Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 10.10.2018 Exécuté par samyd (11-10-2018 13:28:25) Exécuté depuis E:\ Windows 10 Home Version 1803 17134.345 (X64) (2018-05-24 07:11:54) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-3678928768-3751955489-2917896062-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3678928768-3751955489-2917896062-503 - Limited - Disabled) Invité (S-1-5-21-3678928768-3751955489-2917896062-501 - Limited - Disabled) samyd (S-1-5-21-3678928768-3751955489-2917896062-1001 - Administrator - Enabled) => C:\Users\samyd WDAGUtilityAccount (S-1-5-21-3678928768-3751955489-2917896062-504 - Limited - Disabled) ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Bitdefender Antispyware (Enabled - Up to date) {B5763A99-8435-6D40-83EB-2CA97758A9A5} FW: Bitdefender Pare-feu (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 19.008.20074 - Adobe Systems Incorporated) Adobe After Effects CC 2018 (HKLM-x32\...\AEFT_15_1_1) (Version: 15.1.1 - Adobe Systems Incorporated) Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 4.7.0.400 - Adobe Systems Incorporated) Adobe Flash Player 31 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 31.0.0.122 - Adobe Systems Incorporated) Adobe Photoshop CC 2018 (HKLM-x32\...\PHSP_19_1_4) (Version: 19.1.4 - Adobe Systems Incorporated) Adobe Premiere Pro CC 2018 (HKLM-x32\...\PPRO_12_1_1) (Version: 12.1.1 - Adobe Systems Incorporated) Advanced Archive Password Recovery (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\Advanced Archive Password Recovery) (Version: 4.53 - ElcomSoft Co. Ltd.) AOMEI Partition Assistant Standard Edition 5.8 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.) Bandicam (HKLM-x32\...\Bandicam) (Version: 4.1.4.1413 - Bandicam.com) Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 20.0.20.1143 - Bitdefender) Bitdefender Internet Security (HKLM\...\Bitdefender) (Version: 22.0.1.1 - Bitdefender) BitTorrent (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\BitTorrent) (Version: 7.10.4.44521 - BitTorrent Inc.) Chrome Remote Desktop Host (HKLM-x32\...\{67971EAD-F5D1-45A6-B281-A09D3193DB3F}) (Version: 69.0.3497.7 - Google Inc.) CPUID HWMonitor 1.36 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.36 - CPUID, Inc.) CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.4.0.0192 - Disc Soft Ltd) DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 416.16 - NVIDIA Corporation) Hidden Driver Booster 5 (HKLM-x32\...\Driver Booster_is1) (Version: 5.1.0 - IObit) EaseUS Data Recovery Wizard (HKLM\...\EaseUS Data Recovery Wizard_is1) (Version: - EaseUS) FileViewPro (HKLM\...\FileViewPro_is1) (Version: 1.1.0.0 - Solvusoft Corporation) Fraps (HKLM-x32\...\Fraps) (Version: - ) Freemake Video Converter version 4.1.10 (HKLM-x32\...\Freemake Video Converter_is1) (Version: 4.1.10 - Ellora Assets Corporation) Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.15.0 - Futuremark Corporation) Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 69.0.3497.100 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden Helium (HKLM-x32\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod) Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation) Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: - Logitech, Inc.) MediaCoder x64 0.8.48.5882 (HKLM\...\MediaCoder x64) (Version: 0.8.48.5882 - Mediatronic) MediaInfo 0.7.91 (HKLM\...\MediaInfo) (Version: 0.7.91 - MediaArea.net) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\OneDriveSetup.exe) (Version: 18.151.0729.0012 - Microsoft Corporation) Microsoft OneDrive Entreprise 2013 - fr-fr (HKLM\...\GrooveRetail - fr-fr) (Version: 15.0.5041.1001 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{21a92a8d-968e-4b78-9af4-329f60d97ed7}) (Version: 12.0.40660.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x64) - 14.12.25810 (HKLM-x32\...\{e2ee15e2-a480-4bc5-bfb7-e9803d1d9823}) (Version: 14.12.25810.0 - Microsoft Corporation) Microsoft Visual C++ 2017 Redistributable (x86) - 14.12.25810 (HKLM-x32\...\{56e11d69-7cc9-40a5-a4f9-8f6190c4d84d}) (Version: 14.12.25810.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) Mises à jour NVIDIA 33.2.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 33.2.0.0 - NVIDIA Corporation) Hidden Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation) Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 62.0.3 (x64 fr) (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\Mozilla Firefox 62.0.3 (x64 fr)) (Version: 62.0.3 - Mozilla) MPC-HC 1.7.10 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 1.7.10 - MPC-HC Team) MSI Afterburner 4.5.0 (HKLM-x32\...\Afterburner) (Version: 4.5.0 - MSI Co., LTD) NetLimiter 4 (HKLM\...\{B07F35DF-26BB-4009-8B49-B97AFB77B632}) (Version: 4.0.19.0 - Locktime Software) Hidden NetLimiter 4 (HKLM-x32\...\NetLimiter 4 4.0.19.0) (Version: 4.0.19.0 - Locktime Software) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.61.23 - Black Tree Gaming) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.11 - NVIDIA Corporation) Hidden NVIDIA GeForce Experience 3.15.0.164 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.15.0.164 - NVIDIA Corporation) NVIDIA Logiciel système PhysX 9.18.0907 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.18.0907 - NVIDIA Corporation) NVIDIA Pilote 3D Vision 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 416.16 - NVIDIA Corporation) NVIDIA Pilote audio HD : 1.3.37.5 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.37.5 - NVIDIA Corporation) NVIDIA Pilote du contrôleur 3D Vision 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation) NVIDIA Pilote graphique 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 416.16 - NVIDIA Corporation) Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.5041.1001 - Microsoft Corporation) Hidden Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.5041.1001 - Microsoft Corporation) Hidden Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-040C-0000-0000000FF1CE}) (Version: 15.0.5041.1001 - Microsoft Corporation) Hidden Panneau de configuration NVIDIA 416.16 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 416.16 - NVIDIA Corporation) Hidden Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8264 - Realtek Semiconductor Corp.) Restore Point Creator version 7.1 (HKLM\...