Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nGéré par Eric (administrateur) sur ERIC-PC (Hewlett-Packard p6710f) (11-05-2020 16:50:09)\nExécution à partir de C: Users Eric Downloads\nProfils chargés: Eric\nPlateforme: Windows 7 Home Premium Service Pack 1 (X64) Langue: anglais (États-Unis)\nInternet Explorer version 11 (navigateur par défaut: Chrome)\nMode de démarrage: Normal
"},{"id":"text-2","type":"text","heading":"","plain_text":"==================== Processus (liste blanche) =================","html":"==================== Processus (liste blanche) =================
"},{"id":"text-3","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)
"},{"id":"text-4","type":"text","heading":"","plain_text":"((HuskyCahya -> LevelInc Ltd) [File not signed]) [File is in use ] C: Program Files (x86) AlphacomAccentpolyN AlphacomAccentpolyN.exe\n(Advanced Micro Devices Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static MOM.exe\n(Advanced Micro Devices, Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static MMLoadDrv.exe\n(ATI Technologies Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static CCC.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Logitech, Inc. -> Logitech Inc.) C: Program Files (x86) Common Files logishrd LVMVFM UMVPFSrv.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office Office12 POWERPNT.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office Office12 WINWORD.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows System32 WirelessKB850NotificationService.exe\n(Microsoft Windows -> Microsoft Corporation) C: Program Files Windows Media Player wmprph.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows splwow64.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 prevhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SnippingTool.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wisptis.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> AMD) C: Windows System32 atieclxx.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> AMD) C: Windows System32 atiesrxx.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software Event Manager EEventManager.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software FAX Utility FUFAXRCV.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software FAX Utility FUFAXSTM.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files EPSON EpsonCustomerResearchParticipation EPCP.exe\n(SEIKO EPSON Corporation -> Seiko Epson Corporation) C: Windows System32 escsvc64.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Windows System32 spool drivers x64 3 E_YATIKDE.EXE\n(Spotify AB -> Spotify Ltd) C: Users Eric AppData Roaming Spotify SpotifyWebHelper.exe\n(Valve -> Valve Corporation) C: Program Files (x86) Common Files Steam SteamService.exe\n(Valve -> Valve Corporation) C: Program Files (x86) Steam bin cef cef.win7x64 steamwebhelper.exe \n(Valve -> Valve Corporation) C: Program Files (x86) Steam steam.exe","html":"((HuskyCahya -> LevelInc Ltd) [File not signed]) [File is in use ] C: Program Files (x86) AlphacomAccentpolyN AlphacomAccentpolyN.exe\n(Advanced Micro Devices Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static MOM.exe\n(Advanced Micro Devices, Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static MMLoadDrv.exe\n(ATI Technologies Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static CCC.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Logitech, Inc. -> Logitech Inc.) C: Program Files (x86) Common Files logishrd LVMVFM UMVPFSrv.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office Office12 POWERPNT.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office Office12 WINWORD.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows System32 WirelessKB850NotificationService.exe\n(Microsoft Windows -> Microsoft Corporation) C: Program Files Windows Media Player wmprph.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows splwow64.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 prevhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SnippingTool.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wisptis.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> AMD) C: Windows System32 atieclxx.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> AMD) C: Windows System32 atiesrxx.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software Event Manager EEventManager.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software FAX Utility FUFAXRCV.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software FAX Utility FUFAXSTM.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files EPSON EpsonCustomerResearchParticipation EPCP.exe\n(SEIKO EPSON Corporation -> Seiko Epson Corporation) C: Windows System32 escsvc64.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Windows System32 spool drivers x64 3 E_YATIKDE.EXE\n(Spotify AB -> Spotify Ltd) C: Users Eric AppData Roaming Spotify SpotifyWebHelper.exe\n(Valve -> Valve Corporation) C: Program Files (x86) Common Files Steam SteamService.exe\n(Valve -> Valve Corporation) C: Program Files (x86) Steam bin cef cef.win7x64 steamwebhelper.exe \n(Valve -> Valve Corporation) C: Program Files (x86) Steam steam.exe
"},{"id":"text-5","type":"text","heading":"","plain_text":"==================== Registre (liste blanche) ===================","html":"==================== Registre (liste blanche) ===================
"},{"id":"text-6","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)
"},{"id":"text-7","type":"text","heading":"","plain_text":"HKLM … Run: [MSC] => c: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM … Run: [Logitech Download Assistant] => C: Windows System32 LogiLDA.dll [1841496 2016-10-14] (Logitech -> Logitech, Inc.)\nHKLM-x32 … Exécuter: [StartCCC] => C: Program Files (x86) ATI Technologies ATI.ACE Core-Static CLIStart.exe [336384 2011-06-30] (Advanced Micro Devices, Inc.) [File not signed]\nHKLM-x32 … Exécuter: [FUFAXRCV] => C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe [669664 2019-10-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [FUFAXSTM] => C: Program Files (x86) Epson Software FAX Utility FUFAXSTM.exe [894944 2019-10-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [EEventManager] => C: Program Files (x86) Epson Software Event Manager EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [Steam] => C: Program Files (x86) Steam steam.exe [3372832 2020-04-27] (Valve -> Valve Corporation)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [Spotify Web Helper] => C: Users Eric AppData Roaming Spotify SpotifyWebHelper.exe [780688 2018-02-03] (Spotify AB -> Spotify Ltd)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [EPLTargetP0000000000000000] => C: Windows system32 spool DRIVERS x64 3 E_YATIKDE.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … MountPoints2: 35585837-01c4-11e8-a9b3-78acc0bd2160 – I: LaunchU3.exe -a\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-07] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [73FA19D0-2D75-11D2-995D-00C04F98BBC9] ->","html":"HKLM … Run: [MSC] => c: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM … Run: [Logitech Download Assistant] => C: Windows System32 LogiLDA.dll [1841496 2016-10-14] (Logitech -> Logitech, Inc.)\nHKLM-x32 … Exécuter: [StartCCC] => C: Program Files (x86) ATI Technologies ATI.ACE Core-Static CLIStart.exe [336384 2011-06-30] (Advanced Micro Devices, Inc.) [File not signed]\nHKLM-x32 … Exécuter: [FUFAXRCV] => C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe [669664 2019-10-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [FUFAXSTM] => C: Program Files (x86) Epson Software FAX Utility FUFAXSTM.exe [894944 2019-10-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [EEventManager] => C: Program Files (x86) Epson Software Event Manager EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [Steam] => C: Program Files (x86) Steam steam.exe [3372832 2020-04-27] (Valve -> Valve Corporation)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [Spotify Web Helper] => C: Users Eric AppData Roaming Spotify SpotifyWebHelper.exe [780688 2018-02-03] (Spotify AB -> Spotify Ltd)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [EPLTargetP0000000000000000] => C: Windows system32 spool DRIVERS x64 3 E_YATIKDE.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … MountPoints2: 35585837-01c4-11e8-a9b3-78acc0bd2160 – I: LaunchU3.exe -a\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-07] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [73FA19D0-2D75-11D2-995D-00C04F98BBC9] ->
"},{"id":"text-8","type":"text","heading":"","plain_text":"==================== Tâches planifiées (liste blanche) ============","html":"==================== Tâches planifiées (liste blanche) ============
"},{"id":"text-9","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)
"},{"id":"text-10","type":"text","heading":"","plain_text":"Tâche: 04ADAC4D-FD7D-482E-98CB-3D8434C5E02C – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2017-07-13] (Google Inc -> Google Inc.)\nTâche: 0826AEF9-AF74-4CEE-82B9-4EF5C91AC8E3 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 20F0E2AD-625E-42DB-9ED2-46534EA8A212 – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-22] (HP Inc. ->)\nTâche: 2836BDC8-DF82-47B5-8931-BCED9D5B422B – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 30CA388E-AE58-4F84-A0CF-36CA3D229C60 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater – Resources => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 373989EF-24AB-497B-8A66-0215090362A0 – System32 Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 3E544D74-2EBD-462C-834C-218F3B1EDF8C – System32 Tasks Adobe Flash Player PPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-19] (Adobe Inc. -> Adobe)\nTâche: 3E826E79-292A-45A7-B26A-7EE4A55546B5 – System32 Tasks HPCeeScheduleForEric => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)\nTâche: 5EE35B28-5C9A-4072-B372-DA6114A8FCC3 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => c: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 6E0B010D-59C6-4BE2-83A5-FE7F0E829FD1 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8076B937-F816-4ADA-B868-A67EE92D2D17 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 82A89C05-9A94-4DCE-80A9-1FA41A20ED6D – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: 8E62185D-1405-4F38-8764-ECB0929F5DD0 – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 9B896994-6A2A-4EBA-8885-C06853239A9F – Mise à jour de la série System32 Tasks EPSON WF-3640 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 => C: Windows system32 spool DRIVERS 3 E_YTSKDE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: AAF9D068-144C-4B6C-A436-61E400CF1CD2 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-19] (Adobe Inc. -> Adobe)\nTâche: C059C297-977E-430E-9402-85D9D9F758C6 – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2017-07-13] (Google Inc -> Google Inc.)\nTâche: C1E84BF3-5507-43AF-946A-EB68AEC9546F – System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: FDF66B07-3C2E-4BB6-B79A-6A7DE2F842C8 – System32 Tasks Mozilla Firefox Default Browser Agent E7CF176E110C211B => C: Program Files (x86) Mozilla Firefox default-browser-agent.exe [126152 2020-04-23] (Mozilla Corporation -> Fondation Mozilla)","html":"Tâche: 04ADAC4D-FD7D-482E-98CB-3D8434C5E02C – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2017-07-13] (Google Inc -> Google Inc.)\nTâche: 0826AEF9-AF74-4CEE-82B9-4EF5C91AC8E3 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 20F0E2AD-625E-42DB-9ED2-46534EA8A212 – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-22] (HP Inc. ->)\nTâche: 2836BDC8-DF82-47B5-8931-BCED9D5B422B – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 30CA388E-AE58-4F84-A0CF-36CA3D229C60 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater – Resources => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 373989EF-24AB-497B-8A66-0215090362A0 – System32 Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 3E544D74-2EBD-462C-834C-218F3B1EDF8C – System32 Tasks Adobe Flash Player PPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-19] (Adobe Inc. -> Adobe)\nTâche: 3E826E79-292A-45A7-B26A-7EE4A55546B5 – System32 Tasks HPCeeScheduleForEric => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)\nTâche: 5EE35B28-5C9A-4072-B372-DA6114A8FCC3 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => c: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 6E0B010D-59C6-4BE2-83A5-FE7F0E829FD1 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8076B937-F816-4ADA-B868-A67EE92D2D17 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 82A89C05-9A94-4DCE-80A9-1FA41A20ED6D – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: 8E62185D-1405-4F38-8764-ECB0929F5DD0 – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 9B896994-6A2A-4EBA-8885-C06853239A9F – Mise à jour de la série System32 Tasks EPSON WF-3640 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 => C: Windows system32 spool DRIVERS 3 E_YTSKDE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: AAF9D068-144C-4B6C-A436-61E400CF1CD2 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-19] (Adobe Inc. -> Adobe)\nTâche: C059C297-977E-430E-9402-85D9D9F758C6 – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2017-07-13] (Google Inc -> Google Inc.)\nTâche: C1E84BF3-5507-43AF-946A-EB68AEC9546F – System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: FDF66B07-3C2E-4BB6-B79A-6A7DE2F842C8 – System32 Tasks Mozilla Firefox Default Browser Agent E7CF176E110C211B => C: Program Files (x86) Mozilla Firefox default-browser-agent.exe [126152 2020-04-23] (Mozilla Corporation -> Fondation Mozilla)
"},{"id":"text-11","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)
"},{"id":"text-12","type":"text","heading":"","plain_text":"Tâche: C: Windows Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE\nTâche: C: Windows Tasks EPSON WF-3640 Series Update 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE: / EXE: 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour. Thi\nTâche: C: Windows Tasks HPCeeScheduleForEric.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe","html":"Tâche: C: Windows Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE\nTâche: C: Windows Tasks EPSON WF-3640 Series Update 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE: / EXE: 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour. Thi\nTâche: C: Windows Tasks HPCeeScheduleForEric.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe
"},{"id":"text-13","type":"text","heading":"","plain_text":"==================== Internet (liste blanche) ====================","html":"==================== Internet (liste blanche) ====================
"},{"id":"text-14","type":"text","heading":"","plain_text":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)","html":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)
"},{"id":"text-15","type":"text","heading":"","plain_text":"Tcpip Paramètres: [DhcpNameServer] 75,75,75,75 75,75,76,76\nTcpip .. Interfaces 6C3A6ED6-459B-45F6-AACF-451FA97646B7: [DhcpNameServer] 75,75,75,75 75,75,76,76\nTcpip .. Interfaces 9FB95EF1-6FAC-490A-814F-F993017A7EA6: [DhcpNameServer] 192.168.1.252","html":"Tcpip Paramètres: [DhcpNameServer] 75,75,75,75 75,75,76,76\nTcpip .. Interfaces 6C3A6ED6-459B-45F6-AACF-451FA97646B7: [DhcpNameServer] 75,75,75,75 75,75,76,76\nTcpip .. Interfaces 9FB95EF1-6FAC-490A-814F-F993017A7EA6: [DhcpNameServer] 192.168.1.252
"},{"id":"text-16","type":"text","heading":"","plain_text":"Internet Explorer:\n==================\nSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-3312487288-1977858865-3294966506-1000 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nBHO: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files Java jre1.8.0_251 bin ssv.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nBHO: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files Java jre1.8.0_251 bin jp2ssv.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nBHO: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPluginx64.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)","html":"Internet Explorer:\n==================\nSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-3312487288-1977858865-3294966506-1000 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nBHO: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files Java jre1.8.0_251 bin ssv.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nBHO: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files Java jre1.8.0_251 bin jp2ssv.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nBHO: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPluginx64.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)
"},{"id":"text-17","type":"text","heading":"","plain_text":"FireFox:\n========\nFF DefaultProfile: dnln6rwd.default\nFF ProfilePath: C: Users Eric AppData Roaming Mozilla Firefox Profiles dnln6rwd.default [2020-05-11]\nFF Page d'accueil: Mozilla Firefox Profiles dnln6rwd.default -> hxxps: //links.malwarebytes.com/link/restorebrowser lic = essai & product = MBAM-Cparam1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWrRu5OXo1IhGWbkvP9Yv7ezBHXh% 2FBmaPh81bgd% 2Bd0HAN0N7% 2B7Ahh844DyIYjY1j4Vfy4piK5029QWh9WyAwA4qgf% 2By1h2HjT% 2FzwE4IpieTsNJKbAenpaE2GeEKEcjRDpG87QsAwuCvuyN%? 2FIt1seE7NClIzNz5% 2Fpx34ZHv3FAX17aRighSlYXPOiHV% 2B8M80IPHlpJCUQRwcvbICA4Cvr9zOQPosnTzdyCW7ag96lQqETU% 3D\nFF SearchPlugin: C: Users Eric AppData Roaming Mozilla Firefox Profiles dnln6rwd.default searchplugins Yahoo powered search.xml [2020-05-11]\nPlugin FF: @ java.com / DTPlugin, version = 11.251.2 -> C: Program Files Java jre1.8.0_251 bin dtplugin npDeployJava1.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nPlugin FF: @ java.com / JavaPlugin, version = 11.251.2 -> C: Program Files Java jre1.8.0_251 bin plugin2 npjp2.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nPlugin FF: @ microsoft.com / GENUINE -> désactivé [No File]\nFF Plugin-x32: @ microsoft.com / GENUINE -> désactivé [No File]","html":"FireFox:\n========\nFF DefaultProfile: dnln6rwd.default\nFF ProfilePath: C: Users Eric AppData Roaming Mozilla Firefox Profiles dnln6rwd.default [2020-05-11]\nFF Page d'accueil: Mozilla Firefox Profiles dnln6rwd.default -> hxxps: //links.malwarebytes.com/link/restorebrowser lic = essai & product = MBAM-Cparam1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWrRu5OXo1IhGWbkvP9Yv7ezBHXh% 2FBmaPh81bgd% 2Bd0HAN0N7% 2B7Ahh844DyIYjY1j4Vfy4piK5029QWh9WyAwA4qgf% 2By1h2HjT% 2FzwE4IpieTsNJKbAenpaE2GeEKEcjRDpG87QsAwuCvuyN%? 2FIt1seE7NClIzNz5% 2Fpx34ZHv3FAX17aRighSlYXPOiHV% 2B8M80IPHlpJCUQRwcvbICA4Cvr9zOQPosnTzdyCW7ag96lQqETU% 3D\nFF SearchPlugin: C: Users Eric AppData Roaming Mozilla Firefox Profiles dnln6rwd.default searchplugins Yahoo powered search.xml [2020-05-11]\nPlugin FF: @ java.com / DTPlugin, version = 11.251.2 -> C: Program Files Java jre1.8.0_251 bin dtplugin npDeployJava1.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nPlugin FF: @ java.com / JavaPlugin, version = 11.251.2 -> C: Program Files Java jre1.8.0_251 bin plugin2 npjp2.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nPlugin FF: @ microsoft.com / GENUINE -> désactivé [No File]\nFF Plugin-x32: @ microsoft.com / GENUINE -> désactivé [No File]
