Additional scan result of Farbar Recovery Scan Tool (x64) Version: 3-08-2019
Ran by DRJMLAPS (04-08-2019 11:33:48)
Running from C:\Users\DRJMLAPS\Desktop
Windows 7 Professional Service Pack 1 (X64) (2014-01-19 14:16:19)
Boot Mode: Safe Mode (minimal)
==========================================================


==================== Accounts: =============================

Administrateur (S-1-5-21-3658386750-666024021-1030785675-500 - Administrator - Disabled)
DRJMLAPS (S-1-5-21-3658386750-666024021-1030785675-1002 - Administrator - Enabled) => C:\Users\DRJMLAPS
Ewa (S-1-5-21-3658386750-666024021-1030785675-1004 - Limited - Enabled) => C:\Users\Ewa
HomeGroupUser$ (S-1-5-21-3658386750-666024021-1030785675-1003 - Limited - Enabled)
Invité (S-1-5-21-3658386750-666024021-1030785675-501 - Limited - Disabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {B3F630BD-538D-1B4A-14FA-14B63235278F}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Avira Antivirus (Enabled - Up to date) {0897D159-75B7-14C4-2E4A-2FC449B26D32}
AS: Malwarebytes (Disabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

. . . (HKLM\...\{DCAFF63A-A26F-4809-A00D-27AD6733ACB3}) (Version: 2.1.28.3 - Intel) Hidden
. . . (HKLM-x32\...\{C7B0C705-9987-44A2-B495-4101DAEDBFE0}) (Version: 2.6.2.4 - Intel) Hidden
7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
ActivePerl 5.16.3 Build 1603 (64-bit) (HKLM\...\{8C327061-E39D-4696-84A8-E84533ADDD7D}) (Version: 5.16.1603 - ActiveState)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.009.20050 - Adobe Systems Incorporated)
Adobe Flash Player 32 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 32.0.0.223 - Adobe)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.223 - Adobe)
Alcor Micro USB Card Reader Driver  (HKLM-x32\...\{BE52A08B-D385-4E65-BDCB-3FCD9BB1DF63}) (Version: 20.14.2217.13144 - Alcor Micro Corp.) Hidden
Alcor Micro USB Card Reader Driver  (HKLM-x32\...\InstallShield_{BE52A08B-D385-4E65-BDCB-3FCD9BB1DF63}) (Version: 20.14.2217.13144 - Alcor Micro Corp.)
Apple Application Support (32 bits) (HKLM-x32\...\{5C028510-A6A1-409A-A2BF-4DCB43B21EF9}) (Version: 7.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{5C7D4FCF-80C5-4520-9934-D50532AAC59C}) (Version: 7.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{B5A46811-3612-4DA5-8A5A-E6DED5D7C523}) (Version: 12.2.1.12 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Audacity 2.3.2 (HKLM-x32\...\Audacity_is1) (Version: 2.3.2 - Audacity Team)
Avira (HKLM-x32\...\{21a0516b-5dd7-4dee-9d36-85ebdc37aa45}) (Version: 1.2.135.51949 - Avira Operations GmbH & Co. KG)
Avira (HKLM-x32\...\{42F08141-3F60-46FF-A5B4-08C4783DACFE}) (Version: 1.2.135.51949 - Avira Operations GmbH & Co. KG) Hidden
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.1907.1514 - Avira Operations GmbH & Co. KG)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 5.60 - Piriform)
CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.8.7042 - CDBurnerXP)
ClocX (1.6.0) (HKLM-x32\...\ClocX) (Version:  - )
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Device Access Manager for HP ProtectTools (HKLM\...\{55B52830-024A-443E-AF61-61E1E71AFA1B}) (Version: 7.1.2.0 - Hewlett-Packard Company)
DirectX for Managed Code Update (Summer 2004) (HKLM-x32\...\{E9E34215-82EF-4909-BE2F-F581F0DC9062}) (Version: 9.02.2904 - Microsoft) Hidden
Drive Encryption For HP ProtectTools (HKLM\...\{27F1E086-5691-4EB8-8BA1-5CBA87D67EB5}) (Version: 7.0.40.35706 - Hewlett-Packard Company)
DriversCloud.com (64 bits) (HKLM\...\{D3536C71-00CD-457F-8624-CBD51FD43F1C}) (Version: 10.0.2.0 - Cybelsoft)
EaseUS Partition Master 13.5 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 11.5 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 11.5 - CHENGDU YIWO Tech Development Co., Ltd)
File Sanitizer For HP ProtectTools (HKLM-x32\...\{6D6ADF03-B257-4EA5-BBC1-1D145AF8D514}) (Version: 7.0.0.4 - Hewlett-Packard Company)
FormatFactory 4.8.0.0 (HKLM-x32\...\FormatFactory) (Version: 4.8.0.0 - Free Time)
Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Hewlett-Packard ACLM.NET v1.2.2.1 (HKLM-x32\...\{6F340107-F9AA-47C6-B54C-C3A19F11553F}) (Version: 1.00.0000 - Hewlett-Packard Company) Hidden
HP ENVY 5530 series Aide (HKLM-x32\...\{E0C083EB-7C0A-4748-A45C-55A4A040446D}) (Version: 30.0.0 - Hewlett Packard)
HP FWUpdateEDO2 (HKLM-x32\...\{415FA9AD-DA10-4ABE-97B6-5051D4795C90}) (Version: 1.2.0.0 - Hewlett-Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP ProtectTools Security Manager (HKLM\...\HPProtectTools) (Version: 7.0.2.1213 - Hewlett-Packard Company)
HP Setup (HKLM-x32\...\{438363A8-F486-4C37-834C-4955773CB3D3}) (Version: 9.1.15430.4033 - Hewlett-Packard Company)
HP Support Assistant (HKLM-x32\...\{78E2C850-ADA6-420D-BA35-2F4A9BE733CC}) (Version: 8.2.8.25 - HP)
HP Support Information (HKLM-x32\...\{B2B7B1C8-7C8B-476C-BE2C-049731C55992}) (Version: 12.00.0000 - Hewlett-Packard)
HP Support Solutions Framework (HKLM-x32\...\{C255181E-049B-4B54-A39C-61A94E32C374}) (Version: 12.11.27.1 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
HPDiagnosticAlert (HKLM-x32\...\{B6465A32-8BE9-4B38-ADC5-4B4BDDC10B0D}) (Version: 1.00.0001 - Microsoft) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.0.1351 - Intel Corporation)
Intel(R) OpenCL CPU Runtime (HKLM-x32\...\{FCB3772C-B7D0-4933-B1A9-3707EBACC573}) (Version:  - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel® Driver Update Utility (HKLM-x32\...\{66307462-7d19-4f1a-af82-aa04b6017f05}) (Version: 2.6.2.4 - Intel)
iTunes (HKLM\...\{6918DCBF-0DA0-4479-9E52-DCF1178FAC96}) (Version: 12.9.6.3 - Apple Inc.)
KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 4.2.2.29 - PandoraTV)
LibreOffice 6.2.5.2 (HKLM\...\{207F3229-8AA5-4544-BDB7-7995538A5ED5}) (Version: 6.2.5.2 - The Document Foundation)
Logiciel de base du périphérique HP ENVY 5530 series (HKLM\...\{CEF6164C-1BFD-4215-A750-D78916BC6D1F}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
Logitech SetPoint 6.67 (HKLM\...\sp6) (Version: 6.67.83 - Logitech)
Malwarebytes version 3.8.3.2965 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.8.3.2965 - Malwarebytes)
Microsoft .NET Framework 4.7.2 (dansk) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1030) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (norsk språkpakke) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1044) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (suomi) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1035) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft .NET Framework 4.7.2 (svenska) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1053) (Version: 4.7.03062 - Microsoft Corporation)
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Standard Edition 2003 (HKLM-x32\...\{9112040C-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Module de compatibilité pour Microsoft Office System 2007 (HKLM-x32\...\{90120000-0020-040C-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MozBackup 1.5.1 (HKLM-x32\...\MozBackup) (Version:  - Pavel Cvrcek)
Mozilla Firefox 68.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 68.0.1 (x64 fr)) (Version: 68.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 56.0.1 - Mozilla)
NirSoft ProduKey (HKLM-x32\...\NirSoft ProduKey) (Version:  - )
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.7.1 - Notepad++ Team)
opensource (HKLM-x32\...\{3677D4D8-E5E0-49FC-B86E-06541CF00BBE}) (Version: 1.0.14960.3876 - Your Company Name) Hidden
Pale Moon 28.6.1 (x86 en-US) (HKLM-x32\...\Pale Moon 28.6.1 (x86 en-US)) (Version: 28.6.1 - Moonchild Productions)
PDFTK Builder 3.9.4 (HKLM-x32\...\PDFTK Builder_is1) (Version:  - )
PlayReady PC Runtime amd64 (HKLM\...\{BCA9334F-B6C9-4F65-9A73-AC5A329A4D04}) (Version: 1.3.0 - Microsoft Corporation)
Realtek Card Reader (HKLM-x32\...\{F0A8BF4A-972F-41E0-9800-1EFE3BF28266}) (Version: 6.2.9200.30153 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.98.107.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6463 - Realtek Semiconductor Corp.)
Recovery Manager (HKLM-x32\...\{44B2A0AB-412E-4F8C-B058-D1E8AECCDFF5}) (Version: 5.5.0.5223 - CyberLink Corp.) Hidden
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Revo Uninstaller 2.1.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.1.0 - VS Revo Group, Ltd.)
Speccy (HKLM\...\Speccy) (Version: 1.32 - Piriform)
Sticky Notes Taskbar Hider 1.91 (HKLM-x32\...\{8DB92B50-571B-4C9D-9C3C-411E5D94E318}_is1) (Version:  - Draken Scripts)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
SyncBackFree (HKLM-x32\...\SyncBackFree_is1) (Version: 9.0.8.15 - 2BrightSparks)
System Requirements Lab for Intel (HKLM-x32\...\{04C4B49D-45D9-4A28-9ED1-B45CBD99B8C7}) (Version: 4.5.24.0 - Husdawg, LLC)
TextPad 5 (HKLM-x32\...\{B6EC7388-E277-4A5B-8C8F-71067A41BA64}) (Version: 5.4.2 - Helios)
Theft Recovery for HP ProtectTools (HKLM-x32\...\{10F5A72A-1E07-4FAE-A7E7-14B10CC66B17}) (Version: 7.0.1.02 - Hewlett-Packard Company) Hidden
Theft Recovery for HP ProtectTools (HKLM-x32\...\InstallShield_{10F5A72A-1E07-4FAE-A7E7-14B10CC66B17}) (Version: 7.0.1.02 - Hewlett-Packard Company)
TreeSize Free V4.2.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 4.2.2 - JAM Software)
VdhCoApp 1.2.4 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
Windows Live (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
ZHPFix 2015 (HKLM-x32\...\ZHPFix_is1) (Version: 2015 - Nicolas Coolman)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3658386750-666024021-1030785675-1002_Classes\CLSID\{ABECE8A0-FF84-4efb-82AE-9B3181CE097D}\InprocServer32 -> C:\Program Files (x86)\TextPad 5\System\shellext64.dll (Helios Software Solutions) [File not signed]
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> No File
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2018-10-14] (Notepad++ -> )
ContextMenuHandlers1: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_106.dll -> No File
ContextMenuHandlers1: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2019-07-31] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers1: [SimpleShlExt] -> [CC]{45203D3B-3D73-4497-8AFE-D29950AC6C55} =>  -> No File
ContextMenuHandlers2: [SimpleShlExt] -> [CC]{45203D3B-3D73-4497-8AFE-D29950AC6C55} =>  -> No File
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers4: [FormatFactoryShell] -> {A3888923-CFD3-4A6B-89BF-08E6B95716E8} => C:\Program Files (x86)\FormatFactory\ShellEx64_106.dll -> No File
ContextMenuHandlers4: [SimpleShlExt] -> [CC]{45203D3B-3D73-4497-8AFE-D29950AC6C55} =>  -> No File
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => C:\Windows\system32\igfxpph.dll [2013-01-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [File not signed]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [Shell Extension for Malware scanning] -> {45AC2688-0253-4ED8-97DE-B5370FA7D48A} => C:\Program Files (x86)\Avira\Antivirus\shlext64.dll [2019-07-31] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
ContextMenuHandlers1_S-1-5-21-3658386750-666024021-1030785675-1002: [TextPad] -> {ABECE8A0-FF84-4efb-82AE-9B3181CE097D} => C:\Program Files (x86)\TextPad 5\System\shellext64.dll [2007-03-27] (Helios Software Solutions) [File not signed]

