Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 29-09-2017
Exécuté par Micka (01-10-2017 09:21:06)
Exécuté depuis D:\SAINT\Desktop
Windows 10 Home Version 1703 (X64) (2017-07-17 15:26:38)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-1874849270-505753750-1503647204-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1874849270-505753750-1503647204-503 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1874849270-505753750-1503647204-1003 - Limited - Enabled)
Invité (S-1-5-21-1874849270-505753750-1503647204-501 - Limited - Disabled)
Micka (S-1-5-21-1874849270-505753750-1503647204-1001 - Administrator - Enabled) => C:\Users\Micka

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

µTorrent (HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\uTorrent) (Version: 3.5.0.44090 - BitTorrent Inc.)
AirVPN (HKLM-x32\...\AirVPN) (Version: - AirVPN - hxxps://airvpn.org)
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 384.76 - NVIDIA Corporation) Hidden
AOMEI Partition Assistant Standard Edition 6.3 (HKLM-x32\...\{02F850ED-FD0E-4ED1-BE0B-54981f5BD3D4}_is1) (Version: - AOMEI Technology Co., Ltd.)
Apple Application Support (32 bits) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
AudioShell 2.3.6 (HKLM\...\AudioShell_is1) (Version: 2.3.6 - Softpointer Inc)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Bulk Rename Utility 3.0.0.1 (64-bit) (HKLM\...\Bulk Rename Utility Installation_is1) (Version: - TGRMN Software)
CCleaner (HKLM\...\CCleaner) (Version: 5.33 - Piriform) <==== ATTENTION
Control Center 5.0000.0.33 (HKLM-x32\...\{2F385B5D-5F23-4513-B3CE-9F5E4F4B882A}) (Version: 5.0000.0.33 - )
DARK SOULS™ III (HKLM\...\Steam App 374320) (Version: - FromSoftware, Inc.)
Dashlane (HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\Dashlane) (Version: 4.8.8.36676 - Dashlane, Inc.)
Discord (HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Dofus (HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\2744A393-554C-4E35-A24F-DEF0392B4484-2) (Version: - Ankama)
Driver Booster 4.4 (HKLM-x32\...\Driver Booster_is1) (Version: 4.4.0 - IObit)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 61.0.3163.100 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 21.20.16.4534 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{B65F509E-9208-4665-A85E-2CDC15EE691D}) (Version: 18.1.1535.1946 - Intel Corporation)
Java 8 Update 141 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180141F0}) (Version: 8.0.1410.15 - Oracle Corporation)
Logiciel Intel® PROSet/Wireless (HKLM-x32\...\{4c8b7360-62a2-4339-b745-41323055d0bb}) (Version: 18.20.0 - Intel Corporation)
Logiciel pour périphérique à chipset Intel® (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
MediaMonkey 4.1 (HKLM-x32\...\MediaMonkey_is1) (Version: 4.1 - Ventis Media Inc.)
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.8431.2079 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\OneDriveSetup.exe) (Version: 17.3.6998.0830 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23918 (HKLM-x32\...\{dab68466-3a7d-41a8-a5cf-415e3ff8ef71}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23918 (HKLM-x32\...\{2e085fd2-a3e4-4b39-8e10-6b8d35f55244}) (Version: 14.0.23918.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mises à jour NVIDIA 25.6.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 25.6.0.0 - NVIDIA Corporation) Hidden
Nox APP Player (HKLM-x32\...\Nox) (Version: 5.0.0.1 - Duodian Technology Co. Ltd.)
NVIDIA GeForce Experience 3.7.0.81 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.7.0.81 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
NVIDIA Pilote 3D Vision 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 384.76 - NVIDIA Corporation)
NVIDIA Pilote audio HD : 1.3.34.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.27 - NVIDIA Corporation)
NVIDIA Pilote graphique 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 384.76 - NVIDIA Corporation)
NvNodejs (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs) (Version: 3.7.0.81 - NVIDIA Corporation) Hidden
NvTelemetry (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry) (Version: 2.6.1.0 - NVIDIA Corporation) Hidden
NvvHci (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvvHci) (Version: 2.02.0.5 - NVIDIA Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8431.2079 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
Opera Stable 48.0.2685.32 (HKLM-x32\...\Opera 48.0.2685.32) (Version: 48.0.2685.32 - Opera Software)
Panneau de configuration NVIDIA 384.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 384.76 - NVIDIA Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.21296 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.3.723.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
Services d’impression Bonjour (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.)
SHIELD Streaming (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv) (Version: 7.1.0380 - NVIDIA Corporation) Hidden
Skullgirls (HKLM\...\Steam App 245170) (Version: - Lab Zero Games)
SoulseekQt version 2017.2.20 (HKLM-x32\...\{8A4E1646-488C-4E5B-AC31-F784400E8D2D}_is1) (Version: 2017.2.20 - Soulseek LLC)
