Publicité
Publicité
Format du document : text/plain
Prévisualisation
Additional scan result of Farbar Recovery Scan Tool (x64) Version: 02-11-2017
Ran by Utilisateur (06-11-2017 07:46:56)
Running from C:\Users\Utilisateur\Desktop
Windows 10 Home Version 1709 16299.19 (X64) (2017-10-25 06:19:49)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2689708964-2816753044-2903325106-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2689708964-2816753044-2903325106-503 - Limited - Disabled)
Guest (S-1-5-21-2689708964-2816753044-2903325106-501 - Limited - Disabled)
Utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001 - Administrator - Enabled) => C:\Users\Utilisateur
WDAGUtilityAccount (S-1-5-21-2689708964-2816753044-2903325106-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\uTorrent) (Version: 3.5.0.44090 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-040C-1000-0000000FF1CE}_ENTERPRISE_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
Assistant Mise à jour de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.7.2314 - AVAST Software)
calibre (HKLM-x32\...\{85DA0866-A250-4D59-966D-4509B85DCDCF}) (Version: 3.10.0 - Kovid Goyal)
CutePDF Writer 3.2 (HKLM\...\CutePDF Writer Installation) (Version: 3.2 - Acro Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.75 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 15.0.4433.1508 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mikogo (HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\Mikogo) (Version: 5.3.0 - BeamYourScreen GmbH)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4433.1508 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4433.1508 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-040C-0000-0000000FF1CE}) (Version: 15.0.4433.1508 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
RoboForm 8-4-3-3 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 8-4-3-3 - Siber Systems)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
SteelSeries Engine 3.11.5 (HKLM\...\SteelSeries Engine 3) (Version: 3.11.5 - SteelSeries ApS)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0BFE66B4-E843-43BD-8853-8948F7CF1A68} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
Task: {136157A5-B85C-4E6F-AAEC-3CA80040B5DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-02] (Google Inc.)
Task: {2DEDA0F7-1257-40E6-BFE5-6304EFE0C522} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-02] (Google Inc.)
Task: {4ABF98EC-D09D-43ED-929B-91860E34707E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
Task: {501D7551-2982-4FFD-AF6B-7FF4AD011622} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-02] (AVAST Software)
Task: {54E28CC3-FA5D-4048-9063-B1BD9441F4F3} - System32\Tasks\Open URL by RoboForm => C:\WINDOWS\system32\rundll32.exe url.dll,FileProtocolHandler "hxxps://www.roboform.com/test-pass.html?aaa=KICMOJKJPMPMGMOMJJNJCNKMKJOMOJCNLMNMNJLMCNGMOMOJJMCNLJLMKJLJMMJJGMKJLJOMIMGMJNJICMHMCNLMCNMMFMOMOMCNJMIMLMCNOMKMPMJMMMFMPMCNPMCNOMKMPMJMMMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMKKLIGJDJGJMIOJLIKJKINIJNKJCMJNNICMJNDJC (the data entry has 56 more characters).
