Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 06.06.2018 01 Exécuté par jeans (11-06-2018 18:35:50) Exécuté depuis C:\Users\jeans\Desktop Windows 10 Home Version 1803 17134.48 (X64) (2018-05-19 20:06:10) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-1240230479-2572266455-1114820487-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1240230479-2572266455-1114820487-503 - Limited - Disabled) defaultuser0 (S-1-5-21-1240230479-2572266455-1114820487-1000 - Limited - Disabled) => C:\Users\defaultuser0 Invité (S-1-5-21-1240230479-2572266455-1114820487-501 - Limited - Disabled) jeans (S-1-5-21-1240230479-2572266455-1114820487-1001 - Administrator - Enabled) => C:\Users\jeans WDAGUtilityAccount (S-1-5-21-1240230479-2572266455-1114820487-504 - Limited - Disabled) ___VMware_Conv_SA___ (S-1-5-21-1240230479-2572266455-1114820487-1003 - Limited - Enabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F} AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Disabled - Out of date) {A16C3F68-9280-E053-1818-342707FECF4D} AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) 64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden 7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - ) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.0.1.188 - Adobe Systems Incorporated) Adobe Photoshop CC (HKLM-x32\...\{2D99B50E-431D-4AA8-85C1-172A6F8BCF09}) (Version: 14.0 - Adobe Systems Incorporated) Adobe Photoshop CC 2017 (HKLM-x32\...\PHSP_18_0) (Version: 18.0.0 - Adobe Systems Incorporated) Advanced Archive Password Recovery (HKLM-x32\...\{6E356EEF-203C-451B-9144-CBF099E3738A}) (Version: 4.54.55.1642 - Elcomsoft Co. Ltd.) Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 375.95 - NVIDIA Corporation) Hidden Audacity 2.1.2 (HKLM-x32\...\Audacity®_is1) (Version: 2.1.2 - Audacity Team) Avira (HKLM-x32\...\{606c7b25-e58d-4e72-82dd-4a0e4e163086}) (Version: 1.2.114.16977 - Avira Operations GmbH & Co. KG) Avira (HKLM-x32\...\{C7FA948A-FC14-4316-92DC-23AF70C55A10}) (Version: 1.2.114.16977 - Avira Operations GmbH & Co. KG) Hidden Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.36.180 - Avira Operations GmbH & Co. KG) Avira Phantom VPN (HKLM-x32\...\Avira Phantom VPN) (Version: 2.14.1.26975 - Avira Operations GmbH & Co. KG) BMW Diagnostic Head Emulator (HKLM-x32\...\{9CE06167-6F6F-40E4-B723-3702FE2831DD}) (Version: 1.2 - Softcom Ltd.) CDBurnerXP (HKLM-x32\...\{EEC54E03-486F-411E-BAC0-EC9FC4642465}) (Version: 4.5.7.6452 - Canneverbe Limited) CDex - Digital Audio CD Extractor and Converter (HKLM-x32\...\CDex) (Version: 1.81.0.2016 - Georgy Berdyshev) ELAN Touchpad 11.15.0.18_X64 (HKLM\...\Elantech) (Version: 11.15.0.18 - ELAN Microelectronic Corp.) eLicenser Control (HKLM-x32\...\eLicenser Control) (Version: - Steinberg Media Technologies GmbH) Explor@ Park (HKLM-x32\...\VTechDownloadManager) (Version: - VTech) FreeCAD 0.17 - A free open source CAD system (HKLM\...\FreeCAD 0.17) (Version: 0.17.13522 - Juergen Riegel) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 67.0.3396.79 - Google Inc.) Google Earth Pro (HKLM\...\{D9EF644E-2FAE-493B-8180-5617CC774C4F}) (Version: 7.3.1.4507 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation) Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation) Kobo (HKLM-x32\...\Kobo) (Version: 4.5.7662 - Rakuten Kobo Inc.) Microsoft Office Professionnel Plus 2013 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 15.0.4997.1000 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1240230479-2572266455-1114820487-1001\...\OneDriveSetup.exe) (Version: 18.065.0329.0002 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation) Mises à jour NVIDIA 29.1.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 29.1.0.0 - NVIDIA Corporation) Hidden MuseScore 2 (HKLM-x32\...\{DC8A2B29-D9A7-4D67-A049-BC0A659A2B57}) (Version: 2.1.0 - Werner Schweer and Others) NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4997.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4997.1000 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-040C-0000-0000000FF1CE}) (Version: 15.0.4997.1000 - Microsoft Corporation) Hidden Panneau de configuration NVIDIA 376.54 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 376.54 - NVIDIA Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8004 - Realtek Semiconductor Corp.) Satsuki Decoder Pack (HKLM-x32\...\Satsuki Decoder Pack) (Version: 530 - Satsuki Yatoshi'S Softs) ScanToPDF 3.2.0 (HKLM-x32\...\ScanToPDF) (Version: 3.2.0 - O Imaging Corporation) SoulSeek 157 NS 13e (HKLM-x32\...\Soulseek2) (Version: - ) SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - ) Spotify (HKU\S-1-5-21-1240230479-2572266455-1114820487-1001\...\Spotify) (Version: 1.0.72.117.g6bd7cc73 - Spotify AB) Steinberg Groove Agent ONE Content (HKLM-x32\...\{BD86F1AC-B594-46E4-85DC-1258AC9E2232}) (Version: 1.0.0.003 - Steinberg Media Technologies GmbH) Steinberg Groove Agent ONE Vintage Beatboxes (HKLM-x32\...\{DBF4BC99-53F1-4C97-84C3-7557D103E182}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE (HKLM-x32\...\{EF7800A8-575E-4776-95A5-A9D904A85D5F}) (Version: 1.5.2 - Steinberg Media Technologies GmbH) Steinberg HALion Sonic SE Content for Sequel (HKLM-x32\...\{850CB32A-BE00-4B0C-A22E-09365E321079}) (Version: 1.5.2.000 - Steinberg Media Technologies GmbH) Steinberg REVerence Content 01 (HKLM-x32\...\{532B917B-8235-4FA5-BE36-643A8BB053A5}) (Version: 2.0.1.000 - Steinberg Media Technologies GmbH) Steinberg Sequel 2 Trial Content (HKLM-x32\...\{DF584D4A-2619-41BE-9515-AAB18439D393}) (Version: 2.0.0.351 - Steinberg Media Technologies GmbH) Steinberg Sequel 3 (HKLM-x32\...