Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 09-12-2017
Exécuté par Tommy (10-12-2017 23:27:16)
Exécuté depuis C:\Users\Tommy\Desktop
Windows 10 Home Version 1607 14393.1914 (X64) (2016-09-08 05:12:39)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-3743351136-2030051214-778605851-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3743351136-2030051214-778605851-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-3743351136-2030051214-778605851-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-3743351136-2030051214-778605851-501 - Limited - Disabled)
Tommy (S-1-5-21-3743351136-2030051214-778605851-1001 - Administrator - Enabled) => C:\Users\Tommy
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
. . (HKLM\...\{9C40698F-A953-4658-AFF2-F7BB385A3910}) (Version: 7.1 - Intel) Hidden
. . . (HKLM-x32\...\{870E5275-5457-4BBC-98C9-BFF4B70AA5D3}) (Version: 3.1.0.12 - Intel) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
amuleC (HKLM-x32\...\{19539992-061C-4E8B-9053-07B175303AF4}) (Version: 1.0.1 - amuleC) <==== ATTENTION
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.69 - NVIDIA Corporation) Hidden
Apple Application Support (32 bits) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 7.35.317.3 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
Discord (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Dofus (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\2744A393-554C-4E35-A24F-DEF0392B4484-1) (Version: - Ankama)
Dofus (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\2744A393-554C-4E35-A24F-DEF0392B4484-2) (Version: - Ankama)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.10.0.1016 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{2550a40e-aac6-4d21-9361-744d33bec573}) (Version: 3.1.0.12 - Intel)
iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation)
Microsoft Office Professionnel 2016 - fr-fr (HKLM\...\ProfessionalRetail - fr-fr) (Version: 16.0.8625.2139 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{9085040C-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mises à jour NVIDIA 28.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 28.0.0.0 - NVIDIA Corporation) Hidden
Mozilla Firefox 49.0.2 (x86 fr) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 fr)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
NVIDIA GeForce Experience 3.9.0.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.97 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
NVIDIA Pilote graphique 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.69 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8625.2139 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2139 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2139 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
OneSafe Driver Manager v4.0 (HKLM-x32\...\OneSafe Driver Manager_is1) (Version: 4.0 - Avanquest)
Panneau de configuration NVIDIA 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 385.69 - NVIDIA Corporation) Hidden
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 8.4.17.561 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
SafeZone Stable 1.51.2220.62 (HKLM-x32\...\SafeZone 1.51.2220.62) (Version: 1.51.2220.62 - Avast Software) Hidden
SafeZone Stable 3.55.2393.561 (HKLM-x32\...\SafeZone 3.55.2393.561) (Version: 3.55.2393.561 - Avast Software) Hidden
Smart Technology Programming Software 7.0.45.2 (HKLM\...\{828CE472-5B59-490C-B161-F7CAFEE7F4C0}) (Version: 7.0.45.2 - Mad Catz)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.11.45 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{DE083343-D24D-4495-919E-18C65EC0F289}) (Version: 2.8.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - LunarG, Inc.) Hidden
Winamax Installer (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\Winamax Installer 2.0) (Version: 2.0 - Winamax)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB (04/21/2011 01.0.0.0) (HKLM\...\BEA7B05370C19B9C86893BB484FD6B9CC52B0CD8) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [KuaiZipShlExt] -> {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [KuaiZipShlExt] -> {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} => -> Pas de fichier
ContextMenuHandlers4: [KuaiZipShlExt] -> {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-09-09] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-09-17] (NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {06D88075-5747-42F9-8A2F-15D9EB2A407C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {1D148092-20F3-4B82-AE93-A0747C1437B4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {1F8585F9-3814-4A57-B21E-49C32E07AFE1} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-26] ()
Task: {25D90C00-6C59-4F05-9E14-5A232883A72B} - System32\Tasks\{DBA0012A-75E4-4A3F-9A24-18E859E59567} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Tommy\Downloads\RAT_3_Mouse_7_0_57_16_x64_Drivers(1).exe -d C:\Users\Tommy\Downloads
Task: {26FA3641-923F-44E4-857D-D2D38554C170} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-11-22] (Microsoft Corporation)
Task: {2B24E13C-85F6-46BA-BBAE-E076BF088952} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {353F6072-496C-46C9-9BA7-ED046945E788} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19] (NVIDIA Corporation)
Task: {36885BAD-E180-4046-A7C7-EFC70DCF6491} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-27] (Piriform Ltd)
Task: {3948CE1D-866E-432A-A09C-B629039C9B70} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
Task: {42495203-05CF-4202-B24C-7667582B7D29} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {4664FAB4-552F-4474-AAB4-641E46F4E9C6} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-09-19] (NVIDIA Corporation)
Task: {53D47282-20BC-4794-9F2D-CF97FB187BDF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {63ACE0A6-0F57-461A-88F8-3D39C0ABC5F2} - System32\Tasks\{DEB474AB-3FD2-4D7B-93A1-28643F40915C} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\Uninst.exe"
Task: {704B1136-78E0-44DE-9856-8181F771593E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-03] (Google Inc.)