Task: {5A64A4C8-31DE-4840-AD0A-B65FF6139262} - System32\Tasks\Microsoft Office 15 Sync Maintenance for CELINE-G-Utilisateur CELINE-G => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2017-10-24] (Microsoft Corporation)
Task: {726DFAEA-1DE2-41C9-B6B0-BC84ABF32264} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-10-24] (Microsoft Corporation)
Task: {A7804139-9791-478C-BB0C-1CD54853B354} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-10-24] (Microsoft Corporation)
Task: {CAD07C23-DB89-414F-AEC5-4F1DAAC44210} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2017-10-23] (Siber Systems)
Task: {E0D63D3C-4E69-4678-A0F8-570A6D1B7DC6} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05] (Oracle Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Chrome RSS reader_.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pcciiglipgjjihflmlkfckgecaemhpdo
==================== Loaded Modules (Whitelisted) ==============
2017-09-29 08:41 - 2017-09-29 08:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-09-28 13:05 - 2017-05-26 05:47 - 000090096 _____ () C:\WINDOWS\System32\cpwmon64_v32.dll
2017-10-25 01:35 - 2017-01-17 03:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2017-11-02 04:03 - 2017-10-04 12:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-11-02 04:03 - 2017-10-04 12:15 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-10-31 02:51 - 2017-10-31 02:52 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.7.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-10-31 02:51 - 2017-10-31 02:52 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.7.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-11-04 01:10 - 2017-11-04 01:10 - 000015872 _____ () C:\Program Files\WindowsApps\Microsoft.Office.Sway_18.1711.50301.0_x64__8wekyb3d8bbwe\Microsoft.Office.Sway.LightweightClient.UWP.exe
2017-11-04 01:10 - 2017-11-04 01:10 - 006285824 _____ () C:\Program Files\WindowsApps\Microsoft.Office.Sway_18.1711.50301.0_x64__8wekyb3d8bbwe\Microsoft.Office.Sway.LightweightClient.UWP.dll
2017-10-31 02:51 - 2017-10-31 02:51 - 002361528 _____ () C:\Program Files\WindowsApps\Microsoft.Office.Sway_18.1711.50301.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2017-09-29 08:42 - 2017-09-29 09:43 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-09-29 08:42 - 2017-09-29 09:43 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-09-28 10:31 - 2017-09-28 10:31 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11709.1001.27.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-27 01:38 - 2017-10-27 01:38 - 010273280 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11709.1001.27.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-11-01 02:03 - 2017-11-01 02:03 - 001919680 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40485.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2017-11-01 02:03 - 2017-11-01 02:04 - 001226416 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40485.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2017-11-02 11:35 - 2017-11-02 11:35 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-11-02 11:35 - 2017-11-02 11:35 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-11-02 11:36 - 2017-11-02 11:36 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-11-02 11:36 - 2017-11-02 11:36 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-11-02 11:36 - 2017-11-02 11:36 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-11-02 11:35 - 2017-11-02 11:35 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-11-02 11:36 - 2017-11-02 11:39 - 000703336 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-08-17 15:51 - 2017-08-17 15:51 - 001993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-11-02 11:42 - 2017-10-25 23:39 - 003075928 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.75\libglesv2.dll
2017-11-02 11:42 - 2017-10-25 23:39 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.75\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-09-27 16:24 - 2017-09-27 16:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\StartupApproved\Run: => "RoboForm"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{4E1623FA-D09D-47EA-8261-B938332FA5BA}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{F15600CA-B536-41F1-88F2-2F534D702210}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{6A2DA925-8A77-4B85-B2C7-D9A92F834907}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{C21AE77D-3274-4730-B29B-035AFB088172}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{630653F0-AF60-4698-8455-01C6B8B87ED8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{9850B95C-B849-43E3-AB42-93C8D27DEB49}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{83393BAF-B5CC-494B-8C28-D622720E61BB}] => (Allow) C:\Users\Utilisateur\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A7273CA4-CF35-43BE-94A6-8E676DFFB5FD}] => (Allow) C:\Users\Utilisateur\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D3D8AE65-0ED6-4539-B11D-7C6ED06186CA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{AEC40ECC-FF71-4BA0-B8F8-49561572619C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{701F2A4A-22E2-4DA4-87BC-12D05DA0EE71}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{95CE872C-286C-4F75-B4D5-2EDAA4CE9746}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{6EB53F03-04E1-4325-BB5B-2A61EB877E0E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{F6EDC88F-2121-493D-BC15-49498E9AD28D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{60BFAFE7-5110-4830-96D3-AF219A5E8D0A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{15D2FAA1-B42A-4EA5-8EA7-B3CC98CDAE42}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{295F4DF1-01A2-4042-94FF-6846C70C0DFF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{7DC464C6-4CDA-4AEA-A016-4097BBED97E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{0E316316-EC24-48C5-9822-683D5150FB84}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{683F436F-842F-437E-BED6-6608CC83F956}] => (Allow) C:\Users\Utilisateur\AppData\Local\Temp\7zS2896\HP.EasyStart.exe
==================== Restore Points =========================
02-11-2017 04:34:48 Windows Update
02-11-2017 11:17:49 Revo Uninstaller's restore point - AVG PC TuneUp
==================== Faulty Device Manager Devices =============
Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Clavier standard PS/2
Description: Clavier standard PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Claviers standard)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/06/2017 07:45:16 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme FRST64.exe version 2.11.2017.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.