\{CC48DE1C-8EC2-43BC-9201-29701CD9AE13}_is1) (Version: 7.1 - ) RivaTuner Statistics Server 7.1.0 (HKLM-x32\...\RTSS) (Version: 7.1.0 - Unwinder) RomStation (HKLM-x32\...\{223B62A8-F6FF-4BEB-BC17-230D12723CD0}_is1) (Version: - RomStation) Spotify (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\Spotify) (Version: 1.0.90.268.ga8a0ceb4 - Spotify AB) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - ) TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version: - TechPowerUp) Unigine Valley Benchmark version 1.0 (HKLM-x32\...\Unigine Valley Benchmark_is1) (Version: 1.0 - Unigine Corp.) VLC media player (HKLM\...\VLC media player) (Version: 3.0.4 - VideoLAN) WavePad - Éditeur audio (HKLM-x32\...\WavePad) (Version: 8.08 - NCH Software) WinDirStat 1.1.2 (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\WinDirStat) (Version: - ) Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinToUSB version 3.1 (HKLM\...\WinToUSB_is1) (Version: 3.1 - The EasyUEFI Development Team.) Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare) WPS Office (10.2.0.6020) (HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\Kingsoft Office) (Version: 10.2.0.6020 - Kingsoft Corp.) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) CustomCLSID: HKU\S-1-5-21-3678928768-3751955489-2917896062-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-EF119B25FB41}\InprocServer32 -> %%systemroot%%\system32\shell32.dll => Pas de fichier CustomCLSID: HKU\S-1-5-21-3678928768-3751955489-2917896062-1001_Classes\CLSID\{70239788-4DAE-49B8-9270-5D8614384B49}\InprocServer32 -> C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll (Zhuhai Kingsoft Office Software Co.,Ltd) CustomCLSID: HKU\S-1-5-21-3678928768-3751955489-2917896062-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems) ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ContextMenuHandlers1: [ShellConverter] -> {30A4E07E-068A-4d91-8F05-691283A1336B} => C:\Program Files (x86)\Common Files\AVSMedia\ActiveX\AVSShellConverter64.dll -> Pas de fichier ContextMenuHandlers1: [WondershareVideoConverterFileOpreation] -> {FEB746CA-95C2-485F-B386-C30D4E56D22E} => C:\WINDOWS\SysWoW64\WSCM64.dll -> Pas de fichier ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-10-02] (NVIDIA Corporation) ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2018-03-05] () ContextMenuHandlers1_S-1-5-21-3678928768-3751955489-2917896062-1001: [kpdf2wordshellext] -> {70239788-4DAE-49B8-9270-5D8614384B49} => C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\addons\kpdf2wordshellext\kpdf2wordshellext64.dll [2018-04-17] (Zhuhai Kingsoft Office Software Co.,Ltd) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0138F800-8BFE-4453-B45F-4FA8640BF09B} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_31_0_0_122_Plugin.exe [2018-10-09] (Adobe Systems Incorporated) Task: {082B0830-A1E0-4CD7-9046-C957C25C0B97} - \KMSAutoNet -> Pas de fichier <==== ATTENTION Task: {0DCAAEDE-DC71-416D-A693-40733AA6E066} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-09-12] (NVIDIA Corporation) Task: {110406B7-456A-4D11-AA6C-7052747D83A5} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-09-12] (NVIDIA Corporation) Task: {167CDC78-C7DA-49F5-AB11-EA08AFB40165} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2018-09-12] (NVIDIA Corporation) Task: {26BD5B1C-726F-4DF4-B951-020FE4CB6AD3} - System32\Tasks\WpsUpdateTask_samyd => C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\wtoolex\wpsupdate.exe [2018-04-17] (Zhuhai Kingsoft Office Software Co.,Ltd) Task: {2DA1C868-F6BD-435E-939A-CF1E69B6924C} - System32\Tasks\Microsoft\Windows\Setup\Notifier => C:\WINDOWS\system32\Notifier.exe Task: {38E0C84D-6262-46A6-A9A6-FDCA7FA44C04} - System32\Tasks\AutoPico Daily Restart => C:\Program Files\KMSpico\AutoPico.exe Task: {40E167B2-0C7A-46A7-8779-BE9465912BA7} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-samy.decort@gmail.com => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2018-04-11] (Adobe Systems Incorporated) Task: {422286AA-CAEB-4C55-9857-90DB9D8A1EE1} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2018-09-12] (NVIDIA Corporation) Task: {505A3E10-95F0-4705-AB16-07348C4A40E4} - System32\Tasks\NvTmRepCR1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-09-12] (NVIDIA Corporation) Task: {54B2C2B3-02E6-4AE6-B5B8-95EC927A00A2} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-10-09] (Adobe Systems Incorporated) Task: {57D015C9-E579-4794-9629-D9E48CDE2EA7} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (For User samyd) => C:\Program Files (x86)\Restore Point Creator\Restore Point Creator.exe [2018-07-24] () Task: {59B774B9-8E89-4FCC-851A-A7CAB96009D5} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-06] (Google Inc.) Task: {65B85F6F-35B3-4459-A179-28255D5B7B25} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\WINDOWS\System32\WinBioPlugIns\FaceFodUninstaller.exe [2018-04-12] () Task: {71E73A30-88C7-47A1-80D8-BF83487583B7} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2018-09-12] (NVIDIA Corporation) Task: {8C9E8167-117C-45F9-ADE6-A3429BBC5CDB} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Keep X Number of Restore Points) (For User samyd) => C:\Program Files (x86)\Restore Point Creator\Restore Point Creator.exe [2018-07-24] () Task: {8F8B5B14-B55F-45B2-A22D-B2D95436F64C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-08-14] (Adobe