Résultats de l'Analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 17.03.2019
Exécuté par Alexia (13-04-2019 12:07:39)
Exécuté depuis C:\Users\alexi\Desktop
Windows 10 Home Version 1803 17134.706 (X64) (2018-06-27 19:44:44)
Mode d'amorçage: Normal
==========================================================


==================== Comptes: =============================

Administrateur (S-1-5-21-1490160550-3940094025-1882563731-500 - Administrator - Disabled)
Alexia (S-1-5-21-1490160550-3940094025-1882563731-1001 - Administrator - Enabled) => C:\Users\alexi
DefaultAccount (S-1-5-21-1490160550-3940094025-1882563731-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1490160550-3940094025-1882563731-1000 - Limited - Disabled) => C:\Users\defaultuser0
Invité (S-1-5-21-1490160550-3940094025-1882563731-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1490160550-3940094025-1882563731-504 - Limited - Disabled)

==================== Centre de sécurité ========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Programmes installés ======================

(Seuls les logiciels publicitaires ('adware') avec la marque 'caché' ('Hidden') sont susceptibles d'être ajoutés au fichier fixlist.txt pour qu'ils ne soient plus masqués. Les programmes publicitaires devront être désinstallés manuellement.)

Adobe Acrobat Reader DC - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AC0F074E4100}) (Version: 19.010.20099 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.114 - Adobe Systems Incorporated)
Adobe Illustrator CC 2015 (HKLM-x32\...\{5680D629-B263-49CC-821E-3CEBD4507B51}) (Version: 19.2.0 - Adobe Systems Incorporated)
Adobe InDesign CC 2015 (HKLM-x32\...\{DBFD0312-6E55-1014-8952-E78D43BC0147}) (Version: 11.0 - Adobe Systems Incorporated)
Adobe Photoshop CC 2015 (HKLM-x32\...\{793C2BF7-A4FE-4608-91C9-9282C5801C21}) (Version: 16.0 - Adobe Systems Incorporated)
Adobe Photoshop CS5 Portable (HKLM-x32\...\{61172A5D-60AA-43BE-958F-90451024E768}_is1) (Version: - Adobe)
ANT Drivers Installer x64 (HKLM\...\{D559687A-60C5-4786-9429-C21EC195789D}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Any Video Converter 6.3.1 (HKLM-x32\...\Any Video Converter) (Version: 6.3.1 - Anvsoft)
Apple Application Support (32 bits) (HKLM-x32\...\{9F7041CB-8398-4691-B8CB-0D52273BB3D9}) (Version: 7.4 - Apple Inc.)
Apple Application Support (64 bits) (HKLM\...\{6E7DF4EE-1976-4215-9D81-755AFC95687D}) (Version: 7.4 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{BA2A6DBB-B09A-43D8-84F3-21C1537B47D9}) (Version: 12.2.0.15 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
Avast Antivirus Gratuit (HKLM-x32\...\Avast Antivirus) (Version: 19.4.2374 - AVAST Software)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Camera Support Core Library (HKLM-x32\...\{A1D0D14A-B776-4907-BC00-5149F2298086}) (Version: 7.3.0.4 - Canon) Hidden
Camera Window DS (HKLM-x32\...\{0A146245-DB79-4197-BF5D-FE1A699A2CC7}) (Version: 5.3.1 - Canon) Hidden
Camera Window DVC (HKLM-x32\...\{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}) (Version: 5.4.4 - Canon) Hidden
Camera Window MC (HKLM-x32\...\{36C65B50-37BA-4467-AAD5-0523EFDF6F62}) (Version: 5.4.3 - Canon) Hidden
Canon Camera Support Core Library (HKLM-x32\...\InstallShield_{A1D0D14A-B776-4907-BC00-5149F2298086}) (Version: 7.3.0.4 - Canon)
Canon Camera WIA Driver (HKLM-x32\...\{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}) (Version: 5.6 - Canon) Hidden
Canon Camera Window DC_DV 5 for ZoomBrowser EX (HKLM-x32\...\InstallShield_{A2EB8F2E-6D9B-4F8B-96EB-F976D33F416F}) (Version: 5.4.4 - Canon)
Canon Camera Window DSLR 5 for ZoomBrowser EX (HKLM-x32\...\InstallShield_{0A146245-DB79-4197-BF5D-FE1A699A2CC7}) (Version: 5.3.1 - Canon)
