Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 21-12-2016
Exécuté par thoma (27-12-2016 22:57:17)
Exécuté depuis C:\Users\thoma\Desktop
Windows 10 Home Version 1607 (X64) (2016-09-27 20:30:59)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-1133970964-3932981223-2364579482-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1133970964-3932981223-2364579482-503 - Limited - Disabled)
Invité (S-1-5-21-1133970964-3932981223-2364579482-501 - Limited - Disabled)
thoma (S-1-5-21-1133970964-3932981223-2364579482-1001 - Administrator - Enabled) => C:\Users\thoma

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

7-Zip 16.01 (HKLM-x32\...\7-Zip) (Version: 16.01 - Igor Pavlov)
7-Zip 16.04 (HKLM-x32\...\{23170F69-40C1-2701-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 15.020.20042 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM\...\Steam App 221380) (Version:  - Skybox Labs)
Ansel (Version: 375.95 - NVIDIA Corporation) Hidden
Apple Application Support (32 bits) (HKLM-x32\...\{D079CAAD-0C31-47A2-9AF5-A82F9CD9B221}) (Version: 5.2 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{64E6007B-1DA9-42CD-BBE4-D5FA67A7C71D}) (Version: 5.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{55BB2110-FB43-49B3-93F4-945A0CFB0A6C}) (Version: 10.0.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{56EC47AA-5813-4FF6-8E75-544026FBEA83}) (Version: 2.2.0.150 - Apple Inc.)
ARTE VOD (HKLM-x32\...\com.artelab.artevod.player.b2c) (Version: 2.0.4 - ARTE FRANCE DEVELOPPEMENT)
ARTE VOD (x32 Version: 2.0.4 - ARTE FRANCE DEVELOPPEMENT) Hidden
ASUS Live Update (HKLM-x32\...\{FA540E67-095C-4A1B-97BA-4D547DEC9AF4}) (Version: 3.4.3 - ASUS)
ASUS ROG Gaming Mouse (HKLM-x32\...\{3B9E171F-A955-4834-B877-447C0A437260}) (Version: 2.00.027 - ASUS)
ASUS Smart Gesture (HKLM-x32\...\{4D3286A6-F6AB-498A-82A4-E4F040529F3D}) (Version: 4.0.12 - ASUS)
ASUS Splendid Video Enhancement Technology (HKLM-x32\...\{0969AF05-4FF6-4C00-9406-43599238DE0D}) (Version: 3.11.0001 - ASUS)
ASUS USB Charger Plus (HKLM-x32\...\{A859E3E5-C62F-4BFA-AF1D-2B95E03166AF}) (Version: 4.1.6 - ASUS)
ASUS Virtual Camera (HKLM-x32\...\{EC8BD21F-0CA0-4BBF-97D9-4A52B30041A1}) (Version: 1.0.30 - ASUS)
ATK Package (HKLM-x32\...\{AB5C933E-5C7D-4D30-B314-9C83A49B94BE}) (Version: 1.0.0039 - ASUS)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Brother MFL-Pro Suite MFC-J650DW (HKLM-x32\...\{7B4C83B6-17C1-4BFD-B86D-4D7AD4498CBB}) (Version: 1.0.4.0 - Brother Industries, Ltd.)
CCleaner (HKLM\...\CCleaner) (Version: 5.25 - Piriform)
Cossacks II: Battle for Europe (HKLM-x32\...\Steam App 4890) (Version:  - GSC Game World)
CyberLink PhotoDirector 5 (HKLM-x32\...\InstallShield_{5A454EC5-217A-42a5-8CE1-2DDEC4E70E01}) (Version: 5.0.5.6515 - CyberLink Corp.)
CyberLink PhotoDirector 5 (Version: 5.0.5.6515 - CyberLink Corp.) Hidden
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.4010.0 - CyberLink Corp.)
CyberLink PowerDirector 12 (Version: 12.0.4010.0 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Device Setup (HKLM-x32\...\{8D6B05E0-F457-408C-9D13-549334D8FAE1}) (Version: 2.0.2 - ASUSTek Computer Inc.)
