Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 16.05.2018 01 Exécuté par amine (20-05-2018 22:31:30) Exécuté depuis C:\Users\amine\Desktop Windows 7 Ultimate Service Pack 1 (X64) (2014-10-25 02:26:29) Mode d'amorçage: Normal ========================================================== ==================== Comptes: ============================= abdennour (S-1-5-21-1726015121-2290051172-3778237215-1004 - Limited - Enabled) => C:\Users\abdennour Administrateur (S-1-5-21-1726015121-2290051172-3778237215-500 - Administrator - Disabled) amine (S-1-5-21-1726015121-2290051172-3778237215-1005 - Administrator - Enabled) => C:\Users\amine HomeGroupUser$ (S-1-5-21-1726015121-2290051172-3778237215-1002 - Limited - Enabled) Invité (S-1-5-21-1726015121-2290051172-3778237215-501 - Limited - Disabled) tayeb (S-1-5-21-1726015121-2290051172-3778237215-1003 - Limited - Enabled) => C:\Users\tayeb USER (S-1-5-21-1726015121-2290051172-3778237215-1000 - Administrator - Enabled) => C:\Users\USER ==================== Centre de sécurité ======================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.) AV: Kaspersky Internet Security (Disabled - Out of date) {179979E8-273D-D14E-0543-2861940E4886} AS: Kaspersky Internet Security (Disabled - Up to date) {ACF8980C-0107-DEC0-3FF3-1313EF89023B} AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security (Disabled) {2FA2F8CD-6D52-D016-2E1C-81546ADD0FFD} ==================== Programmes installés ====================== (Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.) Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 18.011.20040 - Adobe Systems Incorporated) Adobe Flash Player 29 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 29.0.0.171 - Adobe Systems Incorporated) Android Studio (HKLM\...\Android Studio) (Version: 1.0 - Google Inc.) Apple Application Support (32 bits) (HKLM-x32\...\{7FA9ECCF-A2DE-4DA1-BFF3-81260DBDA68F}) (Version: 4.1.2 - Apple Inc.) Apple Application Support (64 bits) (HKLM\...\{691F30EB-9009-475A-B8A9-E1BF39598FD5}) (Version: 4.1.2 - Apple Inc.) Apple Mobile Device Support (HKLM\...\{3540181E-340A-4E7A-B409-31663472B2F7}) (Version: 9.1.0.6 - Apple Inc.) Apple Software Update (HKLM-x32\...\{FFD1F7F1-1AC9-4BC4-A908-0686D635ABAF}) (Version: 2.1.4.131 - Apple Inc.) CCleaner (HKLM\...\CCleaner) (Version: 5.38 - Piriform) CDBurnerXP (HKLM-x32\...\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1) (Version: 4.5.6.5931 - CDBurnerXP) Cracked Steam Uninstall (HKLM-x32\...\Cracked Steam Uninstall) (Version: Stable build 2 - Random Alex) Dell Touchpad (HKLM\...\{9F72EF8B-AEC9-4CA5-B483-143980AFD6FD}) (Version: 7.1107.101.209 - ALPS ELECTRIC CO., LTD.) Dell Touchpad (HKLM\...\SynTPDeinstKey) (Version: 18.1.12.0 - Synaptics Incorporated) FileZilla Client 3.31.0 (HKLM-x32\...\FileZilla Client) (Version: 3.31.0 - Tim Kosse) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 66.0.3359.139 - Google Inc.) Google Earth Pro (HKLM-x32\...\{FA1BBF34-E994-4310-95D7-BE93092B8E61}) (Version: 7.3.1.4507 - Google) Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.7 - Google Inc.) Hidden HMA! Pro VPN 2.8.24.0 (HKLM-x32\...\HMA! Pro VPN) (Version: 2.8.24.0 - Privax Ltd) HTC Driver Installer (HKLM-x32\...\{4CEEE5D0-F905-4688-B9F9-ECC710507796}) (Version: 4.17.0.001 - HTC Corporation) HTC Sync Manager (HKLM-x32\...\{231D0C79-98A6-4693-A366-36DE7D7346EC}) (Version: 3.1.72.3 - HTC) ICQ (version 10.0.12331) (HKU\S-1-5-21-1726015121-2290051172-3778237215-1005\...\icq.desktop) (Version: 10.0.12331 - ICQ) Intel Security True Key (HKLM\...\TrueKey) (Version: 4.20.110.1 - Intel Security) Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.3643 - Intel Corporation) Intel® Hardware Accelerated Execution Manager (HKLM\...\{6230EE50-BD4E-4B39-904D-3E7600053E08}) (Version: 6.2.1 - Intel Corporation) Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version: - Tonec Inc.) IPTInstaller (HKLM-x32\...\{08208143-777D-4A06-BB54-71BF0AD1BB70}) (Version: 4.0.9 - HTC) iTunes (HKLM\...\{FBEB98F8-64E4-4FA3-A15E-4A9F42FF962E}) (Version: 12.3.2.35 - Apple Inc.) K-Lite Mega Codec Pack 11.4.0 (HKLM-x32\...\KLiteCodecPack_is1) (Version: 11.4.0 - ) McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.11.717.1 - McAfee, Inc.) Microsoft .NET Framework 4.6 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.6.00081 - Microsoft Corporation) Microsoft .NET Framework 4.6 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.00081 - Microsoft Corporation) Microsoft Office Professionnel Plus 2013 (HKLM-x32\...\Office15.PROPLUS) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 (HKLM-x32\...\{74d0e5db-b326-4dae-a6b2-445b9de1836e}) (Version: 14.0.23026.0 - Microsoft Corporation) Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation) MiniTool Partition Wizard Free 10.2.1 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Solution Ltd.) MOBICONNECT (HKLM-x32\...