Canon Camera Window MC 5 for ZoomBrowser EX (HKLM-x32\...\InstallShield_{36C65B50-37BA-4467-AAD5-0523EFDF6F62}) (Version: 5.4.3 - Canon)
Canon EOS Kiss_N REBEL_XT 350D Pilote WIA (HKLM-x32\...\InstallShield_{33CF7CDF-9805-4500-9CC7-D19D52AD63C4}) (Version: 5.6 - Canon)
CANON iMAGE GATEWAY Task (HKLM-x32\...\{5B03B93F-1B32-4509-9CA6-4BB33E9987EF}) (Version: 1.0.0.23 - Canon) Hidden
CANON iMAGE GATEWAY Task for ZoomBrowser EX (HKLM-x32\...\InstallShield_{5B03B93F-1B32-4509-9CA6-4BB33E9987EF}) (Version: 1.0.0.23 - Canon)
Canon Internet Library for ZoomBrowser EX (HKLM-x32\...\InstallShield_{D0E8C34D-19D2-49FD-A900-88DEB788FF86}) (Version: 1.4.0 - Canon Inc.)
Canon PhotoRecord (HKLM-x32\...\{BBBC2B89-E193-4348-A83C-C8DD8210A4AC}) (Version: 02.02.03002 - Cisra)
Canon RAW Image Task for ZoomBrowser EX (HKLM-x32\...\InstallShield_{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}) (Version: 2.2 - Canon)
Canon Utilities Digital Photo Professional 2.0 (HKLM-x32\...\{17BF3045-AB1D-4048-8356-6C584B83565E}) (Version: 2.0 - Canon) Hidden
Canon Utilities Digital Photo Professional 2.0 (HKLM-x32\...\InstallShield_{17BF3045-AB1D-4048-8356-6C584B83565E}) (Version: 2.0 - Canon)
Canon Utilities EOS Capture 1.5 (HKLM-x32\...\InstallShield_{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}) (Version: 1.5 - Canon)
Canon Utilities PhotoStitch 3.1 (HKLM-x32\...\InstallShield_{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}) (Version: 3.1.16 - Canon)
Canon ZoomBrowser EX (F) (HKLM-x32\...\{C1D76D7A-F3BB-47EA-A746-5B1E2FFC1DF2}) (Version: 5.05.0000 - Canon)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 10.8.0.0466 - Disc Soft Ltd)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.189.1 - Dropbox, Inc.) Hidden
Elevated Installer (HKLM-x32\...\{0BF90608-2F95-4C7C-9A85-E90E0CAF4FE9}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
EOS Capture 1.5 (HKLM-x32\...\{589D17BB-C997-48C0-BCD2-CC8DC3375FE8}) (Version: 1.5 - Canon) Hidden
Étude pour l'amélioration du produit HP Officejet Pro 8610 (HKLM\...\{5CF3A19A-4F7E-4085-B7E1-150AF73745B4}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
Game of Thrones Episode 6 (HKLM-x32\...\Game of Thrones Episode 6_is1) (Version: - )
Garmin Express (HKLM-x32\...\{95D0EADA-5123-41C0-931A-F37946BC0E8E}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{eab4691c-4022-41cd-8d39-c3097ba62d4b}) (Version: 6.9.1.0 - Garmin Ltd or its subsidiaries)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 73.0.3683.103 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.34.7 - Google LLC) Hidden
HP Audio Switch (HKLM-x32\...\{0C5D69BD-B518-46DB-8471-506CD27F9478}) (Version: 1.0.138.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{5b1a1d22-bd59-44e0-a954-e2f18ec43a23}) (Version: 5.2.20454 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}) (Version: 1.3.0.407 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{B90CB0DE-2E60-41C4-9857-466EB98192BF}) (Version: 1.1.158.0 - HP Inc.)
HP Officejet Pro 8610 Aide (HKLM-x32\...\{3B2848DA-FDE6-47C5-AB5F-9E434E5E93C9}) (Version: 32.0.0 - Hewlett Packard)
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8357.5639 - HP Inc.)
HP Support Assistant (HKLM-x32\...\{6FA09B91-5D97-45A9-95E9-50F635C98043}) (Version: 8.7.50.3 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{5479A489-5753-4FB7-8E2A-540332D1F4E5}) (Version: 12.10.49.21 - HP Inc.)
HP Sure Connect (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 1.0.0.29 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{29E20347-C62F-4657-938E-876A182B67F1}) (Version: 1.4.14 - HP Inc.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
iCloud (HKLM\...\{03742818-3BC2-45BA-B6BB-4C2D453FD033}) (Version: 7.11.0.19 - Apple Inc.)
