Publicité
Publicité
Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-03-2017
Exécuté par rever (administrateur) sur DESKTOP-EUJRMEJ (06-03-2017 18:09:28)
Exécuté depuis C:\Users\rever\Desktop
Profils chargés: rever (Profils disponibles: defaultuser0 & rever)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgent.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgentUserBroker.exe
(Spotify Ltd) C:\Users\rever\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\WINDOWS\System32\browser_broker.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Google Inc.) C:\Program Files (x86)\Google\Picasa3\PicasaPhotoViewer.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-17] (Microsoft Corporation)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4005944 2017-02-13] (Tonec Inc.)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Run: [Spotify Web Helper] => C:\Users\rever\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-17] (Spotify Ltd)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\RunOnce: [Uninstall C:\Users\rever\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\rever\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328_1\amd64"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - %SystemRoot%\system32\wpdshserviceobj.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
BootExecute:
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 07 C:\WINDOWS\SysWOW64\wlidNSP.dll [43520 2016-07-16] (Microsoft Corporation)
Winsock: Catalog5 08 C:\WINDOWS\SysWOW64\wlidNSP.dll [43520 2016-07-16] (Microsoft Corporation)
Winsock: Catalog5-x64 07 C:\WINDOWS\system32\wlidnsp.dll [66048 2016-07-16] (Microsoft Corporation)
Winsock: Catalog5-x64 08 C:\WINDOWS\system32\wlidnsp.dll [66048 2016-07-16] (Microsoft Corporation)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61
Tcpip\..\Interfaces\{21d25070-9945-423d-abd5-a2a0b0428d76}: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1164751834-1112494924-2906029714-1001 -> DefaultScope {1E642EAE-BC07-46B3-AC6F-A23835BB21EE} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1164751834-1112494924-2906029714-1001 -> {1E642EAE-BC07-46B3-AC6F-A23835BB21EE} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Pas de fichier
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Pas de fichier
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1164751834-1112494924-2906029714-1001 -> hxxp://google.ch/
Edge Extension: (AdBlock) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.11.0.0_neutral__c1wakc4j0nefm [2017-02-17]
Edge Extension: (Pin It Button) -> EdgeExtension_PinterestPinItButton_xnkra2w3aecd0 => C:\Program Files\WindowsApps\Pinterest.PinItButton_1.39.5.0_neutral__xnkra2w3aecd0 [2016-12-17]
Edge Extension: (Translator For Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.16.0_neutral__8wekyb3d8bbwe [2016-12-17]
FireFox:
========
FF ProfilePath: C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079 [2017-03-06]
FF Homepage: Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079 -> hxxps://www.google.ch/
FF Extension: (Pin It button) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2017-03-06]
FF Extension: (S3.Google Translator) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\Extensions\s3google@translator.xpi [2017-03-04]
FF Extension: (Adblock Plus) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-03-02]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\features\{0ddc12a8-95b6-46f7-86c6-2501c2371a80}\disableSHA1rollout@mozilla.org.xpi [2017-03-03]
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\rever\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\rever\AppData\Roaming\IDM\idmmzcc5 [2017-03-06] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-14] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-23] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default [2017-03-06]
CHR Extension: (Google Slides) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-23]
CHR Extension: (Google Docs) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-23]
CHR Extension: (Google Drive) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-23]
CHR Extension: (YouTube) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-23]
CHR Extension: (Google Sheets) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-23]
CHR Extension: (Google Docs hors connexion) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-24]
CHR Extension: (IDM Integration Module) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-02-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-23]
CHR Extension: (Gmail) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-23]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-30] (Acer Incorporated)
S2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "%ProgramData%\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
S4 ZAMSvc; "C:\Program Files (x86)\Zemana AntiLogger\ZAM.exe" /service [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [34416 2016-03-24] (AnvSoft Inc.)
S3 keycrypt; C:\WINDOWS\System32\DRIVERS\KeyCrypt64.sys [159360 2016-08-10] (Zemana Ltd.)