\{E33A9A34-90A6-49E1-31A0-B59CFCAF98A0}) (Version: 3.0.1 - Steinberg Media Technologies GmbH) Steinberg Upload Manager (HKLM-x32\...\{88BBBD8F-4C19-4809-B84B-7A8F8238B48D}) (Version: 1.0.1 - Steinberg Media Technologies GmbH) Steinberg VST Amp Rack Content 01 (HKLM-x32\...\{8CBA7E47-48DA-47DC-8E98-6984BA830295}) (Version: 1.0.0.000 - Steinberg Media Technologies GmbH) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{AC0D130B-8809-4125-811F-667893B90644}) (Version: 2.11.0.0 - Microsoft Corporation) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) VMware Workstation (HKLM\...\{0D94F75A-0EA6-4951-B3AF-B145FA9E05C6}) (Version: 10.0.3 - VMware, Inc.) Hidden VMware Workstation (HKLM-x32\...\VMware_Workstation) (Version: 10.0.3 - VMware, Inc) VTech Download Agent Library (HKLM-x32\...\{DB083AE1-3354-4AAD-BD44-5F2CC4B2ECE6}) (Version: 1.00.0000 - VTech) Hidden Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Winamp (HKLM-x32\...\Winamp) (Version: 5.666 - Nullsoft, Inc) Windows Driver Package - FTDI CDM Driver Package - Bus/D2XX Driver (01/18/2013 2.08.28) (HKLM\...\9E24492CE9279512BD465F61DB8523641BB7BBFC) (Version: 01/18/2013 2.08.28 - FTDI) Windows Driver Package - FTDI CDM Driver Package - VCP Driver (01/18/2013 2.08.28) (HKLM\...\E61B77ECE57113AE1CA028BC7A8AD6C137BD13DD) (Version: 01/18/2013 2.08.28 - FTDI) WinZip 20.0 (HKLM\...\{CD95F661-A5C4-44F5-A6AA-ECDD91C240EF}) (Version: 20.0.11659 - WinZip Computing, S.L. ) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-1240230479-2572266455-1114820487-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-26C35B55B238}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-1240230479-2572266455-1114820487-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation) CustomCLSID: HKU\S-1-5-21-1240230479-2572266455-1114820487-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ContextMenuHandlers1-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers1-x32: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ContextMenuHandlers1-x32: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-01-14] (Safer-Networking Ltd.) ContextMenuHandlers1-x32: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-01-14] (Safer-Networking Ltd.) ContextMenuHandlers1-x32: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-05-13] (Avira Operations GmbH & Co. KG) ContextMenuHandlers1-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2015-10-23] (WinZip Computing, S.L.) ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2014-06-12] (VMware, Inc.) ContextMenuHandlers2-x32: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2014-06-12] (VMware, Inc.) ContextMenuHandlers4-x32: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov) ContextMenuHandlers4-x32: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2015-10-23] (WinZip Computing, S.L.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-12] (Intel Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-12-29] (NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2016-10-25] () ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-01-14] (Safer-Networking Ltd.) ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2017-01-14] (Safer-Networking Ltd.) ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2018-05-13] (Avira Operations GmbH & Co. KG) ContextMenuHandlers6: [WinZip] -> {E0D79304-84BE-11CE-9641-444553540000} => C:\Program Files\WinZip\wzshls64.dll [2015-10-23] (WinZip Computing, S.L.) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {16943849-456E-48A4-B9F9-D7AE6BF4E461} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation) Task: {1A9DA7F4-2C07-495A-A4BA-31E6FDCC033D} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation) Task: {28D9F606-78CF-4A22-945C-A6AB0D7FBCAF} - System32\Tasks\Skype => C:\Users\jeans\AppData\Roaming\Colis-Disponible.vbs Task: {2AD7ADC9-0D6B-4C7A-9351-F4529225095F} - System32\Tasks\{9F033912-19E6-4AEE-AFDF-05EA460778AF} => C:\Windows\system32\pcalua.exe -a "C:\Users\jeans\Desktop\Valise BMW\Romania_Diagnostic_cables_provider\systemdata\Driver\CDM20828_Setup.exe" -d "C:\Users\jeans\Desktop\Valise BMW\Romania_Diagnostic_cables_provider\systemdata\Driver" Task: {31D25159-07C4-412B-95A6-ED18B8A7F7DA} - System32\Tasks\{31DDBD37-5DB7-4030-8064-10B0CAA806C3} => C:\Program Files\COMODO\COMODO Internet Security\cistray.exe Task: {382F9902-8F45-4C4B-BA2D-2FADBD055C39} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation) Task: {38E0E365-5BB6-4DE8-8290-467FF47C32D0} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-11] (NVIDIA Corporation) Task: {3BE99979-BBC4-4702-8620-5F03CC268F69} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation) Task: {47C2B6E0-3A8A-4A72-89CA-C82A18A8D7F4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated) Task: {50C27794-DB7B-4DBD-AA00-D5471F566D03} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {56EC3008-0316-443C-AA2E-B475EFFAC00A} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-11] (NVIDIA Corporation) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {75338387-1B48-423E-855F-76EDB201B56E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-29] (Google Inc.) Task: {7C6BA5C6-F1B8-431C-A75C-5DAF71C91E02} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-jeanseb63122@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-05-11] (Adobe Systems, Incorporated) Task: {86955D87-6038-4CEE-895C-D4FA0CE36209} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2018-05-27] (Avira Operations GmbH & Co. KG) Task: {8D1959CA-8255-474F-95FF-31772E7DB2A4} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-11] (NVIDIA