Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 22-04-2017
Exécuté par Mouaad (22-04-2017 13:45:20)
Exécuté depuis C:\Users\Mouaad\Desktop
Windows 10 Pro Version 1607 (X64) (2017-03-08 21:54:15)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-579553617-55138302-560361482-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-579553617-55138302-560361482-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-579553617-55138302-560361482-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-579553617-55138302-560361482-501 - Limited - Disabled)
Mouaad (S-1-5-21-579553617-55138302-560361482-1001 - Administrator - Enabled) => C:\Users\Mouaad
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
American Truck Simulator version 1.1.1.1s (HKLM-x32\...\{20664E10-DEE9-404E-BFEF-1043B2BA76CF}_is1) (Version: 1.1.1.1s - REVOLUTiONiT)
Ansel (Version: 381.65 - NVIDIA Corporation) Hidden
Battlefield 1 Ultimate Edition version 1.0 Update 3 (HKLM-x32\...\Battlefield 1 Ultimate Edition_is1) (Version: 1.0 Update 3 - GMT-MAX.ORG)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: - BitTorrent, Inc)
CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform)
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)
DiRT Rally (HKLM-x32\...\DiRT Rally_is1) (Version: - )
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.12.5268 - Gretech Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto V version v.1.0.350.1 (HKLM-x32\...\Grand Theft Auto V_is1) (Version: v.1.0.350.1 - GMT-MAX.ORG)
GRID Autosport Complete Edition (HKLM\...\Z3JpZGF1dG9zcG9ydA_is1) (Version: 1 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
K-Lite Codec Pack 12.9.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.9.5 - KLCP)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Minimal ADB and Fastboot version 1.4 (HKLM-x32\...\{C5564379-582D-457A-9E68-A9E7C1F1C4EC}_is1) (Version: 1.4 - Sam Rodberg)
Minimal ADB and Fastboot version 1.4.2 (HKLM-x32\...\{1901BAF7-7E78-4041-BC88-D0EE5DD1DFD9}_is1) (Version: 1.4.2 - Sam Rodberg)
Mises à jour NVIDIA 24.0.0.0 (Version: 24.0.0.0 - NVIDIA Corporation) Hidden
Mozilla Firefox 19.0.2 (x86 fr) (HKLM-x32\...\Mozilla Firefox 19.0.2 (x86 fr)) (Version: 19.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 19.0.2 - Mozilla)
Need for Speed: Most Wanted (HKLM-x32\...\Need for Speed: Most Wanted_is1) (Version: - )
Nox APP Player (HKLM-x32\...\Nox) (Version: 3.7.1.0 - Duodian Technology Co. Ltd.)
NVIDIA GeForce Experience 3.5.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.5.0.70 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NVIDIA Pilote graphique 381.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 381.65 - NVIDIA Corporation)
NvNodejs (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.4.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OpenIV (HKU\S-1-5-21-579553617-55138302-560361482-1001\...\OpenIV) (Version: 2.8.703 - .black/OpenIV Team)
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.30491 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Package de pilotes Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (01/27/2014 9.0.0000.00000) (HKLM\...\9CA77E2A8332A0824C54DA611BBE4CA24AB1F750) (Version: 01/27/2014 9.0.0000.00000 - Google, Inc.)
Panneau de configuration NVIDIA 381.65 (Version: 381.65 - NVIDIA Corporation) Hidden
Project CARS version build 1001 (HKLM-x32\...\Project CARS_is1) (Version: build 1001 - GMT-MAX.ORG)
RAR Password Unlocker 4.2.0.0 (HKLM-x32\...\{B789FA51-6A71-408F-92DE-EDE4A517B8F9}_is1) (Version: - Password Unlocker Studio)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{0DF70CB6-553A-4C57-8E6D-876322ECFB78}) (Version: 1.00.0179 - REALTEK Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
RogueKiller version 12.10.5.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.10.5.0 - Adlice Software)
SHIELD Streaming (Version: 7.1.0360 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpyHunter (HKLM-x32\...\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}) (Version: 4.1.11 - Enigma Software Group USA, LLC)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.1.3.6 - Synaptics Incorporated)
Test Drive Unlimited 2 (HKLM-x32\...\Test Drive Unlimited 2_is1) (Version: - )
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft)
Ultra Street Fighter IV (HKLM-x32\...\{118A259C-6535-4DC2-AA22-7C9CE4AB0D68}_is1) (Version: 2.0.0.3630 - Capcom)
Uplay (HKLM-x32\...\Uplay) (Version: 29.0 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Windows Driver Package - BigNox Corporation (VBoxUSB) USB (09/16/2015 4.3.12) (HKLM\...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Mouaad\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll => Pas de (l'élément de données a 7 caractères en plus).
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Mouaad\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll => Pas de (l'élément de données a 7 caractères en plus).
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Mouaad\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll => Pas de (l'élément de données a 7 caractères en plus).
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0A316F01-82BE-45E3-83E2-65074A07D59E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-01] (Google Inc.)
Task: {0B9860BE-7091-42CC-8089-67A10FAA5927} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {0F7CFEBD-D37A-457B-8B93-B456D926E01D} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-28] (NVIDIA Corporation)
Task: {1198C26F-5778-453C-96B9-D6377577E3DF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-28] (NVIDIA Corporation)
Task: {1947CA70-09BD-4A05-8697-679CB195F099} - System32\Tasks\{8E1173DE-F2C7-4779-A905-F14D3F29D8CD} => Chrome.exe hxxp://ui.skype.com/ui/0/6.16.0.105/fr/go/help.faq.installer?LastError=1618
Task: {1C6542B3-51E1-4F9F-9B69-96215335A038} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-01] (Google Inc.)