"},{"id":"text-18","type":"text","heading":"","plain_text":"Chrome: \n=======\nProfil CHR: C: Users Eric AppData Local Google Chrome User Data Default [2020-05-11]\nNotifications CHR: Par défaut -> hxxps: //play.pokemonshowdown.com; hxxps: //www.facebook.com; hxxps: //www.rabb.it; hxxps: //www.twitch.tv; hxxps: //www.youtube.com\nCHR HomePage: Par défaut -> hxxps: //us.search.yahoo.com/yhs/web hspart = & OMR hsimp = YHS-001 & type = 863152190 & param1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWQ1FYFWZKveC% 2BqGgReLPKLsj% 2BcbF1vkG% 2BkY7oy5hfv3m8cwR32utrecEBuV3aT3Xzih80AoH0LbPgEsVazXoyUkK1% 2BFzLfjImFUq5IT3gwlBd5bQCrIkZh0FhqY617yDwjN4JCOnh4DcKIeWbO8b58loVWTt3YLdVMLNdy4ueARDmAgMsuCP8aFP4iGYfMVk6moqwrsSqQXFVUxBLIqg% 2F2% 2BnjKcUltJDa7HcC1yaNw88% 3D\nCHR StartupUrls: Par défaut ->? "Hxxps: //www.google.com/", "hxxps: //us.search.yahoo.com/yhs/web hspart = & OMR hsimp = YHS-001 & type = 863152190 & param1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWNPCfuIXzPSGzwGX% 2B5vJi% 2B% 2Fb4EFpoTu% 2BaR22PaorcQojc3D2r2yNIAzqSH% 2BGqzeT% 2B% 2BMPORGKwmkOLHWkAPVs6oOJe5RnNHgXbd99% 2FcuKC% 2FPXcRFRW8bU% 2FxKPQO7cOgdXzJs8bQCMUaXJA4oubmyh3E3SI4eLjEdcST9YdFJt2PrPKNwnQM% 2B1EipVYA17LdeUbAVU1u5Pp6Q% 2BLxlNQN0z% 2BEs2x5hLDfAlBI2XbehFngHs% 3D »\nCHR DefaultSearchURL: Default -> hxxps: //www.bing.com/search? Q = searchTerms & PC = U316 & FORM = CHROMN\nCHR DefaultSearchKeyword: Par défaut -> bing.com\nCHR DefaultNewTabURL: Par défaut -> hxxps: //www.bing.com/chrome/newtab\nCHR DefaultSuggestURL: Par défaut -> hxxps: //www.bing.com/osjson.aspx? Query = searchTerms & language = language & PC = U316\nExtension CHR: (diapositives) – C: Users Eric AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]\nExtension CHR: (Docs) – C: Users Eric AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2017-10-12]\nExtension CHR: (Google Drive) – C: Users Eric AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2017-07-13]\nExtension CHR: (YouTube) – C: Users Eric AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-13]\nExtension CHR: (Watch2Gether) – C: Users Eric AppData Local Google Chrome User Data Default Extensions cimpffimgeipdhnhjohpbehjkcdpjolg [2020-04-24]\nExtension CHR: (Sheets) – C: Users Eric AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]\nExtension CHR: (Google Docs hors ligne) – C: Users Eric AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-21]\nExtension CHR: (partage d'écran Discord) – C: Users Eric AppData Local Google Chrome User Data Default Extensions lcbhdgefieegnkbopmgklhlpjjdgmbog [2017-11-14]\nExtension CHR: (Paiements Chrome Web Store) – C: Users Eric AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users Eric AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]\nExtension CHR: (Chrome Media Router) – C: Users Eric AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-23]","html":"Chrome: \n=======\nProfil CHR: C: Users Eric AppData Local Google Chrome User Data Default [2020-05-11]\nNotifications CHR: Par défaut -> hxxps: //play.pokemonshowdown.com; hxxps: //www.facebook.com; hxxps: //www.rabb.it; hxxps: //www.twitch.tv; hxxps: //www.youtube.com\nCHR HomePage: Par défaut -> hxxps: //us.search.yahoo.com/yhs/web hspart = & OMR hsimp = YHS-001 & type = 863152190 & param1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWQ1FYFWZKveC% 2BqGgReLPKLsj% 2BcbF1vkG% 2BkY7oy5hfv3m8cwR32utrecEBuV3aT3Xzih80AoH0LbPgEsVazXoyUkK1% 2BFzLfjImFUq5IT3gwlBd5bQCrIkZh0FhqY617yDwjN4JCOnh4DcKIeWbO8b58loVWTt3YLdVMLNdy4ueARDmAgMsuCP8aFP4iGYfMVk6moqwrsSqQXFVUxBLIqg% 2F2% 2BnjKcUltJDa7HcC1yaNw88% 3D\nCHR StartupUrls: Par défaut ->? "Hxxps: //www.google.com/", "hxxps: //us.search.yahoo.com/yhs/web hspart = & OMR hsimp = YHS-001 & type = 863152190 & param1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWNPCfuIXzPSGzwGX% 2B5vJi% 2B% 2Fb4EFpoTu% 2BaR22PaorcQojc3D2r2yNIAzqSH% 2BGqzeT% 2B% 2BMPORGKwmkOLHWkAPVs6oOJe5RnNHgXbd99% 2FcuKC% 2FPXcRFRW8bU% 2FxKPQO7cOgdXzJs8bQCMUaXJA4oubmyh3E3SI4eLjEdcST9YdFJt2PrPKNwnQM% 2B1EipVYA17LdeUbAVU1u5Pp6Q% 2BLxlNQN0z% 2BEs2x5hLDfAlBI2XbehFngHs% 3D »\nCHR DefaultSearchURL: Default -> hxxps: //www.bing.com/search? Q = searchTerms & PC = U316 & FORM = CHROMN\nCHR DefaultSearchKeyword: Par défaut -> bing.com\nCHR DefaultNewTabURL: Par défaut -> hxxps: //www.bing.com/chrome/newtab\nCHR DefaultSuggestURL: Par défaut -> hxxps: //www.bing.com/osjson.aspx? Query = searchTerms & language = language & PC = U316\nExtension CHR: (diapositives) – C: Users Eric AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]\nExtension CHR: (Docs) – C: Users Eric AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2017-10-12]\nExtension CHR: (Google Drive) – C: Users Eric AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2017-07-13]\nExtension CHR: (YouTube) – C: Users Eric AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-13]\nExtension CHR: (Watch2Gether) – C: Users Eric AppData Local Google Chrome User Data Default Extensions cimpffimgeipdhnhjohpbehjkcdpjolg [2020-04-24]\nExtension CHR: (Sheets) – C: Users Eric AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]\nExtension CHR: (Google Docs hors ligne) – C: Users Eric AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-21]\nExtension CHR: (partage d'écran Discord) – C: Users Eric AppData Local Google Chrome User Data Default Extensions lcbhdgefieegnkbopmgklhlpjjdgmbog [2017-11-14]\nExtension CHR: (Paiements Chrome Web Store) – C: Users Eric AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users Eric AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]\nExtension CHR: (Chrome Media Router) – C: Users Eric AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-23]
"},{"id":"text-19","type":"text","heading":"","plain_text":"==================== Services (liste blanche) ===================","html":"==================== Services (liste blanche) ===================
"},{"id":"text-20","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)
"},{"id":"text-21","type":"text","heading":"","plain_text":"R2 AlphacomAccentpolyN; C: Program Files (x86) AlphacomAccentpolyN AlphacomAccentpolyN.exe [2026088 2020-05-02] ((HuskyCahya -> LevelInc Ltd) [File not signed]) [File is in use ]\nR2 AMD External Events Utility; C: Windows system32 atiesrxx.exe [236544 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> AMD)\nR2 EpsonCustomerResearchParticipation; C: Program Files EPSON EpsonCustomerResearchParticipation EPCP.exe [677880 2017-04-25] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nR2 EpsonScanSvc; C: Windows system32 EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_06; C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nS3 hpqcaslwmiex; C: Program Files (x86) HP Shared hpqwmiex.exe [1031704 2016-06-03] (Société Hewlett-Packard -> HP)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc. -> HP Inc.)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware MBAMService.exe [6933272 2020-03-11] (Malwarebytes Inc -> Malwarebytes)\nR2 MsMpSvc; c: Program Files Microsoft Security Client MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR3 NisSrv; c: Program Files Microsoft Security Client NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nR2 WirelessKB850NotificationService; C: Windows system32 WirelessKB850NotificationService.exe [174256 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)","html":"R2 AlphacomAccentpolyN; C: Program Files (x86) AlphacomAccentpolyN AlphacomAccentpolyN.exe [2026088 2020-05-02] ((HuskyCahya -> LevelInc Ltd) [File not signed]) [File is in use ]\nR2 AMD External Events Utility; C: Windows system32 atiesrxx.exe [236544 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> AMD)\nR2 EpsonCustomerResearchParticipation; C: Program Files EPSON EpsonCustomerResearchParticipation EPCP.exe [677880 2017-04-25] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nR2 EpsonScanSvc; C: Windows system32 EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_06; C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nS3 hpqcaslwmiex; C: Program Files (x86) HP Shared hpqwmiex.exe [1031704 2016-06-03] (Société Hewlett-Packard -> HP)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc. -> HP Inc.)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware MBAMService.exe [6933272 2020-03-11] (Malwarebytes Inc -> Malwarebytes)\nR2 MsMpSvc; c: Program Files Microsoft Security Client MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR3 NisSrv; c: Program Files Microsoft Security Client NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nR2 WirelessKB850NotificationService; C: Windows system32 WirelessKB850NotificationService.exe [174256 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)
"},{"id":"text-22","type":"text","heading":"","plain_text":"===================== Pilotes (sur liste blanche) ===================","html":"===================== Pilotes (sur liste blanche) ===================
"},{"id":"text-23","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)
"},{"id":"text-24","type":"text","heading":"","plain_text":"R3 amdkmdag; C: Windows System32 DRIVERS atikmdag.sys [11172864 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> Advanced Micro Devices, Inc.)\nR3 amdkmdap; C: Windows System32 DRIVERS atikmpag.sys [339456 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> Advanced Micro Devices, Inc.)\nR0 AtiPcie; C: Windows System32 DRIVERS AtiPcie.sys [16440 2009-05-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.)\nR1 ESProtectionDriver; C: Windows system32 drivers mbae64.sys [153312 2020-04-17] (Malwarebytes Corporation -> Malwarebytes)\nR2 MBAMChameleon; C: Windows System32 Drivers MbamChameleon.sys [214496 2020-05-10] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMFarflt; C: Windows System32 DRIVERS farflt.sys [195432 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: Windows system32 DRIVERS mbam.sys [73368 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMSwissArmy; C: Windows System32 Drivers mbamswissarmy.sys [248968 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: Windows System32 DRIVERS mwac.sys [112752 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR0 MpFilter; C: Windows System32 DRIVERS MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 netr28x; C: Windows System32 DRIVERS netr28x.sys [2473616 2014-12-10] (MEDIATEK INC. -> MediaTek Inc.)\nR3 NisDrv; C: Windows System32 DRIVERS NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 usbfilter; C: Windows System32 DRIVERS usbfilter.sys [34872 2009-04-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)","html":"R3 amdkmdag; C: Windows System32 DRIVERS atikmdag.sys [11172864 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> Advanced Micro Devices, Inc.)\nR3 amdkmdap; C: Windows System32 DRIVERS atikmpag.sys [339456 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> Advanced Micro Devices, Inc.)\nR0 AtiPcie; C: Windows System32 DRIVERS AtiPcie.sys [16440 2009-05-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.)\nR1 ESProtectionDriver; C: Windows system32 drivers mbae64.sys [153312 2020-04-17] (Malwarebytes Corporation -> Malwarebytes)\nR2 MBAMChameleon; C: Windows System32 Drivers MbamChameleon.sys [214496 2020-05-10] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMFarflt; C: Windows System32 DRIVERS farflt.sys [195432 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: Windows system32 DRIVERS mbam.sys [73368 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMSwissArmy; C: Windows System32 Drivers mbamswissarmy.sys [248968 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: Windows System32 DRIVERS mwac.sys [112752 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR0 MpFilter; C: Windows System32 DRIVERS MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 netr28x; C: Windows System32 DRIVERS netr28x.sys [2473616 2014-12-10] (MEDIATEK INC. -> MediaTek Inc.)\nR3 NisDrv; C: Windows System32 DRIVERS NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 usbfilter; C: Windows System32 DRIVERS usbfilter.sys [34872 2009-04-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
"},{"id":"text-25","type":"text","heading":"","plain_text":"==================== NetSvcs (liste blanche) ====================","html":"==================== NetSvcs (liste blanche) ====================
"},{"id":"text-26","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)
"},{"id":"text-27","type":"text","heading":"","plain_text":"==================== Un mois (créé) ===================","html":"==================== Un mois (créé) ===================
"},{"id":"text-28","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)
"},{"id":"text-29","type":"text","heading":"","plain_text":"2020-05-11 16:50 – 2020-05-11 16:51 – 000022444 _____ C: Users Eric Downloads FRST.txt\n2020-05-11 16:49 – 2020-05-11 16:50 – 000000000 ____D C: FRST\n2020-05-11 16:46 – 2020-05-11 16:47 – 002285568 _____ (Farbar) C: Users Eric Downloads FRST64.exe\n2020-05-11 15:17 – 2020-05-11 15:18 – 297211380 _____ C: Users Eric Documents Registry Backup.reg\n2020-05-11 14:24 – 2020-05-11 14:24 – 000195432 _____ (Malwarebytes) C: Windows system32 Drivers farflt.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000112752 _____ (Malwarebytes) C: Windows system32 Drivers mwac.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000073368 _____ (Malwarebytes) C: Windows system32 Drivers mbam.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000000000 ____D C: Users Eric AppData LocalLow IGDump\n2020-05-11 14:23 – 2020-05-11 14:23 – 000005835 _____ C: Users Eric Documents MBAM 5th log.txt\n2020-05-11 11:34 – 2020-05-11 11:34 – 000248968 _____ (Malwarebytes) C: Windows system32 Drivers mbamswissarmy.sys\n2020-05-11 02:57 – 2020-05-11 02:57 – 000005672 _____ C: Users Eric Documents MBAM 4th log.txt\n2020-05-10 21:08 – 2020-05-10 21:08 – 000005346 _____ C: Users Eric Documents MBAM 3rd log.txt\n2020-05-10 21:08 – 2020-05-10 21:08 – 000005346 _____ C: Users Eric Documents MBAM 2nd log.txt\n2020-05-10 21:07 – 2020-05-10 21:07 – 000006945 _____ C: Users Eric Documents MBAM 1st log.txt\n2020-05-10 20:35 – 2020-05-10 20:35 – 000005516 _____ C: Users Eric Documents MBAM réessayez 1 5102020.txt\n2020-05-10 12:42 – 2020-05-10 12:42 – 000251947 _____ C: Users Eric Downloads DanycardMomin.pdf\n2020-05-10 12:27 – 2020-05-10 12:27 – 000214496 _____ (Malwarebytes) C: Windows system32 Drivers MbamChameleon.sys\n2020-05-10 02:54 – 2020-05-10 02:54 – 001801666 _____ C: Users Eric Downloads DanycardMom.pdf\n2020-05-10 02:52 – 2020-05-10 02:52 – 000001054 _____ C: Users Eric Downloads MothersDayCardInstructions.txt\n2020-05-09 17:47 – 2020-05-09 17:47 – 003048387 _____ C: Users Eric Downloads Wynntils-1.5.1_638-MC1.12.2.jar\n2020-05-09 17:36 – 2020-05-09 17:36 – 004953534 _____ C: Users Eric Downloads forge-1.12.2-14.23.5.2768-installer-win (1) .exe\n2020-05-09 17:35 – 2020-05-09 17:35 – 004953534 _____ C: Users Eric Downloads forge-1.12.2-14.23.5.2768-installer-win.exe\n2020-05-09 17:35 – 2020-05-09 17:35 – 000000000 ____D C: Program Files (x86) OneMellifluousUpdater\n2020-05-09 17:34 – 2020-05-09 17:34 – 000286604 _____ C: Users Eric AppData Roaming tb7_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2020-05-09 17:34 – 2020-05-09 17:34 – 000000000 ____D C: Windows SysWOW64 vd7v\n2020-05-09 17:33 – 2020-05-09 17:33 – 000000000 ____D C: ProgramData SProvide\n2020-05-09 17:33 – 2020-05-09 17:33 – 000000000 ____D C: Program Files (x86) AlphacomAccentpolyN\n2020-05-09 17:32 – 2020-05-09 17:35 – 000000000 ____D C: Program Files (x86) GemingaDirectory\n2020-05-09 17:32 – 2020-05-09 17:33 – 000000000 ____D C: Users Eric AppData Roaming SetupReconcile\n2020-05-09 17:32 – 2020-05-09 17:32 – 001794048 _____ C: Users Eric Downloads SetupMY.msi\n2020-04-25 17:35 – 2020-04-25 17:35 – 000000000 ____D C: Windows system32 Tasks Mozilla\n2020-04-23 15:45 – 2020-04-26 12:07 – 000000000 ____D C: Program Files (x86) Mozilla Firefox\n2020-04-15 15:46 – 2020-04-15 18:20 – 000157413 _____ C: Users Eric .babel.7.8.4.production.json","html":"2020-05-11 16:50 – 2020-05-11 16:51 – 000022444 _____ C: Users Eric Downloads FRST.txt\n2020-05-11 16:49 – 2020-05-11 16:50 – 000000000 ____D C: FRST\n2020-05-11 16:46 – 2020-05-11 16:47 – 002285568 _____ (Farbar) C: Users Eric Downloads FRST64.exe\n2020-05-11 15:17 – 2020-05-11 15:18 – 297211380 _____ C: Users Eric Documents Registry Backup.reg\n2020-05-11 14:24 – 2020-05-11 14:24 – 000195432 _____ (Malwarebytes) C: Windows system32 Drivers farflt.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000112752 _____ (Malwarebytes) C: Windows system32 Drivers mwac.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000073368 _____ (Malwarebytes) C: Windows system32 Drivers mbam.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000000000 ____D C: Users Eric AppData LocalLow IGDump\n2020-05-11 14:23 – 2020-05-11 14:23 – 000005835 _____ C: Users Eric Documents MBAM 5th log.txt\n2020-05-11 11:34 – 2020-05-11 11:34 – 000248968 _____ (Malwarebytes) C: Windows system32 Drivers mbamswissarmy.sys\n2020-05-11 02:57 – 2020-05-11 02:57 – 000005672 _____ C: Users Eric Documents MBAM 4th log.txt\n2020-05-10 21:08 – 2020-05-10 21:08 – 000005346 _____ C: Users Eric Documents MBAM 3rd log.txt\n2020-05-10 21:08 – 2020-05-10 21:08 – 000005346 _____ C: Users Eric Documents MBAM 2nd log.txt\n2020-05-10 21:07 – 2020-05-10 21:07 – 000006945 _____ C: Users Eric Documents MBAM 1st log.txt\n2020-05-10 20:35 – 2020-05-10 20:35 – 000005516 _____ C: Users Eric Documents MBAM réessayez 1 5102020.txt\n2020-05-10 12:42 – 2020-05-10 12:42 – 000251947 _____ C: Users Eric Downloads DanycardMomin.pdf\n2020-05-10 12:27 – 2020-05-10 12:27 – 000214496 _____ (Malwarebytes) C: Windows system32 Drivers MbamChameleon.sys\n2020-05-10 02:54 – 2020-05-10 02:54 – 001801666 _____ C: Users Eric Downloads DanycardMom.pdf\n2020-05-10 02:52 – 2020-05-10 02:52 – 000001054 _____ C: Users Eric Downloads MothersDayCardInstructions.txt\n2020-05-09 17:47 – 2020-05-09 17:47 – 003048387 _____ C: Users Eric Downloads Wynntils-1.5.1_638-MC1.12.2.jar\n2020-05-09 17:36 – 2020-05-09 17:36 – 004953534 _____ C: Users Eric Downloads forge-1.12.2-14.23.5.2768-installer-win (1) .exe\n2020-05-09 17:35 – 2020-05-09 17:35 – 004953534 _____ C: Users Eric Downloads forge-1.12.2-14.23.5.2768-installer-win.exe\n2020-05-09 17:35 – 2020-05-09 17:35 – 000000000 ____D C: Program Files (x86) OneMellifluousUpdater\n2020-05-09 17:34 – 2020-05-09 17:34 – 000286604 _____ C: Users Eric AppData Roaming tb7_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2020-05-09 17:34 – 2020-05-09 17:34 – 000000000 ____D C: Windows SysWOW64 vd7v\n2020-05-09 17:33 – 2020-05-09 17:33 – 000000000 ____D C: ProgramData SProvide\n2020-05-09 17:33 – 2020-05-09 17:33 – 000000000 ____D C: Program Files (x86) AlphacomAccentpolyN\n2020-05-09 17:32 – 2020-05-09 17:35 – 000000000 ____D C: Program Files (x86) GemingaDirectory\n2020-05-09 17:32 – 2020-05-09 17:33 – 000000000 ____D C: Users Eric AppData Roaming SetupReconcile\n2020-05-09 17:32 – 2020-05-09 17:32 – 001794048 _____ C: Users Eric Downloads SetupMY.msi\n2020-04-25 17:35 – 2020-04-25 17:35 – 000000000 ____D C: Windows system32 Tasks Mozilla\n2020-04-23 15:45 – 2020-04-26 12:07 – 000000000 ____D C: Program Files (x86) Mozilla Firefox\n2020-04-15 15:46 – 2020-04-15 18:20 – 000157413 _____ C: Users Eric .babel.7.8.4.production.json
"},{"id":"text-30","type":"text","heading":"","plain_text":"==================== Un mois (modifié) ==================","html":"==================== Un mois (modifié) ==================
"},{"id":"text-31","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)","html":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)
