Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 18-11-2017 Exécuté par maryl (18-11-2017 14:27:18) Exécuté depuis C:\Users\maryl\Desktop Windows 10 Home Version 1709 16299.64 (X64) (2017-10-28 11:07:20) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-2762758690-3479469590-1194244944-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-2762758690-3479469590-1194244944-503 - Limited - Disabled) Invité (S-1-5-21-2762758690-3479469590-1194244944-501 - Limited - Disabled) maryl (S-1-5-21-2762758690-3479469590-1194244944-1001 - Administrator - Enabled) => C:\Users\maryl WDAGUtilityAccount (S-1-5-21-2762758690-3479469590-1194244944-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) 7-Zip 16.04 (HKLM-x32\...\7-Zip) (Version: 16.04 - Igor Pavlov) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.009.20044 - Adobe Systems Incorporated) Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Shockwave Player 12.2 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.2.9.199 - Adobe Systems, Inc.) Aegisub 3.2.2 (HKLM-x32\...\{24BC8B57-716C-444F-B46B-A3349B9164C5}_is1) (Version: 3.2.2 - Aegisub Team) Amazon Kindle (HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\...\Amazon Kindle) (Version: 1.20.1.47037 - Amazon) Apple Application Support (32 bits) (HKLM-x32\...\{3D1290E6-1F77-46D5-A715-A56679C8D4E3}) (Version: 6.0.2 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{D0E45DEC-F4B9-4370-A9DF-66837789C2EF}) (Version: 6.0.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{E3C4B99B-BE71-4C27-8E3C-4FAE3C46E1D5}) (Version: 11.0.0.30 - Apple Inc.) Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.) Assistant Mise à niveau de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.17376 - Microsoft Corporation) Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software) Backup and Sync from Google (HKLM-x32\...\{604582EB-8259-4ED6-9B1B-6F2494D4B640}) (Version: 3.37.7411.4599 - Google, Inc.) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.34 - Piriform) ClearType Tuning Control Panel Applet (HKLM-x32\...\{C9E4932C-8417-4E4C-A0E3-EE534810AB4D}) (Version: 1.01.0000 - Microsoft Corporation) Cobian Backup 11 Gravity (HKLM-x32\...\CobBackup11) (Version: - ) Conexant ISST Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 9.0.68.61 - Conexant) DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden Ditel_Capture_Pro (HKLM-x32\...\{6D99B1C8-8C8B-E84A-8EF2-65CAB77BDB83}) (Version: 1.0.0.0 - -) Ditto (HKLM-x32\...\Ditto_is1) (Version: - Scott Brogden) DriversCloud.com (64 bits) (HKLM\...\{C514B5EE-C8E6-43C9-AFB9-6C1A7B3429E1}) (Version: 10.0.4.0 - Cybelsoft) Duplicate Cleaner Free 4.0.5 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 4.0.5 - DigitalVolcano Software Ltd) <==== ATTENTION Energy Star (HKLM\...\{465CA2B6-98AF-4E77-BE22-A908C34BB9EC}) (Version: 1.0.9 - Hewlett-Packard Company) Étude pour l'amélioration du produit HP OfficeJet 7510 series (HKLM\...\{A9AA4CFD-2592-477C-865A-99C8664BF7A2}) (Version: 35.0.72.55351 - Hewlett-Packard Co.) Evernote v. 6.6.4 (HKLM-x32\...\{FAA0F386-730B-11E7-8B9C-005056951CAD}) (Version: 6.6.4.5512 - Evernote Corp.) f.lux (HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\...\Flux) (Version: - f.lux Software LLC) Firebird 2.5.6.27020 (Win32) (HKLM-x32\...\FBDBServer_2_5_is1) (Version: 2.5.6.27020 - Firebird Project) Free Devis Factures 2 (HKLM-x32\...\FREE DEVIS FACTURES 2) (Version: 2.0.404.0 - Free Devis Factures) Free Video Editor (HKLM-x32\...\Free Video Editor_is1) (Version: 1.4.54.606 - Digital Wave Ltd) GIMP 2.8.22 (HKLM\...\GIMP-2_is1) (Version: 2.8.22 - The GIMP Team) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden GPL Ghostscript (HKLM-x32\...\GPL Ghostscript 9.20) (Version: 9.20 - Artifex Software Inc.) Greenshot 1.2.9.129 (HKLM\...\Greenshot_is1) (Version: 1.2.9.129 - Greenshot) HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.3 - HP) HP ePrint SW (HKLM-x32\...\{88970959-baf7-4864-a39a-69a58e8ae5cf}) (Version: 5.0.18701 - HP) HP OfficeJet 7510 series Aide (HKLM-x32\...\{C744A959-B9F0-4673-9F51-1002CC1EB436}) (Version: 35.0.0 - Hewlett Packard) HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP) HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8305.5282 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{79C54A05-F146-4EA0-8A70-D4EFE6181E52}) (Version: 8.5.37.19 - Hewlett-Packard Company) HP Support Solutions Framework (HKLM-x32\...