Task: {2F4460B7-616A-48C4-9B69-3CA8204859DB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {39F6C9C8-CB06-45BB-95F0-40B71EE07947} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-28] (NVIDIA Corporation)
Task: {42EE299F-9AFD-4C6F-83E8-5DEDF1111236} - \OneDrive Standalone Update Task v2 -> Pas de fichier <==== ATTENTION
Task: {506841E2-CC4C-43DE-A3BF-3F16E4A416AE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {53A04FF8-6AF7-4590-9249-C86571775792} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-03-28] (NVIDIA Corporation)
Task: {55A9D6F8-AD43-4DA0-B7D9-902C7C6D5CE0} - \Phijiing -> Pas de fichier <==== ATTENTION
Task: {5902F3CB-2E9F-43CD-8034-DF99E1852E2D} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\Explorer.exe /NOUACCHECK
Task: {7AD46E9E-F21D-4AF0-98A6-FF3E4A93E381} - System32\Tasks\R@1n-KMS\Office15ProPlus => wmic
Task: {93DF3028-50F5-4AE5-8601-44D204E655E4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {986E5A87-B15D-429A-A988-9D3C5AA667FD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-03-28] (NVIDIA Corporation)
Task: {A2912F32-3DD7-48B8-90B9-595C094D0C6B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {A728B828-F576-4CA0-81C2-79666D09448E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {A75EF7EF-D1B3-4F95-A54B-B06CB1EB8452} - System32\Tasks\R@1n-KMS\Windows100Professional => wmic
Task: {A8271491-0D75-4A8C-B88A-616D4AADEDBB} - \Pruhosh System -> Pas de fichier <==== ATTENTION
Task: {A88C3084-0F4D-4208-9B7B-BE0355E81A07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {A8A830BB-4D5A-41B9-9925-5DFCFF06A4EF} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-03-28] (NVIDIA Corporation)
Task: {C4BED62B-4A9B-45FD-BDE8-EC9E3C533D7E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-11] (Adobe Systems Incorporated)
Task: {D75D9D93-94A7-409F-91A9-7DC62EC747B3} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-28] (NVIDIA Corporation)
Task: {EADF5EB9-CED0-409E-9A77-80AB76AD8B2F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-03-03] (Piriform Ltd)
Task: {F53D3329-F7F7-45EA-A794-ED2C0A91598C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {F9C4B959-CDDA-41DD-8B23-05B849FABA5F} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-02-21] ()
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
Shortcut: C:\Users\Mouaad\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Boxbob\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Boxbob\Application\chrome.exe (Google Inc.)
==================== Modules chargés (Avec liste blanche) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2017-04-11 20:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-03-11 12:59 - 2017-03-28 05:32 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-11 20:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-10-31 21:45 - 2016-10-31 21:45 - 00592384 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2017-02-16 21:04 - 2017-02-16 21:04 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-04-11 20:33 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-04-11 20:30 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-04-11 20:30 - 2017-03-04 08:08 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-11 13:17 - 2016-03-31 17:57 - 00625440 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2017-03-11 12:59 - 2017-03-28 05:32 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-21 11:25 - 2017-04-21 05:38 - 00108544 _____ () c:\programdata\microsoft\onedrive\uploader.dll
2017-03-11 12:59 - 2017-03-21 06:27 - 02442176 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00363576 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00469048 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00571840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2017-04-21 11:25 - 2017-04-21 05:38 - 00108544 _____ () C:\ProgramData\Microsoft\OneDrive\Uploader.dll
2017-04-21 11:25 - 2017-03-09 07:31 - 02187096 _____ () C:\Program Files (x86)\Boxbob\Application\libglesv2.dll
2017-04-21 11:25 - 2017-03-09 07:31 - 00086360 _____ () C:\Program Files (x86)\Boxbob\Application\libegl.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-07-16 13:47 - 2017-04-22 00:36 - 00001253 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 api.wondershare.com
127.0.0.1 a1737.g.akamai.net
127.0.0.1 wondershare.cn.edgesuite.net
127.0.0.1 platform.wondershare.com
127.0.0.1 macplatform.wondershare.com
127.0.0.1 cbs.wondershare.com
127.0.0.1 us.wondershare.com
127.0.0.1 my.wondershare.com
127.0.0.1 pop.wondershare.com
127.0.0.1 idb.iobit.com
127.0.0.1 asc55.iobit.com
127.0.0.1 is360.iobit.com
127.0.0.1 asc.iobit.com
127.0.0.1 pf.iobit.com
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-579553617-55138302-560361482-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mouaad\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 8.8.4.4 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKU\S-1-5-21-579553617-55138302-560361482-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{27D893C2-81FE-4406-AFA4-130833D2FEC8}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{10E91B03-CA8E-4EF2-837B-749C452C811C}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{2831BC6B-FFB2-490C-BF5A-190BCB204A55}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{15BA78AF-3F8E-41F6-AE77-1815CAD5BBCF}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{CEB3C902-21AD-4AB1-8446-BB62D131E501}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FB09E82-F1EF-4DB7-BE8D-785C19FBAACC}] => (Allow) C:\Program Files (x86)\Nox\Nox\bin\Nox.exe
FirewallRules: [{9469F521-1353-40C8-A487-D4DB03AF24C5}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{2EA81580-6E8F-4656-866C-B74CEF0A9613}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{D37DF313-15AE-433C-9DC4-9B7D4A9EA3BC}] => (Allow) C:\Program Files (x86)\BitTorrent\bittorrent.exe
FirewallRules: [{7CFC6AF0-2F58-4A67-BF2B-2E8F4FA28B38}] => (Allow) C:\Program Files (x86)\BitTorrent\bittorrent.exe
FirewallRules: [{D44BD51D-791E-4E2D-AAB6-5628DD81D542}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{CBC36A23-3FE1-4CDA-BE16-B353E258DA75}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{EF8D5B4C-11E2-4763-A23B-0BCEF6BBAF86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{F176C434-991A-4539-926B-36D9B8E3AEDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{59509E67-7686-4681-AD0E-E034CF521B95}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{C7841EFC-771D-4282-BFE4-30B1F8D8EA7A}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{74A3EA7C-3FFE-475B-B258-0971F06AC07D}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [{A5E643C4-5042-4546-BEEB-4965AA24E934}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{5AFED3D7-2352-4288-9E77-5783466BCD11}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{46BB47C1-9EEB-4A90-9560-51944F25A7D9}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{BBBB9508-D4A2-4D5C-B54A-1B05E283FD58}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [TCP Query User{91B71B17-6FC6-4A24-B427-F740873B11C2}E:\battlefield 1 ultimate edition\bf1.exe] => (Allow) E:\battlefield 1 ultimate edition\bf1.exe