"},{"id":"text-32","type":"text","heading":"","plain_text":"2020-05-11 16:42 – 2017-07-01 20:42 – 000000000 ____D C: Users Eric Documents MCC_Stuff\n2020-05-11 16:33 – 2018-10-07 14:33 – 000000911 _____ C: Windows Tasks EPSON WF-3640 Series Update 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job\n2020-05-11 16:33 – 2018-10-07 14:33 – 000000725 _____ C: Windows Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job\n2020-05-11 16:27 – 01-07-2017 23:24 – 000000000 ____D C: Users Eric Documents Minecraft Stuff\n2020-05-11 15:47 – 2009-07-14 01:13 – 000781790 _____ C: Windows system32 PerfStringBackup.INI\n2020-05-11 15:47 – 2009-07-13 23:20 – 000000000 ____D C: Windows inf\n2020-05-11 14:49 – 2009-07-14 00:45 – 000022064 ____H C: Windows system32 7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-05-11 14:49 – 2009-07-14 00:45 – 000022064 ____H C: Windows system32 7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-05-11 14:24 – 2017-07-14 20:56 – 000000000 ____D C: Program Files (x86) Steam\n2020-05-11 14:23 – 2009-07-14 01:08 – 000000006 ____H C: Windows Tasks SA.DAT\n2020-05-11 14:00 – 2017-07-03 17:22 – 000000000 ____D C: Users Eric AppData Roaming .minecraft\n2020-05-10 16:05 – 2017-06-27 17:19 – 000000000 ____D C: Users Eric AppData LocalLow Mozilla\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002224 _____ C: ProgramData Microsoft Windows Menu Démarrer Programmes Google Chrome.lnk\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002183 _____ C: Users Public Desktop Google Chrome.lnk\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002183 _____ C: ProgramData Desktop Google Chrome.lnk\n2020-05-07 17:30 – 2017-06-27 17:46 – 000003180 _____ C: Windows system32 Tasks HPCeeScheduleForEric\n2020-05-07 17:30 – 2017-06-27 17:46 – 000000328 _____ C: Windows Tasks HPCeeScheduleForEric.job\n2020-05-05 13:24 – 2018-08-17 16:24 – 000000000 ____D C: Users Eric Documents SNHU stuff\n2020-04-30 23:16 – 01-07-2017 20:48 – 000000000 ____D C: Users Eric Documents Only_Poetry\n2020-04-28 03:16 – 2019-05-01 00:39 – 000000000 ____D C: Users Eric Documents Alpha\n2020-04-26 12:07 – 2017-06-27 17:18 – 000000000 ____D C: Program Files (x86) Mozilla Maintenance Service\n2020-04-23 13:06 – 2019-12-20 17:18 – 000000000 ____D C: Users Eric Documents Terrariastuff\n2020-04-19 10:54 – 2017-11-10 17:53 – 000000000 ____D C: Users Eric AppData Local Adobe\n2020-04-19 10:53 – 2017-11-10 17:54 – 000842296 _____ (Adobe) C: Windows SysWOW64 FlashPlayerApp.exe\n2020-04-19 10:53 – 2017-11-10 17:54 – 000175160 _____ (Adobe) C: Windows SysWOW64 FlashPlayerCPLApp.cpl\n2020-04-19 10:53 – 2017-11-10 17:54 – 000004470 _____ C: Windows system32 Tasks Adobe Flash Player PPAPI Notifier\n2020-04-19 10:53 – 2017-11-10 17:54 – 000004324 _____ C: Windows system32 Tasks Adobe Flash Player Updater\n2020-04-19 10:53 – 2017-11-10 17:54 – 000000000 ____D C: Windows SysWOW64 Macromed\n2020-04-19 10:53 – 2017-11-10 17:54 – 000000000 ____D C: Windows system32 Macromed\n2020-04-17 20:18 – 2019-07-03 13:14 – 000153312 _____ (Malwarebytes) C: Windows system32 Drivers mbae64.sys\n2020-04-15 18:20 – 2019-08-05 23:17 – 000000000 ____D C: Users Eric AppData Roaming Kast\n2020-04-15 15:46 – 2019-08-05 23:17 – 000002241 _____ C: Users Eric Desktop Kast.lnk\n2020-04-15 15:46 – 2017-06-27 15:46 – 000000000 ____D C: Users Eric\n2020-04-14 16:53 – 2017-07-03 01:01 – 000000000 ____D C: ProgramData Microsoft Windows Start Menu Programs Java\n2020-04-14 16:53 – 2017-07-03 01:00 – 000000000 ____D C: Program Files Java\n2020-04-14 16:52 – 2017-07-03 01:01 – 000129192 _____ (Oracle Corporation) C: Windows system32 WindowsAccessBridge-64.dll","html":"2020-05-11 16:42 – 2017-07-01 20:42 – 000000000 ____D C: Users Eric Documents MCC_Stuff\n2020-05-11 16:33 – 2018-10-07 14:33 – 000000911 _____ C: Windows Tasks EPSON WF-3640 Series Update 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job\n2020-05-11 16:33 – 2018-10-07 14:33 – 000000725 _____ C: Windows Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job\n2020-05-11 16:27 – 01-07-2017 23:24 – 000000000 ____D C: Users Eric Documents Minecraft Stuff\n2020-05-11 15:47 – 2009-07-14 01:13 – 000781790 _____ C: Windows system32 PerfStringBackup.INI\n2020-05-11 15:47 – 2009-07-13 23:20 – 000000000 ____D C: Windows inf\n2020-05-11 14:49 – 2009-07-14 00:45 – 000022064 ____H C: Windows system32 7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-05-11 14:49 – 2009-07-14 00:45 – 000022064 ____H C: Windows system32 7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-05-11 14:24 – 2017-07-14 20:56 – 000000000 ____D C: Program Files (x86) Steam\n2020-05-11 14:23 – 2009-07-14 01:08 – 000000006 ____H C: Windows Tasks SA.DAT\n2020-05-11 14:00 – 2017-07-03 17:22 – 000000000 ____D C: Users Eric AppData Roaming .minecraft\n2020-05-10 16:05 – 2017-06-27 17:19 – 000000000 ____D C: Users Eric AppData LocalLow Mozilla\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002224 _____ C: ProgramData Microsoft Windows Menu Démarrer Programmes Google Chrome.lnk\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002183 _____ C: Users Public Desktop Google Chrome.lnk\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002183 _____ C: ProgramData Desktop Google Chrome.lnk\n2020-05-07 17:30 – 2017-06-27 17:46 – 000003180 _____ C: Windows system32 Tasks HPCeeScheduleForEric\n2020-05-07 17:30 – 2017-06-27 17:46 – 000000328 _____ C: Windows Tasks HPCeeScheduleForEric.job\n2020-05-05 13:24 – 2018-08-17 16:24 – 000000000 ____D C: Users Eric Documents SNHU stuff\n2020-04-30 23:16 – 01-07-2017 20:48 – 000000000 ____D C: Users Eric Documents Only_Poetry\n2020-04-28 03:16 – 2019-05-01 00:39 – 000000000 ____D C: Users Eric Documents Alpha\n2020-04-26 12:07 – 2017-06-27 17:18 – 000000000 ____D C: Program Files (x86) Mozilla Maintenance Service\n2020-04-23 13:06 – 2019-12-20 17:18 – 000000000 ____D C: Users Eric Documents Terrariastuff\n2020-04-19 10:54 – 2017-11-10 17:53 – 000000000 ____D C: Users Eric AppData Local Adobe\n2020-04-19 10:53 – 2017-11-10 17:54 – 000842296 _____ (Adobe) C: Windows SysWOW64 FlashPlayerApp.exe\n2020-04-19 10:53 – 2017-11-10 17:54 – 000175160 _____ (Adobe) C: Windows SysWOW64 FlashPlayerCPLApp.cpl\n2020-04-19 10:53 – 2017-11-10 17:54 – 000004470 _____ C: Windows system32 Tasks Adobe Flash Player PPAPI Notifier\n2020-04-19 10:53 – 2017-11-10 17:54 – 000004324 _____ C: Windows system32 Tasks Adobe Flash Player Updater\n2020-04-19 10:53 – 2017-11-10 17:54 – 000000000 ____D C: Windows SysWOW64 Macromed\n2020-04-19 10:53 – 2017-11-10 17:54 – 000000000 ____D C: Windows system32 Macromed\n2020-04-17 20:18 – 2019-07-03 13:14 – 000153312 _____ (Malwarebytes) C: Windows system32 Drivers mbae64.sys\n2020-04-15 18:20 – 2019-08-05 23:17 – 000000000 ____D C: Users Eric AppData Roaming Kast\n2020-04-15 15:46 – 2019-08-05 23:17 – 000002241 _____ C: Users Eric Desktop Kast.lnk\n2020-04-15 15:46 – 2017-06-27 15:46 – 000000000 ____D C: Users Eric\n2020-04-14 16:53 – 2017-07-03 01:01 – 000000000 ____D C: ProgramData Microsoft Windows Start Menu Programs Java\n2020-04-14 16:53 – 2017-07-03 01:00 – 000000000 ____D C: Program Files Java\n2020-04-14 16:52 – 2017-07-03 01:01 – 000129192 _____ (Oracle Corporation) C: Windows system32 WindowsAccessBridge-64.dll
"},{"id":"text-33","type":"text","heading":"","plain_text":"==================== Fichiers à la racine de certains répertoires ========","html":"==================== Fichiers à la racine de certains répertoires ========
"},{"id":"text-34","type":"text","heading":"","plain_text":"2020-05-09 17:34 – 2020-05-09 17:34 – 000286604 _____ () C: Users Eric AppData Roaming tb7_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2018-05-10 22:22 – 2018-05-10 22:22 – 000013312 _____ () C: Users Eric AppData Local DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini\n2017-07-02 00:41 – 2017-07-02 00:41 – 000007597 _____ () C: Users Eric AppData Local Resmon.ResmonCfg","html":"2020-05-09 17:34 – 2020-05-09 17:34 – 000286604 _____ () C: Users Eric AppData Roaming tb7_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2018-05-10 22:22 – 2018-05-10 22:22 – 000013312 _____ () C: Users Eric AppData Local DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini\n2017-07-02 00:41 – 2017-07-02 00:41 – 000007597 _____ () C: Users Eric AppData Local Resmon.ResmonCfg
"},{"id":"text-35","type":"text","heading":"","plain_text":"==================== SigCheck ============================","html":"==================== SigCheck ============================
"},{"id":"text-36","type":"text","heading":"","plain_text":"(Il n'y a pas de correctif automatique pour les fichiers qui ne passent pas la vérification.)","html":"(Il n'y a pas de correctif automatique pour les fichiers qui ne passent pas la vérification.)
"},{"id":"text-37","type":"text","heading":"","plain_text":"LastRegBack: 2020-05-07 03:27\n==================== Fin de FRST.txt =========================\nRésultat d'analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan par Eric (11-05-2020 16:52:06)\nExécution à partir de C: Users Eric Downloads\nWindows 7 Home Premium Service Pack 1 (X64) (2017-06-27 19:46:56)\nMode de démarrage: Normal\n================================================== ========","html":"LastRegBack: 2020-05-07 03:27\n==================== Fin de FRST.txt =========================\nRésultat d'analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan par Eric (11-05-2020 16:52:06)\nExécution à partir de C: Users Eric Downloads\nWindows 7 Home Premium Service Pack 1 (X64) (2017-06-27 19:46:56)\nMode de démarrage: Normal\n================================================== ========
"},{"id":"text-38","type":"text","heading":"","plain_text":"==================== Comptes: ============================ =","html":"==================== Comptes: ============================ =
"},{"id":"text-39","type":"text","heading":"","plain_text":"Administrateur (S-1-5-21-3312487288-1977858865-3294966506-500 – Administrateur – désactivé)\nEric (S-1-5-21-3312487288-1977858865-3294966506-1000 – Administrateur – Activé) => C: Users Eric\nInvité (S-1-5-21-3312487288-1977858865-3294966506-501 – limité – désactivé)\nGroupe résidentielUtilisateur $ (S-1-5-21-3312487288-1977858865-3294966506-1002 – limité – activé)","html":"Administrateur (S-1-5-21-3312487288-1977858865-3294966506-500 – Administrateur – désactivé)\nEric (S-1-5-21-3312487288-1977858865-3294966506-1000 – Administrateur – Activé) => C: Users Eric\nInvité (S-1-5-21-3312487288-1977858865-3294966506-501 – limité – désactivé)\nGroupe résidentielUtilisateur $ (S-1-5-21-3312487288-1977858865-3294966506-1002 – limité – activé)
"},{"id":"text-40","type":"text","heading":"","plain_text":"==================== Security Center ========================","html":"==================== Security Center ========================
"},{"id":"text-41","type":"text","heading":"","plain_text":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée.)","html":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée.)
"},{"id":"text-42","type":"text","heading":"","plain_text":"AV: Microsoft Security Essentials (activé – à jour) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (activé – à jour) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Windows Defender (désactivé – à jour) D68DDC3A-831F-4fae-9E44-DA132C1ACF46","html":"AV: Microsoft Security Essentials (activé – à jour) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (activé – à jour) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Windows Defender (désactivé – à jour) D68DDC3A-831F-4fae-9E44-DA132C1ACF46
"},{"id":"text-43","type":"text","heading":"","plain_text":"==================== Programmes installés ======================","html":"==================== Programmes installés ======================
"},{"id":"text-44","type":"text","heading":"","plain_text":"(Seuls les programmes publicitaires avec le drapeau "Caché" peuvent être ajoutés à la liste de correctifs pour les afficher. Les programmes publicitaires doivent être désinstallés manuellement.)","html":"(Seuls les programmes publicitaires avec le drapeau "Caché" peuvent être ajoutés à la liste de correctifs pour les afficher. Les programmes publicitaires doivent être désinstallés manuellement.)
"},{"id":"text-45","type":"text","heading":"","plain_text":"Adobe Flash Player 32 PPAPI (HKLM-x32 … Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nGestionnaire d'installation ATI Catalyst (HKLM … BCC01139-903A-6FC7-3358-85B0AE332601) (Version: 3.0.829.0 – ATI Technologies, Inc.)\nDiscord (HKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Discord) (Version: 0.0.306 – Discord Inc.)\nEPSON Connect version 1.0 (HKLM-x32 … EPSON Connect_is1) (Version: 1.0 – Epson America Inc.)\nParticipation à la recherche client Epson (HKLM … B26449A6-6007-4460-B4FE-C4776115BCEA) (Version: 1.82.0000 – Seiko Epson Corporation)\nEpson Event Manager (HKLM-x32 … 9F205E94-9E42-4486-A92A-DF3F6CB85444) (Version: 3.10.0061 – Seiko Epson Corporation)\nUtilitaire Epson FAX (HKLM-x32 … 0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A) (Version: 3.02.00 – Seiko Epson Corporation)\nPilote Epson PC-FAX (Pilote HKLM-x32 … EPSON PC-FAX 2) (Version: – Seiko Epson Corporation)\nEPSON Scan (HKLM-x32 … EPSON Scanner) (Version: – Seiko Epson Corporation)\nProgramme de mise à jour du logiciel Epson (HKLM-x32 … 0854CD22-DF5E-4587-B977-6FC9DB57B63D) (Version: 4.5.0 – Seiko Epson Corporation)\nDésinstallation de l'imprimante EPSON WF-3640 Series (HKLM … EPSON WF-3640 Series) (Version: – SEIKO EPSON Corporation)\nEpsonNet Print (HKLM-x32 … 3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nGoogle Chrome (HKLM-x32 … Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nAssistant de support HP (HKLM-x32 … 05F81C27-62A5-4A0C-8519-60CB66CF87C6) (Version: 8.8.24.33 – HP Inc.)\nHP Support Solutions Framework (HKLM-x32…183BD477-774B-4700-B40B-EE43886E74D2) (Version: 12.15.14.3 – HP Inc.)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nJava 8 Update 251 (64-bit) (HKLM…26A24AE4-039D-4CA4-87B4-2F64180251F0) (Version: 8.0.2510.8 – Oracle Corporation)\nKast 2.8.1 (HKUS-1-5-21-3312487288-1977858865-3294966506-1000…d06bcc57-f338-548b-9321-2ecf1ddd47ff) (Version: 2.8.1 – Evasyst, Inc.)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…91120000-00CA-0000-0000-0000000FF1CE_SMALLBUSINESSR_6E107EB7-8B55-48BF-ACCB-199F86A2CD93) (Version: – Microsoft)\nMicrosoft Office Small Business 2007 (HKLM-x32…SMALLBUSINESSR) (Version: 12.0.6612.1000 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…71c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32…50d4fc8-5d48-4b8f-8972-47c82c46020f) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32…f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x64) – 14.0.24215 (HKLM-x32…d992c12e-cab2-426f-bde3-fb8c53950b0d) (Version: 14.0.24215.1 – Microsoft Corporation)\nMicrosoft XNA Framework Redistributable 4.0 (HKLM-x32…2BFC7AA0-544C-4E3A-8796-67F3BE655BE9) (Version: 4.0.20823.0 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 75.0 (x64 en-US) (HKLM…Mozilla Firefox 75.0 (x64 en-US)) (Version: 75.0 – Mozilla)\nMozilla Maintenance Service (HKLM…MozillaMaintenanceService) (Version: 54.0 – Mozilla)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.6196 – Realtek Semiconductor Corp.)\nSpotify (HKUS-1-5-21-3312487288-1977858865-3294966506-1000…Spotify) (Version: 1.0.73.345.g6c9971ef – Spotify AB)\nSteam (HKLM-x32…Steam) (Version: 2.10.91.91 – Valve Corporation)\nTeamSpeak 3 Client (HKLM…TeamSpeak 3 Client) (Version: 3.1.8 – TeamSpeak Systems GmbH)\nUpdate for 2007 Microsoft Office System (KB967642) (HKLM-x32…91120000-00CA-0000-0000-0000000FF1CE_SMALLBUSINESSR_C444285D-5E4F-48A4-91DD-47AAAA68E92D) (Version: – Microsoft)","html":"Adobe Flash Player 32 PPAPI (HKLM-x32 … Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nGestionnaire d'installation ATI Catalyst (HKLM … BCC01139-903A-6FC7-3358-85B0AE332601) (Version: 3.0.829.0 – ATI Technologies, Inc.)\nDiscord (HKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Discord) (Version: 0.0.306 – Discord Inc.)\nEPSON Connect version 1.0 (HKLM-x32 … EPSON Connect_is1) (Version: 1.0 – Epson America Inc.)\nParticipation à la recherche client Epson (HKLM … B26449A6-6007-4460-B4FE-C4776115BCEA) (Version: 1.82.0000 – Seiko Epson Corporation)\nEpson Event Manager (HKLM-x32 … 9F205E94-9E42-4486-A92A-DF3F6CB85444) (Version: 3.10.0061 – Seiko Epson Corporation)\nUtilitaire Epson FAX (HKLM-x32 … 0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A) (Version: 3.02.00 – Seiko Epson Corporation)\nPilote Epson PC-FAX (Pilote HKLM-x32 … EPSON PC-FAX 2) (Version: – Seiko Epson Corporation)\nEPSON Scan (HKLM-x32 … EPSON Scanner) (Version: – Seiko Epson Corporation)\nProgramme de mise à jour du logiciel Epson (HKLM-x32 … 0854CD22-DF5E-4587-B977-6FC9DB57B63D) (Version: 4.5.0 – Seiko Epson Corporation)\nDésinstallation de l'imprimante EPSON WF-3640 Series (HKLM … EPSON WF-3640 Series) (Version: – SEIKO EPSON Corporation)\nEpsonNet Print (HKLM-x32 … 3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nGoogle Chrome (HKLM-x32 … Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nAssistant de support HP (HKLM-x32 … 05F81C27-62A5-4A0C-8519-60CB66CF87C6) (Version: 8.8.24.33 – HP Inc.)\nHP Support Solutions Framework (HKLM-x32…183BD477-774B-4700-B40B-EE43886E74D2) (Version: 12.15.14.3 – HP Inc.)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nJava 8 Update 251 (64-bit) (HKLM…26A24AE4-039D-4CA4-87B4-2F64180251F0) (Version: 8.0.2510.8 – Oracle Corporation)\nKast 2.8.1 (HKUS-1-5-21-3312487288-1977858865-3294966506-1000…d06bcc57-f338-548b-9321-2ecf1ddd47ff) (Version: 2.8.1 – Evasyst, Inc.)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…91120000-00CA-0000-0000-0000000FF1CE_SMALLBUSINESSR_6E107EB7-8B55-48BF-ACCB-199F86A2CD93) (Version: – Microsoft)\nMicrosoft Office Small Business 2007 (HKLM-x32…SMALLBUSINESSR) (Version: 12.0.6612.1000 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…71c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32…50d4fc8-5d48-4b8f-8972-47c82c46020f) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32…f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x64) – 14.0.24215 (HKLM-x32…d992c12e-cab2-426f-bde3-fb8c53950b0d) (Version: 14.0.24215.1 – Microsoft Corporation)\nMicrosoft XNA Framework Redistributable 4.0 (HKLM-x32…2BFC7AA0-544C-4E3A-8796-67F3BE655BE9) (Version: 4.0.20823.0 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 75.0 (x64 en-US) (HKLM…Mozilla Firefox 75.0 (x64 en-US)) (Version: 75.0 – Mozilla)\nMozilla Maintenance Service (HKLM…MozillaMaintenanceService) (Version: 54.0 – Mozilla)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.6196 – Realtek Semiconductor Corp.)\nSpotify (HKUS-1-5-21-3312487288-1977858865-3294966506-1000…Spotify) (Version: 1.0.73.345.g6c9971ef – Spotify AB)\nSteam (HKLM-x32…Steam) (Version: 2.10.91.91 – Valve Corporation)\nTeamSpeak 3 Client (HKLM…TeamSpeak 3 Client) (Version: 3.1.8 – TeamSpeak Systems GmbH)\nUpdate for 2007 Microsoft Office System (KB967642) (HKLM-x32…91120000-00CA-0000-0000-0000000FF1CE_SMALLBUSINESSR_C444285D-5E4F-48A4-91DD-47AAAA68E92D) (Version: – Microsoft)
"},{"id":"text-46","type":"text","heading":"","plain_text":"==================== Custom CLSID (Whitelisted): ==============","html":"==================== Custom CLSID (Whitelisted): ==============
"},{"id":"text-47","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-48","type":"text","heading":"","plain_text":"ContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers5: [ACE] -> 5E2121EE-0300-11D4-8D3B-444553540000 => C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiacm64.dll [2011-06-30] (Advanced Micro Devices, Inc.) [File not signed]\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)","html":"ContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers5: [ACE] -> 5E2121EE-0300-11D4-8D3B-444553540000 => C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiacm64.dll [2011-06-30] (Advanced Micro Devices, Inc.) [File not signed]\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
"},{"id":"text-49","type":"text","heading":"","plain_text":"==================== Codecs (Whitelisted) ====================","html":"==================== Codecs (Whitelisted) ====================
"},{"id":"text-50","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)","html":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
"},{"id":"text-51","type":"text","heading":"","plain_text":"HKLM…Drivers32: [vidc.i420] => C:Windowssystem32lvcod64.dll [176416 2012-01-18] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [307488 2012-01-18] (Logitech, Inc. -> Logitech Inc.)","html":"HKLM…Drivers32: [vidc.i420] => C:Windowssystem32lvcod64.dll [176416 2012-01-18] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [307488 2012-01-18] (Logitech, Inc. -> Logitech Inc.)
