dll 2016-03-08 03:40 - 2016-03-08 03:40 - 00010240 _____ () C:\Program Files (x86)\Battle.net\Battle.net.6890\qml\QtQml\Models.2\modelsplugin.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== EXE Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\clonewarsadventures.com -> clonewarsadventures.com IE trusted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\freerealms.com -> freerealms.com IE trusted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\soe.com -> soe.com IE trusted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\sony.com -> sony.com IE restricted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\coco.fr -> www.coco.fr IE restricted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\imgsrc.ru -> www.imgsrc.ru IE restricted site: HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\skyrock.com -> www.skyrock.com ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2014-12-10 11:07 - 2016-03-12 10:56 - 00000855 ____A C:\WINDOWS\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Lucas\Downloads\Deponia Trilogy [Repack] [R.G. Catalyst]\Extras\Wallpapers\2\Wallpaper12 Deponia 2 1920x1080.jpg DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == (Actuellement, il n'y a pas de correction automatique pour cette section.) HKLM\...\StartupApproved\Run: => "Windows Mobile Device Center" HKLM\...\StartupApproved\Run: => "NvBackend" HKLM\...\StartupApproved\Run: => "ShadowPlay" HKLM\...\StartupApproved\Run: => "InstallerLauncher" HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "DAEMON Tools Lite Automount" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "DAEMON Tools Lite" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "Sony PC Companion" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "GoogleChromeAutoLaunch_F60C9809C7674F5CA4B76B8C7FDAC2F9" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "Overwolf" HKU\S-1-5-21-2173005705-4068633014-4016122132-1000\...\StartupApproved\Run: => "CCleaner Monitoring" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139 FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808 FirewallRules: [{8BCB9DE5-57C8-463B-88BF-CD59BCF33582}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe FirewallRules: [{6062B277-BA65-4675-855F-16E053ABD815}] => (Allow) C:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe FirewallRules: [TCP Query User{6C4A85A2-0708-40DC-82DB-E8FBA01F49DB}E:\jeux\dishonored\binaries\win32\dishonored.exe] => (Allow) E:\jeux\dishonored\binaries\win32\dishonored.exe FirewallRules: [UDP Query User{7BC99830-BE6D-4EFF-9797-F3C6FC013A7D}E:\jeux\dishonored\binaries\win32\dishonored.exe] => (Allow) E:\jeux\dishonored\binaries\win32\dishonored.exe FirewallRules: [TCP Query User{16CE7067-178F-4AF5-A259-06F7817FA2FE}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [UDP Query User{CB540E28-5815-40DB-8B64-8DA6942A8FF3}C:\program files (x86)\videolan\vlc\vlc.exe] => (Block) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [TCP Query User{05F140DC-A14A-4FDA-80F1-0762A04DF333}C:\users\lucas\appdata\local\play withsix\tools\mingw\bin\rsync.exe] => (Allow) C:\users\lucas\appdata\local\play withsix\tools\mingw\bin\rsync.exe FirewallRules: [UDP Query User{8089C995-F182-4E38-B754-F1842B0C79B0}C:\users\lucas\appdata\local\play withsix\tools\mingw\bin\rsync.exe] => (Allow) C:\users\lucas\appdata\local\play withsix\tools\mingw\bin\rsync.exe FirewallRules: [{558E7AD3-CE55-4300-A5F8-4BDFCABF24E2}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{2087BB8A-76DF-42DB-9A92-79C57DB369C0}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{4B2C144E-6592-40E8-9F1F-BAAFB684110B}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{03CCE2B4-C50E-4E91-92F5-6519B75DD78A}] => (Allow) C:\Program Files\Steam\Steam.exe FirewallRules: [{5BC5C30F-3E31-4CE4-90AF-779CE62C8EBF}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{1CEDC26D-52AF-4524-AD7A-1DB86175ED0A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{F23F3C7F-3C79-4EDD-9C62-E88997BDC2F2}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{3AA5F3D2-2373-462E-B774-2E826D1A22B1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{26E1735F-A9DD-4096-8B04-601FD77519E4}] => (Allow) LPort=48113 FirewallRules: [{2F60D51E-6437-456F-A958-FF628585DEDC}] => (Allow) LPort=48114 FirewallRules: [{2E8B86C5-4950-4615-BF7B-1E26F77F49EF}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{6DF5D239-B6C7-463C-96BE-AD211FE24B06}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{86DD1505-B786-4C79-8783-59ECADF3E6DF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{729C12D5-CF8C-45A5-974E-692F8C2578BB}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{205DB2D5-417F-4D8A-9750-061A93D95395}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe FirewallRules: [{D25BE1C4-34B4-4DEC-803C-A30DF7A0ABEE}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe FirewallRules: [{DA296868-C475-4343-893F-02B2598FE733}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe FirewallRules: [{B737E6E9-1B99-4F65-A0FD-4EB06532E74D}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe FirewallRules: [{5625A01A-AF5E-4610-8B3B-615D4F9C7411}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe FirewallRules: [{A65B3E7E-4A40-4F9F-B8F1-F1EB3D291C18}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe FirewallRules: [{EEBFFD3E-F042-481E-B5D5-53023CA4FDF7}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe FirewallRules: [{A9EB86E8-20B8-4361-9D66-D6F98013E757}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe FirewallRules: [{7831EEFD-393C-4B0E-A352-B6342907460B}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe FirewallRules: [{FFEF14AD-ADBA-4151-9B4D-F84CA12ACED8}] => (Allow) C:\Program Files\Steam\bin\steamwebhelper.exe FirewallRules: [{46A8FCB5-DAF6-4582-B030-874BC68AFE51}] => (Allow) C:\Users\Lucas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{9B1728E7-34E6-4151-96F2-7DCDF0243E2E}] => (Allow) C:\Users\Lucas\AppData\Roaming\uTorrent\uTorrent.exe FirewallRules: [{78C9017F-5F24-403E-8DB0-45D2877D28F7}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe FirewallRules: [{2DB8F558-DEE3-48E5-9FDA-66A3A63310CE}] => (Allow) C:\Program Files (x86)\Sony Mobile\Update Engine\Sony Mobile Update Engine.exe FirewallRules: [{DCA7EAB6-E3C3-4EC5-B3EA-7F12C233EF33}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{1CBF5E13-B820-469D-AE7B-C1C356DA992B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{4CA373ED-105D-4E4D-8B5F-CACDF6B81567}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{D81427F3-29CA-4627-B33E-F76D85D5DEEF}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{59004FEC-D14B-42C8-94EA-DE6842F0F632}] => (Allow) LPort=48113 FirewallRules: [{B6C58452-5DC7-4257-9A29-E42AB3B52C36}] => (Allow) LPort=48114 FirewallRules: [{EFF4DA77-0558-4CE3-8CEE-FB8806D8651B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{71EF510E-0282-43C8-8BBA-EEB35CDCAD8C}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe FirewallRules: [{5B4AC32F-305F-4E6F-9867-BE35E4A01184}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe FirewallRules: [{DB5C5034-7608-4D7C-942B-BA8AD442462D}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe FirewallRules: [{A4D17397-8654-4F01-93B3-340DFDAEF889}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe FirewallRules: [{64256D67-C63E-4052-816A-94842C0A4C0A}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe FirewallRules: [{0A38EEB2-681D-4E8F-956D-A28E82E8A8AA}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe FirewallRules: [{AD5D1AAF-5343-4E62-BB3C-835807246ECF}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe FirewallRules: [{F6221445-0895-436C-BFA3-E1DF7FF0B4A9}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe FirewallRules: [{99C472F1-27B9-4EDC-A97F-2E9C2183D7E1}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{4E4AFD41-E7A7-48C2-9AC4-F2D2DFBA6808}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe FirewallRules: [{771D8B79-2462-4A2D-80AF-FC414E7B64E3}] => (Allow) C:\Program Files\Hearthstone\Hearthstone.exe FirewallRules: [{3F1DF583-E585-4DA5-B8E8-2FE9A057EF2E}] => (Allow) C:\Program Files\Hearthstone\Hearthstone.exe FirewallRules: [{5928DE86-12D6-4296-91A3-1ECC903DF53E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{C8AF2280-FF66-4543-960D-4A2A2E3D2502}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{740EF15C-6671-4CC2-AC9E-8C8C131BB016}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{A87CCAF8-B1FE-4D51-954A-3C2A9233E36C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{41307879-5114-4CE3-BA59-3F03BCFB61DA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [TCP Query User{016523F7-1C88-46E0-AD0A-EA6C45B553DC}C:\program files\hearthstone\hearthstone.exe] => (Allow) C:\program