Dropbox 25 GB (HKLM-x32\...\{597A58EC-42D6-4940-8739-FB94491B013C}) (Version: 1.0.8.0 - Dropbox, Inc.)
EPSON XP-212 213 Series Printer Uninstall (HKLM\...\EPSON XP-212 213 Series) (Version:  - SEIKO EPSON Corporation)
Evernote v. 5.8.6 (HKLM-x32\...\{FEDC7C10-EF67-11E4-9B07-00505695D7B0}) (Version: 5.8.6.7519 - Evernote Corp.)
Galerie de photos (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Earth (HKLM-x32\...\{A0C18B96-AB79-46BD-8321-6FA83E6D25B9}) (Version: 7.1.7.2606 - Google)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1018 - Intel Corporation)
Intel(R) Chipset Device Software (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1153 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4256 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{DC5673D2-228D-45BC-B9BB-9610CE67DFC0}) (Version: 17.1.1524.1353 - Intel Corporation)
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
iTunes (HKLM\...\{81C96689-EA5B-4B7D-A04F-16326EC51BC2}) (Version: 12.5.4.42 - Apple Inc.)
Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{4c8b7360-62a2-4339-b745-41323055d0bb}) (Version: 18.20.0 - Intel Corporation)
Malwarebytes version 3.0.5.1299 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.5.1299 - Malwarebytes)
Maxx Audio Installer (x64) (Version: 1.6.5230.111 - Waves Audio Ltd.) Hidden
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.7466.2038 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\OneDriveSetup.exe) (Version: 17.3.6720.1207 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50901.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Mises à jour NVIDIA 2.13.0.21 (Version: 2.13.0.21 - NVIDIA Corporation) Hidden
Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Studio Platinum 12.0 (HKLM-x32\...\{D17BA9EE-C0E2-11E1-877B-F04DA23A5C58}) (Version: 12.0.333 - Sony)
Napoleon: Total War (HKLM-x32\...\Steam App 34030) (Version:  - The Creative Assembly)
NVIDIA GeForce Experience 3.1.2.31 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.1.2.31 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NVIDIA Pilote graphique 375.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 375.95 - NVIDIA Corporation)
NvNodejs (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.2.0.0 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (Version: 16.0.7426.1015 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (x32 Version: 16.0.7466.2038 - Microsoft Corporation) Hidden
Package de pilotes Windows - ASUS (ATP) Mouse  (11/11/2015 1.0.0.262) (HKLM\...\A044C5901003C24E6891688653ABA1068D04A1A0) (Version: 11/11/2015 1.0.0.262 - ASUS)
Panneau de configuration NVIDIA 375.95 (Version: 375.95 - NVIDIA Corporation) Hidden
PixelMaster Video HDR (HKLM\...\{65302154-AAF6-4020-A070-76CAA9CEC8D3}) (Version: 1.1.33 - ASUS)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version:  - Eugen Systems)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10143.21278 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.2.703.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7571 - Realtek Semiconductor Corp.)
