Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x86) Version: 31-07-2017 Exécuté par Diaby (02-08-2017 14:22:58) Exécuté depuis C:\Users\Diaby\Downloads Microsoft Windows 7 Professionnel Service Pack 1 (X86) (2016-05-25 16:25:53) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= 123 (S-1-5-21-377985148-792701347-3327087119-1003 - Administrator - Enabled) => C:\Users\123 Administrateur (S-1-5-21-377985148-792701347-3327087119-500 - Administrator - Enabled) => C:\Users\Administrateur.Diaby-PC.000 Diaby (S-1-5-21-377985148-792701347-3327087119-1001 - Administrator - Enabled) => C:\Users\Diaby HomeGroupUser$ (S-1-5-21-377985148-792701347-3327087119-1002 - Limited - Enabled) Invité (S-1-5-21-377985148-792701347-3327087119-501 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avira Antivirus (Disabled - Out of date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Emsisoft Anti-Malware (Enabled - Up to date) {701CB209-EBBC-AADC-11E6-DE73E7AF4C9D} AS: Emsisoft Anti-Malware (Enabled - Up to date) {CB7D53ED-CD86-A552-2B56-E5019C280620} AS: Avira Antivirus (Disabled - Out of date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Windows Defender (Enabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Out of date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: IObit Malware Fighter (Enabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Flash Player 23 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 23.0.0.185 - Adobe Systems Incorporated) Adobe Flash Player 26 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 26.0.0.137 - Adobe Systems Incorporated) Adobe Flash Player 26 PPAPI (HKLM\...\Adobe Flash Player PPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM\...\Adobe Shockwave Player) (Version: 12.2.5.195 - Adobe Systems, Inc.) Avira Antivirus (HKLM\...\Avira Antivirus) (Version: 15.0.28.28 - Avira Operations GmbH & Co. KG) Avira Connect (HKLM\...\{661C79C2-D156-419C-81CA-D1A2523B0841}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Hidden Avira Connect (HKLM\...\{dd9049b8-31d1-40bd-8c8c-97a7b087a78f}) (Version: 1.2.91.10326 - Avira Operations GmbH & Co. KG) Bandicam (HKLM\...\Bandicam) (Version: 3.1.0.1064 - Bandisoft.com) CCleaner (HKLM\...\CCleaner) (Version: 5.32 - Piriform) CleanMem (HKLM\...\CleanMem) (Version: v2.5.0 - PcWinTech.com) Crossfire Europe EU (HKLM\...\Crossfire Europe EU_is1) (Version: V1502 - Smilegate Europe) D3DX10 (HKLM\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DarkComet RAT Remover version 1.0 (HKLM\...\DarkComet RAT Remover_is1) (Version: 1.0 - Phrozen ® Software 2012.) DragonBoost (HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\119) (Version: - ) <==== ATTENTION Emsisoft Anti-Malware (HKLM\...\{5502032C-88C1-4303-99FE-B5CBD7684CEA}_is1) (Version: 2017.6 - Emsisoft Ltd.) Galerie de photos (HKLM\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Google Chrome (HKLM\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.) Google Update Helper (HKLM\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation) IObit Malware Fighter 5 (HKLM\...\IObit Malware Fighter_is1) (Version: 5.2 - IObit) Junk Mail filter update (HKLM\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Keylogger Detector (HKLM\...\Keylogger Detector) (Version: - ) KeyScrambler (HKLM\...\KeyScrambler) (Version: 3.11.0.3 - QFX Software Corporation) Malwarebytes version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes) Metin2client 9.1 (HKLM\...\Metin2client 9.1) (Version: 9.1 - HackMetin2) Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation) Microsoft .NET Framework 4.6.2 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.6.01590 - Microsoft Corporation) Microsoft .NET Framework 4.6.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01590 - Microsoft Corporation) Microsoft Help Viewer 1.0 (HKLM\...\Microsoft Help Viewer 1.0) (Version: 1.0.30319 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation) Microsoft SQL Server 2008 Native Client (HKLM\...\{D9D937B0-E842-4130-9588-B948E876904A}) (Version: 10.0.1600.22 - Microsoft Corporation) Microsoft SQL Server System CLR Types (HKLM\...\{0266CCBE-BBD8-416C-A48F-7FC47C6DB566}) (Version: 10.50.1447.4 - Microsoft Corporation) Microsoft Virtual PC 2007 SP1 (HKLM\...\{AD483998-2E9A-4405-83FF-6E503AF49CBB}) (Version: 6.0.192.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{CC1DB186-550F-3CFE-A2A9-EBA5E5A34BC1}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Module linguistique de la visionneuse d'aide Microsoft 1.0 - FRA (HKLM\...\Microsoft Help Viewer 1.0 Language Pack - FRA) (Version: 1.0.30319 - Microsoft Corporation) Movie Maker (HKLM\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 54.0.1 (x86 fr) (HKLM\...