Systems Incorporated) Task: {96196A69-C947-4B48-BD12-FF6CC1CA79C6} - System32\Tasks\NvTmRepCR3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-09-12] (NVIDIA Corporation) Task: {A15F8384-16AB-4ACF-BF6A-78EF46EB950C} - System32\Tasks\WpsExternal_samyd_20180417091137 => C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\ksolaunch.exe [2018-04-17] (Zhuhai Kingsoft Office Software Co.,Ltd) Task: {A9DE7788-DD8A-45B0-A2DC-A40B7E531D33} - System32\Tasks\bvyvbvyf => C:\Users\samyd\AppData\Local\bvyvbvyf\bvyvbvyf.exe <==== ATTENTION Task: {B937301B-A740-4839-A1F2-48B1EEC3C99E} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION Task: {BADC3133-2B0F-4F70-B517-14CCBA1ED0A9} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender 2017\bdagent.exe [2018-09-23] (Bitdefender) Task: {D0673A66-F3A9-41E6-81E2-D07ECEEB223E} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-09-12] (NVIDIA Corporation) Task: {DE5A19B5-16B8-4E65-9BEF-E601EB98B6FF} - System32\Tasks\NvTmRepCR2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2018-09-12] (NVIDIA Corporation) Task: {E5255803-757F-4B03-827D-E6901427E295} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation) Task: {EA138532-29CD-4710-A5ED-DAF99D95D18D} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [2018-07-31] (Bitdefender) Task: {EC202331-4AA6-442E-A853-F662DFC158EB} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2018-09-12] (NVIDIA Corporation) Task: {ED29E96F-7AFD-4DA3-996A-095CF7F71D07} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Create Custom Restore Point) (For User samyd) => C:\Program Files (x86)\Restore Point Creator\Restore Point Creator.exe [2018-07-24] () Task: {ED52EA17-4367-4E8C-92D7-743FA3F2AA38} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-11-06] (Google Inc.) Task: {EDFC14A0-E60F-44E4-9593-9DBF34266A6A} - System32\Tasks\AdobeGCInvoker-1.0-MicrosoftAccount-samy.decort@gmail.com => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [2018-09-10] (Adobe Systems, Incorporated) Task: {EF9B43F1-395F-4E15-9227-9A37AB4A2AC0} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Create Restore Point) (For User samyd) => C:\Program Files (x86)\Restore Point Creator\Restore Point Creator.exe [2018-07-24] () Task: {F05A364E-95E9-4AE6-87D2-0DE51370B968} - System32\Tasks\Driver Booster Scheduler => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\Scheduler.exe [2017-10-24] (IObit) Task: {F27A3AC2-7F91-40BB-9F7B-77826651B48E} - System32\Tasks\Driver Booster SkipUAC (samyd) => C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe [2017-11-16] (IObit) Task: {F2DB4A24-4627-455F-87A7-3BC7A531F055} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2018-09-12] (NVIDIA Corporation) Task: {FAA5CE09-C1A4-4B88-88D2-0E21871CD1A4} - System32\Tasks\Restore Point Creator\Restore Point Creator -- Run with no UAC (Delete old Restore Points) (For User samyd) => C:\Program Files (x86)\Restore Point Creator\Restore Point Creator.exe [2018-07-24] () Task: {FC25AE16-DC0D-4787-B083-DC7CADAEAEE8} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [2018-04-23] () Task: {FD641A02-156D-47FC-876F-4D3FD70E3E1B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-12-12] (Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) ShortcutWithArgument: C:\Users\samyd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\File System for OneDrive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=jbfdfcehgafdbfpniaimfbfomafoadgo ShortcutWithArgument: C:\Users\samyd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Torrent Stream.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=icocmgpofpimcojhefbcfbdldkmndpgj ShortcutWithArgument: C:\Users\samyd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Video Player.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gdebnehfojpoccpaocfbelbclfnpbmij ShortcutWithArgument: C:\Users\samyd\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Web Player for Spotify™.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=fpcglidohpgnccfckgbgnflcbdmlcibj ==================== Modules chargés (Avec liste blanche) ============== 2018-09-25 09:13 - 2018-09-25 09:13 - 000994752 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02851_004\ashttpbr.mdl 2018-09-25 09:13 - 2018-09-25 09:13 - 000544880 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02851_004\ashttpdsp.mdl 2018-09-25 09:13 - 2018-09-25 09:13 - 003240080 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02851_004\ashttpph.mdl 2018-09-25 09:13 - 2018-09-25 09:13 - 001530368 _____ () C:\Program Files\Bitdefender\Bitdefender 2017\otengines_02851_004\ashttprbl.mdl 2018-03-21 16:40 - 2017-01-17 04:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll 2018-05-28 10:30 - 2018-09-12 13:45 - 001315024 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-04-23 17:16 - 2018-04-23 17:16 - 000739624 _____ () C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe 2018-04-12 01:34 - 2018-04-12 01:34 - 000491744 _____ () C:\Windows\System32\InputHost.dll 2018-03-05 20:47 - 2018-03-05 20:47 - 000614848 _____ () C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 000472064 _____ () C:\Windows\ShellExperiences\TileControl.dll 2018-04-12 01:34 - 2018-04-12 01:34 - 002759168 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll 2018-05-28 10:30 - 2018-09-12 13:45 - 101252304 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll 2018-05-28 10:30 - 2018-09-12 13:45 - 004619984 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libglesv2.dll 2018-05-28 10:30 - 2018-09-12 13:45 - 000108752 _____ () C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libegl.dll 2018-10-10 08:25 - 2018-09-20 05:38 - 002185728 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2018-07-08 12:36 - 2018-07-08 12:36 - 000020992 _____ () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_2.5.4.0_x64__rcb0qdgx4z9ca\EasyMailReLaunch.exe 