Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 09.12.2018 Exécuté par Leo (17-12-2018 12:10:36) Exécuté depuis C:\Users\Leo\Desktop Windows 8.1 (Update) (X64) (2015-12-16 16:34:19) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= Administrateur (S-1-5-21-2883583054-3779539893-2577248336-500 - Administrator - Disabled) HomeGroupUser$ (S-1-5-21-2883583054-3779539893-2577248336-1004 - Limited - Enabled) Invité (S-1-5-21-2883583054-3779539893-2577248336-501 - Limited - Disabled) Leo (S-1-5-21-2883583054-3779539893-2577248336-1002 - Administrator - Enabled) => C:\Users\Leo ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) ACP Application (HKLM\...\{F6191048-C738-9336-04C8-968455D82C31}) (Version: 2016.0718.1650.38 - Advanced Micro Devices, Inc.) Hidden Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 28.0.0.127 - Adobe Systems Incorporated) Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated) Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.101 - Adobe Systems Incorporated) AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.4 - Advanced Micro Devices, Inc.) AMD Quick Stream (HKLM\...\{E9EED4AE-682B-4501-9574-D09A21717599}_is1) (Version: 3.10.2.0 - AppEx Networks) AutoIt v3.3.14.2 (HKLM-x32\...\AutoItv3) (Version: 3.3.14.2 - AutoIt Team) Catalyst Control Center Next Localization BR (HKLM\...\{3A8008D5-C834-1CA9-68CB-E9F49F0AB120}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHS (HKLM\...\{884596CF-79B1-13A0-7334-563BB3A75F45}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CHT (HKLM\...\{223D250A-AABB-A9AA-7D07-7FA086D7BF62}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization CS (HKLM\...\{58714532-951F-0C3A-8860-2ED7411C6D85}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DA (HKLM\...\{1D89886C-1BC7-978A-7790-BDF741552029}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization DE (HKLM\...\{C2E207A0-6375-140A-3170-50737EB32D29}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization EL (HKLM\...\{FF8A9A91-1E72-EE4A-04DA-6E7F65CB626D}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization ES (HKLM\...\{78B5E5BC-C2B2-3439-0750-C9FC7AAE173B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FI (HKLM\...\{28B38E4C-1FCC-0AB9-F2CE-7079DF8CF8A5}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization FR (HKLM\...\{6CD61388-4F40-E91A-17A1-E821F0BB92E1}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization HU (HKLM\...\{F38E5A65-9C76-3757-9D69-672FACA088D4}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization IT (HKLM\...\{994B3C1F-F48C-B29E-D88A-06322D70B45C}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization JA (HKLM\...\{7C42C52E-DFF2-8BD6-5134-DCB5FBB8A5EE}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization KO (HKLM\...\{3372CE65-1178-B53F-C228-254C7F7F118F}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NL (HKLM\...\{80C20F9B-C28F-E3ED-726C-86BFC24EEE3B}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization NO (HKLM\...\{16FC5B97-5AC3-056E-1A1B-FF36B790575E}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization PL (HKLM\...\{D955A619-B0BA-FB07-0590-675FA7A127CF}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization RU (HKLM\...\{686AF1D4-4D23-8115-9968-FE32775067C8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization SV (HKLM\...\{168E9C24-F28F-D630-74BB-4F4D66CFC871}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TH (HKLM\...\{66F96B6D-33A7-938C-2910-CA9C76E00742}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Catalyst Control Center Next Localization TR (HKLM\...\{59546E97-8B2F-0F51-5191-BF19438164A8}) (Version: 2016.0718.1747.30147 - Advanced Micro Devices, Inc.) Hidden Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.) Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.) Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.) Corsair Utility Engine (HKLM-x32\...\{A95A2CA8-D121-4F63-B513-C94AEDDD35C4}) (Version: 2.9.53 - Corsair) CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1602 - CyberLink Corp.) CyberLink PowerDirector 10 (HKLM\...\{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4002 - CyberLink Corp.) Hidden CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.4002 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Dependency Package Update (HKLM\...\{0788641D-D31A-478D-BB34-C41564AE9F93}) (Version: 1.6.38.00 - Lenovo Inc.) Hidden Dependency Package Update (HKLM\...\{5252431C-288E-409D-ADCF-24407E0E6F70}) (Version: 1.6.25.00 - Lenovo Inc.) Hidden Dependency Package Update (HKLM\...\{FFED38DF-94DC-4FF9-96C1-A6990EDA6B03}) (Version: 1.6.29.00 - Lenovo Inc.) Hidden Discord (HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\Discord) (Version: 0.0.301 - Discord Inc.) Driver & Application Installation (HKLM-x32\...\{BFECCF2A-F094-4066-8BFA-29CCBB7F6602}) (Version: 6.13.0621 - Lenovo) Epic Games Launcher (HKLM-x32\...\{2397C85A-6BB0-4398-99ED-06D6233E478A}) (Version: 1.1.125.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version: - ) Express Zip (HKLM-x32\...\ExpressZip) (Version: 2.18 - NCH Software) f.lux (HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\Flux) (Version: - f.lux Software LLC) FamilySafetyGuide (HKLM-x32\...\{9A268503-5AB0-479E-9690-929BDEC55C00}) (Version: 1.00.0711 - lenovo) Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden GK6XPlus Driver (HKLM-x32\...\{9E647FFC-B731-44c9-AD7E-332CD4C4D243}_is1) (Version: 5.0.0.10 - SHENZHEN SEMITEK Co., LTD) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 70.0.3538.110 - Google Inc.) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.17 - Google Inc.) Hidden Gyazo 3.4.1.0 (HKLM-x32\...\{6DB8C365-E719-4BA5-9594-10DFC244D3FD}_is1) (Version: - Nota Inc.) HitmanPro 3.7 (HKLM\...\HitmanPro37) (Version: 3.7.20.286 - SurfRight B.V.) HydraVision (HKLM-x32\...