Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 19-11-2017 Exécuté par Test (21-11-2017 23:14:49) Exécuté depuis C:\Users\Test\Downloads Windows 8.1 (Update) (X64) (2014-05-18 13:21:31) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-538710786-840181485-2322788481-500 - Administrator - Disabled) HomeGroupUser$ (S-1-5-21-538710786-840181485-2322788481-1003 - Limited - Enabled) Invité (S-1-5-21-538710786-840181485-2322788481-501 - Limited - Disabled) Test (S-1-5-21-538710786-840181485-2322788481-1004 - Administrator - Enabled) => C:\Users\Test ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} FW: Avast Antivirus (Enabled) {B693136B-F6EE-DD1C-A0EF-229B8B0B29C4} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) 4K YouTube to MP3 3.1 (HKLM-x32\...\4K YouTube to MP3_is1) (Version: 3.1.1.1707 - Open Media LLC) 4K YouTube to MP3 3.3 (HKLM-x32\...\{00311B59-853E-4BF8-A5F8-2028B11E183D}) (Version: 3.3.0.1747 - Open Media LLC) 7-Zip 16.04 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1604-000001000000}) (Version: 16.04.00.0 - Igor Pavlov) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.009.20044 - Adobe Systems Incorporated) Adobe Flash Player 27 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Flash Player 27 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 27.0.0.187 - Adobe Systems Incorporated) Adobe Shockwave Player 12.3 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.3.1.201 - Adobe Systems, Inc.) Aloha TriPeaks (HKLM-x32\...\WTA-8914a4cb-ba35-4477-bbbf-9d9b36d74295) (Version: 2.2.0.98 - WildTangent) Hidden AMD Catalyst Install Manager (HKLM\...\{5A3BF213-01BC-E5A1-1D1B-EDE3167852AB}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.) Apple Application Support (32 bits) (HKLM-x32\...\{D811A40A-9791-497C-B9DC-2D89C8E95EA1}) (Version: 6.1 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{8B47B514-F5D2-4E0D-B951-6E250618A7CD}) (Version: 6.1 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{31A0B634-BCF4-4D3F-8336-87FEACFEE142}) (Version: 11.0.1.2 - Apple Inc.) Apple Software Update (HKLM-x32\...\{C1BBFD2A-BCDD-45B3-8C0B-66BD434970A8}) (Version: 2.4.8.1 - Apple Inc.) Audacity 2.0.3 (HKLM-x32\...\Audacity_is1) (Version: 2.0.3 - Audacity Team) Avanquest Message (HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\{20573C69-4A68-4BEF-A23D-365CB66924CE}) (Version: 2.06.0 - Avanquest Software) Avast Internet Security (HKLM-x32\...\Avast Antivirus) (Version: 17.8.2318 - AVAST Software) AxCrypt 1.7.3156.0 (HKLM\...\{8B49CDB9-824C-44D6-A5D3-D0235D3030B8}) (Version: 1.7.3156.0 - Axantum Software AB) Bejeweled 3 (HKLM-x32\...\WTA-020063b2-6fba-444a-a0d3-f1d90001c249) (Version: 2.2.0.98 - WildTangent) Hidden Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.) Build-a-lot (HKLM-x32\...\WTA-b8087b1b-bb0d-4943-96e1-469f0381d0d6) (Version: 2.2.0.98 - WildTangent) Hidden Capturino version 2.5 (HKLM-x32\...\{0B8D7877-0178-4782-818A-0498F2E33BCC}_is1) (Version: 2.5 - Capturino Software - Jean-Paul Bellenger) CCleaner (HKLM\...\CCleaner) (Version: 5.16 - Piriform) Classic Shell (HKLM\...\{D4B3454F-7529-4F5F-851D-2C36933F7D64}) (Version: 4.2.5 - IvoSoft) Conexant Polaris Unused CIR Function (HKLM\...\VID_1D19&PID_6109&MI_00) (Version: 1.0.0.0 - Conexant Systems) Cradle of Rome 2 (HKLM-x32\...\WTA-d875507a-1155-4880-a8c7-fc2088f80493) (Version: 2.2.0.98 - WildTangent) Hidden Crazy Chicken Soccer (HKLM-x32\...\WTA-d65ee8c5-3f9b-4357-8bd7-029d98ce0b05) (Version: 2.2.0.110 - WildTangent) Hidden CyberLink LabelPrint (HKLM-x32\...\InstallShield_{C59C179C-668D-49A9-B6EA-0121CCFC1243}) (Version: 2.5.4.6515 - CyberLink Corp.) CyberLink Media Suite 10 (HKLM-x32\...\InstallShield_{1FBF6C24-C1fD-4101-A42B-0C564F9E8E79}) (Version: 10.0.4.2928 - CyberLink Corp.) Cyberlink PhotoDirector (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.2.4128 - CyberLink Corp.) CyberLink Power2Go 8 (HKLM-x32\...\InstallShield_{2A87D48D-3FDF-41fd-97CD-A1E370EFFFE2}) (Version: 8.0.4.3202 - CyberLink Corp.) CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.6.4223 - CyberLink Corp.) CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.5025.0 - Nom de votre société) Hidden CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.5025.0 - CyberLink Corp.) CyberLink PowerDVD 12 (HKLM-x32\...\InstallShield_{B46BEA36-0B71-4A4E-AE41-87241643FA0A}) (Version: 12.0.1.3212 - CyberLink Corp.) CyberLink YouCam (HKLM-x32\...