==================== Shortcuts & WMI ========================

(The entries could be listed to be restored or removed.)


Shortcut: C:\Users\DRJMLAPS\AppData\Roaming\Microsoft\Windows\Network Shortcuts\Mes sites Web sur MSN\target.lnk -> hxxp://www.msnusers.co

==================== Loaded Modules (Whitelisted) ==============

2007-03-27 14:23 - 2007-03-27 14:23 - 000058368 _____ (Helios Software Solutions) [File not signed] C:\Program Files (x86)\TextPad 5\System\shellext64.dll
2016-06-25 23:43 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [File not signed] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Option => "OptionValue"="1"

==================== Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE trusted site: HKU\S-1-5-21-3658386750-666024021-1030785675-1002\...\localhost -> localhost

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2009-07-14 04:34 - 2019-08-03 16:57 - 000000035 _____ C:\Windows\system32\drivers\etc\hosts


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\system32\wbem;C:\ProgramData\Oracle\Java\javapath;C:\Perl64\site\bin;C:\Perl64\bin;C:\Windows\System32\WindowsPowerShell\v1.0;c:\Program Files (x86)\Hewlett-Packard\HP ProtectTools Security Manager\Bin;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x86;C:\Program Files (x86)\Intel\OpenCL SDK\2.0\bin\x64;C:\Users\DRJMLAPS\AppData\Local\Smartbar\Application;C:\Program Files (x86)\Windows Live\Shared
HKU\S-1-5-21-3658386750-666024021-1030785675-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\DRJMLAPS\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: Media is not connected to internet.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

==================== MSCONFIG/TASK MANAGER disabled items ==

If an entry is included in the fixlist, it will be removed.