Corporation) Task: {8E8EC46E-FB70-4EC6-AD9F-4464D953ED72} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {9175362F-CB20-4C37-BC51-18668A5BDD85} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-03-14] (Microsoft Corporation) Task: {99CB0FDE-24E6-4B1C-ABD3-887C8CE8C7E1} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-11] (NVIDIA Corporation) Task: {A4AC4820-7FDC-4EF7-ACDF-F1B418DDD45B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-29] (Google Inc.) Task: {BD991F38-493C-4D1A-ADFF-FDD782A546E2} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-jeanseb63122@hotmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2016-07-01] (Adobe Systems Incorporated) Task: {C3C5C913-3906-49CA-B005-F274201AD2D8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation) Task: {D65B5477-2CE6-4476-BE41-0F1F0410BCB2} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-11] (NVIDIA Corporation) Task: {F303E9F1-6DAE-494C-8DB0-5F2132258CB8} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-11] (NVIDIA Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ==================== Modules chargés (Avec liste blanche) ============== 2016-11-30 16:29 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2016-11-29 19:16 - 2017-10-11 03:05 - 001267136 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2014-06-12 18:44 - 2017-01-05 13:17 - 014407384 _____ () C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe 2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll 2017-06-15 13:45 - 2016-12-29 15:16 - 000134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2016-10-25 09:57 - 2016-10-25 09:57 - 000491184 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-04-12 01:35 - 2018-04-12 18:23 - 002184704 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-05-27 07:56 - 2018-05-27 07:57 - 000086528 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2018-05-27 07:56 - 2018-05-27 07:57 - 000195072 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2018-05-27 07:56 - 2018-05-27 07:57 - 022374400 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2018-05-27 07:56 - 2018-05-27 07:57 - 002610176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\skypert.dll 2018-05-27 07:56 - 2018-05-27 07:57 - 000654848 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1815.209.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll 2016-02-24 10:56 - 2016-01-18 14:48 - 000317824 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\AgentMonitor.exe 2016-10-25 09:57 - 2017-04-03 08:44 - 031723696 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe 2018-06-08 22:25 - 2018-06-08 22:25 - 000478720 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe 2018-06-08 22:25 - 2018-06-08 22:25 - 067232256 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 000010752 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RenderingPlugin.dll 2017-10-03 19:02 - 2017-10-03 19:08 - 002523136 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\UnityEngineDelegates.dll 2018-05-04 18:27 - 2018-05-04 18:28 - 000009216 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\ImagePipelineNative.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 004214784 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 000035840 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\WinMLWrapper.UWP.dll 2018-03-29 21:44 - 2018-03-29 21:45 - 002283008 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\TrackingDLLUWP.dll 2018-06-08 22:25 - 2018-06-08 22:25 - 014851072 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 004058624 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\MediaEngine.dll 2018-06-08 22:25 - 2018-06-08 22:25 - 003266048 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 001393664 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 004218080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-05-30 22:26 - 2018-05-30 22:27 - 000872448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll 2018-06-08 22:25 - 2018-06-08 22:25 - 000165376 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\SKU.dll 2018-05-20 12:18 - 2018-05-20 12:18 - 000084992 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11804.1001.10.0_x64__8wekyb3d8bbwe\WinStore.Preview.dll 2018-05-11 18:07 - 2018-05-11 18:07 - 001873120 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11804.1001.10.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-06-03 08:12 - 2018-06-03 08:13 - 001280176 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.9330.20915.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll 2017-01-14 08:55 - 2017-01-14 08:55 - 000574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2017-01-14 08:55 - 2014-05-13 13:04 - 000109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2017-01-14 08:55 - 2014-05-13 13:04 - 000167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2017-01-14 08:55 - 2014-05-13 13:04 - 000416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2017-01-14 08:55 - 2017-01-14 08:55 - 000565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll 2014-06-12 19:22 - 2014-06-12 19:22 - 001261272 _____ () C:\Program Files (x86)\VMware\VMware Workstation\libxml2.dll 2016-11-29 19:16 - 2017-10-11 03:05 - 001040320 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2017-03-14 08:31 - 2017-03-14 08:31 - 052051544 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll 2016-02-24 10:56 - 2015-12-14 08:05 - 000120832 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QtSolutions_SOAP-2.7.dll 2016-02-24 10:56 - 2014-04-22 04:14 - 000065536 