\InstallShield_{01FB4998-33C4-4431-85ED-079E3EEFE75D}) (Version: 5.0.1.3201 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Duplicate Cleaner Free 3.2.6 (HKLM-x32\...\Duplicate Cleaner Free) (Version: 3.2.6 - DigitalVolcano Software Ltd) <==== ATTENTION e-Carte Bleue Société Générale (HKLM-x32\...\{C55A3E95-021D-4C7B-A8CA-E66BD27468FD}) (Version: 5.6.0.0 - e-Carte Bleue Société Générale) Energy Star (HKLM-x32\...\{FC0ADA4D-8FA5-4452-8AFF-F0A0BAC97EF7}) (Version: 1.0.9 - Hewlett-Packard Company) Étude pour l'amélioration du produit HP Deskjet 3050 J610 series (HKLM\...\{837F70EE-29D1-4658-9378-5929DCA51781}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) Explor@ Park (HKLM-x32\...\VTechDownloadManager) (Version: - VTech) Extension Système de Microsoft Money (HKLM-x32\...\{8C64E149-54BA-11D6-91B1-00500462BE80}) (Version: 12.0.120 - Microsoft) Farm Frenzy (HKLM-x32\...\WTA-ec18f61a-135a-4fd7-975f-5462aea95cf2) (Version: 2.2.0.98 - WildTangent) Hidden FastStone Image Viewer 5.1 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.1 - FastStone Soft) Fitbit Connect (HKLM-x32\...\{4AF50C0D-47D7-4EE4-A312-928F46D240DC}) (Version: 2.0.1.6742 - Fitbit Inc.) Free YouTube Download (HKLM-x32\...\Free YouTube Download_is1) (Version: 4.1.44.427 - Digital Wave Ltd) Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GIMP 2.8.20 (HKLM\...\GIMP-2_is1) (Version: 2.8.20 - The GIMP Team) GMail Backup (HKLM\...\{D29FF862-7F99-47A3-BACA-52943C09A8DE}) (Version: 1.0.3.581 - UpSafe) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.) Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden Governor of Poker 2 Premium Edition (HKLM-x32\...\WTA-90bab489-5646-4af4-baf4-60bfc863022d) (Version: 2.2.0.110 - WildTangent) Hidden Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP 3D DriveGuard (HKLM-x32\...\{F90A86C9-7779-47DD-AC06-8EE832C55F55}) (Version: 6.0.18.1 - Hewlett-Packard Company) HP Connected Music (Meridian - installer) (HKLM-x32\...\StartHPConnectedMusic) (Version: 1.0 - Meridian Audio Ltd) HP CoolSense (HKLM-x32\...\{59F8C5AA-91BD-423D-BF05-09A80F39898F}) (Version: 2.10.62 - Hewlett-Packard Company) HP Deskjet 3050 J610 series Aide (HKLM-x32\...\{F7632A9B-661E-4FD9-B1A4-3B86BC99847F}) (Version: 140.0.63.63 - Hewlett Packard) HP Documentation (HKLM-x32\...\{F5120027-B9BF-4A48-86E9-63F7F79A5263}) (Version: 1.1.0.0 - Hewlett-Packard) HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.7045.4591 - Hewlett-Packard) HP SimplePass (HKLM-x32\...\InstallShield_{314FAD12-F785-4471-BCE8-AB506642B9A1}) (Version: 8.00.51 - Hewlett-Packard) HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company) HP System Event Utility (HKLM-x32\...\{F35EE4BC-95E1-4417-BA36-7C32FF24A59A}) (Version: 1.0.11 - Hewlett-Packard Company) HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) HP Utility Center (HKLM\...\{AED1C141-3AFC-47FE-AE90-C820AA60B103}) (Version: 2.2.5 - Hewlett-Packard Company) HP Wireless Button Driver (HKLM-x32\...\{30B2D1D8-0A07-4B71-9553-0710C5D31E35}) (Version: 1.1.2.1 - Hewlett-Packard Company) HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden iCloud (HKLM\...\{7464D896-C63C-412E-8ED3-3261C9F14E21}) (Version: 7.0.1.210 - Apple Inc.) IncrediMail (HKLM-x32\...\{5C083736-2916-4D06-BCE9-4F981EA53AEC}) (Version: 6.6.0.5288 - IncrediMail) Hidden IncrediMail 2.5 (HKLM-x32\...\IncrediMail) (Version: 6.6.0.5288 - IncrediMail Ltd.) Inst5675 (HKLM\...\{2DE6247C-7077-451B-8BA7-FFD1A2ABBB47}) (Version: 8.00.51 - Softex Inc.) Hidden Inst5676 (HKLM\...\{878F6913-7421-4713-97F7-0A736EE2A188}) (Version: 8.00.51 - Softex Inc.) Hidden Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.13.1706 - Intel Corporation) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3277 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.1.1000 - Intel Corporation) IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 6.3.0.18 - IObit) iTunes (HKLM\...\{27F29B96-1914-4F48-BD76-07E98D7832C6}) (Version: 12.7.1.14 - Apple Inc.) Jeux WildTangent (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent) Jewel Match 3 (HKLM-x32\...\WTA-b3660c85-130a-4581-83d9-84b62be4e408) (Version: 2.2.0.98 - WildTangent) Hidden Jewel Quest II (HKLM-x32\...\WTA-ea1f7f49-c001-4008-9145-d10fbec6ff21) (Version: 2.2.0.97 - WildTangent) Hidden KeyScrambler (HKLM-x32\...