files\hearthstone\hearthstone.exe FirewallRules: [UDP Query User{3A2DA260-7874-4055-BC53-E5E4524AE504}C:\program files\hearthstone\hearthstone.exe] => (Allow) C:\program files\hearthstone\hearthstone.exe FirewallRules: [{CC67CD35-2A2A-44BB-810E-F2CB89FED168}] => (Allow) C:\Program Files\Steam\SteamApps\common\GarrysMod\hl2.exe FirewallRules: [{82BE123C-30E3-4691-989B-9AB61BD24FFF}] => (Allow) C:\Program Files\Steam\SteamApps\common\GarrysMod\hl2.exe FirewallRules: [{486D55F5-D01B-4AF7-AD2B-6E5E2F34C222}] => (Allow) C:\Program Files\Steam\SteamApps\common\Sven Co-op\svencoop.exe FirewallRules: [{C848726E-B427-413A-90CF-F17DBC70F1DB}] => (Allow) C:\Program Files\Steam\SteamApps\common\Sven Co-op\svencoop.exe FirewallRules: [TCP Query User{0A6B7F91-0381-4BC2-A927-B30A57A2D800}C:\users\lucas\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\lucas\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [UDP Query User{BBFA4EFC-3FCB-4F53-9527-7A29A4E4C2D9}C:\users\lucas\appdata\roaming\gameranger\gameranger\gameranger.exe] => (Allow) C:\users\lucas\appdata\roaming\gameranger\gameranger\gameranger.exe FirewallRules: [{5D404410-3EB6-4BEB-8DD4-380AC81D7129}] => (Allow) C:\Program Files\Steam\SteamApps\common\The Witcher Enhanced Edition\System\witcher.exe FirewallRules: [{77990F30-A584-4B09-8C5E-0E2F502D8BD2}] => (Allow) C:\Program Files\Steam\SteamApps\common\The Witcher Enhanced Edition\System\witcher.exe FirewallRules: [{BEB434B4-5E1F-44D0-AA7D-A9BC3CFD8BA3}] => (Allow) C:\Program Files\Steam\SteamApps\common\The Witcher Enhanced Edition\System\djinni!.exe FirewallRules: [{5F321019-626F-4199-A555-CFD0635EB3E8}] => (Allow) C:\Program Files\Steam\SteamApps\common\The Witcher Enhanced Edition\System\djinni!.exe FirewallRules: [{55AE7927-FDA6-4B62-8309-BDF18AE35D59}] => (Allow) C:\Program Files\Steam\SteamApps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe FirewallRules: [{81C89D92-5B39-42E6-94DE-8DEFA10F2721}] => (Allow) C:\Program Files\Steam\SteamApps\common\The Witcher Enhanced Edition\Digital Comic\DigitalComic.exe FirewallRules: [{ED6B161D-153B-4A3B-A72F-24ADDF6B61F7}] => (Allow) C:\Program Files\Steam\SteamApps\common\the witcher 2\Launcher.exe FirewallRules: [{F345DB0C-0C7B-4D27-A4FD-13FE58173287}] => (Allow) C:\Program Files\Steam\SteamApps\common\the witcher 2\Launcher.exe FirewallRules: [{6C0CE3B7-AF9C-4D79-BB1D-20A1D14DBAB7}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Points de restauration ========================= 08-03-2016 19:29:06 Windows Update 11-03-2016 09:23:07 Removed LogMeIn Hamachi 14-03-2016 02:37:37 Restore Point Created by FRST ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (03/15/2016 06:17:16 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Error: (03/14/2016 03:17:17 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: aspnet_stateC:\Windows\System32\aspnet_counters.dll8 Error: (03/14/2016 03:17:16 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: ASP.NET_4.0.30319C:\Windows\System32\aspnet_counters.dll8 Error: (03/14/2016 03:17:16 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: ASP.NETC:\Windows\System32\aspnet_counters.dll8 Error: (03/14/2016 03:17:16 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: .NETFrameworkC:\WINDOWS\system32\mscoree.dll8 Error: (03/14/2016 03:11:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme rads_user_kernel.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 860 Heure de début : 01d17dfb57d1ec88 Heure de fin : 1 Chemin d'accès de l'application : C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe ID de rapport : a0489818-e9ee-11e5-8d91-5404a6efbaca Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (03/14/2016 01:28:41 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme rads_user_kernel.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 163c Heure de début : 01d17ded0328c0fa Heure de fin : 1 Chemin d'accès de l'application : C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe ID de rapport : 4737bc0b-e9e0-11e5-8d91-5404a6efbaca Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (03/14/2016 01:22:59 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme rads_user_kernel.exe version 0.0.0.