Additional scan result of Farbar Recovery Scan Tool (x64) Version: 10-09-2014
Ran by arthu_000 at 2014-09-11 08:26:45
Running from C:\Users\arthu_000\Desktop
Boot Mode: Normal
==========================================================
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
Adobe Flash Player 15 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 15.0.0.152 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.08) - Français (HKLM-x32\...\{AC76BA86-7AD7-1036-7B44-AB0000000001}) (Version: 11.0.08 - Adobe Systems Incorporated)
avast! Free Antivirus (HKLM-x32\...\Avast) (Version: 9.0.2021 - AVAST Software)
Blender (HKLM\...\Blender) (Version: 2.70a - Blender Foundation)
Boxore Client (HKLM-x32\...\{903CFFD8-85BF-4A51-8A6D-4BBBCA346A6E}) (Version: 4.7.0.0 - Boxore OU) <==== ATTENTION
CamStudio 2.7.2 (HKLM\...\{04B83666-3A62-452B-85D3-70F8117F2329}_is1) (Version: 2.7.2 - CamStudio Open Source)
CCleaner (HKLM\...\CCleaner) (Version: 4.10 - Piriform)
CINEMA 4D 12.016 (HKLM\...\MAXON8C02D5E0) (Version: 12.016 - MAXON Computer GmbH)
FreeStyler (HKLM-x32\...\FreeStyler_is1) (Version: - Raphaël Wellekens)
GEGraph (HKLM-x32\...\ST6UNST #1) (Version: - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 37.0.2062.103 - Google Inc.)
Google Drive (HKLM-x32\...\{C6640705-7479-4EE5-BC86-879F05F65E74}) (Version: 1.17.7290.4094 - Google, Inc.)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Java 7 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.510 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
KMSpico v9.1.3 (HKLM\...\KMSpico_is1) (Version: 9.1.3 - )
Livre-Photo.com 5.2 (HKLM-x32\...\Livre-photo.com ServicePhot_is1) (Version: - )
Microsoft Access MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Access Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft DCF MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Excel MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Groove MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft InfoPath MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Lync MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office OSM UX MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Professional Plus 2013 (HKLM\...\Office15.PROPLUS) (Version: 15.0.4420.1017 - Microsoft Corporation)
Microsoft Office Professional Plus 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Español (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Office Shared Setup Metadata MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft OneNote MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Outlook MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft PowerPoint MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Publisher MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Word MUI (English) 2013 (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
Minecraft Beta Cracked (HKLM-x32\...\Minecraft Beta Cracked) (Version: - )
Minecraft Cracked (HKLM-x32\...\Minecraft Cracked) (Version: - )
Minecraft1.7.2 (HKLM-x32\...\Minecraft1.7.2) (Version: - )
Outils de vérification linguistique 2013 de Microsoft Office - Français (Version: 15.0.4420.1017 - Microsoft Corporation) Hidden
PDFCreator (HKLM-x32\...\{0001B4FD-9EA3-4D90-A79E-FD14BA3AB01D}) (Version: 1.3.2 - Frank Heindörfer, Philip Chinery)
PhotoFiltre 7 (HKCU\...\PhotoFiltre 7) (Version: - )
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
PlagueInc 1.0 (HKLM-x32\...\PlagueInc 1.0) (Version: 1.0 - Cat-A-Cat)
RocketTab (HKLM-x32\...\RocketTab) (Version: - RocketTab)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.)
Standalone 8 Clock 1.00 (HKLM-x32\...\Standalone 8 Clock 1.00) (Version: - )
Stargate-Network (HKLM-x32\...\{6F8D5425-706B-49E8-8CAD-6F7536BF4CBD}) (Version: 1.0.41 - SGN-Team)
Unity Web Player (HKCU\...\UnityWebPlayer) (Version: - Unity Technologies ApS)
Virtual DJ - Atomix Productions (HKLM-x32\...\Virtual DJ - Atomix Productions) (Version: - )
Virtual DJ Pro Full - Atomix Productions (HKLM-x32\...\Virtual DJ Pro Full - Atomix Productions) (Version: - )
VLC media player 2.1.3 (HKLM-x32\...\VLC media player) (Version: 2.1.3 - VideoLAN)
Vuze (HKLM\...\8461-7759-5462-8226) (Version: 5.4.0.0 - Azureus Software, Inc.)