FirewallRules: [UDP Query User{32357B02-A5E5-4FD3-BB5D-B777D56DD1B1}E:\battlefield 1 ultimate edition\bf1.exe] => (Allow) E:\battlefield 1 ultimate edition\bf1.exe
FirewallRules: [{49DED3E0-ECCB-4DEE-8D59-F6315987ED45}] => (Allow) C:\Program Files (x86)\REALTEK\Wireless LAN Utility\RtWLan.exe
FirewallRules: [{80863A40-E7D5-4A2C-B088-DDA214098791}] => (Allow) C:\Program Files (x86)\REALTEK\Wireless LAN Utility\RtWLan.exe
FirewallRules: [{2DC620F9-25B1-46D6-B4F8-6C5087312829}] => (Allow) LPort=1542
FirewallRules: [{EEB63313-4C8C-4F33-ADB9-B01B7C5BABCB}] => (Allow) LPort=1542
FirewallRules: [{1AB9FECE-7B31-42FB-8C27-E15680F8F905}] => (Allow) LPort=53
FirewallRules: [TCP Query User{5837B497-2126-4ED3-AE58-0B27E38B434F}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [UDP Query User{7F407F53-6A06-40D1-AC93-5898B2CBE3E7}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [TCP Query User{7F2CDDD7-EE3B-450B-B23E-5F3C7DC103C4}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{DA4B7C17-8345-4BE1-82E4-79B36565D128}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{7B3A8169-9638-4CDA-B03A-6B815E02114A}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [UDP Query User{19EF6A46-258B-4267-AF90-FDC03FAFA379}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [TCP Query User{5DFE545B-51B2-42F9-8970-12012C67DA0F}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Allow) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [UDP Query User{42CE0546-4F6C-46C9-A961-AE69021E9C37}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Allow) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [TCP Query User{08E88EB6-AFED-448C-B7D7-F76515958510}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [UDP Query User{159F0EE3-2F7D-4F47-92CF-3BF07FEE2A44}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [TCP Query User{31C01888-B9E3-4EF4-8529-37F1E9BB60D3}C:\program files (x86)\wondershare\mobilego\mobilego.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilego.exe
FirewallRules: [UDP Query User{8DBDB343-8E72-4A25-850C-1CE84857DE11}C:\program files (x86)\wondershare\mobilego\mobilego.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilego.exe
FirewallRules: [TCP Query User{DF26B706-4A35-4DC2-A793-597722FBB113}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [UDP Query User{A40122C3-3B9B-48A1-B54B-1F531786D825}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{82015C87-3D30-4884-90FB-E76116807A71}] => (Allow) C:\Users\Mouaad\AppData\Local\Temp\recinstalldl\RecInst.exe
FirewallRules: [{8C78B3AA-A405-4A9F-884E-1ECBA5C665C5}] => (Allow) C:\Users\Mouaad\AppData\Local\Temp\recinstalldl\RecInst.exe
FirewallRules: [TCP Query User{F5B391AE-5E1B-410A-A0BF-BD77EA4D7A27}C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe] => (Block) C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe
FirewallRules: [UDP Query User{D9E06147-4778-4B1B-A1B0-A98123CA7656}C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe] => (Block) C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe
FirewallRules: [TCP Query User{D9FD9051-4227-4509-8901-5522A9674182}C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [UDP Query User{12A3DE83-623C-47F3-B6A3-708794CBE8F9}C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [{E2E7DA60-F89D-449A-BA57-433C53F8EFCA}] => (Block) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [{98B24311-A19A-403F-B4C3-2F5002E17EDC}] => (Block) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [TCP Query User{7B3D6AE2-4C4D-4732-9E25-B85FB86C34DD}C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe
FirewallRules: [UDP Query User{8E52E81B-4192-4F97-A707-AEA494BE5323}C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe
FirewallRules: [TCP Query User{4589B663-483E-46E5-8E7B-B852AACEBA35}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Block) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [UDP Query User{E7068897-970E-4CA7-A891-9FC8607F5797}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Block) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [{0120B23A-80F3-473B-84E9-E93E5926DF70}] => (Allow) C:\Program Files (x86)\MIO\loader\toshibaxmq01abd100_63nfp3detxx63nfp3det.dat
FirewallRules: [{B46F450E-D1EF-4690-B6DD-D6678D8B3804}] => (Allow) C:\Program Files (x86)\MIO\loader\toshibaxmq01abd100_63nfp3detxx63nfp3det.dat
FirewallRules: [{C77725E4-508B-4CD5-98C4-2B138534FE72}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BEA45EFC-8B55-42E8-B5F6-0DB268F89A13}] => (Allow) C:\Program Files (x86)\Boxbob\Application\chrome.exe
==================== Points de restauration =========================
21-04-2017 12:44:08 Installé MOBILedit! Support Libraries
21-04-2017 16:51:59 JRT Pre-Junkware Removal
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Périphérique système de base
Description: Périphérique système de base
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Périphérique système de base
Description: Périphérique système de base
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (04/22/2017 11:37:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante wmiprvse.exe, version : 10.0.14393.0, horodatage : 0x57899ab2
Nom du module défaillant : ntdll.dll, version : 10.0.14393.479, horodatage : 0x5825887f
Code d’exception : 0xc0000374
Décalage d’erreur : 0x00000000000f8283
ID du processus défaillant : 0x1980
Heure de début de l’application défaillante : 0x01d2bb4be577a035
Chemin d’accès de l’application défaillante : C:\Windows\system32\wbem\wmiprvse.exe
Chemin d’accès du module défaillant: C:\Windows\SYSTEM32\ntdll.dll
ID de rapport : 600663d3-763d-4661-b043-d8768360d572
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/22/2017 11:37:04 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 11:37:04 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 11:36:43 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 11:36:43 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 09:23:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante RogueKiller64.exe, version : 12.10.5.0, horodatage : 0x58f60bd9
Nom du module défaillant : RogueKiller64.exe, version : 12.10.5.0, horodatage : 0x58f60bd9
Code d’exception : 0x40000015
Décalage d’erreur : 0x0000000000a96269
ID du processus défaillant : 0x10e4
Heure de début de l’application défaillante : 0x01d2baf1c5fdf393
Chemin d’accès de l’application défaillante : C:\Program Files\RogueKiller\RogueKiller64.exe
Chemin d’accès du module défaillant: C:\Program Files\RogueKiller\RogueKiller64.exe
ID de rapport : 985c99aa-8b76-4164-9ed0-4c0f58b77496
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/22/2017 04:53:42 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: La création du contexte d’activation a échoué pour « c:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\uplay_download\413\support\InsHelper.exe ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\uplay_download\413\support\InsHelper.exe » à la ligne 0.