Task: {843FC0A0-A189-4F38-A845-C036471DC137} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-19] (Adobe Systems Incorporated)
Task: {8CCE3DF6-23AB-417E-B5AC-5144720906DD} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-09-19] (NVIDIA Corporation)
Task: {8F0F18E4-2FFC-4168-A3E1-82830F667CF4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {94C1F4E6-D32A-440B-9545-DF8AB6BB8CE4} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {9679F874-D667-4EA1-91FE-6A9163D0DB6E} - System32\Tasks\{79BCB4EA-14D3-4597-8CD9-6FEE3749A705} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Dofus\Uninstal.exe"
Task: {A82EA219-3975-469E-988D-346C549C33B7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-11-22] (Microsoft Corporation)
Task: {AEF3D557-52D5-4E75-84E6-B896AD3E2238} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {BE64D443-6E84-4057-8E30-7E88755147DD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-09-19] (NVIDIA Corporation)
Task: {C645944C-1D3E-44CF-A929-42230C113E1A} - System32\Tasks\OneSafe Driver Manager Schedule => C:\Program Files (x86)\OneSafe Driver Manager\SDMTray.exe [2017-03-06] (Avanquest)
Task: {EA4E60BA-0B53-405C-B6D9-D56807DFA359} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-26] ()
Task: {EB7B3B19-35D0-4EF2-AF93-F947A79AC2F4} - System32\Tasks\SafeZone scheduled Autoupdate 1476703250 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {EBE1F840-C5C0-4384-AF71-B14ED67A28BE} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
Task: {ECBE5878-1DF6-4466-A41B-BBD9D55CBF2B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-03] (Google Inc.)
Task: {F36CAE07-6BB0-489C-B20C-C8DFAE1967ED} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-07-16 22:42 - 2016-07-16 22:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-09-13 13:24 - 2017-09-07 17:01 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-14 08:08 - 2016-09-07 15:56 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-17 19:21 - 2017-03-04 17:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 000087040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-12-06 13:23 - 2017-12-06 13:24 - 000202752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 025600000 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 002546176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\skypert.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 000672256 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2016-07-16 22:42 - 2016-07-16 22:42 - 000361984 _____ () C:\WINDOWS\SYSTEM32\HrtfApo.dll
2017-03-17 19:22 - 2017-03-04 17:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-17 19:22 - 2017-03-04 17:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-17 19:22 - 2017-03-04 17:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-11-28 18:26 - 2017-11-18 14:28 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-11-28 18:26 - 2017-11-18 14:28 - 002424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-11-28 18:26 - 2017-11-18 14:31 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-05-23 18:28 - 2017-05-23 18:28 - 003918848 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [144]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-09-09 01:22 - 2016-09-30 01:49 - 000000985 _____ C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\Control Panel\Desktop\\Wallpaper -> c:\users\tommy\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\13875077_10210969134888825_380826974_n.jpg
DNS Servers: 103.24.112.10 - 202.22.131.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: BcmBtRSupport => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: DSAService => 2
MSCONFIG\Services: ESRV_SVC_QUEENCREEK => 2
MSCONFIG\Services: FirefoxU => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: hpsrv => 2
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: igfxCUIService2.0.0.0 => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvContainerLocalSystem => 2
MSCONFIG\Services: NvContainerNetworkService => 3
MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: NvTelemetryContainer => 2
MSCONFIG\Services: Razer Game Manager Service => 2
MSCONFIG\Services: RtkAudioService => 2
MSCONFIG\Services: RzActionSvc => 2
MSCONFIG\Services: RzKLService => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: SynTPEnhService => 2
MSCONFIG\Services: SystemUsageReportSvc_QUEENCREEK => 2
MSCONFIG\Services: USER_ESRV_SVC_QUEENCREEK => 2
HKLM\...\StartupApproved\Run: => "gplyra"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "SaiMfd"
HKLM\...\StartupApproved\Run: => "ProfilerU"
HKLM\...\StartupApproved\Run: => "AvastUI.exe"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run32: => "app"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "msiql"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "apphide"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "Overwolf"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{3963433A-A44F-4977-9066-680A638DF06C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F26896E3-5708-4159-AC7D-EEA1C99D39D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CD43FBFC-B861-4E3C-80D7-8F3F2AE993D5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8371AC33-64DB-4E61-8CB5-0DB36C58FC7D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{62008B29-1DC9-4EA9-B858-A0A8497AC76E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{A28AE392-81C1-4412-A316-A7558BAFF6A0}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{EF70805B-EDC7-41A7-8B42-EED0F44757B3}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{55FCC5BF-B980-4A4D-B83E-AB307341D00C}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{A65BBE1D-CE64-4931-95ED-8C20A04EC6F3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BAE1BC65-E997-4875-80B1-68F6849837A8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2D566E5B-FF0F-4A03-84BE-FBCF0F360D3B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{59D473CE-9884-4100-84F9-DAAFBB907A7E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{244CFDC3-39DD-4455-84BA-229A444C5241}] => (Allow) C:\Users\Tommy\AppData\Local\Temp\is-O6G14.tmp\download\MiniThunderPlatform.exe
FirewallRules: [{CBC1921B-AE7C-4E57-931B-E594A253AA3F}] => (Allow) C:\Program Files (x86)\GreatMaker\MaohaWiFi\MaohaWifiSvr.exe
FirewallRules: [{EFA670D3-4CD0-42D8-BE68-A19D82A9EFD9}] => (Allow) C:\Program Files (x86)\GreatMaker\MaohaWiFi\DrvUpdate.exe
FirewallRules: [TCP Query User{060CBEBB-E056-4DCD-BB2D-F38EBB18BA82}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{25E2E125-B7CB-4563-B1ED-78D885CEF472}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe
FirewallRules: [{411A3229-FF80-4DAF-9D9B-DA973DBDE506}] => (Allow) C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe
FirewallRules: [{352D8B7B-9F0F-4126-B204-E7A8D80306F7}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