SHIELD Streaming (Version: 7.1.0340 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.1.2.31 - NVIDIA Corporation) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SUPERHOT (HKLM-x32\...\1456141688_is1) (Version: 2.0.0.4 - GOG.com)
TI Connect 1.6 (HKLM-x32\...\{A8B94669-8654-4126-BD28-D0D2412CDED6}) (Version: 1.6 - Texas Instruments Incorporated)
TI-SmartView™ 1.1 for the TI-83 Plus.fr / TI-84 Plus (HKLM-x32\...\{110DC6D8-CEFB-40D8-AFEC-84A2FBCBF64E}) (Version: 1.0.0.37 - Texas Instruments Incorporated)
Total War: ROME II - Emperor Edition (HKLM\...\Steam App 214950) (Version:  - Creative Assembly)
Total War: ROME II - Emperor Edition (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 3.9.19 - Tweaking.com)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WildTangent Games App (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-asus) (Version: 4.0.11.16 - WildTangent)
Windows Driver Package - Texas Instruments Inc. (SilvrLnk) USB  (06/11/2009 1.0.0.0) (HKLM\...\EC3E466026556D3EB760B01C4772277614354E11) (Version: 06/11/2009 1.0.0.0 - Texas Instruments Inc.)
Windows Driver Package - Texas Instruments Inc. (TIEHDUSB) USB  (09/02/2009 1.0.0.1) (HKLM\...\7511B29C86C398B4D11A0B0E4176CAD68D1B7057) (Version: 09/02/2009 1.0.0.1 - Texas Instruments Inc.)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinFlash (HKLM-x32\...\{8F21291E-0444-4B1D-B9F9-4370A73E346D}) (Version: 3.0.1 - ASUS)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0AD92373-9FA1-45D9-8C32-781F3915F8FD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-11-17] (NVIDIA Corporation)
Task: {13F2B9E9-51EA-41D3-80A4-EC6C9B6BECFE} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {18F3D221-0ED7-4357-BC87-37F17DE2BF25} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-10-21] (Adobe Systems Incorporated)
Task: {1EA2CD10-1A48-4A65-81B3-FF50DDBF0ED4} - System32\Tasks\ASUS Splendid ACMON => C:\Program Files (x86)\ASUS\Splendid\ACMON.exe [2015-06-09] (ASUS)
Task: {307A3C9E-3533-473A-802E-69330B1C567B} - \{780B0A47-0F04-087A-0A11-7D790A0F1109} -> Pas de fichier <==== ATTENTION
Task: {37A26F69-15A9-4608-AECC-DF8DE08E6A8D} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [2015-07-29] (Realtek Semiconductor)
Task: {3FE05174-2C53-41BC-9FDA-AFF13939E5E3} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2016-02-23] (Apple Inc.)
Task: {44772577-4A8D-40AB-9051-905BE9896BFE} - System32\Tasks\Gredoing Launcher => C:\Program Files (x86)\Kefertion\ghoquing.exe [2016-12-22] (Glarysoft Ltd)
Task: {4B677C9D-02A2-486E-8FEA-2128B09951EA} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-11-17] (NVIDIA Corporation)
Task: {4E4E0B73-3B65-4FE3-80B4-11EB506A52E3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {50658A54-8CAF-41D4-96B5-BB53BEEE3FF0} - System32\Tasks\RtHDVBg => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-07-29] (Realtek Semiconductor)
Task: {52CDA2BD-34D1-416C-8BF3-AAFB73614819} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {63F8D24E-AE62-42B1-B6F3-1BD17DEE3663} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [2015-07-29] (Realtek Semiconductor)