Syntaxe XML non valide.
Error: (04/22/2017 01:50:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante wmiprvse.exe, version : 10.0.14393.0, horodatage : 0x57899ab2
Nom du module défaillant : msvcrt.dll, version : 7.0.14393.0, horodatage : 0x57899b47
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000005b1bd
ID du processus défaillant : 0x2130
Heure de début de l’application défaillante : 0x01d2baf9f42a42c3
Chemin d’accès de l’application défaillante : C:\Windows\system32\wbem\wmiprvse.exe
Chemin d’accès du module défaillant: C:\Windows\System32\msvcrt.dll
ID de rapport : 06b75272-75d5-44c9-8ca3-07b6f69b67b8
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/22/2017 01:50:30 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 01:50:30 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Erreurs système:
=============
Error: (04/22/2017 01:20:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (04/22/2017 01:18:51 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
et l’APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/22/2017 01:18:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service 3DM s’est arrêté avec l’erreur :
Le fichier spécifié est introuvable.
Error: (04/22/2017 01:17:44 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/22/2017 11:38:12 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{3185A766-B338-11E4-A71E-12E3F512A338}
et l’APPID
{7006698D-2974-4091-A424-85DD0B909E23}
au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/22/2017 09:27:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Update Service(FirefoxU) n’a pas pu démarrer en raison de l’erreur :
Le chemin d’accès spécifié est introuvable.
Error: (04/22/2017 09:22:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Update Service(FirefoxU) s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 300000 millisecondes : Redémarrer le service.
Error: (04/22/2017 12:42:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service IMF Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (04/21/2017 11:06:14 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/21/2017 04:53:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 1000 millisecondes : Redémarrer le service.
CodeIntegrity:
===================================
Date: 2017-04-20 23:49:34.746
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_289a34d2afeb4cf6\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-20 23:49:34.468
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:54:25.609
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_289a34d2afeb4cf6\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:54:25.285
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:39.059
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:39.028
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.629
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.561
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.358
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.305
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i7-3632QM CPU @ 2.20GHz
Pourcentage de mémoire utilisée: 29%
Mémoire physique - RAM - totale: 8010.35 MB
Mémoire physique - RAM - disponible: 5671.93 MB
Mémoire virtuelle totale: 8522.35 MB
Mémoire virtuelle disponible: 6192.69 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:291.83 GB) (Free:23.53 GB) NTFS
Drive e: () (Fixed) (Total:638.54 GB) (Free:256.62 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9D839A31)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=291.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=819 MB) - (Type=27)
Partition 4: (Not Active) - (Size=638.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================
Exécuté par Mouaad (22-04-2017 13:45:20)
Exécuté depuis C:\Users\Mouaad\Desktop
Windows 10 Pro Version 1607 (X64) (2017-03-08 21:54:15)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-579553617-55138302-560361482-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-579553617-55138302-560361482-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-579553617-55138302-560361482-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-579553617-55138302-560361482-501 - Limited - Disabled)
Mouaad (S-1-5-21-579553617-55138302-560361482-1001 - Administrator - Enabled) => C:\Users\Mouaad
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 17.009.20044 - Adobe Systems Incorporated)
Adobe Flash Player 25 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 25.0.0.148 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.0 (HKLM-x32\...\{AA3B06B1-E89A-43C6-A26B-7109DB4BEE7B}) (Version: 12.0.7.148 - Adobe Systems, Inc)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.3.7 - Sereby Corporation)
American Truck Simulator version 1.1.1.1s (HKLM-x32\...\{20664E10-DEE9-404E-BFEF-1043B2BA76CF}_is1) (Version: 1.1.1.1s - REVOLUTiONiT)
Ansel (Version: 381.65 - NVIDIA Corporation) Hidden
Battlefield 1 Ultimate Edition version 1.0 Update 3 (HKLM-x32\...\Battlefield 1 Ultimate Edition_is1) (Version: 1.0 Update 3 - GMT-MAX.ORG)
BitTorrent (HKLM-x32\...\BitTorrent) (Version: - BitTorrent, Inc)
CCleaner (HKLM\...\CCleaner) (Version: 5.28 - Piriform)
DirectX 9.0c Extra Files (x86, x64) (HKLM\...\{8729E65B-8C12-4A42-B1FE-E4DA7ED52855}_is1) (Version: 1.10.06.0 - Sereby Corporation)
DirectX for Managed Code (HKLM\...\{FDF7187F-3960-4BEC-916D-98C9A83E3A68}_is1) (Version: 1.0.0.0 - Sereby Corporation)
DiRT Rally (HKLM-x32\...\DiRT Rally_is1) (Version: - )
GOM Player (HKLM-x32\...\GOM Player) (Version: 2.3.12.5268 - Gretech Corporation)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 58.0.3029.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.33.3 - Google Inc.) Hidden
Grand Theft Auto IV (HKLM-x32\...\{579BA58C-F33D-4970-9953-B94B43768AC3}) (Version: 1.00.0000 - Rockstar Games)
Grand Theft Auto IV (x32 Version: 1.0.0013.131 - Rockstar Games Inc.) Hidden
Grand Theft Auto V version v.1.0.350.1 (HKLM-x32\...\Grand Theft Auto V_is1) (Version: v.1.0.350.1 - GMT-MAX.ORG)
GRID Autosport Complete Edition (HKLM\...\Z3JpZGF1dG9zcG9ydA_is1) (Version: 1 - )
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.2.1410 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4425 - Intel Corporation)
Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java 8 Update 121 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180121F0}) (Version: 8.0.1210.13 - Oracle Corporation)
K-Lite Codec Pack 12.9.5 Basic (HKLM-x32\...\KLiteCodecPack_is1) (Version: 12.9.5 - KLCP)
Malwarebytes Anti-Malware version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2698023) (HKLM-x32\...\M2698023) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB2833941) (HKLM-x32\...\M2833941) (Version: - )
Microsoft .NET Framework 1.1 Security Update (KB979906) (HKLM-x32\...\M979906) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: - )
Microsoft .NET Framework 1.1 SP1 (HKLM\...\Microsoft .NET Framework 1.1 (1033)) (Version: - )
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{59E4543A-D49D-4489-B445-473D763C79AF}) (Version: 2.0.672.0 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 (HKLM-x32\...\Office15.PROPLUSR) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.20913.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60830 (HKLM-x32\...\{9dba0447-b749-41ea-90bc-2aa19a9eb580}) (Version: 11.0.60830.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Minimal ADB and Fastboot version 1.4 (HKLM-x32\...\{C5564379-582D-457A-9E68-A9E7C1F1C4EC}_is1) (Version: 1.4 - Sam Rodberg)
Minimal ADB and Fastboot version 1.4.2 (HKLM-x32\...\{1901BAF7-7E78-4041-BC88-D0EE5DD1DFD9}_is1) (Version: 1.4.2 - Sam Rodberg)
Mises à jour NVIDIA 24.0.0.0 (Version: 24.0.0.0 - NVIDIA Corporation) Hidden
Mozilla Firefox 19.0.2 (x86 fr) (HKLM-x32\...\Mozilla Firefox 19.0.2 (x86 fr)) (Version: 19.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 19.0.2 - Mozilla)
Need for Speed: Most Wanted (HKLM-x32\...\Need for Speed: Most Wanted_is1) (Version: - )
Nox APP Player (HKLM-x32\...\Nox) (Version: 3.7.1.0 - Duodian Technology Co. Ltd.)
