{\rtf1\ansi\deff0\nouicompat{\fonttbl{\f0\fnil\fcharset0 Courier New;}} {\colortbl ;\red0\green0\blue255;} {\*\generator Riched20 6.3.9600}\viewkind4\uc1 \pard\b\f0\fs24\lang1036 SFC\par \par \b0\fs22 Lignes avec Repairing, Repaired, ou "cannot" :\par ============================================\par \par LIGNES AVEC REPAIRING :\par =====================\par 2016-09-30 14:18:20, Info CSI 000001ad [SR] Repairing corrupted file [ml:58\{29\},l:56\{28\}]"\\??\\C:\\Windows\\system32\\wbem"\\[l:42\{21\}]"Wdf01000Uninstall.mof" from store\par 2016-09-30 14:18:20, Info CSI 000001ae [SR] Repairing corrupted file [ml:58\{29\},l:56\{28\}]"\\??\\C:\\Windows\\system32\\wbem"\\[l:24\{12\}]"Wdf01000.mof" from store\par 2016-09-30 14:26:09, Info CSI 000001e2 [SR] Repairing 1 components\par 2016-09-30 14:26:09, Info CSI 000001e4 [SR] Repairing corrupted file [ml:58\{29\},l:56\{28\}]"\\??\\C:\\Windows\\system32\\wbem"\\[l:42\{21\}]"Wdf01000Uninstall.mof" from store\par 2016-09-30 14:26:09, Info CSI 000001e5 [SR] Repairing corrupted file [ml:58\{29\},l:56\{28\}]"\\??\\C:\\Windows\\system32\\wbem"\\[l:24\{12\}]"Wdf01000.mof" from store\par ============================================\par \par LIGNES AVEC REPAIRED :\par ====================\par ============================================\par \par LIGNES AVEC CANNOT :\par ==================\par \par \b\fs24 PROGRAMMES DEMARRAGE CCLEANER\b0\fs22\par \par Non\tab HKCU:Run\tab StartCCC\tab\tab C:\\Program Files\\ATI Technologies\\ATI.ACE\\Core-Static\\CLIStart.exe\par Non\tab HKLM:Run\tab Acer Tour Reminder\tab Acer Inc.\tab C:\\Acer\\AcerTour\\Reminder.exe\par Non\tab HKLM:Run\tab WarReg_PopUp\tab Acer Inc.\tab C:\\Acer\\WR_PopUp\\WarReg_PopUp.exe\par Non\tab HKLM:Run\tab Adobe ARM\tab Adobe Systems Incorporated\tab "C:\\Program Files\\Common Files\\Adobe\\ARM\\1.0\\AdobeARM.exe"\par Oui\tab HKLM:Run\tab AvastUI.exe\tab AVAST Software\tab "C:\\Program Files\\AVAST Software\\Avast\\AvastUI.exe" /nogui\par Non\tab HKLM:Run\tab LManager\tab Dritek System Inc.\tab C:\\PROGRA~1\\LAUNCH~1\\LManager.exe\par Non\tab HKLM:Run\tab eDSMSNfix\tab HiTRUST co.\tab C:\\Acer\\Empowering Technology\\eDSMSNfix.exe\par Non\tab HKCU:Run\tab WMPNSCFG\tab Microsoft Corporation\tab C:\\Program Files\\Windows Media Player\\WMPNSCFG.exe\par Non\tab HKLM:Run\tab Windows Defender\tab Microsoft Corporation\tab %ProgramFiles%\\Windows Defender\\MSASCui.exe -hide\par Non\tab HKCU:Run\tab CCleaner Monitoring\tab Piriform Ltd\tab "C:\\Program Files\\CCleaner\\CCleaner.exe" /MONITOR\par Non\tab HKLM:Run\tab RtHDVCpl\tab Realtek Semiconductor\tab RtHDVCpl.exe\par Non\tab HKLM:Run\tab SynTPEnh\tab Synaptics, Inc.\tab C:\\Program Files\\Synaptics\\SynTP\\SynTPEnh.exe\par \par Non\tab Task\tab Adobe Flash Player Updater\tab Adobe Systems Incorporated\tab C:\\Windows\\system32\\Macromed\\Flash\\FlashPlayerUpdateService.exe\par Non\tab Task\tab CCleanerSkipUAC\tab Piriform Ltd\tab "C:\\Program Files\\CCleaner\\CCleaner.exe" $(Arg0)\par Non\tab Task\tab GoogleUpdateTaskMachineCore\tab Google Inc.\tab C:\\Program Files\\Google\\Update\\GoogleUpdate.exe /c\par Non\tab Task\tab GoogleUpdateTaskMachineUA\tab Google Inc.