2018-07-08 12:36 - 2018-07-08 12:36 - 026521088 _____ () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_2.5.4.0_x64__rcb0qdgx4z9ca\EasyMailReLaunch.dll 2018-01-08 19:42 - 2018-01-08 19:42 - 000948736 _____ () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_2.5.4.0_x64__rcb0qdgx4z9ca\e_sqlite3.dll 2018-10-05 22:28 - 2018-10-05 22:28 - 000836096 _____ () C:\Program Files\WindowsApps\Microsoft.Services.Store.Engagement_10.0.18092.0_x64__8wekyb3d8bbwe\Microsoft.Services.Store.Engagement.dll 2018-08-05 21:18 - 2018-08-05 21:18 - 005670688 _____ () C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1807.9.0_x64__8wekyb3d8bbwe\Microsoft.Advertising.dll 2018-01-08 19:42 - 2018-01-08 19:42 - 001877928 _____ () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_2.5.4.0_x64__rcb0qdgx4z9ca\winsdkfb.dll 2018-07-05 08:31 - 2018-07-05 08:31 - 000031696 _____ () C:\Program Files\WindowsApps\61545TimGrabinat.wAPPerforGmail_2.5.4.0_x64__rcb0qdgx4z9ca\WatsonRegistrationUtility.dll 2018-10-05 22:28 - 2018-10-05 22:28 - 032535040 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Music.UI.exe 2018-10-05 22:28 - 2018-10-05 22:28 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\SharedUI.dll 2017-12-04 12:36 - 2017-12-04 13:06 - 000902656 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Microsoft.Membership.MeControl.UI.Xaml.dll 2017-09-26 13:50 - 2017-09-26 13:50 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-10-05 22:28 - 2018-10-05 22:28 - 005951488 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\EntCommon.dll 2018-10-05 22:28 - 2018-10-05 22:28 - 009073152 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\EntPlat.dll 2017-06-01 14:35 - 2017-06-01 14:35 - 000117920 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.18091.10321.0_x64__8wekyb3d8bbwe\GNSDK_FP.DLL 2018-09-12 23:00 - 2018-09-12 23:00 - 035124736 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\Video.UI.exe 2018-09-12 23:00 - 2018-09-12 23:00 - 000290816 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\SharedUI.dll 2018-09-12 23:00 - 2018-09-12 23:00 - 006417408 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\EntCommon.dll 2017-09-26 13:50 - 2017-09-26 13:50 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll 2018-09-12 23:00 - 2018-09-12 23:00 - 009010176 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.18082.10311.0_x64__8wekyb3d8bbwe\EntPlat.dll 2018-09-19 21:34 - 2018-09-15 10:26 - 005110616 _____ () C:\Program Files (x86)\Google\Chrome\Application\69.0.3497.100\libglesv2.dll 2018-09-19 21:34 - 2018-09-15 10:26 - 000116056 _____ () C:\Program Files (x86)\Google\Chrome\Application\69.0.3497.100\libegl.dll 2017-02-26 16:02 - 2017-07-25 09:37 - 000080896 _____ () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe 2018-09-12 15:53 - 2018-09-12 15:53 - 037821384 _____ () C:\Program Files (x86)\Adobe\Adobe Sync\Coresync\Coresync.exe 2018-04-23 17:13 - 2018-04-23 17:13 - 000072704 _____ () C:\Program Files (x86)\MSI Afterburner\RTMUI.dll 2018-04-23 17:13 - 2018-04-23 17:13 - 000057344 _____ () C:\Program Files (x86)\MSI Afterburner\RTFC.dll 2018-04-23 17:13 - 2018-04-23 17:13 - 000232448 _____ () C:\Program Files (x86)\MSI Afterburner\RTCore.dll 2018-04-23 17:13 - 2018-04-23 17:13 - 000357888 _____ () C:\Program Files (x86)\MSI Afterburner\RTUI.dll 2018-04-23 17:13 - 2018-04-23 17:13 - 000567808 _____ () C:\Program Files (x86)\MSI Afterburner\RTHAL.dll 2017-02-25 14:08 - 2018-09-12 13:45 - 001032912 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll 2018-05-02 15:03 - 2016-10-08 16:48 - 001506304 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll 2018-05-02 15:03 - 2016-07-21 10:54 - 000137728 _____ () C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll 2018-07-31 10:57 - 2018-07-31 10:57 - 081764304 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\libcef.dll 2018-07-31 10:57 - 2018-07-31 10:57 - 002257360 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\swiftshader\libglesv2.dll 2018-07-31 10:57 - 2018-07-31 10:57 - 000110552 _____ () C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\CEF\swiftshader\libegl.dll 2018-09-24 19:24 - 2018-09-24 19:24 - 000142888 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\fs-ext\build\Release\fs-ext.node 2018-09-24 19:24 - 2018-09-24 19:24 - 000278056 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node 2018-09-24 19:24 - 2018-09-24 19:24 - 000142888 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ref\build\Release\binding.node 2018-09-24 19:24 - 2018-09-24 19:24 - 000152616 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\ffi\build\Release\ffi_bindings.node 2018-09-24 19:24 - 2018-09-24 19:24 - 000097320 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll 2018-09-24 19:24 - 2018-09-24 19:24 - 000110120 _____ () \\?\C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\js\node_modules\idle-gc\build\Release\idle-gc.node 2018-08-02 23:04 - 2018-08-02 23:04 - 000142360 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\fs-ext\build\Release\fs-ext.node 2018-08-02 23:04 - 2018-08-02 23:04 - 000142360 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\ref\build\Release\binding.node 2018-08-02 23:04 - 2018-08-02 23:04 - 000150552 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\ffi\build\Release\ffi_bindings.node 2018-08-02 23:04 - 2018-08-02 23:04 - 000271896 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\node-vulcanjs\build\Release\VulcanJS.node 2018-08-02 23:04 - 2018-08-02 23:04 - 000097816 _____ () C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\node-ProxyResolver\build\Release\ProxyResolverWin.dll 2018-08-02 23:04 - 2018-08-02 23:04 - 000122392 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\bufferutil\build\Release\bufferutil.node 2018-08-02 23:04 - 2018-08-02 23:04 - 000110104 _____ () \\?