NVIDIA GeForce Experience 3.5.0.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.5.0.70 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0329 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0329 - NVIDIA Corporation)
NVIDIA Pilote graphique 381.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 381.65 - NVIDIA Corporation)
NvNodejs (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 2.4.5.0 - NVIDIA Corporation) Hidden
NvvHci (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
OpenIV (HKU\S-1-5-21-579553617-55138302-560361482-1001\...\OpenIV) (Version: 2.8.703 - .black/OpenIV Team)
Origin (HKLM-x32\...\Origin) (Version: 10.4.5.30491 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office - Français (x32 Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Package de pilotes Windows - Google, Inc. (WinUSB) AndroidUsbDeviceClass (01/27/2014 9.0.0000.00000) (HKLM\...\9CA77E2A8332A0824C54DA611BBE4CA24AB1F750) (Version: 01/27/2014 9.0.0000.00000 - Google, Inc.)
Panneau de configuration NVIDIA 381.65 (Version: 381.65 - NVIDIA Corporation) Hidden
Project CARS version build 1001 (HKLM-x32\...\Project CARS_is1) (Version: build 1001 - GMT-MAX.ORG)
RAR Password Unlocker 4.2.0.0 (HKLM-x32\...\{B789FA51-6A71-408F-92DE-EDE4A517B8F9}_is1) (Version: - Password Unlocker Studio)
REALTEK Wireless LAN Driver and Utility (HKLM-x32\...\{0DF70CB6-553A-4C57-8E6D-876322ECFB78}) (Version: 1.00.0179 - REALTEK Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
RogueKiller version 12.10.5.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 12.10.5.0 - Adlice Software)
SHIELD Streaming (Version: 7.1.0360 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.5.0.70 - NVIDIA Corporation) Hidden
Skype™ 7.33 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.33.105 - Skype Technologies S.A.)
SpyHunter (HKLM-x32\...\{4FC9DA9D-F608-454E-8191-D7EFFDCC5726}) (Version: 4.1.11 - Enigma Software Group USA, LLC)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.1.3.6 - Synaptics Incorporated)
Test Drive Unlimited 2 (HKLM-x32\...\Test Drive Unlimited 2_is1) (Version: - )
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft)
Ultra Street Fighter IV (HKLM-x32\...\{118A259C-6535-4DC2-AA22-7C9CE4AB0D68}_is1) (Version: 2.0.0.3630 - Capcom)
Uplay (HKLM-x32\...\Uplay) (Version: 29.0 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
Windows Driver Package - BigNox Corporation (VBoxUSB) USB (09/16/2015 4.3.12) (HKLM\...\76B144D15273552931249392EDB13C0BBD52C84E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation VBoxUSBMon System (09/16/2015 4.3.12) (HKLM\...\39F54A37125643D2E1E90FA7D81F36ACC9441510) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
Windows Driver Package - BigNox Corporation XQHDrv System (09/16/2015 4.3.12) (HKLM\...\0147813640F7AF69F569581EE672B6BE1E71798E) (Version: 09/16/2015 4.3.12 - BigNox Corporation)
WinPcap 4.1.2 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2001 - CACE Technologies)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\Windows\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Mouaad\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll => Pas de (l'élément de données a 7 caractères en plus).
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Mouaad\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll => Pas de (l'élément de données a 7 caractères en plus).
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-579553617-55138302-560361482-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Mouaad\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\amd64\FileSyncShell64.dll => Pas de (l'élément de données a 7 caractères en plus).
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {0A316F01-82BE-45E3-83E2-65074A07D59E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-01] (Google Inc.)
Task: {0B9860BE-7091-42CC-8089-67A10FAA5927} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {0F7CFEBD-D37A-457B-8B93-B456D926E01D} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-28] (NVIDIA Corporation)
Task: {1198C26F-5778-453C-96B9-D6377577E3DF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-03-28] (NVIDIA Corporation)
Task: {1947CA70-09BD-4A05-8697-679CB195F099} - System32\Tasks\{8E1173DE-F2C7-4779-A905-F14D3F29D8CD} => Chrome.exe hxxp://ui.skype.com/ui/0/6.16.0.105/fr/go/help.faq.installer?LastError=1618
Task: {1C6542B3-51E1-4F9F-9B69-96215335A038} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-04-01] (Google Inc.)