Task: {67B02B3A-CCC4-442E-90DB-D776C5230DD6} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\thoma\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {695D0496-EE71-4459-BAE0-5904B9CDC75A} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
Task: {72C5A51C-9858-4BB5-B237-CC0BFCCB7621} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {755D2E74-6A7A-4B50-89DB-AD62C59A3CAA} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [2015-03-12] (Tweaking.com)
Task: {75B5919B-07BC-4969-BBAE-6F3137069A21} - System32\Tasks\Update Checker => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {7923443C-BD69-4838-B489-C7005ED27EFD} - System32\Tasks\263q44c519g861 => Rundll32.exe "C:\ProgramData\263q44c519g861\263q44c519g861.dll",hcsopx <==== ATTENTION
Task: {83D46F1B-1ECD-4B71-B0B5-E03CB66CF547} - System32\Tasks\ASUS USB Charger Plus => C:\Program Files (x86)\ASUS\USBChargerPlus\USBChargerPlus.exe [2015-05-25] (ASUSTek Computer Inc.)
Task: {87B2A6B7-F229-4CEB-ABD1-3CF377978E81} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {884A6EB3-CD48-482A-9CCB-E38A4E8EB742} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-11-17] (NVIDIA Corporation)
Task: {8CD98F53-DE3F-4F82-B5C8-B82ABB8681DF} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2016-10-30] (Microsoft Corporation)
Task: {942CBE3B-5213-4082-9F63-E5619AD42392} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [2015-03-10] (ASUSTek Computer Inc.)
Task: {9B9C0E86-EAFD-46B1-8D99-90F4F2CEED0B} - System32\Tasks\ASUS Live Update2 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {A2E2049A-8987-44D1-84DD-7CF6FEDB3999} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-15] (Google Inc.)
Task: {A7010C2E-F1CF-491D-840E-120DDAB71AE8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {C35362B3-CCB3-46DF-BD2C-32FC84D9F871} - System32\Tasks\ASUS Live Update1 => C:\Program Files (x86)\ASUS\ASUS Live Update\UpdateChecker.exe [2016-08-01] ()
Task: {C46C9F3D-3B70-41E8-A3E7-02A26AAF6D78} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {CCD415D4-CAFD-41C3-ACAB-8DF214897568} - System32\Tasks\ASUS Smart Gesture Launcher => C:\Program Files (x86)\ASUS\ASUS Smart Gesture\AsTPCenter\x64\AsusTPLauncher.exe [2015-12-14] (AsusTek)
Task: {D28874F5-F9FB-4DCD-9D58-F04D4B2DF36D} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2015-05-14] (ASUSTek Computer Inc.)
Task: {DF743E88-1DB9-4924-9319-F76CEF456550} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-09-15] (Google Inc.)
Task: {E0C20B24-80E8-431A-81AC-918BFD3A24F0} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-12-06] (Piriform Ltd)
Task: {F3152DDC-A993-4CC1-B670-C45738412F5A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-11-17] (NVIDIA Corporation)
Task: {F858BEE5-CA1D-4E17-AD7B-AF861FD55770} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2016-11-02] (Microsoft Corporation)
Task: {FB7E09E2-A358-43AB-8189-59B9CBE8C556} - System32\Tasks\259q847c104g334 => Rundll32.exe "C:\ProgramData\259q847c104g334\259q847c104g334.dll",hcsopx <==== ATTENTION