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\QHttpServer.dll 2016-02-24 10:56 - 2014-05-06 07:39 - 000861184 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\platforms\qwindows.dll 2016-02-24 10:56 - 2014-05-06 07:38 - 000021504 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qgif.dll 2016-02-24 10:56 - 2014-05-06 07:38 - 000020992 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qico.dll 2016-02-24 10:56 - 2014-05-06 07:38 - 000204800 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qjpeg.dll 2016-02-24 10:56 - 2014-05-06 12:44 - 000218112 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qmng.dll 2016-02-24 10:56 - 2014-05-06 07:58 - 000015872 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qsvg.dll 2016-02-24 10:56 - 2014-05-06 12:44 - 000015360 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qtga.dll 2016-02-24 10:56 - 2014-05-06 12:44 - 000307712 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qtiff.dll 2016-02-24 10:56 - 2014-05-06 12:44 - 000014848 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\imageformats\qwbmp.dll 2016-02-24 10:56 - 2014-05-06 08:31 - 000015872 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\sensors\qtsensors_dummy.dll 2016-02-24 10:56 - 2014-05-06 07:38 - 000036352 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\bearer\qgenericbearer.dll 2016-02-24 10:56 - 2014-05-06 07:38 - 000038912 _____ () C:\Program Files (x86)\VTech\DownloadManager\System\plugins\bearer\qnativewifibearer.dll 2017-01-25 20:07 - 2017-01-25 20:07 - 000118272 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\fs-ext\build\Release\fs-ext.node 2017-01-25 20:07 - 2017-01-25 20:07 - 000214528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node 2017-01-25 20:06 - 2017-01-25 20:06 - 000117248 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ref\build\Release\binding.node 2017-01-25 20:07 - 2017-01-25 20:07 - 000125952 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\ffi\build\Release\ffi_bindings.node 2017-03-14 08:35 - 2017-03-14 08:35 - 000099416 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll 2017-01-25 20:07 - 2017-01-25 20:07 - 000086528 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CCXProcess\js\node_modules\idle-gc\build\Release\idle-gc.node ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\WINDOWS\RtlExUpd.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAC64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\AERTAR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DdcWnsListener.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPA64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPA64F3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPD64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPD64AF3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPO64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPO64AF3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPP64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DDPP64AF3.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOProp.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DolbyDAX2APOv211.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSBassEnhancementDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSBoostDLL64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\DTSGainCompensatorDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSGFXAPONS64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSLFXAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSLimiterDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSNeoPCDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSS2HeadphoneDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSS2SpeakerDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSSymmetryDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\DTSVoiceClarityDLL64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\FMAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ftcserco.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\ftd2xx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ftserui2.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\HiFiDAX2API.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hpotscl1.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hpovst01.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hpowiav1.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\hppldcoi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\HPZLLWN7.DLL:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ibtproppage.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\ibtsiva.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO20.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioAPO30.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxAudioEQ64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\MaxxVolumeSDAPO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msvcp110.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\msvcr110.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvapi64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvcompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvcuda.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvcuvid.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvdispco6437654.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvdispgenco6437654.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvEncMFTH264.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvEncodeAPI64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvfatbinaryLoader.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NvFBC64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NvIFR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\NvIFROpenGL.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvoglv64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvopencl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\nvptxJitCompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEA64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EED64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\R4EEG64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEL64A.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\R4EEP64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RCoInstII64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RltkAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RP3DAA64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RP3DHT64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTCOM64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtDataProc64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEED64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEEG64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEEL64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RTEEP64A.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtkApi64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtkCfg64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtkCoLDR64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtlCPAPI64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\RtPgEx64.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\RTSnMg64.cpl:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\sdnclean64.exe:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFAPO64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFCOM64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFNHK64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SFSS_APO.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSHP64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSTSH64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSTSX64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\SRSWOW64.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vccorlib110.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vmnetbridge.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vnetinst.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo-1-1-0-26-0.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\system32\vulkaninfo.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\AC3ACM.acm:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\alf2cd.acm:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\d3dx9_31.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\D3DX9_42.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\divx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\divxdec.ax:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\ftd2xx.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\indexeddbserver.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\L3CODECX.AX:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Lagarith.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\lame.ax:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mcdvd_32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mpg4c32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\mslvddsfilter3.ax:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\msxml3a.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvapi.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcompiler.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcuda.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvcuvid.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvEncMFTH264.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvEncodeAPI.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvfatbinaryLoader.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvFBC.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvIFR.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\NvIFROpenGL.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvoglv32.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvopencl.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\nvptxJitCompiler.dll:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\Scg726.acm:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\SFCOM.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vct3216.acm:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vp6vfw.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vsocklib.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo-1-1-0-26-0.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\vulkaninfo.exe:$CmdTcID [130] AlternateDataStreams: C:\WINDOWS\SysWOW64\xvid.ax:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\xvidcore.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\xvidvfw.dll:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\avkmgr.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\avnetflt.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4Prt.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\Dot4usb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dtlitescsibus.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\dtliteusbbus.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ibtusb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\nvpciflt.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\RTKVHD64.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\SET8457.tmp:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ssudbus.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\ssudmdm.