\{BCE97917-E58C-41FA-9B53-859E3FDCE924}) (Version: 1.0.0.2 - ZTE Corporation) Module linguistique Microsoft Visual Studio 2010 Tools pour Office Runtime (x64) - FRA (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - FRA) (Version: 10.0.50903 - Microsoft Corporation) Mozilla Firefox 60.0.1 (x64 fr) (HKLM\...\Mozilla Firefox 60.0.1 (x64 fr)) (Version: 60.0.1 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 59.0.3 - Mozilla) MServices X (HKLM\...\{BA0F45CE-5734-4DF3-92D5-4FD29004A086}) (Version: 3.0.1 - Systema Natives) Hidden Multitimer version 1.0 (HKLM-x32\...\Multitimer_is1) (Version: 1.0 - ) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.5.4 - Notepad++ Team) Opera Stable 52.0.2871.99 (HKLM-x32\...\Opera 52.0.2871.99) (Version: 52.0.2871.99 - Opera Software) Outils de vérification linguistique 2013 de Microsoft Office - Français (HKLM-x32\...\{90150000-001F-040C-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden PhotoFiltre Studio X (HKU\S-1-5-21-1726015121-2290051172-3778237215-1005\...\PhotoFiltre Studio X) (Version: - ) PowerISO (HKLM-x32\...\PowerISO) (Version: 4.7 - PowerISO Computing, Inc.) Pro Evolution Soccer 2016 (HKLM-x32\...\UHJvRXZvbHV0aW9uU29jY2VyMjAxNg==_is1) (Version: 1 - ) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7177 - Realtek Semiconductor Corp.) Service Pack 1 for Microsoft Office 2013 (KB2850036) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7F6C4883-A18C-459A-82C1-A2F9403F2DA6}) (Version: - Microsoft) Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) TeamViewer 13 (HKLM-x32\...\TeamViewer) (Version: 13.1.3629 - TeamViewer) Telegram Desktop version 1.2.6 (HKU\S-1-5-21-1726015121-2290051172-3778237215-1005\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 1.2.6 - Telegram Messenger LLP) TV 3L PC version 2.1.6.0 (HKLM-x32\...\{D8CE29B4-FEA1-46F1-B773-1B5FE502C740}_is1) (Version: 2.1.6.0 - Smart PC Soft, LTD.) UltraISO Premium V9.65 (HKLM-x32\...\UltraISO_is1) (Version: - ) Update for Skype for Business 2015 (KB3039776) 32-Bit Edition (HKLM-x32\...\{90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{8D97B9A2-D73D-4CB6-9D1F-D25178AC4EDE}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114732) 32-Bit Edition (HKLM-x32\...\{90150000-0011-0000-0000-0000000FF1CE}_Office15.PROPLUS_{7B0DFC04-44CB-436D-9366-01D93383940D}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114732) 32-Bit Edition (HKLM-x32\...\{90150000-002A-0000-1000-0000000FF1CE}_Office15.PROPLUS_{7B0DFC04-44CB-436D-9366-01D93383940D}) (Version: - Microsoft) Update for Skype for Business 2015 (KB3114732) 32-Bit Edition (HKLM-x32\...\{90150000-012B-040C-0000-0000000FF1CE}_Office15.PROPLUS_{7B0DFC04-44CB-436D-9366-01D93383940D}) (Version: - Microsoft) WinRAR 5.30 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.30.0 - win.rar GmbH) WinRAR 5.31 beta 1 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.31.1 - win.rar GmbH) WModem Driver Installer (HKLM-x32\...\HTC_WModemDriver) (Version: 3.0.9.0 - HTC) XAMPP (HKLM-x32\...\xampp) (Version: 7.2.3-0 - Bitnami) ==================== Personnalisé CLSID (Avec liste blanche): ========================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.) ShellIconOverlayIdentifiers: [{BFD98515-CD74-48A4-98E2-13D209E3EE4F}] -> {BFD98515-CD74-48A4-98E2-13D209E3EE4F} => C:\Windows\system32\mcicda64.dll -> Pas de fichier ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2016-11-27] () ContextMenuHandlers1: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2010-04-22] (PowerISO Computing, Inc.) ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-01-11] (Alexander Roshal) ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-01-11] (Alexander Roshal) ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (EZB Systems, Inc.) ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2010-04-22] (PowerISO Computing, Inc.) ContextMenuHandlers4: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (EZB Systems, Inc.) ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\Windows\system32\igfxDTCM.dll [2014-06-13] (Intel Corporation) ContextMenuHandlers5: [igfxOSP] -> {FA507C3F-30C6-4DCA-9EE5-2656072EEC14} => C:\Windows\system32\igfxOSP.dll [2014-06-13] (Intel Corporation) ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} => C:\Program Files (x86)\PowerISO\PWRISOSH.DLL [2010-04-22] (PowerISO Computing, Inc.) ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => C:\Program Files (x86)\UltraISO\isoshl64.dll [2014-01-02] (EZB Systems, Inc.) ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2016-01-11] (Alexander Roshal) ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2016-01-11] (Alexander Roshal) ==================== Tâches planifiées (Avec liste blanche) ============= (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) Task: {0704DB89-7DF0-4D0E-9289-B83630246EEB} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2018-05-08] (Adobe Systems Incorporated) Task: {08B25077-3538-4779-A6B3-B475E0AB7612} - System32\Tasks\{84038615-A8A6-48B9-A93C-FFB8966F6757} => C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe Task: {08B83501-477E-4CFA-A0A3-C057ECF58DEC} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [2017-12-13] (Piriform Ltd) Task: {091E170C-446C-41A9-907F-D608DEF45557} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2015-08-26] (Apple Inc.) Task: {098DBA27-1041-40CF-9F4C-8BB7CF841B0C} - System32\Tasks\Opera scheduled Autoupdate 1449579605 => C:\Users\abdennour\AppData\Local\Programs\Opera\launcher.exe [2018-04-26] (Opera Software) Task: {0AECF48C-1882-42C6-8698-83AEA60551AF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig Task: {0AECF48C-1882-42C6-8698-83AEA60551AF} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-12-08] (Microsoft Corporation) Task: {0B29E68B-0387-4C33-9A32-75177C801C38} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-21] (Microsoft Corporation) Task: {0BB2465E-06FC-4067-8185-BD9071E9E030} - System32\Tasks\Microsoft\Windows\UPnP\IEX => C:\Windows\IME\svhost.exe [2018-03-30] (www.microsoft.com) Task: {11632CD9-C877-4A5A-921F-7886C347AE2F} - System32\Tasks\{B2504F72-67F4-45FF-BCC8-8D11CC3A2497} => C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe Task: {1F754747-BDA0-490A-AD36-4EAC9774910D} - System32\Tasks\Browse => C:\Browse\Browse.exe [2018-05-02] (Web Applications Inc.) Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Pas de fichier <==== ATTENTION Task: {32DF8995-E29D-4487-BA6E-A26ADF6D9EB2} - \Microsoft\Windows\Windows Activation Technologies\ValidationTask -> Pas de fichier <==== ATTENTION Task: {33183C8E-D3B8-4FC6-B981-27A3F387B083} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2017-12-13] (Piriform Ltd) Task: {3C43B674-81FE-4DEE-AAD4-8AC49B60FB6F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfigAndContent Task: {3C43B674-81FE-4DEE-AAD4-8AC49B60FB6F} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-12-08] (Microsoft Corporation) Task: {524343FA-4C6B-4B67-8838-5F8E16198E13} - System32\Tasks\{5DBD565C-7AC6-4D87-806F-6F7816C0128D} => C:\Windows\system32\pcalua.exe -a C:\Users\amine\Downloads\Programs\WDM_R274.exe -d C:\Users\amine\AppData\Roaming\IDM Task: {61A732FB-589B-4F5C-B550-A3BBB3640F0D} - System32\Tasks\update64 => C:\Program Files\Systema Natives\MServices X\update64.exe [2018-05-13] (Systema Natives) Task: {64F6B40D-B687-474F-8E8D-12AA5BD813D2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2018-02-09] (Adobe Systems Incorporated) Task: {69AB9E87-8F5C-4CA9-8353-A34EF59D33A4} - System32\Tasks\{6018BA7A-245B-4FE1-9099-7DD4EFD1CFA9} => C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe Task: {77608F15-9F3F-4477-9AB7-E63A43E6027D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(1): %windir%\system32\GWX\GWXUXWorker.exe -> /ScheduleUpgradeReminderTime Task: {77608F15-9F3F-4477-9AB7-E63A43E6027D} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Command(2): C:\Windows\system32\GWX\GWXDetector.exe [2015-12-08] (Microsoft Corporation) Task: {84212E5C-6B78-43B1-B4A2-D5303F8E9B4E} - System32\Tasks\cmdsrv => C:\Browse\cmdsrvs.exe [2018-03-13] (Secrypt Inc.) Task: {9AA4E9DE-3179-4638-8695-AB88B77AA054} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(1): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshConfig Task: {9AA4E9DE-3179-4638-8695-AB88B77AA054} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(2): %windir%\system32\GWX\GWXConfigManager.exe -> /RefreshContent Task: {9AA4E9DE-3179-4638-8695-AB88B77AA054} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Command(3): C:\Windows\system32\GWX\GWXDetector.exe [2015-12-08] (Microsoft Corporation) Task: {9D359A6C-28F4-46AA-ABE2-EF6AF3FD0DE0} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe Task: {A074801D-82BB-4B3F-8A5E-FFDEFAB834F8} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {A243917A-4E03-41F1-971E-D19B241971D5} - System32\Tasks\AtriProPrinter => C:\Windows\system32\rundll32.exe "C:\Program Files\AtriProPrinter\AtriProPrinter.dll",SixxVFpimN <==== ATTENTION Task: {A79FE45E-5FCE-4679-8153-C7683673144B} - System32\Tasks\{8D5B69EF-C198-4BC4-AF1A-2906B2F303F9} => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [2016-03-01] (Tonec Inc.) Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Pas de fichier <==== ATTENTION Task: {B710DDAD-D471-44DC-8CF6-92551A1F6535} - System32\Tasks\Secure Magic => C:\Windows\system32\rundll32.exe "C:\Program Files\Secure Magic\Secure Magic.dll",fMchsZ <==== ATTENTION Task: {BBD956E6-CD93-4F3C-9C64-EDA482442D9A} - System32\Tasks\{61DF4236-00F6-44BA-B599-BCE50E9D6506} => C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe Task: {BD4A56F4-DE9C-4BEB-A215-95275DBC7ACE} - System32\Tasks\JanoTools Accounting => C:\Windows\system32\rundll32.exe "C:\Program Files\JanoTools Accounting\JanoTools Accounting.dll",vrnehGYexeFu <==== ATTENTION Task: {BE215D72-A08D-42CD-AE74-D8396E4E08A3} - \Microsoft\Windows\Windows Activation Technologies\ValidationTaskDeadline -> Pas de fichier <==== ATTENTION Task: {C2D0CC38-7114-4BF5-B6C5-CE1E4EB6CA43} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: {C9E41972-5557-4A80-AE1A-BE0956D08A36} - System32\Tasks\{32F31990-C213-428A-9A8B-90F7EF7CFF05} => C:\Program Files\Kromtech\PCKeeper\PCKeeper.exe Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Pas de fichier <==== ATTENTION Task: {D2B69F15-AF77-4D35-B1A9-1EF21523CAF8} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_29_0_0_171_pepper.exe [2018-05-08] (Adobe Systems Incorporated) Task: {E4080B30-F426-499D-8643-911FDF2FE594} - System32\Tasks\Microsoft\Windows\UPnP\Spoolsv => C:\Windows\IME\Microsofts\spoolsv.exe [2017-11-06] (Microsoft Corporation) Task: {E59CDC5D-FDEE-4163-81B3-6C9D3FE87FCA} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2014-01-21] (Microsoft Corporation) Task: {ECAFF969-316F-4E7D-A385-1D5DA8A8A4B7} - System32\Tasks\Opera scheduled Autoupdate 1453197501 => C:\Program Files (x86)\Opera\launcher.exe [2018-04-26] (Opera Software) Task: {ED27C027-953C-4353-962A-491DAE3D6268} - System32\Tasks\MainPM => powershell -ExecutionPolicy ByPass -File pm.ps1 Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Pas de fichier <==== ATTENTION (Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.) ==================== Raccourcis & WMI ======================== (Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.) Shortcut: C:\Users\amine\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ\icq.com.lnk -> hxxp://www.icq.com ==================== Modules chargés (Avec liste blanche) ============== 2018-05-02 09:59 - 2015-05-31 22:52 - 001370624 _____ () C:\Program Files\Secure Magic\Secure Magic.dll 2015-12-17 11:38 - 2015-12-17 11:38 - 000085800 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll 2015-12-17 11:38 - 2015-12-17 11:38 - 001328912 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll 2013-10-17 07:27 - 2013-10-17 07:27 - 000166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe 2018-03-21 00:36 - 2018-03-01 05:39 - 000078848 ____N () C:\Program Files (x86)\AppPatch\java.exe 2018-03-14 01:55 - 2018-03-14 01:55 - 000076456 _____ () C:\Program Files\FileZilla FTP Client\fzshellext_64.dll 2016-11-27 11:55 - 2016-11-27 11:55 - 000230064 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll 2018-05-20 20:45 - 2018-05-20 20:45 - 000885248 _____ () C:\Windows\TEMP\g60D6.tmp.exe 2018-05-02 09:52 - 2018-05-02 09:52 - 001176064 _____ () C:\Program Files (x86)\Google\Chrome\Application\WINHTTP.dll 2018-03-22 18:19 - 2018-03-20 00:00 - 002683224 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\swiftshader\libglesv2.dll 2018-03-22 18:19 - 2018-03-20 00:00 - 000127832 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\swiftshader\libegl.dll 2018-05-13 19:53 - 2018-05-13 19:53 - 003975680 _____ () C:\Program Files\Systema Natives\MServices X\runcore64.exe 2018-03-22 18:19 - 2018-03-20 00:00 - 004435288 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libglesv2.dll 2018-03-22 18:19 - 2018-03-20 00:00 - 000099672 _____ () C:\Program Files (x86)\Google\Chrome\Application\65.0.3325.181\libegl.dll 2016-06-03 07:36 - 2016-06-03 07:36 - 000030720 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DbAccess.dll 2016-06-03 07:37 - 2016-06-03 07:37 - 000607016 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\sqlite3.dll 2016-06-03 07:38 - 2016-06-03 07:38 - 000059392 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NAdvLog.dll 2016-06-03 07:37 - 2016-06-03 07:37 - 000035864 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\NFileCacheDBAccess.dll 2016-06-03 07:39 - 2016-06-03 07:39 - 000079888 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\ninstallerhelper.dll 2016-06-03 07:41 - 2016-06-03 07:41 - 000129016 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\zlib1.dll 2016-06-03 07:44 - 2016-06-03 07:44 - 000223240 _____ () C:\Program Files (x86)\HTC\HTC Sync Manager\DevConnMon.dll ==================== Alternate Data Streams (Avec liste blanche) ========= (Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.) ==================== Mode sans échec (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys => ""="Driver" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Wdf01000.sys => ""="Driver" ==================== Association (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.) ==================== Internet Explorer sites de confiance/sensibles =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.) ==================== Hosts contenu: ========================== (Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.) 