Spotify (HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\Spotify) (Version: 1.0.64.399.g4637b02a - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SumatraPDF (HKLM\...\SumatraPDF) (Version: 3.1.2 - Krzysztof Kowalczyk)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.24.1 - Synaptics Incorporated)
Tag&Rename 3.9.14 (HKLM-x32\...\Tag&Rename_is1) (Version: 3.9.14 - Softpointer Inc)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.81460 - TeamViewer)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version: - VB-Audio Software)
Vulkan Run Time Libraries 1.0.42.1 (HKLM\...\VulkanRT1.0.42.1) (Version: 1.0.42.1 - LunarG, Inc.)
WinRAR 5.40 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-1874849270-505753750-1503647204-1001_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1874849270-505753750-1503647204-1001_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1874849270-505753750-1503647204-1001_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1874849270-505753750-1503647204-1001_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1874849270-505753750-1503647204-1001_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1874849270-505753750-1503647204-1001_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> C:\WINDOWS\system32\oleaut32.dll (Microsoft Corporation)
ContextMenuHandlers1: [AudioShellContextMenu] -> {0BB9462B-BCDD-4341-8344-790CAE8A747D} => C:\Program Files\AudioShell\AudioShell64.dll [2016-06-06] (Softpointer Inc)
ContextMenuHandlers1: [BRUMenuHandler] -> {5D924130-4CB1-11DB-B0DE-0800200C9A66} => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2016-02-04] (Bulk Rename Utility)
ContextMenuHandlers1: [TagRenameShellExt] -> {B806EC81-446D-40C8-A955-315B8519E938} => C:\Program Files (x86)\TagRename\TRShell64.dll [2015-05-12] (Sofpointer Inc)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [BRUMenuHandler] -> {5D924130-4CB1-11DB-B0DE-0800200C9A66} => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2016-02-04] (Bulk Rename Utility)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers4: [BRUMenuHandler] -> {5D924130-4CB1-11DB-B0DE-0800200C9A66} => C:\Program Files\Bulk Rename Utility\BRUhere64.dll [2016-02-04] (Bulk Rename Utility)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_0745f11ce6fc197c\igfxDTCM.dll [2016-11-01] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-06-27] (NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [TagRenameShellExt] -> {B806EC81-446D-40C8-A955-315B8519E938} => C:\Program Files (x86)\TagRename\TRShell64.dll [2015-05-12] (Sofpointer Inc)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-08-15] (Alexander Roshal)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {0324419B-5927-4221-8D31-E184CA011780} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {03FD2E2A-28AD-492C-8BEE-E9401CC344DE} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-09-08] (Microsoft Corporation)
Task: {1083D2D5-E729-4BFD-9991-93BBF0457F4B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner64.exe [2017-08-03] (Piriform Ltd)
Task: {19D252DE-4801-41CF-B918-029DF27D11DF} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {2A0D6627-1617-4A2E-A6DD-5B49C066C587} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-06-21] (NVIDIA Corporation)
Task: {3F2E9FBE-0B12-4601-AF47-50C3367595F6} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-06-21] (NVIDIA Corporation)
Task: {45423034-9757-47BE-B227-D19C02499174} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {45EB8F9C-585C-48B1-AED6-936F8EF49147} - System32\Tasks\Opera scheduled Autoupdate 1506759933 => C:\Program Files\Opera\launcher.exe [2017-09-26] (Opera Software)
Task: {4969759C-AF96-465A-8F16-8FC1462E4551} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-24] ()
Task: {4A084AB8-7DEA-4853-AA4F-7AB13DE0DA73} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-06-21] (NVIDIA Corporation)
Task: {5919FE77-8904-42D7-A584-53ED59F9A92F} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-06-21] (NVIDIA Corporation)
Task: {5AD7B967-963F-4CBF-BB07-EB44336A5BE0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [2017-09-24] (Microsoft Corporation)
Task: {5C4A1A70-1381-4919-9E44-2EA0EFB12E31} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-20] (Google Inc.)
Task: {99C2786A-6636-4F35-93B2-B5729642070C} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-mickael.souedan@hotmail.fr => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe
Task: {B89F6606-B720-41E8-8FD1-F307F7B54C25} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-06-21] (NVIDIA Corporation)
Task: {C35E5C45-4524-4FB1-8132-8DFA83CF2C31} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-24] ()
Task: {CBB61E10-7079-4535-A331-70D697DDB858} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-07-20] (Google Inc.)
Task: {E370E6F7-45AD-425A-BDAB-5D1D0DD3EE12} - System32\Tasks\AirVPN => C:\Program Files\AirVPN\AirVPN.exe [2017-03-12] (hxxps://airvpn.org)
Task: {F0C505C8-37BE-4F16-8C10-5DEF1805A5C3} - System32\Tasks\Driver Booster SkipUAC (Micka) => C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe [2017-05-03] (IObit)
Task: {FB71E944-F334-4CD9-AB55-C4110BEA4878} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-06-21] (NVIDIA Corporation)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)