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LBTServ => 3
MSCONFIG\Services: MaConfigAgent => 2
MSCONFIG\Services: myCANAL Server => 2
MSCONFIG\startupreg: Adobe ARM => "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
MSCONFIG\startupreg: Avira SystrayStartTrigger => "C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe"
MSCONFIG\startupreg: EaseUS Cleanup => "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\CleanUpUI.exe" 10 300
MSCONFIG\startupreg: EaseUS EPM tray => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.0\bin\EpmNews.exe
MSCONFIG\startupreg: EvtMgr6 => C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming
MSCONFIG\startupreg: File Sanitizer => c:\Program Files (x86)\Hewlett-Packard\File Sanitizer\CoreShredder.exe
MSCONFIG\startupreg: HP KEYBOARDx => "C:\Program Files (x86)\Hewlett-Packard\HP Desktop Keyboard\HPKEYBOARDx.EXE"
MSCONFIG\startupreg: HP Software Update => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: MfeEpePcMonitor => "C:\Program Files\Hewlett-Packard\Drive Encryption\EpePcMonitor.exe"
MSCONFIG\startupreg: NCPluginUpdater => "C:\Program Files (x86)\Hewlett-Packard\HP Health Check\ActiveCheck\product_line\NCPluginUpdater.exe" Update
MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{8A7342D4-EFFB-4E9D-92B1-3BA7978E6998}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{C8C412A2-0360-4408-B2E8-70838B457692}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{495D3E6A-DE7E-4920-A4D2-63C3D948EAA7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{1B7538F2-B0F4-43B6-B1DC-C340D4229DDC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{31A19218-A59F-4CBC-A881-2423050FCC4C}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{DDC985AF-ACAC-4B11-BBB2-B61B1955BD65}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{E58E8F93-933C-451E-8E57-355520FCE91F}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{100663D0-E16F-4A63-9DDB-2CCBF08F1353}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{6621B061-C9DA-401A-9F7A-4E1218508AE1}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{0B1F9610-7E73-4C8D-A2B0-132C50F4ABF9}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{719C423C-F227-4E6F-83F4-E60F9827BACB}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{E4C34FC3-9567-4F74-B993-1A14E3A0D692}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{67BFBFF6-BF49-4B91-9340-811210252B8F}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{D2E66A64-0E2C-4897-9638-D90C1DC6A3C9}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{61816B6F-66BE-40BE-98AF-AC49F9923404}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{C2D66E4E-C122-415C-82B9-69C509AFA880}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Package\PTInstOnline.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{E22127FC-B7E6-480C-81C2-1A6CE06DB0F6}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe No File
FirewallRules: [{841BF7FB-72A9-41AE-9D78-8CC014BCF7E4}] => (Allow) C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe No File
FirewallRules: [TCP Query User{EAB7F655-1702-46F1-AEF6-88780FE87381}C:\users\drjmlaps\appdata\local\temp\7zs3d87\enterprisedu.exe] => (Allow) C:\users\drjmlaps\appdata\local\temp\7zs3d87\enterprisedu.exe No File
FirewallRules: [UDP Query User{2792DC39-255E-42C2-88DB-DCE0315CA4AD}C:\users\drjmlaps\appdata\local\temp\7zs3d87\enterprisedu.exe] => (Allow) C:\users\drjmlaps\appdata\local\temp\7zs3d87\enterprisedu.exe No File
FirewallRules: [{DEC5B57B-B1DB-4E1E-A55B-BE53878DDB1B}] => (Allow) C:\Program Files (x86)\Pale Moon\palemoon.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{80A86368-ED6B-4455-AE39-3546A2C04DE0}] => (Allow) C:\Program Files (x86)\Pale Moon\palemoon.exe (Mark Straver -> Moonchild Productions)
FirewallRules: [{B56C82BC-0F96-4E09-9F8C-9017E421460E}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe No File
FirewallRules: [{9086EA5B-608C-47C2-B1A8-35C26462E1F2}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TbService.exe No File
FirewallRules: [{8F4512B5-C168-49D3-835E-E4FB0476E021}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe No File
FirewallRules: [{F9B7507E-E164-4301-BB4E-2228ED553614}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TBConsoleUI.exe No File
FirewallRules: [{0D39AE7A-CCE5-4A46-9916-A50BD1F30DEC}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe No File
FirewallRules: [{57346409-81B5-4219-931F-15B05070983D}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe No File
FirewallRules: [{9B8548EF-ECDC-4216-9641-842F28991BFD}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe No File