ID de processus : 1ae4
Heure de début : 01d356fcf551fadf
Heure de fin : 4294967295
Chemin d'accès de l'application : C:\Users\Utilisateur\Desktop\FRST64.exe
ID de rapport : a6cd41ab-8620-42b9-955f-6d8dbf0de446
Nom complet du package défaillant :
ID de l'application relative au package défaillant :
Error: (11/06/2017 01:10:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x2ea8
Heure de démarrage de l’application défaillante : 0x01d356c5e2635733
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : cd0160ad-74f4-4209-b44f-2f28cd3fa4d4
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/06/2017 01:10:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x2ea8
Heure de démarrage de l’application défaillante : 0x01d356c5e2635733
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : a50121a9-85f8-4989-a3f4-b26d6a646e4f
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/05/2017 01:13:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x38bc
Heure de démarrage de l’application défaillante : 0x01d355fd22cc46e9
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 1fff7bd5-debd-4214-8cbc-090c1fc0ed31
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/05/2017 01:13:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x38bc
Heure de démarrage de l’application défaillante : 0x01d355fd22cc46e9
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : b9ba8639-3605-416e-b602-89b85d9e3c1a
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/04/2017 01:10:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x1d28
Heure de démarrage de l’application défaillante : 0x01d3553399123e3e
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 22ee1f99-c90c-4c90-9749-4fd4ab061f9e
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/04/2017 01:10:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x1d28
Heure de démarrage de l’application défaillante : 0x01d3553399123e3e
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 39be1b24-0b12-4151-9465-fc46527a2197
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/03/2017 01:09:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0xb00
Heure de démarrage de l’application défaillante : 0x01d3546a4c54887f
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 66271ca5-32ae-4a51-a205-84dd95238278
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/02/2017 08:46:59 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed
Error: (11/02/2017 08:05:51 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed
System errors:
=============
Error: (11/06/2017 07:43:43 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 06:24:00 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 05:42:50 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 05:13:06 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 01:10:07 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation machine-default n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
et l’APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy du conteneur d’applications (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:52 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:44 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:27 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:13 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:48:44 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
CodeIntegrity:
===================================
Date: 2017-11-03 05:34:39.471
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 05:28:41.130
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 05:02:53.380
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 05:01:56.499
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:44.725
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:43.921
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:19.179
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:17.938
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:11.377
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:03.677
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
Percentage of memory in use: 61%
Total physical RAM: 6135.11 MB
Available physical RAM: 2356.55 MB
Total Virtual: 8271.72 MB
Available Virtual: 3590.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.96 GB) (Free:386.22 GB) NTFS
Drive f: (DATA) (Fixed) (Total:464.17 GB) (Free:395.09 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 640A7144)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=464.2 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=857 MB) - (Type=27)
==================== End of Addition.txt ============================
Ran by Utilisateur (06-11-2017 07:46:56)
Running from C:\Users\Utilisateur\Desktop
Windows 10 Home Version 1709 16299.19 (X64) (2017-10-25 06:19:49)
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-2689708964-2816753044-2903325106-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2689708964-2816753044-2903325106-503 - Limited - Disabled)
Guest (S-1-5-21-2689708964-2816753044-2903325106-501 - Limited - Disabled)
Utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001 - Administrator - Enabled) => C:\Users\Utilisateur
WDAGUtilityAccount (S-1-5-21-2689708964-2816753044-2903325106-504 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Avast Antivirus (Disabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Disabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}
==================== Installed Programs ======================
(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\uTorrent) (Version: 3.5.0.44090 - BitTorrent Inc.)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0015-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0016-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0018-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0019-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001A-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001B-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0401-0000-0000000FF1CE}_ENTERPRISE_{3E8EA473-ECCE-405F-A9CA-59446AEADD3A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0407-0000-0000000FF1CE}_ENTERPRISE_{928D7B99-2BEA-49F9-83B8-20FA57860643}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0413-0000-0000000FF1CE}_ENTERPRISE_{2C95E7EE-FEA7-4B3A-A6E5-DF90A88B816A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-0000-1000-0000000FF1CE}_ENTERPRISE_{664655D8-B9BB-455D-8A58-7EAF7B0B2862}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-002A-040C-1000-0000000FF1CE}_ENTERPRISE_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}) (Version: - Microsoft)
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-0044-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-006E-040C-0000-0000000FF1CE}_ENTERPRISE_{8283FD64-6A3B-4104-9E12-7CA25EF29A1A}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00A1-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
2007 Microsoft Office Suite Service Pack 3 (SP3) (HKLM-x32\...\{90120000-00BA-040C-0000-0000000FF1CE}_ENTERPRISE_{CF3C20A6-47B7-48DA-95C1-6FBB5A439AF8}) (Version: - Microsoft) Hidden
Assistant Mise à jour de Windows 10 (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22243 - Microsoft Corporation)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 17.7.2314 - AVAST Software)
calibre (HKLM-x32\...\{85DA0866-A250-4D59-966D-4509B85DCDCF}) (Version: 3.10.0 - Kovid Goyal)
CutePDF Writer 3.2 (HKLM\...\CutePDF Writer Installation) (Version: 3.2 - Acro Software Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.75 - Google Inc.)