==================== Raccourcis & WMI ========================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)


ShortcutWithArgument: C:\Users\Micka\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Bureau à distance Google Chrome.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=gbchcmhmhahfdphkhkmpfmihenigjmpp

==================== Modules chargés (Avec liste blanche) ==============

2017-07-17 21:49 - 2017-06-21 09:02 - 001267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 000092472 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2017-07-13 20:50 - 2017-07-13 20:50 - 001354040 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 000138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-03-12 22:27 - 2017-03-12 22:27 - 000157384 _____ () C:\Program Files\AirVPN\LibPocketFirewall.dll
2017-03-18 22:59 - 2017-03-20 07:11 - 001731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-09-14 10:54 - 2017-09-14 10:55 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.26.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-09-26 20:39 - 2017-09-26 20:40 - 010634752 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.26.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-09-26 20:39 - 2017-09-26 20:40 - 002640896 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11708.1001.26.0_x64__8wekyb3d8bbwe\MS.Entertainment.Common.Mobile.dll
2017-08-01 11:29 - 2017-08-01 11:29 - 000167424 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\libdsd2pcm.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 000260096 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\libsoxr.tb.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 000091136 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\rganalysis.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 001637376 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\avcodec-57.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 001157120 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\avformat-57.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 001247232 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\avutil-55.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 000130048 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\libtta.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 000245760 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\mp3infpExtr.dll
2017-07-17 20:04 - 2017-07-17 20:04 - 000122880 _____ () C:\Program Files\WindowsApps\44276Tiki.TuneBrowser_4.1.6.0_x64__fp3en5hw283q0\libdstdec.dll
2017-09-30 10:25 - 2017-09-26 06:59 - 091336792 _____ () C:\Program Files\Opera\48.0.2685.32\opera_browser.dll
2017-09-30 10:25 - 2017-09-26 06:59 - 004197976 _____ () C:\Program Files\Opera\48.0.2685.32\libglesv2.dll
2017-09-30 10:25 - 2017-09-26 06:59 - 000101464 _____ () C:\Program Files\Opera\48.0.2685.32\libegl.dll
2017-03-18 22:58 - 2017-03-18 22:58 - 000047616 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUITelemetry.dll
2017-07-12 04:23 - 2017-07-07 08:15 - 002331136 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIViewModels.dll
2017-07-12 04:23 - 2017-07-07 08:15 - 002836480 _____ () C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUIDataModel.dll
2017-09-12 14:54 - 2017-09-12 14:54 - 000020480 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2017-09-12 14:54 - 2017-09-12 14:54 - 029621760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2017-08-18 04:23 - 2017-08-18 04:23 - 000358912 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.AGM.Native.Windows.dll
2017-08-18 04:23 - 2017-08-18 04:23 - 002536448 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngineCSWrapper.dll
2017-09-12 14:54 - 2017-09-12 14:54 - 020305920 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\PhotosApp.Windows.dll
2017-08-18 04:23 - 2017-08-18 04:23 - 002415104 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\MediaEngine.dll
2017-09-12 14:54 - 2017-09-12 14:54 - 003028992 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\AppCore.Windows.dll
2017-07-17 19:58 - 2017-07-17 19:58 - 003139496 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-09-12 14:54 - 2017-09-12 14:54 - 000117760 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\ExploreModel.dll
2017-07-17 20:09 - 2017-07-17 20:09 - 000046080 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.Photos.Edit.Services.dll
2017-08-18 04:23 - 2017-08-18 04:23 - 001370112 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.16410.0_x64__8wekyb3d8bbwe\Microsoft.RichMedia.Ink.Controls.dll
2017-03-12 22:27 - 2017-03-12 22:27 - 000223800 _____ () C:\Program Files\AirVPN\liblzo2-2.dll
2017-03-12 22:27 - 2017-03-12 22:27 - 000123960 _____ () C:\Program Files\AirVPN\libpkcs11-helper-1.dll
2017-07-17 21:49 - 2017-06-21 09:02 - 001040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-08-04 14:11 - 2017-09-30 11:06 - 071818864 _____ () C:\Users\Micka\AppData\Roaming\Spotify\libcef.dll
2017-07-17 21:49 - 2017-06-21 09:02 - 066837112 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2017-08-04 14:11 - 2017-09-30 11:06 - 002969200 _____ () C:\Users\Micka\AppData\Roaming\Spotify\libglesv2.dll
2017-08-04 14:11 - 2017-09-30 11:06 - 000086640 _____ () C:\Users\Micka\AppData\Roaming\Spotify\libegl.dll
2017-07-17 19:25 - 2017-09-24 18:39 - 001009864 _____ () C:\Program Files (x86)\Microsoft Office\Root\Office16\ADDINS\UmOutlookAddin.dll
2017-09-24 18:41 - 2017-09-24 18:41 - 000094920 _____ () C:\Program Files (x86)\Microsoft Office\root\Office16\officevoicemanager.dll
2017-08-17 12:38 - 2017-08-08 15:13 - 001893880 _____ () C:\Users\Micka\AppData\Local\Discord\app-0.0.298\ffmpeg.dll
2017-08-17 12:39 - 2017-08-17 12:39 - 001577976 _____ () \\?\C:\Users\Micka\AppData\Roaming\discord\0.0.298\modules\discord_toaster\discord_toaster.node
2017-08-17 12:38 - 2017-08-08 15:13 - 001938424 _____ () C:\Users\Micka\AppData\Local\Discord\app-0.0.298\libglesv2.dll
2017-08-17 12:38 - 2017-08-08 15:13 - 000095736 _____ () C:\Users\Micka\AppData\Local\Discord\app-0.0.298\libegl.dll
2017-08-17 12:39 - 2017-09-18 18:08 - 009622008 _____ () \\?\C:\Users\Micka\AppData\Roaming\discord\0.0.298\modules\discord_voice\discord_voice.node
2017-08-17 12:39 - 2017-08-17 12:39 - 001440248 _____ () \\?\C:\Users\Micka\AppData\Roaming\discord\0.0.298\modules\discord_utils\discord_utils.node
2017-09-30 18:20 - 2017-09-30 18:20 - 000148992 _____ () \\?\C:\Users\Micka\AppData\Local\Temp\B460.tmp.node
2017-08-17 12:38 - 2017-08-17 12:38 - 002658296 _____ () \\?\C:\Users\Micka\AppData\Roaming\discord\0.0.298\modules\discord_rpc\discord_rpc.node
2017-08-17 12:39 - 2017-08-17 12:39 - 002673656 _____ () \\?\C:\Users\Micka\AppData\Roaming\discord\0.0.298\modules\discord_contact_import\discord_contact_import.node

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)


==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)


==================== Hosts contenu: ===============================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2017-07-17 18:13 - 2017-07-25 20:42 - 000000838 _____ C:\WINDOWS\system32\Drivers\etc\hosts