\Mozilla Firefox 54.0.1 (x86 fr)) (Version: 54.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla) Objets de gestion Microsoft SQL Server 2008 R2 (HKLM\...\{B01A7AFC-0356-43AF-A333-C65912AEA8DC}) (Version: 10.50.1447.4 - Microsoft Corporation) Oracle VM VirtualBox 5.1.24 (HKLM\...\{F57B99A8-C19B-4A3B-A7BE-BA20AD768EAB}) (Version: 5.1.24 - Oracle Corporation) Outils Microsoft Visual Studio 2010 ADO.NET Entity Framework (HKLM\...\{3BA7E387-9401-3371-9464-5E224D243FC5}) (Version: 10.0.30319 - Microsoft Corporation) Package de pilotes Windows - Intel Corporation (iegdmini) Display (10/26/2009 10.2.2.1450) (HKLM\...\7C12B3CB54A17AB537E54C97DA273A2685545A6C) (Version: 10/26/2009 10.2.2.1450 - Intel Corporation) paint.net (HKLM\...\{A1D05314-DC32-4668-A97E-51060EC8BCCD}) (Version: 4.0.12 - dotPDN LLC) Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7745 - Realtek Semiconductor Corp.) Spybot - Search & Destroy (HKLM\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) swMSM (HKLM\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 FRA (HKLM\...\{D60023FA-3DF1-4537-93DD-13024CC4E366}) (Version: 4.0.8080.0 - Microsoft Corporation) WinRAR 5.40 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\ChromeHTML: -> <==== ATTENTION CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Diaby\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx (Unity Technologies ApS) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{444785F1-DE89-4295-863A-D46C3A781394}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\LocalLow\Unity\WebPlayer\loader\UnityWebPluginAX.ocx => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}\localserver32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{8932AEFE-9DB6-4f43-AFB2-5682F55E773A}\InprocServer32 -> C:\Program Files\Microsoft Virtual PC\VPCShExH.DLL => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}\localserver32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-377985148-792701347-3327087119-500_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Administrateur.Diaby-PC.000\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\FileSyncApi.dll => Pas de fichier ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => -> Pas de fichier ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => -> Pas de fichier ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => -> Pas de fichier ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier ContextMenuHandlers1: [ANotepad++] -> {00F3C2EC-A6EE-11DE-A03A-EF8F55D89593} => C:\Program Files\Notepad++\NppShell_06.dll [2017-06-18] () ContextMenuHandlers1: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit) ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2014-06-24] (Safer-Networking Ltd.) ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-07-04] (Avira Operations GmbH & Co. KG) ContextMenuHandlers1: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ContextMenuHandlers2: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd) ContextMenuHandlers3: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Nouveau dossier\DBZ SAGAS\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes) ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier ContextMenuHandlers4: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit) ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => -> Pas de fichier ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2009-09-23] (Intel Corporation) ContextMenuHandlers6: [Emsisoft Shell Extension] -> {AB77609F-2178-4E6F-9C4B-44AC179D937A} => C:\PROGRAM FILES\EMSISOFT ANTI-MALWARE\A2CONTMENU.DLL [2015-10-21] (Emsisoft Ltd) ContextMenuHandlers6: [IObit Malware Fighter] -> {0BB81440-5F42-4480-A5F7-770A6F439FC8} => C:\Program Files\IObit\IObit Malware Fighter\IMFShellExt.dll [2017-03-31] (IObit) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Nouveau dossier\DBZ SAGAS\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes) ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files\Spybot - Search & Destroy 2\SDECon32.dll [2014-06-24] (Safer-Networking Ltd.) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files\Avira\Antivirus\shlext.dll [2017-07-04] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6: [WinRAR] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {39E1D631-4996-447D-9CE3-3AFEA13A9600} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe Task: {3DF3DC04-E24C-4D03-85D9-55921202ABAD} - System32\Tasks\Uninstaller_SkipUac_Diaby => C:\Program Files\IObit\IObit Uninstaller\IObitUninstaler.exe Task: {60C57FB4-AC86-4288-91D3-FC3CA7F62DDB} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-06-30] (Piriform Ltd) Task: {63A82D28-6501-4EF2-86CA-ED0BF04F85DE} - System32\Tasks\ASC9_SkipUac_Diaby => C:\Program Files\IObit\Advanced SystemCare\ASC.exe Task: {88F3C205-198F-41C9-92F5-882B17F51D5A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-06] (Google Inc.) Task: {8E191A9E-39C9-4CCB-9F98-4AD2013DEE5B} - System32\Tasks\ASC9_PerformanceMonitor => C:\Program Files\IObit\Advanced SystemCare\Monitor.exe Task: {C62FF49E-0010-4735-952B-C835714327EF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2016-06-06] (Google Inc.) Task: {CABC0647-C85E-4D8D-B2C8-4DF6C07BF4D0} - System32\Tasks\Driver Booster SkipUAC (Diaby) => C:\Program Files\IObit\Driver Booster\DriverBooster.exe (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job => C:\Windows\system32\Macromed\Flash\FlashUtil32_26_0_0_137_pepper.exe Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\Arkoghtpeguther.job => msiexecc i HtTp /d2buh1bf1g584w cloudfront net msi rel php ST380013AS_5MR157QQXXXX5MR157QQ 2017215 /qSystemArkoghtpeguther Task: C:\Windows\Tasks\bvyvdvge.job => C:\Users\Diaby\AppData\Local\bvyvdvge\bvyvdvge.exe <==== ATTENTION Task: C:\Windows\Tasks\Check for updates (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe Task: C:\Windows\Tasks\Chrome Cleanup Tool logs upload retry.job => c:\users\mcdiaby\downloads\chrome_cleanup_tool.exe Task: C:\Windows\Tasks\Clean System Memory.job => C:\WINDOWS\system32\CleanMem.exe Task: C:\Windows\Tasks\Driver Booster SkipUAC (Diaby).job => C:\Program Files\IObit\Driver Booster\4.4.0\DriverBooster.exe Task: C:\Windows\Tasks\Fevuphmervly Launcher.job => C:\Program Files\Holush\tugesh.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1bffee1ac4c3e.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d1c000120ba96b.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d22066d30bdfad.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d2206738002651.job => C:\Program Files\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\McAfee Remediation (Prepare).job => C:\Program Files\Common Files\AV\McAfee VirusScan\upgrade.exe Task: C:\Windows\Tasks\McAfeeLogon.job => C:\PROGRA~1\COMMON~1\McAfee\Platform\McUICnt.exe Task: C:\Windows\Tasks\Refresh immunization (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDImmunize.exe Task: C:\Windows\Tasks\Scan the system (Spybot - Search & Destroy).job => C:\Program Files\Spybot - Search & Destroy 2\SDScan.exe Task: C:\Windows\Tasks\SidebarExecute.job => C:\Program Files\Windows Sidebar\sidebar.exe Task: C:\Windows\Tasks\update-S-1-5-21-377985148-792701347-3327087119-1001.job => C:\Program Files\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\update-sys.job => C:\Program Files\Skillbrains\Updater\Updater.exe Task: C:\Windows\Tasks\{04080DB5-B3A3-BA1E-9ECF-2C2F482411E3}.job => C:\ProgramData\{5D3FBC1B-EA94-0BB0-4697-C277095FC0B9}\BAAA0AD1-0D01-BD7A-E248-7C414E82C7A9.exe <==== ATTENTION Task: C:\Windows\Tasks\{09E7DB74-84BA-4925-B16A-BDD9903CBA36}.job => c:\program files\google\chrome\application\chrome.exeJhxxp:/ui.skype.com/ui/0/7.25.85.106/fr/ Task: C:\Windows\Tasks\{1AC348B7-AD68-FF1C-B28E-D7154A60845C}.job => C:\ProgramData\{2ADA52B2-9D71-E519-B68B-EFE74E52E84A}\EFB82B81-5813-9C2A-BF51-6206F3DEFB7C.exe <==== ATTENTION Task: C:\Windows\Tasks\{1BD3C577-AC78-72DC-73FA-BFCFD1282F09}.job => C:\ProgramData\{0A964816-BD3D-FFBD-BDCA-6C8656F7CE43}\D4C33FDF-6368-8874-57D1-DBADB47B1F7C.exe <==== ATTENTION Task: C:\Windows\Tasks\{313B6D77-91B7-4729-A8CE-71B472DEFDFD}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/ Task: C:\Windows\Tasks\{35256B5B-A4F7-1A6B-BAA8-B9AFFA9C2D07}.job => C:\Windows\system32\regsvr32.exe2/s /n /i:/rt C:\PROGRA~2\24eb7141\8ef16ab.dll <==== ATTENTION Task: C:\Windows\Tasks\{3672E31A-81D9-54B1-59B6-288993C49B47}.job => C:\ProgramData\{FEB2EEB1-4919-591A-050F-E1F613B5BBBA}\AAABC715-1D00-70BE-3D0D-A39CF865579B.exe <==== ATTENTION Task: C:\Windows\Tasks\{3700379E-80AB-8035-7D42-73018BA78685}.job => C:\ProgramData\{C73B4B53-7090-FCF8-CE7A-92F193FBB1A6}\1C3DB022-AB96-0789-BA12-2FB945D9983A.exe <==== ATTENTION Task: C:\Windows\Tasks\{3F82500D-8829-E7A6-8EED-8BD7AAAE4D4F}.job => C:\ProgramData\{3D643B4E-8ACF-8CE5-241F-49E64EEF689C}\F02F1B9B-4784-AC30-F39C-9E36064BA576.exe <==== ATTENTION Task: C:\Windows\Tasks\{45485F2B-F2E3-E880-D53A-70275FF51A73}.job => C:\ProgramData\{38F2913E-8F59-2695-881F-B3DD7AF58906}\69941886-DE3F-AF2D-17D5-9FD11F3C79D8.exe <==== ATTENTION Task: C:\Windows\Tasks\{6705E622-D0AE-5189-F8C7-23139FAAF4C5}.job => C:\ProgramData\{569560EE-E13E-D745-591F-72542F10399B}\58BAE327-EF11-548C-D0AE-074EDFA33E67.exe <==== ATTENTION Task: C:\Windows\Tasks\{6AE6823C-DD4D-3597-24AA-41F7824849F9}.job => C:\ProgramData\{5489DA41-E322-6DEA-5282-E82ECC03789E}\1BA81A55-AC03-ADFE-89FB-35FEE2BFD88F.exe <==== ATTENTION Task: C:\Windows\Tasks\{72A2A6F2-C509-1159-E877-5A279F6B89A6}.job => C:\ProgramData\{468CE655-F127-51FE-0A19-2AE671D4E195}\A52D55AE-1286-E205-080C-C068E5AFDEC9.exe <==== ATTENTION Task: C:\Windows\Tasks\{803DA72D-3796-1086-18D9-B4B5A388E4CA}.job => C:\ProgramData\{E9C21179-5E69-A6D2-D749-CFDBBE1BDD20}\635CD343-D4F7-64E8-1A6E-BF8DD38E85A8.exe <==== ATTENTION Task: C:\Windows\Tasks\{811BEB6F-36B0-5CC4-6E67-2B54C8A88248}.job => C:\ProgramData\{628A9872-D521-2FD9-353E-AF963088CA20}\D2C5448C-656E-F327-DDC2-A054A5D12A47.exe <==== ATTENTION Task: C:\Windows\Tasks\{8CE64007-3B4D-F7AC-70D3-46226CC128C3}.job => C:\ProgramData\{B30F16F6-04A4-A15D-95BE-C6BDD0100C69}\1496588C-A33D-EF27-3B4A-C241CAD9A7CB.exe <==== ATTENTION Task: C:\Windows\Tasks\{8DDB2B4C-2A59-4BD4-86E2-E3C071F88604}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/ Task: C:\Windows\Tasks\{B6D26BEC-0179-DC47-976C-B9812509626B}.job => C:\ProgramData\{9184BAC3-262F-0D68-46BE-627B3F7A829B}\AEF659C6-195D-EE6D-67FA-84071644728C.exe <==== ATTENTION Task: C:\Windows\Tasks\{B9CC9342-A99F-494E-BDC8-B0144B2136BA}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/ Task: C:\Windows\Tasks\{BC335264-0B98-E5CF-1BCD-CDF3A77DB74F}.job => C:\ProgramData\{B9A92DBE-0E02-9A15-BFA7-6AE572100A97}\ED051D5F-5AAE-AAF4-904E-E9F75A6CB9E7.exe <==== ATTENTION Task: C:\Windows\Tasks\{BC5A07C5-0BF1-B06E-75C8-F2A9D4292B36}.job => C:\ProgramData\{31AB411D-8600-F6B6-64FB-F7FC0B322FD5}\DDFC3FBF-6A57-8814-502A-B010479A09F4.exe <==== ATTENTION Task: C:\Windows\Tasks\{C00DA454-77A6-13FF-9770-3F58EDDC6571}.job => C:\ProgramData\{497C8777-FED7-30DC-D3F1-8E44E4C657ED}\145BF631-A3F0-419A-6D12-0B5318A793BC.exe <==== ATTENTION Task: C:\Windows\Tasks\{C105346C-316B-4307-97C6-16882327ADA8}.job => c:\program files\google\chrome\application\chrome.exe_hxxp:/ui.skype.com/ui/0/7.24.0.104/fr/ Task: C:\Windows\Tasks\{C38ABE1B-7421-09B0-8E43-F48334855F6F}.job => C:\ProgramData\{79102ABB-CEBB-9D10-6AEC-55BDC884F946}\7B174E98-CCBC-F933-5465-0CD7663A3494.exe <==== ATTENTION Task: C:\Windows\Tasks\{C72D3418-B588-43B7-A737-F7D20991DE46}.job => Iexplore exe3https /ui skype com ui 0 7 37 103 fr/ Task: C:\Windows\Tasks\{D0B53B8D-671E-8C26-13D2-039C28EE9AD7}.job => C:\ProgramData\{FFF45F86-485F-E82D-8C41-8779A1BD2E0A}\45CA3D03-F261-8AA8-11D6-CD6247A66E73.exe <==== ATTENTION Task: C:\Windows\Tasks\{D1F95EA7-6652-E90C-6809-87E1AD9F0189}.job => C:\ProgramData\{2C572639-9BFC-9192-B446-5F136B69EC58}\9C2974EA-2B82-C341-7748-620E472CF6A4.exe <==== ATTENTION Task: C:\Windows\Tasks\{D7471C96-60EC-AB3D-6467-90C2A1FFEC24}.job => C:\ProgramData\{8CB97737-3B12-C09C-5E2D-BF6C9EC40C1A}\1B614C5F-ACCA-FBF4-330F-E58BEC505FAC.exe <==== ATTENTION Task: C:\Windows\Tasks\{DA2F7091-AA65-4DA2-A47C-02D8DE44B460}.job => c:\program files\mozilla firefox\firefox.exeKhxxps:/ui.skype.com/ui/0/7.30.80.105/fr/ Task: C:\Windows\Tasks\{DC736D9A-6BD8-DA31-C4D2-9966D4182587}.job => C:\ProgramData\{4B11775E-FCBA-C0F5-C26F-8A2BEF93D7E1}\3FCD172C-8866-A087-F779-CF33A408E177.exe <==== ATTENTION Task: C:\Windows\Tasks\{EA9ACF9D-5D31-7836-8488-FD37BF743D2F}.job => C:\ProgramData\{386F9E0C-8FC4-29A7-6F6E-4EB2066B904E}\CC5AD77B-7BF1-60D0-7162-198937D7110E.exe <==== ATTENTION Task: C:\Windows\Tasks\{F6C32E6E-4168-99C5-BFFD-82F34EAF93DB}.job => C:\ProgramData\{7FC06DF5-C86B-DA5E-7D26-088EB8EB7485}\EB18B799-5CB3-0032-095D-6BA79023F5EE.exe <==== ATTENTION ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\Diaby\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\user0 - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=ChromeDefaultData ==================== Modules chargés (Avec liste blanche) ============== 2017-07-30 17:28 - 2014-05-13 12:04 - 000109400 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2017-07-30 17:28 - 2014-05-13 12:04 - 000416600 _____ () C:\Program Files\Spybot - Search & Destroy 2\DEC150.bpl 2017-07-30 17:28 - 2014-05-13 12:04 - 000167768 _____ () C:\Program Files\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2017-07-30 17:28 - 2012-08-23 10:38 - 000574840 _____ () C:\Program Files\Spybot - Search & Destroy 2\sqlite3.dll 2017-07-30 17:28 - 2012-04-03 17:06 - 000565640 _____ () C:\Program Files\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2017-06-30 13:22 - 2017-06-30 13:22 - 000077824 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll 2017-07-30 20:07 - 2016-08-10 17:13 - 000188704 _____ () C:\Program Files\IObit\IObit Malware Fighter\unrar.dll 2017-07-30 20:07 - 2016-08-10 17:13 - 000899872 _____ () C:\Program Files\IObit\IObit Malware Fighter\webres.dll 2017-07-30 20:07 - 2016-08-10 17:13 - 000151840 _____ () C:\Program Files\IObit\IObit Malware Fighter\zlibwapi.dll 2017-07-30 20:07 - 2017-05-09 10:59 - 000631584 _____ () C:\Program Files\IObit\IObit Malware Fighter\ProductStatistics.dll 2017-07-30 20:07 - 2016-12-12 16:52 - 000442144 _____ () C:\Program Files\IObit\IObit Malware Fighter\madExcept_.bpl 2017-07-30 20:07 - 2016-12-12 16:52 - 000210720 _____ () C:\Program Files\IObit\IObit Malware Fighter\madBasic_.bpl 2017-07-30 20:07 - 2016-12-12 16:52 - 000059680 _____ () C:\Program Files\IObit\IObit Malware Fighter\madDisAsm_.bpl 2017-06-12 19:51 - 2017-06-12 19:51 - 000048296 ____N () C:\Program Files\FileZilla FTP Client\fzshellext.dll 2017-06-18 23:44 - 2017-06-18 23:44 - 000267952 ____N () C:\Program Files\Notepad++\NppShell_06.dll 2017-08-02 12:52 - 2016-08-10 17:20 - 001079296 _____ () C:\Nouveau dossier\YangBug\YangBug\Injector.exe ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ModuleCoreService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ASCAntivirusSrv => "@"="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\IMFservice => "@"="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeaack.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeavfk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefire => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfefirek.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfehidk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfemms => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfeplk.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfetdi2k.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mfevtp => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ModuleCoreService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com Il y a 7865 plus de sites. IE trusted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\localhost -> localhost IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1001\...\123simsen.com -> www.123simsen.com Il y a 7865 plus de sites. IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-1003\...\123simsen.com -> www.123simsen.com Il y a 7865 plus de sites. IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\007guard.com -> install.007guard.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\008i.com -> 008i.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\008k.com -> www.008k.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\00hq.com -> www.00hq.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\010402.com -> 010402.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\0scan.com -> www.0scan.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1-2005-search.com -> www.1-2005-search.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1-domains-registrations.com -> www.1-domains-registrations.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1000gratisproben.com -> www.1000gratisproben.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\1001namen.com -> www.1001namen.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\100888290cs.com -> mir.100888290cs.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\100sexlinks.com -> www.100sexlinks.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\10sek.com -> www.10sek.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\12-26.net -> user1.12-26.net IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\12-27.net -> user1.12-27.net IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123fporn.info -> www.123fporn.info IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123haustiereundmehr.com -> www.123haustiereundmehr.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123moviedownload.com -> www.123moviedownload.com IE restricted site: HKU\S-1-5-21-377985148-792701347-3327087119-500\...\123simsen.com -> www.123simsen.com Il y a 7865 plus de sites. ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-377985148-792701347-3327087119-1001\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-377985148-792701347-3327087119-1003\Control Panel\Desktop\\Wallpaper -> HKU\S-1-5-21-377985148-792701347-3327087119-500\Control Panel\Desktop\\Wallpaper -> DNS Servers: 192.168.0.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\Services: AdvancedSystemCareService9 => 2 MSCONFIG\Services: cmcore => 2 MSCONFIG\Services: gupdate => 2 MSCONFIG\Services: gupdatem => 3 MSCONFIG\Services: LiveUpdateSvc => 2 MSCONFIG\Services: sgbupt => 2 MSCONFIG\Services: SkypeUpdate => 2 MSCONFIG\Services: TeamViewer => 2 MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files\Aeria Games\Ignite\aeriaignite.exe" silent MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner.exe" /MONITOR MSCONFIG\startupreg: cmsc => "c:\program files\cmcm\Clean Master\cmtray.exe" -autorun MSCONFIG\startupreg: ISS Manager => C:\Program Files\ISS Manager\issmgr.exe ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe FirewallRules: [{13D5E591-777C-4D09-81EA-2E95B83C392E}] => (Allow) C:\Users\Diaby\chroome.exe FirewallRules: [{C2DD3C54-CDD0-43BD-914A-28C6105522B2}] => (Allow) C:\Users\Diaby\chroome.exe FirewallRules: [{A276F1FE-7447-4542-9645-85FAD1C61135}] => (Allow) C:\Users\Diaby\chroome.exe FirewallRules: [{FCB48A8F-86C2-460D-AFDA-A12582B97AAE}] => (Allow) C:\Users\Diaby\chroome.exe FirewallRules: [{A3A5F400-B983-435A-B9D2-EC339DD1DF94}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{9EA9160C-89B3-4C45-9BE1-EDE57F6D0E4E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{95112EFF-A2A6-4DAC-8ADA-A97652F76509}] => (Allow) C:\Users\Diaby\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{8F8ADF90-4648-4668-B017-A188EB62B383}] => (Allow) LPort=2869 FirewallRules: [{B0F585EB-33CA-4135-B460-D22552F3BC07}] => (Allow) LPort=1900 FirewallRules: [{473FF260-66B7-49EB-B8A3-82AC4EC484EE}] => (Allow) LPort=3389 FirewallRules: [TCP Query User{7B1C26BC-3BB8-461F-A25D-CC944425EFE3}C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe FirewallRules: [UDP Query User{3D2EC04A-9B82-4A09-8B17-19F643C99971}C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe] => (Allow) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe FirewallRules: [{9C1CFC25-BC0C-414C-A9E9-5AA66A8B5EA9}] => (Block) C:\users\diaby\appdata\roaming\haiyuinst\plugins\download\minithunderplatform.exe FirewallRules: [{25215BA6-17A2-4733-9CBC-06BCC7D8EA0A}] => (Allow) LPort=58172 FirewallRules: [{4ED1B5CA-1072-45CB-A9A8-7BAEA016166E}] => (Allow) LPort=1489 FirewallRules: [{4BF2DABB-0972-4584-954C-E264B71589A3}] => (Allow) LPort=5000 FirewallRules: [{7DC51F9C-5CFC-4DE2-B009-E6332AF9A905}] => (Allow) C:\ProgramData\explorer.exe FirewallRules: [{F0E2C042-ED87-4025-8634-0AB4C57127C7}] => (Allow) C:\ProgramData\explorer.exe FirewallRules: [{1A30E93B-67E9-49C5-903C-757DADAF9AAC}] => (Allow) C:\ProgramData\explorer.exe FirewallRules: [{BA773F82-D89F-41A7-9856-6AD9E119C464}] => (Allow) C:\ProgramData\explorer.exe FirewallRules: [{793CECE7-5872-47A9-9D57-D87D9D7C7454}] => (Allow) njRAT FirewallRules: [{EF108834-64F2-4193-8EC3-85F9CAA65631}] => (Allow) LPort=1177 FirewallRules: [{F2BAA59A-6E9F-4F1A-A2CD-6121FC6A306B}] => (Allow) LPort=1177 FirewallRules: [{2D940863-3BD6-4878-8051-1681849891EB}] => (Allow) njRAT FirewallRules: [{1C0E8907-2486-4047-9E44-DC75E6BB0227}] => (Allow) LPort=1127 FirewallRules: [{2A190711-91C3-489F-8078-E814AB435CE0}] => (Allow) LPort=1127 FirewallRules: [{A3D3CB4B-923B-4757-B5F9-4CE0E30794FB}] => (Allow) njRAT FirewallRules: [{466FDE28-6E47-49C0-A57B-F2DF9ECB3D30}] => (Allow) LPort=1127 FirewallRules: [{D47638C0-5326-4988-96B8-34273ECF2C55}] => (Allow) LPort=1127 FirewallRules: [{3928AA91-BCDD-4BAA-BCCF-DF8DA51A3D6D}] => (Allow) NanoCore FirewallRules: [{0B08E21F-473A-413A-A89C-F101CE2F9DE4}] => (Allow) LPort=1127 FirewallRules: [{BCA3307E-18AF-478F-B9A0-249E5A2E0795}] => (Allow) LPort=1127 FirewallRules: [{EBADB93D-194D-4D25-B2F1-18B30856213C}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis.exe FirewallRules: [{05829CC3-711E-4510-9F9C-4D78414F26C2}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis.exe FirewallRules: [{B8D4B917-3F6A-4FBE-99DC-791734E73E8A}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis64.exe FirewallRules: [{4CDBDC0F-D7D6-446B-B8CC-1F06BCA66975}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\Aegis64.exe FirewallRules: [{463FA5B2-5EE8-4077-B8CC-56AD0D60CC45}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGI.exe FirewallRules: [{6A26E352-8FF7-4167-A886-4762952C5A3E}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGI.exe FirewallRules: [{BFE1D465-A215-431D-B60D-EBA250CE5E37}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGIN.exe FirewallRules: [{4C178425-8BBE-43AD-81F0-351E254B0028}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\CF_SGIN.exe FirewallRules: [{F14929DF-532C-4BCD-A294-2345D33CFF0D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\crossfire.exe FirewallRules: [{D8EE6208-5DFD-4347-B4D3-58CC48E6FCCA}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\crossfire.exe FirewallRules: [{C4CDB097-37A8-4062-86DD-25628C2959A5}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe FirewallRules: [{73CC62E5-F114-4BCF-BF2B-8C2E1A42F056}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe FirewallRules: [{24559BC8-8856-45C1-BE4B-178CFB1DAFB3}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe FirewallRules: [{2FC97218-D1B0-441B-AEE4-59CCAA0796E2}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\HGWC.exe FirewallRules: [{15482131-C439-4CEE-82AB-6C1D1CA68F35}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\patcher_cf.exe FirewallRules: [{D46A9BCC-05FD-4EF6-8217-8B4D13156C94}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\patcher_cf.exe FirewallRules: [{CC5484FF-EB00-4ABE-8331-B9293F848B0D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe FirewallRules: [{0199540C-44DB-41ED-BC1D-E4F211835B88}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe FirewallRules: [{CCEE74C3-EE4A-474A-870F-FF677A73B561}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe FirewallRules: [{26858C60-644D-4D01-B059-6C98A95F311D}] => (Allow) C:\Program Files\Smilegate\Crossfire Europe EU\SelfUpdate.exe FirewallRules: [{3D427CF5-89C5-4FB9-B724-A34CD435B5A4}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{C9B16962-A746-452F-8266-6052C8AF3770}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{F51AC3C7-2C05-4F4B-82A9-6D7D00860F56}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{C933D294-62EF-4DB1-9403-9AC5FDCFB046}] => (Allow) C:\Users\Diaby\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{ED9FD8B6-8C16-47A6-8760-249B66230751}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{A3135243-BCCC-47C6-9D90-457070296462}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{100498FD-C1D0-4737-BB95-FDC967F1E44E}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{77883A27-0B1C-4C30-A90D-5F2E27376D8B}] => (Allow) C:\Users\Diaby\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{2AA295E6-3E97-4218-B4AD-E95D580B990A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe FirewallRules: [{6FDC1552-9457-436D-A1D6-91396DAD3585}] => (Allow) C:\Windows\system32\rundll32.exe FirewallRules: [{B2C4C927-E74C-4C15-B54B-AE89A763D3E3}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{31617CB1-65E6-4D5E-80D2-3021EB321B4D}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{F3B6761E-389B-43CB-BB90-BA3F01FFAE66}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{ACB1C313-5B0F-4FA4-B234-D64FD552041E}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Windows Audio Device Graph.exe FirewallRules: [{74C9CC5A-DAF3-4B7E-AB83-17F89EF3FFD2}] => (Allow) C:\Program Files\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe FirewallRules: [{396AC777-33A5-49F0-949A-A265E225F9B5}] => (Allow) C:\Program Files\IObit\IObit Malware Fighter\Surfing Protection\FFNativeMessage.exe FirewallRules: [{F1BB84CB-9ECC-4302-83FF-DE6637C446E2}] => (Allow) C:\Program Files\Common Files\Mcafee\Platform\McSvcHost\McSvHost.exe FirewallRules: [{9DAB0D8F-0486-4E70-94E3-52C647B6DC58}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{DF01D074-3F3E-4576-906F-16039E622166}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{C412DB7A-1E44-4FD4-8455-2F5718DC2197}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe FirewallRules: [{A5D6C0D6-8813-4765-997E-C64DDB74BC94}] => (Allow) C:\Users\Administrateur.Diaby-PC.000\AppData\Roaming\Microsoft Windows Audio Device Graphic Card Isolation.exe StandardProfile\AuthorizedApplications: [C:\Users\Diaby\AppData\Roaming\DDos.exe] => Enabled:Windows Messanger StandardProfile\AuthorizedApplications: [C:\Windows\Microsoft.NET\Framework\v2.0.50727\vbc.exe] => Enabled:Windows Messanger StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Points de restauration ========================= 01-08-2017 17:17:11 Point de contrôle planifié ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: Microsoft Teredo Tunneling Adapter Description: Microsoft Teredo Tunneling Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. Name: Souris compatible PS/2 Description: Souris compatible PS/2 Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (08/02/2017 01:28:40 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante Injector.exe, version : 0.0.0.0, horodatage : 0x4e5af8fe Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000 ID du processus défaillant : 0x884 Heure de début de l’application défaillante : 0x01d30b822c3e350f Chemin d’accès de l’application défaillante : C:\Nouveau dossier\YangBug\YangBug\Injector.exe Chemin d’accès du module défaillant: unknown ID de rapport : bb38fe58-7775-11e7-8c67-00163560a5a2 Error: (08/02/2017 01:28:33 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante metin2client.exe, version : 1.0.28249.0, horodatage : 0x5966e9e0 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0x40000015 Décalage d’erreur : 0x0653fbb4 ID du processus défaillant : 0x1b34 Heure de début de l’application défaillante : 0x01d30b82150d6f85 Chemin d’accès de l’application défaillante : C:\Nouveau dossier\Imperial MT2 3.3\metin2client.exe Chemin d’accès du module défaillant: unknown ID de rapport : b76327f1-7775-11e7-8c67-00163560a5a2 Error: (08/02/2017 10:18:28 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Error: (08/02/2017 09:37:43 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Error: (08/01/2017 10:01:21 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme ZHPDiag3 (2).exe version 2017.8.1.132 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance. ID de