FirewallRules: [{CC14BC0D-CADF-4A7F-8A83-91FB7575909B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{8112611D-8775-4535-BBE3-4853594128D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{A5D09093-C83B-4FC4-A5E8-83C9F15DFE4E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{D34C7E21-09E1-4F40-9187-5245FA6EA815}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F7F88026-E7AF-40D9-AB84-A3A2CBD1927B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{94ECAB24-EBCE-4524-8F2A-3E3F9247E4CB}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561\SZBrowser.exe
FirewallRules: [{0C953A7B-5B9B-408E-8B3A-4D2985F03138}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C8C9B7FC-C1E8-42B2-8CA5-849F9051B997}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{9DF1F263-5B84-4929-9B64-92646FD166A7}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe
FirewallRules: [UDP Query User{3C2E961A-430A-42F5-A908-177400B8B6F8}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe
FirewallRules: [TCP Query User{620DD5B2-15FE-451A-825C-D9117E2D6097}C:\program files (x86)\steam\steamapps\common\lms\lms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\lms.exe
FirewallRules: [UDP Query User{3EB7E857-4FA6-4438-AB39-2D170300BD15}C:\program files (x86)\steam\steamapps\common\lms\lms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\lms.exe
FirewallRules: [TCP Query User{FFDD22AF-C301-4655-AF50-6C07AB01D13B}C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{4D70F747-AA28-4670-813C-52CC8D445762}C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [{A975580F-1BBD-4B88-A4D5-8E7D48D8F799}] => (Allow) C:\Program Files (x86)\Brick-Force\BfLauncher.exe
FirewallRules: [{0908F248-B723-4541-BB3A-D382EF0D7111}] => (Allow) C:\Program Files (x86)\Brick-Force\BrickForce.exe
FirewallRules: [TCP Query User{5CD7EF3E-9369-447C-BF9B-2349CD563936}C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe
FirewallRules: [UDP Query User{818F2462-805B-4FFF-9A1C-629694F37622}C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe
FirewallRules: [TCP Query User{84FD5FB0-BCD8-449E-B70B-3C1944BCD4B8}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [UDP Query User{CC0FC603-9F9B-4868-A4DD-B6A81836CAC7}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [TCP Query User{29277BA1-C596-4D65-8F0F-E310D09CFD51}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe
FirewallRules: [UDP Query User{FE98D4EF-6273-4F83-AC08-6B593E0CBEE2}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe
FirewallRules: [{45767A8C-5E3D-4C69-9D6F-EEBD1EA77DB8}] => (Allow) C:\Users\Tommy\AppData\Roaming\QB\9.4.8071.400\qqbrowser.exe
FirewallRules: [{B24E31F4-B083-4CC9-B3E4-B86CD38C82EE}] => (Allow) C:\Users\Tommy\AppData\Roaming\QB\9.4.8071.400\qqbrowser.exe
FirewallRules: [{61D92BAD-A58A-444A-9E4E-10ACC9B4290D}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{993979E2-DF80-4FA2-AB7D-E51D048D7DDB}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [TCP Query User{52B39003-5F34-445F-A89F-9E3F6B96FF16}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{8F9FB426-924D-4EF2-A80C-BE4AEC32A9FA}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{3FDE8BD0-1B8C-4381-804F-3B1DDB41CD77}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{01160DF3-A7A1-43EB-97E8-65733CB25B22}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [{219ABF54-6A36-401B-A8FC-1E9F9909E967}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{CB6E10A6-0AB4-40C4-B2C2-8D206AACA9EC}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{9C0A7CB9-B6DD-4775-9FF5-D7E6183C1415}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{66850DA5-D7EE-412B-8EF3-57214D0B25B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{F6B45954-18B2-4D6D-89C1-BC36D34372DC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{7850F0EB-5AD3-41F1-9DC8-2EF0069D2CD0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{11703673-8422-4B64-A1D2-700381A7C1A8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9D31CC1A-D131-4DF9-B9ED-CC3F209E0FBB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Points de restauration =========================
28-11-2017 18:28:42 Windows Update
07-12-2017 11:04:15 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (12/10/2017 11:35:44 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/10/2017 10:49:09 AM) (Source: COM) (EventID: 10031) (User: )
Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {2CD39202-3A2F-4935-9A86-65B919919A7F} a été refusée
Error: (12/10/2017 09:58:11 AM) (Source: COM) (EventID: 10031) (User: )
Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {2CD39202-3A2F-4935-9A86-65B919919A7F} a été refusée
Error: (12/10/2017 07:53:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/09/2017 11:28:56 PM) (Source: BugSplat) (EventID: 1) (User: )
Description: Event-ID 1
Error: (12/09/2017 11:36:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/09/2017 04:55:13 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/08/2017 01:21:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/08/2017 04:59:56 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/07/2017 05:42:58 PM) (Source: COM) (EventID: 10031) (User: )
Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {2CD39202-3A2F-4935-9A86-65B919919A7F} a été refusée
Erreurs système:
=============
Error: (12/10/2017 10:45:36 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UHECBA0)
Description: Le serveur {37998346-3765-45B1-8C66-AA88CA6B20B8} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/10/2017 10:43:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (12/10/2017 09:20:53 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UHECBA0)
Description: Le serveur {37998346-3765-45B1-8C66-AA88CA6B20B8} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/10/2017 09:18:53 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (12/10/2017 08:51:27 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UHECBA0)
Description: Le serveur {37998346-3765-45B1-8C66-AA88CA6B20B8} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/10/2017 08:49:27 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (12/10/2017 07:52:26 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-UHECBA0)
Description: Les paramètres d’autorisation par défaut de l’ordinateur n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
et l’APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
au SID DESKTOP-UHECBA0\Tommy de l’utilisateur (S-1-5-21-3743351136-2030051214-778605851-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c du conteneur d’applications (S-1-15-2-2246530975-808720366-1776470054-230329187-4153223113-3550430174-4193313734). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (12/10/2017 07:51:22 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
et l’APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (12/10/2017 07:50:45 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 00:51:22 le 10/12/2017 n’était pas prévu.