R3 MEIx64; C:\WINDOWS\System32\drivers\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [36600 2014-04-18] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvaewu.inf_amd64_8baa9d083edacf87\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-01-03] (Zemana Ltd.)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-06 18:09 - 2017-03-06 18:10 - 00016316 _____ C:\Users\rever\Desktop\FRST.txt
2017-03-06 18:05 - 2017-03-06 18:09 - 00000000 ____D C:\FRST
2017-03-06 18:02 - 2017-03-06 18:02 - 02423808 _____ (Farbar) C:\Users\rever\Desktop\FRST64.exe
2017-03-06 17:12 - 2017-03-06 17:20 - 905986974 ____R C:\Users\rever\Downloads\La nuit de Varennes .Ettore Scola.1981.MULTI.HDRip.1080p.H264.AAC.CUSTOM-Candia06 .mkv
2017-03-06 17:11 - 2017-03-06 18:04 - 00000000 ____D C:\Users\rever\AppData\LocalLow\uTorrent
2017-03-06 17:11 - 2017-03-06 17:11 - 00397187 _____ C:\Users\rever\Downloads\La nuit de Varennes .Ettore Scola.1981.MULTI.HDRip.1080p.H264.AAC.CUSTOM-Candia06 .mkv.torrent
2017-03-06 16:48 - 2017-03-06 16:48 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636244156911336473
2017-03-06 16:34 - 2017-03-06 16:34 - 00000240 _____ C:\Users\rever\.swfinfo
2017-03-06 16:28 - 2017-03-06 17:11 - 00000000 ____D C:\Users\rever\Documents\VSO Downloader
2017-03-06 16:28 - 2017-03-06 16:31 - 00000000 ____D C:\ProgramData\VSO
2017-03-06 16:28 - 2017-03-06 16:28 - 00001317 _____ C:\Users\rever\Desktop\VSO Downloader 5.lnk
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\Users\rever\AppData\Roaming\VSO
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VSO
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\Program Files\WinPcap
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\Program Files (x86)\VSO
2017-03-06 16:26 - 2017-03-06 16:26 - 00014468 _____ C:\Users\rever\Downloads\VSO Downloader Ultimate 5.0.1.26.torrent
2017-03-06 16:26 - 2017-03-06 16:26 - 00000000 ____D C:\Users\rever\Downloads\VSO Downloader Ultimate 5.0.1.26
2017-03-06 15:36 - 2017-03-06 15:36 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636244113763690250
2017-03-06 15:19 - 2017-03-06 15:25 - 723627725 _____ C:\Users\rever\Downloads\MEN - Undercover Stripper Part 1 - Manuel Skye, Skyy Knox.mp4
2017-03-06 15:18 - 2017-03-06 15:18 - 00014153 _____ C:\Users\rever\Downloads\[gay-torrents.org] MEN - Undercover Stripper Part 1 - Manuel Skye, Skyy Knox.torrent
2017-03-06 15:09 - 2017-03-06 15:09 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636244097838167364
2017-03-06 15:05 - 2017-03-06 15:05 - 24097975 _____ C:\Users\rever\Desktop\Sheila - Quel tempérament de feu (1977).mp4
2017-03-06 13:38 - 2017-03-06 13:39 - 00000000 ____D C:\Users\rever\Downloads\Taboo.UK.S01E07.FASTSUB.VOSTFR.720p.HDTV.x264.AC3-GOBO2S
2017-03-06 13:38 - 2017-03-06 13:38 - 00018859 _____ C:\Users\rever\Downloads\Taboo.UK.S01E07.FASTSUB.VOSTFR.720p.HDTV.x264.AC3-GOBO2S.torrent
2017-03-05 02:42 - 2017-03-05 02:46 - 551578600 ____R C:\Users\rever\Downloads\Gianni Maggio and Italo.mp4
2017-03-05 02:42 - 2017-03-05 02:42 - 00010839 _____ C:\Users\rever\Downloads\[gay-torrents.org] Tim Tales - Gianni Maggio and Italo.torrent
2017-03-05 01:36 - 2017-03-05 01:52 - 00000000 ____D C:\Users\rever\Downloads\MyStraightBuddy.com Siterip
2017-03-05 01:33 - 2017-03-05 01:33 - 00469880 _____ C:\Users\rever\Downloads\MyStraightBuddy Complete HD SiteRip (183 Vids) (720p).torrent
2017-03-04 23:32 - 2017-03-04 23:32 - 00380661 _____ C:\Users\rever\Downloads\Naked Kombat Collection (1).torrent
2017-03-04 23:21 - 2017-03-04 23:21 - 00380661 _____ C:\Users\rever\Downloads\Naked Kombat Collection.torrent
2017-03-04 18:42 - 2017-03-04 18:42 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242497417175754