\C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\js\node_modules\idle-gc\build\Release\idle-gc.node 2018-04-17 09:11 - 2018-04-17 09:11 - 000062592 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\krpt.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 009108096 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\QtCore4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000198784 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\wpscloudsvrimp.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000895616 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\QtNetwork4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000274560 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\curls.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 011409536 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\QtWebKit4.DLL 2018-04-17 09:11 - 2018-04-17 09:11 - 000246400 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\phonon4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000187520 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\addons\kpluginrunner\kpluginrunner.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000052352 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\rubyenv.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 002252416 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\ruby.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 000249984 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\qtruby4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000030336 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\smokebase.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 003613312 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\smokeqtcore.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 001013888 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\smokekso.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 000045184 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\win32api.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 000080512 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\win32ole.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 000027264 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\qtwebkitruby.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 000275072 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\smokeqtwebkit.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 001047168 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\QtScript4.dll 2018-04-18 09:05 - 2018-04-18 09:05 - 000028800 _____ () C:\Users\samyd\AppData\Roaming\Kingsoft\wps\addons\pool\win-i386\ruby_1.0.201803.0\strscan.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000035968 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\qt\plugins\imageformats\qgif4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000037504 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\qt\plugins\imageformats\qico4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000173184 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\qt\plugins\imageformats\qjpeg4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000273024 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\qt\plugins\imageformats\qtiff4.dll 2018-04-17 09:11 - 2018-04-17 09:11 - 000134272 _____ () C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\qt\plugins\imageformats\qwdp4.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\Users\samyd\Desktop\GPU-Z.exe:AGC [0] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) IE trusted site: HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\localhost -> localhost IE trusted site: HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\webcompanion.com -> hxxp://webcompanion.com ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2015-10-30 09:24 - 2018-10-11 13:27 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\Control Panel\Desktop\\Wallpaper -> E:\frank-zane-conquer 2.jpg DNS Servers: 192.168.1.254 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé. HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\StartupApproved\Run: => "BlueStacks Agent" HKU\S-1-5-21-3678928768-3751955489-2917896062-1001\...\StartupApproved\Run: => "NetLimiter" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{A7F600E3-C0B2-4F6A-A944-CE6E2CA19C09}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos_Unrestricted.exe FirewallRules: [{0B5DCACE-31B7-43CB-BCB9-121CB9CAAF9F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos_Unrestricted.exe FirewallRules: [{627F1F05-08BD-4B10-AA6D-AD49F07FCEB7}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos.exe FirewallRules: [{48F2C496-85E0-4799-89B1-AEBC244936FF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\x64\Talos.exe FirewallRules: [{85F152BC-3B33-4FB1-9811-2A1B8B47BFD5}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe FirewallRules: [{2BC3A639-12F1-4049-9016-E4497258E76F}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe FirewallRules: [{C2DB05AC-8194-4FE0-A6D3-767D3AB55526}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos.exe FirewallRules: [{A2EFCFFA-B44F-45C3-A747-BFE352FDDCCA}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Talos Principle\Bin\Talos.exe FirewallRules: [{6A80449B-94B4-4379-A94F-E6D55717BAF9}] => (Allow) C:\Program Files (x86)\iMobie\AnyTrans for Android\AnyTrans for Android.exe FirewallRules: [{385B9E8B-9B8B-497A-A784-59A786C660A3}] => (Allow) C:\Program Files (x86)\iMobie\AnyTrans for Android\AnyTrans for Android.exe FirewallRules: [{B8BB590D-C9F8-4EE7-895B-E2F396C89133}] => (Allow) LPort=9098 FirewallRules: [{1A18E996-5313-42C8-9236-C4DA7DB93766}] => (Allow) LPort=9098 FirewallRules: [{7C7D7F07-6264-4E8C-B2EF-AA772574B28E}] => (Allow) C:\Users\samyd\AppData\Local\Kingsoft\WPS