"},{"id":"text-52","type":"text","heading":"","plain_text":"==================== Shortcuts & WMI ========================","html":"==================== Shortcuts & WMI ========================
"},{"id":"text-53","type":"text","heading":"","plain_text":"(The entries could be listed to be restored or removed.)","html":"(The entries could be listed to be restored or removed.)
"},{"id":"text-54","type":"text","heading":"","plain_text":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]","html":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
"},{"id":"text-55","type":"text","heading":"","plain_text":"==================== Loaded Modules (Whitelisted) =============","html":"==================== Loaded Modules (Whitelisted) =============
"},{"id":"text-56","type":"text","heading":"","plain_text":"2011-06-30 00:11 – 2011-06-30 00:11 – 000008704 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Actions.CCAA.Shared.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000006656 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.DPPE.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.GD.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000007168 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.Hotkeys.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.REG.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000042496 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.Source.Kit.Server.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006656 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.WinMessages.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000034816 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Server.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006144 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Server.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000032768 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticATICCCom.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000022016 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.Implementation.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000019968 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Fuel.Runtime.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000010752 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Fuel.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000011776 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.HydraVision.Runtime.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000008704 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.HydraVision.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000007680 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Client.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000032768 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.Shared.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 001200640 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.Shared.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000037376 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.Shared.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000061440 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000029184 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.Private.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000018432 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.XManifest.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006144 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000012800 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticFuel.Foundation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000021504 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000055296 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Implementation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000020480 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Implementation.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000024576 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000095744 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.Implementation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000015360 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticNEWAEM.Foundation.dll\n2011-04-21 16:40 – 2011-04-21 16:40 – 000080896 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticADL.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000036352 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Client.Shared.Private.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000389120 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000057344 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.dll\n2009-06-17 05:27 – 2009-06-17 05:27 – 000016384 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.I0709.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000290816 _____ ( (Advanced Mirco Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Graphics.Runtime.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000167936 _____ ( (Advanced Mirco Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Graphics.Shared.dll\n2010-03-04 00:27 – 2010-03-04 00:27 – 000016384 _____ ( (ATI Technologies Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Foundation.dll\n2009-04-22 12:13 – 2009-04-22 12:13 – 000045056 _____ ( (ATI Technologies Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.I0601.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000838144 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiacm64.dll\n2011-06-30 00:10 – 2011-06-30 00:10 – 000004608 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiamenu.dll\n2015-12-17 11:11 – 2015-12-17 11:11 – 000132096 _____ (Seiko Epson Corporation) [File not signed] C:Program Files (x86)EPSON SoftwareEvent Managerepnsm.dll\n2009-10-21 17:39 – 2009-10-21 17:39 – 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareEvent ManagerLcMgr.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000096768 _____ (Seiko Epson Corporation) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityEbpD4Fax.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000212992 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUADRFIL.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXCFG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000446464 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXCSR.DLL\n2017-06-29 17:30 – 2019-10-02 02:00 – 000393216 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXLDB.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000651264 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXTIF.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000421888 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUIMGCDC.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000278528 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFULEPP.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUSTMMSG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000356352 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUSVCCLT.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUUSBHLP.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000258048 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUVERDLG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000073728 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUDEVCOM.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUDRVUTL.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUPRBDEV.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUSNMPUT.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000086016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUCMNMSG.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000090112 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXCFGRes.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXRCV.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000110592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXSTM.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUPRBDEVRes.dll\n2017-06-29 17:28 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2017-06-29 17:28 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000786432 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENCM.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000278528 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENNW.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000299008 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENUTIL.dll","html":"2011-06-30 00:11 – 2011-06-30 00:11 – 000008704 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Actions.CCAA.Shared.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000006656 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.DPPE.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.GD.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000007168 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.Hotkeys.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.REG.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000042496 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.Source.Kit.Server.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006656 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.WinMessages.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000034816 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Server.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006144 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Server.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000032768 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticATICCCom.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000022016 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.Implementation.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000019968 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Fuel.Runtime.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000010752 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Fuel.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000011776 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.HydraVision.Runtime.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000008704 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.HydraVision.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000007680 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Client.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000032768 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.Shared.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 001200640 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.Shared.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000037376 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.Shared.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000061440 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000029184 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.Private.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000018432 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.XManifest.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006144 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000012800 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticFuel.Foundation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000021504 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000055296 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Implementation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000020480 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Implementation.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000024576 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000095744 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.Implementation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000015360 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticNEWAEM.Foundation.dll\n2011-04-21 16:40 – 2011-04-21 16:40 – 000080896 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticADL.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000036352 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Client.Shared.Private.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000389120 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000057344 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.dll\n2009-06-17 05:27 – 2009-06-17 05:27 – 000016384 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.I0709.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000290816 _____ ( (Advanced Mirco Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Graphics.Runtime.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000167936 _____ ( (Advanced Mirco Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Graphics.Shared.dll\n2010-03-04 00:27 – 2010-03-04 00:27 – 000016384 _____ ( (ATI Technologies Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Foundation.dll\n2009-04-22 12:13 – 2009-04-22 12:13 – 000045056 _____ ( (ATI Technologies Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.I0601.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000838144 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiacm64.dll\n2011-06-30 00:10 – 2011-06-30 00:10 – 000004608 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiamenu.dll\n2015-12-17 11:11 – 2015-12-17 11:11 – 000132096 _____ (Seiko Epson Corporation) [File not signed] C:Program Files (x86)EPSON SoftwareEvent Managerepnsm.dll\n2009-10-21 17:39 – 2009-10-21 17:39 – 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareEvent ManagerLcMgr.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000096768 _____ (Seiko Epson Corporation) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityEbpD4Fax.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000212992 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUADRFIL.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXCFG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000446464 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXCSR.DLL\n2017-06-29 17:30 – 2019-10-02 02:00 – 000393216 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXLDB.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000651264 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXTIF.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000421888 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUIMGCDC.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000278528 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFULEPP.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUSTMMSG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000356352 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUSVCCLT.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUUSBHLP.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000258048 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUVERDLG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000073728 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUDEVCOM.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUDRVUTL.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUPRBDEV.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUSNMPUT.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000086016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUCMNMSG.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000090112 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXCFGRes.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXRCV.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000110592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXSTM.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUPRBDEVRes.dll\n2017-06-29 17:28 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2017-06-29 17:28 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000786432 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENCM.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000278528 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENNW.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000299008 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENUTIL.dll
"},{"id":"text-57","type":"text","heading":"","plain_text":"==================== Alternate Data Streams (Whitelisted) ========","html":"==================== Alternate Data Streams (Whitelisted) ========
"},{"id":"text-58","type":"text","heading":"","plain_text":"==================== Safe Mode (Whitelisted) ==================","html":"==================== Safe Mode (Whitelisted) ==================
"},{"id":"text-59","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
"},{"id":"text-60","type":"text","heading":"","plain_text":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"","html":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service"
"},{"id":"text-61","type":"text","heading":"","plain_text":"==================== Association (Whitelisted) =================","html":"==================== Association (Whitelisted) =================
"},{"id":"text-62","type":"text","heading":"","plain_text":"==================== Internet Explorer trusted/restricted ==========","html":"==================== Internet Explorer trusted/restricted ==========
"},{"id":"text-63","type":"text","heading":"","plain_text":"==================== Hosts content: =========================","html":"==================== Hosts content: =========================
"},{"id":"text-64","type":"text","heading":"","plain_text":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)","html":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
"},{"id":"text-65","type":"text","heading":"","plain_text":"2009-07-13 22:34 – 2009-06-10 17:00 – 000000824 _____ C:Windowssystem32driversetchosts","html":"2009-07-13 22:34 – 2009-06-10 17:00 – 000000824 _____ C:Windowssystem32driversetchosts
"},{"id":"text-66","type":"text","heading":"","plain_text":"==================== Other Areas ===========================","html":"==================== Other Areas ===========================
"},{"id":"text-67","type":"text","heading":"","plain_text":"(Currently there is no automatic fix for this section.)","html":"(Currently there is no automatic fix for this section.)
"},{"id":"text-68","type":"text","heading":"","plain_text":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;C:ProgramDataOracleJavajavapath;C:Program Files (x86)AMD APPbinx86_64;C:Program Files (x86)AMD APPbinx86;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)ATI TechnologiesATI.ACECore-Static\nHKUS-1-5-21-3312487288-1977858865-3294966506-1000Control PanelDesktop\\Wallpaper -> C:UsersEricAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 75.75.75.75 – 75.75.76.76\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled.","html":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;C:ProgramDataOracleJavajavapath;C:Program Files (x86)AMD APPbinx86_64;C:Program Files (x86)AMD APPbinx86;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)ATI TechnologiesATI.ACECore-Static\nHKUS-1-5-21-3312487288-1977858865-3294966506-1000Control PanelDesktop\\Wallpaper -> C:UsersEricAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 75.75.75.75 – 75.75.76.76\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled.
"},{"id":"text-69","type":"text","heading":"","plain_text":"==================== MSCONFIG/TASK MANAGER disabled items ==","html":"==================== MSCONFIG/TASK MANAGER disabled items ==
"},{"id":"text-70","type":"text","heading":"","plain_text":"==================== FirewallRules (Whitelisted) ================","html":"==================== FirewallRules (Whitelisted) ================
"},{"id":"text-71","type":"text","heading":"","plain_text":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)","html":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