\{89CE7F9B-B4DF-8585-638B-6BD807ADE9C7}) (Version: 4.2.252.0 - Advanced Micro Devices, Inc.) Hidden Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation) Kara no Shojo 2 (HKLM-x32\...\Kara no Shojo: The Second Episode_is1) (Version: 1.00 - Mangagamer) Kara No Shoujo version 1.0 (HKLM-x32\...\{9F75979D-0625-4C8B-9E61-60C90D777B07}_is1) (Version: 1.0 - Mangagamer, Inc.) Katawa Shoujo (HKLM-x32\...\Katawa Shoujo) (Version: - ) Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Lenovo Assistant (HKLM-x32\...\{B2DE4F30-B8C7-49C0-85B9-2F37A5290F00}) (Version: 2.0.0.29 - Lenovo) Lenovo Blacksilk USB Keyboard Driver (HKLM-x32\...\{B266E062-D6C5-485B-B426-51B152B041A6}) (Version: V1.6.13.0724 - Lenovo) Lenovo Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.7408 - CyberLink Corp.) Hidden Lenovo Power2Go (HKLM-x32\...\InstallShield_{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 6.0.7408 - CyberLink Corp.) Lenovo PowerDVD10 (HKLM-x32\...\{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.7104.52 - CyberLink Corp.) Hidden Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.7104.52 - CyberLink Corp.) Lenovo Rescue System (HKLM\...\{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 4.0.0.1901 - CyberLink Corp.) Hidden Lenovo Rescue System (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 4.0.0.1901 - CyberLink Corp.) Lenovo Solution Center (HKLM\...\{06913C0C-88EB-42AF-9D94-3E9136CEE9BC}) (Version: 3.6.002.003 - Lenovo) LibreOffice 5.3.0.3 (HKLM-x32\...\{BB258465-D7F3-474E-8754-3436A75956D8}) (Version: 5.3.0.3 - The Document Foundation) Logitech - Assistant pour jeux vidéo 8.96 (HKLM\...\Logitech Gaming Software) (Version: 8.96.88 - Logitech Inc.) LVT (HKLM-x32\...\{9E3469A6-443A-452C-BF44-8D7CE3A9A7E2}) (Version: 5.00.0914 - Lenovo) Malwarebytes version 3.6.1.2711 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.6.1.2711 - Malwarebytes) Maxthon Cloud Browser (HKLM-x32\...\Maxthon3) (Version: 4.4.2.2000 - Maxthon International Limited) McAfee WebAdvisor (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.0.9 - McAfee, Inc.) Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0001.00 - Lenovo Group Limited) Hidden Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (HKLM-x32\...\{6e8f74e0-43bd-4dce-8477-6ff6828acc07}) (Version: 11.0.51106.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation) Minecraft (HKLM-x32\...\{2D1ED4EA-B59D-4665-ACB3-9325872A300D}) (Version: 1.0.4.0 - Mojang) Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 49.0.1 (x86 fr) (HKLM-x32\...\Mozilla Firefox 49.0.1 (x86 fr)) (Version: 49.0.1 - Mozilla) Mozilla Firefox 59.0.2 (x64 fr) (HKLM\...\Mozilla Firefox 59.0.2 (x64 fr)) (Version: 59.0.2 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 59.0.2 - Mozilla) Nitro Pro 9 (HKLM\...\{1E067071-56A8-43EF-9526-73FF8CE5825A}) (Version: 9.0.6.20 - Nitro) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.8 - Notepad++ Team) OBS Multiplatform (HKLM-x32\...\OBS Multiplatform) (Version: 0.13.1-rc1 - OBS Project) OBS Studio (HKLM-x32\...\OBS Studio) (Version: 21.1.0 - OBS Project) Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version: - ) Opera Stable 57.0.3098.91 (HKLM-x32\...\Opera 57.0.3098.91) (Version: 57.0.3098.91 - Opera Software) Oracle VM VirtualBox 5.2.22 (HKLM\...\{B3F7EC27-5008-4131-9C45-839E545C5675}) (Version: 5.2.22 - Oracle Corporation) osu! (HKLM-x32\...\{4eedb168-5b10-40fb-9cb7-282c58a20edf}) (Version: latest - ppy Pty Ltd) REALTEK Bluetooth Driver (HKLM-x32\...\{9D3D8C60-A5EF-4123-B2B9-172095903AB}) (Version: 3.810.810.031214 - REALTEK Semiconductor Corp.) Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 6.2.9600.39054 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.18.621.2013 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7106 - Realtek Semiconductor Corp.) REALTEK Wireless LAN Driver (HKLM-x32\...\{9DAABC60-A5EF-41FF-B2B9-17329590CD5}) (Version: 1.20.0239 - REALTEK Semiconductor Corp.) SciTE4AutoIt3 16.612.1119.0 (HKLM-x32\...\SciTE4AutoIt3) (Version: 16.612.1119.0 - Jos van der Zande) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamSpeak 3 Client (HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH) The Labyrinth of Grisaia Unrated Version (HKLM-x32\...\The Labyrinth of Grisaia Unrated Version_is1) (Version: 1.00 - Frontwing/Sekai Project) Touhou 07 - 東方妖々夢 ~ Perfect Cherry Blossom version 1.00b (HKLM-x32\...\{6F51152C-12E4-41A4-B64E-DE0A1DD78B78}_is1) (Version: 1.00b - Touhou-Online) Touhou 14 - 東方輝針城 ~ Double Dealing Character version 1.00b (HKLM-x32\...\{728CFF3F-3C35-4E54-B233-F9A11AE8366A}_is1) (Version: 1.00b - Touhou-Online) UCheck version 2.3.5.0 (HKLM\...\C4E7EE54-826F-41C4-BE3C-375CC70DC1D8_is1) (Version: 2.3.5.0 - Adlice Software) Update for Japanese Microsoft IME Postal Code Dictionary (HKLM-x32\...\{15015752-9990-4516-A2B1-93823281FB8E}) (Version: 15.0.1759 - Microsoft Corporation) Update for Japanese Microsoft IME Standard Dictionary (HKLM-x32\...\{E75B82FD-B6FD-4653-8685-F3A97BDFEA6E}) (Version: 15.0.2013 - Microsoft Corporation) Update for Japanese Microsoft IME Standard Extended Dictionary (HKLM-x32\...\{01E87699-A49D-413A-B75B-7C434FEF979C}) (Version: 15.0.2013 - Microsoft Corporation) UsbFix Anti-Malware Premium (HKLM-x32\...\Usbfix) (Version: 10.0.0.3 - SOSVirus (SOSVirus.Net)) Vegas Pro 13.0 (64-bit) (HKLM\...\{3814DB30-091D-11E4-BDE0-F04DA23A5C58}) (Version: 13.0.373 - Sony) VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN) Vulkan Run Time Libraries 1.0.17.0 (HKLM\...\VulkanRT1.0.17.0) (Version: 1.0.17.0 - LunarG, Inc.) WhatPulse version 2.8.1 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.8.1 - WhatPulse) Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.) WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH) Wireshark 2.0.3 (64-bit) (HKLM-x32\...