processus : 400 Heure de début : 01d30affed7d1039 Heure de fin : 7907 Chemin d’accès de l’application : C:\Users\Diaby\Downloads\ZHPDiag3 (2).exe ID de rapport : 2196de21-76f4-11e7-8cc5-00163560a5a2 Error: (08/01/2017 05:16:34 PM) (Source: Software Protection Platform Service) (EventID: 8208) (User: ) Description: Échec de l’acquisition d’un ticket authentique (hr=0xC004C533) pour l’Id de modèle 66c92734-d682-4d71-983e-d6ec3f16059f Error: (08/01/2017 05:16:34 PM) (Source: Software Protection Platform Service) (EventID: 8200) (User: ) Description: Détails de l’échec d’acquisition de la licence. hr=0xC004C533 Error: (08/01/2017 03:56:41 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme NOTEPAD.EXE version 6.1.7601.18917 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance. ID de processus : 15c4 Heure de début : 01d30acde65c5996 Heure de fin : 16 Chemin d’accès de l’application : C:\Windows\system32\NOTEPAD.EXE ID de rapport : 399b908b-76c1-11e7-8cc5-00163560a5a2 Error: (08/01/2017 03:56:29 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme NOTEPAD.EXE version 6.1.7601.18917 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance. ID de processus : 101c Heure de début : 01d30acdf2dc5fd3 Heure de fin : 0 Chemin d’accès de l’application : C:\Windows\system32\NOTEPAD.EXE ID de rapport : 35f29461-76c1-11e7-8cc5-00163560a5a2 Error: (08/01/2017 02:51:54 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: Le filtre d’événement avec la requête « SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99 » n’a pas pu être réactivé dans l’espace de noms « //./root/CIMV2 » à cause de l’erreur 0x80041003. Les événements ne peuvent pas être délivrés à travers ce filtre tant que le problème ne sera pas corrigé. Erreurs système: ============= Error: (08/02/2017 02:28:50 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT) Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error: (08/02/2017 02:22:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT) Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error: (08/02/2017 02:18:45 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT) Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error: (08/02/2017 02:16:18 PM) (Source: Microsoft-Windows-DNS-Client) (EventID: 1012) (User: AUTORITE NT) Description: Une erreur s’est produite lors de la lecture du fichier d’hôtes local. Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Le service Avira Protection e-mail dépend du service Avira Protection temps réel qui n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Avira Protection temps réel n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira Protection temps réel. Error: (08/02/2017 02:13:56 PM) (Source: Service Control Manager) (EventID: 7001) (User: ) Description: Le service Avira Protection Web dépend du service Avira Protection temps réel qui n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/02/2017 02:13:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Avira Protection temps réel n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (08/02/2017 02:13:55 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Avira Protection temps réel. CodeIntegrity: =================================== Date: 2017-08-02 14:07:03.574 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 13:55:29.239 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 12:38:54.281 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 12:21:43.071 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 11:32:35.377 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 11:05:49.114 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 10:57:22.886 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 10:38:27.238 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-02 09:54:38.052 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. Date: 2017-08-01 22:44:58.399 Description: Le module d’intégrité du code ne peut pas vérifier l’intégrité image du fichier \Device\HarddiskVolume1\Program Files\Emsisoft Anti-Malware\a2hooks32.dll car le jeu de hachages d’images par page n’a pas été trouvé sur le système. ==================== Infos Mémoire =========================== Processeur: Intel(R) Pentium(R) 4 CPU 3.00GHz Pourcentage de mémoire utilisée: 80% Mémoire physique - RAM - totale: 1015.43 MB Mémoire physique - RAM - disponible: 200.27 MB Mémoire virtuelle totale: 3015.43 MB Mémoire virtuelle disponible: 1053.12 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:74.5 GB) (Free:12.37 GB) NTFS ==>[lecteur avec composants d'amorçage (obtenu depuis BCD)] ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: B5B42789) Partition 1: (Active) - (Size=74.5 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================