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Raccourcis =============================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)

ShortcutWithArgument: C:\Users\thoma\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b42be1c9c51179ef\Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory="Profile 7"

==================== Modules chargés (Avec liste blanche) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-14 13:43 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-12-23 13:26 - 2014-03-22 19:53 - 02843648 _____ () C:\ProgramData\259q847c104g334\259q847c104g334.dll
2016-12-23 13:11 - 2016-12-14 12:55 - 02259232 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2016-12-23 13:11 - 2016-12-14 12:55 - 02813904 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2016-12-23 13:11 - 2016-12-14 12:55 - 02247632 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2015-08-20 06:45 - 2014-04-14 18:59 - 00389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2016-11-17 01:28 - 2016-11-17 01:28 - 00092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2016-11-17 01:28 - 2016-11-17 01:28 - 01353528 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2016-11-18 22:06 - 2016-11-17 14:45 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-11-18 22:06 - 2016-11-17 14:45 - 04489152 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-18 22:07 - 2016-11-17 14:45 - 00418752 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2016-09-27 21:22 - 2016-11-17 02:03 - 00133056 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-12-14 13:43 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-12-09 17:12 - 2016-12-09 17:12 - 01678560 _____ () C:\Users\thoma\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\amd64\ClientTelemetry.dll
2015-08-13 11:03 - 2015-07-30 04:13 - 00405432 _____ () C:\WINDOWS\system32\igfxTray.exe
2016-09-27 22:17 - 2016-09-27 22:17 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2016-12-14 13:43 - 2016-12-09 10:41 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2016-11-09 08:27 - 2016-11-02 11:21 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-11-09 08:27 - 2016-11-02 11:15 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-11-09 08:27 - 2016-11-02 11:14 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2016-11-09 08:27 - 2016-11-02 11:16 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-11-09 08:27 - 2016-11-02 11:17 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-12-14 13:28 - 2016-12-14 13:35 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2016-12-14 13:28 - 2016-12-14 13:35 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2016-12-14 13:28 - 2016-12-14 13:35 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 13:28 - 2016-12-14 13:30 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.145.0_x64__kzf8qxf38zg5c\roottools.dll
2015-08-20 06:37 - 2013-05-15 14:39 - 00463872 _____ () C:\Program Files (x86)\ASUS Gaming Mouse\hid.exe
2016-12-27 19:00 - 2016-12-27 19:00 - 00252416 _____ () C:\WINDOWS\TEMP\g53CB.tmp.exe
2016-12-14 10:12 - 2016-12-14 10:13 - 03810816 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1612.3341.0_x64__8wekyb3d8bbwe\Calculator.exe
2016-11-18 22:06 - 2016-11-17 14:45 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-11-18 22:06 - 2016-11-17 14:45 - 03774400 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\Poco.dll
2016-11-18 22:06 - 2016-11-17 14:45 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2015-06-09 20:25 - 2015-06-09 20:25 - 00035376 _____ () C:\Program Files (x86)\ASUS\Splendid\DetectDisplayDC.dll
2015-06-09 20:25 - 2015-06-09 20:25 - 00124928 _____ () C:\Program Files (x86)\ASUS\Splendid\CCTAdjust.dll
2016-11-18 22:06 - 2016-11-17 11:20 - 00506424 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-11-18 22:06 - 2016-11-17 11:20 - 00252352 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-11-18 22:06 - 2016-11-17 11:20 - 02809912 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-11-18 22:06 - 2016-11-17 11:20 - 00245184 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-11-18 22:06 - 2016-11-17 11:20 - 00436792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-11-18 22:06 - 2016-11-17 11:20 - 00338488 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-11-18 22:06 - 2016-11-17 11:20 - 00968248 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-12-27 18:59 - 2016-12-27 18:59 - 03780096 _____ () C:\WINDOWS\TEMP\gFE47.tmp
2016-12-09 17:12 - 2016-12-09 17:12 - 01244376 _____ () C:\Users\thoma\AppData\Local\Microsoft\OneDrive\17.3.6720.1207\ClientTelemetry.dll
2016-12-26 18:42 - 2016-12-08 08:29 - 01829208 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libglesv2.dll
2016-12-26 18:42 - 2016-12-08 08:29 - 00085848 _____ () C:\Program Files (x86)\Google\Chrome\Application\55.0.2883.87\libegl.dll
2016-11-18 22:07 - 2016-11-17 14:44 - 60817344 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2015-06-24 01:07 - 2015-06-24 01:07 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2016-12-23 14:36 - 2016-12-11 12:37 - 17833560 _____ () C:\Users\thoma\AppData\Local\Google\Chrome\User Data\PepperFlash\24.0.0.186\pepflashplayer.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)

AlternateDataStreams: C:\Windows:AstInfo [0]

==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BFE => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MpsSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\SharedAccess => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WSService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\AppXSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BITS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ClipSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\msiserver => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\SamSs => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srv2 => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\srvnet => ""="Driver"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\TweakingRemoveSafeBoot => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\vss => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\WSService => ""="Service"

==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

Il y a 7922 plus de sites.

IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\123simsen.com -> www.123simsen.com

Il y a 7922 plus de sites.


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2015-07-10 12:04 - 2016-12-26 22:20 - 00000855 ____A C:\WINDOWS\system32\Drivers\etc\hosts

127.0.0.1       localhost

==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\thoma\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\{9548f65c-7218-4fcb-a618-0daf6c239a4e}.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "BrHelp"
HKLM\...\StartupApproved\Run32: => "ControlCenter4"
HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk"
HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1133970964-3932981223-2364579482-1001\...\StartupApproved\Run: => "OneDrive"