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\VClone.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vmci.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vmnet.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vmnetadapter.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vmnetbridge.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\system32\Drivers\vmusb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Drivers\rig3avs.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\SysWOW64\Drivers\rig3usb.sys:$CmdTcID [64] AlternateDataStreams: C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-jeanseb63122@hotmail.com:$CmdTcID [64] AlternateDataStreams: C:\Users\jeans\Desktop\Dépose de la courroie 928 S4.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Desktop\evaluationrisquesliestroubleshemostasedrdolbeau.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Desktop\Facture prothese dentaire.jpeg:3or4kl4x13tuuug3Byamue2s4b [85] AlternateDataStreams: C:\Users\jeans\Desktop\Facture prothese dentaire.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0] AlternateDataStreams: C:\Users\jeans\Downloads\2_BONHOMME_NACO.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Downloads\Deficit rare de la coagulation.bonhomme2013.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Downloads\extrait d%27acte de naissance.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Downloads\Le Bon, la Brute et le Truand (music theme) - from YouTube.mp3:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Downloads\physiologie de la douleur - bars2004.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\2001-2012_dual_air_tuning_guide.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\accuseReception impot sur revenu 2015.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\AttestationDroits.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\Brochure fourche Pike 454 .pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\Fixation de la Console Centrale.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\Heisenberg Song Breaking Bad(English Subs) - from YouTube.mp4:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\kawa zephyr 750 cafe racer.jpg:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\NFS 22 - 12 - 2015 Faure JS.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\recu fiscal MSF 2014.pdf:$CmdZnID [26] AlternateDataStreams: C:\Users\jeans\Documents\Réparation des carrosseries.pdf:$CmdZnID [26] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2017-09-29 15:46 - 2016-07-16 13:45 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-1240230479-2572266455-1114820487-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == HKU\S-1-5-21-1240230479-2572266455-1114820487-1001\...\StartupApproved\Run: => "SVU8IFDRI7" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{6F3059FA-A488-4D32-9673-F758D6E1F0A2}] => (Allow) C:\Program Files (x86)\HP\hp software update\hpwucli.exe FirewallRules: [{DCBB89B9-0C4F-4D03-9873-EBF3F8A3CEE6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgh.exe FirewallRules: [{17EF3235-92B2-42BD-8E3F-DAF6D683C7C0}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqusgm.exe FirewallRules: [{720A2FA8-2455-42EE-A6C6-72D853ECDF58}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgpc01.exe FirewallRules: [{EE684CA8-34DD-4BA1-8B19-04A75A2DBB32}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqgplgtupl.exe FirewallRules: [{CB9C21A4-863E-4BFB-9681-6743BE318A48}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqfxt08.exe FirewallRules: [{72E474D5-AC9D-49C5-B0A8-6219A8C32827}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxs08.exe FirewallRules: [{DA14E4F6-17F4-49AD-8004-87C63619C893}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpiscnapp.exe FirewallRules: [{BEF8BD30-79F2-4F06-B224-B8D3DB6DE5F9}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqnrs08.exe FirewallRules: [{82C12F33-1C9E-4743-AFBF-0CFB3C52BC38}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpoews01.exe FirewallRules: [{DDE80A19-78E5-4DA5-8DBA-A74417E43E6A}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpzwiz01.exe FirewallRules: [{AC327760-0176-4E8F-B8DA-6A8320457E7F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpfccopy.exe FirewallRules: [{8989CC64-C82C-434F-8A29-69F593C1905E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqcopy2.exe FirewallRules: [{9F5B03B0-23DF-4B43-82A3-12AACA96260C}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqkygrp.exe FirewallRules: [{1F5CF6D4-143D-4391-B614-46A360487AB1}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposid01.exe FirewallRules: [{65A53010-BCF2-4A48-9658-41A5C1301DC6}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hposfx08.exe FirewallRules: [{59B4B246-AD44-42BF-A3C8-BC0E95A7AC3D}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpofxm08.exe FirewallRules: [{1298507D-ADC8-4FF3-923D-7B34B15EAE4E}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqste08.exe FirewallRules: [{45333986-65E1-4BF3-AA46-B7612676985F}] => (Allow) C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe FirewallRules: [UDP Query User{F9704D42-6FFE-4C0E-B3CA-7F63E8717137}C:\program files (x86)\bmw diagnostic head emulator\diaghead.exe] => (Allow) C:\program files (x86)\bmw diagnostic head emulator\diaghead.exe FirewallRules: [TCP Query User{9EDC89C7-A915-493C-A2D5-F374C3CD81D1}C:\program files (x86)\bmw diagnostic head emulator\diaghead.exe] => (Allow) C:\program files (x86)\bmw diagnostic head emulator\diaghead.exe FirewallRules: [{B0FC6D34-9A50-4AD4-97D9-5A51DF59EE70}] => (Allow) C:\EDIABAS-447\DiagHead.exe FirewallRules: [{9E256E28-6072-4996-A2B8-9526D576A8E2}] => (Allow) C:\EDIABAS-447\Bin\IFHSrv32.exe FirewallRules: [{7040C06D-AD6C-4F7B-8B51-E50DC118DA22}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{FF8FA0FA-7ED5-4211-B998-9DD23DDE5080}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe FirewallRules: [{C6BCB523-644C-4D75-881B-742CB735F7FF}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [{95959411-CD33-418D-A756-A6970F42D200}] => (Allow) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe FirewallRules: [UDP Query User{ABCAD06C-C2BA-45E3-A663-B45AD1DB67AC}C:\users\jeans\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jeans\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{42B155E5-9583-449E-AB48-F4B36D2EEE87}C:\users\jeans\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jeans\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{9F733617-F59F-449E-9909-B9327F530B1F}C:\users\jeans\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jeans\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{1B7FFCCE-9869-42B3-9546-8EEA40A9C201}C:\users\jeans\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jeans\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{855C8587-3F2D-4B5A-9382-9E260459F467}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [TCP Query User{8E585F5A-7FAA-4252-A81C-869E0E4A04CC}C:\program files (x86)\videolan\vlc\vlc.exe] => (Allow) C:\program files (x86)\videolan\vlc\vlc.exe FirewallRules: [{3B2FBB13-0FF7-4C71-ABD0-57A9FA05932D}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe FirewallRules: [{4189D7DE-7280-48E4-908F-28D77A6E0CC2}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe FirewallRules: [{9DD3B6E1-E750-4D23-98FA-AD4F0863CB93}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe FirewallRules: [{51DCBBD0-A901-4324-A537-D2B70681BA4F}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe FirewallRules: [{4F6E7431-6E79-4454-8026-08305D900110}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe FirewallRules: [{971574CD-3C4A-4D33-93EB-561427530FC3}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe FirewallRules: [{6D05CA3E-18FB-44FF-87DC-0766EB16BCDB}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Updater.exe FirewallRules: [{62DD835B-6CD8-43AC-A439-DD78BA34C3CC}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe FirewallRules: [{62F8CE7F-91E1-466F-975A-1172AD819FF0}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\Activation.exe FirewallRules: [{3A5D2FBF-9513-4043-B2DF-894AE938B332}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe FirewallRules: [{C7E9D954-D8C1-46B4-A3E3-3FDB43D47ADB}] => (Allow) C:\Program Files (x86)\FlashIntegro\VideoEditor\VideoEditor.exe FirewallRules: [{C8D18F88-98A5-43C6-A225-A28BAF74AFC8}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{266BB7AC-CB2A-405D-A6E1-63AC9FCFBA8D}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe FirewallRules: [{E625B4E0-8639-4D3F-B3D8-4499E2D21710}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{95D302F0-554F-4774-9768-83C534DD8180}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{7F82AAE8-D33F-48B9-B849-A54BFAA80477}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{6DE3E10D-46DB-4EF2-ABA0-216E87CD100A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{A76B341D-9CF3-42F2-9580-77E1143C0CB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe FirewallRules: [{A5FC93F0-BFED-474D-84FD-263034C86668}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [TCP Query User{284ECD2A-C3CE-460D-9510-05C17A6645D9}C:\program files (x86)\soulseekns\slsk.exe] => (Allow) C:\program files (x86)\soulseekns\slsk.exe FirewallRules: [UDP Query User{1BCA19F2-785F-4EB4-8DD3-B2DFB7446A32}C:\program files (x86)\soulseekns\slsk.exe] => (Allow) C:\program files (x86)\soulseekns\slsk.exe FirewallRules: [{8D7C7EA0-97F3-4D3D-8F89-7361EC1BFBAC}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{BC4B0515-2B40-4B16-ACD3-8EE08C7A41AD}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{C284ADC6-B23A-4D73-90AF-BAAE1676A44F}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{BA1E2B39-368A-429C-8233-A54FA877579E}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{87A1AD67-1164-4C4B-8EF3-812CB6D5885C}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [{1E5C1003-B7D4-4E42-8B8C-8F1115BDBF45}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{994CE2B6-7BAE-473F-9DA1-B40D61138EA5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{5644F4B2-E7A6-472F-9702-F8D2E0C32F3F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{2796707E-5C12-479C-9D7F-EAB4AC134652}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{33BBB8B0-1F42-4668-AD25-081069E92ACB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{AD1638AE-EFF7-4FB1-A550-AA6DF0038577}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Points de restauration ========================= 03-06-2018 19:31:05 Point de contrôle planifié 07-06-2018 20:57:53 Windows Update ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (06/10/2018 08:41:37 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-TN5ARL1) Description: httphttp-2147467263 Error: (06/10/2018 07:01:24 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: DESKTOP-TN5ARL1) Description: httphttp-2147467263 Error: (06/10/2018 06:22:19 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme Microsoft.Photos.exe version 2018.18041.15530.