Office\10.2.0.6020\office6\wpscloudsvr.exe FirewallRules: [{2AFA2BA3-2ACC-4D05-91AA-A1BFCE1276DB}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{C598B868-E230-457D-9010-CABDB11C4411}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{190086C7-8DF5-4A07-B680-B04F18F12497}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.1.0\AutoUpdate.exe FirewallRules: [{9796F56B-FD00-45AD-AE9D-16C3BCA33FFA}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.1.0\AutoUpdate.exe FirewallRules: [{BCF71436-1086-4C48-B393-F3DF65202B0E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DBDownloader.exe FirewallRules: [{1E30376D-B899-432C-9DD7-1577FC81B31E}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DBDownloader.exe FirewallRules: [{5C980989-040A-4BBB-BAFB-40484E3C6524}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe FirewallRules: [{A054C658-EFE3-47D9-BF6B-ED0AC0FA51A8}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\5.1.0\DriverBooster.exe FirewallRules: [{7CC49605-755B-47A3-8F5A-D7012B09EF36}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{7165C4C1-9FB1-4773-AC4E-5A0CDCDC7E7D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\dont_starve\bin\dontstarve_steam.exe FirewallRules: [{E825E848-7605-4E57-B3DA-984476EAFB72}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{17ADFDAD-1C12-4CAE-89C8-1D439F224A41}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{F1021C8F-2965-4AED-8C75-54D39D366418}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{784E0488-7E4F-42F3-BBC8-93E3CC8CD771}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{286E436A-B2A4-4C7D-9EFF-51BED8AB7DFB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{A534E641-6F32-4E5F-B856-584556B8312D}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe FirewallRules: [{89A126CF-1008-4512-B709-81F4D0D6C1DD}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Portal 2\portal2.exe FirewallRules: [{43F90EC0-50C1-41E9-9523-173BA731B875}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe FirewallRules: [{72B4302C-B2EA-4F93-84F6-D771A850B1AB}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe FirewallRules: [{110A7DFB-71EC-4CBE-923F-685D83DCBA24}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Stanley Parable\stanley.exe FirewallRules: [{67E76F19-46BD-43C8-A771-3D97A8DC4B0B}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\The Stanley Parable\stanley.exe FirewallRules: [{1A86425A-4DE9-4443-BB47-7C49CDCB92BC}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{7E0AE8A0-0100-4632-81DE-2A33F88939D3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{0962F023-DEE3-445C-A661-134FDF82B6C7}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{80D720A6-DA6B-430F-A7AA-5BCC0F6FC669}] => (Allow) C:\Program Files (x86)\Popcorn Time\Updater.exe FirewallRules: [{9B894E95-263D-4FC1-8FE2-E18DE18E1E1D}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd.exe FirewallRules: [{BDA9AB4D-DF5D-40B7-96BD-E930FE4D77C6}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmd_x64.exe FirewallRules: [{26D34657-8567-4A49-8AAF-014D37DF314F}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr_x64.exe FirewallRules: [{EEB4C679-8B41-4303-8F3B-078DAD51A9CB}] => (Allow) C:\Program Files\SoftEther VPN Client\vpncmgr.exe FirewallRules: [{D92A0DBB-468B-49AB-8C55-837E93F83692}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient_x64.exe FirewallRules: [{3755E95E-C305-4336-ADA9-3122C8908E69}] => (Allow) C:\Program Files\SoftEther VPN Client\vpnclient.exe FirewallRules: [{452DAFF2-E5B5-4A41-B7FC-1CDDF09C874D}] => (Allow) C:\Users\samyd\Desktop\Steam.exe FirewallRules: [{E9F9B99F-980C-47DC-B051-98DB2CBD9F12}] => (Allow) C:\Users\samyd\Desktop\Steam.exe FirewallRules: [{CBC99B32-F1B9-486D-B0F9-32A5E8BB4822}] => (Allow) C:\Users\samyd\Desktop\bin\steamwebhelper.exe FirewallRules: [{E8B3E099-C4A6-48B2-AE82-CA236B2E548B}] => (Allow) C:\Users\samyd\Desktop\bin\steamwebhelper.exe FirewallRules: [{0AEFB076-0F21-461D-844A-E071F298780D}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{330BCFD6-AF66-4E3D-8BA1-48EC9A6A03E9}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{D3F8BFF2-0486-4977-A2CD-0450EF8E894F}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{106FBA90-6898-44C1-9BE3-CB132D8A98EE}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{24AB1863-A766-4306-A86E-50E1968983E8}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{38201800-36D4-4CBB-BE51-C2E3A76D2DCE}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{1D3DF91F-1B06-4297-ABF6-3426138E23D7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{6DC865BD-1224-45F0-87BF-2267F8D7A7D2}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{C29374B6-D4BE-42D5-B1C5-3C79FFFC10CD}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0C9A7CAA-8FCC-4351-B9D2-13FE5D10398E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{DF62DA39-3A2F-4FAE-A3B0-37823EFFDFE9}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe FirewallRules: [{4EA3D3DB-B097-4728-BDCB-316EE46A024F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Elite Dangerous\EDLaunch.exe FirewallRules: [{669811CF-959D-4855-96DB-169340BF68E1}] => (Allow) D:\Program Files (x86)\Driver Booster\DriverBooster.exe FirewallRules: [{428B0EB6-7160-47F0-B210-540FFC85A2E7}] => (Allow) D:\Program Files (x86)\Driver Booster\DriverBooster.exe FirewallRules: [{B8C2125E-810B-42E5-8C2B-8BE093476F57}] => (Allow) D:\Program Files (x86)\Driver Booster\DBDownloader.exe FirewallRules: [{C09FD244-8D37-45A7-86F8-1DD7AAC5D187}] => (Allow) D:\Program Files (x86)\Driver Booster\DBDownloader.exe FirewallRules: [{3691192D-ED5F-4DA8-AF47-B7796F7E0962}] => (Allow) D:\Program Files (x86)\Driver Booster\AutoUpdate.exe FirewallRules: [{03A49ABF-F91E-4A1F-83AD-530E87DC5ED2}] => (Allow) D:\Program Files (x86)\Driver Booster\AutoUpdate.exe FirewallRules: [{7AEED1A8-E94A-4BD1-A760-60DF27A9BBDD}] => (Allow) D:\Program