\KeyScrambler) (Version: 3.10.0.0 - QFX Software Corporation) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Light Image Resizer 4.7.1.1 (HKLM-x32\...\{EBE030DD-D404-4D92-85E9-8C3624820808}_is1) (Version: 4.7.1.1 - ObviousIdea) Logiciel de base du périphérique HP Deskjet 3050 J610 series (HKLM\...\{70F37BAB-4F01-4CE6-83D4-8DE1D3BF11CA}) (Version: 28.0.1315.0 - Hewlett-Packard Co.) Mahjongg Artifacts (HKLM-x32\...\WTA-49744b5e-023a-47c6-8e5c-b6e8a7b9b24a) (Version: 2.2.0.110 - WildTangent) Hidden Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.0.161 - McAfee, Inc.) MergeModule_x64 (HKLM\...\{12DCC5A7-0100-4433-B4FF-217A3C5DC83B}) (Version: 9.3.00 - Sony Corporation) Hidden MergeModule_x86 (HKLM-x32\...\{DD7721BB-CF1C-4DC9-AD87-8D5FB75413B7}) (Version: 9.3.00 - Sony Corporation) Hidden Microsoft Money (HKLM-x32\...\{1D643CD2-4DD6-11D7-A4E0-000874180BB3}) (Version: 12.0.100 - Microsoft) Microsoft Office 2007 Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft) Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation) Microsoft Office Professional Plus 2007 (HKLM-x32\...\PROPLUS) (Version: 12.0.6612.1000 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Mise à jour Microsoft Office Excel 2007 Help (KB963678) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_PROPLUS_{B761869A-B85C-40E2-994C-A1CE78AC8F2C}) (Version: - Microsoft) Mise à jour Microsoft Office Outlook 2007 Help (KB963677) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_PROPLUS_{51EFB347-1F3D-4BAC-8B79-F056B904FE21}) (Version: - Microsoft) Mise à jour Microsoft Office Powerpoint 2007 Help (KB963669) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_PROPLUS_{C3DCA38E-005E-41BA-A52A-7C3429F351C3}) (Version: - Microsoft) Mise à jour Microsoft Office Word 2007 Help (KB963665) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_PROPLUS_{81536A04-DBFB-4DB3-978F-0F284590C223}) (Version: - Microsoft) Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{EB3DF0F0-0525-4C5A-A2F8-DEC868A3075D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden myCANAL (HKLM-x32\...\myCANAL) (Version: - UCAYA) myCANAL (HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\3451606932.player.canalplus.fr) (Version: - player.canalplus.fr) MyHeritage Family Tree Builder (HKLM-x32\...\Family Tree Builder) (Version: 8.0.0.8269 - MyHeritage.com) OEM Application Profile (HKLM-x32\...\{70D5F822-F4C4-33D9-7EEC-2A4AF4EA7BDC}) (Version: 1.00.0000 - Nom de votre société) PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.7.3 - pdfforge) PDFTK Builder 3.9.4 (HKLM-x32\...\PDFTK Builder_is1) (Version: - ) Photorécit 3 pour Windows (HKLM-x32\...\{4F41AD68-89F2-4262-A32C-2F70B01FCE9E}) (Version: 3.0.1115.15 - Microsoft Corporation) Pixelgarde Photo Privacy Editor (HKLM-x32\...\{336FE22B-60AC-45F5-B53B-F511DEF6435F}) (Version: 2.0.0 - Pixelgarde) Plants vs. Zombies - Game of the Year (HKLM-x32\...\WTA-9928066c-017a-44c1-9548-fa56e4b2ea6a) (Version: 2.2.0.98 - WildTangent) Hidden PlayMemories Home (HKLM-x32\...\{4F95DC94-A29D-41F6-AF34-15AA0D666186}) (Version: 5.3.01.02070 - Sony Corporation) PMB_ModeEditor (HKLM-x32\...\{E95982CA-945F-41F2-B156-A603897AB242}) (Version: 10.3.00 - Sony Corporation) Hidden PMB_ServiceUploader (HKLM-x32\...\{2CA3C685-339C-4C61-B12C-FAD81A872651}) (Version: 10.3.01 - Sony Corporation) Hidden Polar Bowler (HKLM-x32\...\WTA-03e4cc50-108d-418d-bb42-648aadfc7677) (Version: 2.2.0.97 - WildTangent) Hidden PX Profile Update (HKLM-x32\...\{66C06459-2087-81F2-89A9-B37FF8E90E53}) (Version: 1.00.1. - AMD) Hidden QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) Ralink Bluetooth Stack64 (HKLM\...\{8A2E2A41-B814-407E-2F96-4E433C42AB78}) (Version: 11.0.739.0 - Mediatek) Ralink RT3290 802.11bgn Wi-Fi Adapter (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 5.0.29.8105 - Mediatek) Ranch Rush 2 - Premium Edition (HKLM-x32\...\WTA-391405c4-67e7-4396-b11a-4cd300e78949) (Version: 2.2.0.98 - WildTangent) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 1.1.9200.20 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.20.815.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7010 - Realtek Semiconductor Corp.) Revo Uninstaller 2.0.3 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.3 - VS Revo Group, Ltd.) SafeZone Stable 4.58.2552.909 (HKLM-x32\...\SafeZone 4.58.2552.909) (Version: 4.58.2552.909 - Avast Software) Hidden Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung) Sauvegarde Facile (HKLM-x32\...