\{ED5CE45D-842B-4C18-A002-87E16EA39BB3}) (Version: 12.8.37.11 - Hewlett-Packard Company) HP System Event Utility (HKLM-x32\...\{6B1ECC61-B581-400D-BFAF-101B1AAEA5AB}) (Version: 1.4.7 - Hewlett-Packard Company) HP Touchpoint Analytics Client (HKLM\...\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}) (Version: 4.0.2.1434 - HP Inc.) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - HP Inc.) HP Wireless Button Driver (HKLM-x32\...\{F5852AA8-30EA-495B-84B4-C2403C935D6F}) (Version: 1.1.19.1 - HP) I.R.I.S. OCR (HKLM-x32\...\{FD83C27A-BD25-431D-991E-1D940E41C88C}) (Version: 12.3.6.6 - HP) Icecream Ebook Reader version 5.0 (HKLM-x32\...\{B8C30F0F-1F23-49E1-A3ED-44DE17660EE2}_is1) (Version: 5.0 - Icecream Apps) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4727 - Intel Corporation) Intel(R) Virtual Buttons (HKLM-x32\...\1992736F-C90A-481C-B21B-EE34CAD07387) (Version: 1.1.0.21 - Intel Corporation) Intel(R) WiDi (HKLM\...\{6C02A234-7A14-4737-9D89-B0C47A64F94E}) (Version: 6.0.52.0 - Intel Corporation) Intel(R) WiDi Software Asset Manager (HKLM-x32\...\{AC8973AF-7F4C-40F4-BFE1-C02FE95ED2C2}) (Version: 3.2.1184 - Intel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{077FD4A3-FE3C-48EE-BFAD-266EC70D87CD}) (Version: 18.1.1605.3087 - Intel Corporation) Intel® Integrated Sensor Solution (HKLM-x32\...\{755abcd0-2942-482b-a27d-22921a5849f0}) (Version: 3.0.14.3056 - Intel Corporation) IQUALIF France Yellow (HKLM-x32\...\IQUALIF France Yellow) (Version: 1.09 - IQUALIF) ISS_Drivers_x64 (HKLM\...\{7E28859E-AD3D-4FC2-8D70-E345F8C87722}) (Version: 3.0.14.3056 - Intel Corporation) Hidden Java 8 Update 141 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation) Java 8 Update 144 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180144F0}) (Version: 8.0.1440.1 - Oracle Corporation) Klavaro-2.00c (HKLM-x32\...\Klavaro_is1) (Version: - ) Logiciel de base du périphérique HP OfficeJet 7510 series (HKLM\...\{1D0E04DA-60E1-4D7F-88CE-FBA7DA5D0510}) (Version: 35.0.72.55351 - Hewlett-Packard Co.) Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{ed5cef80-a339-45bd-8c06-514eaf785ca8}) (Version: 19.71.0 - Intel Corporation) Logiciel pour périphérique à chipset Intel® (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden MailStore Home 10.1.4.12522 (HKLM-x32\...\MailStore Home_universal1) (Version: 10.1.4.12522 - MailStore Software GmbH) Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.8625.2127 - Microsoft Corporation) Microsoft Office Professionnel Plus 2016 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 16.0.8625.2127 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Molotov (HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\...\Molotov) (Version: 1.8.0 - Molotov) Montem MagiKey (HKLM-x32\...\Montem MagiKeyMagiKey Standard) (Version: 1.0.18.0 - Montem Concept) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 52.3.0 - Mozilla) Mozilla Thunderbird 52.3.0 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 52.3.0 (x86 fr)) (Version: 52.3.0 - Mozilla) MSI to redistribute MS VS2005 CRT libraries (HKLM-x32\...\{A8D93648-9F7F-407D-915C-62044644C3DA}) (Version: 8.0.50727.42 - The Firebird Project) MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation) MusicBee 3.1 (HKLM-x32\...\MusicBee) (Version: 3.1 - Steven Mayall) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 17.0.2 - OBS Project) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8625.2127 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2127 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2127 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden PasteCopy.NET (HKLM-x32\...\PasteCopy.NET) (Version: 1.3 - SundryTools) PDF Eraser V1.8.2 (HKLM-x32\...\PDF Eraser_is1) (Version: - hxxp://www.PDFEraser.net) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) Redis on Windows (HKLM-x32\...\{E6DDD3A4-25E9-443A-8BE5-7E62682E044D}) (Version: 3.2.100 - MSOpenTech) ReiBoot (HKLM-x32\...\ReiBoot) (Version: - Tenorshare, Inc.) RogueKiller version 12.11.24.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.11.24.0 - Adlice Software) SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden Scribus 1.4.6 (HKLM-x32\...\Scribus 1.4.6) (Version: 1.4.6 - The Scribus Team) Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated) VisualSubSync (remove only) (HKLM-x32\...