Files (x86)\FormatFactory\FFModules\Package\PFInstOnline.exe FirewallRules: [{DB8B07D7-A258-470F-BB2F-40E84E8D2305}] => (Allow) D:\Program Files (x86)\FormatFactory\FormatFactory.exe FirewallRules: [{54EDEF88-63C5-4BA6-979E-C4B1657610F3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{12DB364F-F07A-4BBE-9A8D-529441949D36}] => (Allow) LPort=2869 FirewallRules: [{745CA800-EC59-4D26-88E6-0C92BD58FB28}] => (Allow) LPort=1900 FirewallRules: [{297F461D-5124-4BBF-A547-1A6A668144AC}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [{5CB7974B-9916-47CE-A5BC-706CD3CA4332}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe FirewallRules: [{FBAAD6C4-35A3-444D-A9A2-A94620FDCC36}] => (Allow) C:\ProgramData\BlueStacksGameManager\OBS\HD-OBS.exe FirewallRules: [{8A5FF873-35A3-4A7B-9DD3-252F7C41630B}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe FirewallRules: [{AA6010B7-D00B-4B8F-AD82-93E598C5386F}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe FirewallRules: [{65688602-2271-4572-9B56-5C7223EF37CC}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe FirewallRules: [{483CE06B-B86D-4457-8898-02F00487F5C3}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe FirewallRules: [{EEAA96EB-E3F2-4746-9324-889474B059E7}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{963C432D-A068-46A4-A316-146D46999DCB}] => (Allow) D:\Program Files (x86)\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe FirewallRules: [{49D5785D-7148-4E07-9ACB-FB0FA200C433}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Always Sometimes Monsters\Game.exe FirewallRules: [{54361CE2-2C9E-4CBC-A402-1ECE366322FF}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Always Sometimes Monsters\Game.exe FirewallRules: [TCP Query User{EB1D0FBE-7085-4597-9092-5D4AC7D020E4}C:\users\samyd\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\samyd\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{61596BBF-C324-438F-9B33-FB8C7C6F7CFD}C:\users\samyd\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\samyd\appdata\roaming\spotify\spotify.exe FirewallRules: [{5B56E65F-6A83-4B26-BB7E-4019849BD216}] => (Allow) LPort=1688 FirewallRules: [{6CB8B6AB-99F4-4FCA-A35F-EC63A8DF3609}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\CostumeQuest2\CostumeQuest2.exe FirewallRules: [{7309ADB9-63D8-4BB1-AFC2-2883A9E8A1DE}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\CostumeQuest2\CostumeQuest2.exe FirewallRules: [{7F4A1162-4A38-44E3-BD9C-E74818BA8111}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\CostumeQuest2\CostumeQuest2_DX9.exe FirewallRules: [{79128E91-0423-4CC0-B25E-31DE4BF8E61E}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\CostumeQuest2\CostumeQuest2_DX9.exe FirewallRules: [{D5E0DABE-2568-4FA4-8540-092D82875FF6}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe FirewallRules: [{68539050-54A6-4CD7-B868-10EA8A4FC769}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win32\UDK.exe FirewallRules: [{26D47116-E5C2-4209-BED4-DAF34358EE21}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe FirewallRules: [{19322231-5945-465D-A347-863B02D3B093}] => (Allow) E:\Program Files (x86)\Steam\steamapps\common\Viscera Cleanup Detail Shadow Warrior\Binaries\Win64\UDK.exe FirewallRules: [{608BD7F0-AB6B-4BB7-AF26-F15D46C10D5E}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{DDBA9102-875C-4C41-9F9B-505BED075EAA}] => (Allow) C:\Users\samyd\AppData\Roaming\BitTorrent\BitTorrent.exe FirewallRules: [{8B24C09A-F537-489B-9E5A-DA55FC0A9761}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{53AA7E36-CB94-44E4-BE02-3262D57AC21F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{9C4964BB-939F-442E-BC7D-66888C511E7A}] => (Allow) C:\Program Files (x86)\Google\Chrome Remote Desktop\69.0.3497.7\remoting_host.exe FirewallRules: [{A04C3968-BBF2-41CE-8006-3CC44BEEEAA6}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{CDED593C-6163-46CF-B6D6-2462EE427244}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{D3813B23-4535-4532-B1C8-825937D6A353}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe FirewallRules: [{B690BC50-C4D0-40E1-A018-CFA3BEC2F4F3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{BBE3358D-0A68-4CEC-9912-0F870293BF66}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe ==================== Points de restauration ========================= 10-10-2018 08:24:54 Windows Update ==================== Éléments en erreur du Gestionnaire de périphériques ============= ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (10/11/2018 01:03:28 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme Microsoft.Photos.exe version 2018.18081.14710.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 364c Heure de début : 01d4612d02abbfc7 Heure de fin : 4294967295 Chemin d'accès de l'application : C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2018.18081.14710.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe ID de rapport : fb5080e7-4f84-4a53-9a37-e6318fc5e0bf Nom complet du package défaillant : Microsoft.Windows.Photos_2018.18081.14710.0_x64__8wekyb3d8bbwe ID de l'application relative au package défaillant : App Error: (10/08/2018 03:09:23 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante SystemSettings.exe, version : 10.0.17134.112, horodatage : 0x2a3c4e62 Nom du module défaillant : ntdll.dll, version : 10.0.17134.254, horodatage : 0xa5a334d4 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000000918c4 ID du processus défaillant : 0x3aa8 Heure de début de l’application défaillante : 0x01d45f05d4f2136c Chemin d’accès de l’application défaillante : C:\Windows\ImmersiveControlPanel\SystemSettings.exe Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\ntdll.dll ID de rapport : a5f543b0-ca7c-4fe6-93f6-9a02bdeda888 Nom complet du package défaillant : windows.immersivecontrolpanel_10.0.2.1000_neutral_neutral_cw5n1h2txyewy