FirewallRules: [{326F4825-A111-49A6-B87E-D076B359213E}] => (Allow) C:\Program Files (x86)\EaseUS\Todo Backup\bin\TodoBackupService.exe No File
FirewallRules: [{2CBFF07A-A82D-4947-912E-D3E776B922CF}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{E4C748DB-047E-40DA-BC8D-0D1033BCCBC5}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{603BD2A6-15AB-414C-B8C2-24F2E8BF820A}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{6CBD2279-B132-4302-9D2E-100411AC23D3}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{EE45A49A-3899-40EB-BFBF-346827C1095E}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{04056310-4AEB-408E-8491-67F89BFBBF70}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{B0F6B9BD-BEEA-4722-A218-E64BC9A7504A}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{21E2E61F-0AF5-464A-A78A-5D1C9CC542A2}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{C0007A8B-4BB7-4E96-ABE0-706E9997F70F}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{2F3450D3-D51A-4117-9EEC-87F9269A14B8}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{FFF99088-60CD-4049-B9A9-93E4E2DCDF95}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{26F7AFF6-B138-4769-912C-06BF7B894C8D}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{F19CAA17-34F1-4581-937A-04C801041BA6}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{AE8E3B88-1194-4000-81BC-A70ADC0A24A8}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{672E2894-6817-4DC5-8F76-6FAFEFFB74F5}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{87526A52-2BFA-4A93-88B1-F5AF4928CB1D}] => (Allow) C:\Program Files\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{D60F5476-ECE1-46EF-A799-DD234B563254}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{417734EF-4FCF-4B2A-AAF1-97CFD1D556D1}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{01D94B73-9011-4F9A-9131-30F54DDA54BB}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{391A086C-CE03-462B-B4A0-AC765C20D61D}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{8E87358F-F299-4D43-9B4E-21882A0145BA}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{5EC38428-4590-492F-A902-69CD2AAB25BC}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{57EC727F-6352-4871-BF95-25164414615B}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{10172433-E674-4139-90B9-37AA6C5FC802}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{219B0031-747B-4159-8F31-415E89676F4E}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{7DBACFEE-A09B-4383-9AD2-A2780119AA7C}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{B0495D6C-2E7D-4776-ABE5-873A37868501}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{809A729B-09A8-4F50-A89A-4424A36FAA08}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{FB066D31-F6C7-4194-9415-3B5ADB3BB6C3}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{F63F61B3-BE40-42F1-8556-B54397851F37}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{F12901D9-DD70-4555-BF1E-4148988D60C8}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{22BB28A3-122F-4284-BAAA-9367FAB74C63}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{7E02E2EF-C097-43D0-9AC1-4476B2BDCCBF}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{AE520053-D3D7-4583-A18E-3CE1334CD65F}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{2AB7A88E-3719-4FFB-9ED8-A0425BE39C81}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{0105FFDD-B4A0-4E80-807A-8EA4783EF04B}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{9311223C-F6FD-4EB5-8E4A-F49D3873105C}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AF06A096-4292-4FE1-92B0-FBC4B6CDFD8D}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{6AB32DF0-4D22-42DE-A242-2541CBAC95AB}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{9074E560-AAB1-4583-90F8-8D83AC098C2F}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{198170E4-C5E4-4107-AB66-4048F544A0C5}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{E0A01E60-5DBF-4ECF-950A-08F0A0DEE6EB}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{62F4D7D6-A91E-415F-8DE8-605CD536E010}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)
FirewallRules: [{4A30B646-8BEE-488D-B90A-EE971A2602B6}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{7280B5C1-0BA9-4EBC-ADB1-503C7BBD4E35}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe (暇光软件科技（上海）有限公司 -> Free Time Co., Ltd.)
FirewallRules: [{FCC65C16-F061-499C-9229-64DEC8DD8CFF}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe (Free Time Co., Ltd. -> Free Time Co., Ltd.)