WinRAR 5.01 (32-bit) (HKLM-x32\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
Zoo Tycoon 2 - Marine Mania (HKLM-x32\...\InstallShield_{B406605B-45FE-4D8F-8250-1E77479583AE}) (Version: 1.00.0000 - Microsoft Game Studios)
Zoo Tycoon 2 - Marine Mania (x32 Version: 1.00.0000 - Microsoft Game Studios) Hidden
==================== Custom CLSID (selected items): ==========================
(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)
CustomCLSID: HKU\S-1-5-21-2697321722-3528508853-2284157130-1004_Classes\CLSID\{D45F043D-F17F-4e8a-8435-70971D9FA46D}\InprocServer32 -> C:\Program Files\Blender Foundation\Blender\BlendThumb64.dll ()
==================== Restore Points =========================
25-08-2014 18:20:30 Point de contrôle planifié
27-08-2014 11:19:06 DirectX est installé
04-09-2014 09:00:58 Point de contrôle planifié
07-09-2014 11:18:53 Installé Microsoft Visual C++ 2005 Redistributable
10-09-2014 07:29:37 Opération de restauration
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2013-08-22 15:25 - 2014-09-11 08:25 - 00000768 ____A C:\Windows\system32\Drivers\etc\hosts
127.0.0.1 localhost
==================== Scheduled Tasks (whitelisted) =============
(If an entry is included in the fixlist, it will be removed from registry. Any associated file could be listed separately to be moved.)
Task: {05293577-D647-4185-B859-C94839A0B2E3} - System32\Tasks\Microsoft\Windows\SettingSync\NetworkStateChangeTask
Task: {082D7173-48A1-4637-8E62-045B8FFFB25C} - System32\Tasks\RocketTab Update Task => C:\Program Files (x86)\RocketTab\uninstall.exe [2014-09-04] ()
Task: {091AFD2A-C0F3-4EC2-A981-ED5DA63621AA} - System32\Tasks\Microsoft\Windows\DiskFootprint\Diagnostics
Task: {0B545118-B563-42FC-8D07-B78F602FCF34} - System32\Tasks\Microsoft\Windows\WS\WSRefreshBannedAppsListTask => Rundll32.exe WSClient.dll,RefreshBannedAppsList
Task: {1C46D816-DEC7-4F38-97FA-C3379FE8FE39} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe
Task: {2085BF56-520D-4951-B7C0-DF34AF90CC6A} - System32\Tasks\Microsoft\Windows\Sysmain\WsSwapAssessmentTask => Rundll32.exe sysmain.dll,PfSvWsSwapAssessmentTask
Task: {21E40E5A-EC94-4B86-BBC7-AC7A50CD28A4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
Task: {2C9C0C6C-2A74-46F2-858A-4389D253EAD0} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCachePrepopulate
Task: {304CB79E-35D6-4D3C-A79C-ABEFED9E0890} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2012-10-01] (Microsoft Corporation)
Task: {352E6CA0-7314-4DF4-89C4-682368D80D57} - System32\Tasks\Microsoft\Windows\Workplace Join\Automatic-Workplace-Join => C:\Windows\System32\AutoWorkplace.exe [2013-08-22] (Microsoft Corporation)
Task: {381DC5C8-DF05-4160-A34E-0D34B572166F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-19] (Google Inc.)
Task: {3B6D8A73-F20B-4C93-B8FB-56A154F172D2} - System32\Tasks\Microsoft\Windows\Time Zone\SynchronizeTimeZone => C:\Windows\system32\tzsync.exe [2013-08-22] (Microsoft Corporation)
Task: {3C5C7F97-1048-4377-A12A-B6297CC46DB9} - System32\Tasks\RocketTab => C:\Windows\system32\cmd.exe [2013-08-22] (Microsoft Corporation)
Task: {49708654-7B0D-42A7-B1BC-58E4D60BB39D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-02-19] (Google Inc.)