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10608.329 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.5063 - Intel Corporation)
Intel(R) Trusted Execution Engine (HKLM\...\{176E2755-0A17-42C6-88E2-192AB2131278}) (Version: 2.0.0.1094 - Intel Corporation)
Internet Library (HKLM-x32\...\{D0E8C34D-19D2-49FD-A900-88DEB788FF86}) (Version: 1.4.0 - Canon Inc.) Hidden
iTunes (HKLM\...\{C5B0926E-99B2-46A8-864F-ECDD2E9C5686}) (Version: 12.9.4.102 - Apple Inc.)
Java 8 Update 181 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180181F0}) (Version: 8.0.1810.13 - Oracle Corporation)
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Last.fm Scrobbler 2.1.37 (HKLM-x32\...\LastFM_is1) (Version: - Last.fm)
LibreOffice 5.4.1.2 (HKLM-x32\...\{8E811365-CBFB-49AC-AB25-9197549B309E}) (Version: 5.4.1.2 - The Document Foundation)
Life Is Strange - Patch FR 1.00 (HKLM-x32\...\Life Is Strange - Patch FR 1.00) (Version: 1.00 - TraductionJeux.com)
Life is Strange Before the Storm (HKLM-x32\...\Life is Strange Before the Storm_is1) (Version: - )
Life is Strange Before the Storm Episode 1 (HKLM-x32\...\Life is Strange Before the Storm Episode 1_is1) (Version: - )
Life is Strange Before the Storm Episode 2 (HKLM-x32\...\Life is Strange Before the Storm Episode 2_is1) (Version: - )
Life is Strange Before the Storm Farewell (HKLM-x32\...\Life is Strange Before the Storm Farewell_is1) (Version: - )
Logiciel de base du périphérique HP Officejet Pro 8610 (HKLM\...\{F33B9E27-DBEF-43CE-A9F7-815EA09FC862}) (Version: 32.3.198.49673 - Hewlett-Packard Co.)
Logiciel pour périphérique à chipset Intel® (HKLM-x32\...\{314d4c01-f54b-4125-a71f-1e2722c29050}) (Version: 10.1.1.40 - Intel(R) Corporation) Hidden
Microsoft Office 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.11425.20202 - Microsoft Corporation)
Microsoft Office Famille et Étudiant 2016 - fr-fr (HKLM\...\HomeStudentRetail - fr-fr) (Version: 16.0.11425.20202 - Microsoft Corporation)
Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.11425.20202 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\...\OneDriveSetup.exe) (Version: 18.222.1104.0007 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.11425.20202 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.11425.20202 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.11425.20202 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.11425.20202 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.11425.20202 - Microsoft Corporation) Hidden
Package de pilotes Windows - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Package de pilotes Windows - Silicon Labs Software (DSI_SiUSBXp_3_1) USB (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
PhotoFiltre 7 (HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\...\PhotoFiltre 7) (Version: - )
PhotoStitch (HKLM-x32\...\{874E44F3-B9A7-4AA1-B4BA-83E5684ED9C6}) (Version: 3.1.16 - Canon) Hidden
RAW Image Task 2.2 (HKLM-x32\...\{BAA43DA2-B6C5-46EC-B163-0E8EEAF975A4}) (Version: 2.2 - Canon) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.14393.31228 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8544 - Realtek Semiconductor Corp.)
REALTEK Wireless LAN Driver (HKLM-x32\...\{A5107464-AA9B-4177-8129-5FF2F42DD322}) (Version: 1.0.0.76 - REALTEK Semiconductor Corp.)
Spotify (HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\...\Spotify) (Version: 1.1.4.197.g92d52c4f - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{B2E25355-C24E-4E7D-8AD3-455D59810838}) (Version: 2.57.0.0 - Microsoft Corporation)
Walking Dead: A New Frontier (HKLM-x32\...\Walking Dead: A New Frontier_is1) (Version: - )
WinRAR 5.70 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
Wondershare Helper Compact 2.5.2 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.2 - Wondershare)