\VisualSubSync) (Version: - ) Vivaldi (HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\...\Vivaldi) (Version: 1.10.867.42 - Vivaldi) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) Vulkan Run Time Libraries 1.0.33.0 (HKLM\...\VulkanRT1.0.33.0) (Version: 1.0.33.0 - LunarG, Inc.) Windows Uninstaller 1.7 (HKLM\...\Windows Uninstaller_is1) (Version: 1.7 - Alex T.) XnView 2.42 (HKLM-x32\...\XnView_is1) (Version: 2.42 - Gougelet Pierre-e) Youtube Downloader HD v. 2.9.9.30 (HKLM-x32\...\Youtube Downloader HD_is1) (Version: - YoutubeDownloaderHD.com) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-01] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-01] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2017-11-01] (Google) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-10] (AVAST Software) ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers1-x32: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-10] (AVAST Software) ContextMenuHandlers1-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-01] (Google) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-10] (AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers4-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2017-11-01] (Google) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki124992.inf_amd64_82797b9e9d9c2603\igfxDTCM.dll [2017-10-26] (Intel Corporation) ContextMenuHandlers6-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers6-x32: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-10] (AVAST Software) ContextMenuHandlers6-x32: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {04731D43-76FD-4FBB-8559-CD3577F18255} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-09-22] (Piriform Ltd) Task: {0BF8C9D8-A932-4692-AB23-FE6C1587CCA3} - System32\Tasks\HPCustParticipation HP OfficeJet 7510 series => C:\Program Files\HP\HP OfficeJet 7510 series\Bin\HPCustPartic.exe [2015-05-12] (Hewlett-Packard Development Company, LP) Task: {0C47CB2E-8065-4E9F-98B7-163C35D3F62C} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe Task: {11133F64-0972-4EA9-BA3C-E284868B5222} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-07] (Google Inc.) Task: {17DD3A4A-C5C0-49D9-AA44-7F1DA1261212} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [2017-11-16] () Task: {23019374-9FB3-4416-A71B-E306F0404097} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-09-17] (Intel Corporation) Task: {254EA393-42E3-4C56-8406-5F2447CA89DB} - System32\Tasks\SafeZone scheduled Autoupdate 1492021717 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software) Task: {308E6BB7-E97B-4FE4-A25A-DD4AD63AFBC1} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-14] (Adobe Systems Incorporated) Task: {338F3CF5-B502-4CC1-8AE6-1190F4898CC0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.) Task: {5855824C-61B8-4BC8-96FF-6341B051BB83} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-11-02] (Microsoft Corporation) Task: {5CDC7864-DF7B-43C5-919D-35336806A2F7} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.) Task: {5FB591AD-8501-4668-848A-DD32A23BB13B} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [2015-09-17] (Intel Corporation) Task: {6439E4F2-FE24-4289-BCB0-42D6C33D9BB8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2017-11-08] (HP Inc.) Task: {70A2C547-45FF-438C-A0C1-A200A2A7B2F1} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe [2017-10-11] (HP Inc.) Task: {74981C32-2CB0-4CB4-BBFA-35C991A8CB70} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {7D60CB95-28FD-4D97-B715-C7506356CCB7} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2015-06-05] (Intel Corporation) Task: {87026A6D-891E-46C0-BA1E-4E00924FBB5E} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-10-27] () Task: {8CC70244-E042-4512-A31A-D1594DCF9548} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-10-27] () Task: {8D1D7CF4-3C27-40B8-921F-466A8C106205} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-11-17] (Microsoft Corporation) Task: {92745448-EBE1-44E6-82AA-021CC3FDD50B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-11-02] (Microsoft Corporation) Task: {A17B9612-060D-43DC-B92E-FEBAD259F0DD} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {A6AD3D8E-6F25-466C-BF13-17CF8C0D24C9} - System32\Tasks\Microsoft\Windows\Conexant\SA3 => C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SACpl.exe [2016-01-08] (Conexant Systems, Inc.) Task: {A737A6E2-BCA4-4BDB-B5EE-362D94DD5723} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated) Task: {AB465F22-693B-488C-B3DA-B8CD6135648D} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {B54708C3-0C16-4A0D-A56E-4A1E6D8BC24D} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-10] (AVAST Software) Task: {BD622183-907B-4AAC-B9B4-1A522882605F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-11-17] (Microsoft Corporation) Task: {BFCE212B-F8D6-4BD2-A399-DFD1D3C3002F} - System32\Tasks\HPCeeScheduleFormaryl => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2015-06-16] (Hewlett-Packard) Task: {CA0B1288-22F4-4DD7-A0F5-02B21A45A13C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [2017-06-22] (HP Inc.) Task: {E57D64A3-3283-4400-AB49-0182F9C1AD63} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [2017-09-20] (HP Inc.) Task: {F40FD6E9-9515-409B-835A-8019F8091F25} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-07] (Google Inc.) Task: {F7DC1F56-715F-4C6F-9AD0-04CF86C5CF7E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2017-09-27] (HP Inc.) Task: {FA1366C7-F96B-44F1-B6E0-C26A6A14C9E4} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2017-11-17] (Microsoft Corporation) Task: {FF0513D4-279B-4634-90A9-7873C5F5C155} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-14] (Adobe Systems Incorporated) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\WINDOWS\Tasks\HPCeeScheduleFormaryl.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2016-02-15 22:01 - 2016-02-15 20:01 - 000031256 _____ () C:\WINDOWS\System32\us008lm.dll 2017-09-01 01:49 - 2017-09-01 01:49 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-09-01 01:49 - 2017-09-01 01:49 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2016-12-29 10:26 - 2016-12-29 10:26 - 001245184 _____ () C:\Program Files (x86)\Redis\redis-server.exe 2017-04-19 16:18 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll 2017-09-29 14:42 - 2017-09-30 15:41 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-09-29 14:42 - 2017-09-30 15:41 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-11-12 09:30 - 2017-11-12 09:30 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-11-12 09:30 - 2017-11-12 09:30 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-11-12 09:30 - 2017-11-12 09:30 - 025461760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2017-11-06 18:49 - 2017-11-06 18:50 - 002552832 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\skypert.dll 2017-11-12 09:30 - 2017-11-12 09:30 - 000685056 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2015-10-27 13:01 - 2015-10-27 13:01 - 000089600 _____ () C:\Program Files\Intel Corporation\Intel WiDi\WRU.exe 2017-08-30 21:12 - 2017-01-29 08:25 - 002415616 _____ () C:\Program Files (x86)\Ditto\Ditto.exe 2017-11-18 13:42 - 2017-11-18 13:43 - 002928512 _____ () C:\Users\maryl\Downloads\ZHPDiag3.exe 2017-11-18 14:20 - 2017-11-18 14:20 - 002928512 _____ () C:\Users\maryl\Downloads\ZHPDiag3 (1).exe 2017-11-10 13:23 - 2017-11-10 13:23 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2017-11-10 13:23 - 2017-11-10 13:23 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll 2017-07-06 21:48 - 2017-07-06 21:48 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2017-11-10 13:23 - 2017-11-10 13:23 - 000237808 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll 2017-11-10 13:23 - 2017-11-10 13:23 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll 2017-11-10 13:23 - 2017-11-10 13:23 - 000235816 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll 2017-06-28 19:47 - 2017-06-21 03:31 - 002946680 _____ () C:\Users\maryl\AppData\Local\Vivaldi\Application\1.10.867.42\libglesv2.dll 2017-06-28 19:47 - 2017-06-21 03:31 - 000087160 _____ () C:\Users\maryl\AppData\Local\Vivaldi\Application\1.10.867.42\libegl.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\Users\maryl\OneDrive\Documents\desktop.ini:${3D0CE612-FDEE-43f7-8ACA-957BEC0CCBA0}.Metadata [194] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) HKLM\...