Task: {49754026-21E1-41FC-94FD-727AFE414FE7} - System32\Tasks\Microsoft\Windows\Sysmain\HybridDriveCacheRebalance
Task: {497F8944-18D1-414E-B43D-56D51C9B9FD5} - System32\Tasks\Microsoft\Windows\DiskCleanup\SilentCleanup => C:\Windows\system32\cleanmgr.exe [2014-02-22] (Microsoft Corporation)
Task: {56A27791-B262-4022-B466-64083455D2DC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-09-09] (Adobe Systems Incorporated)
Task: {68E1090A-3436-4E4A-95F6-F41A616265F0} - System32\Tasks\Microsoft\Windows\Shell\FamilySafetyUpload
Task: {69FCAC95-886E-416D-9771-70B12A73A500} - System32\Tasks\Microsoft\Windows\WindowsUpdate\Scheduled Start With Network => Sc.exe start wuauserv
Task: {6AA91E8C-DDBD-4979-8464-4062F7681A19} - System32\Tasks\Microsoft\Windows\Plug and Play\Plug and Play Cleanup
Task: {6CD5792A-6A0E-4E62-893C-2204C80E496E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {6DFCB649-0769-4F83-BB10-F60F235F6D3D} - System32\Tasks\Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task
Task: {72ADA1E2-4B3B-493A-940C-C8A76DA197E4} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2014-08-18] (Microsoft Corporation)
Task: {73B1B253-CE67-4501-AE1A-377DD1D68B65} - System32\Tasks\Microsoft\Windows\Application Experience\StartupAppTask => Rundll32.exe Startupscan.dll,SusRunTask
Task: {77F1D869-6E65-4079-A2A0-E2023408EF97} - System32\Tasks\Microsoft\Windows\ApplicationData\CleanupTemporaryState => Rundll32.exe Windows.Storage.ApplicationData.dll,CleanupTemporaryState
Task: {7E6C53AA-AA4D-4DFF-98DB-F2F430B1AC73} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-01-21] (Piriform Ltd)
Task: {872D0E53-FD2E-41E3-B431-698AF82882CE} - System32\Tasks\Microsoft\Windows\SkyDrive\Routine Maintenance Task
Task: {8CC813C9-712A-41EF-9512-B233444FC669} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup => Rundll32.exe %windir%\system32\AppxDeploymentClient.dll,AppxPreStageCleanupRunTask
Task: {8D47ADFA-888F-4342-99AA-7604A228FFD7} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [2012-10-01] (Microsoft Corporation)
Task: {9FF4C139-5234-410C-B7FA-23EE2FD2AB53} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Maintenance Work
Task: {A28DE9CB-7125-4EA7-8AD7-7244ED6B3721} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Management
Task: {A4ACC9F1-544D-4FE8-AD65-A15EE524D86E} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2014-08-07] (AVAST Software)
Task: {ABFE2A14-D111-48AF-A93F-B5EA0B48EA0E} - System32\Tasks\Microsoft\Windows\WOF\WIM-Hash-Validation
Task: {CFD7C21A-808B-487B-A6EC-8A10E44E8360} - System32\Tasks\Microsoft\Windows\SettingSync\BackupTask
Task: {D10B2F69-91D5-4E93-B15F-79905FD8D591} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe
Task: {D88FEC9E-A82A-46F9-87E2-B6B97B301C1A} - System32\Tasks\Microsoft\Windows\WS\License Validation => Rundll32.exe WSClient.dll,WSpTLR licensing
Task: {DA46820F-FF8A-4B5E-A6B2-B12185DCFFFB} - System32\Tasks\Microsoft\Windows\Work Folders\Work Folders Logon Synchronization
Task: {E6D378FA-E068-4BCB-80DE-56D43A249507} - System32\Tasks\Microsoft\Windows\RecoveryEnvironment\VerifyWinRE
Task: {F9DDB542-9BE4-48A4-AF54-7EC3729C2ECD} - System32\Tasks\RunAsStdUser Task => C:\Program Files (x86)\Sanjeev18\Standalone 8 Clock\Standalone 8 Clock.exe [2011-09-03] ()
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (whitelisted) =============
2012-10-01 21:36 - 2012-10-01 21:36 - 06522480 _____ () C:\Program Files\Microsoft Office\Office15\1033\GrooveIntlResource.dll
2014-09-10 08:11 - 2014-09-10 08:11 - 00183296 _____ () C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\ErrorReporting.dll
2011-09-03 02:51 - 2011-09-03 02:51 - 00616960 _____ () C:\Program Files (x86)\Sanjeev18\Standalone 8 Clock\Standalone 8 Clock.exe
2014-08-07 14:21 - 2014-08-07 14:21 - 00301152 _____ () C:\Program Files\AVAST Software\Avast\aswProperty.dll
2014-09-10 14:10 - 2014-09-10 14:10 - 02847744 _____ () C:\Program Files\AVAST Software\Avast\defs\14091000\algo.dll
2014-09-10 10:28 - 2014-05-13 12:04 - 00109400 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl
2014-09-10 10:28 - 2014-05-13 12:04 - 00167768 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl
2014-09-10 10:28 - 2014-05-13 12:04 - 00416600 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl
2014-09-10 10:28 - 2012-08-23 10:38 - 00574840 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll
2014-09-10 10:28 - 2012-04-03 17:06 - 00565640 _____ () C:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll
2014-08-07 14:21 - 2014-08-07 14:21 - 19329904 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-09-11 08:12 - 2014-09-11 08:12 - 00098816 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32api.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00110080 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\pywintypes27.dll
2014-09-11 08:12 - 2014-09-11 08:12 - 00364544 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\pythoncom27.dll
2014-09-11 08:12 - 2014-09-11 08:12 - 00045568 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\_socket.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 01160704 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\_ssl.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00320512 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32com.shell.shell.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00713216 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\_hashlib.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 01175040 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._core_.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00805888 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._gdi_.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00811008 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._windows_.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 01062400 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._controls_.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00735232 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._misc_.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00128512 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\_elementtree.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00127488 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\pyexpat.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00557056 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\pysqlite2._sqlite.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00007168 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\hashobjs_ext.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00087552 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\_ctypes.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00119808 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32file.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00108544 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32security.