==================== Personnalisé CLSID (Avec liste blanche): ==========================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

CustomCLSID: HKU\S-1-5-21-1490160550-3940094025-1882563731-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-1490160550-3940094025-1882563731-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-03-13] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-06-20] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\DTShl64.dll [2018-06-20] (AVB Disc Soft, SIA -> Disc Soft Ltd)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Pas de fichier
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2019-02-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2019-04-12] (AVAST Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext64.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files (x86)\WinRAR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Tâches planifiées (Avec liste blanche) =============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

Task: {05670F2A-E414-48FA-B508-F928D926285E} - System32\Tasks\Avast Emergency Update => C:\Program Files\AVAST Software\Avast\AvEmUpdate.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {10948689-CADA-43F6-9D02-5922568B12AD} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {1644F25D-3CF0-4EE5-AA22-785E9866EAC8} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {22B1D9A5-E62C-48C2-A064-789D62E7D1AE} - System32\Tasks\HPJumpStartProvider => C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartProvider.exe
Task: {28896DD6-366D-4F87-B7B9-0A17633E63D4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {2E46BA07-ADFE-47DB-907D-7E350F2AFEB8} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe (Dropbox, Inc -> )
Task: {36A4C3C2-873D-4D57-BDA0-57C937AE3C41} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {3BE8DD58-1DEB-4E78-9FD5-D4D0A123AE73} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe (AVAST Software s.r.o. -> AVAST Software)
Task: {42A86383-FC9C-4D25-98CA-32A65DAA0CCF} - \Microsoft\Windows\UNP\RunCampaignManager -> Pas de fichier <==== ATTENTION
Task: {43FBDAEF-11BD-49A2-ACF3-D7DAD1B72FF1} - System32\Tasks\Microsoft\Windows\Flighting\FeatureConfig\ReconcileFeatures
Task: {44096F0A-CFCB-4890-BD69-608C9F0281FB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)
Task: {466E0FFF-3D7D-45C4-AF59-88E2F79D5B73} - System32\Tasks\HPCustParticipation HP Officejet Pro 8610 => C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPCustPartic.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
Task: {4E7FAA89-DA0A-4013-B6D7-59C08D18E9F6} - System32\Tasks\Adobe Flash Player Updater => C:\windows\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {5556C55E-2EB3-462C-8FF0-D64A7F13967F} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {5719DF79-E2B2-423A-A9C1-64F14766C35B} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_114_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {5A947897-0E3B-464E-8091-AF6B753316A4} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {66DCB3F4-84D8-4496-96D6-04FD4653FE7C} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe (Garmin International, Inc. -> )
Task: {684D6143-7233-46D5-BD19-0D3FB3D5FB8C} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {74439609-7674-4EA9-AA70-1ADFA9C7AE35} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {744B5519-C512-4CB0-96BA-3E1AD11341F2} - System32\Tasks\HPCeeScheduleForAlexia => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe (Hewlett-Packard Company -> HP Development Company, L.P.)
Task: {76CD3D58-1079-4C8A-85B5-B6667EB9CEF8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe (Hewlett Packard -> HP Inc.)
Task: {832A0592-79F7-4CB8-8C7D-9FEACF9CBA08} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {8D466795-3E37-4ADB-9462-472B0D048477} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {A0151D11-2CF7-4E42-8BD2-1A67D6650B34} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BEF6D5E2-1363-4B4A-9E13-551F302460C4} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {C26839C6-C387-4BE7-8C7C-F11F9D886307} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe (HP Inc. -> HP Inc.)
Task: {C307BFA3-894E-4622-98B4-0F25C4A57EA5} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant printer driver installation => C:\windows\TEMP\sp78310.exe <==== ATTENTION
Task: {C9E80396-F255-4EA9-8729-972F0B6E390D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater - Resources => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe (Hewlett Packard -> HP Inc.)
Task: {D597F9B4-7AB9-4576-A518-C025D79912C7} - System32\Tasks\AdobeAAMUpdater-1.0-MicrosoftAccount-alexia.b@live.fr => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {D98EBD02-E945-4C9B-9FDF-70B33A682587} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe (HP Inc. -> HP Inc.)
Task: {D9FAB59D-72F0-4448-B41E-5F00CB888961} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)
Task: {DD4C4748-886D-4E35-A332-C171D73767BC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe (HP Inc. -> HP Inc.)
Task: {DE781DAA-E02C-4F26-98F5-DE0ADB42D357} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe (HP Inc. -> HP Inc.)
Task: {E7CA3F9D-ABE8-4B15-AB39-0EB8C6E57A9A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe (HP Inc. -> HP Inc.)
Task: {E7F727F9-9658-4492-A97D-20EB8CCD5E72} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)
Task: {EE769491-3F4F-4051-9B23-F9F9B57BC671} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX86\Microsoft Shared\Office16\sdxhelper.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {F2FE333C-535C-4BA7-9339-64FA6CA8AB32} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_CN56MF30YF => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (HP Inc. -> HP Inc.)