\.reg: Regedit.Document => <==== ATTENTION ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2015-10-30 08:24 - 2015-10-30 08:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\maryl\AppData\Local\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == HKU\S-1-5-21-2762758690-3479469590-1194244944-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{2E5F0827-6027-4EDD-81F8-EAB37CC2DF5A}] => (Allow) C:\Program Files\HP\HP OfficeJet 7510 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{EBBD060F-91E7-4425-91A0-BF02F124651E}] => (Allow) LPort=5357 FirewallRules: [{6CA1DA14-4F9B-44C3-83FF-AD3904F37E78}] => (Allow) C:\Program Files\HP\HP OfficeJet 7510 series\Bin\DeviceSetup.exe FirewallRules: [{AB0DCACF-E503-4834-ACC8-4E27F4E50566}] => (Allow) C:\Program Files\HP\HP OfficeJet 7510 series\bin\FaxPrinterUtility.exe FirewallRules: [{F56E8C59-D55F-421D-B97D-430E56A9A252}] => (Allow) C:\Program Files\HP\HP OfficeJet 7510 series\bin\SendAFax.exe FirewallRules: [{1B1DAD91-1CC6-49A9-B84E-9710E826DCC6}] => (Allow) C:\Program Files\HP\HP OfficeJet 7510 series\bin\DigitalWizards.exe FirewallRules: [{04A30A8E-A794-445B-8469-7AA4D2D5D7F2}] => (Allow) C:\Program Files\HP\HP OfficeJet 7510 series\bin\FaxApplications.exe FirewallRules: [{241C7B18-1729-4D82-9094-28E1BE034ECC}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_1\SZBrowser.exe FirewallRules: [{2E3B5332-7B70-41E9-A89C-BF8A1237768A}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe FirewallRules: [UDP Query User{EA9AF0A9-B8EA-44B3-89FD-58B6F8BEEBB9}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe FirewallRules: [TCP Query User{DB4EF4AC-236B-452F-8F01-B0EC31CC4CE7}C:\program files (x86)\winamp\winamp.exe] => (Block) C:\program files (x86)\winamp\winamp.exe FirewallRules: [{04D60C35-2330-412B-98A9-0622965ECE69}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe FirewallRules: [{2505890C-A3C8-4960-8B5B-CF90E75263CE}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Plus-Service.exe FirewallRules: [UDP Query User{0848F674-07F8-4307-A5EA-C84515885EDB}C:\program files (x86)\ditto\ditto.exe] => (Allow) C:\program files (x86)\ditto\ditto.exe FirewallRules: [TCP Query User{F1FF0816-775E-47AE-AB95-2B89D91BD6B4}C:\program files (x86)\ditto\ditto.exe] => (Allow) C:\program files (x86)\ditto\ditto.exe FirewallRules: [{C836D29A-81E0-4F8F-84FB-1FDF3301146C}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe FirewallRules: [{4D4B4017-5D69-45A7-8F6E-6F618AFB0531}] => (Allow) C:\Program Files (x86)\Redis\redis-server.exe FirewallRules: [UDP Query User{E740B99D-24E6-437D-AC30-E7F93F334CCE}C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe] => (Block) C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe FirewallRules: [TCP Query User{1F84A229-FF9F-4D37-82B2-F509D0061296}C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe] => (Block) C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe FirewallRules: [{54179E4B-0730-4485-9361-611A88390351}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{58BED3A4-61AC-4936-A437-8A63B6627A0E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{70B9E5E7-C9A1-48CB-9667-AF298C5E527E}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{E0C1C624-2ABC-433E-B3C1-F0B8CA33574F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe FirewallRules: [UDP Query User{8845EF89-D31C-4382-8AE0-C40F3FA0E778}C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe] => (Block) C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe FirewallRules: [TCP Query User{C4E987CA-8A77-4C4D-9658-567685A48166}C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe] => (Block) C:\users\maryl\appdata\local\vivaldi\application\vivaldi.exe FirewallRules: [{9B37DCFA-12A7-4578-AED3-1277553404CE}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{982662DF-2FE5-4D8D-A09D-04ABB15B7032}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{1099F5DF-8760-4FD8-A340-79EDBACB89F3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{BFA25020-A6A1-407F-A266-D7C0D5549D8D}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{4D680DAD-5472-4D15-9901-CE9D91F33450}] => (Allow) LPort=51001 FirewallRules: [{C86218DB-6F43-492E-857D-2F0C46EC023A}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe FirewallRules: [{C8577B14-A19C-40AA-BEA6-3F4AA0C55ED2}] => (Allow) C:\Program Files\DriversCloud.com\DriversCloud.exe FirewallRules: [TCP Query User{9F197CC5-C3F1-461E-ABA9-A512775FC4D2}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe FirewallRules: [UDP Query User{C6DE9359-107A-48CC-9B40-BF460CB4C971}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe FirewallRules: [TCP Query User{6035960A-F42B-4750-8113-262D06BC22B0}C:\program files (x86)\ditto\ditto.exe] => (Allow) C:\program files (x86)\ditto\ditto.exe FirewallRules: [UDP Query User{7C757A14-52B2-4D1E-96DD-BF93C5F31FA1}C:\program files (x86)\ditto\ditto.exe] => (Allow) C:\program files (x86)\ditto\ditto.exe ==================== Points de restauration ========================= 29-10-2017 15:33:56 Windows Update 13-11-2017 10:46:50 Windows Update 18-11-2017 14:09:20 avant désinfection ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (11/18/2017 12:29:16 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1047 Error: (11/18/2017 12:29:16 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1047 Error: (11/18/2017 12:29:16 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/18/2017 10:46:42 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 1031 Error: (11/18/2017 10:46:42 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 1031 Error: (11/18/2017 10:46:42 AM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/18/2017 10:46:42 AM) (Source: IntelDalJhi) (EventID: 4) (User: ) Description: Intel(R) Dynamic Application Loader Host Interface Service initialization failure - the spooler applet is invalid. Error: (11/18/2017 10:15:43 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: ) Description: Event-ID 5000 Error: (11/18/2017 10:15:43 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: ) Description: Event-ID 5000 Error: (11/18/2017 10:15:28 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: ) Description: Event-ID 5000 Erreurs système: ============= Error: (11/18/2017 02:12:33 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 02:07:23 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 02:02:12 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 01:57:02 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 01:57:02 PM) (Source: BROWSER) (EventID: 8009) (User: ) Description: L’explorateur n’a pu se promouvoir maître explorateur. L’ordinateur qui croit actuellement être le maître explorateur est STB01. Error: (11/18/2017 01:51:52 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 01:46:42 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 01:41:29 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 01:36:19 PM) (Source: NetBT) (EventID: 4321) (User: ) Description: Le nom "WORKGROUP :1d" n’a pas pu être enregistré sur l’interface avec l’adresse IP 192.168.1.24. L’ordinateur avec l’adresse IP 192.168.1.86 n’a pas permis que le nom soit réclamé par cet ordinateur. Error: (11/18/2017 12:29:15 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-F8C5SPR) Description: Les paramètres d’autorisation par défaut de l’ordinateur n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {C2F03A33-21F5-47FA-B4BB-156362A2F239} et l’APPID {316CDED5-E4AE-4B15-9113-7055D84DCC97} au SID DESKTOP-F8C5SPR\maryl de l’utilisateur (S-1-5-21-2762758690-3479469590-1194244944-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy du conteneur d’applications (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. CodeIntegrity: =================================== Date: 2017-11-18 12:29:13.845 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:13.843 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:11.432 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:11.429 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:07.019 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:07.012 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:07.005 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:06.998 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:05.525 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. Date: 2017-11-18 12:29:05.514 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz Pourcentage de mémoire utilisée: 79% Mémoire physique - RAM - totale: 8069.53 MB Mémoire physique - RAM - disponible: 1642.2 MB Mémoire virtuelle totale: 13701.53 MB Mémoire virtuelle disponible: 6737.45 MB ==================== Lecteurs ================================ Drive c: (Windows) (Fixed) (Total:225.94 GB) (Free:84.65 GB) NTFS Drive d: (RECOVERY) (Fixed) (Total:11.37 GB) (Free:1.39 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 238.5 GB) (Disk ID: 023B9311) Partition: GPT. ==================== Fin de Addition.txt ============================