Google Earth Pro (HKLM-x32\...\{ECF2E224-42F5-4E50-B58E-94CA70E85697}) (Version: 7.3.0.3832 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.123 - Google Inc.) Hidden
Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Malwarebytes version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.6612.1000 - Microsoft Corporation)
Microsoft Office Professionnel Plus 2013 - fr-fr (HKLM\...\ProPlusRetail - fr-fr) (Version: 15.0.4433.1508 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24212 (HKLM-x32\...\{462f63a8-6347-4894-a1b3-dbfe3a4c981d}) (Version: 14.0.24212.0 - Microsoft Corporation)
Mikogo (HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\Mikogo) (Version: 5.3.0 - BeamYourScreen GmbH)
Office 15 Click-to-Run Extensibility Component (HKLM-x32\...\{90150000-008C-0000-0000-0000000FF1CE}) (Version: 15.0.4433.1508 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (HKLM\...\{90150000-008F-0000-1000-0000000FF1CE}) (Version: 15.0.4433.1508 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (HKLM-x32\...\{90150000-008C-040C-0000-0000000FF1CE}) (Version: 15.0.4433.1508 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
Revo Uninstaller 2.0.4 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.4 - VS Revo Group, Ltd.)
RoboForm 8-4-3-3 (All Users) (HKLM-x32\...\AI RoboForm) (Version: 8-4-3-3 - Siber Systems)
Skype™ 7.40 (HKLM-x32\...\{3B7E914A-93D5-4A29-92BB-AF8C3F66C431}) (Version: 7.40.103 - Skype Technologies S.A.)
SteelSeries Engine 3.11.5 (HKLM\...\SteelSeries Engine 3) (Version: 3.11.5 - SteelSeries ApS)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.6 - VideoLAN)
WinRAR 5.50 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-11-02] (AVAST Software)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {0BFE66B4-E843-43BD-8853-8948F7CF1A68} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
Task: {136157A5-B85C-4E6F-AAEC-3CA80040B5DB} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-02] (Google Inc.)
Task: {2DEDA0F7-1257-40E6-BFE5-6304EFE0C522} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-02] (Google Inc.)
Task: {4ABF98EC-D09D-43ED-929B-91860E34707E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2017-09-05] (Microsoft Corporation)
Task: {501D7551-2982-4FFD-AF6B-7FF4AD011622} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe [2017-11-02] (AVAST Software)
Task: {54E28CC3-FA5D-4048-9063-B1BD9441F4F3} - System32\Tasks\Open URL by RoboForm => C:\WINDOWS\system32\rundll32.exe url.dll,FileProtocolHandler "hxxps://www.roboform.com/test-pass.html?aaa=KICMOJKJPMPMGMOMJJNJCNKMKJOMOJCNLMNMNJLMCNGMOMOJJMCNLJLMKJLJMMJJGMKJLJOMIMGMJNJICMHMCNLMCNMMFMOMOMCNJMIMLMCNOMKMPMJMMMFMPMCNPMCNOMKMPMJMMMCNNMJNPICMLMFMEKMICNJJCKFMPMJNHICMEKMICNJJCKJNBJCMKKLIGJDJGJMIOJLIKJKINIJNKJCMJNNICMJNDJC (the data entry has 56 more characters).