\Wireshark) (Version: 2.0.3 - The Wireshark developer community, hxxps://www.wireshark.org) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2016-02-21] () ContextMenuHandlers1: [BtSendToMenuEx] -> {CF24E6B8-F148-4BCB-9108-ADF313966E80} => C:\Program Files (x86)\REALTEK\Realtek Bluetooth\DevMenuExt.dll [2014-01-06] (Realtek Semiconductor Corporation) ContextMenuHandlers1: [ExpressZip] -> {8EEA165E-0B8B-4BA7-9796-50214C767171} => C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll [2016-02-19] () ContextMenuHandlers1: [NP8ShellExtension] -> {9C4B85B8-956C-49BF-9BA5-101384E562B2} => C:\Program Files\Common Files\Nitro\Pro\9.0\NPShellExtension64.dll [2014-02-14] (Nitro PDF) ContextMenuHandlers1: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-08-12] (Lenovo) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-11-18] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-11-18] (Alexander Roshal) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes) ContextMenuHandlers4: [SHAREit.FileContextMenuExt] -> {430BD134-576D-4E75-87CD-0F5C6221A82B} => C:\Program Files (x86)\Lenovo\SHAREit\ShellEx\ShellExt64.dll [2014-08-12] (Lenovo) ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\atiacm64.dll [2014-04-17] (Advanced Micro Devices, Inc.) ContextMenuHandlers6: [ExpressZip] -> {8EEA165E-0B8B-4BA7-9796-50214C767171} => C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll [2016-02-19] () ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2018-09-19] (Malwarebytes) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2015-11-18] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2015-11-18] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {10572D49-7B23-4A10-B734-05AE0EEACC54} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2018-10-04] (Nota Inc.) Task: {12703409-EE3B-45BD-98FD-0B1B86D511DB} - System32\Tasks\Maxthon Update => C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe [2014-09-11] (Maxthon International ltd.) Task: {170237AA-0603-4282-97E8-1C52891E659C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation) Task: {26F3C677-81E9-4E7C-992F-FDF82B527B5C} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [2013-03-08] (CyberLink Corp.) Task: {2749C8AB-EC19-4AC3-BCC6-BB192240FC5F} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2018-10-04] (Nota Inc.) Task: {2ABADB68-C4A3-4FC9-9EBB-4314B6475862} - System32\Tasks\Lenovo\LSC\Lenovo Solution Center Notifications => C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe [2017-06-09] (Lenovo) Task: {2B13D615-50A5-4E29-816B-8A2407D91762} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation) Task: {467117B9-DB04-48F0-B046-E2F80A75889C} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_Plugin.exe [2018-12-05] (Adobe Systems Incorporated) Task: {53D6167F-978C-41E4-849E-94D502042AEE} - System32\Tasks\Lenovo\LSC\LSCHardwareScan => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2017-06-09] (Lenovo) Task: {54358426-3709-43A9-94C5-2BC9939E5D0B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-04-14] (Google Inc.) Task: {5E806B9A-0A71-4BEF-AB21-B6B9D43C3030} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_101_pepper.exe [2018-12-05] (Adobe Systems Incorporated) Task: {6720535F-F81A-406C-A699-C9ACAA36C115} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation) Task: {6849FBDE-FB07-4F2D-BF98-8529421C8C3F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2018-04-14] (Google Inc.) Task: {68D3C2F3-C671-4A28-8829-6B6BA0580318} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program 64 35 => C:\Program Files (x86)\Lenovo\Customer Feedback Program 35\Lenovo.TVT.CustomerFeedback.Agent35.exe [2014-05-30] (Lenovo) Task: {6E5A68D5-3594-4669-8B0B-A4872F236B03} - System32\Tasks\Lenovo\LSC\LSCHardwareScanPostpone => C:\Program Files\Lenovo\Lenovo Solution Center\LSC.exe [2017-06-09] (Lenovo) Task: {7023EC10-7B17-4D9F-9C04-2866CC0BA2BE} - System32\Tasks\{AD9A2FB0-036F-4571-B0E4-F2948FC6C732} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.27.80.101/fr/abandoninstall?page=tsProgressBar Task: {8F52AE2D-D5B7-421C-B65C-09FF89C1A3C9} - System32\Tasks\Lenovo\Lenovo Customer Feedback Program => C:\Program Files\Lenovo\Customer Feedback Program\Lenovo.TVT.CustomerFeedback.Agent.exe Task: {943D5C9A-F062-4132-8083-10D9469DD0A6} - System32\Tasks\Microsoft\Windows\PLA\LSC Memory => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\pla.dll,PlaHost "LSC Memory" "$(Arg0)" Task: {A4D5A65E-F917-4A45-8C82-BE5CE37B7A04} - System32\Tasks\Opera scheduled Autoupdate 1474986414 => C:\Program Files (x86)\Opera\launcher.exe [2018-12-06] (Opera Software) Task: {CFA1C5CF-65D1-4577-8484-D5DDFB48C901} - System32\Tasks\Lenovo\Lenovo Solution Center Launcher => C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.UpdateStatusService.exe [2017-06-09] () Task: {D528734A-0A3B-41BD-BA39-FB98FE4E55EE} - System32\Tasks\Lenovo\Dependency Package Auto Update => C:\Program Files\Lenovo\iMController\AutoUpdate.exe [2014-05-21] () Task: {D7B40B85-5BCB-4768-B55C-8A0A0908FFE6} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-12-05] (Adobe Systems Incorporated) Task: {FDC4623A-7795-4B2E-AB47-B13D9FAE0958} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-01-12] (Microsoft Corporation) (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) Shortcut: C:\Users\Leo\Favorites\Site de téléchargement NCH Software.lnk -> hxxp://www.nchsoftware.com/fr/index.htm ==================== Modules chargés (Avec liste blanche) ============== 2014-06-22 04:14 - 2014-06-22 04:14 - 000127488 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Container.Wlan.dll 2014-12-23 06:46 - 2014-03-12 14:30 - 000092160 _____ () C:\Program Files (x86)\REALTEK\Realtek Bluetooth\BTDevMgr.exe 2014-12-23 06:47 - 2011-08-16 