(Si un élément est inclus dans le fichier fixlist.txt, le fichier tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForAlexia.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Raccourcis & WMI ========================

(Les éléments sont susceptibles d'être inscrits dans le fichier fixlist.txt afin d'être supprimés ou restaurés.)


==================== Modules chargés (Avec liste blanche) ==============

2016-10-21 09:32 - 2016-10-05 17:49 - 001268736 _____ (HP Inc.) [Fichier non signé] C:\Program Files\HPCommRecovery\HPCommRecovery.exe
2017-09-23 15:51 - 2015-04-20 01:59 - 001765856 _____ (Last.fm Limited -> Last.fm) [Fichier non signé] C:\Program Files (x86)\Last.fm\Last.fm Scrobbler.exe
2018-05-11 13:26 - 2016-10-08 16:48 - 001506304 _____ () [Fichier non signé] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2018-05-11 13:26 - 2016-07-21 10:54 - 000137728 _____ () [Fichier non signé] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2018-05-11 13:26 - 2016-10-08 16:49 - 000708608 _____ (Wondershare) [Fichier non signé] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000738784 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\unicorn.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000128992 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\listener.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000034784 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\logger.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000353248 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\lastfm.dll
2017-09-23 15:51 - 2015-04-20 01:59 - 000304608 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\phonon.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 013112288 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\QtWebKit4.dll
2017-09-23 15:40 - 2015-04-20 01:59 - 000357856 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\QtXml4.dll
2017-09-23 15:40 - 2015-04-20 02:00 - 008573408 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\QtGui4.dll
2017-09-23 15:40 - 2015-04-20 01:59 - 001054176 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\QtNetwork4.dll
2017-09-23 15:40 - 2015-04-20 02:00 - 002578400 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\QtCore4.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000417248 _____ (Last.fm Limited -> Microsoft Corporation) [Fichier non signé] C:\Program Files (x86)\Last.fm\MSVCP100.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000764896 _____ (Last.fm Limited -> Microsoft Corporation) [Fichier non signé] C:\Program Files (x86)\Last.fm\MSVCR100.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000267232 _____ (Last.fm Limited -> The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Last.fm\ssleay32.dll
2017-09-23 15:51 - 2015-04-20 01:59 - 001158112 _____ (Last.fm Limited -> The OpenSSL Project, hxxp://www.openssl.org/) [Fichier non signé] C:\Program Files (x86)\Last.fm\LIBEAY32.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000028640 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\plugins\imageformats\qgif4.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000203232 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\plugins\imageformats\qjpeg4.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000224224 _____ (Last.fm Limited -> Nokia Corporation and/or its subsidiary(-ies)) [Fichier non signé] C:\Program Files (x86)\Last.fm\plugins\imageformats\qmng4.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000184800 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\plugins\phonon_backend\phonon_vlc.dll
2017-09-23 15:51 - 2015-04-20 01:59 - 000113120 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\libvlc.dll
2017-09-23 15:51 - 2015-04-20 01:59 - 002288608 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\libvlccore.dll
2017-09-23 15:51 - 2015-04-20 02:00 - 000051680 _____ (Last.fm Limited -> ) [Fichier non signé] C:\Program Files (x86)\Last.fm\plugins\audio_output\libaout_directx_plugin.dll

==================== Alternate Data Streams (Avec liste blanche) =========

(Si un élément est inclus dans le fichier fixlist.txt, seul le flux de données additionnel (ADS - Alternate Data Stream) sera supprimé.)


==================== Mode sans échec (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le "AlternateShell" sera restauré.)


==================== Association (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé.)


==================== Internet Explorer sites de confiance/sensibles ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre.)


==================== Hosts contenu: ==========================

(Si nécessaire, la commande Hosts: peut être incluse dans le fichier fixlist.txt afin de réinitialiser le fichier hosts.)