Task: {5A64A4C8-31DE-4840-AD0A-B65FF6139262} - System32\Tasks\Microsoft Office 15 Sync Maintenance for CELINE-G-Utilisateur CELINE-G => C:\Program Files\Microsoft Office 15\Root\Office15\MsoSync.exe [2017-10-24] (Microsoft Corporation)
Task: {726DFAEA-1DE2-41C9-B6B0-BC84ABF32264} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-10-24] (Microsoft Corporation)
Task: {A7804139-9791-478C-BB0C-1CD54853B354} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2017-10-24] (Microsoft Corporation)
Task: {CAD07C23-DB89-414F-AEC5-4F1DAAC44210} - System32\Tasks\Run RoboForm TaskBar Icon => C:\Program Files (x86)\Siber Systems\AI RoboForm\RoboTaskBarIcon.exe [2017-10-23] (Siber Systems)
Task: {E0D63D3C-4E69-4678-A0F8-570A6D1B7DC6} - System32\Tasks\Java Platform SE Auto Updater => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [2017-09-05] (Oracle Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Shortcuts & WMI ========================
(The entries could be listed to be restored or removed.)
ShortcutWithArgument: C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome\Chrome RSS reader_.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) -> --profile-directory=Default --app-id=pcciiglipgjjihflmlkfckgecaemhpdo
==================== Loaded Modules (Whitelisted) ==============
2017-09-29 08:41 - 2017-09-29 08:41 - 000184432 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-09-28 13:05 - 2017-05-26 05:47 - 000090096 _____ () C:\WINDOWS\System32\cpwmon64_v32.dll
2017-10-25 01:35 - 2017-01-17 03:25 - 000117440 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2017-11-02 04:03 - 2017-10-04 12:15 - 002289096 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-11-02 04:03 - 2017-10-04 12:15 - 002358728 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-10-31 02:51 - 2017-10-31 02:52 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.7.597.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-10-31 02:51 - 2017-10-31 02:52 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.7.597.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-11-04 01:10 - 2017-11-04 01:10 - 000015872 _____ () C:\Program Files\WindowsApps\Microsoft.Office.Sway_18.1711.50301.0_x64__8wekyb3d8bbwe\Microsoft.Office.Sway.LightweightClient.UWP.exe
2017-11-04 01:10 - 2017-11-04 01:10 - 006285824 _____ () C:\Program Files\WindowsApps\Microsoft.Office.Sway_18.1711.50301.0_x64__8wekyb3d8bbwe\Microsoft.Office.Sway.LightweightClient.UWP.dll
2017-10-31 02:51 - 2017-10-31 02:51 - 002361528 _____ () C:\Program Files\WindowsApps\Microsoft.Office.Sway_18.1711.50301.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2017-09-29 08:42 - 2017-09-29 09:43 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-09-29 08:42 - 2017-09-29 09:43 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-09-28 10:31 - 2017-09-28 10:31 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11709.1001.27.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-10-27 01:38 - 2017-10-27 01:38 - 010273280 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11709.1001.27.0_x64__8wekyb3d8bbwe\WinStore.Entertainment.Mobile.dll
2017-11-01 02:03 - 2017-11-01 02:03 - 001919680 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40485.0_x64__8wekyb3d8bbwe\Microsoft.Applications.Telemetry.Windows.dll
2017-11-01 02:03 - 2017-11-01 02:04 - 001226416 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8700.40485.0_x64__8wekyb3d8bbwe\Office.UI.Xaml.Word.dll
2017-11-02 11:35 - 2017-11-02 11:35 - 000167096 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2017-11-02 11:35 - 2017-11-02 11:35 - 000059040 _____ () C:\Program Files\AVAST Software\Avast\module_lifetime.dll
2017-11-02 11:36 - 2017-11-02 11:36 - 067109376 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2017-11-02 11:36 - 2017-11-02 11:36 - 000217088 _____ () C:\Program Files\AVAST Software\Avast\event_routing_rpc.dll
2017-11-02 11:36 - 2017-11-02 11:36 - 000244584 _____ () C:\Program Files\AVAST Software\Avast\tasks_core.dll
2017-11-02 11:35 - 2017-11-02 11:35 - 000234280 _____ () C:\Program Files\AVAST Software\Avast\gaming_mode_ui.dll
2017-11-02 11:36 - 2017-11-02 11:39 - 000703336 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll
2017-08-17 15:51 - 2017-08-17 15:51 - 001993184 ____R () C:\Program Files (x86)\Skype\Phone\skypert.dll
2017-11-02 11:42 - 2017-10-25 23:39 - 003075928 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.75\libglesv2.dll
2017-11-02 11:42 - 2017-10-25 23:39 - 000086872 _____ () C:\Program Files (x86)\Google\Chrome\Application\62.0.3202.75\libegl.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Hosts content: ===============================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2017-09-27 16:24 - 2017-09-27 16:21 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Utilisateur\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Windows Firewall is enabled.