20:46 - 000032768 _____ () C:\Windows\jmesoft\Service.exe 2014-12-23 07:05 - 2012-04-24 11:43 - 000390632 _____ () C:\Program Files\CyberLink\Shared files\RichVideo64.exe 2016-02-19 16:04 - 2016-02-19 16:04 - 000089088 _____ () C:\Program Files (x86)\NCH Software\ExpressZip\ezcm64.dll 2014-12-23 06:47 - 2011-08-16 20:46 - 000024576 _____ () C:\Windows\jmesoft\JME_LOAD.exe 2018-07-09 13:10 - 2017-06-27 16:11 - 000827864 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMS.exe 2014-06-22 04:14 - 2014-06-22 04:14 - 000102400 _____ () C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Proxy.Native.dll 2018-05-01 19:23 - 2018-04-30 22:01 - 001891672 _____ () C:\Users\Leo\AppData\Local\Discord\app-0.0.301\ffmpeg.dll 2017-11-29 15:00 - 2018-10-30 19:06 - 000879904 _____ () C:\Program Files (x86)\Steam\SDL2.dll 2017-11-29 15:00 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll 2017-11-29 15:00 - 2018-11-26 21:29 - 002649376 _____ () C:\Program Files (x86)\Steam\video.dll 2017-11-29 15:00 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll 2017-11-29 15:00 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll 2017-12-15 07:51 - 2017-12-20 02:43 - 005137696 _____ () C:\Program Files (x86)\Steam\libavcodec-57.dll 2017-12-15 07:51 - 2017-12-20 02:43 - 000695584 _____ () C:\Program Files (x86)\Steam\libavformat-57.dll 2017-12-15 07:51 - 2017-12-20 02:43 - 000351520 _____ () C:\Program Files (x86)\Steam\libavresample-3.dll 2017-12-15 07:51 - 2017-12-20 02:43 - 000847136 _____ () C:\Program Files (x86)\Steam\libavutil-55.dll 2017-12-15 07:51 - 2017-12-20 02:43 - 000783648 _____ () C:\Program Files (x86)\Steam\libswscale-4.dll 2017-11-29 15:00 - 2018-11-26 21:29 - 001028384 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL 2017-11-29 15:00 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll 2014-04-17 21:13 - 2014-04-17 21:13 - 000089600 _____ () C:\Program Files (x86)\ATI Technologies\HydraVision\HydraFra.dll 2009-12-04 16:59 - 2009-12-04 16:59 - 000619816 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMediaLibrary.dll 2009-12-04 17:04 - 2009-12-04 17:04 - 000013096 _____ () C:\Program Files (x86)\Lenovo\Power2Go\CLMLSvcPS.dll 2017-01-12 16:07 - 2017-01-12 16:07 - 000211456 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\quazip.dll 2017-01-12 16:07 - 2017-01-12 16:07 - 000037376 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\MacroRecording.dll 2017-01-12 16:06 - 2017-01-12 16:06 - 000093184 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\zlib.dll 2016-06-10 09:19 - 2016-06-10 09:19 - 000011264 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\libEGL.DLL 2016-06-10 09:19 - 2016-06-10 09:19 - 001990144 _____ () C:\Program Files (x86)\Corsair\Corsair Utility Engine\libGLESv2.dll 2014-12-23 06:47 - 2011-05-17 13:27 - 000028672 _____ () C:\Windows\jmesoft\hidhook.dll 2018-07-09 13:10 - 2017-06-27 16:11 - 000082392 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMSTray.dll 2018-07-09 13:10 - 2017-06-27 16:10 - 000142808 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMFile.dll 2018-07-09 13:10 - 2017-06-27 16:11 - 000134104 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMService.dll 2018-07-09 13:10 - 2017-06-27 16:10 - 000036824 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMSE.dll 2018-07-09 13:10 - 2017-06-27 16:11 - 000111064 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMSUpdate.dll 2018-07-09 13:10 - 2017-06-27 16:10 - 000125912 _____ () C:\Program Files (x86)\GK6XPlus Driver\CDManager.dll 2018-07-09 13:10 - 2017-06-27 16:11 - 000019416 _____ () C:\Program Files (x86)\GK6XPlus Driver\HIDComm.dll 2018-07-09 13:10 - 2017-06-27 16:11 - 000021464 _____ () C:\Program Files (x86)\GK6XPlus Driver\CDDriver\CDBootDriver.dll 2018-07-09 13:10 - 2017-06-27 16:11 - 000115160 _____ () C:\Program Files (x86)\GK6XPlus Driver\CDDriver\COR-M3-MKDriver.dll 2018-07-09 13:10 - 2017-06-27 16:10 - 000025048 _____ () C:\Program Files (x86)\GK6XPlus Driver\CMHotKey.dll 2018-05-02 12:36 - 2018-12-08 11:09 - 011317080 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_voice\discord_voice.node 2018-05-02 12:36 - 2018-11-16 12:02 - 001639256 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_utils\discord_utils.node 2018-05-02 12:36 - 2018-05-02 12:36 - 001910104 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_spellcheck\node_modules\cld\build\Release\cld.node 2018-05-02 12:36 - 2018-05-02 12:36 - 000422744 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_spellcheck\node_modules\spellchecker\build\Release\spellchecker.node 2018-05-02 12:36 - 2018-05-02 12:36 - 000145240 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_spellcheck\node_modules\keyboard-layout\build\Release\keyboard-layout-manager.node 2018-05-02 12:36 - 2018-05-02 12:36 - 000512856 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_erlpack\discord_erlpack.node 2018-05-02 12:36 - 2018-11-16 12:02 - 001658712 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_game_utils\discord_game_utils.node 2018-10-01 16:46 - 2018-10-10 17:14 - 009621848 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_cloudsync\discord_cloudsync.node 2018-05-02 12:36 - 2018-05-02 12:36 - 002722648 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_rpc\discord_rpc.node 2018-08-17 17:53 - 2018-12-13 09:45 - 001261400 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_modules\discord_modules.node 2018-08-17 17:53 - 2018-12-12 17:20 - 021991256 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_dispatch\discord_dispatch.node 2018-05-02 12:37 - 2018-05-02 12:37 - 002760536 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_contact_import\discord_contact_import.node 2018-05-02 12:37 - 2018-05-02 12:37 - 001249112 _____ () \\?