\{7CC95123-99B9-486E-8DA4-AD3342DD694C}_is1) (Version: 3.1 - Emjysoft) SaversPlanet Cascade Screensaver 2.2 (HKLM-x32\...\SaversPlanet Cascade Screensaver_is1) (Version: - SaversPlanet.com) SereneScreen Marine Aquarium 3 (HKLM-x32\...\SereneScreen Marine Aquarium 3_is1) (Version: 3.3 - Prolific Publishing, Inc.) Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.151 - Skype Technologies S.A.) swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 17.0.6.2 - Synaptics Incorporated) Trinklit Supreme (HKLM-x32\...\WTA-66ed764c-57e3-4bff-b9ec-f3f6a6897e57) (Version: 2.2.0.98 - WildTangent) Hidden Update for 2007 Microsoft Office System (KB967642) (HKLM-x32\...\{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{C444285D-5E4F-48A4-91DD-47AAAA68E92D}) (Version: - Microsoft) Update Installer for WildTangent Games App (HKLM-x32\...\{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App) (Version: - WildTangent) Hidden USB TV Device Driver (HKLM-x32\...\{3717C4F2-7412-4793-9BB8-D73D2817B3D6}) (Version: 1.00.0000 - Nom de votre société) Vacation Quest™ - Australia (HKLM-x32\...\WTA-fd419878-d501-415d-9504-2a15b8436f34) (Version: 3.0.2.32 - WildTangent) Hidden Video Grabber (HKLM\...\VID_1D19&PID_6109&MI_01) (Version: 1.0.0.0 - Conexant Systems) Video to Video (HKLM-x32\...\{7F95A744-78DA-4AED-A8F0-A0AF330B8411}_is1) (Version: - Media Converters) Virtual Families (HKLM-x32\...\WTA-8e40a731-4bb6-4682-bd7a-3b4685273799) (Version: 2.2.0.98 - WildTangent) Hidden VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) VTech Download Agent Library (HKLM-x32\...\{DB083AE1-3354-4AAD-BD44-5F2CC4B2ECE6}) (Version: 1.00.0000 - VTech) Hidden Wedding Dash (HKLM-x32\...\WTA-622276b5-1632-4f07-8d7e-a517c21a38ca) (Version: 2.2.0.95 - WildTangent) Hidden WildTangent Games App (HP Games) (HKLM-x32\...\{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-hp) (Version: 4.0.10.15 - WildTangent) Hidden Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) XnView 2.34 (HKLM-x32\...\XnView_is1) (Version: 2.34 - Gougelet Pierre-e) YoWindow (HKLM-x32\...\yowindow) (Version: 3 - RepkaSoft) Zuma's Revenge (HKLM-x32\...\WTA-38d0a7af-6e29-4882-8c9b-ff695dd97bfe) (Version: 2.2.0.98 - WildTangent) Hidden ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-18] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-18] (AVAST Software) ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft) ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2015-11-12] (IvoSoft) ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll -> Pas de fichier ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-18] (AVAST Software) ContextMenuHandlers1: [axcrypt.File] -> {C3DFC144-30F8-4138-81F9-578DBEB9324A} => C:\Program Files\Axantum\AxCrypt\ShellExt.dll [2014-01-16] (Axantum Software AB) ContextMenuHandlers1: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-08-06] (Cyberlink) ContextMenuHandlers1: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-03-28] (IObit) ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2017-09-18] (Apple Inc.) ContextMenuHandlers2: [CLVDShellExt] -> {3E2A0A32-6E14-4BAD-AA87-BBB6A75EBFF2} => C:\Program Files (x86)\Common Files\CyberLink\ShellExtComponent\CLVDShellExt.dll [2013-08-06] (Cyberlink) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-18] (AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Divers\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers4: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-03-28] (IObit) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2013-08-19] (Advanced Micro Devices, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-08-20] (Intel Corporation) ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2016-10-04] (Igor Pavlov) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-18] (AVAST Software) ContextMenuHandlers6: [axcrypt.File] -> {C3DFC144-30F8-4138-81F9-578DBEB9324A} => C:\Program Files\Axantum\AxCrypt\ShellExt.dll [2014-01-16] (Axantum Software AB) ContextMenuHandlers6: [IObitUnstaler] -> {B19ED566-D419-470b-B111-3C89040BC027} => C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMenuRight.dll [2017-03-28] (IObit) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Divers\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2015-11-12] (IvoSoft) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0A43A629-F478-492C-8815-45747FB23EDB} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2017-10-13] (Microsoft