==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKU\S-1-5-21-1874849270-505753750-1503647204-1001\Control Panel\Desktop\\Wallpaper -> c:\users\micka\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\{924d7e8c-dbec-4ef2-8c32-af3a20a2be45}.jpg
DNS Servers: 10.4.0.1 - 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

HKU\S-1-5-21-1874849270-505753750-1503647204-1001\...\StartupApproved\Run: => "Auto"

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [TCP Query User{5F94C643-2D26-4844-8AAE-BA3779AD2D53}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [UDP Query User{3A24A9E2-5955-490E-960A-8FA7C1807C4C}C:\program files (x86)\soulseekqt\soulseekqt.exe] => (Allow) C:\program files (x86)\soulseekqt\soulseekqt.exe
FirewallRules: [{5D5A5054-6AE7-4E2A-BC7B-CB7CFD9648DF}] => (Allow) C:\Users\Micka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{26FA8637-65B4-40F5-8FE8-8B8D7797078C}] => (Allow) C:\Users\Micka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{39C0CE30-77F5-4C5D-80F2-D79B365F6B52}] => (Allow) C:\Users\Micka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9AA5FAD2-8831-4AEF-B3C1-F858E5F54876}] => (Allow) C:\Users\Micka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9A2F2C59-0207-425C-84BC-1D6C72E29299}] => (Allow) C:\Users\Micka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9E2F13AD-6BF9-4BE1-A035-0718F25B103C}] => (Allow) C:\Users\Micka\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{3C38A7CC-7A35-4B6E-B1D7-BA85475B598C}C:\program files (x86)\vb\voicemeeter\voicemeeter.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeeter.exe
FirewallRules: [UDP Query User{A0E6CAF1-F4E8-4668-B9ED-A3D9DF0AD656}C:\program files (x86)\vb\voicemeeter\voicemeeter.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeeter.exe
FirewallRules: [{86D34367-932F-4FF2-A07A-BBD1D4B330CE}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe
FirewallRules: [{23795501-8581-436A-934F-E81D87A68F0D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BC29A9E4-B182-427D-80BC-C94A299E7949}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C36AE4D9-DD93-4C8E-8BC9-BB7BA8BC1C75}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{00BD457C-E738-4AC1-98B8-432C1A521F99}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{1681215C-09DF-48DD-A868-61552CA9504A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skullgirls\SkullGirls.exe
FirewallRules: [{A334F2F4-B026-489E-B685-DB704ACE72FC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skullgirls\SkullGirls.exe
FirewallRules: [{1D83D0C6-0A44-4AAA-B5A4-34DA08CE96E3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{248EB8B8-C9C7-43EB-8B3E-E5D75FE67093}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{0315C673-342C-4028-8D07-59623B372E27}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{1AACE272-E524-4597-8F79-625FC47F3303}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{7D5A8078-6045-4130-9847-F889FEA15CB1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{5E508587-B1B3-4F82-AC3D-191E505DAA51}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{F5E0E84D-E756-4C33-8445-4EB6B26FD2F8}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DriverBooster.exe
FirewallRules: [{1D168B13-4529-4624-8639-2E461241FB2A}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{D8AFD3CC-9328-4490-9AB4-47B77C9482CE}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\DBDownloader.exe