2016-07-16 13:47 - 2019-04-07 19:23 - 000001115 _____ C:\WINDOWS\system32\drivers\etc\hosts

0.0.0.0 pubads.g.doubleclick.net
0.0.0.0 securepubads.g.doubleclick.net
0.0.0.0 www.googletagservices.com
0.0.0.0 www.googletagservices.com
0.0.0.0 gads.pubmatic.com
0.0.0.0 ads.pubmatic.com
0.0.0.0 spclient.wg.spotify.com

==================== Autres zones ============================

(Actuellement, il n'y a pas de correction automatique pour cette section.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\TXE Components\TCS\;C:\Program Files\Intel\TXE Components\TCS\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\TXE Components\DAL\;C:\Program Files (x86)\Intel\TXE Components\DAL\;C:\Program Files\Intel\TXE Components\IPT\;C:\Program Files (x86)\Intel\TXE Components\IPT\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\alexi\OneDrive\Images\view-from-beinn-a-bhaillidh-eilean-shona-loch-moidart-scotland-conde-nast-traveller-14nov16-james-bedford.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
Le Pare-feu est activé.

==================== MSCONFIG/TASK MANAGER éléments désactivés ==

Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé.

HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\...\StartupApproved\Run: => "Chromium"
HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1490160550-3940094025-1882563731-1001\...\StartupApproved\Run: => "Spotify"