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00018432 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32event.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00038912 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32inet.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00070656 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._html2.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00167936 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32gui.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00011264 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32crypt.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00027136 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\_multiprocessing.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00686080 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\unicodedata.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00122368 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._wizard.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00010240 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\select.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00024064 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32pipe.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00025600 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32pdh.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00525640 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\windows._lib_cacheinvalidation.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00035840 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32process.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00017408 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32profile.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00022528 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\win32ts.pyd
2014-09-11 08:12 - 2014-09-11 08:12 - 00078336 _____ () C:\Users\arthu_000\AppData\Local\Temp\_MEI33802\wx._animate.pyd
==================== Alternate Data Streams (whitelisted) =========
(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)
AlternateDataStreams: C:\Users\arthur\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (10).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (11).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (12).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (13).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (14).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (15).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (16).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (17).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (18).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (19).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (2).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (20).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (21).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (3).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (4).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (5).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (6).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (7).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (8).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive (9).old:ms-properties
AlternateDataStreams: C:\Users\arthu_000\SkyDrive.old:ms-properties
==================== Safe Mode (whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (whitelisted) =============
(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)
==================== MSCONFIG/TASK MANAGER disabled items =========
(Currently there is no automatic fix for this section.)
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (09/11/2014 08:12:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Nom de l’application défaillante Service_KMS.exe, version : 11.0.0.0, horodatage : 0x52a8d15d
Nom du module défaillant : unknown, version : 0.0.0.0, horodatage : 0x00000000
Code d’exception : 0x00000000
Décalage d’erreur : 0x00007ff820750565
ID du processus défaillant : 0x5cc
Heure de début de l’application défaillante : 0xService_KMS.exe0
Chemin d’accès de l’application défaillante : Service_KMS.exe1
Chemin d’accès du module défaillant: Service_KMS.exe2
ID de rapport : Service_KMS.exe3
Nom complet du package défaillant : Service_KMS.exe4
ID de l’application relative au package défaillant : Service_KMS.exe5
Error: (09/10/2014 11:05:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme LiveComm.exe version 17.5.9600.20605 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : bdc
Heure de début : 01cfcccf310633c9
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe
ID de rapport : 6d72d0c1-38c7-11e4-82b7-b4e245c3b054
Nom complet du package défaillant : microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe
ID de l’application relative au package défaillant : ppleae38af2e007f4358a809ac99a64a67c1
Error: (09/10/2014 10:32:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Le programme SDScan.exe version 2.4.40.181 a cessé d’interagir avec Windows et a été fermé. Pour déterminer si des informations supplémentaires sont disponibles, consultez l’historique du problème dans le Centre de maintenance.
ID de processus : 1614
Heure de début : 01cfccd15e7a9876
Heure de fin : 4294967295
Chemin d’accès de l’application : C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
ID de rapport : 077bd917-38c5-11e4-82b7-b4e245c3b054
Nom complet du package défaillant :
ID de l’application relative au package défaillant :
Error: (09/10/2014 10:14:11 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Une erreur non spécifiée s’est produite au cours de la restauration du système : (Point de contrôle planifié). Informations supplémentaires : 0x80070005.
Error: (09/10/2014 09:23:27 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Une erreur non spécifiée s’est produite au cours de la restauration du système : (Point de contrôle planifié). Informations supplémentaires : 0x80070005.
Error: (09/10/2014 08:31:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (09/10/2014 08:31:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (09/10/2014 08:29:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (09/10/2014 08:29:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
Error: (09/09/2014 09:23:26 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: La création du contexte d’activation a échoué pour « Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"1 ».
Assembly dépendant Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" introuvable.
Utilisez sxstrace.exe pour un diagnostic détaillé.
System errors:
=============
Error: (09/11/2014 08:13:29 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Windows\SysWow64\drivers\TrueSight.sys
Error: (09/11/2014 08:13:08 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Le service Service KMSELDI s’est terminé de façon inattendue pour la 1ème fois.
