Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 04.03.2018 Exécuté par Administrateur (07-03-2018 08:36:50) Exécuté depuis C:\Users\Administrateur\Desktop Windows 7 Home Premium Service Pack 1 (X64) (2011-05-03 21:09:13) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-4158940424-1538533425-2611268743-500 - Administrator - Enabled) => C:\Users\Administrateur HomeGroupUser$ (S-1-5-21-4158940424-1538533425-2611268743-1002 - Limited - Enabled) Invité (S-1-5-21-4158940424-1538533425-2611268743-501 - Limited - Disabled) nicolas (S-1-5-21-4158940424-1538533425-2611268743-1000 - Limited - Enabled) => C:\Users\nicolas ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF} AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Acrobat 6.0.1 Professional (HKLM-x32\...\{AC76BA86-1033-0000-7760-000000000001}) (Version: 006.000.001 - Adobe Systems) Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 28.0.0.127 - Adobe Systems Incorporated) Adobe Flash Player 28 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 28.0.0.161 - Adobe Systems Incorporated) Adobe Flash Player 28 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 28.0.0.161 - Adobe Systems Incorporated) Adobe Reader X (10.1.16) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AA1000000001}) (Version: 10.1.16 - Adobe Systems Incorporated) AnyRail5 (HKLM-x32\...\{50B21AC2-093F-4BB7-8981-75FA813D8115}) (Version: 5.23.2 - DRail Modelspoor Software) Hidden AnyRail5 (HKLM-x32\...\AnyRail5 5.23.2) (Version: 5.23.2 - DRail Modelspoor Software) Autodesk DWG TrueView 2018 - Français (French) (HKLM\...\DWG TrueView 2018 - Français (French)) (Version: 22.0.50.0 - Autodesk) Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 18.2.2328 - AVAST Software) Avast Cleanup Premium (HKLM-x32\...\{075CC190-59EE-499F-828B-0B5C098C8C15}_is1) (Version: 17.3.4040 - AVAST Software) Backup and Sync from Google (HKLM-x32\...\{AC62F3F2-61A2-4357-93EC-C308E3FEDF4E}) (Version: 3.39.8370.7843 - Google, Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.40 - Piriform) Chromium (HKU\S-1-5-21-4158940424-1538533425-2611268743-500\...\Chromium) (Version: 46.0.2480.0 - Chromium) Composants Cryptographiques CPS v5.0.34 (x64) (HKLM\...\{657E024F-D943-4DCB-8F7F-E4A2DBF9801A}) (Version: 5.0.34 - ASIP Santé) DWG TrueView 2018 - Français (French) (HKLM\...\{28B89EEF-1028-040C-0100-CF3F3A09B77D}) (Version: 22.0.50.0 - Autodesk) Hidden FMS (HKLM-x32\...\FMS) (Version: - ) Galerie de photos Windows Live (HKLM-x32\...\{488F0347-C4A7-4374-91A7-30818BEDA710}) (Version: 15.4.3502.0922 - Microsoft Corporation) Hidden Google Chrome (HKLM-x32\...\Google Chrome) (Version: 64.0.3282.186 - Google Inc.) Google Earth Plug-in (HKLM-x32\...\{57BB4801-61C8-4E74-9672-2160728A461E}) (Version: 7.1.5.1557 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden Hewlett-Packard ACLM.NET v1.2.2.3 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden HP Support Assistant (HKLM-x32\...\{E35A3B13-78CD-4967-8AC8-AA9FDA693EDE}) (Version: 7.4.45.4 - Hewlett-Packard Company) Jedicut 2.3.4.1 (HKLM-x32\...\{682F1116-2B94-47F8-B85A-149997A4E8F5}_is1) (Version: - Jerome) LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version: - ) Malwarebytes version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes) Microsoft .NET Framework 4.7 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.7.02053 - Microsoft Corporation) Microsoft .NET Framework 4.7 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.02053 - Microsoft Corporation) Microsoft Office « Démarrer en un clic » 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office 2010 (HKLM-x32\...\{95140000-0070-0000-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Office Professional Edition 2003 (HKLM-x32\...\{9011040C-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation) Microsoft Office Starter 2010 - Français (HKLM-x32\...\{90140011-0066-040C-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation) Microsoft Picture It! Photo 7.0 (HKLM-x32\...\{369B36BE-3D64-4641-9AEA-808D436FE132}) (Version: 7.0.0.0000 - Microsoft Corporation) Microsoft Primary Interoperability Assemblies 2005 (HKLM-x32\...