==================== MSCONFIG/TASK MANAGER disabled items ==
HKLM\...\StartupApproved\Run32: => "GrooveMonitor"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-2689708964-2816753044-2903325106-1001\...\StartupApproved\Run: => "RoboForm"
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{4E1623FA-D09D-47EA-8261-B938332FA5BA}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{F15600CA-B536-41F1-88F2-2F534D702210}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{6A2DA925-8A77-4B85-B2C7-D9A92F834907}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{C21AE77D-3274-4730-B29B-035AFB088172}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{630653F0-AF60-4698-8455-01C6B8B87ED8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{9850B95C-B849-43E3-AB42-93C8D27DEB49}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{83393BAF-B5CC-494B-8C28-D622720E61BB}] => (Allow) C:\Users\Utilisateur\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{A7273CA4-CF35-43BE-94A6-8E676DFFB5FD}] => (Allow) C:\Users\Utilisateur\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{D3D8AE65-0ED6-4539-B11D-7C6ED06186CA}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{AEC40ECC-FF71-4BA0-B8F8-49561572619C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{701F2A4A-22E2-4DA4-87BC-12D05DA0EE71}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{95CE872C-286C-4F75-B4D5-2EDAA4CE9746}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{6EB53F03-04E1-4325-BB5B-2A61EB877E0E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{F6EDC88F-2121-493D-BC15-49498E9AD28D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{60BFAFE7-5110-4830-96D3-AF219A5E8D0A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{15D2FAA1-B42A-4EA5-8EA7-B3CC98CDAE42}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{295F4DF1-01A2-4042-94FF-6846C70C0DFF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\Spotify.exe
FirewallRules: [{7DC464C6-4CDA-4AEA-A016-4097BBED97E2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{0E316316-EC24-48C5-9822-683D5150FB84}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.66.478.0_x86__zpdnekdrzrea0\SpotifyWebHelper.exe
FirewallRules: [{683F436F-842F-437E-BED6-6608CC83F956}] => (Allow) C:\Users\Utilisateur\AppData\Local\Temp\7zS2896\HP.EasyStart.exe
==================== Restore Points =========================
02-11-2017 04:34:48 Windows Update
02-11-2017 11:17:49 Revo Uninstaller's restore point - AVG PC TuneUp
==================== Faulty Device Manager Devices =============
Name: Souris Microsoft PS/2
Description: Souris Microsoft PS/2
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Clavier standard PS/2
Description: Clavier standard PS/2
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Claviers standard)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
==================== Event log errors: =========================
Application errors:
==================
Error: (11/06/2017 07:45:16 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme FRST64.exe version 2.11.2017.0 a cessé d'interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l'historique du problème dans le panneau de configuration Sécurité et maintenance.