Error: (12/10/2017 01:05:57 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
CodeIntegrity:
===================================
Date: 2017-12-10 23:25:09.995
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 23:25:09.992
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 22:40:37.571
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 22:40:37.569
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 07:50:41.221
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-12-09 06:43:25.836
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvhm.inf_amd64_f0b2a5e1e71031b3\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-09 04:51:14.251
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-12-08 05:51:10.147
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvhm.inf_amd64_f0b2a5e1e71031b3\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-08 04:57:26.858
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-12-07 16:51:18.691
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Pourcentage de mémoire utilisée: 24%
Mémoire physique - RAM - totale: 8122.15 MB
Mémoire physique - RAM - disponible: 6105.64 MB
Mémoire virtuelle totale: 20122.15 MB
Mémoire virtuelle disponible: 18079.49 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:444.02 GB) (Free:347.55 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:19.88 GB) (Free:1.99 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 9266D13C)
Partition: GPT.
==================== Fin de Addition.txt ============================
Exécuté par Tommy (10-12-2017 23:27:16)
Exécuté depuis C:\Users\Tommy\Desktop
Windows 10 Home Version 1607 14393.1914 (X64) (2016-09-08 05:12:39)
Mode d'amorçage: Normal
==========================================================
==================== Comptes: =============================
Administrateur (S-1-5-21-3743351136-2030051214-778605851-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3743351136-2030051214-778605851-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-3743351136-2030051214-778605851-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-3743351136-2030051214-778605851-501 - Limited - Disabled)
Tommy (S-1-5-21-3743351136-2030051214-778605851-1001 - Administrator - Enabled) => C:\Users\Tommy
==================== Centre de sécurité ========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Programmes installés ======================
(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)
. . (HKLM\...\{9C40698F-A953-4658-AFF2-F7BB385A3910}) (Version: 7.1 - Intel) Hidden
. . . (HKLM-x32\...\{870E5275-5457-4BBC-98C9-BFF4B70AA5D3}) (Version: 3.1.0.12 - Intel) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 27.0.0.124 - Adobe Systems Incorporated)
amuleC (HKLM-x32\...\{19539992-061C-4E8B-9053-07B175303AF4}) (Version: 1.0.1 - amuleC) <==== ATTENTION
Ansel (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Ansel) (Version: 385.69 - NVIDIA Corporation) Hidden
Apple Application Support (32 bits) (HKLM-x32\...\{D2FE6376-E549-4F63-A2C5-CA24DA035DE4}) (Version: 5.6 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{BB109E24-EE90-485B-A28B-ADDEFB40540B}) (Version: 5.6 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{0A596141-97D5-45FA-9281-98DFAF48D579}) (Version: 10.3.2.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{52D87F32-70E4-4348-8148-C0B9F35B1314}) (Version: 2.3.0.177 - Apple Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Broadcom 802.11 Network Adapter (HKLM\...\Broadcom 802.11 Network Adapter) (Version: 7.35.317.3 - Broadcom Corporation)
CCleaner (HKLM\...\CCleaner) (Version: 5.22 - Piriform)
Discord (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\Discord) (Version: 0.0.298 - Discord Inc.)
Dofus (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\2744A393-554C-4E35-A24F-DEF0392B4484-1) (Version: - Ankama)
Dofus (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\2744A393-554C-4E35-A24F-DEF0392B4484-2) (Version: - Ankama)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 63.0.3239.84 - Google Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{18455581-E099-4BA8-BC6B-F34B2F06600C}) (Version: 1.0.0 - Google Inc.) Hidden
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.8231.2252 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.21.169 - Google Inc.) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.15.4279 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.10.0.1016 - Intel Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{2550a40e-aac6-4d21-9361-744d33bec573}) (Version: 3.1.0.12 - Intel)
iTunes (HKLM\...\{02F95875-9527-49CC-B32F-970ADAEBD1EF}) (Version: 12.6.2.20 - Apple Inc.)