Task: {2F4460B7-616A-48C4-9B69-3CA8204859DB} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-02-02] (Adobe Systems Incorporated)
Task: {39F6C9C8-CB06-45BB-95F0-40B71EE07947} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-28] (NVIDIA Corporation)
Task: {42EE299F-9AFD-4C6F-83E8-5DEDF1111236} - \OneDrive Standalone Update Task v2 -> Pas de fichier <==== ATTENTION
Task: {506841E2-CC4C-43DE-A3BF-3F16E4A416AE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {53A04FF8-6AF7-4590-9249-C86571775792} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-03-28] (NVIDIA Corporation)
Task: {55A9D6F8-AD43-4DA0-B7D9-902C7C6D5CE0} - \Phijiing -> Pas de fichier <==== ATTENTION
Task: {5902F3CB-2E9F-43CD-8034-DF99E1852E2D} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\Explorer.exe /NOUACCHECK
Task: {7AD46E9E-F21D-4AF0-98A6-FF3E4A93E381} - System32\Tasks\R@1n-KMS\Office15ProPlus => wmic
Task: {93DF3028-50F5-4AE5-8601-44D204E655E4} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => %ProgramFiles%\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {986E5A87-B15D-429A-A988-9D3C5AA667FD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-03-28] (NVIDIA Corporation)
Task: {A2912F32-3DD7-48B8-90B9-595C094D0C6B} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {A728B828-F576-4CA0-81C2-79666D09448E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {A75EF7EF-D1B3-4F95-A54B-B06CB1EB8452} - System32\Tasks\R@1n-KMS\Windows100Professional => wmic
Task: {A8271491-0D75-4A8C-B88A-616D4AADEDBB} - \Pruhosh System -> Pas de fichier <==== ATTENTION
Task: {A88C3084-0F4D-4208-9B7B-BE0355E81A07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {A8A830BB-4D5A-41B9-9925-5DFCFF06A4EF} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-03-28] (NVIDIA Corporation)
Task: {C4BED62B-4A9B-45FD-BDE8-EC9E3C533D7E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-04-11] (Adobe Systems Incorporated)
Task: {D75D9D93-94A7-409F-91A9-7DC62EC747B3} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-03-28] (NVIDIA Corporation)
Task: {EADF5EB9-CED0-409E-9A77-80AB76AD8B2F} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-03-03] (Piriform Ltd)
Task: {F53D3329-F7F7-45EA-A794-ED2C0A91598C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-03-04] (Microsoft Corporation)
Task: {F9C4B959-CDDA-41DD-8B23-05B849FABA5F} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [2017-02-21] ()
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
==================== Raccourcis =============================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
Shortcut: C:\Users\Mouaad\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\360c22b137d62ce9\Google Chrome.lnk -> C:\Program Files (x86)\Boxbob\Application\chrome.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files (x86)\Boxbob\Application\chrome.exe (Google Inc.)
==================== Modules chargés (Avec liste blanche) ==============
2016-07-16 13:42 - 2016-07-16 13:42 - 00231424 _____ () C:\Windows\SYSTEM32\ism32k.dll
2017-04-11 20:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\system32\CoreUIComponents.dll
2017-03-11 12:59 - 2017-03-28 05:32 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-11 20:31 - 2017-03-04 09:19 - 02681200 _____ () C:\Windows\SYSTEM32\CoreUIComponents.dll
2016-10-31 21:45 - 2016-10-31 21:45 - 00592384 _____ () C:\ProgramData\MEGAsync\ShellExtX64.dll
2017-02-16 21:04 - 2017-02-16 21:04 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-04-11 20:33 - 2017-03-04 08:31 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-04-11 20:30 - 2017-03-04 08:12 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-04-11 20:30 - 2017-03-04 08:05 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-04-11 20:30 - 2017-03-04 08:08 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-04-11 13:17 - 2016-03-31 17:57 - 00625440 _____ () C:\Program Files (x86)\IObit\LiveUpdate\ProductStatistics.dll
2017-03-11 12:59 - 2017-03-28 05:32 - 00900032 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-21 11:25 - 2017-04-21 05:38 - 00108544 _____ () c:\programdata\microsoft\onedrive\uploader.dll
2017-03-11 12:59 - 2017-03-21 06:27 - 02442176 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00363576 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00254008 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00385592 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00469048 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2017-03-11 12:59 - 2017-03-21 06:27 - 00571840 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2017-04-21 11:25 - 2017-04-21 05:38 - 00108544 _____ () C:\ProgramData\Microsoft\OneDrive\Uploader.dll
2017-04-21 11:25 - 2017-03-09 07:31 - 02187096 _____ () C:\Program Files (x86)\Boxbob\Application\libglesv2.dll
2017-04-21 11:25 - 2017-03-09 07:31 - 00086360 _____ () C:\Program Files (x86)\Boxbob\Application\libegl.dll
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-07-16 13:47 - 2017-04-22 00:36 - 00001253 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 api.wondershare.com
127.0.0.1 a1737.g.akamai.net
127.0.0.1 wondershare.cn.edgesuite.net
127.0.0.1 platform.wondershare.com
127.0.0.1 macplatform.wondershare.com
127.0.0.1 cbs.wondershare.com
127.0.0.1 us.wondershare.com
127.0.0.1 my.wondershare.com
127.0.0.1 pop.wondershare.com
127.0.0.1 idb.iobit.com
127.0.0.1 asc55.iobit.com
127.0.0.1 is360.iobit.com
127.0.0.1 asc.iobit.com
127.0.0.1 pf.iobit.com
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-579553617-55138302-560361482-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Mouaad\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 8.8.4.4 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
HKLM\...\StartupApproved\Run: => "WindowsDefender"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "IObit Malware Fighter"
HKU\S-1-5-21-579553617-55138302-560361482-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{27D893C2-81FE-4406-AFA4-130833D2FEC8}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{10E91B03-CA8E-4EF2-837B-749C452C811C}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe
FirewallRules: [{2831BC6B-FFB2-490C-BF5A-190BCB204A55}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{15BA78AF-3F8E-41F6-AE77-1815CAD5BBCF}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe
FirewallRules: [{CEB3C902-21AD-4AB1-8446-BB62D131E501}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6FB09E82-F1EF-4DB7-BE8D-785C19FBAACC}] => (Allow) C:\Program Files (x86)\Nox\Nox\bin\Nox.exe