Corporation) Task: {0C0CB437-77AE-46A8-903E-1AFCC83D3A5C} - System32\Tasks\SafeZone scheduled Autoupdate 1468443078 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2017-08-04] (Avast Software) Task: {142380A2-E5CF-4BC6-BC4E-2DF28C1CA931} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_27_0_0_187_pepper.exe [2017-11-20] (Adobe Systems Incorporated) Task: {1462F829-4C3B-493B-9516-A30344937F75} - pas de chemin du fichier Task: {18475E80-D1B2-4AC5-A650-E5D6920C99BE} - System32\Tasks\HPCustParticipation HP Deskjet 3050 J610 series => C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPCustPartic.exe [2012-10-17] (Hewlett-Packard Co.) Task: {275AD755-0307-4321-80F3-B05FDBC2AE0A} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe Task: {2CFDF4B4-B610-4FBA-BE94-0E027A930473} - System32\Tasks\Hewlett-Packard\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\Hewlett-Packard\HP CoolSense\CoolSense.exe [2013-06-07] (Hewlett-Packard Development Company, L.P.) Task: {2D17EC93-2D8F-4E66-B3AF-D3C34278DAB0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-04-05] (HP Inc.) Task: {31BBAB3C-05CD-4C4F-B760-D50BE62A6C49} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {3326ACCB-CDC0-4CDD-A493-2ABAF87AA081} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\system32\MRT.exe [2017-10-13] (Microsoft Corporation) Task: {4826D29D-C005-45E4-AF21-C4041DE22B6A} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\Divers\CCleaner\CCleaner.exe [2016-03-11] (Piriform Ltd) Task: {4C23540D-887B-4B29-8B13-561A65BA6F2C} - System32\Tasks\Synaptics TouchPad Enhancements => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2013-07-26] (Synaptics Incorporated) Task: {4ECAD121-41D2-4074-9B4C-BDAB3B9D1417} - System32\Tasks\{32F741D0-D7AB-4141-B18F-2C96212C08AB} => C:\Windows\system32\pcalua.exe -a C:\Users\Test\Downloads\USBFormat\usb_format.exe -d C:\Users\Test\Downloads\USBFormat Task: {537D01BE-532F-4C36-A2FA-D1B523D16DEF} - System32\Tasks\CLVDLauncher => C:\Program Files (x86)\CyberLink\Power2Go8\CLVDLauncher.exe [2013-03-12] (CyberLink Corp.) Task: {8513855A-A733-443A-AD29-8C72ED7F78E6} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-18] (AVAST Software) Task: {87501FE6-6304-4BF0-8840-4F24B89506DE} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-07-24] (Apple Inc.) Task: {9F1F9FDB-370F-4A3A-9ED7-630D53E7E1C2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-09-27] (Adobe Systems Incorporated) Task: {A61096F5-A3A8-43B1-9C5C-B7E23C0F451C} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-11-20] (Adobe Systems Incorporated) Task: {A6E5D2E8-0D79-43A8-AD5C-1C2C1F689B36} - System32\Tasks\CLMLSvc_P2G8 => C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe [2013-08-05] (CyberLink) Task: {A86AA99B-5EBA-4698-8C39-F35AA14D3FEA} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) Task: {AF5C6FCE-B7BC-40C4-8BDF-88AC44080531} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [2016-04-05] (HP Inc.) Task: {B0378D26-17A7-457D-BE2E-591EA2599584} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {B55C1177-6353-41E2-9EE8-AA9EBAC44AC7} - \ASC10_SkipUac_Test -> Pas de fichier <==== ATTENTION Task: {D56434FC-2515-49F0-B0C0-4FFC1374B354} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company) Task: {D9E8F02B-7776-4ABB-9BF3-8CF312578E83} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_pjkljhegncpnkpknbcohdijeoejaedia\Gmail.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pjkljhegncpnkpknbcohdijeoejaedia ShortcutWithArgument: C:\Users\Test\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_blpcfgokakmgnkcojhhkbfbldkacnbeo\YouTube.