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 1d60 Heure de début : 01d17dec33baff42 Heure de fin : 1 Chemin d'accès de l'application : C:\Riot Games\League of Legends\RADS\system\rads_user_kernel.exe ID de rapport : 7aff93af-e9df-11e5-8d91-5404a6efbaca Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (03/14/2016 05:36:20 AM) (Source: SideBySide) (EventID: 78) (User: ) Description: La création du contexte d’activation a échoué pour « C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest1 ». Erreur dans le fichier de manifeste ou de stratégie « C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest2 » à la ligne C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest3. Une version de composant nécessaire à l’application est en conflit avec une autre version de composant déjà active. Les composants en conflit sont : Composant 1 : C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22.manifest. Composant 2 : C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_d3c2e4e965da4528.manifest. Error: (03/14/2016 05:17:19 AM) (Source: Perflib) (EventID: 1008) (User: ) Description: BITSC:\Windows\System32\bitsperf.dll8 Erreurs système: ============= Error: (03/14/2016 04:37:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Hôte de synchronisation_f4fbf4 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service. Error: (03/14/2016 03:30:56 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Hôte de synchronisation_4d6b8 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service. Error: (03/14/2016 12:08:29 PM) (Source: NETLOGON) (EventID: 3095) (User: ) Description: Cet ordinateur est configuré en tant que membre d’un groupe de travail, et non en tant que membre d’un domaine. Il n’est pas nécessaire d’exécuter le service Accès réseau dans cette configuration. Error: (03/14/2016 12:07:27 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service Service de configuration automatique WWAN s’est arrêté avec l’erreur : %%997 Error: (03/14/2016 12:07:21 PM) (Source: Service Control Manager) (EventID: 7031) (User: ) Description: Le service Hôte de synchronisation_4f1a1 s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 10000 millisecondes : Redémarrer le service. Error: (03/14/2016 05:08:26 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service eapihdrv n’a pas pu démarrer en raison de l’erreur : %%1275 Error: (03/14/2016 05:08:26 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Lucas\AppData\Local\Temp\ehdrv.sys Error: (03/14/2016 05:08:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service eapihdrv n’a pas pu démarrer en raison de l’erreur : %%1275 Error: (03/14/2016 05:08:25 AM) (Source: Application Popup) (EventID: 1060) (User: ) Description: \??\C:\Users\Lucas\AppData\Local\Temp\ehdrv.sys Error: (03/14/2016 05:08:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service eapihdrv n’a pas pu démarrer en raison de l’erreur : %%1275 CodeIntegrity: =================================== Date: 2016-03-15 05:27:38.013 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-15 05:27:37.941 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-15 05:27:37.766 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-15 05:27:37.664 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-14 15:38:34.098 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system. Date: 2016-03-14 09:54:22.555 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-14 09:54:22.495 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-13 18:27:28.039 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-13 18:27:28.001 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2016-03-13 18:27:25.237 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i7-2600 CPU @ 3.40GHz Pourcentage de mémoire utilisée: 33% Mémoire physique - RAM - totale: 8173.2 MB Mémoire physique - RAM - disponible: 5394.59 MB Mémoire virtuelle totale: 16365.2 MB Mémoire virtuelle disponible: 13328.22 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:465.22 GB) (Free:229.56 GB) NTFS Drive e: (USB DISK) (Removable) (Total:3.73 GB) (Free:3.71 GB) FAT32 ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: 73207324) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=465.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=456 MB) - (Type=27) ======================================================== Disk: 1 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18) Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0C) ==================== Fin de Addition.txt ============================