2009-07-13 20:34 - 2018-05-02 11:01 - 000009328 _____ C:\Windows\system32\Drivers\etc\hosts 0.0.0.1 mssplus.mcafee.com 127.0.0.1 gf.tools.avast.com 127.0.0.1 pair.ff.avast.com 127.0.0.1 ipm-provider.ff.avast.com 127.0.0.1 ipm-provider.ff.avast.com 127.0.0.1 ipm-provider.ff.avast.com 127.0.0.1 id.avast.com 127.0.0.1 s5355946.iavs9x.u.avast.com 127.0.0.1 s5355946.ivps9x.u.avast.com 127.0.0.1 s5355946.ivps9tiny.u.avast.com 127.0.0.1 s5355946.vpsnitro.u.avast.com 127.0.0.1 s5355946.vpsnitrotiny.u.avast.com 127.0.0.1 s5355946.iavs5x.u.avast.com 127.0.0.1 v7.stats.avast.com 127.0.0.1 v7.stats.avast.com 127.0.0.1 v7event.stats.avast.com 127.0.0.1 sm00.avast.com 127.0.0.1 submit5.avast.com 127.0.0.1 geoip.avast.com 127.0.0.1 l2932126.iavs9x.u.avast.com 127.0.0.1 l2932126.ivps9x.u.avast.com 127.0.0.1 l2932126.ivps9tiny.u.avast.com 127.0.0.1 l2932126.vpsnitro.u.avast.com 127.0.0.1 l2932126.vpsnitrotiny.u.avast.com 127.0.0.1 l2932126.iavs5x.u.avast.com 127.0.0.1 v7.stats.avast.com 127.0.0.1 v7.stats.avast.com 127.0.0.1 v7event.stats.avast.com 127.0.0.1 sm00.avast.com 127.0.0.1 submit5.avast.com Il y a 212 plus de lignes. ==================== Autres zones ============================ (Actuellement, il n'y a pas de correction automatique pour cette section.) HKU\S-1-5-21-1726015121-2290051172-3778237215-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\amine\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0) Le Pare-feu is disabled. ==================== MSCONFIG/TASK MANAGER éléments désactivés == MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR MSCONFIG\startupreg: icq.desktop => "C:\Users\amine\AppData\Roaming\ICQ\bin\icq.exe" /startup MSCONFIG\startupreg: IDMan => C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot MSCONFIG\startupreg: iTunesHelper => "C:\Program Files\iTunes\iTunesHelper.exe" MSCONFIG\startupreg: OMEWPRODUCT_ => "C:\Program Files\iTunes\O70MQI00GJ3DSE9XGW7HX\2Ycq17irvv.exe" MSCONFIG\startupreg: S'muVOixfl.exe => C:\Program Files\iTunes\O70MQI00GJ3DSE9XGW7HX\S'muVOixfl.exe MSCONFIG\startupreg: Steam => "C:\Program Files (x86)\Steam\steam.exe" -silent ==================== RèglesPare-feu (Avec liste blanche) =============== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) FirewallRules: [{42B86C5A-50DB-4CB9-8562-94ECC2D7D161}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{187AC164-F4F3-49BB-9542-D9E776018FB2}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{DAAEFE42-2EF1-4B44-91EC-4965D0661D0D}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{1C1CA04B-8D23-4187-A309-190B148D88E2}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{06397355-B0B9-4FB7-A037-FCC167A39839}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{B9E1E51E-7F9B-4E9F-A51B-9D017BC650BD}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{E9A0A13F-2A0D-43E4-AF56-66EED658C199}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\lync.exe FirewallRules: [{F47CF5F2-0A0A-4303-BE19-DC9A7FC87EA0}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [{4CD00767-CA81-4E6D-9D21-65E937D43887}] => (Allow) C:\Program Files (x86)\Microsoft Office\Office15\UcMapi.exe FirewallRules: [TCP Query User{CF37B6F5-13E7-4637-A73A-D6C4D52C69EC}C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{D062D8A0-0F61-4D1D-975A-98785E9D716D}C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe FirewallRules: [TCP Query User{966109A6-0B9E-4C3E-8F9A-EFA320106EE4}C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe FirewallRules: [UDP Query User{AFD82323-9D02-40A3-A252-C697BC045AF3}C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe] => (Block) C:\users\abdennour\appdata\roaming\utorrent\utorrent.exe FirewallRules: [{AB1DD889-4FB0-4C37-BC3E-DFC454575A2E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{1FC15307-817C-4B80-852D-CB65D0738D6E}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [TCP Query User{A5A42C9E-10E8-4D59-820F-F1BA61AE1DBC}C:\users\amine\appdata\roaming\vip72 socks client\vip72socks.exe] => (Allow) C:\users\amine\appdata\roaming\vip72 socks client\vip72socks.exe FirewallRules: [UDP Query User{12029F98-005D-444D-B595-73A479CFBDA4}C:\users\amine\appdata\roaming\vip72 socks client\vip72socks.exe] => (Allow) C:\users\amine\appdata\roaming\vip72 socks client\vip72socks.exe FirewallRules: [{FA7173F7-2E25-402A-8844-3FFC9639B246}] => (Allow) C:\Users\amine\AppData\Roaming\ICQM\icq.exe FirewallRules: [{C46B2962-7D2E-47D4-9258-C38140E69496}] => (Allow) C:\Users\amine\AppData\Roaming\ICQM\icq.exe FirewallRules: [{122578FE-C7C7-4C2E-B22B-76889A8698B2}] => (Allow) C:\Program Files (x86)\Cracked Steam Nostalgia\Steam.exe FirewallRules: [{B495C78E-D3B0-450D-A928-A77DEDDB5EB8}] => (Allow) C:\Program Files (x86)\Cracked Steam Nostalgia\Steam.exe