Java 8 Update 151 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Microsoft Office Excel Viewer (HKLM-x32\...\{95120000-003F-0409-0000-0000000FF1CE}) (Version: 12.0.6219.1000 - Microsoft Corporation)
Microsoft Office Professionnel 2016 - fr-fr (HKLM\...\ProfessionalRetail - fr-fr) (Version: 16.0.8625.2139 - Microsoft Corporation)
Microsoft Office Word Viewer 2003 (HKLM-x32\...\{9085040C-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation)
Mises à jour NVIDIA 28.0.0.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 28.0.0.0 - NVIDIA Corporation) Hidden
Mozilla Firefox 49.0.2 (x86 fr) (HKLM-x32\...\Mozilla Firefox 49.0.2 (x86 fr)) (Version: 49.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 49.0.2.6136 - Mozilla)
NVIDIA GeForce Experience 3.9.0.97 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.9.0.97 - NVIDIA Corporation)
NVIDIA Logiciel système PhysX 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
NVIDIA Pilote graphique 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 385.69 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8625.2139 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2139 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2139 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.8326.2107 - Microsoft Corporation) Hidden
OneSafe Driver Manager v4.0 (HKLM-x32\...\OneSafe Driver Manager_is1) (Version: 4.0 - Avanquest)
Panneau de configuration NVIDIA 385.69 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel) (Version: 385.69 - NVIDIA Corporation) Hidden
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 8.4.17.561 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
SafeZone Stable 1.51.2220.62 (HKLM-x32\...\SafeZone 1.51.2220.62) (Version: 1.51.2220.62 - Avast Software) Hidden
SafeZone Stable 3.55.2393.561 (HKLM-x32\...\SafeZone 3.55.2393.561) (Version: 3.55.2393.561 - Avast Software) Hidden
Smart Technology Programming Software 7.0.45.2 (HKLM\...\{828CE472-5B59-490C-B161-F7CAFEE7F4C0}) (Version: 7.0.45.2 - Mad Catz)
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics ClickPad Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.11.45 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{DE083343-D24D-4495-919E-18C65EC0F289}) (Version: 2.8.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.54.1 (HKLM\...\VulkanRT1.0.54.1) (Version: 1.0.54.1 - LunarG, Inc.) Hidden
Winamax Installer (HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\Winamax Installer 2.0) (Version: 2.0 - Winamax)
Windows 10 Update and Privacy Settings (HKLM\...\{4DFCD818-036A-4229-A67D-CF17DC461D92}) (Version: 1.0.14.0 - Microsoft Corporation)
Windows Driver Package - Cambridge Silicon Radio Ltd. (CSRBC) USB (04/21/2011 01.0.0.0) (HKLM\...\BEA7B05370C19B9C86893BB484FD6B9CC52B0CD8) (Version: 04/21/2011 01.0.0.0 - Cambridge Silicon Radio Ltd.)
WinRAR 5.40 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.40.0 - win.rar GmbH)
==================== Personnalisé CLSID (Avec liste blanche): ==========================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Pas de fichier
ContextMenuHandlers1: [KuaiZipShlExt] -> {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} => -> Pas de fichier
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers2: [KuaiZipShlExt] -> {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} => -> Pas de fichier
ContextMenuHandlers4: [KuaiZipShlExt] -> {6ADF19E3-77A3-4395-ADB4-9FD7D351EB3E} => -> Pas de fichier
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2015-09-09] (Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2017-09-17] (NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2016-08-15] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2016-08-15] (Alexander Roshal)
==================== Tâches planifiées (Avec liste blanche) =============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
Task: {06D88075-5747-42F9-8A2F-15D9EB2A407C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {1D148092-20F3-4B82-AE93-A0747C1437B4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {1F8585F9-3814-4A57-B21E-49C32E07AFE1} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-26] ()
Task: {25D90C00-6C59-4F05-9E14-5A232883A72B} - System32\Tasks\{DBA0012A-75E4-4A3F-9A24-18E859E59567} => C:\WINDOWS\system32\pcalua.exe -a C:\Users\Tommy\Downloads\RAT_3_Mouse_7_0_57_16_x64_Drivers(1).exe -d C:\Users\Tommy\Downloads
Task: {26FA3641-923F-44E4-857D-D2D38554C170} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-11-22] (Microsoft Corporation)
Task: {2B24E13C-85F6-46BA-BBAE-E076BF088952} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [2016-03-17] (Intel Corporation)
Task: {353F6072-496C-46C9-9BA7-ED046945E788} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-09-19] (NVIDIA Corporation)
Task: {36885BAD-E180-4046-A7C7-EFC70DCF6491} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2016-08-27] (Piriform Ltd)
Task: {3948CE1D-866E-432A-A09C-B629039C9B70} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
Task: {42495203-05CF-4202-B24C-7667582B7D29} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {4664FAB4-552F-4474-AAB4-641E46F4E9C6} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-09-19] (NVIDIA Corporation)
Task: {53D47282-20BC-4794-9F2D-CF97FB187BDF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2017-02-14] (Apple Inc.)
Task: {63ACE0A6-0F57-461A-88F8-3D39C0ABC5F2} - System32\Tasks\{DEB474AB-3FD2-4D7B-93A1-28643F40915C} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Tencent\QQPCMgr\11.0.16794.227\Uninst.exe"
Task: {704B1136-78E0-44DE-9856-8181F771593E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-03] (Google Inc.)
Task: {843FC0A0-A189-4F38-A845-C036471DC137} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-10-19] (Adobe Systems Incorporated)
Task: {8CCE3DF6-23AB-417E-B5AC-5144720906DD} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-09-19] (NVIDIA Corporation)
Task: {8F0F18E4-2FFC-4168-A3E1-82830F667CF4} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {94C1F4E6-D32A-440B-9545-DF8AB6BB8CE4} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-09-19] (NVIDIA Corporation)
Task: {9679F874-D667-4EA1-91FE-6A9163D0DB6E} - System32\Tasks\{79BCB4EA-14D3-4597-8CD9-6FEE3749A705} => C:\WINDOWS\system32\pcalua.exe -a "C:\Program Files (x86)\Dofus\Uninstal.exe"
Task: {A82EA219-3975-469E-988D-346C549C33B7} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-11-22] (Microsoft Corporation)
Task: {AEF3D557-52D5-4E75-84E6-B896AD3E2238} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2017-10-09] (Microsoft Corporation)
Task: {BE64D443-6E84-4057-8E30-7E88755147DD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-09-19] (NVIDIA Corporation)
Task: {C645944C-1D3E-44CF-A929-42230C113E1A} - System32\Tasks\OneSafe Driver Manager Schedule => C:\Program Files (x86)\OneSafe Driver Manager\SDMTray.exe [2017-03-06] (Avanquest)
Task: {EA4E60BA-0B53-405C-B6D9-D56807DFA359} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-09-26] ()
Task: {EB7B3B19-35D0-4EF2-AF93-F947A79AC2F4} - System32\Tasks\SafeZone scheduled Autoupdate 1476703250 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe
Task: {EBE1F840-C5C0-4384-AF71-B14ED67A28BE} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
Task: {ECBE5878-1DF6-4466-A41B-BBD9D55CBF2B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-10-03] (Google Inc.)