"},{"id":"text-72","type":"text","heading":"","plain_text":"FirewallRules: [F57271F5-6E64-436A-9DDC-1FF5D62B7837] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [49D6E689-0BDF-48E1-818B-2F54A29E3B2A] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [FE195C8D-83B5-42E2-AF39-5F598CD92633] => (Allow) C:Program Files (x86)EPSON SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [29E16CF8-9496-41FD-9C7C-ECBAF04E4E97] => (Allow) C:Program Files (x86)EPSON SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [39ADE3BA-F527-449C-B24A-C5782E2ABC18] => (Allow) D:CommonEpsonNet SetupENEasyApp.exe => No File\nFirewallRules: [F6F02359-46C4-4B1A-966E-B575B74DD9A1] => (Allow) D:CommonEpsonNet SetupENEasyApp.exe => No File\nFirewallRules: [TCP Query User4FCC4BC2-9B40-405B-9401-8B70B264A30FC:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query User5C116C42-738E-4F1F-97E2-9F9EF69B82A2C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query UserA2B1163D-D654-4B40-9CE1-747167BE26BCC:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [UDP Query UserA2AECB7A-B8A9-49AB-8F5B-E4F7614D82C4C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [TCP Query UserFCDFE73D-B269-4BC4-A5E7-E04E5986E16CC:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [UDP Query User51A1D336-FE9F-4D3F-8968-7422D7B46788C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [4B878145-E326-4BB4-8C0D-CA84E51037B6] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [769B53A1-A41B-4A27-994A-FF3E06A53A02] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [69150D6F-229A-4316-A4AA-F827CBF1A778] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [5E3442AC-8A2D-4D64-BE64-F632D50A9B8F] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [9FE2765C-353A-47FD-85B9-88414F80EE03] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe => No File\nFirewallRules: [C9ED5E2F-4D67-4E2C-93A0-E60F0133CFD2] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe => No File\nFirewallRules: [E78BE10C-0EF8-4B3D-B41E-ADC1A3CEBBC3] => (Allow) C:Program Files (x86)SteamsteamappscommonGeometry DashGeometryDash.exe () [File not signed]\nFirewallRules: [41FE16CA-6A29-47D8-99D3-E2CC8DF81237] => (Allow) C:Program Files (x86)SteamsteamappscommonGeometry DashGeometryDash.exe () [File not signed]\nFirewallRules: [32621084-BD70-4C53-B810-C01B99ABC2DA] => (Allow) C:Program Files (x86)SteamsteamappscommonWest of LoathingWest of Loathing.exe () [File not signed]\nFirewallRules: [246178CD-BD55-4B45-BAE1-12E74E9CA9AD] => (Allow) C:Program Files (x86)SteamsteamappscommonWest of LoathingWest of Loathing.exe () [File not signed]\nFirewallRules: [TCP Query User2F69BA55-0E9F-49D3-8296-1CCB7E779B1FC:usersericappdataroamingspotifyspotify.exe] => (Allow) C:usersericappdataroamingspotifyspotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [UDP Query User63543BFA-6B88-4A03-A69B-65DFA415F221C:usersericappdataroamingspotifyspotify.exe] => (Allow) C:usersericappdataroamingspotifyspotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [TCP Query User7EF26635-5C62-4D8A-BF71-18D13738EC92C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe] => (Allow) C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe (Jordan Porter) [File not signed]\nFirewallRules: [UDP Query UserB9DCBC24-8805-4579-8C7E-ADF06868B329C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe] => (Allow) C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe (Jordan Porter) [File not signed]\nFirewallRules: [TCP Query User6184C7D4-253D-45D6-95E2-25670EDFCF65C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [UDP Query UserEB73724F-7745-4C12-9AE5-F3DEA4C3627DC:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [TCP Query UserBDDC416C-16FC-4803-8A86-7098F8BE3226C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [UDP Query User06183A7D-EDF3-4A19-95EC-F8CB628AF23BC:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [38C40A30-96BF-46EC-85F5-D6B0E3996EA6] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [D4C2638C-0C27-4E87-859A-FD1C639479C2] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [TCP Query UserE9422BD8-33CD-4868-8A57-4D2534347969C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [UDP Query User07C2669F-7151-441B-AC24-9D57950AE354C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [TCP Query UserF72684D1-4122-437B-9805-63B41E6E68E4C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [UDP Query User2F253E3A-0ADB-4681-9504-497A3B6BF3F4C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [F68A9AB6-6C74-43B8-814D-142BB99E1DA9] => (Allow) C:Program Files (x86)SteamsteamappscommonRagnarok Online 2WPLauncher.exe (Gravity Interactive, Inc.) [File not signed]\nFirewallRules: [EE5A948A-5D85-4ADB-9A1B-9355DB322BB6] => (Allow) C:Program Files (x86)SteamsteamappscommonRagnarok Online 2WPLauncher.exe (Gravity Interactive, Inc.) [File not signed]\nFirewallRules: [BB78E8F5-1560-4976-96F9-053776B5FD7B] => (Allow) C:Program Files (x86)SteamsteamappscommonTerrariaTerraria.exe (Re-Logic) [File not signed]\nFirewallRules: [BDA02D4E-7231-443B-B420-40733950A471] => (Allow) C:Program Files (x86)SteamsteamappscommonTerrariaTerraria.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query UserE0E55BA4-EA34-4918-AED8-C5513561FA77C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe (Re-Logic) [File not signed]\nFirewallRules: [UDP Query User58082C5F-E51E-49E0-ACE1-364B5D4EE47BC:program files (x86)steamsteamappscommonterrariaterrariaserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query User31788A46-8458-40FF-8678-93F0B7191B99C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe (Re-Logic) [File not signed]\nFirewallRules: [UDP Query User481E77C6-534E-4C84-93E6-369AB4D11C92C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query UserB2F7E2BD-9E20-4716-A211-2CB1E2ECC08BC:usersericappdatalocalprogramskast-appkast.exe] => (Allow) C:usersericappdatalocalprogramskast-appkast.exe (Evasyst, Inc. -> Evasyst, Inc.)\nFirewallRules: [UDP Query UserA3573CDC-11EC-4784-890A-10E8A58EC0E7C:usersericappdatalocalprogramskast-appkast.exe] => (Allow) C:usersericappdatalocalprogramskast-appkast.exe (Evasyst, Inc. -> Evasyst, Inc.)\nFirewallRules: [104EACAA-A09F-46DD-B076-84A5694EA313] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)","html":"FirewallRules: [F57271F5-6E64-436A-9DDC-1FF5D62B7837] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [49D6E689-0BDF-48E1-818B-2F54A29E3B2A] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [FE195C8D-83B5-42E2-AF39-5F598CD92633] => (Allow) C:Program Files (x86)EPSON SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [29E16CF8-9496-41FD-9C7C-ECBAF04E4E97] => (Allow) C:Program Files (x86)EPSON SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [39ADE3BA-F527-449C-B24A-C5782E2ABC18] => (Allow) D:CommonEpsonNet SetupENEasyApp.exe => No File\nFirewallRules: [F6F02359-46C4-4B1A-966E-B575B74DD9A1] => (Allow) D:CommonEpsonNet SetupENEasyApp.exe => No File\nFirewallRules: [TCP Query User4FCC4BC2-9B40-405B-9401-8B70B264A30FC:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query User5C116C42-738E-4F1F-97E2-9F9EF69B82A2C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query UserA2B1163D-D654-4B40-9CE1-747167BE26BCC:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [UDP Query UserA2AECB7A-B8A9-49AB-8F5B-E4F7614D82C4C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [TCP Query UserFCDFE73D-B269-4BC4-A5E7-E04E5986E16CC:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [UDP Query User51A1D336-FE9F-4D3F-8968-7422D7B46788C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [4B878145-E326-4BB4-8C0D-CA84E51037B6] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [769B53A1-A41B-4A27-994A-FF3E06A53A02] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [69150D6F-229A-4316-A4AA-F827CBF1A778] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [5E3442AC-8A2D-4D64-BE64-F632D50A9B8F] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [9FE2765C-353A-47FD-85B9-88414F80EE03] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe => No File\nFirewallRules: [C9ED5E2F-4D67-4E2C-93A0-E60F0133CFD2] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe => No File\nFirewallRules: [E78BE10C-0EF8-4B3D-B41E-ADC1A3CEBBC3] => (Allow) C:Program Files (x86)SteamsteamappscommonGeometry DashGeometryDash.exe () [File not signed]\nFirewallRules: [41FE16CA-6A29-47D8-99D3-E2CC8DF81237] => (Allow) C:Program Files (x86)SteamsteamappscommonGeometry DashGeometryDash.exe () [File not signed]\nFirewallRules: [32621084-BD70-4C53-B810-C01B99ABC2DA] => (Allow) C:Program Files (x86)SteamsteamappscommonWest of LoathingWest of Loathing.exe () [File not signed]\nFirewallRules: [246178CD-BD55-4B45-BAE1-12E74E9CA9AD] => (Allow) C:Program Files (x86)SteamsteamappscommonWest of LoathingWest of Loathing.exe () [File not signed]\nFirewallRules: [TCP Query User2F69BA55-0E9F-49D3-8296-1CCB7E779B1FC:usersericappdataroamingspotifyspotify.exe] => (Allow) C:usersericappdataroamingspotifyspotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [UDP Query User63543BFA-6B88-4A03-A69B-65DFA415F221C:usersericappdataroamingspotifyspotify.exe] => (Allow) C:usersericappdataroamingspotifyspotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [TCP Query User7EF26635-5C62-4D8A-BF71-18D13738EC92C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe] => (Allow) C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe (Jordan Porter) [File not signed]\nFirewallRules: [UDP Query UserB9DCBC24-8805-4579-8C7E-ADF06868B329C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe] => (Allow) C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe (Jordan Porter) [File not signed]\nFirewallRules: [TCP Query User6184C7D4-253D-45D6-95E2-25670EDFCF65C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [UDP Query UserEB73724F-7745-4C12-9AE5-F3DEA4C3627DC:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [TCP Query UserBDDC416C-16FC-4803-8A86-7098F8BE3226C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [UDP Query User06183A7D-EDF3-4A19-95EC-F8CB628AF23BC:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [38C40A30-96BF-46EC-85F5-D6B0E3996EA6] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [D4C2638C-0C27-4E87-859A-FD1C639479C2] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [TCP Query UserE9422BD8-33CD-4868-8A57-4D2534347969C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [UDP Query User07C2669F-7151-441B-AC24-9D57950AE354C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [TCP Query UserF72684D1-4122-437B-9805-63B41E6E68E4C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [UDP Query User2F253E3A-0ADB-4681-9504-497A3B6BF3F4C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [F68A9AB6-6C74-43B8-814D-142BB99E1DA9] => (Allow) C:Program Files (x86)SteamsteamappscommonRagnarok Online 2WPLauncher.exe (Gravity Interactive, Inc.) [File not signed]\nFirewallRules: [EE5A948A-5D85-4ADB-9A1B-9355DB322BB6] => (Allow) C:Program Files (x86)SteamsteamappscommonRagnarok Online 2WPLauncher.exe (Gravity Interactive, Inc.) [File not signed]\nFirewallRules: [BB78E8F5-1560-4976-96F9-053776B5FD7B] => (Allow) C:Program Files (x86)SteamsteamappscommonTerrariaTerraria.exe (Re-Logic) [File not signed]\nFirewallRules: [BDA02D4E-7231-443B-B420-40733950A471] => (Allow) C:Program Files (x86)SteamsteamappscommonTerrariaTerraria.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query UserE0E55BA4-EA34-4918-AED8-C5513561FA77C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe (Re-Logic) [File not signed]\nFirewallRules: [UDP Query User58082C5F-E51E-49E0-ACE1-364B5D4EE47BC:program files (x86)steamsteamappscommonterrariaterrariaserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query User31788A46-8458-40FF-8678-93F0B7191B99C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe (Re-Logic) [File not signed]\nFirewallRules: [UDP Query User481E77C6-534E-4C84-93E6-369AB4D11C92C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query UserB2F7E2BD-9E20-4716-A211-2CB1E2ECC08BC:usersericappdatalocalprogramskast-appkast.exe] => (Allow) C:usersericappdatalocalprogramskast-appkast.exe (Evasyst, Inc. -> Evasyst, Inc.)\nFirewallRules: [UDP Query UserA3573CDC-11EC-4784-890A-10E8A58EC0E7C:usersericappdatalocalprogramskast-appkast.exe] => (Allow) C:usersericappdatalocalprogramskast-appkast.exe (Evasyst, Inc. -> Evasyst, Inc.)\nFirewallRules: [104EACAA-A09F-46DD-B076-84A5694EA313] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)
"},{"id":"text-73","type":"text","heading":"","plain_text":"==================== Restore Points =========================","html":"==================== Restore Points =========================
"},{"id":"text-74","type":"text","heading":"","plain_text":"24-04-2020 11:55:53 Windows Update\n27-04-2020 13:05:12 Windows Update\n01-05-2020 11:42:29 Windows Update\n05-05-2020 11:14:16 Windows Update\n08-05-2020 11:22:48 Windows Update\n11-05-2020 11:39:21 Windows Update","html":"24-04-2020 11:55:53 Windows Update\n27-04-2020 13:05:12 Windows Update\n01-05-2020 11:42:29 Windows Update\n05-05-2020 11:14:16 Windows Update\n08-05-2020 11:22:48 Windows Update\n11-05-2020 11:39:21 Windows Update
"},{"id":"text-75","type":"text","heading":"","plain_text":"==================== Faulty Device Manager Devices ============","html":"==================== Faulty Device Manager Devices ============
"},{"id":"text-76","type":"text","heading":"","plain_text":"Name: Teredo Tunneling Pseudo-Interface\nDescription: Microsoft Teredo Tunneling Adapter\nClass Guid: 4d36e972-e325-11ce-bfc1-08002be10318\nManufacturer: Microsoft\nService: tunnel\nProblem: : This device cannot start. (Code10)\nResolution: Device failed to start. Click "Update Driver" to update the drivers for this device.\nOn the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.","html":"Name: Teredo Tunneling Pseudo-Interface\nDescription: Microsoft Teredo Tunneling Adapter\nClass Guid: 4d36e972-e325-11ce-bfc1-08002be10318\nManufacturer: Microsoft\nService: tunnel\nProblem: : This device cannot start. (Code10)\nResolution: Device failed to start. Click "Update Driver" to update the drivers for this device.\nOn the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
"},{"id":"text-77","type":"text","heading":"","plain_text":"==================== Event log errors: ========================","html":"==================== Event log errors: ========================
"},{"id":"text-78","type":"text","heading":"","plain_text":"Application errors:\n==================\nError: (05/11/2020 02:40:29 PM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Faulting application name: Explorer.EXE, version: 6.1.7601.23537, time stamp: 0x57c44efe\nFaulting module name: ntdll.dll, version: 6.1.7601.24545, time stamp: 0x5e0eb67f\nException code: 0xc0000005\nFault offset: 0x000000000001c52c\nFaulting process id: 0x66c\nFaulting application start time: 0x01d627c153cc1806\nFaulting application path: C:WindowsExplorer.EXE\nFaulting module path: C:WindowsSYSTEM32ntdll.dll\nReport Id: e2cc09a8-93b6-11ea-bb3d-78acc0bd2160","html":"Application errors:\n==================\nError: (05/11/2020 02:40:29 PM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Faulting application name: Explorer.EXE, version: 6.1.7601.23537, time stamp: 0x57c44efe\nFaulting module name: ntdll.dll, version: 6.1.7601.24545, time stamp: 0x5e0eb67f\nException code: 0xc0000005\nFault offset: 0x000000000001c52c\nFaulting process id: 0x66c\nFaulting application start time: 0x01d627c153cc1806\nFaulting application path: C:WindowsExplorer.EXE\nFaulting module path: C:WindowsSYSTEM32ntdll.dll\nReport Id: e2cc09a8-93b6-11ea-bb3d-78acc0bd2160
"},{"id":"text-79","type":"text","heading":"","plain_text":"Error: (05/11/2020 02:25:45 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.","html":"Error: (05/11/2020 02:25:45 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
"},{"id":"text-80","type":"text","heading":"","plain_text":"Error: (05/11/2020 02:23:56 PM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.","html":"Error: (05/11/2020 02:23:56 PM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.
"},{"id":"text-81","type":"text","heading":"","plain_text":"Error: (05/11/2020 11:36:00 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.","html":"Error: (05/11/2020 11:36:00 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
"},{"id":"text-82","type":"text","heading":"","plain_text":"Error: (05/11/2020 11:34:12 AM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.","html":"Error: (05/11/2020 11:34:12 AM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.
"},{"id":"text-83","type":"text","heading":"","plain_text":"Error: (05/11/2020 02:58:17 AM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.","html":"Error: (05/11/2020 02:58:17 AM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.
"},{"id":"text-84","type":"text","heading":"","plain_text":"Error: (05/10/2020 08:56:02 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.","html":"Error: (05/10/2020 08:56:02 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
"},{"id":"text-85","type":"text","heading":"","plain_text":"Error: (05/10/2020 08:54:14 PM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.","html":"Error: (05/10/2020 08:54:14 PM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis.
"},{"id":"text-86","type":"text","heading":"","plain_text":"System errors:\n=============\nError: (05/06/2020 05:39:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.","html":"System errors:\n=============\nError: (05/06/2020 05:39:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.
"},{"id":"text-87","type":"text","heading":"","plain_text":"Error: (05/06/2020 05:39:14 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.","html":"Error: (05/06/2020 05:39:14 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.
"},{"id":"text-88","type":"text","heading":"","plain_text":"Error: (05/06/2020 05:39:14 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 70.","html":"Error: (05/06/2020 05:39:14 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 70.
"},{"id":"text-89","type":"text","heading":"","plain_text":"Error: (05/03/2020 07:24:44 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.","html":"Error: (05/03/2020 07:24:44 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.
"},{"id":"text-90","type":"text","heading":"","plain_text":"Error: (05/03/2020 07:24:44 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 70.","html":"Error: (05/03/2020 07:24:44 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 70.
"},{"id":"text-91","type":"text","heading":"","plain_text":"Error: (04/29/2020 11:24:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )\nDescription: The Steam Client Service service failed to start due to the following error: \nThe service did not respond to the start or control request in a timely fashion.","html":"Error: (04/29/2020 11:24:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )\nDescription: The Steam Client Service service failed to start due to the following error: \nThe service did not respond to the start or control request in a timely fashion.
"},{"id":"text-92","type":"text","heading":"","plain_text":"Error: (04/29/2020 11:24:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )\nDescription: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.","html":"Error: (04/29/2020 11:24:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )\nDescription: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect.
"},{"id":"text-93","type":"text","heading":"","plain_text":"Error: (04/29/2020 05:15:35 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.","html":"Error: (04/29/2020 05:15:35 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80.
"},{"id":"text-94","type":"text","heading":"","plain_text":"==================== Memory info ===========================","html":"==================== Memory info ===========================
"},{"id":"text-95","type":"text","heading":"","plain_text":"BIOS: American Megatrends Inc. 6.06 03/22/2011\nMotherboard: FOXCONN 2AB1\nProcessor: AMD Athlon™ II X4 640 Processor\nPercentage of memory in use: 70%\nTotal physical RAM: 6143.29 MB\nAvailable physical RAM: 1784.56 MB\nTotal Virtual: 12284.71 MB\nAvailable Virtual: 7686.77 MB","html":"BIOS: American Megatrends Inc. 6.06 03/22/2011\nMotherboard: FOXCONN 2AB1\nProcessor: AMD Athlon™ II X4 640 Processor\nPercentage of memory in use: 70%\nTotal physical RAM: 6143.29 MB\nAvailable physical RAM: 1784.56 MB\nTotal Virtual: 12284.71 MB\nAvailable Virtual: 7686.77 MB
"},{"id":"text-96","type":"text","heading":"","plain_text":"==================== Drives ================================","html":"==================== Drives ================================
"},{"id":"text-97","type":"text","heading":"","plain_text":"Drive c: () (Fixed) (Total:238.37 GB) (Free:121.61 GB) NTFS","html":"Drive c: () (Fixed) (Total:238.37 GB) (Free:121.61 GB) NTFS
"},{"id":"text-98","type":"text","heading":"","plain_text":"\\?Volume85b2accc-5b89-11e7-beef-806e6f6e6963 (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS","html":"\\?Volume85b2accc-5b89-11e7-beef-806e6f6e6963 (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
"},{"id":"text-99","type":"text","heading":"","plain_text":"==================== MBR & Partition Table ====================","html":"==================== MBR & Partition Table ====================
"},{"id":"text-100","type":"text","heading":"","plain_text":"==========================================================\nDisk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: EB977B7E)\nPartition 1: (Active) – (Size=100 MB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=238.4 GB) – (Type=07 NTFS)","html":"==========================================================\nDisk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: EB977B7E)\nPartition 1: (Active) – (Size=100 MB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=238.4 GB) – (Type=07 NTFS)
"},{"id":"text-101","type":"text","heading":"","plain_text":"==================== End of Addition.txt =======================","html":"==================== End of Addition.txt =======================
"},{"id":"text-102","type":"text","heading":"","plain_text":"Click to rate this post!\n \n [Total: 0 Average: 0]","html":"Click to rate this post!\n \n [Total: 0 Average: 0]