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 5dc Heure de début : 01d400d3b7da4e4f Heure de fin : 4294967295 Chemin d'accès de l'application : C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe ID de rapport : 31ae49ae-7734-44f9-846f-9a012dcd34ff Nom complet du package défaillant : Microsoft.Windows.Photos_2018.18041.15530.0_x64__8wekyb3d8bbwe ID de l'application relative au package défaillant : App Error: (06/10/2018 05:08:21 PM) (Source: Perflib) (EventID: 1023) (User: ) Description: Windows ne parvient pas à charger la DLL de compteur extensible rdyboost. Le premier mot (DWORD) de la section Données contient le code d’erreur Windows. Error: (06/10/2018 05:08:21 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Error: (06/10/2018 04:19:46 PM) (Source: SideBySide) (EventID: 35) (User: ) Description: La création du contexte d’activation a échoué pour « C:\Program Files\Microsoft Office 15\root\office15\lync.exe.Manifest ». Erreur dans le fichier de manifeste ou de stratégie « C:\Program Files\Microsoft Office 15\root\office15\UccApi.DLL » à la ligne 1. L’identité de composant trouvé dans le manifeste ne correspond pas à celle du composant demandé. La référence est UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0". La définition est UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0". Utilisez sxstrace.exe pour un diagnostic détaillé. Error: (06/08/2018 10:21:34 PM) (Source: Perflib) (EventID: 1023) (User: ) Description: Windows ne parvient pas à charger la DLL de compteur extensible rdyboost. Le premier mot (DWORD) de la section Données contient le code d’erreur Windows. Error: (06/08/2018 10:21:33 PM) (Source: Perflib) (EventID: 1008) (User: ) Description: Échec de la procédure d’ouverture pour le service « BITS » dans la DLL « C:\Windows\System32\bitsperf.dll ». Les données de performance de ce service ne seront pas disponibles. Le premier mot (DWORD) de la section Données contient le code d’erreur. Erreurs système: ============= Error: (06/11/2018 06:30:14 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-TN5ARL1) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID DESKTOP-TN5ARL1\jeans de l’utilisateur (S-1-5-21-1240230479-2572266455-1114820487-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/11/2018 06:29:10 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/11/2018 06:26:33 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-TN5ARL1) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {8BC3F05E-D86B-11D0-A075-00C04FB68820} et l’APPID {8BC3F05E-D86B-11D0-A075-00C04FB68820} au SID DESKTOP-TN5ARL1\jeans de l’utilisateur (S-1-5-21-1240230479-2572266455-1114820487-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy du conteneur d’applications (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/11/2018 06:26:32 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-TN5ARL1) Description: Impossible de démarrer un serveur DCOM : Microsoft.Windows.Cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca en tant que Non disponible/Non disponible. L’erreur « 0 » s’est produite lors du démarrage de la commande : "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca Error: (06/11/2018 06:26:18 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/10/2018 08:41:08 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/10/2018 08:37:54 PM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-TN5ARL1) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID DESKTOP-TN5ARL1\jeans de l’utilisateur (S-1-5-21-1240230479-2572266455-1114820487-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (06/10/2018 08:33:27 PM) (Source: DCOM) (EventID: 10001) (User: DESKTOP-TN5ARL1) Description: Impossible de démarrer un serveur DCOM : Microsoft.Windows.Cortana_1.10.7.17134_neutral_neutral_cw5n1h2txyewy!CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca en tant que Non disponible/Non disponible. L’erreur « 298 » s’est produite lors du démarrage de la commande : "C:\WINDOWS\system32\backgroundTaskHost.exe" -ServerName:CortanaUI.AppXy7vb4pc2dr3kc93kfc509b1d0arkfb2x.mca CodeIntegrity: =================================== Date: 2018-06-11 18:35:25.633 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:35:25.631 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:35:25.615 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:35:25.614 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:34:13.359 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:34:13.357 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:34:13.340 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-06-11 18:34:13.337 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i7-3537U CPU @ 2.00GHz Pourcentage de mémoire utilisée: 31% Mémoire physique - RAM - totale: 12106.35 MB Mémoire physique - RAM - disponible: 8263.03 MB Mémoire virtuelle totale: 13962.35 MB Mémoire virtuelle disponible: 10078.05 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:465.29 GB) (Free:51.15 GB) NTFS Drive d: () (Fixed) (Total:232.35 GB) (Free:77.46 GB) NTFS \\?\Volume{11ab0cea-0000-0000-0000-100000000000}\ (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS \\?\Volume{11ab0cea-0000-0000-0000-801c3a000000}\ () (Fixed) (Total:0.44 GB) (Free:0.08 GB) NTFS \\?\Volume{3ecbca6c-0000-0000-0000-605274000000}\ () (Fixed) (Total:0.47 GB) (Free:0.06 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 232.9 GB) (Disk ID: 11AB0CEA) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=450 MB) - (Type=27) ======================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 3ECBCA6C) Partition 1: (Not Active) - (Size=465.3 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=483 MB) - (Type=27) ==================== Fin de Addition.txt ============================