FirewallRules: [TCP Query User{9AC56D1E-D6DB-43A5-B136-682E7A6AE03E}C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe] => (Allow) C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe FirewallRules: [UDP Query User{6CF56A2B-09BD-42C8-9945-4E0C57423F05}C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe] => (Allow) C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe FirewallRules: [TCP Query User{5497471A-7D85-4D61-8E3A-25CC6E18B3FF}C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe] => (Block) C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe FirewallRules: [UDP Query User{75208CBB-14BA-4017-BD84-0F9BFC4F5FF1}C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe] => (Block) C:\program files (x86)\cracked steam nostalgia\steamapps\common\half-life\hl.exe FirewallRules: [TCP Query User{105EE1EC-B9CC-42E9-98CE-12A932A2A3A5}C:\program files (x86)\konami\pro evolution soccer 2016\pes2016.exe] => (Allow) C:\program files (x86)\konami\pro evolution soccer 2016\pes2016.exe FirewallRules: [UDP Query User{68641A98-6681-4F92-B272-F4D988B3EB85}C:\program files (x86)\konami\pro evolution soccer 2016\pes2016.exe] => (Allow) C:\program files (x86)\konami\pro evolution soccer 2016\pes2016.exe FirewallRules: [{6131D5FE-F44C-4D62-81F3-C6CEADDF67B8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{ABAD988E-F62C-4F23-8004-099CA598F1CD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe FirewallRules: [{93D8CDE6-9AB6-4707-B775-4CEBB3C6E09C}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{09A4A553-85CA-4862-A05D-14D572F50A82}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe FirewallRules: [{A2FFDDAE-47BC-409E-941A-657192C25CB3}] => (Allow) C:\Program Files\iTunes\iTunes.exe FirewallRules: [{ADD4919E-35C1-4877-A090-C79ECCD16810}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{4D799CCB-A630-4CEC-9D24-5C8332331987}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{B3957470-FBD6-479F-8534-6502BEACAF03}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{18493D76-2D86-4431-8C6A-A8409A100F5F}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{4E3DE223-F0C9-41CF-8897-4916E28B6074}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe FirewallRules: [{B53F7D0B-F06D-48EF-9B7D-00A6777D5D95}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life\hl.exe FirewallRules: [{1C749D93-6547-41ED-9DA7-A4B3519C296E}] => (Allow) D:\Nouveau dossier\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{9DF5E557-11F7-45DE-8D80-554DA1BB4D0E}] => (Allow) D:\Nouveau dossier\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{DC38EF39-7382-4AD8-819D-252402122D45}] => (Allow) C:\Program Files (x86)\HTC\HTC Sync Manager\HTCSyncManager.exe FirewallRules: [{7C718076-4934-45B9-B6C4-6AC730BA08C4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{9077A349-6018-488B-AFAD-B2E232768B82}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{C8400658-ED87-445C-B1FD-05B34106B9F1}] => (Allow) C:\Users\amine\Downloads\AnyDesk.exe FirewallRules: [{0EF94BD8-23D9-496F-B3C8-F8D4F42FA785}] => (Allow) C:\Users\amine\Downloads\AnyDesk.exe FirewallRules: [{251EBDF1-B8EE-454A-9195-D6038DC84402}] => (Allow) C:\Users\amine\Downloads\AnyDesk.exe FirewallRules: [{04362A63-A2ED-4531-A666-515C9FA587B7}] => (Allow) C:\Users\amine\Downloads\AnyDesk.exe FirewallRules: [{A63E91D6-1F1B-4612-89C3-A0FC08ECD080}] => (Allow) C:\Users\amine\Downloads\AnyDesk.exe FirewallRules: [{CA333D75-3198-46C2-A645-5875A2D0D2A9}] => (Allow) C:\Users\amine\Downloads\AnyDesk.exe FirewallRules: [{04B6694F-35DB-4153-9D9D-0AD067871896}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{4302F5C1-4206-4066-BAEB-662E9448488E}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe FirewallRules: [{7A490DF4-53EB-406F-8E05-1C52BE8B2817}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{407107DC-DDB3-42DE-BC9E-103363B1DBD2}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{05F59AFC-1B0F-4297-9E10-39A5D5C93B59}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{FF7C1B7D-F643-4798-AC36-9E98FE083997}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{7C61689C-481E-4FFD-B0FD-D2484A92837C}] => (Allow) C:\Program Files (x86)\Opera\52.0.2871.64\opera.exe FirewallRules: [{2D95DC04-03F9-4875-8E28-73934F95BD0F}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{E027781D-84AC-4643-BD64-DD0039FD5D3D}] => (Allow) C:\Windows\system32\rundll32.exe FirewallRules: [{387391B2-3DA3-4A60-8273-A71B24CEEE6B}] => (Allow) C:\Windows\System32\rundll32.exe FirewallRules: [{82363507-7A59-462C-9E1E-431FF7A37755}] => (Allow) C:\Windows\System32\rundll32.exe FirewallRules: [{C11C5044-4779-4E29-984E-372110EE8093}] => (Allow) C:\Users\amine\Downloads\AnyDesk (2).exe FirewallRules: [{43CCB5D1-D2E6-4B59-8D55-572962192032}] => (Allow) C:\Users\amine\Downloads\AnyDesk (2).exe FirewallRules: [{5CF58C8E-E92B-4BE1-9D79-D875684E9ECA}] => (Allow) C:\Users\amine\Downloads\AnyDesk (2).exe FirewallRules: [{2A024B8A-86CD-436D-9052-5B7C17731E91}] => (Allow) C:\Users\amine\Downloads\AnyDesk (2).exe FirewallRules: [{A4AC0B93-E80F-4CF6-A88A-CF59E47F58E3}] => (Allow) C:\Users\amine\Downloads\AnyDesk (2).exe FirewallRules: [{A395317A-BCC1-4301-8865-4563A042BE1C}] => (Allow) C:\Users\amine\Downloads\AnyDesk (2).exe FirewallRules: [{54A01A90-1B13-49D9-93D9-31E533416BF4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{EC6DCF94-BB2A-4F20-BE5A-C0A3D092441F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe FirewallRules: [{CE262FE2-0B91-4B7D-87A9-D42D201C2F52}] => (Allow) C:\Program Files (x86)\Opera\52.0.2871.99\opera.exe FirewallRules: [{84051803-EFA3-4BA0-937E-80E1F1C03698}] => (Allow) C:\Program Files\Systema Natives\MServices X\runcore64.exe FirewallRules: [{E4CF5048-7ECD-4419-A6DE-698992821DAD}] => (Allow) C:\Program Files\Systema Natives\MServices X\update64.exe FirewallRules: [{69320F2E-DE1E-4EA6-9F92-ABD6D1DF0AB5}] => (Allow) C:\Windows\System32\rundll32.exe FirewallRules: [{0EDBB4CA-7AC8-4058-9648-83B29AA7DE93}] => (Allow) C:\Windows\System32\rundll32.exe ==================== Points de restauration ========================= 22-03-2018 17:13:47 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23026 31-03-2018 15:57:04 Removed Bonjour ==================== Éléments en erreur du Gestionnaire de périphériques ============= Name: Périphérique Bluetooth Description: Périphérique Bluetooth Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. Name: Description: Class Guid: Manufacturer: Service: Problem: : The drivers for this device are not installed. (Code 28) Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard. ==================== Erreurs du Journal des événements: ========================= Erreurs Application: ================== Error: (05/20/2018 08:47:29 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante g60D5.tmp.exe, version : 0.0.0.0, horodatage : 0x5b00c9ba Nom du module défaillant : g60D5.tmp.exe, version : 0.0.0.0, horodatage : 0x5b00c9ba Code d’exception : 0xc0000409 Décalage d’erreur : 0x00000000000135c3 ID du processus défaillant : 0x1450 Heure de début de l’application défaillante : 0x01d3f0add7f64d06 Chemin d’accès de l’application défaillante : C:\Windows\TEMP\g60D5.tmp.exe Chemin d’accès du module défaillant: C:\Windows\TEMP\g60D5.tmp.exe ID de rapport : 4d3abfb1-5ca1-11e8-98ac-342387e161f2 Error: (05/20/2018 08:45:12 PM) (Source: TrueKey) (EventID: 0) (User: ) Description: Le traitement du changement de session à échoué. System.ArgumentException: Data Source cannot be empty. Use :memory: to open an in-memory database à System.Data.SQLite.SQLiteConnection.Open() à McAfee.YAP.Service.Data.McBioSQLite.GetConnection() à McAfee.YAP.Service.Data.McBioSQLite.StoreInServiceInfo(String key, String value) à McAfee.YAP.Service.Common.McBioBCAService.DisableSpoofingMode() à McAfee.YAP.Service.Service.OnSessionChange(SessionChangeDescription changeDescription) à System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId) Error: (05/20/2018 08:45:04 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante java.exe, version : 0.0.0.0, horodatage : 0x58ce50ea Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000 ID du processus défaillant : 0xc5c Heure de début de l’application défaillante : 0x01d3f0adaeb67f95 Chemin d’accès de l’application défaillante : C:\Program Files (x86)\AppPatch\java.exe Chemin d’accès du module défaillant: unknown ID de rapport : f6b2e085-5ca0-11e8-98ac-342387e161f2 Error: (05/20/2018 08:45:02 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante java.exe, version : 0.0.0.0, horodatage : 0x58ce50ea Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000 Code d’exception : 0xc0000005 Décalage d’erreur : 0x00000000 ID du processus défaillant : 0xa40 Heure de début de l’application défaillante : 0x01d3f0adad4328ea Chemin d’accès de l’application défaillante : C:\Program Files (x86)\AppPatch\java.exe Chemin d’accès du module défaillant: unknown ID de rapport : f55e7bbe-5ca0-11e8-98ac-342387e161f2 Error: (05/20/2018 07:21:43 PM) (Source: TrueKey) (EventID: 0) (User: ) Description: Le traitement du changement de session à échoué. System.ArgumentException: Data Source cannot be empty. Use :memory: to open an in-memory database à System.Data.SQLite.SQLiteConnection.Open() à McAfee.YAP.Service.Data.McBioSQLite.GetConnection() à McAfee.YAP.Service.Data.McBioSQLite.StoreInServiceInfo(String key, String value) à McAfee.YAP.Service.Common.McBioBCAService.DisableSpoofingMode() à McAfee.YAP.Service.Service.OnSessionChange(SessionChangeDescription changeDescription) à System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId) Error: (05/20/2018 11:53:07 AM) (Source: TrueKey) (EventID: 0) (User: ) Description: Le traitement du changement de session à échoué. System.ArgumentException: Data Source cannot be empty. Use :memory: to open an in-memory database à System.Data.SQLite.SQLiteConnection.Open() à McAfee.YAP.Service.Data.McBioSQLite.GetConnection() à McAfee.YAP.Service.Data.McBioSQLite.StoreInServiceInfo(String key, String value) à McAfee.YAP.Service.Common.McBioBCAService.DisableSpoofingMode() à McAfee.YAP.Service.Service.OnSessionChange(SessionChangeDescription changeDescription) à System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId) Error: (05/20/2018 08:55:01 AM) (Source: TrueKey) (EventID: 0) (User: ) Description: Le traitement du changement de session à échoué. System.ArgumentException: Data Source cannot be empty. Use :memory: to open an in-memory database à System.Data.SQLite.SQLiteConnection.Open() à McAfee.YAP.Service.Data.McBioSQLite.GetConnection() à McAfee.YAP.Service.Data.McBioSQLite.StoreInServiceInfo(String key, String value) à McAfee.YAP.Service.Common.McBioBCAService.DisableSpoofingMode() à McAfee.YAP.Service.Service.OnSessionChange(SessionChangeDescription changeDescription) à System.ServiceProcess.ServiceBase.DeferredSessionChange(Int32 eventType, Int32 sessionId) Error: (05/19/2018 07:15:43 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Nom de l’application défaillante gAA8A.tmp.exe, version : 0.0.0.0, horodatage : 0x5b00c9ba Nom du module défaillant : gAA8A.tmp.exe, version : 0.0.0.0, horodatage : 0x5b00c9ba Code d’exception : 0xc0000409 Décalage d’erreur : 0x00000000000135c3 ID du processus défaillant : 0x290e4 Heure de début de l’application défaillante : 0x01d3efd7d433d4f0 Chemin d’accès de l’application défaillante : C:\Windows\TEMP\gAA8A.tmp.exe Chemin d’accès du module défaillant: C:\Windows\TEMP\gAA8A.tmp.exe ID de rapport : 5060a611-5bcb-11e8-943c-342387e161f2 Erreurs système: ============= Error: (05/20/2018 09:13:33 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. Error: (05/20/2018 09:13:32 PM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT) Description: L’alerte fatale suivante a été reçue : 70. Error: (05/20/2018 08:59:21 PM) (Source: Tcpip) (EventID: 4199) (User: ) Description: Le système a détecté un conflit d’adresses pour l’adresse IP 192.168.1.5 avec le système d’adresse physique réseau C8-38-70-AD-72-E4. En conséquence les opérations réseau sur se système peuvent être interrompues. Error: (05/20/2018 08:47:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Service Google Update (gupdate) n’a pas pu démarrer en raison de l’erreur : Le fichier spécifié est introuvable. Error: (05/20/2018 08:46:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (05/20/2018 08:46:28 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Cache de police de Windows Presentation Foundation 3.0.0.0. Error: (05/20/2018 08:45:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur : Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle. Error: (05/20/2018 08:45:36 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Cache de police de Windows Presentation Foundation 3.0.0.0. Windows Defender: =================================== Date: 2015-09-26 01:45:25.640 Description: L’analyse Windows Defender a été arrêtée avant la fin. ID de l’analyse : {85A97417-9920-4A9A-B128-4EB20A214556} Type de l’analyse : Logiciel anti-espion Paramètres de l’analyse : Analyse rapide Utilisateur : AUTORITE NT\SERVICE RESEAU Date: 2014-11-26 05:08:37.766 Description: Windows Defender a rencontré une erreur lors de la tentative de chargement des signatures et va essayer de revenir à un jeu de signatures correct. Signatures essayées : Actuelle Code d’erreur : 0x80070003 Description de l’erreur : Le chemin d’accès spécifié est introuvable. Version des signatures : 0.0.0.0 Version du moteur : 0.0.0.0 ==================== Infos Mémoire =========================== Processeur: Intel(R) Core(TM) i5-4200U CPU @ 1.60GHz Pourcentage de mémoire utilisée: 54% Mémoire physique - RAM - totale: 6032.36 MB Mémoire physique - RAM - disponible: 2740.46 MB Mémoire virtuelle totale: 12062.93 MB Mémoire virtuelle disponible: 8411.66 MB ==================== Lecteurs ================================ Drive c: () (Fixed) (Total:469.26 GB) (Free:359.41 GB) NTFS Drive d: () (Fixed) (Total:462.15 GB) (Free:451.4 GB) NTFS \\?\Volume{64cebc39-682e-11e4-b7ac-806e6f6e6963}\ (Réservé au système) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==================== MBR & Table des partitions ================== ======================================================== Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: D75217E7) Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=469.3 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=462.1 GB) - (Type=07 NTFS) ==================== Fin de Addition.txt ============================