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{46D1D258-C8E7-4D08-B4A4-6F2D3EDF8F5E}] => C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{C4918726-F0F0-4BCB-A2FB-A15F46262431}] => C:\Program Files (x86)\Steam\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{2FD97F80-AC2D-40AA-9F63-1E0E31043129}] => C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{4A6DE5A9-EB10-4EE7-B346-028D0820C47E}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{2E086040-CCBA-4152-8955-82C15F243D5B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{F326A46F-B486-4015-B5C2-67377E205178}] => D:\JEUX\Battle.net\Hearthstone\Hearthstone.exe
FirewallRules: [{5E1FA9BF-382E-4F96-A1D8-CC789B1E86F7}] => D:\JEUX\Battle.net\Hearthstone\Hearthstone.exe
FirewallRules: [{B184758B-3C45-47AA-959B-5342431F343E}] => D:\JEUX\steamapps\common\Napoleon Total War\Napoleon.exe
FirewallRules: [{EB6AC96A-3C33-41F0-9358-0F0FF156E41F}] => D:\JEUX\steamapps\common\Napoleon Total War\Napoleon.exe
FirewallRules: [{1CD549B7-3059-43A4-A83A-B6232AE1F32E}] => D:\JEUX\steamapps\common\R.U.S.E\Ruse.exe
FirewallRules: [{DE7BFFA2-5AA2-42A5-9848-058E91B11FEA}] => D:\JEUX\steamapps\common\R.U.S.E\Ruse.exe
FirewallRules: [{D440816A-54B6-46A0-A823-6A9F574E5F2F}] => D:\JEUX\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{3070F624-AF89-4456-B61F-BA6E5F381443}] => D:\JEUX\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{74A7D7A3-6B5A-4E70-B950-8989DF7532FD}] => D:\JEUX\steamapps\common\Cossacks II Battle for Europe\engine.exe
FirewallRules: [{F2B5E048-11A7-45C6-9987-7BAE1676252C}] => D:\JEUX\steamapps\common\Cossacks II Battle for Europe\engine.exe
FirewallRules: [{F648575B-4572-4DA3-8C3E-57E071DE3E1B}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{5FCA0118-E624-4184-A978-B6E25BFD4F1C}] => C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{B0B2F832-F149-4109-BF4B-E6ACDF5EAB03}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{1766899B-6FCF-4544-8564-8002D4DDC829}] => C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D0ACEA80-93EF-4A73-A199-1F8BCD287FDB}] => C:\Program Files (x86)\Brother\Brmfl13b\FAXRX.EXE
FirewallRules: [{0514F282-CF41-42B2-9D5A-CA2ECA4A2E4F}] => LPort=54925
FirewallRules: [TCP Query User{6F0B7D85-F749-49F1-8C3F-5E2F5D31D243}D:\jeux\steamapps\common\total war rome ii\rome2.exe] => D:\jeux\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{AD2F0F5B-BE24-4D7C-93F1-039E4754983B}D:\jeux\steamapps\common\total war rome ii\rome2.exe] => D:\jeux\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{CB41F862-9199-446C-BF12-A76A354B47B0}D:\jeux\steamapps\common\total war rome ii\rome2.exe] => D:\jeux\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{FCC6EF17-416D-44DE-858A-8B5104A93334}D:\jeux\steamapps\common\total war rome ii\rome2.exe] => D:\jeux\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [{02C55073-ABED-4CA7-97EA-D216EF8FA470}] => C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{D8590C6A-C738-4C7E-B25F-38B3CE12A819}] => LPort=2869
FirewallRules: [{E350A35E-96D4-4644-8C02-1E7847303D1D}] => LPort=1900
FirewallRules: [{7AD964D6-3B07-4DED-BC05-711B5C9534D8}] => D:\Jeux\steamapps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{B88E1B6F-5E12-4C31-BEA1-721B8CE2A1D8}] => D:\Jeux\steamapps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{174CAC8D-A2C2-49A3-A2D7-902F321C75FA}] => C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{B45B1779-81B2-463C-B10D-C3249553A0D9}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{09C2577B-7AD5-4134-8482-F7BCB0278595}] => C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{A5179820-5E67-47B0-A4CA-B4F1859AEE96}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{6BBC566B-41BC-4ED3-B981-C0486E684237}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6C0AB4A8-EFA5-4292-B4A9-CF7F68B56445}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B8ED6B21-5834-4DF3-9197-4E6F12F32A29}] => C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{E1CE7469-4768-4CDE-9FD0-9A7403D7583E}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Points de restauration =========================