\{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 ATL Update kb973923 - x64 8.0.50727.4053 (HKLM\...\{B6E3757B-5E77-3915-866A-CCFC4B8D194C}) (Version: 8.0.50727.4053 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable - KB2467175 (HKLM-x32\...\{a0fe116e-9a8a-466f-aee0-625cb7c207e3}) (Version: 8.0.51011 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729 (HKLM\...\{9B3F0A88-790D-3AD9-9F96-B19CF2746452}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212 (HKLM-x32\...\{323dad84-0974-4d90-a1c1-e006c7fdbb7d}) (Version: 14.0.24212.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Works 7.0 (HKLM-x32\...\{64D114CE-4234-45C2-B60A-2B07D5A48F72}) (Version: 07.02.0000 - Microsoft Corporation) Module de compatibilité pour Microsoft Office System 2007 (HKLM-x32\...\{90120000-0020-040C-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation) Mozilla Firefox 58.0.2 (x64 fr) (HKLM\...\Mozilla Firefox 58.0.2 (x64 fr)) (Version: 58.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla) Mozilla Thunderbird 52.6.0 (x86 fr) (HKLM-x32\...\Mozilla Thunderbird 52.6.0 (x86 fr)) (Version: 52.6.0 - Mozilla) Oscillo v.3.6 (HKLM-x32\...\Oscillo_is1) (Version: - © Serge LAGIER) PDF Complete Special Edition (HKLM-x32\...\PDF Complete) (Version: 4.2.26 - PDF Complete, Inc) PhotoFiltre 7 (HKU\S-1-5-21-4158940424-1538533425-2611268743-500\...\PhotoFiltre 7) (Version: - ) Profils (remove only) (HKLM-x32\...\Profils) (Version: - ) QuickTime 7 (HKLM-x32\...\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C}) (Version: 7.79.80.95 - Apple Inc.) RealNetworks - Microsoft Visual C++ 2008 Runtime (HKLM-x32\...\{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}) (Version: 9.0 - RealNetworks, Inc) Hidden RealNetworks - Microsoft Visual C++ 2010 Runtime (HKLM-x32\...\{AAECF7BA-E83B-4A10-87EA-DE0B333F8734}) (Version: 10.0 - RealNetworks, Inc) Hidden Sélecteur d'installation de Microsoft Works Suite 2003 (HKLM-x32\...\Works2003Setup) (Version: - ) Skype version 8.16 (HKLM-x32\...\Skype_is1) (Version: 8.16 - Skype Technologies S.A.) Speccy (HKLM\...\Speccy) (Version: 1.31 - Piriform) Traffic Screensaver V4.9F (HKLM-x32\...\TrafficScreensaver_is1) (Version: 4.9F - TrafficSoft BT.) VirtualGeo³ pour le Géoportail (HKLM-x32\...\VGeo3 GP) (Version: 3.1.0.2040 - Diginext) VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.1 - VideoLAN) Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 15.4.3502.0922 - Microsoft Corporation) Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp) WinOscillo 0.85 (HKLM-x32\...\WinOscillo) (Version: - Jean-Noël Haas) WinRAR 5.50 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-01-29] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-01-29] (Google) ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2018-01-29] (Google) ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-03-05] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-03-05] (AVAST Software) ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2017-02-15] (Autodesk, Inc.) ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2017-02-15] (Autodesk) ContextMenuHandlers1-x32: [Adobe.Acrobat.ContextMenu] -> {D25B2CAB-8A9A-4517-A9B2-CB5F68A5A802} => C:\Program Files (x86)\Adobe\Acrobat 6.0\Acrobat Elements\ContextMenu.dll [2003-11-04] (Adobe Systems Inc.) ContextMenuHandlers1-x32: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-03-05] (AVAST Software) ContextMenuHandlers1-x32-x32: [EPPShellEx] -> {509FE1AF-ADD5-49EC-BC55-7CF81FD16E78} => C:\Program Files (x86)\EPSON\Creativity Suite\Easy Photo Print\EPPShell.dll [2007-03-05] (SEIKO EPSON CORPORATION) ContextMenuHandlers1-x32-x32: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-01-29] (Google) ContextMenuHandlers1-x32-x32: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1-x32-x32-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-03-05] (AVAST Software) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files (x86)\Google\Drive\contextmenu64.dll [2018-01-29] (Google) ContextMenuHandlers4: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers4-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2010-09-08] (Advanced Micro Devices, Inc.) ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2018-03-05] (AVAST Software) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal) ContextMenuHandlers1_S-1-5-21-4158940424-1538533425-2611268743-500: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => -> Pas de fichier ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {00A8B493-C21C-4A53-8AC8-87024F4474D3} - System32\Tasks\HPCeeScheduleForNICOLAS-HP$ => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2010-09-14] (Hewlett-Packard) Task: {05E36F1C-01A6-47FA-9552-2BC008324BE4} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4158940424-1538533425-2611268743-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {06BF33B7-F944-450C-AE00-C16FDF602EB0} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2018-02-07] (Piriform Ltd) Task: {0ACDC682-9496-47A3-827F-E065C91459AB} - System32\Tasks\{4780C84F-2D3B-4D69-8821-985899C69D10} => E:\Installation.EXE Task: {101D1AEB-11DC-496C-A8B2-58CEEE23E098} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4158940424-1538533425-2611268743-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {140486FD-A47A-48D7-A6E0-5AE32F6EE484} - System32\Tasks\{82D9E2FF-AAD3-4846-85F4-5AE85D3F8C6E} => E:\autorun.exe Task: {16A379F2-C38E-4F82-986D-F2E41BF0F891} - System32\Tasks\{ED0FD557-B939-4FCF-B510-C9DF291DFBBD} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {16E152FA-82A2-49CA-AC7A-DB0C79389CF4} - System32\Tasks\{71F7E460-9E46-484F-B6F3-13A5926AA949} => C:\Windows\system32\pcalua.exe -a "K:\A SAUVEGARDER\EXTRACTEURS ET UTILITAIRES\CDRWIN WinISO ACE RAR Zip\WinZip v8.1.Cracké Fr.exe" -d "K:\A SAUVEGARDER\EXTRACTEURS ET UTILITAIRES\CDRWIN WinISO ACE RAR Zip" Task: {18651D6D-7293-4854-A347-3E6BF950BA7B} - System32\Tasks\{A1BF6E63-B85F-4B28-A452-2F89011E8A81} => E:\autorun.exe Task: {1CDD73AD-33A2-4349-9179-3E69CB9ACD6A} - System32\Tasks\{00D633DF-75FC-4B9A-B97D-FF279DFB99E1} => C:\Program Files (x86)\Microsoft Games\Flight Simulator 9\fs9.exe Task: {20B2A352-13F0-4324-AF84-AB464FC60A4E} - System32\Tasks\{FBFA299F-4901-41B8-BAA0-1EE813ED91B9} => E:\autorun.exe Task: {28B5AB54-BBD1-4796-8E96-BA7F39B1AF5D} - System32\Tasks\{CE640567-6BF3-4447-8AC8-F51DB8386190} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {29AF8411-68B2-4E4E-8AFE-D0E9698A910C} - System32\Tasks\{12722D66-8DB4-426A-B5B2-06CA5385E9B9} => C:\Program Files\WinZip 8.1 Fr\WINZIP32.EXE [2002-03-29] (WinZip Computing, Inc.) Task: {2B28B680-1D92-4F9D-A5C8-92ACA0FF8391} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4158940424-1538533425-2611268743-500 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {2B7819CD-F2AA-4044-A646-CFD50E43AF67} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {2DA01766-3098-4835-B3B0-7F79EACC0E8D} - System32\Tasks\{F706919D-9DF3-4C23-B9C6-3CBE0AFE09C5} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {3271DBFB-B815-4910-8936-C7C6B372C6D5} - System32\Tasks\{9CCE5DC3-1335-4056-8A1E-B54C95114FC0} => E:\autorun.exe Task: {33112B46-AE87-46EF-AA7F-DA1AD62A7121} - System32\Tasks\{54D7AC87-A632-49D2-BA7C-D1036C2EB02A} => C:\Program Files (x86)\Microsoft Games\Flight Simulator 9\fs9.exe Task: {359CCB70-AA1C-4611-93FC-ED9D3C5EFDA8} - System32\Tasks\defenderVega5 => C:\vega5\Outils\WindowsDefender.bat [2017-09-05] () <==== ATTENTION Task: {4812132A-34E0-4F02-8361-385E01C8CF73} - System32\Tasks\{3D06B2DD-7FB3-4988-A85F-C78AED92B61E} => C:\Users\nicolas\Downloads\Il2_Sturmovik_DownloadManager_fr.exe [2011-10-07] (Digital River, Inc.) Task: {4DB215A8-9F53-4466-9569-F3569799FD82} - System32\Tasks\RealCreateProcessScheduledTask24040534S-1-5-21-4158940424-1538533425-2611268743-500 => c:\program files (x86)\real\realplayer\update\realsched.exe [2013-02-14] (RealNetworks, Inc.) Task: {51E2D4FE-14A4-42D2-B16D-8774325C9B1A} - System32\Tasks\{EB334C34-FCF3-4034-80AF-EE9B80C7DF5C} => C:\Windows\system32\pcalua.exe -a K:\pf_v402.exe -d K:\ Task: {52846B93-554B-4339-9EA6-AC6B437E6516} - System32\Tasks\{6AF396E9-72E5-4911-B335-445F860861DE} => E:\autorun.exe Task: {683F59C8-FC6E-4900-A79F-845ECCF1B8B4} - System32\Tasks\{57D5E4F3-38A3-46F0-A912-23B089785CD0} => C:\Windows\system32\pcalua.exe -a E:\Installation.EXE -d E:\ Task: {69E945A9-2C9E-40BC-8676-6C21727C0F7B} - System32\Tasks\{6E286114-18C1-4053-840A-60D60F9E76FD} => C:\Program Files (x86)\Microsoft Games\Flight Simulator 9\fs9.exe Task: {6BD0290B-7194-48C4-8214-33BB450565A5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) Task: {6CDD1FF5-66D1-4C1B-B435-12F141BA5A61} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4158940424-1538533425-2611268743-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {71064391-A8BB-4EA2-BD04-6B6ABFEC5845} - System32\Tasks\{F9A20A05-9A24-40D8-A0B1-E3D0DE7C14B9} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Ubi Soft\IL-2 Sturmovik Forgotten Battles\il2setup.exe" Task: {83365113-77C5-4053-A74C-8EA664D13DF0} - System32\Tasks\{BFCAB4E2-1D03-4669-8E2E-5C5518EBB3A8} => E:\Fichiers Bliss\Bliss 2.EXE Task: {8491CAB5-F1FD-4CC5-AE44-9CD1084EF2C9} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2018-03-05] (AVAST Software) Task: {8C5FA03F-EFE4-4240-AF89-00C713A9B142} - System32\Tasks\{70EA3796-5E1C-492C-856D-421DA13DCABC} => E:\Fichiers Bliss\Bliss 2.EXE Task: {8CDCC84E-BE21-484C-8F87-7BD6A3814A98} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2018-02-07] (Piriform Ltd) Task: {9114F9A2-6E5E-4A48-BF0F-CD5B3D1C4856} - System32\Tasks\{693CCD41-9275-4F8B-A4D6-CEF8C67C44E1} => E:\autorun.exe Task: {9130DB03-CE67-43AA-B273-BC4DA7B58FCF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Update Check => C:\ProgramData\Hewlett-Packard\HP Support Framework\Resources\Updater7\HPSFUpdater.exe [2014-05-12] (Hewlett-Packard Company) Task: {91B9D664-68AD-479F-9A15-493F91F7F797} - System32\Tasks\{FA10E245-C683-4E37-BB58-12436A73815E} => C:\Program Files (x86)\Microsoft Games\Flight Simulator 9\fs9.exe Task: {935DCFEC-56E8-423E-9FF8-7C1E41555921} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.) Task: {93BD1814-4951-4638-8522-12B6A41D33EF} - System32\Tasks\{CF1F0AAD-0EA9-45A9-8538-60867841DBCD} => C:\Program Files (x86)\Ubi Soft\IL-2 Sturmovik Forgotten Battles\il2fb.exe Task: {951B055D-AE7F-4F41-B2D7-B2A1EEF937B5} - System32\Tasks\{EEC4EAFC-77C0-4856-86B3-42E84637473C} => E:\Installation.EXE Task: {9795729E-DA1D-4151-B63F-5C70DDCCC289} - System32\Tasks\avastBCLRestartS-1-5-21-4158940424-1538533425-2611268743-1000 => C:\Program Files (x86)\Mozilla Firefox\firefox.exe Task: {981E4170-89EE-4F86-8595-1CEED8A535CE} - System32\Tasks\Avast TUNEUP Update => C:\Program Files (x86)\AVAST Software\Avast Cleanup\TUNEUpdate.exe [2018-02-02] (AVAST Software) Task: {9CB8EFAE-A17D-4387-8F4E-F4764C2B3913} - System32\Tasks\TXOY => C:\Users\nicolas\AppData\Roaming\TXOY.exe <==== ATTENTION Task: {A6026635-6325-42BA-9312-81715620A16A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-02-06] (Adobe Systems Incorporated) Task: {A765D097-478D-483E-A064-70363C14EA2A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [2013-11-04] (Hewlett-Packard Company) Task: {AF04CFC8-9450-4968-BA1A-2C86B71754E9} - System32\Tasks\{9FCCBD84-77C5-4203-8307-24D2CC0A7655} => E:\Installation.EXE Task: {B5C095BB-874E-4B42-A2A3-E9F2013576D9} - System32\Tasks\{9D993A3C-AE4E-4632-BAFF-7B3D02B73C3E} => C:\Program Files (x86)\Microsoft Games\Flight Simulator 9\fs9.exe Task: {B9368777-AED1-4CBE-A3FE-633B212667DA} - System32\Tasks\{47664557-FB5A-4CEE-B91E-E1F7E48DC3AC} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {BBB9D7E1-7551-46A7-B5B5-A13EA3AB486F} - System32\Tasks\{34185384-27F3-41A5-A817-70B3B58B7DFF} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {C94D5703-0399-470C-96C4-C1C9C8DC8057} - System32\Tasks\{7E0DE08B-A49E-48C2-9CF3-59F67BF035FA} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {C99B0E9C-CDEA-4E1D-A107-D6B7CF68E4D8} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4158940424-1538533425-2611268743-500 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {CC6D8E96-69EC-4524-A376-9AAC892F9222} - System32\Tasks\{11759754-19CD-4C0B-8ABC-A6CCC0D9004F} => C:\Windows\system32\pcalua.exe -a E:\install.EXE -d E:\ -c /autorun Task: {D806EDD0-619F-41FA-AD3D-E788ABDBDBE8} - System32\Tasks\{720D3920-B8B6-4EE9-B4F4-D39C15A99E43} => C:\Program Files (x86)\Ubisoft\IL-2 Sturmovik 