\tab C:\\Program Files\\Google\\Update\\GoogleUpdate.exe /ua /installsource scheduler\par Oui\tab Task\tab SafeZone scheduled Autoupdate 1458661685\tab Avast Software\tab C:\\Program Files\\AVAST Software\\SZBrowser\\launcher.exe --scheduledautoupdate $(Arg0)\par \par \par Non\tab Directory\tab WinRAR\tab\tab C:\\Program Files\\WinRAR\\rarext.dll\par Non\tab File\tab WinRAR\tab\tab C:\\Program Files\\WinRAR\\rarext.dll\par Non\tab Folder\tab WinRAR\tab\tab C:\\Program Files\\WinRAR\\rarext.dll\par Oui\tab File\tab 00avast\tab AVAST Software\tab C:\\Program Files\\AVAST Software\\Avast\\ashShell.dll\par Oui\tab File\tab avast\tab AVAST Software\tab C:\\Program Files\\AVAST Software\\Avast\\ashShell.dll\par Oui\tab Folder\tab avast\tab AVAST Software\tab C:\\Program Files\\AVAST Software\\Avast\\ashShell.dll\par Non\tab File\tab MBAMShlExt\tab Malwarebytes Corporation\tab C:\\Program Files\\Malwarebytes' Anti-Malware\\mbamext.dll\par Non\tab Folder\tab MBAMShlExt\tab Malwarebytes Corporation\tab C:\\Program Files\\Malwarebytes' Anti-Malware\\mbamext.dll\par Non\tab Directory\tab Ajouter \'e0 la liste de lecture de VLC\tab VideoLAN\tab "C:\\Program Files\\VideoLAN\\VLC\\vlc.exe" --started-from-file --playlist-enqueue "%1"\par Non\tab Directory\tab Lire avec VLC\tab VideoLAN\tab "C:\\Program Files\\VideoLAN\\VLC\\vlc.exe" --started-from-file --no-playlist-enqueue "%1"\par \par \par \pard\b\fs24 Rapport de Contr\'f4le restrictions Pierre13 (CTR version 2.1.0.0 ) \b0\fs22 du 30\\09\\2016 \'e0 14:59:57\par \par Windows Vista (TM) Home Basic Service Pack 2 (32 bits)\par \par R\'e9paration erreur 2203 effectu\'e9e.\par \par Contr\'f4le pr\'e9sence restrictions\par \par [TROJ_POWELIKS.B] cl\'e9 noprotectedmodebanner supprim\'e9e. \par [TROJ_POWELIKS.B] cl\'e9 smartdithering supprim\'e9e. \par [BKDR_BLACKEN.A] cl\'e9 Check_Associations supprim\'e9e. \par [BKDR_BLACKEN.A] cl\'e9 PhishingFilter corrig\'e9e. \par Autorisation installation sponsor Java supprim\'e9e.\par Restriction Affichage Documents r\'e9cents supprim\'e9e.\par Restriction Affichage Documents supprim\'e9e.\par Restriction synchronisation en arri\'e8re-plan des flux d\rquote informations et des Web Slices supprim\'e9e.\par Restriction d\'e9couverte des flux RSS et des Web Slices supprim\'e9e.\par Restriction UpperFilters Bluetooth supprim\'e9e.\par Pav\'e9 num\'e9rique activ\'e9.\par Restriction utilisateur pour Windows Installer supprim\'e9e.\par Configuration Windows Update d\'e9j\'e0 en auto.\par Recherche Windows Update r\'e9tablie.\par Service Pare feu Windows activ\'e9.\par Param\'e8tres Pare feu Windows r\'e9tablis par d\'e9faut et activ\'e9.\par \par 229 restrictions contr\'f4l\'e9es.\par \par 13 restriction(s) r\'e9par\'e9e(s).\par Re d\'e9marrer le PC pour prendre en compte la ou les r\'e9parations.\par \par \par Le rapport est sur le bureau (C:\\Users\\MARIE-FRANCE\\Desktop\\CTR.txt)\par \b\fs24\par DEUXIEME EXAMEN !!\par \b0\fs22\par Rapport de Contr\'f4le restrictions Pierre13 (CTR version 2.1.0.0 ) du 30\\09\\2016 \'e0 15:52:59\par PC de MARIE-FRANCE\par Windows Vista (TM) Home Basic Service Pack 2 (32 bits)\par \par R\'e9paration erreur 2203 effectu\'e9e.\par \par Contr\'f4le pr\'e9sence restrictions\par \par [BKDR_BLACKEN.A] cl\'e9 PhishingFilter corrig\'e9e. \par PC vaccin\'e9 contre sponsor Java.\par Configuration Windows Update d\'e9j\'e0 en auto.\par Service Pare feu Windows activ\'e9.\par Param\'e8tres Pare feu Windows r\'e9tablis par d\'e9faut et activ\'e9.\par \par 229 restrictions contr\'f4l\'e9es.\par \par Aucune restriction trouv\'e9e.\par \par \par \b\fs24 # AdwCleaner v6.020 - Rapport cr\'e9\'e9 le 30/09/2016 \'e0 16:43:45\b0\fs22\par # Mis \'e0 jour le 14/09/2016 par ToolsLib\par # Base de donn\'e9es : 2016-09-28.1 [Serveur]\par # Syst\'e8me d'exploitation : Windows Vista (TM) Home Basic Service Pack 2 (X86)\par # Nom d'utilisateur : MARIE-FRANCE - PC-DE-MARIE-FRA\par # Ex\'e9cut\'e9 depuis : C:\\Users\\MARIE-FRANCE\\Desktop\\adwcleaner_6.020.exe\par # Mode: Nettoyage\par # Support : {{\field{\*\fldinst{HYPERLINK https://toolslib.net/forum }}{\fldrslt{https://toolslib.net/forum\ul0\cf0}}}}\f0\fs22\par \par \par \par ***** [ Services ] *****\par \par \par \par ***** [ Dossiers ] *****\par \par [-] Dossier supprim\'e9: C:\\Users\\MARIE-FRANCE\\AppData\\Local\\AVG Secure Search\par [-] Dossier supprim\'e9: C:\\Users\\MARIE-FRANCE\\AppData\\LocalLow\\AVG Security Toolbar\par [-] Dossier supprim\'e9: C:\\ProgramData\\AVG Secure Search\par [#] Dossier supprim\'e9 au red\'e9marrage: C:\\ProgramData\\Application Data\\AVG Secure Search\par [-] Dossier supprim\'e9: C:\\Program Files\\AVG Secure Search\par [-] Dossier supprim\'e9: C:\\Program Files\\Common Files\\AVG Secure Search\par [-] Dossier supprim\'e9: C:\\Windows\\system32\\config\\systemprofile\\AppData\\LocalLow\\AVG Secure Search\par \par \par ***** [ Fichiers ] *****\par \par [-] Fichier supprim\'e9: C:\\Program Files\\Yahoo!\\Common\\unyt.exe\par [-] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\avg-secure-search.xml\par [-] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\browser\\searchplugins\\avg-secure-search.xml\par [#] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\avg-secure-search.xml\par [#] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\browser\\searchplugins\\avg-secure-search.xml\par [#] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\avg-secure-search.xml\par [#] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\browser\\searchplugins\\avg-secure-search.xml\par [#] Fichier supprim\'e9: C:\\Program Files\\Mozilla Firefox\\avg-secure-search.xml\par \par \par ***** [ DLL ] *****\par \par \par \par ***** [ WMI ] *****\par \par \par \par ***** [ Raccourcis ] *****\par \par \par \par ***** [ T\'e2ches planifi\'e9es ] *****\par \par \par \par ***** [ Registre ] *****\par \par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\Search.BrowserWndAPI\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\Search.BrowserWndAPI.1\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\Search.PugiObj\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\Search.PugiObj.1\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\AppID\\\{BB711CB0-C70B-482E-9852-EC05EBD71DBB\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{02478D38-C3F9-4EFB-9B51-7695ECA05670\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{408CFAD9-8F13-4747-8EC7-770A339C7237\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{94496571-6AC5-4836-82D5-D46260C44B17\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{BC9FD17D-30F6-4464-9E53-596A90AFF023\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{CC5AD34C-6F10-4CB3-B74A-C2DD4D5060A3\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{DE9028D0-5FFA-4E69-94E3-89EE8741F468\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{EF99BD32-C1FB-11D2-892F-0090271D4F88\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{63EDCDD3-8AFC-4358-A90F-F7FB8F5C64FF\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\CLSID\\\{BD5843ED-13C4-4EFF-ACE9-56CEE22BC087\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\TypeLib\\\{07CAC314-E962-4F78-89AB-DD002F2490EE\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\TypeLib\\\{13ABD093-D46F-40DF-A608-47E162EC799D\}\par [-] Valeur supprim\'e9e: HKLM\\SOFTWARE\\Microsoft\\Internet Explorer\\Toolbar [\{CCC7A320-B3CA-4199-B1A6-9F516DD69829\}]\par [-] Valeur supprim\'e9e: HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar\\WebBrowser [\{CCC7A320-B3CA-4199-B1A6-9F516DD69829\}]\par [-] Valeur supprim\'e9e: HKCU\\Software\\Microsoft\\Internet Explorer\\Toolbar\\WebBrowser [\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39\}]\par [-] Valeur supprim\'e9e: HKCU\\Software\\Microsoft\\Internet Explorer\\URLSearchHooks [\{EF99BD32-C1FB-11D2-892F-0090271D4F88\}]\par [-] Cl\'e9 supprim\'e9e: HKU\\.DEFAULT\\Software\\AVG Secure