"}],"sections":[{"id":"text-1","heading":"Text","content":"Résultat de l'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-05-2020\nGéré par Eric (administrateur) sur ERIC-PC (Hewlett-Packard p6710f) (11-05-2020 16:50:09)\nExécution à partir de C: Users Eric Downloads\nProfils chargés: Eric\nPlateforme: Windows 7 Home Premium Service Pack 1 (X64) Langue: anglais (États-Unis)\nInternet Explorer version 11 (navigateur par défaut: Chrome)\nMode de démarrage: Normal"},{"id":"text-2","heading":"Text","content":"==================== Processus (liste blanche) ================="},{"id":"text-3","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le processus sera fermé. Le fichier ne sera pas déplacé.)"},{"id":"text-4","heading":"Text","content":"((HuskyCahya -> LevelInc Ltd) [File not signed]) [File is in use ] C: Program Files (x86) AlphacomAccentpolyN AlphacomAccentpolyN.exe\n(Advanced Micro Devices Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static MOM.exe\n(Advanced Micro Devices, Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static MMLoadDrv.exe\n(ATI Technologies Inc.) [File not signed] C: Program Files (x86) ATI Technologies ATI.ACE Core-Static CCC.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Chrome Application chrome.exe \n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler.exe\n(Google LLC -> Google LLC) C: Program Files (x86) Google Update 1.3.35.452 GoogleCrashHandler64.exe\n(HP Inc. -> HP Inc.) C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe\n(HP Inc. -> HP Inc.) C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe\n(Logitech, Inc. -> Logitech Inc.) C: Program Files (x86) Common Files logishrd LVMVFM UMVPFSrv.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware MBAMService.exe\n(Malwarebytes Inc -> Malwarebytes) C: Program Files Malwarebytes Anti-Malware mbamtray.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office Office12 POWERPNT.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files (x86) Microsoft Office Office12 WINWORD.EXE\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client MsMpEng.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client msseces.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Program Files Microsoft Security Client NisSrv.exe\n(Microsoft Corporation -> Microsoft Corporation) C: Windows System32 WirelessKB850NotificationService.exe\n(Microsoft Windows -> Microsoft Corporation) C: Program Files Windows Media Player wmprph.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows splwow64.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 prevhost.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 SnippingTool.exe\n(Microsoft Windows -> Microsoft Corporation) C: Windows System32 wisptis.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> AMD) C: Windows System32 atieclxx.exe\n(Éditeur de compatibilité matérielle Microsoft Windows -> AMD) C: Windows System32 atiesrxx.exe\n(Oracle America, Inc. -> Oracle Corporation) C: Program Files (x86) Common Files Java Java Update jusched.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software Event Manager EEventManager.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software FAX Utility FUFAXRCV.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files (x86) EPSON Software FAX Utility FUFAXSTM.exe\n(SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Program Files EPSON EpsonCustomerResearchParticipation EPCP.exe\n(SEIKO EPSON Corporation -> Seiko Epson Corporation) C: Windows System32 escsvc64.exe\n(SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION) C: Windows System32 spool drivers x64 3 E_YATIKDE.EXE\n(Spotify AB -> Spotify Ltd) C: Users Eric AppData Roaming Spotify SpotifyWebHelper.exe\n(Valve -> Valve Corporation) C: Program Files (x86) Common Files Steam SteamService.exe\n(Valve -> Valve Corporation) C: Program Files (x86) Steam bin cef cef.win7x64 steamwebhelper.exe \n(Valve -> Valve Corporation) C: Program Files (x86) Steam steam.exe"},{"id":"text-5","heading":"Text","content":"==================== Registre (liste blanche) ==================="},{"id":"text-6","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, l'élément de registre sera restauré par défaut ou supprimé. Le fichier ne sera pas déplacé.)"},{"id":"text-7","heading":"Text","content":"HKLM … Run: [MSC] => c: Program Files Microsoft Security Client msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nHKLM … Run: [Logitech Download Assistant] => C: Windows System32 LogiLDA.dll [1841496 2016-10-14] (Logitech -> Logitech, Inc.)\nHKLM-x32 … Exécuter: [StartCCC] => C: Program Files (x86) ATI Technologies ATI.ACE Core-Static CLIStart.exe [336384 2011-06-30] (Advanced Micro Devices, Inc.) [File not signed]\nHKLM-x32 … Exécuter: [FUFAXRCV] => C: Program Files (x86) Epson Software FAX Utility FUFAXRCV.exe [669664 2019-10-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [FUFAXSTM] => C: Program Files (x86) Epson Software FAX Utility FUFAXSTM.exe [894944 2019-10-02] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [EEventManager] => C: Program Files (x86) Epson Software Event Manager EEventManager.exe [1087184 2016-01-20] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKLM-x32 … Exécuter: [SunJavaUpdateSched] => C: Program Files (x86) Fichiers communs Java Java Update jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [Steam] => C: Program Files (x86) Steam steam.exe [3372832 2020-04-27] (Valve -> Valve Corporation)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [Spotify Web Helper] => C: Users Eric AppData Roaming Spotify SpotifyWebHelper.exe [780688 2018-02-03] (Spotify AB -> Spotify Ltd)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Run: [EPLTargetP0000000000000000] => C: Windows system32 spool DRIVERS x64 3 E_YATIKDE.EXE [298560 2013-09-12] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nHKU S-1-5-21-3312487288-1977858865-3294966506-1000 … MountPoints2: 35585837-01c4-11e8-a9b3-78acc0bd2160 – I: LaunchU3.exe -a\nHKLM Software Microsoft Active Setup Installed Components: [8A69D345-D564-463c-AFF1-A69D9E530F96] -> C: Program Files (x86) Google Chrome Application 81.0.4044.138 Installer chrmstp.exe [2020-05-07] (Google LLC -> Google LLC)\nHKLM Software Wow6432Node Microsoft Active Setup Installed Components: [73FA19D0-2D75-11D2-995D-00C04F98BBC9] ->"},{"id":"text-8","heading":"Text","content":"==================== Tâches planifiées (liste blanche) ============"},{"id":"text-9","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-10","heading":"Text","content":"Tâche: 04ADAC4D-FD7D-482E-98CB-3D8434C5E02C – System32 Tasks GoogleUpdateTaskMachineCore => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2017-07-13] (Google Inc -> Google Inc.)\nTâche: 0826AEF9-AF74-4CEE-82B9-4EF5C91AC8E3 – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker_DeviceScan => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 20F0E2AD-625E-42DB-9ED2-46534EA8A212 – System32 Tasks Hewlett-Packard HP Active Health HP Active Health Scan (HPSA) => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPActiveHealth ActiveHealth.exe [25128 2017-11-22] (HP Inc. ->)\nTâche: 2836BDC8-DF82-47B5-8931-BCED9D5B422B – System32 Tasks Hewlett-Packard HP Support Assistant WarrantyChecker => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPWarrantyCheck HPWarrantyChecker.exe [1117048 2020-03-26] (HP Inc. -> HP Inc.)\nTâche: 30CA388E-AE58-4F84-A0CF-36CA3D229C60 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater – Resources => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 373989EF-24AB-497B-8A66-0215090362A0 – System32 Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: 3E544D74-2EBD-462C-834C-218F3B1EDF8C – System32 Tasks Adobe Flash Player PPAPI Notifier => C: Windows SysWOW64 Macromed Flash FlashUtil32_32_0_0_363_pepper.exe [1454136 2020-04-19] (Adobe Inc. -> Adobe)\nTâche: 3E826E79-292A-45A7-B26A-7EE4A55546B5 – System32 Tasks HPCeeScheduleForEric => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)\nTâche: 5EE35B28-5C9A-4072-B372-DA6114A8FCC3 – System32 Tasks Microsoft Microsoft Antimalware Microsoft Antimalware Scheduled Scan => c: Program Files Microsoft Security Client \\ MpCmdRun.exe [410784 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nTâche: 6E0B010D-59C6-4BE2-83A5-FE7F0E829FD1 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Assistant Quick Start => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF.exe [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: 8076B937-F816-4ADA-B868-A67EE92D2D17 – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Updater => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSSFUpdater.exe [655736 2019-07-31] (HP Inc. -> HP Inc.)\nTâche: 82A89C05-9A94-4DCE-80A9-1FA41A20ED6D – System32 Tasks Hewlett-Packard HP Support Assistant HP Support Solutions Framework Report => C: Program Files (x86) Hewlett-Packard HP Support Solutions Modules HPSFReport.exe [134008 2020-03-25] (HP Inc. -> HP Inc.)\nTâche: 8E62185D-1405-4F38-8764-ECB0929F5DD0 – System32 Tasks Hewlett-Packard HP Support Assistant Product Configurator => C: Program Files (x86) Hewlett-Packard HP Support Framework Resources ProductConfig .EXE [320856 2020-04-23] (HP Inc. -> HP Inc.)\nTâche: 9B896994-6A2A-4EBA-8885-C06853239A9F – Mise à jour de la série System32 Tasks EPSON WF-3640 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 => C: Windows system32 spool DRIVERS 3 E_YTSKDE.EXE [679488 2013-02-28] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nTâche: AAF9D068-144C-4B6C-A436-61E400CF1CD2 – System32 Tasks Adobe Flash Player Updater => C: Windows SysWOW64 Macromed Flash FlashPlayerUpdateService.exe [335416 2020-04-19] (Adobe Inc. -> Adobe)\nTâche: C059C297-977E-430E-9402-85D9D9F758C6 – System32 Tasks GoogleUpdateTaskMachineUA => C: Program Files (x86) Google Update GoogleUpdate.exe [153168 2017-07-13] (Google Inc -> Google Inc.)\nTâche: C1E84BF3-5507-43AF-946A-EB68AEC9546F – System32 Tasks Hewlett-Packard HP Support Assistant PC Health Analysis => C: Program Files (x86) Hewlett-Packard HP Support Framework HPSF. EXE [1506680 2019-06-14] (HP Inc. -> HP Inc.)\nTâche: FDF66B07-3C2E-4BB6-B79A-6A7DE2F842C8 – System32 Tasks Mozilla Firefox Default Browser Agent E7CF176E110C211B => C: Program Files (x86) Mozilla Firefox default-browser-agent.exe [126152 2020-04-23] (Mozilla Corporation -> Fondation Mozilla)"},{"id":"text-11","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier de tâche (.job) sera déplacé. Le fichier exécuté par la tâche ne sera pas déplacé.)"},{"id":"text-12","heading":"Text","content":"Tâche: C: Windows Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE\nTâche: C: Windows Tasks EPSON WF-3640 Series Update 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job => C: Windows system32 spool DRIVERS x64 3 E_YTSKDE.EXE: / EXE: 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 / F: UpdateSYSTEMĊRecherche les mises à jour du logiciel EPSON et vous avertit lorsque des mises à jour sont disponibles.Si cette tâche est désactivée ou arrêtée, votre logiciel EPSON ne sera pas automatiquement mis à jour. Thi\nTâche: C: Windows Tasks HPCeeScheduleForEric.job => C: Program Files (x86) Hewlett-Packard HP Ceement HPCEE.exe"},{"id":"text-13","heading":"Text","content":"==================== Internet (liste blanche) ===================="},{"id":"text-14","heading":"Text","content":"(Si un élément est inclus dans la liste de correctifs, s'il s'agit d'un élément du registre, il sera supprimé ou restauré par défaut.)"},{"id":"text-15","heading":"Text","content":"Tcpip Paramètres: [DhcpNameServer] 75,75,75,75 75,75,76,76\nTcpip .. Interfaces 6C3A6ED6-459B-45F6-AACF-451FA97646B7: [DhcpNameServer] 75,75,75,75 75,75,76,76\nTcpip .. Interfaces 9FB95EF1-6FAC-490A-814F-F993017A7EA6: [DhcpNameServer] 192.168.1.252"},{"id":"text-16","heading":"Text","content":"Internet Explorer:\n==================\nSearchScopes: HKLM -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKLM-x32 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nSearchScopes: HKU S-1-5-21-3312487288-1977858865-3294966506-1000 -> DefaultScope 0633EE93-D776-472f-A0FF-E1416B8B2E3A URL = \nBHO: Java ™ Plug-In SSV Helper -> 761497BB-D6F0-462C-B6EB-D4DAF1D92D43 -> C: Program Files Java jre1.8.0_251 bin ssv.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nBHO: Java ™ Plug-In 2 SSV Helper -> DBC80044-A445-435b-BC74-9C25C1C588A9 -> C: Program Files Java jre1.8.0_251 bin jp2ssv.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nBHO: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPluginx64.dll [2017-10-27] (HP Inc. -> HP Inc.)\nBHO-x32: HP Network Check Helper -> E76FD755-C1BA-4DCB-9F13-99BD91223ADE -> C: Program Files (x86) Hewlett-Packard HP Support Framework Resources HPNetworkCheck HPNetworkCheckPlugin.dll [2017-10-27] (HP Inc. -> HP Inc.)"},{"id":"text-17","heading":"Text","content":"FireFox:\n========\nFF DefaultProfile: dnln6rwd.default\nFF ProfilePath: C: Users Eric AppData Roaming Mozilla Firefox Profiles dnln6rwd.default [2020-05-11]\nFF Page d'accueil: Mozilla Firefox Profiles dnln6rwd.default -> hxxps: //links.malwarebytes.com/link/restorebrowser lic = essai & product = MBAM-Cparam1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWrRu5OXo1IhGWbkvP9Yv7ezBHXh% 2FBmaPh81bgd% 2Bd0HAN0N7% 2B7Ahh844DyIYjY1j4Vfy4piK5029QWh9WyAwA4qgf% 2By1h2HjT% 2FzwE4IpieTsNJKbAenpaE2GeEKEcjRDpG87QsAwuCvuyN%? 2FIt1seE7NClIzNz5% 2Fpx34ZHv3FAX17aRighSlYXPOiHV% 2B8M80IPHlpJCUQRwcvbICA4Cvr9zOQPosnTzdyCW7ag96lQqETU% 3D\nFF SearchPlugin: C: Users Eric AppData Roaming Mozilla Firefox Profiles dnln6rwd.default searchplugins Yahoo powered search.xml [2020-05-11]\nPlugin FF: @ java.com / DTPlugin, version = 11.251.2 -> C: Program Files Java jre1.8.0_251 bin dtplugin npDeployJava1.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nPlugin FF: @ java.com / JavaPlugin, version = 11.251.2 -> C: Program Files Java jre1.8.0_251 bin plugin2 npjp2.dll [2020-04-14] (Oracle America, Inc. -> Oracle Corporation)\nPlugin FF: @ microsoft.com / GENUINE -> désactivé [No File]\nFF Plugin-x32: @ microsoft.com / GENUINE -> désactivé [No File]"},{"id":"text-18","heading":"Text","content":"Chrome: \n=======\nProfil CHR: C: Users Eric AppData Local Google Chrome User Data Default [2020-05-11]\nNotifications CHR: Par défaut -> hxxps: //play.pokemonshowdown.com; hxxps: //www.facebook.com; hxxps: //www.rabb.it; hxxps: //www.twitch.tv; hxxps: //www.youtube.com\nCHR HomePage: Par défaut -> hxxps: //us.search.yahoo.com/yhs/web hspart = & OMR hsimp = YHS-001 & type = 863152190 & param1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWQ1FYFWZKveC% 2BqGgReLPKLsj% 2BcbF1vkG% 2BkY7oy5hfv3m8cwR32utrecEBuV3aT3Xzih80AoH0LbPgEsVazXoyUkK1% 2BFzLfjImFUq5IT3gwlBd5bQCrIkZh0FhqY617yDwjN4JCOnh4DcKIeWbO8b58loVWTt3YLdVMLNdy4ueARDmAgMsuCP8aFP4iGYfMVk6moqwrsSqQXFVUxBLIqg% 2F2% 2BnjKcUltJDa7HcC1yaNw88% 3D\nCHR StartupUrls: Par défaut ->? "Hxxps: //www.google.com/", "hxxps: //us.search.yahoo.com/yhs/web hspart = & OMR hsimp = YHS-001 & type = 863152190 & param1 = y6bdVFVIsvuYsgEClQfz8KTL4HLBF1wBOkVfCJhNXY7GpZ9gA4TzjU20% 2B6Ll2pqWNPCfuIXzPSGzwGX% 2B5vJi% 2B% 2Fb4EFpoTu% 2BaR22PaorcQojc3D2r2yNIAzqSH% 2BGqzeT% 2B% 2BMPORGKwmkOLHWkAPVs6oOJe5RnNHgXbd99% 2FcuKC% 2FPXcRFRW8bU% 2FxKPQO7cOgdXzJs8bQCMUaXJA4oubmyh3E3SI4eLjEdcST9YdFJt2PrPKNwnQM% 2B1EipVYA17LdeUbAVU1u5Pp6Q% 2BLxlNQN0z% 2BEs2x5hLDfAlBI2XbehFngHs% 3D »\nCHR DefaultSearchURL: Default -> hxxps: //www.bing.com/search? Q = searchTerms & PC = U316 & FORM = CHROMN\nCHR DefaultSearchKeyword: Par défaut -> bing.com\nCHR DefaultNewTabURL: Par défaut -> hxxps: //www.bing.com/chrome/newtab\nCHR DefaultSuggestURL: Par défaut -> hxxps: //www.bing.com/osjson.aspx? Query = searchTerms & language = language & PC = U316\nExtension CHR: (diapositives) – C: Users Eric AppData Local Google Chrome User Data Default Extensions aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]\nExtension CHR: (Docs) – C: Users Eric AppData Local Google Chrome User Data Default Extensions aohghmighlieiainnegkcijnfilokake [2017-10-12]\nExtension CHR: (Google Drive) – C: Users Eric AppData Local Google Chrome User Data Default Extensions apdfllckaahabafndbhieahigkjlhalf [2017-07-13]\nExtension CHR: (YouTube) – C: Users Eric AppData Local Google Chrome User Data Default Extensions blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-13]\nExtension CHR: (Watch2Gether) – C: Users Eric AppData Local Google Chrome User Data Default Extensions cimpffimgeipdhnhjohpbehjkcdpjolg [2020-04-24]\nExtension CHR: (Sheets) – C: Users Eric AppData Local Google Chrome User Data Default Extensions felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]\nExtension CHR: (Google Docs hors ligne) – C: Users Eric AppData Local Google Chrome User Data Default Extensions ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-04-21]\nExtension CHR: (partage d'écran Discord) – C: Users Eric AppData Local Google Chrome User Data Default Extensions lcbhdgefieegnkbopmgklhlpjjdgmbog [2017-11-14]\nExtension CHR: (Paiements Chrome Web Store) – C: Users Eric AppData Local Google Chrome User Data Default Extensions nmmhkkegccagdldgiimedpiccmgmieda [2019-10-04]\nExtension CHR: (Gmail) – C: Users Eric AppData Local Google Chrome User Data Default Extensions pjkljhegncpnkpknbcohdijeoejaedia [2019-04-24]\nExtension CHR: (Chrome Media Router) – C: Users Eric AppData Local Google Chrome User Data Default Extensions pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-23]"},{"id":"text-19","heading":"Text","content":"==================== Services (liste blanche) ==================="},{"id":"text-20","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-21","heading":"Text","content":"R2 AlphacomAccentpolyN; C: Program Files (x86) AlphacomAccentpolyN AlphacomAccentpolyN.exe [2026088 2020-05-02] ((HuskyCahya -> LevelInc Ltd) [File not signed]) [File is in use ]\nR2 AMD External Events Utility; C: Windows system32 atiesrxx.exe [236544 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> AMD)\nR2 EpsonCustomerResearchParticipation; C: Program Files EPSON EpsonCustomerResearchParticipation EPCP.exe [677880 2017-04-25] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nR2 EpsonScanSvc; C: Windows system32 EscSvc64.exe [144560 2012-05-17] (SEIKO EPSON Corporation -> Seiko Epson Corporation)\nR2 EPSON_PM_RPCV4_06; C: Program Files Fichiers communs EPSON EPW! 3 SSRP E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)\nS3 hpqcaslwmiex; C: Program Files (x86) HP Shared hpqwmiex.exe [1031704 2016-06-03] (Société Hewlett-Packard -> HP)\nR2 HPSupportSolutionsFrameworkService; C: Program Files (x86) Hewlett-Packard HP Support Solutions HPSupportSolutionsFrameworkService.exe [378744 2020-03-31] (HP Inc. -> HP Inc.)\nR2 HPTouchpointAnalyticsService; C: Program Files HP HP Touchpoint Analytics Client TouchpointAnalyticsClientService.exe [332216 2017-11-22] (HP Inc. -> HP Inc.)\nR2 MBAMService; C: Program Files Malwarebytes Anti-Malware MBAMService.exe [6933272 2020-03-11] (Malwarebytes Inc -> Malwarebytes)\nR2 MsMpSvc; c: Program Files Microsoft Security Client MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nR3 NisSrv; c: Program Files Microsoft Security Client NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nS3 WinDefend; C: Program Files Windows Defender mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)\nR2 WirelessKB850NotificationService; C: Windows system32 WirelessKB850NotificationService.exe [174256 2018-05-14] (Microsoft Corporation -> Microsoft Corporation)"},{"id":"text-22","heading":"Text","content":"===================== Pilotes (sur liste blanche) ==================="},{"id":"text-23","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-24","heading":"Text","content":"R3 amdkmdag; C: Windows System32 DRIVERS atikmdag.sys [11172864 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> Advanced Micro Devices, Inc.)\nR3 amdkmdap; C: Windows System32 DRIVERS atikmpag.sys [339456 2012-06-07] (Éditeur de compatibilité matérielle Microsoft Windows -> Advanced Micro Devices, Inc.)\nR0 AtiPcie; C: Windows System32 DRIVERS AtiPcie.sys [16440 2009-05-05] (Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.)\nR1 ESProtectionDriver; C: Windows system32 drivers mbae64.sys [153312 2020-04-17] (Malwarebytes Corporation -> Malwarebytes)\nR2 MBAMChameleon; C: Windows System32 Drivers MbamChameleon.sys [214496 2020-05-10] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMFarflt; C: Windows System32 DRIVERS farflt.sys [195432 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMProtection; C: Windows system32 DRIVERS mbam.sys [73368 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMSwissArmy; C: Windows System32 Drivers mbamswissarmy.sys [248968 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR3 MBAMWebProtection; C: Windows System32 DRIVERS mwac.sys [112752 2020-05-11] (Malwarebytes Inc -> Malwarebytes)\nR0 MpFilter; C: Windows System32 DRIVERS MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 netr28x; C: Windows System32 DRIVERS netr28x.sys [2473616 2014-12-10] (MEDIATEK INC. -> MediaTek Inc.)\nR3 NisDrv; C: Windows System32 DRIVERS NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)\nR3 usbfilter; C: Windows System32 DRIVERS usbfilter.sys [34872 2009-04-03] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)"},{"id":"text-25","heading":"Text","content":"==================== NetSvcs (liste blanche) ===================="},{"id":"text-26","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée du registre. Le fichier ne sera pas déplacé sauf s'il est répertorié séparément.)"