==================== Restore Points =========================


==================== Faulty Device Manager Devices =============

Name: Security Processor Loader Driver
Description: Security Processor Loader Driver
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: spldr
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Event log errors: =========================

Application errors:
==================
Error: (08/03/2019 04:56:47 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Erreur du service de cliché instantané des volumes : erreur lors de l’interrogation de l’interface IVssWriterCallback. hr = 0x80070005, Accès refusé.
.
Cette erreur est souvent due à des paramètres de sécurité incorrects dans le processus du rédacteur ou du demandeur.


Opération :
   Données du rédacteur en cours de collecte

Contexte :
   ID de classe du rédacteur: {e8132975-6f93-4464-a53e-1050253ae220}
   Nom du rédacteur: System Writer
   ID d’instance du rédacteur: {a6d1495f-44f9-4e72-a093-c6541efa6d31}

Error: (08/02/2019 08:51:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante explorer.exe, version : 6.1.7601.23537, horodatage : 0x57c44efe
Nom du module défaillant : msi.dll, version : 5.0.7601.24460, horodatage : 0x5cd442a6
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000001f1c82
ID du processus défaillant : 0x1118
Heure de début de l’application défaillante : 0x01d5496346d266c4
Chemin d’accès de l’application défaillante : C:\Windows\explorer.exe
Chemin d’accès du module défaillant: C:\Windows\System32\msi.dll
ID de rapport : 90f8dbb9-b556-11e9-bc69-2c44fd1714ec

Error: (08/02/2019 07:31:44 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : SegurazoService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.UnauthorizedAccessException
   à System.IO.__Error.WinIOError(Int32, System.String)
   à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
   à System.IO.File.InternalAppendAllText(System.String, System.String, System.Text.Encoding)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.bmA49a4wkr5C9yrmZuff(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.CMnLJK64e5(System.String)
   à Reason.rsEngine.Utilities.LogzIOLogger.l31mKFTo0ItIyoFxP22(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.awmV7xFICwYFakC0o7w(System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.g9ebZCFePtCXUXkRvGa(System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.iIGVbKxIP(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.YGNcV8FyVXXLZIKy5V1(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.cmo8sfTW6(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.IiaMroFO0glvANSquvA(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.LogError(System.String, System.String, System.String, System.String, System.Exception)
   à Reason.rsEngine.Scan.OnAccess.QHqSkvrGWI3IJXeJ90b(System.Object, System.Object, System.Object, System.Object, System.Object)
   à Reason.rsEngine.Scan.OnAccess.Start()
   à Reason.rsEngineSDK.OnAccess.aTVI6qUs6qAaai5TPvk()
   à Reason.rsEngineSDK.OnAccess.Start()
   à XvQlWbuNucFmhDwvpx.u19pF7favtJx0GPgHj.R07NDBD2BY(System.Object)
   à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   à System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (08/02/2019 07:31:40 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : SegurazoService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.UnauthorizedAccessException
   à System.IO.__Error.WinIOError(Int32, System.String)
   à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
   à System.IO.File.InternalAppendAllText(System.String, System.String, System.Text.Encoding)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.bmA49a4wkr5C9yrmZuff(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.CMnLJK64e5(System.String)
   à Reason.rsEngine.Utilities.LogzIOLogger.l31mKFTo0ItIyoFxP22(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.awmV7xFICwYFakC0o7w(System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.g9ebZCFePtCXUXkRvGa(System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.iIGVbKxIP(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.YGNcV8FyVXXLZIKy5V1(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.cmo8sfTW6(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.IiaMroFO0glvANSquvA(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.LogError(System.String, System.String, System.String, System.String, System.Exception)
   à Reason.rsEngine.Scan.OnAccess.QHqSkvrGWI3IJXeJ90b(System.Object, System.Object, System.Object, System.Object, System.Object)
   à Reason.rsEngine.Scan.OnAccess.Start()
   à Reason.rsEngineSDK.OnAccess.aTVI6qUs6qAaai5TPvk()
   à Reason.rsEngineSDK.OnAccess.Start()
   à XvQlWbuNucFmhDwvpx.u19pF7favtJx0GPgHj.R07NDBD2BY(System.Object)
   à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   à System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (08/02/2019 07:31:36 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : SegurazoService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.UnauthorizedAccessException
   à System.IO.__Error.WinIOError(Int32, System.String)
   à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
   à System.IO.File.InternalAppendAllText(System.String, System.String, System.Text.Encoding)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.bmA49a4wkr5C9yrmZuff(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.CMnLJK64e5(System.String)
   à Reason.rsEngine.Utilities.LogzIOLogger.l31mKFTo0ItIyoFxP22(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.awmV7xFICwYFakC0o7w(System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.g9ebZCFePtCXUXkRvGa(System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.iIGVbKxIP(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.YGNcV8FyVXXLZIKy5V1(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.cmo8sfTW6(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.IiaMroFO0glvANSquvA(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.LogError(System.String, System.String, System.String, System.String, System.Exception)
   à Reason.rsEngine.Scan.OnAccess.QHqSkvrGWI3IJXeJ90b(System.Object, System.Object, System.Object, System.Object, System.Object)
   à Reason.rsEngine.Scan.OnAccess.Start()
   à Reason.rsEngineSDK.OnAccess.aTVI6qUs6qAaai5TPvk()
   à Reason.rsEngineSDK.OnAccess.Start()
   à XvQlWbuNucFmhDwvpx.u19pF7favtJx0GPgHj.R07NDBD2BY(System.Object)
   à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   à System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (08/02/2019 07:31:32 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : SegurazoService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.UnauthorizedAccessException
   à System.IO.__Error.WinIOError(Int32, System.String)
   à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
   à System.IO.File.InternalAppendAllText(System.String, System.String, System.Text.Encoding)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.bmA49a4wkr5C9yrmZuff(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.CMnLJK64e5(System.String)
   à Reason.rsEngine.Utilities.LogzIOLogger.l31mKFTo0ItIyoFxP22(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.awmV7xFICwYFakC0o7w(System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.g9ebZCFePtCXUXkRvGa(System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.iIGVbKxIP(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.YGNcV8FyVXXLZIKy5V1(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.cmo8sfTW6(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.IiaMroFO0glvANSquvA(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.LogError(System.String, System.String, System.String, System.String, System.Exception)
   à Reason.rsEngine.Scan.OnAccess.QHqSkvrGWI3IJXeJ90b(System.Object, System.Object, System.Object, System.Object, System.Object)
   à Reason.rsEngine.Scan.OnAccess.Start()
   à Reason.rsEngineSDK.OnAccess.aTVI6qUs6qAaai5TPvk()
   à Reason.rsEngineSDK.OnAccess.Start()
   à XvQlWbuNucFmhDwvpx.u19pF7favtJx0GPgHj.R07NDBD2BY(System.Object)
   à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   à System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (08/02/2019 07:31:27 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : SegurazoService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.UnauthorizedAccessException
   à System.IO.__Error.WinIOError(Int32, System.String)
   à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
   à System.IO.File.InternalAppendAllText(System.String, System.String, System.Text.Encoding)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.bmA49a4wkr5C9yrmZuff(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.CMnLJK64e5(System.String)
   à Reason.rsEngine.Utilities.LogzIOLogger.l31mKFTo0ItIyoFxP22(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.awmV7xFICwYFakC0o7w(System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.g9ebZCFePtCXUXkRvGa(System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.iIGVbKxIP(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.YGNcV8FyVXXLZIKy5V1(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.cmo8sfTW6(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.IiaMroFO0glvANSquvA(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.LogError(System.String, System.String, System.String, System.String, System.Exception)
   à Reason.rsEngine.Scan.OnAccess.QHqSkvrGWI3IJXeJ90b(System.Object, System.Object, System.Object, System.Object, System.Object)
   à Reason.rsEngine.Scan.OnAccess.Start()
   à Reason.rsEngineSDK.OnAccess.aTVI6qUs6qAaai5TPvk()
   à Reason.rsEngineSDK.OnAccess.Start()
   à XvQlWbuNucFmhDwvpx.u19pF7favtJx0GPgHj.R07NDBD2BY(System.Object)
   à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   à System.Threading.ThreadPoolWorkQueue.Dispatch()