2017-03-04 16:32 - 2017-03-05 02:15 - 541569008 ____R C:\Users\rever\Downloads\EBD-JayAlexander-BennettAnthony-540-SD.mp4
2017-03-04 16:32 - 2017-03-04 16:32 - 00010701 _____ C:\Users\rever\Downloads\I Need Big Cock - Jay Alexander & Bennett Anthony.torrent
2017-03-04 15:51 - 2017-03-04 15:51 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242394781968505
2017-03-04 14:42 - 2017-03-04 14:42 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242353620060416
2017-03-04 13:28 - 2017-03-04 13:35 - 1518637897 _____ C:\Users\rever\Downloads\MEN - Dad Group Part 1 - Connor Maguire, Jake Ashford (1080p).mp4
2017-03-04 12:47 - 2017-03-04 12:47 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242284258466936
2017-03-04 12:23 - 2017-03-04 12:23 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242269922872097
2017-03-04 11:27 - 2017-03-04 11:30 - 472086717 _____ C:\Users\rever\Downloads\FuckerMate - Gianni Maggio and Louis Ricaute Horse Riding.mp4
2017-03-04 08:28 - 2017-03-04 08:38 - 1463573797 ____R C:\Users\rever\Downloads\Raging Stallion - Wasteland - Bruno Bernal, Bruce Beckham.mp4
2017-03-04 06:50 - 2017-03-04 06:50 - 00001142 _____ C:\Users\Public\Desktop\FastStone Image Viewer.lnk
2017-03-04 06:50 - 2017-03-04 06:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer
2017-03-04 06:50 - 2017-03-04 06:50 - 00000000 ____D C:\Program Files (x86)\FastStone Image Viewer
2017-03-04 06:01 - 2017-03-04 07:34 - 1932553065 ____R C:\Users\rever\Downloads\The Making of the Warwick Rowers 2016 Calendar - England Film.mp4
2017-03-04 06:00 - 2017-03-04 06:00 - 00018777 _____ C:\Users\rever\Downloads\[gay-torrents.org] The Making of the Warwick Rowers 2016 Calendar - England Film.torrent
2017-03-04 04:28 - 2017-03-04 04:28 - 00000000 ____D C:\Users\rever\AppData\Local\NVIDIA Corporation
2017-03-04 01:43 - 2017-03-04 01:43 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241886039200045
2017-03-04 01:11 - 2017-03-04 01:11 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2017-03-03 22:04 - 2017-03-03 22:04 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241754903681773
2017-03-03 21:58 - 2017-03-03 22:07 - 1041977097 _____ C:\Users\rever\Downloads\RagingStallion - High n' Tight - Bruno Bernal & Ryan Cruz.mp4
2017-03-03 21:11 - 2017-03-04 20:11 - 00000000 ____D C:\WINDOWS\Minidump
2017-03-03 21:09 - 2017-03-03 21:08 - 00372736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NVUNINST.EXE
2017-03-03 21:08 - 2017-03-03 21:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA nTune Performance Application
2017-03-03 18:40 - 2017-03-03 18:40 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241632493235881
2017-03-03 18:19 - 2017-03-03 18:19 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241619930446884
2017-03-03 17:51 - 2017-03-03 17:51 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241603196134311
2017-03-03 17:35 - 2017-03-03 17:38 - 877563511 _____ C:\Users\rever\Downloads\[Hot House] Dirty Work - Jimmy Durano & Ace Era.mp4
2017-03-03 17:27 - 2017-03-03 17:27 - 00000000 ____D C:\Users\rever\Downloads\9
2017-03-03 16:48 - 2017-03-04 09:25 - 00000000 ____D C:\Users\rever\Documents\Snagit
2017-03-03 16:47 - 2017-03-04 09:36 - 00000000 ____D C:\Users\rever\AppData\Local\TechSmith
2017-03-03 16:47 - 2017-03-04 09:36 - 00000000 ____D C:\ProgramData\TechSmith
2017-03-03 16:44 - 2017-03-03 16:44 - 00000000 ____D C:\Users\rever\Downloads\Snagit 13
2017-03-03 16:41 - 2017-03-03 16:42 - 00000000 ____D C:\Users\rever\Downloads\TechSmith Snagit v13.1.1.7662
2017-03-03 15:03 - 2017-03-03 15:05 - 1650678391 _____ C:\Users\rever\Downloads\Next Door Originals - 20170303 The Talented Mr Bubbles (Mark Long, Ty Thomas) [1080p].mp4
2017-03-03 14:51 - 2017-03-03 21:41 - 00000000 ____D C:\Users\rever\Desktop\Fichier inutilisé (CU)