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=blpcfgokakmgnkcojhhkbfbldkacnbeo ==================== Modules chargés (Avec liste blanche) ============== 2017-05-10 15:12 - 2017-05-10 15:12 - 000294912 _____ () C:\ProgramData\myCANAL\nssm.exe 2017-05-29 09:21 - 2017-05-29 09:21 - 005059864 _____ () C:\ProgramData\myCANAL\myCANAL.Service.exe 2016-11-03 13:33 - 2014-04-14 18:59 - 000389896 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2017-10-14 17:35 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\DIVERS\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2013-09-05 02:22 - 2013-09-05 02:22 - 000109568 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cachesrvr.exe 2013-09-05 02:24 - 2013-09-05 02:24 - 000627200 _____ () C:\Program Files\Hewlett-Packard\SimplePass\cachedrv.dll 2013-09-05 02:24 - 2013-09-05 02:24 - 002540544 _____ () C:\Program Files\Hewlett-Packard\SimplePass\autheng.dll 2013-09-05 02:21 - 2013-09-05 02:21 - 000035328 _____ () C:\Program Files\Hewlett-Packard\SimplePass\ssplogon.dll 2013-09-05 02:21 - 2013-09-05 02:21 - 000055296 _____ () C:\Program Files\Hewlett-Packard\SimplePass\RandomPass.dll 2016-09-01 17:12 - 2016-09-01 17:12 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2017-10-18 23:51 - 2017-10-18 23:51 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2017-11-18 08:53 - 2017-11-18 08:53 - 000067408 _____ () C:\Program Files\AVAST Software\Avast\x64\module_lifetime.dll 2017-10-12 13:02 - 2017-09-21 08:29 - 004022616 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libglesv2.dll 2017-10-12 13:02 - 2017-09-21 08:29 - 000100184 _____ () C:\Program Files (x86)\Google\Chrome\Application\61.0.3163.100\libegl.dll 2014-02-10 00:39 - 2013-08-09 13:25 - 001242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll 2017-05-18 13:23 - 2017-03-28 16:08 - 000442144 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madExcept_.bpl 2017-05-18 13:23 - 2017-03-28 16:08 - 000210720 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madBasic_.bpl 2017-05-18 13:23 - 2017-03-28 16:08 - 000059680 _____ () C:\Program Files (x86)\IObit\IObit Uninstaller\madDisAsm_.bpl 2017-11-18 08:53 - 2017-11-18 08:53 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2017-11-18 08:53 - 2017-11-18 08:53 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll 2017-06-30 09:20 - 2017-06-30 09:20 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2017-11-18 08:53 - 2017-11-18 08:53 - 000237808 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll 2017-11-18 08:53 - 2017-11-18 08:53 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll 2017-11-18 08:53 - 2017-11-18 08:53 - 000235816 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\localhost -> localhost ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2013-08-22 14:25 - 2013-08-22 14:25 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-538710786-840181485-2322788481-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\Test\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\Services: Apple Mobile Device => 2 MSCONFIG\Services: Freemake Improver => 2 HKLM\...\StartupApproved\StartupFolder: => "emMon.lnk" HKLM\...\StartupApproved\Run: => "IgfxTray" HKLM\...\StartupApproved\Run: => "HotKeysCmds" HKLM\...\StartupApproved\Run: => "Persistence" HKLM\...\StartupApproved\Run: => "RTHDVCPL" HKLM\...\StartupApproved\Run: => "SimplePass" HKLM\...\StartupApproved\Run: => "OPBHOBroker" HKLM\...\StartupApproved\Run: => "OPBHOBrokerDesktop" HKLM\...\StartupApproved\Run: => "SynTPEnh" HKLM\...\StartupApproved\Run: => "iTunesHelper" HKLM\...\StartupApproved\Run: => "Classic Start Menu" HKLM\...\StartupApproved\Run32: => "AccelerometerSysTrayApplet" HKLM\...\StartupApproved\Run32: => "YouCam Service" HKLM\...\StartupApproved\Run32: => "HPMessageService" HKLM\...\StartupApproved\Run32: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "Family Tree Builder Update" HKLM\...\StartupApproved\Run32: => "QuickTime Task" HKLM\...\StartupApproved\Run32: => "PMBVolumeWatcher" HKLM\...\StartupApproved\Run32: => "Fitbit Connect" HKLM\...\StartupApproved\Run32: => "SynTPEnh" HKLM\...\StartupApproved\Run32: => "AgentMonitor" HKLM\...\StartupApproved\Run32: => "KeyScrambler" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\StartupFolder: => "YoWindow.lnk" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "CCleaner Monitoring" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "MoneyAgent" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "Emjysoft Sauvegarde Facile GUI" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "Skype" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "iCloudDrive" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "iCloudPhotos" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "iCloudServices" HKU\S-1-5-21-538710786-840181485-2322788481-1004\...