\C:\Users\Leo\AppData\Roaming\discord\0.0.301\modules\discord_vigilante\discord_vigilante.node 2017-11-29 15:01 - 2018-10-30 19:06 - 000879904 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll 2017-11-29 15:01 - 2018-09-23 01:00 - 088009504 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll 2017-11-29 15:01 - 2018-09-23 01:00 - 002264352 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\swiftshader\libglesv2.dll 2017-11-29 15:01 - 2018-09-23 01:00 - 000124704 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\swiftshader\libegl.dll 2018-12-09 22:10 - 2018-12-06 07:40 - 091120216 _____ () C:\Program Files (x86)\Opera\57.0.3098.91\opera_browser.dll 2018-12-09 22:10 - 2018-12-06 07:40 - 004222552 _____ () C:\Program Files (x86)\Opera\57.0.3098.91\libglesv2.dll 2018-12-09 22:10 - 2018-12-06 07:40 - 000097368 _____ () C:\Program Files (x86)\Opera\57.0.3098.91\libegl.dll 2017-01-28 10:21 - 2017-01-28 10:21 - 000404072 _____ () C:\Program Files (x86)\LibreOffice 5\program\glew32.dll 2017-01-28 10:21 - 2017-01-28 10:21 - 001034856 _____ () C:\Program Files (x86)\LibreOffice 5\program\libxml2.dll 2017-01-28 10:21 - 2017-01-28 10:21 - 000182888 _____ () C:\Program Files (x86)\LibreOffice 5\program\libxslt.dll 2017-01-28 10:21 - 2017-01-28 10:21 - 000116328 _____ () C:\Program Files (x86)\LibreOffice 5\program\python3.dll 2017-01-28 08:48 - 2017-01-28 08:48 - 000049152 _____ () C:\Program Files (x86)\LibreOffice 5\program\python-core-3.3.0\lib\_socket.pyd 2017-01-28 10:21 - 2017-01-28 10:21 - 000171112 _____ () C:\Program Files (x86)\LibreOffice 5\program\libxmlsec-mscrypto.dll 2017-01-28 10:21 - 2017-01-28 10:21 - 000285288 _____ () C:\Program Files (x86)\LibreOffice 5\program\libxmlsec.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) AlternateDataStreams: C:\Windows:nlsPreferences [386] ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: =============================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2013-08-22 14:25 - 2018-09-03 18:45 - 000000002 _____ C:\WINDOWS\system32\Drivers\etc\hosts ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Leo\Desktop\Pics\wp.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin) Le Pare-feu est activé. ==================== MSCONFIG/TASK MANAGER éléments désactivés == Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé. HKLM\...\StartupApproved\Run: => "Launch LCore" HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe" HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\StartupApproved\StartupFolder: => "Curse.lnk" HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\StartupApproved\Run: => "Spotify" HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\StartupApproved\Run: => "WhatPulse" HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\StartupApproved\Run: => "WTFast Tray" HKU\S-1-5-21-2883583054-3779539893-2577248336-1002\...\StartupApproved\Run: => "BlueStacks Agent" ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{2FD7D996-08C9-4F33-A677-573FEB7FE6CC}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE FirewallRules: [{A9EF4269-5B42-41E1-A6A2-121DD470536C}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{138957D9-3E09-4A44-9587-08F0A34DDC2F}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe FirewallRules: [{47E47D98-1900-4960-B32B-46D71ADE2DC2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{77F82C06-262F-46E9-B471-39CE0445A207}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe FirewallRules: [{38CAFF98-D7B5-4170-B6AB-0A147F2C9BEB}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe FirewallRules: [{FB86E985-CFC3-4680-9DDA-743654D888BF}] => (Allow) C:\Program Files (x86)\Lenovo\SHAREit\SHAREit.exe FirewallRules: [{0C7E66D6-1863-4AD9-94A7-5B3F9AAD14D9}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe FirewallRules: [{848B43EC-4558-4A3E-BE4A-E92F4F29E8C7}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE FirewallRules: [{8E802C47-088D-4A88-BB23-A28CDB283830}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{55C4B95C-F2D0-4DE7-BA69-DF0B649AB615}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{9FF61331-7F85-42FF-9EE9-725B95C4445D}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{D3819889-42C3-45BA-9D22-5E88996085BC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{E9649D97-EF60-42EE-8167-FE6001FE947A}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{98BF93A6-C965-4630-9C40-211A9EB5B680}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [{AA760517-BC09-46C8-91BD-8B0E29807FE3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{B5BFA093-7B18-4C50-A16B-1200C29FB192}] => (Allow) LPort=2869 FirewallRules: [{D76A1C78-C617-40DA-B638-212D3E730F0F}] => (Allow) LPort=1900 FirewallRules: [{16065FA8-2863-4F30-9E2D-A47BD3D512D7}] => (Allow) %systemroot%\system32\alg.exe FirewallRules: [TCP Query User{4FE98255-720E-453D-BC13-605F40781820}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [UDP Query User{ACC86F69-7E5E-4EBC-9481-E383FF0E8CBE}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe FirewallRules: [TCP Query User{7E95DDFD-FE07-41F4-A57B-7FD18382946A}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{E379DFB9-40D6-4D87-B9AC-9A22CEEDB9EA}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{DF5D3CF9-7DC2-4E37-8C32-F91ECE3C9CAA}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe FirewallRules: [UDP Query User{0914FD42-C0BF-4F2F-BE05-D7363D8E556A}C:\users\leo\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\leo\appdata\roaming\spotify\spotify.exe FirewallRules: [TCP Query User{9C77C333-74CD-4CCE-900D-2FDEA2D032C0}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{256FD639-8F1F-4B49-B049-30C557BAA4A9}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{EEC36BF3-DB3C-49C0-BC58-E163F0B0F1A3}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{0E3F4F4C-77A9-4FF1-AA6B-D9F5FFD7D476}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [TCP