==================== RèglesPare-feu (Avec liste blanche) ===============

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

FirewallRules: [UDP Query User{76F37348-7400-4CD9-A246-514C4BCA8CBD}C:\games\life is strange before the storm farewell\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm farewell\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [TCP Query User{93560A8A-8153-451D-86FF-FB8E219CDA04}C:\games\life is strange before the storm farewell\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm farewell\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [UDP Query User{B009089A-4C2D-4801-8B63-57874FCF537D}C:\games\life is strange before the storm\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [TCP Query User{69801B2B-605A-44D9-B90A-F7779B3E7A0C}C:\games\life is strange before the storm\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [UDP Query User{322CF1F0-24B9-46CB-BD53-13B505BB32C5}C:\games\life is strange before the storm episode 2\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm episode 2\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [TCP Query User{81AB0166-EBA6-4ED3-BFE6-5C804AE13BB8}C:\games\life is strange before the storm episode 2\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm episode 2\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [UDP Query User{F0FCC644-6226-470A-AF81-D9C1EADDFFFD}C:\games\life is strange before the storm episode 1\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm episode 1\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [TCP Query User{2E0EA8BC-5E8A-4DAB-9EBB-04D383F3E396}C:\games\life is strange before the storm episode 1\life is strange - before the storm.exe] => (Allow) C:\games\life is strange before the storm episode 1\life is strange - before the storm.exe () [Fichier non signé]
FirewallRules: [{9963C466-FA70-4939-9E8B-83DD1392112E}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [UDP Query User{718E5C1B-3B81-4E9A-B839-8024775881C8}C:\users\alexi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexi\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{1491520D-7BB6-4595-B8A8-E5342696A15E}C:\users\alexi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexi\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D3D8090B-1B29-4D9E-9CEC-FC8DCF8AAE6E}] => (Allow) C:\Users\alexi\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{970D72D7-FF36-4F64-8518-1E07BF17B17F}] => (Allow) C:\Users\alexi\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{F9330038-1CB7-445E-B18A-63865E8D9E4E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5C31E2B2-E723-4178-95DF-4F515CB0574F}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{9F612321-1EA1-4485-A9F4-BA805C06D1AD}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{7BF35396-9C69-4D31-AB73-BC42C318BA64}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5D20D4CE-DCE9-4EE3-B09B-507ACC52BF27}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\FaxApplications.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{86659DD5-E688-4CBB-B219-9C1139ABC736}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\DigitalWizards.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{CCA11FE2-8BD3-4749-8421-A0F60628E5E9}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\bin\SendAFax.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{064E222D-4655-4DF1-9C6E-618A0EE2B001}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\Bin\DeviceSetup.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [{CBC894C3-48D5-4B3D-AD26-1368A1F2D1E1}] => (Allow) LPort=5357
FirewallRules: [{BA0220CB-0DB5-456E-802D-6D18F9E8AAB5}] => (Allow) C:\Program Files\HP\HP Officejet Pro 8610\Bin\HPNetworkCommunicatorCom.exe (Hewlett Packard -> Hewlett-Packard Development Company, LP)
FirewallRules: [TCP Query User{1B53503B-33EA-44B2-9351-D5EF796A2DE4}C:\users\alexi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexi\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{3D2DBC17-4D63-4190-8157-F1D6C5C8EE7E}C:\users\alexi\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\alexi\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CB068508-310B-48B4-B9CD-DF83A0CDFAE8}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{143AB3B6-E984-4F5D-B903-1A245DC3CBA6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{29752889-3FF1-4872-87C2-E7B189F360EB}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5A336E17-0258-4608-A6E3-1C6503F3C6F2}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{D65B950A-4C57-4404-BD8B-3EF1BB95DD62}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{30755537-1D5C-4626-AA61-6281A6662983}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{418AB235-7CBE-4156-A910-EF636660A84F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Pas de fichier
FirewallRules: [{CA3369C0-3761-4F01-A28F-98FC42C641FA}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe Pas de fichier
FirewallRules: [{CFC5EACC-A15E-4267-8A4A-12E7D98C463A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CaptainSpirit\CaptainSpirit\Binaries\Win64\CaptainSpirit-Win64-Shipping.exe Pas de fichier
FirewallRules: [{E35FB715-A2FB-4DDF-A684-4BE5491C0C45}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\CaptainSpirit\CaptainSpirit\Binaries\Win64\CaptainSpirit-Win64-Shipping.exe Pas de fichier
FirewallRules: [{E45AAC2B-C588-453E-9173-CC200E53D0A9}] => (Allow) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (AVB Disc Soft, SIA -> Disc Soft Ltd)
FirewallRules: [{3158C0E7-C5B1-49DB-9371-78682C247168}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{32DE5D84-A953-4837-BF92-FDA3A0F72D4C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{D68E9EA7-648E-491C-8514-5DCDE9B29ABE}C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe] => (Allow) C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe Pas de fichier
FirewallRules: [UDP Query User{4B51791E-354A-42D4-A331-CE962C98E7FE}C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe] => (Allow) C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe Pas de fichier
FirewallRules: [TCP Query User{5F0209FE-4954-4FE7-959D-2837944E8800}C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe] => (Allow) C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe Pas de fichier
FirewallRules: [UDP Query User{6543A8FE-8A67-488E-9084-8572C9A92E3B}C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe] => (Allow) C:\program files (x86)\life is strange 2 - episode 1\lis2\binaries\win64\lis2-win64-shipping.exe Pas de fichier
FirewallRules: [{1D5A5C29-151A-4649-8A6E-0330127C997E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Fichier non signé]
FirewallRules: [{24993A08-A7E2-4744-A5C6-12E9CCB8B438}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life is Strange 2\LIS2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Fichier non signé]
FirewallRules: [TCP Query User{EBD5CD8D-BA89-42F4-9469-9A38CC951B94}C:\program files (x86)\galactic cafe\the stanley parable\thestanleyparable.exe] => (Allow) C:\program files (x86)\galactic cafe\the stanley parable\thestanleyparable.exe Pas de fichier
FirewallRules: [UDP Query User{40728019-2FCD-485A-86A1-D956BFF0FFD0}C:\program files (x86)\galactic cafe\the stanley parable\thestanleyparable.exe] => (Allow) C:\program files (x86)\galactic cafe\the stanley parable\thestanleyparable.exe Pas de fichier
FirewallRules: [TCP Query User{BEA3D5F3-0C0B-498F-8744-9A39C82EF6D3}C:\program files (x86)\r.g. mechanics\the stanley parable\stanley.exe] => (Allow) C:\program files (x86)\r.g. mechanics\the stanley parable\stanley.exe Pas de fichier
FirewallRules: [UDP Query User{ADEB0274-4538-4064-B7BE-D430DD4CC448}C:\program files (x86)\r.g. mechanics\the stanley parable\stanley.exe] => (Allow) C:\program files (x86)\r.g. mechanics\the stanley parable\stanley.exe Pas de fichier
FirewallRules: [{F113B56C-629E-4174-ACA0-6DE59A7DC698}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A614DE23-2FF4-4BEC-9F68-5C1711F0F1FC}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3721DEAC-F5F7-45A6-99C6-6990153DDFF5}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)

==================== Points de restauration =========================

07-04-2019 19:41:58 Windows Update
09-04-2019 19:16:42 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

==================== Éléments en erreur du Gestionnaire de périphériques =============


==================== Erreurs du Journal des événements: =========================

Erreurs Application:
==================
Error: (04/12/2019 05:22:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4375

Error: (04/12/2019 05:22:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4375

Error: (04/12/2019 05:22:03 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/12/2019 02:04:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 4500

Error: (04/12/2019 02:04:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 4500

Error: (04/12/2019 02:04:33 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: Continuously busy for more than a second

Error: (04/12/2019 01:00:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledSPRetry 10422

Error: (04/12/2019 01:00:02 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Task Scheduling Error: m->NextScheduledEvent 10422