1946\il2fb.exe [2011-10-07] () Task: {D81D701F-A001-4C14-B783-FFEA36C9836E} - System32\Tasks\{66A26E85-20E3-4DFE-B5B1-531615A4D3ED} => C:\Program Files (x86)\Microsoft Games\Flight Simulator 9\fs9.exe Task: {DE40EDC4-5880-410C-BF3A-8FBA6B0A35AC} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4158940424-1538533425-2611268743-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {DFC8AE0E-F084-40B9-AA70-D98EB87B30DA} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4158940424-1538533425-2611268743-500 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {DFF74936-17F7-4A61-96FF-5E18EC503B9B} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4158940424-1538533425-2611268743-500 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2012-11-30] (RealNetworks, Inc.) Task: {E17D3EB0-FEE1-41DD-B96F-DF638992346A} - System32\Tasks\{9432BDCD-2D66-4C76-90F9-25991BB7EAFD} => E:\autorun.exe Task: {E2D32B2B-8E7F-497F-B6AB-345D8CDA7E45} - System32\Tasks\{A12F6507-6250-402F-84CE-039820857D50} => C:\Users\nicolas\Downloads\Il2_Sturmovik_DownloadManager_fr.exe [2011-10-07] (Digital River, Inc.) Task: {FCC8FEB0-B27F-439F-BD15-188B80CC8D62} - System32\Tasks\{FA1189C2-EEBB-4693-BAC8-F95A9944A28C} => C:\Users\nicolas\Downloads\Il2_Sturmovik_DownloadManager_fr.exe [2011-10-07] (Digital River, Inc.) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) Task: C:\Windows\Tasks\defenderVega5.job => C:\vega5\Outils\WindowsDefender.bat <==== ATTENTION Task: C:\Windows\Tasks\HPCeeScheduleForNICOLAS-HP$.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe Task: C:\Windows\Tasks\TXOY.job => C:\Users\nicolas\AppData\Roaming\TXOY.exe <==== ATTENTION ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2012-11-29 20:31 - 2012-11-29 20:31 - 000038608 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe 2018-03-05 17:49 - 2017-11-29 09:11 - 002301384 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll 2018-03-05 17:49 - 2017-11-29 09:11 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2010-09-15 19:31 - 2010-09-15 19:31 - 000611896 _____ () C:\Program Files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe 2018-02-07 18:47 - 2018-02-07 18:47 - 000091520 _____ () C:\Program Files\CCleaner\lang\lang-1036.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000287960 _____ () C:\Program Files\AVAST Software\Avast\streamback.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000280280 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll 2018-03-06 17:53 - 2018-03-06 17:53 - 005826192 _____ () C:\Program Files\AVAST Software\Avast\defs\18030604\algo.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000756952 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000172760 _____ () C:\Program Files\AVAST Software\Avast\hns_tools.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000964824 _____ () C:\Program Files\AVAST Software\Avast\shepherdsync.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000475352 _____ () C:\Program Files\AVAST Software\Avast\gui_cache.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000339672 _____ () C:\Program Files\AVAST Software\Avast\streamback_avast.dll 2018-03-05 21:40 - 2016-09-12 14:53 - 048936448 _____ () C:\Program Files (x86)\AVAST Software\Avast Cleanup\libcef.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 067126928 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2018-03-05 21:26 - 2018-03-05 21:26 - 000275160 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\Users\Administrateur\Application Data:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\Downloads:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Adobe:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\AdobeUM:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Apple Computer:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\ATI:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Autodesk:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Blitware:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\DassaultSystemes:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\EDrawings:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Hewlett-Packard:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\hpqLog:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Identities:Shareaza.GUID [34] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Leadertech:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Macromedia:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Media Center Programs:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Mozilla:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\NeroVision:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\PictureMover:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Real:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\RealNetworks:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Shareaza:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Skype:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\Thunderbird:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\TP:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\TrueCrypt:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\vlc:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\WinRAR:Shareaza.GUID [16] AlternateDataStreams: C:\Users\Administrateur\AppData\Roaming\XTrackCad:Shareaza.GUID [16] AlternateDataStreams: C:\Users\nicolas\Downloads:Shareaza.GUID [16] AlternateDataStreams: C:\Users\nicolas\Downloads\chrome:Shareaza.GUID [16] AlternateDataStreams: C:\Users\nicolas\Downloads\defaults:Shareaza.GUID [16] AlternateDataStreams: C:\Users\nicolas\Downloads\OpenAttachmentByExtension-0.3.5.1:Shareaza.GUID [16] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mbamchameleon => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mbamchameleon => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-4158940424-1538533425-2611268743-500\...\atos.net -> hxxp://*.aw.atos.net IE trusted site: HKU\S-1-5-21-4158940424-1538533425-2611268743-500\...\atosorigin.com -> hxxp://*.aw.atosorigin.com IE trusted site: HKU\S-1-5-21-4158940424-1538533425-2611268743-500\...\geoportail.fr -> hxxp://geoportail.fr IE trusted site: HKU\S-1-5-21-4158940424-1538533425-2611268743-500\...\gouv.fr -> hxxp://*.geoportail.gouv.fr ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-4158940424-1538533425-2611268743-500\Control Panel\Desktop\\Wallpaper -> C:\Users\Administrateur\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 212.27.40.241 - 212.27.40.240 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Acrobat Assistant.lnk => C:\Windows\pss\Acrobat Assistant.lnk.CommonStartup MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Snapfish PictureMover.lnk => C:\Windows\pss\Snapfish PictureMover.lnk.CommonStartup MSCONFIG\startupreg: APSDaemon => "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe" MSCONFIG\startupreg: HP Software Update => c:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe MSCONFIG\startupreg: hpsysdrv => c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe MSCONFIG\startupreg: LogitechQuickCamRibbon => "C:\Program Files\Logitech\Logitech WebCam Software\LWS.exe" /hide MSCONFIG\startupreg: NeroCheck => C:\Windows\system32\NeroCheck.exe MSCONFIG\startupreg: PDF Complete => C:\Program Files (x86)\PDF Complete\pdfsty.exe MSCONFIG\startupreg: QuickTime Task => "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime MSCONFIG\startupreg: SSC Service Utility => C:\Program Files (x86)\SSC Service Utility\ssc_serv.exe /s MSCONFIG\startupreg: StartCCC => "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun MSCONFIG\startupreg: TkBellExe => "C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe" -osboot ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{E2E2863F-712D-460B-8C59-5D7D02396B0A}] => (Allow) c:\Program Files (x86)\CyberLink\PowerDirector\PDR8.EXE FirewallRules: [{202E5098-F4E1-452D-A661-CF21517BA1F4}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\Media\DVD\HPDVDSmart.exe FirewallRules: [{5BA2A543-EEB1-45DC-900A-5FBEC4973674}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Photo\HPMediaSmartPhoto.exe FirewallRules: [{69C5E7DE-7E6D-441C-9694-CDE48933E51B}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\MediaSmart\Video\HPMediaSmartVideo.exe FirewallRules: [{FE2E4651-C793-4569-8920-D672AE72610B}] => (Allow) C:\Program Files (x86)\Hewlett-Packard\TouchSmart\Music\HPTouchSmartMusic.exe FirewallRules: [{2FAD42AF-8E9C-48D0-8177-AD9817BEB019}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{0073EDA4-ECC1-4074-8F91-0A6EDD6128E2}] => (Allow) LPort=2869 FirewallRules: [{591CB5CA-23A7-4816-A82F-45E69B84C693}] => (Allow) LPort=1900 FirewallRules: [{0725BF9C-E254-434E-8F03-235E28544995}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{9531EE08-D46F-4AC4-B444-1CA6E47AE817}] => (Allow) LPort=48113 FirewallRules: [{41E14734-552D-4AE8-A4F2-37E1263E8A33}] => (Allow) LPort=48113 FirewallRules: [{904B6E00-9EDC-44EB-A147-35B2E50BDDDF}] => (Allow) C:\Program Files\ma-config.com\x64\maconfservice.exe FirewallRules: [{92C07BEE-0821-46BE-9094-976472A754A4}] => (Allow) C:\Program Files\ma-config.com\x64\maconfservice.exe FirewallRules: [TCP Query User{3CECDCA2-6D1D-45A5-8C29-528E65EB6836}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe FirewallRules: [UDP Query User{4D641153-809C-4F84-9243-800A261BF833}C:\program files (x86)\mozilla firefox\plugin-container.exe] => (Block) C:\program files (x86)\mozilla firefox\plugin-container.exe FirewallRules: [{833BAAC2-8874-4BD1-94F1-45BD7A591213}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\WebKit2WebProcess.exe FirewallRules: [{C786967B-4CE6-4AC9-8B8C-BCD4DBB70F08}] => (Allow) C:\WarThunder\bpreport.exe FirewallRules: [{FDE467D0-16A6-4EFB-BE3C-0DFF9D1AA81C}] => (Allow) C:\WarThunder\bpreport.exe FirewallRules: [{F292FA7D-58D5-45C1-8098-905D1EFF5A28}] => (Allow) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe FirewallRules: [{876D2B3B-C34C-419B-BC83-BE4428929B01}] => (Allow) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe FirewallRules: [{C94DF54D-1062-436C-AE25-E6A2A86C5769}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{D8A92E2C-80D7-4C62-95B5-5C29B68AD614}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{8C903280-DEA5-4171-A056-64FF60119734}] => (Allow) C:\Users\Administrateur\AppData\Local\Chromium\Application\chrome.exe FirewallRules: [{969AB155-3D18-42D5-8A87-6B92F59F9A1A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{4669813E-5DAD-494E-8E0F-17A405B280DB}] => (Allow) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe FirewallRules: [{0AD95333-FBAA-4D1F-91E8-14EE3CBFC05C}] => (Allow) C:\Program Files (x86)\Logitech\Logitech Vid\Vid.exe FirewallRules: [{F71EC78D-616F-41F1-B5D3-96685453B16A}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{09CC8C47-DD42-4E6E-B725-0A2AC4A3AE13}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{A567E29F-D76B-4DDC-9C03-0D77C699356F}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{0F2D9E8B-4274-4AD8-A646-BE9830F54150}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe ==================== Points de restauration ========================= ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: Microsoft Teredo Tunneling Adapter Description: Microsoft Teredo Tunneling Adapter Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: tunnel Problem: : This device cannot start. (Code10) Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device. On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (03/06/2018 05:40:26 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Pour information uniquement. Échec de l’inscription du package Office « Démarrer en un clic ». Error: (03/06/2018 01:44:09 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Pour information uniquement. Échec de l’inscription du package Office « Démarrer en un clic ». Error: (03/06/2018 01:44:09 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: ) Description: {tid=1100} Le client Application Virtualization n'a pas pu se connecter pour diffuser l'URL « http://c2r.microsoft.com/ConsumerC2R/fr-fr/14.0.4763.1000/ConsumerC2R.fr-fr_14.0.7194.5000.sft » (rc 2460420A-40002EFD, original rc 2460420A-40002EFD). Error: (03/05/2018 10:23:18 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Pour information uniquement. Échec de l’inscription du package Office « Démarrer en un clic ». Error: (03/05/2018 10:23:18 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: ) Description: {tid=EF4} Le client Application Virtualization n'a pas pu se connecter pour diffuser l'URL « http://c2r.microsoft.com/ConsumerC2R/fr-fr/14.0.4763.1000/ConsumerC2R.fr-fr_14.0.7194.5000.sft » (rc 2460420A-40002EFD, original rc 2460420A-40002EFD). Error: (03/05/2018 10:03:34 PM) (Source: CVHSVC) (EventID: 100) (User: ) Description: Pour information uniquement. Échec de l’inscription du package Office « Démarrer en un clic ». Error: (03/05/2018 10:03:34 PM) (Source: Application Virtualization Client) (EventID: 5009) (User: ) Description: {tid=183C} Le client Application Virtualization n'a pas pu se connecter pour diffuser l'URL « http://c2r.microsoft.com/ConsumerC2R/fr-fr/14.0.4763.1000/ConsumerC2R.fr-fr_14.0.7194.5000.sft » (rc 2460420A-40002EFD, original rc 2460420A-40002EFD). Error: (03/05/2018 09:59:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante VEGA5.EXE, version : 5.3.0.65517, horodatage : 0x49a409f1 Nom du module défaillant : cps3_pkcs11_w32.dll, version : 1.23.0.0, horodatage : 0x58eb7aee Code d’exception : 0xc0000005 Décalage d’erreur : 0x0004cec5 ID du processus défaillant : 0x1850 Heure de début de l’application défaillante : 0x01d3b4c414bee7d0 Chemin d’accès de l’application défaillante : C:\Vega5\VEGA5.EXE Chemin d’accès du module défaillant: C:\Windows\system32\cps3_pkcs11_w32.dll ID de rapport : 0809b85a-20b8-11e8-84da-d48564a129aa Erreurs système: ============= Error: (03/06/2018 07:18:32 PM) (Source: volsnap) (EventID: 14) (User: ) Description: Les clichés instantanés C: ont été annulés à cause d’une défaillance d’E/S sur le volume C:. Error: (03/06/2018 06:59:31 PM) (Source: volsnap) (EventID: 14) (User: ) Description: Les clichés instantanés C: ont été annulés à cause d’une défaillance d’E/S sur le volume C:. Error: (03/06/2018 06:53:10 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Le service aswbIDSAgent s’est arrêté avec l’erreur service particulière %%-536753635. Error: (03/06/2018 05:51:33 PM) (Source: Service Control Manager) (EventID: 7024) (User: ) Description: Le service aswbIDSAgent s’est arrêté avec l’erreur service particulière %%-536753635. Error: (03/06/2018 05:49:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Service Partage réseau du Lecteur Windows Media n’a pas pu démarrer en raison de l’erreur : L’échec d’une ouverture de session a empêché le démarrage du service. Error: (03/06/2018 05:49:07 PM) (Source: Service Control Manager) (EventID: 7038) (User: ) Description: Le service WMPNetworkSvc n’a pas pu ouvrir de session en tant que NT AUTHORITY\NetworkService avec le mot de passe actuellement configuré en raison de l’erreur suivante : Cette demande n’est pas prise en charge. Pour vous assurer que le service est configuré correctement, utilisez le composant logiciel enfichable Services dans Microsoft Management Console (MMC). Error: (03/06/2018 05:48:41 PM) (Source: Service Control Manager) (EventID: 7034) (User: ) Description: Le service Application Virtualization Client s’est terminé de façon inattendue pour la 1ème fois. Error: (03/06/2018 05:48:39 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. ==================== Infos Mémoire =========================== Processeur: AMD Athlon(tm) II X4 640 Processor Pourcentage de mémoire utilisée: 60% Mémoire physique - RAM - totale: 4095.29 MB Mémoire physique - RAM - disponible: 1636.38 MB Mémoire virtuelle totale: 8188.75 MB Mémoire virtuelle disponible: 5548.49 MB ==================== Lecteurs ================================ Drive c: (OS) (Fixed) (Total:234.05 GB) (Free:110.55 GB) NTFS Drive d: (HP_RECOVERY) (Fixed) (Total:13.77 GB) (Free:1.7 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] Drive z: (Données) (Fixed) (Total:683.59 GB) (Free:645.24 GB) NTFS \\?\Volume{49436580-7614-11e0-b260-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 931.5 GB) (Disk ID: E79C582B) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=234.1 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=683.6 GB) - (Type=0F Extended) Partition 4: (Not Active) - (Size=13.8 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================