Query User{56161502-0248-409E-B076-296170AB8D77}C:\users\leo\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\leo\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [UDP Query User{68FB9532-CD40-4E91-9FD3-E31126724478}C:\users\leo\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\leo\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe FirewallRules: [TCP Query User{308A9084-616B-47A6-86AA-5231029964D3}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [UDP Query User{45B579B3-AFAB-48C0-B182-5DA2F3DA735A}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe FirewallRules: [{63AEDD51-CA63-4F45-96F1-5C76C227D1C7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{22E1A275-600B-4DED-9492-E57AC695C201}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe FirewallRules: [{CA699667-3CB6-46AC-9085-79740DAA7CC7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{49BC7144-3D0C-4E15-B6E2-AB5A9225CFB7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe FirewallRules: [{FA0E15E1-D496-4C80-9812-2BE6C8F8BD43}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{23EF01D7-2FD2-4C61-97B0-A1E7A29E983F}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe FirewallRules: [{F3D9EB5A-BE23-4F14-BC84-647E626776FA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{77028268-CFDE-40B8-AD55-D08093187086}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{8D2117BF-B78A-4A48-92B4-FE57775FCB2A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{5B6BBA26-A1AC-4539-89FB-7B2672428D2B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{8BEDE622-9783-4948-B96F-21ACEEF7AC63}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Might & Mayhem\MightAndMayhem.exe FirewallRules: [{68062018-F74F-46B4-AA63-9C1B42B78034}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Might & Mayhem\MightAndMayhem.exe FirewallRules: [TCP Query User{0BBE123C-5E7F-4581-B640-2808019E02CF}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [UDP Query User{135B9DEA-4FF7-4888-B166-947EA8EF6410}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe FirewallRules: [TCP Query User{5B0F1E89-31B7-400B-BB14-B491189068A7}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [UDP Query User{A3C67005-44A4-4B45-B9DC-C029E578786E}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe FirewallRules: [{1599AA95-F2A7-48FB-9B4C-7D1058E976AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Doki Doki Literature Club\DDLC.exe FirewallRules: [{81B18A76-7CAD-48EC-8696-49C82D9298D5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Doki Doki Literature Club\DDLC.exe FirewallRules: [{ECA8E9DA-B931-4026-A552-20DCCC3BBC61}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\McOsu\McEngine.exe FirewallRules: [{D3C701AF-9A2A-4FB1-AAA3-4EA7EE3AC0A4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\McOsu\McEngine.exe FirewallRules: [{2956B8B1-B2C7-4981-BB54-72730F4B1517}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Asphyxia\Asphyxia.exe FirewallRules: [{738BB558-C87D-44F0-A158-52A661ADC1E4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Asphyxia\Asphyxia.exe FirewallRules: [TCP Query User{CAE22991-3496-47D7-A138-981660F27709}C:\games\stepmania 5\program\stepmania.exe] => (Allow) C:\games\stepmania 5\program\stepmania.exe FirewallRules: [UDP Query User{B3825840-1DB3-4720-9BF8-FDF35E3CA936}C:\games\stepmania 5\program\stepmania.exe] => (Allow) C:\games\stepmania 5\program\stepmania.exe FirewallRules: [{2222CC70-4899-4962-A1EB-0FE4B34584CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Kitty Cat Jigsaw Puzzles\KittyCatJigsawPuzzles.exe FirewallRules: [{155260CC-8A7D-436B-A8E6-9CFAB858D17C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Kitty Cat Jigsaw Puzzles\KittyCatJigsawPuzzles.exe FirewallRules: [{05343BE3-DCF1-4098-AD09-CAFE374A0EC3}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{A3C5B3DB-5422-4EBE-9319-0141C0E6C96F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{01C692FF-A909-4A2E-92BF-14330B63420A}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe FirewallRules: [{6C5DCCC0-CAC6-41DB-8620-02A991E82CE7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CLANNAD\RealLiveEn.exe FirewallRules: [{6AD34CAA-5FF0-4197-AD19-218318277916}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CLANNAD\RealLiveEn.exe FirewallRules: [{B87024D7-E3C4-44EE-A154-C5B3A2E059F4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe FirewallRules: [{00EF1453-BAE8-4B52-AB8C-0752F603C5FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Undertale\UNDERTALE.exe FirewallRules: [TCP Query User{BCF5A0EB-2E26-4130-91DE-26A29A723E04}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe FirewallRules: [UDP Query User{3A8F66CE-3A4D-41C5-9E6E-C3EFA6CF152C}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe FirewallRules: [{F1D7051E-77AB-42C4-8BA6-D7C7F3FD008B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\G-senjou no Maou - The Devil on G-String\g_senjou_no_maou.exe FirewallRules: [{3E64C47D-66B1-4022-AC07-A84A4FC49D75}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\G-senjou no Maou - The Devil on G-String\g_senjou_no_maou.exe FirewallRules: [{0986E386-4C8B-4933-9981-4C87F8A26C63}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\STEINS;GATE\Launcher.exe FirewallRules: [{8651FD6E-118A-4407-A02F-9127AE0EBA2A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\STEINS;GATE\Launcher.exe FirewallRules: [TCP Query User{76D63D2B-F552-4BC2-9537-F3F2F3ED2AFC}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe FirewallRules: [UDP Query User{45A03DE8-B8FF-4766-AFA0-5D04F44D1E62}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_51\bin\javaw.exe FirewallRules: [{7776E3A1-EDA5-4A3B-BA47-B8766686DE64}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{58D2F172-FFEA-4E57-9A91-490FEB9E5BBD}] => (Allow) C:\Program Files (x86)\Opera\56.0.3051.116\opera.exe FirewallRules: [{69C82A5D-8872-4D8B-B363-13EBE749FFFE}] => (Allow) C:\Program Files (x86)\Opera\57.0.3098.91\opera.exe ==================== Points de restauration ========================= 27-11-2018 18:17:40 Installed Oracle VM VirtualBox 5.2.22 05-12-2018 20:13:09 Point de contrôle planifié 12-12-2018 21:43:20 Windows Update 15-12-2018 19:20:07 Installed Mumble 1.2.19 15-12-2018 19:21:19 Installed Mumble 1.2.19 16-12-2018 17:55:55 Opération de restauration 16-12-2018 18:50:59 Installed Minecraft ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: Contrôleur High Definition Audio Description: Contrôleur High Definition Audio Class Guid: {4d36e97d-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: HDAudBus Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. Name: AMD Radeon R7 Graphics + R7 240 Dual Graphics Description: AMD Radeon R7 Graphics + R7 240 Dual Graphics Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318} Manufacturer: Advanced Micro Devices, Inc. Service: amdkmdap Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. Name: AMD Radeon(TM) R7 Graphics Description: AMD Radeon(TM) R7 Graphics Class Guid: {4d36e968-e325-11ce-bfc1-08002be10318} Manufacturer: Advanced Micro Devices, Inc. Service: amdkmdap Problem: : Windows has stopped this device because it has reported problems. (Code 43) Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (12/17/2018 11:59:29 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante soffice.bin, version : 5.3.0.3, horodatage : 0x588c549e Nom du module défaillant : MSVCR120.dll, version : 12.0.21005.1, horodatage : 0x524f7ce6 Code d’exception : 0xc0000409 Décalage d’erreur : 0x000a7666 ID du processus défaillant : 0x18fc Heure de début de l’application défaillante : 0x01d495f77ba9b887 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\LibreOffice 5\program\soffice.bin Chemin d’accès du module défaillant: C:\WINDOWS\SYSTEM32\MSVCR120.dll ID de rapport : d2fbf2ff-01ea-11e9-8320-38b1dbb94da8 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/17/2018 11:57:25 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante RadeonSettings.exe, version : 10.1.1.1641, horodatage : 0x578d4d34 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x124c Heure de début de l’application défaillante : 0x01d495f68fb88c57 Chemin d’accès de l’application défaillante : C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Chemin d’accès du module défaillant: unknown ID de rapport : 88ebcfcf-01ea-11e9-8320-38b1dbb94da8 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/16/2018 07:00:00 PM) (Source: ESENT) (EventID: 455) (User: ) Description: svchost (1492) SRUJet: L'Erreur -1811 (0xfffff8ed) s'est produite lors de l'ouverture du fichier journal C:\WINDOWS\system32\SRU\SRU076B5.log. Error: (12/16/2018 06:23:19 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante RadeonSettings.exe, version : 10.1.1.1641, horodatage : 0x578d4d34 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0xe0c Heure de début de l’application défaillante : 0x01d495634dbbe6e6 Chemin d’accès de l’application défaillante : C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Chemin d’accès du module défaillant: unknown ID de rapport : 47a502d5-0157-11e9-8320-38b1dbb94da8 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/16/2018 12:43:27 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: ) Description: Un problème a empêché l’envoi des données du Programme d’amélioration de l’expérience utilisateur à Microsoft (erreur 80070005). Error: (12/16/2018 11:48:27 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante RadeonSettings.exe, version : 10.1.1.1641, horodatage : 0x578d4d34 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x1c88 Heure de début de l’application défaillante : 0x01d4952c2651d3b1 Chemin d’accès de l’application défaillante : C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Chemin d’accès du module défaillant: unknown ID de rapport : 1de3ef94-0120-11e9-8322-38b1dbb94da8 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/15/2018 08:55:22 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante RadeonSettings.exe, version : 10.1.1.1641, horodatage : 0x578d4d34 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0xfc0 Heure de début de l’application défaillante : 0x01d494af5ca439e5 Chemin d’accès de l’application défaillante : C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Chemin d’accès du module défaillant: unknown ID de rapport : 5ad131e7-00a3-11e9-8322-38b1dbb94da8 Nom complet du package défaillant : ID de l’application relative au package défaillant : Error: (12/15/2018 08:46:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante RadeonSettings.exe, version : 10.1.1.1641, horodatage : 0x578d4d34 Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x0000000000000000 ID du processus défaillant : 0x56c Heure de début de l’application défaillante : 0x01d494ae3b90df9d Chemin d’accès de l’application défaillante : C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe Chemin d’accès du module défaillant: unknown ID de rapport : 2e5bf0e0-00a2-11e9-8321-38b1dbb94da8 Nom complet du package défaillant : ID de l’application relative au package défaillant : Erreurs système: ============= Error: (12/16/2018 11:08:48 PM) (Source: DCOM) (EventID: 10010) (User: LE) Description: Le serveur {4545DEA0-2DFC-4906-A728-6D986BA399A9} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (12/16/2018 11:08:48 PM) (Source: DCOM) (EventID: 10010) (User: LE) Description: Le serveur {4545DEA0-2DFC-4906-A728-6D986BA399A9} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (12/16/2018 11:08:47 PM) (Source: DCOM) (EventID: 