Erreurs système:
=============
Error: (04/13/2019 11:27:24 AM) (Source: DCOM) (EventID: 10016) (User: AL3X)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AL3X\Alexia de l’utilisateur (S-1-5-21-1490160550-3940094025-1882563731-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (04/13/2019 10:57:55 AM) (Source: DCOM) (EventID: 10016) (User: AL3X)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AL3X\Alexia de l’utilisateur (S-1-5-21-1490160550-3940094025-1882563731-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (04/12/2019 03:15:01 PM) (Source: DCOM) (EventID: 10016) (User: AL3X)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AL3X\Alexia de l’utilisateur (S-1-5-21-1490160550-3940094025-1882563731-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (04/12/2019 01:55:18 PM) (Source: DCOM) (EventID: 10016) (User: AL3X)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
et l’APPID
{8BC3F05E-D86B-11D0-A075-00C04FB68820}
au SID AL3X\Alexia de l’utilisateur (S-1-5-21-1490160550-3940094025-1882563731-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Microsoft.Windows.ContentDeliveryManager_10.0.17134.1_neutral_neutral_cw5n1h2txyewy du conteneur d’applications (S-1-15-2-350187224-1905355452-1037786396-3028148496-2624191407-3283318427-1255436723). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (04/12/2019 11:49:28 AM) (Source: DCOM) (EventID: 10016) (User: AL3X)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AL3X\Alexia de l’utilisateur (S-1-5-21-1490160550-3940094025-1882563731-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (04/12/2019 11:11:15 AM) (Source: DCOM) (EventID: 10016) (User: AL3X)
Description: Les paramètres d’autorisation propres à l’application n’accordent pas l’autorisation Local Activation pour l’application serveur COM avec le CLSID
{D63B10C5-BB46-4990-A94F-E40B9D520160}
et l’APPID
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
au SID AL3X\Alexia de l’utilisateur (S-1-5-21-1490160550-3940094025-1882563731-1001) depuis l’adresse LocalHost (avec LRPC) s’exécutant dans le SID Non disponible du conteneur d’applications (Non disponible). Cette autorisation de sécurité peut être modifiée à l’aide de l’outil d’administration Services de composants.

Error: (04/12/2019 11:00:35 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service Cache de police de Windows Presentation Foundation 3.0.0.0 n’a pas pu démarrer en raison de l’erreur :
Le service n’a pas répondu assez vite à la demande de lancement ou de contrôle.

Error: (04/12/2019 11:00:35 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Le dépassement de délai (30000 millisecondes) a été atteint lors de l’attente de la connexion du service Cache de police de Windows Presentation Foundation 3.0.0.0.


CodeIntegrity:
===================================

Date: 2019-03-09 18:09:37.372
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

Date: 2019-03-04 19:28:22.560
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

Date: 2019-02-18 23:07:44.591
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

Date: 2019-02-12 22:41:41.072
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShell.dll that did not meet the Microsoft signing level requirements.

Date: 2018-07-22 11:40:14.302
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShA64.dll that did not meet the Microsoft signing level requirements.

Date: 2018-07-18 18:43:52.770
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\browser_broker.exe) attempted to load \Device\HarddiskVolume3\Program Files\AVAST Software\Avast\ashShA64.dll that did not meet the Microsoft signing level requirements.

==================== Infos Mémoire ===========================

Processeur: Intel(R) Celeron(R) CPU N3060 @ 1.60GHz
Pourcentage de mémoire utilisée: 84%
Mémoire physique - RAM - totale: 3938.27 MB
Mémoire physique - RAM - disponible: 608.76 MB
Mémoire virtuelle totale: 7650.27 MB
Mémoire virtuelle disponible: 2925.77 MB

==================== Lecteurs ================================

Drive c: (Windows) (Fixed) (Total:915.1 GB) (Free:714.96 GB) NTFS
Drive d: (RECOVERY) (Fixed) (Total:14.43 GB) (Free:1.62 GB) NTFS ==>[système avec composants d'amorçage (obtenu depuis lecteur)]

\\?\Volume{5768771d-543d-4776-aff6-7b2a91fd994b}\ () (Fixed) (Total:1.71 GB) (Free:1.16 GB) NTFS
\\?\Volume{2d6c1d78-974a-423d-8d1e-ecb86378fff0}\ () (Fixed) (Total:0.25 GB) (Free:0.19 GB) FAT32

==================== MBR & Table des partitions ==================

==================== Fin de Addition.txt ============================