FirewallRules: [{51BAEF1A-CE59-4BD1-BEA1-52730CF468F6}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{C1B00B3A-FEBA-4A48-8DAC-25952E7826C3}] => (Allow) C:\Program Files (x86)\IObit\Driver Booster\4.4.0\AutoUpdate.exe
FirewallRules: [{2DE652D9-F1BE-486E-9AD5-A015BC0EFC04}] => (Allow) C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
FirewallRules: [{5D01764B-F931-42C2-B0B1-58FA8F44382C}] => (Allow) C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
FirewallRules: [{98E1E700-59C1-473A-8377-CEC5E78D6A25}] => (Allow) C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
FirewallRules: [{AA26D18C-C3CB-4F46-A98B-DB65D46C91AB}] => (Allow) C:\Program Files (x86)\MediaMonkey\MediaMonkey.exe
FirewallRules: [TCP Query User{C6BC07FC-DF3C-45FC-92E3-D4BC459C61B8}C:\program files (x86)\java\jre1.8.0_141\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_141\bin\javaw.exe
FirewallRules: [UDP Query User{45DDD81E-0AE5-4331-98D6-FAFA9589C9E2}C:\program files (x86)\java\jre1.8.0_141\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_141\bin\javaw.exe
FirewallRules: [TCP Query User{24E311B7-CC81-40B2-93C0-E116C96F773D}C:\users\micka\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micka\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{40E3CFE9-C7F3-443E-BCB4-2C503DDFAAC2}C:\users\micka\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\micka\appdata\roaming\spotify\spotify.exe
FirewallRules: [{99DE8077-C64B-4271-8BCD-2D3E0D5322E5}] => (Block) C:\users\micka\appdata\roaming\spotify\spotify.exe
FirewallRules: [{05D4948C-3E58-4256-8E29-71792F2ABEF1}] => (Block) C:\users\micka\appdata\roaming\spotify\spotify.exe
FirewallRules: [{AE287764-8265-49B0-8A93-27B55E116655}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{E4160D4C-3465-49AD-83D2-68048D570CF2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{A349864C-60F2-4856-9A4F-430971BBE482}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{5DF081BF-0009-4B3E-AF11-E3DE257B95E9}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{76A0E788-0B50-481D-B900-AB654E561681}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2AF76998-6C06-447B-A798-EBCE76709439}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{7C63FA92-2907-49AB-9518-E3819AD36760}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{CD81C4FC-50DA-4C4D-B374-C6BC628F4AF8}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{CAFCCFB9-C76C-4AAD-B25F-27C95B16737F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{678991E5-CF8F-4AC4-B104-1599170745D5}] => (Allow) C:\Program Files (x86)\Nox\bin\Nox.exe
FirewallRules: [{9CCB6BA1-494F-4EF7-8B22-4F0CD1FCC7D6}] => (Allow) C:\Program Files (x86)\Bignox\BigNoxVM\RT\NoxVMHandle.exe
FirewallRules: [TCP Query User{6EADBCCE-3D71-410E-9A4D-5271281DA0A8}C:\program files\nefarius software solutions\scptoolkit\scpserver.exe] => (Allow) C:\program files\nefarius software solutions\scptoolkit\scpserver.exe
FirewallRules: [UDP Query User{115C796B-D7F6-48D7-84FB-0CF14C55C051}C:\program files\nefarius software solutions\scptoolkit\scpserver.exe] => (Allow) C:\program files\nefarius software solutions\scptoolkit\scpserver.exe
FirewallRules: [{A8CFE322-6060-49ED-AD88-6CA0011A8664}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{7E08739E-32AD-49B9-A03B-3FEE73C5D1BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe
FirewallRules: [{D71F71C6-AE87-4331-A8CE-2F7E4ADF32DC}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{EE0E3DDD-83E7-4317-8CFD-80943D86A390}] => (Allow) C:\Program Files\Opera\48.0.2685.32\opera.exe