Error: (08/02/2019 07:31:23 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Application : SegurazoService.exe
Version du Framework : v4.0.30319
Description : le processus a été arrêté en raison d'une exception non gérée.
Informations sur l'exception : System.UnauthorizedAccessException
   à System.IO.__Error.WinIOError(Int32, System.String)
   à System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
   à System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
   à System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
   à System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding)
   à System.IO.File.InternalAppendAllText(System.String, System.String, System.Text.Encoding)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.bmA49a4wkr5C9yrmZuff(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger+Driver.CMnLJK64e5(System.String)
   à Reason.rsEngine.Utilities.LogzIOLogger.l31mKFTo0ItIyoFxP22(System.Object, System.Object)
   à Reason.rsEngine.Utilities.LogzIOLogger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.awmV7xFICwYFakC0o7w(System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.Log(System.String, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.g9ebZCFePtCXUXkRvGa(System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.iIGVbKxIP(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.YGNcV8FyVXXLZIKy5V1(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.cmo8sfTW6(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.IiaMroFO0glvANSquvA(System.Object, System.Object, System.Object, System.Object, System.Object, Reason.rsEngine.Severity)
   à Reason.rsEngine.Logger.LogError(System.String, System.String, System.String, System.String, System.Exception)
   à Reason.rsEngine.Scan.OnAccess.QHqSkvrGWI3IJXeJ90b(System.Object, System.Object, System.Object, System.Object, System.Object)
   à Reason.rsEngine.Scan.OnAccess.Start()
   à Reason.rsEngineSDK.OnAccess.aTVI6qUs6qAaai5TPvk()
   à Reason.rsEngineSDK.OnAccess.Start()
   à XvQlWbuNucFmhDwvpx.u19pF7favtJx0GPgHj.R07NDBD2BY(System.Object)
   à System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   à System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   à System.Threading.ThreadPoolWorkQueue.Dispatch()


System errors:
=============
Error: (08/04/2019 11:30:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:17 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:15 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:08 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.