\StartupApproved\Run: => "Avanquest Message" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{68729178-A3D3-4A7B-8D50-11D1AC88B628}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe FirewallRules: [{5D994B37-E839-4A1E-8D87-8268DF6C64F9}] => (Allow) C:\Program Files (x86)\HPConnectedMusic\HPConnectedMusic.exe FirewallRules: [{FDD6EA82-C313-487F-8D7F-39304F55CC1D}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12.exe FirewallRules: [{98EC7B98-8BA4-41B4-AA48-D0A74BFF4C5A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe FirewallRules: [{1202754D-0E3F-419D-98AD-4D29CFF5F0B8}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\PowerDVD12ML.exe FirewallRules: [{72A2959F-1734-40B8-A851-ABE85350758C}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD12\Movie\PowerDVD.exe FirewallRules: [{246D1EA1-7064-497D-96EE-2BE238F61006}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\DeviceSetup.exe FirewallRules: [{F13DFAE3-6D89-4A29-A89B-3BCB9DE6E24D}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicator.exe FirewallRules: [{7DD822E4-E413-4CFB-B57C-69612B758041}] => (Allow) C:\Program Files\HP\HP Deskjet 3050 J610 series\Bin\HPNetworkCommunicatorCom.exe FirewallRules: [{DA07FD59-4967-4C4C-B110-1CC9D1708E8F}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{1BF4237D-4652-40D8-8220-52074348CDB9}] => (Allow) LPort=2869 FirewallRules: [{659A86CF-820C-444D-AC43-3EB1A11A6252}] => (Allow) LPort=1900 FirewallRules: [{C2DF5A10-1553-4739-937B-1E49912A7F0A}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDirector10\PDR10.EXE FirewallRules: [{14D0E77D-2297-46AA-ACCA-8473C438EC14}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{518070D9-711C-4CDF-945E-D18B1FF43E3C}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{1D57BB3F-2819-4F7B-BA5C-7069F008040E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{1F704B79-DADC-4CA8-8411-E975C8FE773A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{DA433813-B3D6-4695-81BE-320EE314DFE2}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe FirewallRules: [{96B1D86E-65C1-44AD-BC1C-BCB9F71A702E}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\IncMail.exe FirewallRules: [{903827D8-D42A-4465-A71B-B33DF42C3FB2}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe FirewallRules: [{6579C934-9459-4B06-B0EE-F8130B67261C}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImApp.exe FirewallRules: [{2D8CE4BA-4A87-4B3B-A169-F464706B8966}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{62659D85-47EF-4C47-A372-028C84DF368E}] => (Allow) C:\Program Files (x86)\IncrediMail\Bin\ImpCnt.exe FirewallRules: [{CE14B9C3-FD67-45C7-94BC-23CD12C32B6B}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPDeviceDetection3.exe FirewallRules: [{AEC97245-39A9-4D1A-AEE9-EE8507C12A80}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909\SZBrowser.exe FirewallRules: [{41F88BC1-1E5D-4CA9-B3A7-DEE42601F74B}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\4.58.2552.909_0\SZBrowser.exe FirewallRules: [{6160C437-7AFA-4901-B19A-0DD3F518109C}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{526DF5F2-30B1-46BF-8485-9559C26DA35C}] => (Allow) C:\Program Files\iTunes\iTunes.exe ==================== Points de restauration ========================= 30-07-2017 15:47:50 Programme d’installation pour les modules Windows 09-08-2017 19:35:12 Windows Update 17-09-2017 08:25:24 Windows Update 13-10-2017 12:34:22 Windows Update 26-10-2017 08:27:28 Windows Update 18-11-2017 23:17:10 Avant suppression 19-11-2017 21:24:26 Installed 4K YouTube to MP3 3.3 21-11-2017 22:28:08 JRT Pre-Junkware Removal ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (11/21/2017 11:12:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante OmniServ.exe, version : 8.0.0.51, horodatage : 0x522840a4 Nom du module défaillant : MSVCR100.dll, version : 10.0.40219.325, horodatage : 0x4df2bcac Code d’exception : 0xc0000005 Décalage d’erreur : 0x000000000003c611 ID du processus défaillant : 0x1c8 Heure de début de l’application défaillante : 0x01d36180536127db Chemin d’accès de l’application défaillante : C:\Program Files\Hewlett-Packard\SimplePass\OmniServ.exe Chemin d’accès du module défaillant: C:\Windows\SYSTEM32\MSVCR100.dll ID de rapport : 009ada23-cf09-11e7-833a-9cd21e78a7e4 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (11/21/2017 09:03:03 PM) (Source: SideBySide) (EventID: 33) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Users\Test\AppData\Local\chromium\Application\chrome.exe ». Assembly dépendant 58.0.2988.0,language="*",type="win32",version="58.0.2988.0" introuvable. Utilisez