Task: {F36CAE07-6BB0-489C-B20C-C8DFAE1967ED} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-09-19] (NVIDIA Corporation)
(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Raccourcis & WMI ========================
(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)
==================== Modules chargés (Avec liste blanche) ==============
2016-07-16 22:42 - 2016-07-16 22:42 - 000231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2017-09-13 13:24 - 2017-09-07 17:01 - 002681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-14 08:08 - 2016-09-07 15:56 - 000134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-03-17 19:21 - 2017-03-04 17:31 - 000474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 000087040 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-12-06 13:23 - 2017-12-06 13:24 - 000202752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 025600000 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 002546176 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\skypert.dll
2017-12-06 13:23 - 2017-12-06 13:24 - 000672256 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2016-07-16 22:42 - 2016-07-16 22:42 - 000361984 _____ () C:\WINDOWS\SYSTEM32\HrtfApo.dll
2017-03-17 19:22 - 2017-03-04 17:12 - 009760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-03-17 19:22 - 2017-03-04 17:05 - 001401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-03-17 19:22 - 2017-03-04 17:05 - 000757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-11-28 18:26 - 2017-11-18 14:28 - 001033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-11-28 18:26 - 2017-11-18 14:28 - 002424832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-11-28 18:26 - 2017-11-18 14:31 - 004853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-05-23 18:28 - 2017-05-23 18:28 - 003918848 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1705.1301.0_x64__8wekyb3d8bbwe\Calculator.exe
==================== Alternate Data Streams (Avec liste blanche) =========
(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)
AlternateDataStreams: C:\ProgramData\TEMP:CB0AACC9 [144]
==================== Mode sans échec (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\QQPCRTP => ""="service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\QQPCRTP => ""="service"
==================== Association (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)
==================== Internet Explorer sites de confiance/sensibles ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)
==================== Hosts contenu: ==========================
(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)
2016-09-09 01:22 - 2016-09-30 01:49 - 000000985 _____ C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 down.baidu2016.com
127.0.0.1 123.sogou.com
127.0.0.1 www.czzsyzgm.com
127.0.0.1 www.czzsyzxl.com
127.0.0.1 union.baidu2019.com
==================== Autres zones ============================
(Actuellement, il n'y a pas de correction automatique pour cette section.)
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\Control Panel\Desktop\\Wallpaper -> c:\users\tommy\appdata\local\microsoft\windows\themes\roamedthemefiles\desktopbackground\13875077_10210969134888825_380826974_n.jpg
DNS Servers: 103.24.112.10 - 202.22.131.30
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.
==================== MSCONFIG/TASK MANAGER éléments désactivés ==
MSCONFIG\Services: AdobeFlashPlayerUpdateSvc => 3
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: BcmBtRSupport => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: cphs => 3
MSCONFIG\Services: DSAService => 2
MSCONFIG\Services: ESRV_SVC_QUEENCREEK => 2
MSCONFIG\Services: FirefoxU => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: gusvc => 3
MSCONFIG\Services: hpsrv => 2
MSCONFIG\Services: IAStorDataMgrSvc => 2
MSCONFIG\Services: igfxCUIService2.0.0.0 => 2
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: MBAMService => 2
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: NvContainerLocalSystem => 2
MSCONFIG\Services: NvContainerNetworkService => 3
MSCONFIG\Services: NVDisplay.ContainerLocalSystem => 2
MSCONFIG\Services: nvsvc => 2
MSCONFIG\Services: NvTelemetryContainer => 2
MSCONFIG\Services: Razer Game Manager Service => 2
MSCONFIG\Services: RtkAudioService => 2
MSCONFIG\Services: RzActionSvc => 2
MSCONFIG\Services: RzKLService => 2
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: SynTPEnhService => 2
MSCONFIG\Services: SystemUsageReportSvc_QUEENCREEK => 2
MSCONFIG\Services: USER_ESRV_SVC_QUEENCREEK => 2
HKLM\...\StartupApproved\Run: => "gplyra"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run: => "SaiMfd"
HKLM\...\StartupApproved\Run: => "ProfilerU"
HKLM\...\StartupApproved\Run: => "AvastUI.exe"
HKLM\...\StartupApproved\Run: => "Malwarebytes TrayApp"
HKLM\...\StartupApproved\Run32: => "app"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "msiql"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "apphide"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "uTorrent"
HKU\S-1-5-21-3743351136-2030051214-778605851-1001\...\StartupApproved\Run: => "Overwolf"
==================== RèglesPare-feu (Avec liste blanche) ===============
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