FirewallRules: [{9469F521-1353-40C8-A487-D4DB03AF24C5}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{2EA81580-6E8F-4656-866C-B74CEF0A9613}] => (Allow) C:\Program Files (x86)\BitTorrent\BitTorrent.exe
FirewallRules: [{D37DF313-15AE-433C-9DC4-9B7D4A9EA3BC}] => (Allow) C:\Program Files (x86)\BitTorrent\bittorrent.exe
FirewallRules: [{7CFC6AF0-2F58-4A67-BF2B-2E8F4FA28B38}] => (Allow) C:\Program Files (x86)\BitTorrent\bittorrent.exe
FirewallRules: [{D44BD51D-791E-4E2D-AAB6-5628DD81D542}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{CBC36A23-3FE1-4CDA-BE16-B353E258DA75}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{EF8D5B4C-11E2-4763-A23B-0BCEF6BBAF86}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{F176C434-991A-4539-926B-36D9B8E3AEDC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{59509E67-7686-4681-AD0E-E034CF521B95}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{C7841EFC-771D-4282-BFE4-30B1F8D8EA7A}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{74A3EA7C-3FFE-475B-B258-0971F06AC07D}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [{A5E643C4-5042-4546-BEEB-4965AA24E934}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [{5AFED3D7-2352-4288-9E77-5783466BCD11}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{46BB47C1-9EEB-4A90-9560-51944F25A7D9}] => (Allow) C:\Program Files (x86)\FormatFactory\FormatFactory.exe
FirewallRules: [{BBBB9508-D4A2-4D5C-B54A-1B05E283FD58}] => (Allow) C:\Program Files (x86)\FormatFactory\FFModules\Encoder\Doc\EBookCodec.exe
FirewallRules: [TCP Query User{91B71B17-6FC6-4A24-B427-F740873B11C2}E:\battlefield 1 ultimate edition\bf1.exe] => (Allow) E:\battlefield 1 ultimate edition\bf1.exe
FirewallRules: [UDP Query User{32357B02-A5E5-4FD3-BB5D-B777D56DD1B1}E:\battlefield 1 ultimate edition\bf1.exe] => (Allow) E:\battlefield 1 ultimate edition\bf1.exe
FirewallRules: [{49DED3E0-ECCB-4DEE-8D59-F6315987ED45}] => (Allow) C:\Program Files (x86)\REALTEK\Wireless LAN Utility\RtWLan.exe
FirewallRules: [{80863A40-E7D5-4A2C-B088-DDA214098791}] => (Allow) C:\Program Files (x86)\REALTEK\Wireless LAN Utility\RtWLan.exe
FirewallRules: [{2DC620F9-25B1-46D6-B4F8-6C5087312829}] => (Allow) LPort=1542
FirewallRules: [{EEB63313-4C8C-4F33-ADB9-B01B7C5BABCB}] => (Allow) LPort=1542
FirewallRules: [{1AB9FECE-7B31-42FB-8C27-E15680F8F905}] => (Allow) LPort=53
FirewallRules: [TCP Query User{5837B497-2126-4ED3-AE58-0B27E38B434F}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [UDP Query User{7F407F53-6A06-40D1-AC93-5898B2CBE3E7}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [TCP Query User{7F2CDDD7-EE3B-450B-B23E-5F3C7DC103C4}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{DA4B7C17-8345-4BE1-82E4-79B36565D128}C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\gmt-max.org\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{7B3A8169-9638-4CDA-B03A-6B815E02114A}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [UDP Query User{19EF6A46-258B-4267-AF90-FDC03FAFA379}E:\games\need for speed - most wanted\nfs13.exe] => (Allow) E:\games\need for speed - most wanted\nfs13.exe
FirewallRules: [TCP Query User{5DFE545B-51B2-42F9-8970-12012C67DA0F}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Allow) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [UDP Query User{42CE0546-4F6C-46C9-A961-AE69021E9C37}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Allow) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [TCP Query User{08E88EB6-AFED-448C-B7D7-F76515958510}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [UDP Query User{159F0EE3-2F7D-4F47-92CF-3BF07FEE2A44}C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilegoservice.exe
FirewallRules: [TCP Query User{31C01888-B9E3-4EF4-8529-37F1E9BB60D3}C:\program files (x86)\wondershare\mobilego\mobilego.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilego.exe
FirewallRules: [UDP Query User{8DBDB343-8E72-4A25-850C-1CE84857DE11}C:\program files (x86)\wondershare\mobilego\mobilego.exe] => (Allow) C:\program files (x86)\wondershare\mobilego\mobilego.exe
FirewallRules: [TCP Query User{DF26B706-4A35-4DC2-A793-597722FBB113}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [UDP Query User{A40122C3-3B9B-48A1-B54B-1F531786D825}C:\program files (x86)\kodi\kodi.exe] => (Allow) C:\program files (x86)\kodi\kodi.exe
FirewallRules: [{82015C87-3D30-4884-90FB-E76116807A71}] => (Allow) C:\Users\Mouaad\AppData\Local\Temp\recinstalldl\RecInst.exe
FirewallRules: [{8C78B3AA-A405-4A9F-884E-1ECBA5C665C5}] => (Allow) C:\Users\Mouaad\AppData\Local\Temp\recinstalldl\RecInst.exe
FirewallRules: [TCP Query User{F5B391AE-5E1B-410A-A0BF-BD77EA4D7A27}C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe] => (Block) C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe
FirewallRules: [UDP Query User{D9E06147-4778-4B1B-A1B0-A98123CA7656}C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe] => (Block) C:\users\mouaad\appdata\local\ucbrowser\user data_i18n\thunder\1.0.0.0\download\minithunderplatform.exe
FirewallRules: [TCP Query User{D9FD9051-4227-4509-8901-5522A9674182}C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [UDP Query User{12A3DE83-623C-47F3-B6A3-708794CBE8F9}C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [{E2E7DA60-F89D-449A-BA57-433C53F8EFCA}] => (Block) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [{98B24311-A19A-403F-B4C3-2F5002E17EDC}] => (Block) C:\program files (x86)\atari\test drive unlimited 2\uplauncher.exe
FirewallRules: [TCP Query User{7B3D6AE2-4C4D-4732-9E25-B85FB86C34DD}C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe
FirewallRules: [UDP Query User{8E52E81B-4192-4F97-A707-AEA494BE5323}C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe] => (Allow) C:\program files (x86)\atari\test drive unlimited 2\testdrive2.exe
FirewallRules: [TCP Query User{4589B663-483E-46E5-8E7B-B852AACEBA35}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Block) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [UDP Query User{E7068897-970E-4CA7-A891-9FC8607F5797}C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe] => (Block) C:\program files (x86)\electronic arts\shift 2 unleashed\shift2u.exe
FirewallRules: [{0120B23A-80F3-473B-84E9-E93E5926DF70}] => (Allow) C:\Program Files (x86)\MIO\loader\toshibaxmq01abd100_63nfp3detxx63nfp3det.dat
FirewallRules: [{B46F450E-D1EF-4690-B6DD-D6678D8B3804}] => (Allow) C:\Program Files (x86)\MIO\loader\toshibaxmq01abd100_63nfp3detxx63nfp3det.dat
FirewallRules: [{C77725E4-508B-4CD5-98C4-2B138534FE72}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{BEA45EFC-8B55-42E8-B5F6-0DB268F89A13}] => (Allow) C:\Program Files (x86)\Boxbob\Application\chrome.exe
==================== Points de restauration =========================