sxstrace.exe pour un diagnostic détaillé. Error: (11/21/2017 09:01:17 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 4612265 Error: (11/21/2017 09:01:17 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 4612265 Error: (11/21/2017 09:01:17 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/21/2017 07:44:38 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 13219 Error: (11/21/2017 07:44:38 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 13219 Error: (11/21/2017 07:44:38 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: Continuously busy for more than a second Error: (11/21/2017 07:44:37 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledSPRetry 12000 Error: (11/21/2017 07:44:37 PM) (Source: Bonjour Service) (EventID: 100) (User: ) Description: Task Scheduling Error: m->NextScheduledEvent 12000 Erreurs système: ============= Error: (11/21/2017 11:12:06 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service HP SimplePass Service s’est terminé de façon inattendue pour la 1ème fois. Error: (11/21/2017 07:44:21 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service CyberLink PowerDVD 12 Media Server Service s’est terminé de façon inattendue pour la 6ème fois. Error: (11/21/2017 03:36:56 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: MANU) Description: 0x8000002a114\??\C:\ProgramData\Malwarebytes' Anti-Malware (portable)\S-1-5-21-538710786-840181485-2322788481-1004-0-ntuser.dat Error: (11/21/2017 03:36:49 PM) (Source: Microsoft-Windows-Kernel-General) (EventID: 5) (User: MANU) Description: 0x8000002a114\??\C:\ProgramData\Malwarebytes' Anti-Malware (portable)\S-1-5-21-538710786-840181485-2322788481-1004-0-ntuser.dat Error: (11/21/2017 01:25:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service CyberLink PowerDVD 12 Media Server Service s’est terminé de façon inattendue pour la 5ème fois. Error: (11/21/2017 09:54:03 AM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service CyberLink PowerDVD 12 Media Server Service s’est terminé de façon inattendue pour la 4ème fois. Error: (11/20/2017 02:44:30 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service CyberLink PowerDVD 12 Media Server Service s’est terminé de façon inattendue pour la 3ème fois. Error: (11/20/2017 02:44:25 PM) (Source: DCOM) (EventID: 10010) (User: MANU) Description: Le serveur {4545DEA0-2DFC-4906-A728-6D986BA399A9} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/20/2017 02:44:24 PM) (Source: DCOM) (EventID: 10010) (User: MANU) Description: Le serveur {4545DEA0-2DFC-4906-A728-6D986BA399A9} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (11/20/2017 02:44:19 PM) (Source: DCOM) (EventID: 10010) (User: MANU) Description: Le serveur Microsoft.WindowsLive.Mail.AppXj3e9v0xw9sf8t58nqr15tqqb2yq4zsfg.mca ne s’est pas enregistré sur DCOM avant la fin du temps imparti. CodeIntegrity: =================================== Date: 2017-01-28 14:36:16.673 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2017-01-01 14:35:59.340 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-17 22:02:21.198 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-17 22:02:21.198 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-16 09:53:35.511 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-15 13:54:37.935 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-15 13:54:37.935 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-15 09:21:37.642 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-15 09:19:40.637 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. Date: 2016-06-15 09:19:12.376 Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\amdhdl64.dll because the set of per-page image hashes could not be found on the system. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i7-3632QM CPU @ 2.20GHz Pourcentage de mémoire utilisée: 65% Mémoire physique - RAM - totale: 3988.27 MB Mémoire physique - RAM - disponible: 1389.68 MB Mémoire virtuelle totale: 4692.27 MB Mémoire virtuelle disponible: 1944.06 MB ==================== Lecteurs ================================ Drive c: (Windows) (Fixed) (Total:911.67 GB) (Free:226.27 GB) NTFS Drive d: (RECOVERY) (Fixed) (Total:19.08 GB) (Free:1.88 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: B974B0BF) Partition: GPT. ==================== Fin de Addition.txt ============================