10010) (User: AUTORITE NT) Description: Le serveur {995C996E-D918-4A8C-A302-45719A6F4EA7} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (12/16/2018 11:08:47 PM) (Source: DCOM) (EventID: 10010) (User: AUTORITE NT) Description: Le serveur {995C996E-D918-4A8C-A302-45719A6F4EA7} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (12/16/2018 11:08:47 PM) (Source: DCOM) (EventID: 10010) (User: AUTORITE NT) Description: Le serveur {995C996E-D918-4A8C-A302-45719A6F4EA7} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Error: (12/16/2018 06:17:48 PM) (Source: VBoxNetLwf) (EventID: 12) (User: ) Description: Le pilote a détecté une erreur de pilote interne sur \Device\VBoxNetLwf. Error: (12/16/2018 06:17:48 PM) (Source: Microsoft-Windows-NDIS) (EventID: 10317) (User: ) Description: Le miniport SAMSUNG Mobile USB Remote NDIS Network Device, {E961315C-08CB-422B-9A9E-3DFD243A1540}, a eu l’événement 74 Error: (12/16/2018 06:16:56 PM) (Source: DCOM) (EventID: 10010) (User: LE) Description: Le serveur {F9717507-6651-4EDB-BFF7-AE615179BCCF} ne s’est pas enregistré sur DCOM avant la fin du temps imparti. Windows Defender: =================================== Date: 2018-12-15 16:33:22.409 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {953AE47B-2742-4EA4-9D2F-90B15D8B5F0E} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-12-15 13:31:03.542 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {210584AA-DA45-471B-93A6-58D5D6E34CBE} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-12-14 13:04:02.707 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {40B050CC-7DB5-4544-B5D1-0C6B53E14980} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-12-11 13:43:10.961 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {CEF61ED8-1FEC-432B-88E1-7F9410790765} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-12-10 13:13:45.466 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {0DE52FB4-65BA-4904-AA25-4D73E5E2D28D} Type de l’analyse : Logiciel anti-programme malveillant Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\Système Date: 2018-12-16 18:13:30.092 Description: Windows Defender a rencontré une erreur lors du chargement des signatures et va tenter de rétablir un jeu de signatures approprié. Signatures tentées : Actuelle Code d’erreur : 0x80070002 Description de l’erreur : Le fichier spécifié est introuvable. Version de la signature : 0.0.0.0;0.0.0.0 Version du moteur : 0.0.0.0 Date: 2018-12-12 17:36:03.938 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.283.335.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de signature : Logiciel anti-espion Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.15500.2 Code d’erreur : 0x80070652 Description de l’erreur : Une autre installation est en cours d’exécution. Terminez celle-ci avant d’effectuer cette installation. Date: 2018-12-12 17:36:03.938 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : 1.283.335.0 Source de mise à jour : Centre de protection Microsoft contre les logiciels malveillants Type de signature : Anti-virus Type de mise à jour : Complet Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : 1.1.15500.2 Code d’erreur : 0x80070652 Description de l’erreur : Une autre installation est en cours d’exécution. Terminez celle-ci avant d’effectuer cette installation. Date: 2018-12-12 17:35:58.466 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : Source de mise à jour : Utilisateur Type de signature : Type de mise à jour : Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : Code d’erreur : 0x80070652 Description de l’erreur : Une autre installation est en cours d’exécution. Terminez celle-ci avant d’effectuer cette installation. Date: 2018-12-12 17:35:58.465 Description: Windows Defender a rencontré une erreur lors d la mise à jour des signatures. Nouvelle version de la signature : Version précédente de la signature : Source de mise à jour : Utilisateur Type de signature : Type de mise à jour : Utilisateur : AUTORITE NT\SERVICE RÉSEAU Version actuelle du moteur : Version précédente du moteur : Code d’erreur : 0x80070652 Description de l’erreur : Une autre installation est en cours d’exécution. Terminez celle-ci avant d’effectuer cette installation. CodeIntegrity: =================================== Date: 2018-10-15 21:32:25.302 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:32:25.091 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:31:08.687 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:31:08.480 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:30:50.602 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:30:50.332 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:16:11.932 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. Date: 2018-10-15 21:16:11.698 Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Users\Leo\AppData\Local\Temp\mbr.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. ==================== Infos Mémoire =========================== Processeur: AMD A10-7800 Radeon R7, 12 Compute Cores 4C+8G Pourcentage de mémoire utilisée: 58% Mémoire physique - RAM - totale: 7093.1 MB Mémoire physique - RAM - disponible: 2940.18 MB Mémoire virtuelle totale: 8693.1 MB Mémoire virtuelle disponible: 3814.64 MB ==================== Lecteurs ================================ Drive c: (Windows8_OS) (Fixed) (Total:1836.76 GB) (Free:749.57 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)] \\?\Volume{20ffa16f-6033-4c00-8b0d-638383ca6bc3}\ (WINRE_DRV) (Fixed) (Total:0.98 GB) (Free:0.7 GB) NTFS \\?\Volume{1ff32559-ce64-4f95-9994-56d0a52a4226}\ (PBR_DRV) (Fixed) (Total:24.41 GB) (Free:14.25 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (Size: 1863 GB) (Disk ID: F95D6C1D) Partition: GPT. ==================== Fin de Addition.txt ============================