21-04-2017 12:44:08 Installé MOBILedit! Support Libraries
21-04-2017 16:51:59 JRT Pre-Junkware Removal
==================== Éléments en erreur du Gestionnaire de périphériques =============
Name: Périphérique système de base
Description: Périphérique système de base
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: Périphérique système de base
Description: Périphérique système de base
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (04/22/2017 11:37:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante wmiprvse.exe, version : 10.0.14393.0, horodatage : 0x57899ab2
Nom du module défaillant : ntdll.dll, version : 10.0.14393.479, horodatage : 0x5825887f
Code d’exception : 0xc0000374
Décalage d’erreur : 0x00000000000f8283
ID du processus défaillant : 0x1980
Heure de début de l’application défaillante : 0x01d2bb4be577a035
Chemin d’accès de l’application défaillante : C:\Windows\system32\wbem\wmiprvse.exe
Chemin d’accès du module défaillant: C:\Windows\SYSTEM32\ntdll.dll
ID de rapport : 600663d3-763d-4661-b043-d8768360d572
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/22/2017 11:37:04 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 11:37:04 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 11:36:43 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 11:36:43 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 09:23:21 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante RogueKiller64.exe, version : 12.10.5.0, horodatage : 0x58f60bd9
Nom du module défaillant : RogueKiller64.exe, version : 12.10.5.0, horodatage : 0x58f60bd9
Code d’exception : 0x40000015
Décalage d’erreur : 0x0000000000a96269
ID du processus défaillant : 0x10e4
Heure de début de l’application défaillante : 0x01d2baf1c5fdf393
Chemin d’accès de l’application défaillante : C:\Program Files\RogueKiller\RogueKiller64.exe
Chemin d’accès du module défaillant: C:\Program Files\RogueKiller\RogueKiller64.exe
ID de rapport : 985c99aa-8b76-4164-9ed0-4c0f58b77496
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/22/2017 04:53:42 AM) (Source: SideBySide) (EventID: 59) (User: )
Description: La création du contexte d’activation a échoué pour « c:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\uplay_download\413\support\InsHelper.exe ». Erreur dans le fichier de manifeste ou de stratégie « c:\program files (x86)\ubisoft\ubisoft game launcher\games\the crew (worldwide)\uplay_download\413\support\InsHelper.exe » à la ligne 0.
Syntaxe XML non valide.
Error: (04/22/2017 01:50:44 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante wmiprvse.exe, version : 10.0.14393.0, horodatage : 0x57899ab2
Nom du module défaillant : msvcrt.dll, version : 7.0.14393.0, horodatage : 0x57899b47
Code d’exception : 0xc0000005
Décalage d’erreur : 0x000000000005b1bd
ID du processus défaillant : 0x2130
Heure de début de l’application défaillante : 0x01d2baf9f42a42c3
Chemin d’accès de l’application défaillante : C:\Windows\system32\wbem\wmiprvse.exe
Chemin d’accès du module défaillant: C:\Windows\System32\msvcrt.dll
ID de rapport : 06b75272-75d5-44c9-8ca3-07b6f69b67b8
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (04/22/2017 01:50:30 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Error: (04/22/2017 01:50:30 AM) (Source: Microsoft Security Client) (EventID: 5000) (User: )
Description: Event-ID 5000
Erreurs système:
=============
Error: (04/22/2017 01:20:50 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (04/22/2017 01:18:51 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
et l’APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/22/2017 01:18:48 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service 3DM s’est arrêté avec l’erreur :
Le fichier spécifié est introuvable.
Error: (04/22/2017 01:17:44 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/22/2017 11:38:12 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{3185A766-B338-11E4-A71E-12E3F512A338}
et l’APPID
{7006698D-2974-4091-A424-85DD0B909E23}
au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/22/2017 09:27:17 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Update Service(FirefoxU) n’a pas pu démarrer en raison de l’erreur :
Le chemin d’accès spécifié est introuvable.
Error: (04/22/2017 09:22:17 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service Update Service(FirefoxU) s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 300000 millisecondes : Redémarrer le service.
Error: (04/22/2017 12:42:53 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service IMF Service s’est terminé de façon inattendue pour la 1ème fois.
Error: (04/21/2017 11:06:14 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (04/21/2017 04:53:23 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Le service NVIDIA LocalSystem Container s’est terminé de manière inattendue. Ceci s’est produit 1 fois. L’action corrective suivante va être effectuée dans 1000 millisecondes : Redémarrer le service.
CodeIntegrity:
===================================
Date: 2017-04-20 23:49:34.746
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_289a34d2afeb4cf6\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-20 23:49:34.468
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:54:25.609
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Windows\System32\DriverStore\FileRepository\nvaci.inf_amd64_289a34d2afeb4cf6\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:54:25.285
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:39.059
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:39.028
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.629
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.561
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.358
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-04-19 23:40:38.305
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i7-3632QM CPU @ 2.20GHz
Pourcentage de mémoire utilisée: 29%
Mémoire physique - RAM - totale: 8010.35 MB
Mémoire physique - RAM - disponible: 5671.93 MB
Mémoire virtuelle totale: 8522.35 MB
Mémoire virtuelle disponible: 6192.69 MB
==================== Lecteurs ================================
Drive c: () (Fixed) (Total:291.83 GB) (Free:23.53 GB) NTFS
Drive e: () (Fixed) (Total:638.54 GB) (Free:256.62 GB) NTFS
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9D839A31)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=291.8 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=819 MB) - (Type=27)
Partition 4: (Not Active) - (Size=638.5 GB) - (Type=07 NTFS)
==================== Fin de Addition.txt ============================