FirewallRules: [{3963433A-A44F-4977-9066-680A638DF06C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F26896E3-5708-4159-AC7D-EEA1C99D39D3}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CD43FBFC-B861-4E3C-80D7-8F3F2AE993D5}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{8371AC33-64DB-4E61-8CB5-0DB36C58FC7D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{62008B29-1DC9-4EA9-B858-A0A8497AC76E}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{A28AE392-81C1-4412-A316-A7558BAFF6A0}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{EF70805B-EDC7-41A7-8B42-EED0F44757B3}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{55FCC5BF-B980-4A4D-B83E-AB307341D00C}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{A65BBE1D-CE64-4931-95ED-8C20A04EC6F3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{BAE1BC65-E997-4875-80B1-68F6849837A8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{2D566E5B-FF0F-4A03-84BE-FBCF0F360D3B}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{59D473CE-9884-4100-84F9-DAAFBB907A7E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{244CFDC3-39DD-4455-84BA-229A444C5241}] => (Allow) C:\Users\Tommy\AppData\Local\Temp\is-O6G14.tmp\download\MiniThunderPlatform.exe
FirewallRules: [{CBC1921B-AE7C-4E57-931B-E594A253AA3F}] => (Allow) C:\Program Files (x86)\GreatMaker\MaohaWiFi\MaohaWifiSvr.exe
FirewallRules: [{EFA670D3-4CD0-42D8-BE68-A19D82A9EFD9}] => (Allow) C:\Program Files (x86)\GreatMaker\MaohaWiFi\DrvUpdate.exe
FirewallRules: [TCP Query User{060CBEBB-E056-4DCD-BB2D-F38EBB18BA82}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{25E2E125-B7CB-4563-B1ED-78D885CEF472}C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base46690\heroesofthestorm_x64.exe
FirewallRules: [{411A3229-FF80-4DAF-9D9B-DA973DBDE506}] => (Allow) C:\Program Files (x86)\Firefox\bin\FirefoxUpdate.exe
FirewallRules: [{352D8B7B-9F0F-4126-B204-E7A8D80306F7}] => (Allow) C:\Program Files (x86)\Firefox\Firefox.exe
FirewallRules: [{CC14BC0D-CADF-4A7F-8A83-91FB7575909B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{8112611D-8775-4535-BBE3-4853594128D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{A5D09093-C83B-4FC4-A5E8-83C9F15DFE4E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{D34C7E21-09E1-4F40-9187-5245FA6EA815}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F7F88026-E7AF-40D9-AB84-A3A2CBD1927B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{94ECAB24-EBCE-4524-8F2A-3E3F9247E4CB}] => (Allow) C:\Program Files\AVAST Software\SZBrowser\3.55.2393.561\SZBrowser.exe
FirewallRules: [{0C953A7B-5B9B-408E-8B3A-4D2985F03138}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{C8C9B7FC-C1E8-42B2-8CA5-849F9051B997}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [TCP Query User{9DF1F263-5B84-4929-9B64-92646FD166A7}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe
FirewallRules: [UDP Query User{3C2E961A-430A-42F5-A908-177400B8B6F8}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1490338988_91148\teniodl.exe
FirewallRules: [TCP Query User{620DD5B2-15FE-451A-825C-D9117E2D6097}C:\program files (x86)\steam\steamapps\common\lms\lms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\lms.exe
FirewallRules: [UDP Query User{3EB7E857-4FA6-4438-AB39-2D170300BD15}C:\program files (x86)\steam\steamapps\common\lms\lms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\lms.exe
FirewallRules: [TCP Query User{FFDD22AF-C301-4655-AF50-6C07AB01D13B}C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{4D70F747-AA28-4670-813C-52CC8D445762}C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\skyforge\mycomgames\mycomgames.exe
FirewallRules: [{A975580F-1BBD-4B88-A4D5-8E7D48D8F799}] => (Allow) C:\Program Files (x86)\Brick-Force\BfLauncher.exe
FirewallRules: [{0908F248-B723-4541-BB3A-D382EF0D7111}] => (Allow) C:\Program Files (x86)\Brick-Force\BrickForce.exe
FirewallRules: [TCP Query User{5CD7EF3E-9369-447C-BF9B-2349CD563936}C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe
FirewallRules: [UDP Query User{818F2462-805B-4FFF-9A1C-629694F37622}C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lms\launcher.exe.new.exe
FirewallRules: [TCP Query User{84FD5FB0-BCD8-449E-B70B-3C1944BCD4B8}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [UDP Query User{CC0FC603-9F9B-4868-A4DD-B6A81836CAC7}C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\newz\thenewz.exe
FirewallRules: [TCP Query User{29277BA1-C596-4D65-8F0F-E310D09CFD51}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe
FirewallRules: [UDP Query User{FE98D4EF-6273-4F83-AC08-6B593E0CBEE2}C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe] => (Allow) C:\users\tommy\appdata\local\temp\commongamedownloader\268_1492762942_22116\teniodl.exe
FirewallRules: [{45767A8C-5E3D-4C69-9D6F-EEBD1EA77DB8}] => (Allow) C:\Users\Tommy\AppData\Roaming\QB\9.4.8071.400\qqbrowser.exe
FirewallRules: [{B24E31F4-B083-4CC9-B3E4-B86CD38C82EE}] => (Allow) C:\Users\Tommy\AppData\Roaming\QB\9.4.8071.400\qqbrowser.exe
FirewallRules: [{61D92BAD-A58A-444A-9E4E-10ACC9B4290D}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\tencentdl.exe
FirewallRules: [{993979E2-DF80-4FA2-AB7D-E51D048D7DDB}] => (Allow) C:\program files (x86)\common files\tencent\qqdownload\130\bugreport_xf.exe
FirewallRules: [TCP Query User{52B39003-5F34-445F-A89F-9E3F6B96FF16}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [UDP Query User{8F9FB426-924D-4EF2-A80C-BE4AEC32A9FA}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe
FirewallRules: [TCP Query User{3FDE8BD0-1B8C-4381-804F-3B1DDB41CD77}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [UDP Query User{01160DF3-A7A1-43EB-97E8-65733CB25B22}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe
FirewallRules: [{219ABF54-6A36-401B-A8FC-1E9F9909E967}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [{CB6E10A6-0AB4-40C4-B2C2-8D206AACA9EC}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{9C0A7CB9-B6DD-4775-9FF5-D7E6183C1415}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{66850DA5-D7EE-412B-8EF3-57214D0B25B9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{F6B45954-18B2-4D6D-89C1-BC36D34372DC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
FirewallRules: [{7850F0EB-5AD3-41F1-9DC8-2EF0069D2CD0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{11703673-8422-4B64-A1D2-700381A7C1A8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{9D31CC1A-D131-4DF9-B9ED-CC3F209E0FBB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Points de restauration =========================