ID de l’application relative au package défaillant : microsoft.windows.immersivecontrolpanel Error: (10/08/2018 02:45:48 PM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: BLACKSAM) Description: Impossible de fermer l’application ou le service « Explorateur Windows ». Error: (10/08/2018 02:43:06 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide . Opération : Opération asynchrone en cours d’exécution Contexte : État actuel: DoSnapshotSet Error: (10/08/2018 02:39:25 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Erreur du service de cliché instantané des volumes : erreur lors de l’appel de la routine QueryFullProcessImageNameW. hr = 0x80070006, Descripteur non valide . Opération : Opération asynchrone en cours d’exécution Contexte : État actuel: DoSnapshotSet Error: (10/07/2018 09:16:23 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Le programme windirstat.exe version 1.1.2.80 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance. ID de processus : 3b2c Heure de début : 01d45e6ae62b3e2d Heure de fin : 11 Chemin d'accès de l'application : C:\Program Files (x86)\WinDirStat\windirstat.exe ID de rapport : 20309272-7f0f-456d-a91d-49a855b357a6 Nom complet du package défaillant : ID de l'application relative au package défaillant : Error: (10/07/2018 03:29:03 PM) (Source: Microsoft-Windows-SpellChecker) (EventID: 33) (User: BLACKSAM) Description: httphttp-2147467263 Error: (10/05/2018 09:31:52 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante svchost.exe_WpnUserService, version : 10.0.17134.1, horodatage : 0xa38b9ab2 Nom du module défaillant : NotificationController.dll, version : 10.0.17134.165, horodatage : 0xe0385185 Code d’exception : 0xc0000005 Décalage d’erreur : 0x000000000007a24d ID du processus défaillant : 0x1230 Heure de début de l’application défaillante : 0x01d45bb0ba22eabf Chemin d’accès de l’application défaillante : C:\WINDOWS\system32\svchost.exe Chemin d’accès du module défaillant: C:\Windows\System32\NotificationController.dll ID de rapport : 8f71fc60-08f9-4d29-9f08-53616e7d2715 Nom complet du package défaillant : ID de l’application relative au package défaillant : Erreurs système: ============= Error: (10/10/2018 09:14:44 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Exécution pour l’application serveur COM avec le CLSID Windows.SecurityCenter.WscBrokerManager et l’APPID Non disponible au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (10/10/2018 09:12:45 PM) (Source: DCOM) (EventID: 10016) (User: BLACKSAM) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID BLACKSAM\samyd de l’utilisateur (S-1-5-21-3678928768-3751955489-2917896062-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (10/10/2018 09:12:39 PM) (Source: DCOM) (EventID: 10016) (User: BLACKSAM) Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID {D63B10C5-BB46-4990-A94F-E40B9D520160} et l’APPID {9CA88EE3-ACB7-47C8-AFC4-AB702511C276} au SID BLACKSAM\samyd de l’utilisateur (S-1-5-21-3678928768-3751955489-2917896062-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants. Error: (10/10/2018 09:12:04 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Update service n’a pas pu démarrer en raison de l’erreur : Le fichier spécifié est introuvable. Error: (10/10/2018 09:09:23 PM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Le service Update Orchestrator Service s’est arrêté avec l’erreur : Cette opération s’est terminée car le délai d’attente a expiré. Error: (10/10/2018 09:09:08 PM) (Source: DCOM) (EventID: 10010) (User: BLACKSAM) Description: Le serveur {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (10/10/2018 09:09:07 PM) (Source: DCOM) (EventID: 10010) (User: BLACKSAM) Description: Le serveur {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (10/10/2018 09:09:07 PM) (Source: DCOM) (EventID: 10010) (User: BLACKSAM) Description: Le serveur {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. CodeIntegrity: =================================== Date: 2018-10-10 21:12:04.616 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-10-09 07:38:38.443 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-10-08 10:43:34.701 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-10-07 19:29:43.867 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-10-06 16:39:18.135 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-10-02 22:03:05.376 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-09-24 08:17:54.448 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. Date: 2018-09-23 02:26:48.902 Description: Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\vsservp.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender 2017\dbghelp.dll that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-4460 CPU @ 3.20GHz Pourcentage de mémoire utilisée: 71% Mémoire physique - RAM - totale: 8120 MB Mémoire physique - RAM - disponible: 2312.92 MB Mémoire virtuelle totale: 27576 MB Mémoire virtuelle disponible: 20461.79 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:111.25 GB) (Free:35.26 GB) NTFS Drive e: (Master) (Fixed) (Total:2794.52 GB) (Free:319.17 GB) NTFS \\?\Volume{73f063cc-0000-0000-0000-100000000000}\ (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS \\?\Volume{73f063cc-0000-0000-0000-70d61b000000}\ () (Fixed) (Total:0.44 GB) (Free:0.05 GB) NTFS \\?\Volume{2d9e81eb-46b0-11e6-9eff-d8cb8a5cd2b3}\ () (CDROM) (Total:0 GB) (Free:0 GB) ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 2794.5 GB) (Disk ID: D0046B19) Partition: GPT. ======================================================== Disk: 1 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 73F063CC) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=111.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=449 MB) - (Type=27) ==================== Fin de Addition.txt ============================