ID de processus : 1ae4
Heure de début : 01d356fcf551fadf
Heure de fin : 4294967295
Chemin d'accès de l'application : C:\Users\Utilisateur\Desktop\FRST64.exe
ID de rapport : a6cd41ab-8620-42b9-955f-6d8dbf0de446
Nom complet du package défaillant :
ID de l'application relative au package défaillant :
Error: (11/06/2017 01:10:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x2ea8
Heure de démarrage de l’application défaillante : 0x01d356c5e2635733
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : cd0160ad-74f4-4209-b44f-2f28cd3fa4d4
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/06/2017 01:10:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x2ea8
Heure de démarrage de l’application défaillante : 0x01d356c5e2635733
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : a50121a9-85f8-4989-a3f4-b26d6a646e4f
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/05/2017 01:13:07 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x38bc
Heure de démarrage de l’application défaillante : 0x01d355fd22cc46e9
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 1fff7bd5-debd-4214-8cbc-090c1fc0ed31
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/05/2017 01:13:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x38bc
Heure de démarrage de l’application défaillante : 0x01d355fd22cc46e9
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : b9ba8639-3605-416e-b602-89b85d9e3c1a
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/04/2017 01:10:27 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x1d28
Heure de démarrage de l’application défaillante : 0x01d3553399123e3e
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 22ee1f99-c90c-4c90-9749-4fd4ab061f9e
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/04/2017 01:10:24 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0x1d28
Heure de démarrage de l’application défaillante : 0x01d3553399123e3e
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 39be1b24-0b12-4151-9465-fc46527a2197
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/03/2017 01:09:26 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante : DllHost.exe, version : 10.0.16299.15, horodatage : 0xc4db21a3
Nom du module défaillant : KERNELBASE.dll, version : 10.0.16299.15, horodatage : 0x2cd1ce3d
Code d’exception : 0xc06d007e
Décalage du défaut : 0x001008b2
ID processus défaillant : 0xb00
Heure de démarrage de l’application défaillante : 0x01d3546a4c54887f
Chemin de l’application défaillante : C:\WINDOWS\SysWOW64\DllHost.exe
Chemin du module défaillant : C:\WINDOWS\System32\KERNELBASE.dll
Code de rapport : 66271ca5-32ae-4a51-a205-84dd95238278
Nom complet de l’ensemble défaillant :
ID de l’application relative à l’ensemble défaillant :
Error: (11/02/2017 08:46:59 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed
Error: (11/02/2017 08:05:51 PM) (Source: ATIeRecord) (EventID: 16396) (User: )
Description: ATI EEU PnP start/stop failed
System errors:
=============
Error: (11/06/2017 07:43:43 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 06:24:00 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 05:42:50 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 05:13:06 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Unavailable du conteneur d’applications (Unavailable). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/06/2017 01:10:07 AM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation machine-default n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
et l’APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy du conteneur d’applications (S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:52 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:44 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:27 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:49:13 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (11/05/2017 09:48:44 PM) (Source: DCOM) (EventID: 10016) (User: CELINE-G)
Description: Les paramètres d’autorisation application-specific n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{0C0A3666-30C9-11D0-8F20-00805F2CD064}
et l’APPID
{9209B1A6-964A-11D0-9372-00A0C9034910}
au SID CELINE-G\Utilisateur de l’utilisateur (S-1-5-21-2689708964-2816753044-2903325106-1001) depuis l’adresse LocalHost (Using LRPC) s’exécutant dans le SID Microsoft.Taptiles_2.4.1412.201_x86__8wekyb3d8bbwe du conteneur d’applications (S-1-15-2-2231911430-2130388165-2516466230-706407494-3611915613-465405449-2907053216). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
CodeIntegrity:
===================================
Date: 2017-11-03 05:34:39.471
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 05:28:41.130
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 05:02:53.380
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 05:01:56.499
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:44.725
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:43.921
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:19.179
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:17.938
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:11.377
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
Date: 2017-11-03 04:55:03.677
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
Percentage of memory in use: 61%
Total physical RAM: 6135.11 MB
Available physical RAM: 2356.55 MB
Total Virtual: 8271.72 MB
Available Virtual: 3590.85 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:465.96 GB) (Free:386.22 GB) NTFS
Drive f: (DATA) (Fixed) (Total:464.17 GB) (Free:395.09 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 640A7144)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=464.2 GB) - (Type=OF Extended)
Partition 4: (Not Active) - (Size=857 MB) - (Type=27)
==================== End of Addition.txt ============================