ATTENTION: La Restauration système est désactivée

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (12/27/2016 10:00:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_263q44c519g861.dll, version : 10.0.14393.0, horodatage : 0x57899977
Nom du module défaillant : 263q44c519g861.dll, version : 0.0.0.0, horodatage : 0x5859edda
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000001db59
ID du processus défaillant : 0x2a30
Heure de début de l’application défaillante : 0x01d2608430750747
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\rundll32.exe
Chemin d’accès du module défaillant: C:\ProgramData\263q44c519g861\263q44c519g861.dll
ID de rapport : 84e05ec9-3b91-4d51-93d4-ecd64ec1bdde
Nom complet du package défaillant : 
ID de l’application relative au package défaillant :

Error: (12/27/2016 09:00:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_263q44c519g861.dll, version : 10.0.14393.0, horodatage : 0x57899977
Nom du module défaillant : 263q44c519g861.dll, version : 0.0.0.0, horodatage : 0x5859edda
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000001db59
ID du processus défaillant : 0x2a64
Heure de début de l’application défaillante : 0x01d2607bceb0a212
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\rundll32.exe
Chemin d’accès du module défaillant: C:\ProgramData\263q44c519g861\263q44c519g861.dll
ID de rapport : 774645d9-42db-4447-91ff-c9ddaf079170
Nom complet du package défaillant : 
ID de l’application relative au package défaillant :

Error: (12/27/2016 08:00:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_263q44c519g861.dll, version : 10.0.14393.0, horodatage : 0x57899977
Nom du module défaillant : 263q44c519g861.dll, version : 0.0.0.0, horodatage : 0x5859edda
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000001db59
ID du processus défaillant : 0x26dc
Heure de début de l’application défaillante : 0x01d260736cec3859
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\rundll32.exe
Chemin d’accès du module défaillant: C:\ProgramData\263q44c519g861\263q44c519g861.dll
ID de rapport : 354c9571-c401-4a70-b512-afda0ad9f2f3
Nom complet du package défaillant : 
ID de l’application relative au package défaillant :

Error: (12/27/2016 07:00:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_263q44c519g861.dll, version : 10.0.14393.0, horodatage : 0x57899977
Nom du module défaillant : 263q44c519g861.dll, version : 0.0.0.0, horodatage : 0x5859edda
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000001db59
ID du processus défaillant : 0xa90
Heure de début de l’application défaillante : 0x01d2606b0b27e25f
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\rundll32.exe
Chemin d’accès du module défaillant: C:\ProgramData\263q44c519g861\263q44c519g861.dll
ID de rapport : d90df519-6066-4c1d-8e75-14a94cea62f3
Nom complet du package défaillant : 
ID de l’application relative au package défaillant :

Error: (12/27/2016 06:55:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante rundll32.exe_263q44c519g861.dll, version : 10.0.14393.0, horodatage : 0x57899977
Nom du module défaillant : 263q44c519g861.dll, version : 0.0.0.0, horodatage : 0x5859edda
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000001db59
ID du processus défaillant : 0x638
Heure de début de l’application défaillante : 0x01d2606a6dd5173b
Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\rundll32.exe
Chemin d’accès du module défaillant: C:\ProgramData\263q44c519g861\263q44c519g861.dll
ID de rapport : d0168297-c457-4c52-b7f4-18d89c1fb919
Nom complet du package défaillant : 
ID de l’application relative au package défaillant :

Error: (12/27/2016 06:55:40 PM) (Source: Windows Search Service) (EventID: 10021) (User: )
Description: Impossible d’obtenir les informations de registre des compteurs de performances pour WSearchIdxPi pour l’instance   en raison de l’erreur suivante : L’opération a réussi.   0x0.