==================== Points de restauration =========================

19-09-2017 16:26:05 Driver Booster : Intel(R) Dual Band Wireless-AC 8260
27-09-2017 17:47:52 Point de contrôle planifié

==================== Éléments en erreur du Gestionnaire de périphériques =============

Name: StorLib bus (virtual storages support)
Description: StorLib bus (virtual storages support)
Class Guid: {1378e71b-ab4d-4348-af26-cba56b12969e}
Manufacturer: EldoS Corporation
Service: cbfs3
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (09/30/2017 01:31:27 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Explorer.EXE, version : 10.0.15063.608, horodatage : 0xb00723ab
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0xc0000005
Décalage d’erreur : 0x00000000126e0fd8
ID du processus défaillant : 0x19b0
Heure de début de l’application défaillante : 0x01d339cb594c9366
Chemin d’accès de l’application défaillante : C:\WINDOWS\Explorer.EXE
Chemin d’accès du module défaillant: unknown
ID de rapport : 00cae1e7-aaf1-49fa-9b67-314a6cf258b6
Nom complet du package défaillant :
ID de l’application relative au package défaillant :

Error: (09/30/2017 09:26:19 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LEGROS)
Description: Échec de l’activation de l’application microsoft.windowscommunicationsapps_8wekyb3d8bbwe!ppleae38af2e007f4358a809ac99a64a67c1 avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.