},{"id":"text-27","heading":"Text","content":"==================== Un mois (créé) ==================="},{"id":"text-28","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)"},{"id":"text-29","heading":"Text","content":"2020-05-11 16:50 – 2020-05-11 16:51 – 000022444 _____ C: Users Eric Downloads FRST.txt\n2020-05-11 16:49 – 2020-05-11 16:50 – 000000000 ____D C: FRST\n2020-05-11 16:46 – 2020-05-11 16:47 – 002285568 _____ (Farbar) C: Users Eric Downloads FRST64.exe\n2020-05-11 15:17 – 2020-05-11 15:18 – 297211380 _____ C: Users Eric Documents Registry Backup.reg\n2020-05-11 14:24 – 2020-05-11 14:24 – 000195432 _____ (Malwarebytes) C: Windows system32 Drivers farflt.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000112752 _____ (Malwarebytes) C: Windows system32 Drivers mwac.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000073368 _____ (Malwarebytes) C: Windows system32 Drivers mbam.sys\n2020-05-11 14:24 – 2020-05-11 14:24 – 000000000 ____D C: Users Eric AppData LocalLow IGDump\n2020-05-11 14:23 – 2020-05-11 14:23 – 000005835 _____ C: Users Eric Documents MBAM 5th log.txt\n2020-05-11 11:34 – 2020-05-11 11:34 – 000248968 _____ (Malwarebytes) C: Windows system32 Drivers mbamswissarmy.sys\n2020-05-11 02:57 – 2020-05-11 02:57 – 000005672 _____ C: Users Eric Documents MBAM 4th log.txt\n2020-05-10 21:08 – 2020-05-10 21:08 – 000005346 _____ C: Users Eric Documents MBAM 3rd log.txt\n2020-05-10 21:08 – 2020-05-10 21:08 – 000005346 _____ C: Users Eric Documents MBAM 2nd log.txt\n2020-05-10 21:07 – 2020-05-10 21:07 – 000006945 _____ C: Users Eric Documents MBAM 1st log.txt\n2020-05-10 20:35 – 2020-05-10 20:35 – 000005516 _____ C: Users Eric Documents MBAM réessayez 1 5102020.txt\n2020-05-10 12:42 – 2020-05-10 12:42 – 000251947 _____ C: Users Eric Downloads DanycardMomin.pdf\n2020-05-10 12:27 – 2020-05-10 12:27 – 000214496 _____ (Malwarebytes) C: Windows system32 Drivers MbamChameleon.sys\n2020-05-10 02:54 – 2020-05-10 02:54 – 001801666 _____ C: Users Eric Downloads DanycardMom.pdf\n2020-05-10 02:52 – 2020-05-10 02:52 – 000001054 _____ C: Users Eric Downloads MothersDayCardInstructions.txt\n2020-05-09 17:47 – 2020-05-09 17:47 – 003048387 _____ C: Users Eric Downloads Wynntils-1.5.1_638-MC1.12.2.jar\n2020-05-09 17:36 – 2020-05-09 17:36 – 004953534 _____ C: Users Eric Downloads forge-1.12.2-14.23.5.2768-installer-win (1) .exe\n2020-05-09 17:35 – 2020-05-09 17:35 – 004953534 _____ C: Users Eric Downloads forge-1.12.2-14.23.5.2768-installer-win.exe\n2020-05-09 17:35 – 2020-05-09 17:35 – 000000000 ____D C: Program Files (x86) OneMellifluousUpdater\n2020-05-09 17:34 – 2020-05-09 17:34 – 000286604 _____ C: Users Eric AppData Roaming tb7_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2020-05-09 17:34 – 2020-05-09 17:34 – 000000000 ____D C: Windows SysWOW64 vd7v\n2020-05-09 17:33 – 2020-05-09 17:33 – 000000000 ____D C: ProgramData SProvide\n2020-05-09 17:33 – 2020-05-09 17:33 – 000000000 ____D C: Program Files (x86) AlphacomAccentpolyN\n2020-05-09 17:32 – 2020-05-09 17:35 – 000000000 ____D C: Program Files (x86) GemingaDirectory\n2020-05-09 17:32 – 2020-05-09 17:33 – 000000000 ____D C: Users Eric AppData Roaming SetupReconcile\n2020-05-09 17:32 – 2020-05-09 17:32 – 001794048 _____ C: Users Eric Downloads SetupMY.msi\n2020-04-25 17:35 – 2020-04-25 17:35 – 000000000 ____D C: Windows system32 Tasks Mozilla\n2020-04-23 15:45 – 2020-04-26 12:07 – 000000000 ____D C: Program Files (x86) Mozilla Firefox\n2020-04-15 15:46 – 2020-04-15 18:20 – 000157413 _____ C: Users Eric .babel.7.8.4.production.json"},{"id":"text-30","heading":"Text","content":"==================== Un mois (modifié) =================="},{"id":"text-31","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, le fichier / dossier sera déplacé.)"},{"id":"text-32","heading":"Text","content":"2020-05-11 16:42 – 2017-07-01 20:42 – 000000000 ____D C: Users Eric Documents MCC_Stuff\n2020-05-11 16:33 – 2018-10-07 14:33 – 000000911 _____ C: Windows Tasks EPSON WF-3640 Series Update 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job\n2020-05-11 16:33 – 2018-10-07 14:33 – 000000725 _____ C: Windows Tasks EPSON WF-3640 Series Invitation 75D026B1-B84D-4A20-97E9-26D07F4ABDD5 .job\n2020-05-11 16:27 – 01-07-2017 23:24 – 000000000 ____D C: Users Eric Documents Minecraft Stuff\n2020-05-11 15:47 – 2009-07-14 01:13 – 000781790 _____ C: Windows system32 PerfStringBackup.INI\n2020-05-11 15:47 – 2009-07-13 23:20 – 000000000 ____D C: Windows inf\n2020-05-11 14:49 – 2009-07-14 00:45 – 000022064 ____H C: Windows system32 7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0\n2020-05-11 14:49 – 2009-07-14 00:45 – 000022064 ____H C: Windows system32 7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0\n2020-05-11 14:24 – 2017-07-14 20:56 – 000000000 ____D C: Program Files (x86) Steam\n2020-05-11 14:23 – 2009-07-14 01:08 – 000000006 ____H C: Windows Tasks SA.DAT\n2020-05-11 14:00 – 2017-07-03 17:22 – 000000000 ____D C: Users Eric AppData Roaming .minecraft\n2020-05-10 16:05 – 2017-06-27 17:19 – 000000000 ____D C: Users Eric AppData LocalLow Mozilla\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002224 _____ C: ProgramData Microsoft Windows Menu Démarrer Programmes Google Chrome.lnk\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002183 _____ C: Users Public Desktop Google Chrome.lnk\n2020-05-07 22:48 – 2017-07-13 01:26 – 000002183 _____ C: ProgramData Desktop Google Chrome.lnk\n2020-05-07 17:30 – 2017-06-27 17:46 – 000003180 _____ C: Windows system32 Tasks HPCeeScheduleForEric\n2020-05-07 17:30 – 2017-06-27 17:46 – 000000328 _____ C: Windows Tasks HPCeeScheduleForEric.job\n2020-05-05 13:24 – 2018-08-17 16:24 – 000000000 ____D C: Users Eric Documents SNHU stuff\n2020-04-30 23:16 – 01-07-2017 20:48 – 000000000 ____D C: Users Eric Documents Only_Poetry\n2020-04-28 03:16 – 2019-05-01 00:39 – 000000000 ____D C: Users Eric Documents Alpha\n2020-04-26 12:07 – 2017-06-27 17:18 – 000000000 ____D C: Program Files (x86) Mozilla Maintenance Service\n2020-04-23 13:06 – 2019-12-20 17:18 – 000000000 ____D C: Users Eric Documents Terrariastuff\n2020-04-19 10:54 – 2017-11-10 17:53 – 000000000 ____D C: Users Eric AppData Local Adobe\n2020-04-19 10:53 – 2017-11-10 17:54 – 000842296 _____ (Adobe) C: Windows SysWOW64 FlashPlayerApp.exe\n2020-04-19 10:53 – 2017-11-10 17:54 – 000175160 _____ (Adobe) C: Windows SysWOW64 FlashPlayerCPLApp.cpl\n2020-04-19 10:53 – 2017-11-10 17:54 – 000004470 _____ C: Windows system32 Tasks Adobe Flash Player PPAPI Notifier\n2020-04-19 10:53 – 2017-11-10 17:54 – 000004324 _____ C: Windows system32 Tasks Adobe Flash Player Updater\n2020-04-19 10:53 – 2017-11-10 17:54 – 000000000 ____D C: Windows SysWOW64 Macromed\n2020-04-19 10:53 – 2017-11-10 17:54 – 000000000 ____D C: Windows system32 Macromed\n2020-04-17 20:18 – 2019-07-03 13:14 – 000153312 _____ (Malwarebytes) C: Windows system32 Drivers mbae64.sys\n2020-04-15 18:20 – 2019-08-05 23:17 – 000000000 ____D C: Users Eric AppData Roaming Kast\n2020-04-15 15:46 – 2019-08-05 23:17 – 000002241 _____ C: Users Eric Desktop Kast.lnk\n2020-04-15 15:46 – 2017-06-27 15:46 – 000000000 ____D C: Users Eric\n2020-04-14 16:53 – 2017-07-03 01:01 – 000000000 ____D C: ProgramData Microsoft Windows Start Menu Programs Java\n2020-04-14 16:53 – 2017-07-03 01:00 – 000000000 ____D C: Program Files Java\n2020-04-14 16:52 – 2017-07-03 01:01 – 000129192 _____ (Oracle Corporation) C: Windows system32 WindowsAccessBridge-64.dll"},{"id":"text-33","heading":"Text","content":"==================== Fichiers à la racine de certains répertoires ========"},{"id":"text-34","heading":"Text","content":"2020-05-09 17:34 – 2020-05-09 17:34 – 000286604 _____ () C: Users Eric AppData Roaming tb7_1N1I1F1S1T1I0M1F1Q2Y1I1P1B0C1F1Q1P.txt\n2018-05-10 22:22 – 2018-05-10 22:22 – 000013312 _____ () C: Users Eric AppData Local DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini\n2017-07-02 00:41 – 2017-07-02 00:41 – 000007597 _____ () C: Users Eric AppData Local Resmon.ResmonCfg"},{"id":"text-35","heading":"Text","content":"==================== SigCheck ============================"},{"id":"text-36","heading":"Text","content":"(Il n'y a pas de correctif automatique pour les fichiers qui ne passent pas la vérification.)"},{"id":"text-37","heading":"Text","content":"LastRegBack: 2020-05-07 03:27\n==================== Fin de FRST.txt =========================\nRésultat d'analyse supplémentaire de Farbar Recovery Scan Tool (x64) Version: 11-05-2020\nRan par Eric (11-05-2020 16:52:06)\nExécution à partir de C: Users Eric Downloads\nWindows 7 Home Premium Service Pack 1 (X64) (2017-06-27 19:46:56)\nMode de démarrage: Normal\n================================================== ========"},{"id":"text-38","heading":"Text","content":"==================== Comptes: ============================ ="},{"id":"text-39","heading":"Text","content":"Administrateur (S-1-5-21-3312487288-1977858865-3294966506-500 – Administrateur – désactivé)\nEric (S-1-5-21-3312487288-1977858865-3294966506-1000 – Administrateur – Activé) => C: Users Eric\nInvité (S-1-5-21-3312487288-1977858865-3294966506-501 – limité – désactivé)\nGroupe résidentielUtilisateur $ (S-1-5-21-3312487288-1977858865-3294966506-1002 – limité – activé)"},{"id":"text-40","heading":"Text","content":"==================== Security Center ========================"},{"id":"text-41","heading":"Text","content":"(Si une entrée est incluse dans la liste de correctifs, elle sera supprimée.)"},{"id":"text-42","heading":"Text","content":"AV: Microsoft Security Essentials (activé – à jour) 71A27EC9-3DA6-45FC-60A7-004F623C6189\nAS: Microsoft Security Essentials (activé – à jour) CAC39F2D-1B9C-4A72-5A17-3B3D19BB2B34\nAS: Windows Defender (désactivé – à jour) D68DDC3A-831F-4fae-9E44-DA132C1ACF46"},{"id":"text-43","heading":"Text","content":"==================== Programmes installés ======================"},{"id":"text-44","heading":"Text","content":"(Seuls les programmes publicitaires avec le drapeau "Caché" peuvent être ajoutés à la liste de correctifs pour les afficher. Les programmes publicitaires doivent être désinstallés manuellement.)"},{"id":"text-45","heading":"Text","content":"Adobe Flash Player 32 PPAPI (HKLM-x32 … Adobe Flash Player PPAPI) (Version: 32.0.0.363 – Adobe)\nGestionnaire d'installation ATI Catalyst (HKLM … BCC01139-903A-6FC7-3358-85B0AE332601) (Version: 3.0.829.0 – ATI Technologies, Inc.)\nDiscord (HKU S-1-5-21-3312487288-1977858865-3294966506-1000 … Discord) (Version: 0.0.306 – Discord Inc.)\nEPSON Connect version 1.0 (HKLM-x32 … EPSON Connect_is1) (Version: 1.0 – Epson America Inc.)\nParticipation à la recherche client Epson (HKLM … B26449A6-6007-4460-B4FE-C4776115BCEA) (Version: 1.82.0000 – Seiko Epson Corporation)\nEpson Event Manager (HKLM-x32 … 9F205E94-9E42-4486-A92A-DF3F6CB85444) (Version: 3.10.0061 – Seiko Epson Corporation)\nUtilitaire Epson FAX (HKLM-x32 … 0CBE6C93-CB2E-4378-91EE-12BE6D4E2E4A) (Version: 3.02.00 – Seiko Epson Corporation)\nPilote Epson PC-FAX (Pilote HKLM-x32 … EPSON PC-FAX 2) (Version: – Seiko Epson Corporation)\nEPSON Scan (HKLM-x32 … EPSON Scanner) (Version: – Seiko Epson Corporation)\nProgramme de mise à jour du logiciel Epson (HKLM-x32 … 0854CD22-DF5E-4587-B977-6FC9DB57B63D) (Version: 4.5.0 – Seiko Epson Corporation)\nDésinstallation de l'imprimante EPSON WF-3640 Series (HKLM … EPSON WF-3640 Series) (Version: – SEIKO EPSON Corporation)\nEpsonNet Print (HKLM-x32 … 3E31400D-274E-4647-916C-2CACC3741799) (Version: 2.6.0 – SEIKO EPSON CORPORATION)\nGoogle Chrome (HKLM-x32 … Google Chrome) (Version: 81.0.4044.138 – Google LLC)\nAide à la mise à jour Google (HKLM-x32 … 60EC980A-BDA2-4CB6-A427-B07A5498B4CA) (Version: 1.3.35.451 – Google LLC) Masqué\nAssistant de support HP (HKLM-x32 … 05F81C27-62A5-4A0C-8519-60CB66CF87C6) (Version: 8.8.24.33 – HP Inc.)\nHP Support Solutions Framework (HKLM-x32…183BD477-774B-4700-B40B-EE43886E74D2) (Version: 12.15.14.3 – HP Inc.)\nHP Touchpoint Analytics Client (HKLM…E5FB98E0-0784-44F0-8CEC-95CD4690C43F) (Version: 4.0.2.1439 – HP Inc.)\nJava 8 Update 251 (64-bit) (HKLM…26A24AE4-039D-4CA4-87B4-2F64180251F0) (Version: 8.0.2510.8 – Oracle Corporation)\nKast 2.8.1 (HKUS-1-5-21-3312487288-1977858865-3294966506-1000…d06bcc57-f338-548b-9321-2ecf1ddd47ff) (Version: 2.8.1 – Evasyst, Inc.)\nMalwarebytes version 4.1.0.56 (HKLM…35065F43-4BB2-439A-BFF7-0F1014F2E0CD_is1) (Version: 4.1.0.56 – Malwarebytes)\nMicrosoft .NET Framework 4.8 (HKLM…92FB6C44-E685-45AD-9B20-CADF4CABA132 – 1033) (Version: 4.8.03761 – Microsoft Corporation)\nMicrosoft Office 2007 Service Pack 3 (SP3) (HKLM-x32…91120000-00CA-0000-0000-0000000FF1CE_SMALLBUSINESSR_6E107EB7-8B55-48BF-ACCB-199F86A2CD93) (Version: – Microsoft)\nMicrosoft Office Small Business 2007 (HKLM-x32…SMALLBUSINESSR) (Version: 12.0.6612.1000 – Microsoft Corporation)\nMicrosoft Security Essentials (HKLM…Microsoft Security Client) (Version: 4.10.209.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…71c9b48-7c32-4621-a0ac-3f809523288f) (Version: 8.0.56336 – Microsoft Corporation)\nMicrosoft Visual C++ 2005 Redistributable (x64) (HKLM…ad8a2fa1-06e7-4b0d-927d-6e54b3d31028) (Version: 8.0.61000 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x64 Redistributable – 10.0.40219 (HKLM…1D8E6291-B0D5-35EC-8441-6616F567A0F7) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2010 x86 Redistributable – 10.0.40219 (HKLM-x32…F0C3E5D1-1ADE-321E-8167-68EF0DE699A5) (Version: 10.0.40219 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x64) – 12.0.30501 (HKLM-x32…50d4fc8-5d48-4b8f-8972-47c82c46020f) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2013 Redistributable (x86) – 12.0.30501 (HKLM-x32…f65db027-aff3-4070-886a-0d87064aabb1) (Version: 12.0.30501.0 – Microsoft Corporation)\nMicrosoft Visual C++ 2015 Redistributable (x64) – 14.0.24215 (HKLM-x32…d992c12e-cab2-426f-bde3-fb8c53950b0d) (Version: 14.0.24215.1 – Microsoft Corporation)\nMicrosoft XNA Framework Redistributable 4.0 (HKLM-x32…2BFC7AA0-544C-4E3A-8796-67F3BE655BE9) (Version: 4.0.20823.0 – Microsoft Corporation)\nMinecraft (HKLM-x32…1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872) (Version: 1.0.3.0 – Mojang)\nMozilla Firefox 75.0 (x64 en-US) (HKLM…Mozilla Firefox 75.0 (x64 en-US)) (Version: 75.0 – Mozilla)\nMozilla Maintenance Service (HKLM…MozillaMaintenanceService) (Version: 54.0 – Mozilla)\nRealtek High Definition Audio Driver (HKLM-x32…F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC) (Version: 6.0.1.6196 – Realtek Semiconductor Corp.)\nSpotify (HKUS-1-5-21-3312487288-1977858865-3294966506-1000…Spotify) (Version: 1.0.73.345.g6c9971ef – Spotify AB)\nSteam (HKLM-x32…Steam) (Version: 2.10.91.91 – Valve Corporation)\nTeamSpeak 3 Client (HKLM…TeamSpeak 3 Client) (Version: 3.1.8 – TeamSpeak Systems GmbH)\nUpdate for 2007 Microsoft Office System (KB967642) (HKLM-x32…91120000-00CA-0000-0000-0000000FF1CE_SMALLBUSINESSR_C444285D-5E4F-48A4-91DD-47AAAA68E92D) (Version: – Microsoft)"},{"id":"text-46","heading":"Text","content":"==================== Custom CLSID (Whitelisted): =============="},{"id":"text-47","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-48","heading":"Text","content":"ContextMenuHandlers1: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers2: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers3: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)\nContextMenuHandlers4: [EPP] -> 09A47860-11B0-4DA5-AFA5-26D86198A780 => c:Program FilesMicrosoft Security Clientshellext.dll [2016-11-14] (Microsoft Corporation -> Microsoft Corporation)\nContextMenuHandlers5: [ACE] -> 5E2121EE-0300-11D4-8D3B-444553540000 => C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiacm64.dll [2011-06-30] (Advanced Micro Devices, Inc.) [File not signed]\nContextMenuHandlers6: [MBAMShlExt] -> 57CE581A-0CB6-4266-9CA0-19364C90A0B3 => C:Program FilesMalwarebytesAnti-Malwarembshlext.dll [2019-06-26] (Malwarebytes Corporation -> Malwarebytes)"},{"id":"text-49","heading":"Text","content":"==================== Codecs (Whitelisted) ===================="},{"id":"text-50","heading":"Text","content":"(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)"},{"id":"text-51","heading":"Text","content":"HKLM…Drivers32: [vidc.i420] => C:Windowssystem32lvcod64.dll [176416 2012-01-18] (Logitech, Inc. -> Logitech Inc.)\nHKLM…Drivers32: [vidc.i420] => C:WindowsSysWOW64lvcodec2.dll [307488 2012-01-18] (Logitech, Inc. -> Logitech Inc.)"},{"id":"text-52","heading":"Text","content":"==================== Shortcuts & WMI ========================"},{"id":"text-53","heading":"Text","content":"(The entries could be listed to be restored or removed.)"},{"id":"text-54","heading":"Text","content":"WMI:subscription__FilterToConsumerBinding->CommandLineEventConsumer.Name="BVTConsumer"",Filter="__EventFilter.Name="BVTFilter"::\nWMI:subscription__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA « Win32_Processor » AND TargetInstance.LoadPercentage > 99]\nWMI:subscriptionCommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]"},{"id":"text-55","heading":"Text","content":"==================== Loaded Modules (Whitelisted) ============="},{"id":"text-56","heading":"Text","content":"2011-06-30 00:11 – 2011-06-30 00:11 – 000008704 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Actions.CCAA.Shared.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000006656 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.DPPE.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.GD.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000007168 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.Hotkeys.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.REG.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000042496 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.Source.Kit.Server.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006656 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Plugin.WinMessages.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000034816 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Server.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006144 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticAEM.Server.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000032768 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticATICCCom.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000022016 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCCC.Implementation.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000019968 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Fuel.Runtime.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000010752 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Fuel.Shared.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000011776 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.HydraVision.Runtime.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000008704 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.HydraVision.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000007680 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Client.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000032768 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.Shared.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 001200640 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.Shared.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.Shared.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000037376 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.Shared.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000061440 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000029184 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.Private.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000018432 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Foundation.XManifest.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000006144 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.dll\n2011-06-30 00:13 – 2011-06-30 00:13 – 000012800 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticFuel.Foundation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000021504 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000055296 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Implementation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000020480 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Implementation.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000024576 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticLOG.Foundation.Private.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000005632 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000095744 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticMOM.Implementation.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000015360 _____ ( (Advanced Micro Devices Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticNEWAEM.Foundation.dll\n2011-04-21 16:40 – 2011-04-21 16:40 – 000080896 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticADL.Foundation.