Error: (12/27/2016 06:55:40 PM) (Source: Windows Search Service) (EventID: 3007) (User: )
Description: Impossible d’initialiser le contrôle des performances pour l’objet rassembleur. Les compteurs ne sont pas chargés ou l’objet mémoire partagée ne peut pas être ouvert. Cela affecte seulement la disponibilité des compteurs. Redémarrez l’ordinateur.

Contexte : Application , Catalogue SystemIndex

Error: (12/27/2016 06:55:39 PM) (Source: Windows Search Service) (EventID: 3006) (User: )
Description: Impossible d’initialiser le contrôle des performances pour le service rassembleur, car les compteurs ne sont pas chargés ou l’objet mémoire partagée ne peut pas être ouvert. Cela affecte seulement la disponibilité des compteurs de performances. Redémarrez l’ordinateur.

Error: (12/27/2016 06:29:34 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1500) (User: PC-THOMAS)
Description: Windows ne peut pas vous ouvrir une session car votre profil ne peut pas être chargé. Vérifiez que vous êtes connecté au réseau et que le réseau fonctionne correctement. 

 DÉTAIL - Accès refusé.

Error: (12/27/2016 06:29:34 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1511) (User: PC-THOMAS)
Description: Windows ne peut pas trouver le profil local et tente de vous connecter avec un profil temporaire. Les modifications effectuées à ce profil seront perdues lorsque vous vous déconnecterez.


Erreurs système:
=============
Error: (12/27/2016 06:57:53 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {21F282D1-A881-49E1-9A3A-26E44E39B86C} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (12/27/2016 06:55:43 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service WMPNetworkSvc s’est arrêté avec l’erreur : 
Tentative de référence à un jeton qui n’existe pas.

Error: (12/27/2016 06:55:38 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service HvHost s’est arrêté avec l’erreur : 
Un périphérique attaché au système ne fonctionne pas correctement.

Error: (12/27/2016 06:55:38 PM) (Source: NETLOGON) (EventID: 3095) (User: )
Description: Cet ordinateur est configuré en tant que membre d’un groupe de travail,
et non en tant que membre d’un domaine. Il n’est pas nécessaire
d’exécuter le service Accès réseau dans cette configuration.

Error: (12/27/2016 06:55:16 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (12/27/2016 06:55:16 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (12/27/2016 06:55:16 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (12/27/2016 06:55:16 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (12/27/2016 06:55:16 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.

Error: (12/27/2016 06:55:16 PM) (Source: DCOM) (EventID: 10010) (User: PC-THOMAS)
Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.


CodeIntegrity:
===================================
  Date: 2016-12-27 18:30:32.653
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\thoma\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-27 18:30:32.651
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\thoma\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-27 18:30:32.250
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Users\thoma\AppData\Local\Temp\catchme.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-26 22:42:27.978
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_3467e5de57f04267\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-26 22:27:15.516
  Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

  Date: 2016-12-23 13:11:56.981
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-23 13:11:56.981
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-23 13:11:56.981
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume4\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2016-12-22 11:46:40.630
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_3467e5de57f04267\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-12-19 22:35:28.670
  Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvami.inf_amd64_3467e5de57f04267\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Infos Mémoire =========================== 

Processeur: Intel(R) Core(TM) i7-4720HQ CPU @ 2.60GHz
Pourcentage de mémoire utilisée: 42%
Mémoire physique - RAM - totale: 8081.01 MB
Mémoire physique - RAM - disponible: 4675.05 MB
Mémoire virtuelle totale: 16785.01 MB
Mémoire virtuelle disponible: 13256.07 MB

==================== Lecteurs ================================

Drive c: (OS) (Fixed) (Total:118.48 GB) (Free:21.94 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:761.49 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E1E18F8D)

Partition: GPT.

========================================================
Disk: 1 (Size: 119.2 GB) (Disk ID: 38AFDD3F)

Partition: GPT.

==================== Fin de Addition.txt ============================