Error: (09/11/2014 08:11:25 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Le service DriverLINX Port I/O Driver n’a pas pu démarrer en raison de l’erreur :
%%1275
Error: (09/11/2014 08:11:25 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\Drivers\DLPortIO.SYS
Error: (09/11/2014 08:08:36 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Windows\SysWow64\drivers\TrueSight.sys
Error: (09/10/2014 10:28:16 AM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT)
Description: Une alerte irrécupérable a été reçue du point de terminaison distant. Le code d’alerte irrécupérable défini par protocole de TLS est 48.
Error: (09/10/2014 10:25:50 AM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT)
Description: Une alerte irrécupérable a été reçue du point de terminaison distant. Le code d’alerte irrécupérable défini par protocole de TLS est 48.
Error: (09/10/2014 10:23:50 AM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT)
Description: Une alerte irrécupérable a été reçue du point de terminaison distant. Le code d’alerte irrécupérable défini par protocole de TLS est 48.
Error: (09/10/2014 10:21:50 AM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT)
Description: Une alerte irrécupérable a été reçue du point de terminaison distant. Le code d’alerte irrécupérable défini par protocole de TLS est 48.
Error: (09/10/2014 10:19:50 AM) (Source: Schannel) (EventID: 4119) (User: AUTORITE NT)
Description: Une alerte irrécupérable a été reçue du point de terminaison distant. Le code d’alerte irrécupérable défini par protocole de TLS est 48.
Microsoft Office Sessions:
=========================
Error: (09/11/2014 08:12:17 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Service_KMS.exe11.0.0.052a8d15dunknown0.0.0.0000000000000000000007ff8207505655cc01cfcd873b9e6ed1C:\Program Files\KMSpico\Service_KMS.exeunknown943cc09c-397a-11e4-82b8-78542e241ef3
Error: (09/10/2014 11:05:41 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: LiveComm.exe17.5.9600.20605bdc01cfcccf310633c94294967295C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbwe\LiveComm.exe6d72d0c1-38c7-11e4-82b7-b4e245c3b054microsoft.windowscommunicationsapps_17.5.9600.20605_x64__8wekyb3d8bbweppleae38af2e007f4358a809ac99a64a67c1
Error: (09/10/2014 10:32:54 AM) (Source: Application Hang) (EventID: 1002) (User: )
Description: SDScan.exe2.4.40.181161401cfccd15e7a98764294967295C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe077bd917-38c5-11e4-82b7-b4e245c3b054
Error: (09/10/2014 10:14:11 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Point de contrôle planifié0x80070005
Error: (09/10/2014 09:23:27 AM) (Source: System Restore) (EventID: 8210) (User: )
Description: Point de contrôle planifié0x80070005
Error: (09/10/2014 08:31:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\MAXON\CINEMA 4D R12\resource\modules\python\res\Python.win32.framework\Lib\distutils\command\wininst-8_d.exe
Error: (09/10/2014 08:31:10 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\MAXON\CINEMA 4D R12\resource\modules\python\res\Python.win64.framework\Lib\distutils\command\wininst-8_d.exe
Error: (09/10/2014 08:29:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\MAXON\CINEMA 4D R12\resource\modules\python\res\Python.win32.framework\Lib\distutils\command\wininst-8_d.exe
Error: (09/10/2014 08:29:56 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\MAXON\CINEMA 4D R12\resource\modules\python\res\Python.win64.framework\Lib\distutils\command\wininst-8_d.exe
Error: (09/09/2014 09:23:26 AM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.DebugCRT,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0"C:\Program Files\MAXON\CINEMA 4D R12\resource\modules\python\res\Python.win32.framework\Lib\distutils\command\wininst-8_d.exe
CodeIntegrity Errors:
===================================
Date: 2014-08-07 14:49:00.321
Description: Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume4\Program Files\Common Files\microsoft shared\OFFICE15\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Memory info ===========================
Processor: Intel(R) Core(TM) i3-2100 CPU @ 3.10GHz
Percentage of memory in use: 26%
Total physical RAM: 6124.92 MB
Available physical RAM: 4525.11 MB
Total Pagefile: 7148.92 MB
Available Pagefile: 5798.02 MB
Total Virtual: 131072 MB
Available Virtual: 131071.76 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:1396.75 GB) (Free:1280.65 GB) NTFS
Drive e: (CLAIRE USB) (Removable) (Total:3.73 GB) (Free:0.99 GB) FAT32
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (Size: 1397.3 GB) (Disk ID: E743A2B7)
Partition: GPT Partition Type.
========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=3.7 GB) - (Type=0C)
==================== End Of Log ============================