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000036352 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Client.Shared.Private.dll\n2011-06-30 00:12 – 2011-06-30 00:12 – 000389120 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Dashboard.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000057344 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Component.Runtime.dll\n2009-06-17 05:27 – 2009-06-17 05:27 – 000016384 _____ ( (Advanced Micro Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.I0709.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000290816 _____ ( (Advanced Mirco Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Graphics.Runtime.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000167936 _____ ( (Advanced Mirco Devices, Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticCLI.Caste.Graphics.Shared.dll\n2010-03-04 00:27 – 2010-03-04 00:27 – 000016384 _____ ( (ATI Technologies Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Foundation.dll\n2009-04-22 12:13 – 2009-04-22 12:13 – 000045056 _____ ( (ATI Technologies Inc.) [File not signed]) [File is in use ] C:Program Files (x86)ATI TechnologiesATI.ACECore-StaticDEM.Graphics.I0601.dll\n2011-06-30 00:11 – 2011-06-30 00:11 – 000838144 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiacm64.dll\n2011-06-30 00:10 – 2011-06-30 00:10 – 000004608 _____ (Advanced Micro Devices, Inc.) [File not signed] C:Program Files (x86)ATI TechnologiesATI.ACECore-Staticatiamenu.dll\n2015-12-17 11:11 – 2015-12-17 11:11 – 000132096 _____ (Seiko Epson Corporation) [File not signed] C:Program Files (x86)EPSON SoftwareEvent Managerepnsm.dll\n2009-10-21 17:39 – 2009-10-21 17:39 – 000291328 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareEvent ManagerLcMgr.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000096768 _____ (Seiko Epson Corporation) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityEbpD4Fax.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000212992 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUADRFIL.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXCFG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000446464 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXCSR.DLL\n2017-06-29 17:30 – 2019-10-02 02:00 – 000393216 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXLDB.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000651264 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUFAXTIF.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000421888 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUIMGCDC.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000278528 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFULEPP.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUSTMMSG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000356352 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUSVCCLT.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000065536 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUUSBHLP.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000258048 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityFUVERDLG.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000073728 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUDEVCOM.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000135168 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUDRVUTL.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000339968 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUPRBDEV.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000286720 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryFUSNMPUT.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000086016 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUCMNMSG.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000090112 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXCFGRes.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000241664 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXRCV.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000110592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUFAXSTM.dll\n2017-06-29 17:30 – 2019-10-01 12:00 – 000077824 _____ (SEIKO EPSON CORPORATION) [File not signed] C:Program Files (x86)Epson SoftwareFAX UtilityResourceFUPRBDEVRes.dll\n2017-06-29 17:28 – 2012-11-12 15:15 – 000558592 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enppmon.dll\n2017-06-29 17:28 – 2012-10-22 17:19 – 000219648 _____ (SEIKO EPSON CORPORATION) [File not signed] C:WindowsSystem32enpres.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000786432 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENCM.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000278528 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENNW.dll\n2017-06-29 17:30 – 2019-10-02 02:00 – 000299008 _____ (SEIKO EPSON) [File not signed] C:Program Files (x86)EPSON SoftwareFAX UtilityLibraryENUTIL.dll"},{"id":"text-57","heading":"Text","content":"==================== Alternate Data Streams (Whitelisted) ========"},{"id":"text-58","heading":"Text","content":"==================== Safe Mode (Whitelisted) =================="},{"id":"text-59","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)"},{"id":"text-60","heading":"Text","content":"HKLMSYSTEMCurrentControlSetControlSafeBootMinimalMBAMService => ""="Service"\nHKLMSYSTEMCurrentControlSetControlSafeBootNetworkMBAMService => ""="Service""},{"id":"text-61","heading":"Text","content":"==================== Association (Whitelisted) ================="},{"id":"text-62","heading":"Text","content":"==================== Internet Explorer trusted/restricted =========="},{"id":"text-63","heading":"Text","content":"==================== Hosts content: ========================="},{"id":"text-64","heading":"Text","content":"(If needed Hosts: directive could be included in the fixlist to reset Hosts.)"},{"id":"text-65","heading":"Text","content":"2009-07-13 22:34 – 2009-06-10 17:00 – 000000824 _____ C:Windowssystem32driversetchosts"},{"id":"text-66","heading":"Text","content":"==================== Other Areas ==========================="},{"id":"text-67","heading":"Text","content":"(Currently there is no automatic fix for this section.)"},{"id":"text-68","heading":"Text","content":"HKLMSystemCurrentControlSetControlSession ManagerEnvironment\\Path -> C:Program Files (x86)Common FilesOracleJavajavapath;C:ProgramDataOracleJavajavapath;C:Program Files (x86)AMD APPbinx86_64;C:Program Files (x86)AMD APPbinx86;%SystemRoot%system32;%SystemRoot%;%SystemRoot%System32Wbem;%SYSTEMROOT%System32WindowsPowerShellv1.0;C:Program Files (x86)ATI TechnologiesATI.ACECore-Static\nHKUS-1-5-21-3312487288-1977858865-3294966506-1000Control PanelDesktop\\Wallpaper -> C:UsersEricAppDataRoamingMicrosoftWindowsThemesTranscodedWallpaper.jpg\nDNS Servers: 75.75.75.75 – 75.75.76.76\nHKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)\nWindows Firewall is enabled."},{"id":"text-69","heading":"Text","content":"==================== MSCONFIG/TASK MANAGER disabled items =="},{"id":"text-70","heading":"Text","content":"==================== FirewallRules (Whitelisted) ================"},{"id":"text-71","heading":"Text","content":"(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)"},{"id":"text-72","heading":"Text","content":"FirewallRules: [F57271F5-6E64-436A-9DDC-1FF5D62B7837] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [49D6E689-0BDF-48E1-818B-2F54A29E3B2A] => (Allow) C:Program Files (x86)Mozilla Firefoxfirefox.exe (Mozilla Corporation -> Mozilla Corporation)\nFirewallRules: [FE195C8D-83B5-42E2-AF39-5F598CD92633] => (Allow) C:Program Files (x86)EPSON SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [29E16CF8-9496-41FD-9C7C-ECBAF04E4E97] => (Allow) C:Program Files (x86)EPSON SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [39ADE3BA-F527-449C-B24A-C5782E2ABC18] => (Allow) D:CommonEpsonNet SetupENEasyApp.exe => No File\nFirewallRules: [F6F02359-46C4-4B1A-966E-B575B74DD9A1] => (Allow) D:CommonEpsonNet SetupENEasyApp.exe => No File\nFirewallRules: [TCP Query User4FCC4BC2-9B40-405B-9401-8B70B264A30FC:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [UDP Query User5C116C42-738E-4F1F-97E2-9F9EF69B82A2C:program files (x86)epson softwareevent managereeventmanager.exe] => (Allow) C:program files (x86)epson softwareevent managereeventmanager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [TCP Query UserA2B1163D-D654-4B40-9CE1-747167BE26BCC:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [UDP Query UserA2AECB7A-B8A9-49AB-8F5B-E4F7614D82C4C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [TCP Query UserFCDFE73D-B269-4BC4-A5E7-E04E5986E16CC:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [UDP Query User51A1D336-FE9F-4D3F-8968-7422D7B46788C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_25binjavaw.exe => No File\nFirewallRules: [4B878145-E326-4BB4-8C0D-CA84E51037B6] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [769B53A1-A41B-4A27-994A-FF3E06A53A02] => (Allow) C:Program Files (x86)Epson SoftwareEvent ManagerEEventManager.exe (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)\nFirewallRules: [69150D6F-229A-4316-A4AA-F827CBF1A778] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [5E3442AC-8A2D-4D64-BE64-F632D50A9B8F] => (Allow) C:Program Files (x86)SteamSteam.exe (Valve -> Valve Corporation)\nFirewallRules: [9FE2765C-353A-47FD-85B9-88414F80EE03] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe => No File\nFirewallRules: [C9ED5E2F-4D67-4E2C-93A0-E60F0133CFD2] => (Allow) C:Program Files (x86)Steambincefcef.win7steamwebhelper.exe => No File\nFirewallRules: [E78BE10C-0EF8-4B3D-B41E-ADC1A3CEBBC3] => (Allow) C:Program Files (x86)SteamsteamappscommonGeometry DashGeometryDash.exe () [File not signed]\nFirewallRules: [41FE16CA-6A29-47D8-99D3-E2CC8DF81237] => (Allow) C:Program Files (x86)SteamsteamappscommonGeometry DashGeometryDash.exe () [File not signed]\nFirewallRules: [32621084-BD70-4C53-B810-C01B99ABC2DA] => (Allow) C:Program Files (x86)SteamsteamappscommonWest of LoathingWest of Loathing.exe () [File not signed]\nFirewallRules: [246178CD-BD55-4B45-BAE1-12E74E9CA9AD] => (Allow) C:Program Files (x86)SteamsteamappscommonWest of LoathingWest of Loathing.exe () [File not signed]\nFirewallRules: [TCP Query User2F69BA55-0E9F-49D3-8296-1CCB7E779B1FC:usersericappdataroamingspotifyspotify.exe] => (Allow) C:usersericappdataroamingspotifyspotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [UDP Query User63543BFA-6B88-4A03-A69B-65DFA415F221C:usersericappdataroamingspotifyspotify.exe] => (Allow) C:usersericappdataroamingspotifyspotify.exe (Spotify AB -> Spotify Ltd)\nFirewallRules: [TCP Query User7EF26635-5C62-4D8A-BF71-18D13738EC92C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe] => (Allow) C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe (Jordan Porter) [File not signed]\nFirewallRules: [UDP Query UserB9DCBC24-8805-4579-8C7E-ADF06868B329C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe] => (Allow) C:usersericdownloadsjopebotjopebot-win32-ia32jopebot.exe (Jordan Porter) [File not signed]\nFirewallRules: [TCP Query User6184C7D4-253D-45D6-95E2-25670EDFCF65C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [UDP Query UserEB73724F-7745-4C12-9AE5-F3DEA4C3627DC:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [TCP Query UserBDDC416C-16FC-4803-8A86-7098F8BE3226C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [UDP Query User06183A7D-EDF3-4A19-95EC-F8CB628AF23BC:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x641.8.0_51binjavaw.exe => No File\nFirewallRules: [38C40A30-96BF-46EC-85F5-D6B0E3996EA6] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [D4C2638C-0C27-4E87-859A-FD1C639479C2] => (Allow) C:Program Files (x86)Steambincefcef.win7x64steamwebhelper.exe (Valve -> Valve Corporation)\nFirewallRules: [TCP Query UserE9422BD8-33CD-4868-8A57-4D2534347969C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [UDP Query User07C2669F-7151-441B-AC24-9D57950AE354C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [TCP Query UserF72684D1-4122-437B-9805-63B41E6E68E4C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [UDP Query User2F253E3A-0ADB-4681-9504-497A3B6BF3F4C:program files (x86)minecraftruntimejre-x64binjavaw.exe] => (Allow) C:program files (x86)minecraftruntimejre-x64binjavaw.exe\nFirewallRules: [F68A9AB6-6C74-43B8-814D-142BB99E1DA9] => (Allow) C:Program Files (x86)SteamsteamappscommonRagnarok Online 2WPLauncher.exe (Gravity Interactive, Inc.) [File not signed]\nFirewallRules: [EE5A948A-5D85-4ADB-9A1B-9355DB322BB6] => (Allow) C:Program Files (x86)SteamsteamappscommonRagnarok Online 2WPLauncher.exe (Gravity Interactive, Inc.) [File not signed]\nFirewallRules: [BB78E8F5-1560-4976-96F9-053776B5FD7B] => (Allow) C:Program Files (x86)SteamsteamappscommonTerrariaTerraria.exe (Re-Logic) [File not signed]\nFirewallRules: [BDA02D4E-7231-443B-B420-40733950A471] => (Allow) C:Program Files (x86)SteamsteamappscommonTerrariaTerraria.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query UserE0E55BA4-EA34-4918-AED8-C5513561FA77C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe (Re-Logic) [File not signed]\nFirewallRules: [UDP Query User58082C5F-E51E-49E0-ACE1-364B5D4EE47BC:program files (x86)steamsteamappscommonterrariaterrariaserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariaterrariaserver.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query User31788A46-8458-40FF-8678-93F0B7191B99C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe (Re-Logic) [File not signed]\nFirewallRules: [UDP Query User481E77C6-534E-4C84-93E6-369AB4D11C92C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe] => (Allow) C:program files (x86)steamsteamappscommonterrariatmodloaderserver.exe (Re-Logic) [File not signed]\nFirewallRules: [TCP Query UserB2F7E2BD-9E20-4716-A211-2CB1E2ECC08BC:usersericappdatalocalprogramskast-appkast.exe] => (Allow) C:usersericappdatalocalprogramskast-appkast.exe (Evasyst, Inc. -> Evasyst, Inc.)\nFirewallRules: [UDP Query UserA3573CDC-11EC-4784-890A-10E8A58EC0E7C:usersericappdatalocalprogramskast-appkast.exe] => (Allow) C:usersericappdatalocalprogramskast-appkast.exe (Evasyst, Inc. -> Evasyst, Inc.)\nFirewallRules: [104EACAA-A09F-46DD-B076-84A5694EA313] => (Allow) C:Program Files (x86)GoogleChromeApplicationchrome.exe (Google LLC -> Google LLC)"},{"id":"text-73","heading":"Text","content":"==================== Restore Points ========================="},{"id":"text-74","heading":"Text","content":"24-04-2020 11:55:53 Windows Update\n27-04-2020 13:05:12 Windows Update\n01-05-2020 11:42:29 Windows Update\n05-05-2020 11:14:16 Windows Update\n08-05-2020 11:22:48 Windows Update\n11-05-2020 11:39:21 Windows Update"},{"id":"text-75","heading":"Text","content":"==================== Faulty Device Manager Devices ============"},{"id":"text-76","heading":"Text","content":"Name: Teredo Tunneling Pseudo-Interface\nDescription: Microsoft Teredo Tunneling Adapter\nClass Guid: 4d36e972-e325-11ce-bfc1-08002be10318\nManufacturer: Microsoft\nService: tunnel\nProblem: : This device cannot start. (Code10)\nResolution: Device failed to start. Click "Update Driver" to update the drivers for this device.\nOn the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard."},{"id":"text-77","heading":"Text","content":"==================== Event log errors: ========================"},{"id":"text-78","heading":"Text","content":"Application errors:\n==================\nError: (05/11/2020 02:40:29 PM) (Source: Application Error) (EventID: 1000) (User: )\nDescription: Faulting application name: Explorer.EXE, version: 6.1.7601.23537, time stamp: 0x57c44efe\nFaulting module name: ntdll.dll, version: 6.1.7601.24545, time stamp: 0x5e0eb67f\nException code: 0xc0000005\nFault offset: 0x000000000001c52c\nFaulting process id: 0x66c\nFaulting application start time: 0x01d627c153cc1806\nFaulting application path: C:WindowsExplorer.EXE\nFaulting module path: C:WindowsSYSTEM32ntdll.dll\nReport Id: e2cc09a8-93b6-11ea-bb3d-78acc0bd2160"},{"id":"text-79","heading":"Text","content":"Error: (05/11/2020 02:25:45 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected."},{"id":"text-80","heading":"Text","content":"Error: (05/11/2020 02:23:56 PM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis."},{"id":"text-81","heading":"Text","content":"Error: (05/11/2020 11:36:00 AM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected."},{"id":"text-82","heading":"Text","content":"Error: (05/11/2020 11:34:12 AM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis."},{"id":"text-83","heading":"Text","content":"Error: (05/11/2020 02:58:17 AM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis."},{"id":"text-84","heading":"Text","content":"Error: (05/10/2020 08:56:02 PM) (Source: WinMgmt) (EventID: 10) (User: )\nDescription: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected."},{"id":"text-85","heading":"Text","content":"Error: (05/10/2020 08:54:14 PM) (Source: SideBySide) (EventID: 33) (User: )\nDescription: Activation context generation failed for "C:Program Files (x86)Epson SoftwareFAX UtilityResourceFULEPPRes.dll".\nDependent Assembly Microsoft.VC80.CRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.\nPlease use sxstrace.exe for detailed diagnosis."},{"id":"text-86","heading":"Text","content":"System errors:\n=============\nError: (05/06/2020 05:39:15 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80."},{"id":"text-87","heading":"Text","content":"Error: (05/06/2020 05:39:14 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80."},{"id":"text-88","heading":"Text","content":"Error: (05/06/2020 05:39:14 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 70."},{"id":"text-89","heading":"Text","content":"Error: (05/03/2020 07:24:44 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80."},{"id":"text-90","heading":"Text","content":"Error: (05/03/2020 07:24:44 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 70."},{"id":"text-91","heading":"Text","content":"Error: (04/29/2020 11:24:12 PM) (Source: Service Control Manager) (EventID: 7000) (User: )\nDescription: The Steam Client Service service failed to start due to the following error: \nThe service did not respond to the start or control request in a timely fashion."},{"id":"text-92","heading":"Text","content":"Error: (04/29/2020 11:24:12 PM) (Source: Service Control Manager) (EventID: 7009) (User: )\nDescription: A timeout was reached (30000 milliseconds) while waiting for the Steam Client Service service to connect."},{"id":"text-93","heading":"Text","content":"Error: (04/29/2020 05:15:35 PM) (Source: Schannel) (EventID: 4119) (User: NT AUTHORITY)\nDescription: The following fatal alert was received: 80."},{"id":"text-94","heading":"Text","content":"==================== Memory info ==========================="},{"id":"text-95","heading":"Text","content":"BIOS: American Megatrends Inc. 6.06 03/22/2011\nMotherboard: FOXCONN 2AB1\nProcessor: AMD Athlon™ II X4 640 Processor\nPercentage of memory in use: 70%\nTotal physical RAM: 6143.29 MB\nAvailable physical RAM: 1784.56 MB\nTotal Virtual: 12284.71 MB\nAvailable Virtual: 7686.77 MB"},{"id":"text-96","heading":"Text","content":"==================== Drives ================================"},{"id":"text-97","heading":"Text","content":"Drive c: () (Fixed) (Total:238.37 GB) (Free:121.61 GB) NTFS"},{"id":"text-98","heading":"Text","content":"\\?Volume85b2accc-5b89-11e7-beef-806e6f6e6963 (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS"},{"id":"text-99","heading":"Text","content":"==================== MBR & Partition Table ===================="},{"id":"text-100","heading":"Text","content":"==========================================================\nDisk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: EB977B7E)\nPartition 1: (Active) – (Size=100 MB) – (Type=07 NTFS)\nPartition 2: (Not Active) – (Size=238.4 GB) – (Type=07 NTFS)"},{"id":"text-101","heading":"Text","content":"==================== End of Addition.txt ======================="},{"id":"text-102","heading":"Text","content":"Click to rate this post!\n \n [Total: 0 Average: 0]"}],"media":{"primary_image":"https://tutos-gameserver.fr/wp-content/uploads/2020/03/1585419619_meta_image.png"},"relations":[{"rel":"canonical","href":"https://tutos-gameserver.fr/2020/05/20/adware-et-cles-de-registre-jouant-avec-les-navigateurs-web-resoudre-les-problemes-dun-serveur-minecraft/"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/05/20/adware-et-cles-de-registre-jouant-avec-les-navigateurs-web-resoudre-les-problemes-dun-serveur-minecraft/llm","type":"text/html"},{"rel":"alternate","href":"https://tutos-gameserver.fr/2020/05/20/adware-et-cles-de-registre-jouant-avec-les-navigateurs-web-resoudre-les-problemes-dun-serveur-minecraft/llm.json","type":"application/json"},{"rel":"llm-manifest","href":"https://tutos-gameserver.fr/llm-endpoints-manifest.json","type":"application/json"}],"http_headers":{"X-LLM-Friendly":"1","X-LLM-Schema":"1.1.0","Content-Security-Policy":"default-src 'none'; img-src * data:; style-src 'unsafe-inline'"},"license":"CC BY-ND 4.0","attribution_required":true,"allow_cors":false}