28-11-2017 18:28:42 Windows Update
07-12-2017 11:04:15 Point de contrôle planifié
==================== Éléments en erreur du Gestionnaire de périphériques =============
==================== Erreurs du Journal des événements: =========================
Erreurs Application:
==================
Error: (12/10/2017 11:35:44 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/10/2017 10:49:09 AM) (Source: COM) (EventID: 10031) (User: )
Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {2CD39202-3A2F-4935-9A86-65B919919A7F} a été refusée
Error: (12/10/2017 09:58:11 AM) (Source: COM) (EventID: 10031) (User: )
Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {2CD39202-3A2F-4935-9A86-65B919919A7F} a été refusée
Error: (12/10/2017 07:53:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/09/2017 11:28:56 PM) (Source: BugSplat) (EventID: 1) (User: )
Description: Event-ID 1
Error: (12/09/2017 11:36:20 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/09/2017 04:55:13 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/08/2017 01:21:38 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/08/2017 04:59:56 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: DESKTOP-UHECBA0)
Description: Échec de l’activation de l’application Microsoft.Getstarted_8wekyb3d8bbwe!App avec l’erreur : -2144927148 Pour plus d’informations, voir le journal Microsoft-Windows-TWinUI/Opérationnel.
Error: (12/07/2017 05:42:58 PM) (Source: COM) (EventID: 10031) (User: )
Description: Une vérification de stratégie d’unmarshaling a été effectuée lors de l’unmarshaling d’un objet marshalé personnalisé et la classe {2CD39202-3A2F-4935-9A86-65B919919A7F} a été refusée
Erreurs système:
=============
Error: (12/10/2017 10:45:36 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UHECBA0)
Description: Le serveur {37998346-3765-45B1-8C66-AA88CA6B20B8} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/10/2017 10:43:36 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (12/10/2017 09:20:53 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UHECBA0)
Description: Le serveur {37998346-3765-45B1-8C66-AA88CA6B20B8} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/10/2017 09:18:53 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (12/10/2017 08:51:27 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-UHECBA0)
Description: Le serveur {37998346-3765-45B1-8C66-AA88CA6B20B8} ne s’est pas enregistré sur DCOM avant la fin du temps imparti.
Error: (12/10/2017 08:49:27 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
Error: (12/10/2017 07:52:26 AM) (Source: DCOM) (EventID: 10016) (User: DESKTOP-UHECBA0)
Description: Les paramètres d’autorisation par défaut de l’ordinateur n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
et l’APPID
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
au SID DESKTOP-UHECBA0\Tommy de l’utilisateur (S-1-5-21-3743351136-2030051214-778605851-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Microsoft.SkypeApp_12.9.604.0_x64__kzf8qxf38zg5c du conteneur d’applications (S-1-15-2-2246530975-808720366-1776470054-230329187-4153223113-3550430174-4193313734). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (12/10/2017 07:51:22 AM) (Source: DCOM) (EventID: 10016) (User: AUTORITE NT)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
et l’APPID
{F72671A9-012C-4725-9D2F-2A4D32D65169}
au SID AUTORITE NT\Système de l’utilisateur (S-1-5-18) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.
Error: (12/10/2017 07:50:45 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: L’arrêt système précédant à 00:51:22 le 10/12/2017 n’était pas prévu.
Error: (12/10/2017 01:05:57 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Le service Service de plateforme des appareils connectés s’est arrêté avec l’erreur :
Erreur non spécifiée
CodeIntegrity:
===================================
Date: 2017-12-10 23:25:09.995
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 23:25:09.992
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 22:40:37.571
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 22:40:37.569
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-10 07:50:41.221
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-12-09 06:43:25.836
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvhm.inf_amd64_f0b2a5e1e71031b3\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-09 04:51:14.251
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-12-08 05:51:10.147
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Windows\System32\DriverStore\FileRepository\nvhm.inf_amd64_f0b2a5e1e71031b3\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-12-08 04:57:26.858
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2017-12-07 16:51:18.691
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\drivers\SaiBus.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Infos Mémoire ===========================
Processeur: Intel(R) Core(TM) i5-4210U CPU @ 1.70GHz
Pourcentage de mémoire utilisée: 24%
Mémoire physique - RAM - totale: 8122.15 MB
Mémoire physique - RAM - disponible: 6105.64 MB
Mémoire virtuelle totale: 20122.15 MB
Mémoire virtuelle disponible: 18079.49 MB
==================== Lecteurs ================================
Drive c: (Windows) (Fixed) (Total:444.02 GB) (Free:347.55 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:19.88 GB) (Free:1.99 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]
==================== MBR & Table des partitions ==================
========================================================
Disk: 0 (Size: 465.8 GB) (Disk ID: 9266D13C)
Partition: GPT.
==================== Fin de Addition.txt ============================