Search\par [-] Cl\'e9 supprim\'e9e: HKU\\.DEFAULT\\Software\\AVG Security Toolbar\par [-] Cl\'e9 supprim\'e9e: HKU\\.DEFAULT\\Software\\IGearSettings\par [-] Cl\'e9 supprim\'e9e: HKU\\.DEFAULT\\Software\\AppDataLow\\Software\\AVG Security Toolbar\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\AVG Secure Search\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\ImInstaller\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\Yahoo\\Companion\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\Yahoo\\YFriendsBar\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\AppDataLow\\Software\\Yahoo\\Companion\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\App Management\\ARPCache\\AVG Secure Search\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\Microsoft\\Windows\\CurrentVersion\\App Management\\ARPCache\\Yahoo! Companion\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKU\\S-1-5-18\\Software\\AVG Secure Search\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKU\\S-1-5-18\\Software\\AVG Security Toolbar\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKU\\S-1-5-18\\Software\\IGearSettings\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKU\\S-1-5-18\\Software\\AppDataLow\\Software\\AVG Security Toolbar\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\AVG Secure Search\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\ImInstaller\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\Yahoo\\Companion\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\Yahoo\\YFriendsBar\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\AppDataLow\\Software\\Yahoo\\Companion\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Yahoo\\Companion\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\App Management\\ARPCache\\AVG Secure Search\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\App Management\\ARPCache\\Yahoo! Companion\par [-] Cl\'e9 supprim\'e9e: HKU\\S-1-5-21-4053628434-3357355779-2870131207-1000\\Software\\Microsoft\\Internet Explorer\\SearchScopes\\\{95B7759C-8C7F-4BF1-B163-73684A933233\}\par [#] Cl\'e9 supprim\'e9e au red\'e9marrage: HKCU\\Software\\Microsoft\\Internet Explorer\\SearchScopes\\\{95B7759C-8C7F-4BF1-B163-73684A933233\}\par [-] Cl\'e9 supprim\'e9e: HKLM\\SOFTWARE\\Classes\\AppID\\ScriptHelper.EXE\par \par \par ***** [ Navigateurs ] *****\par \par [-] Pr\'e9f\'e9rences Firefox nettoy\'e9es: "lightweightThemes.usedThemes" - "[\{\\"id\\":\\"552362\\",\\"name\\":\\"Sunset in the mountains_2014\\",\\"headerURL\\":\\"hxxps://addons.cdn.mozilla.net/user-media/addons/552362/header.png?1413948030\\",\\"footerURL\\":\\"hxxps://addons.cdn.mozilla.net/user-media/addons/552362/footer.png?1413948030\\",\\"textcolor\\":\\"#ffffff\\",\\"accentcolor\\":\\"#ffffff\\",\\"iconURL\\":\\"hxxps://addons.cdn.mozilla.net/user-media/addons/552362/icon.png?1413948030\\",\\"previewURL\\":\\"hxxps://addons.cdn.mozilla.net/user-media/addons/552362/preview.png?1413948030\\",\\"author\\":\\"Crazy@Psychiatrist\'ae\\",\\"description\\":\\"None\\",\\"updateURL\\":\\"hxxps://versioncheck.addons.mozilla.org/fr/themes/update-check/552362\\",\\"version\\":\\"1.0\\"\}]"\par \par \par *************************\par \par :: Cl\'e9s "Tracing" supprim\'e9es\par :: Param\'e8tres Winsock r\'e9initialis\'e9s\par \par *************************\par \par C:\\AdwCleaner\\AdwCleaner[C0].txt - [7171 octets] - [30/09/2016 16:43:45]\par C:\\AdwCleaner\\AdwCleaner[S0].txt - [6414 octets] - [30/09/2016 15:38:02]\par C:\\AdwCleaner\\AdwCleaner[S1].txt - [6488 octets] - [30/09/2016 16:27:43]\par \par ########## EOF - C:\\AdwCleaner\\AdwCleaner[C0].txt - [7393 octets] ##########\par \par \par \par \pard\par \par }