Error: (09/30/2017 09:26:18 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: LEGROS)
Description: Échec de l’activation de l’application Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy!App avec l’erreur : -2144927141 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.

Error: (09/28/2017 09:37:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 2172

Error: (09/28/2017 09:37:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 2172

Error: (09/28/2017 09:37:46 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/28/2017 09:37:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1047

Error: (09/28/2017 09:37:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 1047

Error: (09/28/2017 09:37:44 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (09/26/2017 09:42:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 1265


Erreurs système:
=============
Error: (09/30/2017 04:13:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Inspection du réseau de l’antivirus Windows Defender n’a pas pu démarrer en raison de l’erreur :
Accès refusé.

Error: (09/30/2017 04:13:58 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Inspection du réseau de l’antivirus Windows Defender n’a pas pu démarrer en raison de l’erreur :
Accès refusé.

Error: (09/30/2017 04:13:56 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070643 : Mise à jour des définitions pour Windows Defender – KB2267602 (Définition 1.253.128.0).

Error: (09/30/2017 04:13:55 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Inspection du réseau de l’antivirus Windows Defender n’a pas pu démarrer en raison de l’erreur :
Accès refusé.

Error: (09/30/2017 03:57:56 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: AUTORITE NT)
Description: Échec de l’installation : l’installation de la mise à jour suivante a échoue avec l’erreur 0x80070643 : Mise à jour des définitions pour Windows Defender – KB2267602 (Définition 1.253.128.0).

Error: (09/30/2017 03:57:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Inspection du réseau de l’antivirus Windows Defender n’a pas pu démarrer en raison de l’erreur :
Accès refusé.

Error: (09/30/2017 03:57:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Inspection du réseau de l’antivirus Windows Defender n’a pas pu démarrer en raison de l’erreur :
Accès refusé.

Error: (09/30/2017 03:56:03 PM) (Source: DCOM) (EventID: 10016) (User: LEGROS)
Description: Les paramètres d’autorisation par défaut de l’ordinateur n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{9BA05972-F6A8-11CF-A442-00A0C90A8F39}
et l’APPID
{9BA05972-F6A8-11CF-A442-00A0C90A8F39}
au SID LEGROS\Micka de l’utilisateur (S-1-5-21-1874849270-505753750-1503647204-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (09/30/2017 01:36:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Service Inspection du réseau de l’antivirus Windows Defender n’a pas pu démarrer en raison de l’erreur :
Accès refusé.

Error: (09/30/2017 01:36:47 PM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{6B3B8D23-FA8D-40B9-8DBD-B950333E2C52}
et l’APPID
{4839DDB7-58C2-48F5-8283-E1D1807D0D7D}
au SID AUTORITE NT\SERVICE LOCAL de l’utilisateur (S-1-5-19) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.


CodeIntegrity:
===================================
Date: 2017-10-01 09:20:58.037
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 09:20:58.035
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 09:20:01.802
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-10-01 09:20:01.800
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-30 19:40:57.436
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-30 19:40:57.433
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-30 18:48:49.484
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_632f99892e9ad691\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-30 18:34:15.109
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-30 18:34:15.107
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2017-09-30 18:34:13.326
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Infos Mémoire ===========================

Processeur: Intel(R) Core(TM) i7-6700HQ CPU @ 2.60GHz
Pourcentage de mémoire utilisée: 48%
Mémoire physique - RAM - totale: 16205.86 MB
Mémoire physique - RAM - disponible: 8392.54 MB
Mémoire virtuelle totale: 18637.86 MB
Mémoire virtuelle disponible: 9665.09 MB

==================== Lecteurs ================================

Drive c: (Saint) (Fixed) (Total:207.09 GB) (Free:97.85 GB) NTFS
Drive d: (Alfred) (Fixed) (Total:931.51 GB) (Free:479.4 GB) NTFS

==================== MBR & Table des partitions ==================

========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: B9CBE111)

Partition: GPT.

========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: B9CBE13E)

Partition: GPT.

==================== Fin de Addition.txt ============================