Error: (08/04/2019 11:30:07 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Le service Service Liste des réseaux dépend du service Connaissance des emplacements réseau qui n’a pas pu démarrer en raison de l’erreur : 
Le service ou le groupe de dépendance n’a pas pu démarrer.


Windows Defender:
===================================
Date: 2019-02-22 11:09:10.967
Description: 
Windows Defender a rencontré une erreur lors de la tentative de chargement des signatures et va essayer de revenir à un jeu de signatures correct.
Signatures essayées : Actuelle
Code d’erreur : 0x80070002
Description de l’erreur : Le fichier spécifié est introuvable. 
Version des signatures : 0.0.0.0
Version du moteur : 0.0.0.0

Date: 2018-07-04 11:27:27.731
Description: 
Windows Defender a rencontré une erreur lors de la tentative de mise à jour des signatures.
Nouvelle version des signatures : 1.271.442.0
Version précédente des signatures : 1.269.1075.0
Source de la mise à jour : Utilisateur
Type de signature : Logiciel anti-espion
Type de la mise à jour : Delta
Utilisateur : AUTORITE NT\Système
Version actuelle du moteur : 1.1.15000.2
Version précédente du moteur : 1.1.14901.4
Code d’erreur : 0x80070666
Description de l’erreur : Une autre version de ce produit est déjà installée. L’installation de cette version ne peut pas continuer. Pour configurer ou supprimer la version existante de ce produit utilisez Ajout/Suppression de programmes depuis le Panneau de configuration. 

Date: 2018-07-04 11:27:27.731
Description: 
Windows Defender a rencontré une erreur lors de la tentative de mise à jour du moteur.
Nouvelle version du moteur : 1.1.15000.2
Version précédente du moteur : 1.1.14901.4
Source de la mise à jour : Utilisateur
Utilisateur : AUTORITE NT\Système
Code d’erreur : 0x80070666
Description de l’erreur : Une autre version de ce produit est déjà installée. L’installation de cette version ne peut pas continuer. Pour configurer ou supprimer la version existante de ce produit utilisez Ajout/Suppression de programmes depuis le Panneau de configuration. 

Date: 2017-12-11 15:48:28.903
Description: 
Windows Defender a rencontré une erreur lors de la tentative de chargement des signatures et va essayer de revenir à un jeu de signatures correct.
Signatures essayées : Actuelle
Code d’erreur : 0x80070002
Description de l’erreur : Le fichier spécifié est introuvable. 
Version des signatures : 0.0.0.0
Version du moteur : 0.0.0.0

Date: 2017-08-13 14:24:07.878
Description: 
Windows Defender a rencontré une erreur lors de la tentative de chargement des signatures et va essayer de revenir à un jeu de signatures correct.
Signatures essayées : Actuelle
Code d’erreur : 0x80070002
Description de l’erreur : Le fichier spécifié est introuvable. 
Version des signatures : 0.0.0.0
Version du moteur : 0.0.0.0

CodeIntegrity:
===================================

Date: 2014-12-13 16:53:26.423
Description: 
Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\ComboFix\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.

Date: 2014-12-13 16:53:26.392
Description: 
Windows ne peut pas vérifier l’intégrité d’image du fichier \Device\HarddiskVolume2\ComboFix\catchme.sys, car le fichier à hacher est introuvable sur le système. Une modification matérielle ou logicielle récente a peut-être installé un fichier incorrectement signé ou endommagé ou il s’agit éventuellement d’un logiciel malveillant d’une source inconnue.

==================== Memory info =========================== 

BIOS: AMI 8.16 07/17/2013
Motherboard: Foxconn 2ABF
Processor: Intel(R) Core(TM) i3-3240 CPU @ 3.40GHz
Percentage of memory in use: 54%
Total physical RAM: 3983.53 MB
Available physical RAM: 1806.24 MB
Total Virtual: 7981.67 MB
Available Virtual: 5828.85 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:120 GB) (Free:65.26 GB) NTFS
Drive d: (DONNEES) (Fixed) (Total:229.24 GB) (Free:24.73 GB) NTFS
Drive l: (LAPS_DIR) (Fixed) (Total:100 GB) (Free:3.79 GB) NTFS

\\?\Volume{14ef8844-6f61-11e3-84a8-806e6f6e6963}\ (SYSTEM) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{bd41945c-bd7d-11e3-81f3-2c44fd1714ec}\ (HP_TOOLS) (Fixed) (Total:0.19 GB) (Free:0.18 GB) FAT32
\\?\Volume{f4970ac6-3c4b-11e3-814f-806e6f6e6963}\ (HP_RECOVERY) (Fixed) (Total:16.13 GB) (Free:1.91 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: 2C2C84AA)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=120 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=329.4 GB) - (Type=0F Extended)
Partition 4: (Not Active) - (Size=16.1 GB) - (Type=07 NTFS)

==================== End of Addition.txt ============================