2017-03-03 14:51 - 2017-03-03 18:54 - 00000000 ____D C:\Users\Public\Desktop\Raccourci inutilisé (AU)
2017-03-03 14:51 - 2017-03-03 14:51 - 00000000 ____D C:\Users\rever\Desktop\Raccourci inutilisé (CU)
2017-03-03 14:51 - 2017-03-03 14:51 - 00000000 ____D C:\Users\Public\Desktop\Fichier inutilisé (AU)
2017-03-03 14:47 - 2017-03-03 14:47 - 04031440 _____ C:\Users\rever\Desktop\adwcleaner_6.044.exe
2017-03-02 10:08 - 2017-03-02 10:19 - 798897917 ____R C:\Users\rever\Downloads\HardBritLads-JordanFox-MattRichie-1080p.mp4
2017-03-02 08:45 - 2017-03-02 08:45 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636240411506276400
2017-03-02 08:30 - 2017-03-02 08:33 - 676695495 _____ C:\Users\rever\Downloads\TitanMen - 2 Men Kiss - Jason Vario fucks Lorenzo Flexx.mp4
2017-03-02 06:42 - 2017-03-02 06:42 - 00000000 ____D C:\Users\rever\Downloads\sean cody 1810 dominic 3
2017-03-02 06:20 - 2017-03-02 06:29 - 849226220 _____ C:\Users\rever\Downloads\TM-LorenzoFlexx-JasonVario.mp4
2017-03-02 02:33 - 2017-03-02 02:39 - 00000000 ____D C:\Users\rever\AppData\Local\Mozilla
2017-03-02 02:32 - 2017-03-03 14:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-02 02:32 - 2017-03-02 02:32 - 00001196 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-03-02 00:34 - 2017-03-02 00:35 - 401257606 _____ C:\Users\rever\Downloads\Raw Fuck Club - Loaded Up At The Gym - Owen Powers & Alejandro Fusco.mp4
2017-03-01 22:26 - 2017-03-01 22:27 - 800487229 _____ C:\Users\rever\Downloads\[Tim Tales] Ridder Rivera Barebacks Dano.mp4
2017-03-01 19:56 - 2017-03-01 19:56 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636239950087629862
2017-03-01 19:53 - 2017-03-01 20:02 - 450036931 _____ C:\Users\rever\Downloads\[Tim Tales] Caio Fucks Jonathan.mp4
2017-03-01 19:47 - 2017-03-01 19:49 - 233734112 _____ C:\Users\rever\Downloads\[Ridleydovarez] Abused, beaten, fucked and raped (Jordan Fox).mp4
2017-03-01 19:39 - 2017-03-01 19:39 - 00099460 _____ C:\Users\rever\Desktop\SFTGC.txt
2017-03-01 12:50 - 2017-03-01 12:52 - 130971586 _____ C:\Users\rever\Downloads\The Best Flex - Muscle Diamond Bedroom Flexing.mp4
2017-03-01 12:28 - 2017-03-01 12:28 - 00000000 ____D C:\Users\rever\Downloads\Universal Viewer Pro 6.5.6.2 + Serial
2017-03-01 08:34 - 2017-03-01 08:35 - 41828732 ____R C:\Users\rever\Downloads\PlanB-2.mp4
2017-03-01 04:46 - 2017-03-01 04:51 - 00000000 ____D C:\Users\rever\AppData\Roaming\ATViewer
2017-03-01 04:45 - 2017-03-01 04:45 - 00000000 ____D C:\Users\rever\AppData\Roaming\WinRAR
2017-03-01 04:44 - 2017-03-01 04:44 - 00001028 _____ C:\Users\Public\Desktop\WinRAR.lnk
2017-03-01 04:44 - 2017-03-01 04:44 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-01 04:44 - 2017-03-01 04:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-01 04:44 - 2017-03-01 04:44 - 00000000 ____D C:\Program Files\WinRAR
2017-03-01 04:24 - 2012-06-13 12:58 - 00000000 ____D C:\Users\rever\Desktop\Plugins
2017-03-01 03:26 - 2017-03-01 03:41 - 2174473384 _____ C:\Users\rever\Downloads\HEAVENLY - Pleasure Productions.mp4
2017-02-28 23:54 - 2017-03-01 00:50 - 3032484657 _____ C:\Users\rever\Downloads\Devon S (Shoot 02).mp4
2017-02-28 22:20 - 2017-02-28 22:20 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636239172038728988
2017-02-28 21:55 - 2017-02-28 21:57 - 527157066 _____ C:\Users\rever\Downloads\Jake Cruise - Leo Giamani Massaged (Oct 31, 08).wmv
2017-02-28 19:57 - 2017-02-28 19:57 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636239086416716187
2017-02-28 16:27 - 2017-02-28 16:32 - 579465361 ____R C:\Users\rever\Downloads\Muscle Hunks - Claude Carroll Solo.mp4
2017-02-28 07:29 - 2017-02-28 07:29 - 02041535 _____ C:\Users\rever\Desktop\FRATMEN™ _ FRATPAD Archive_ SPENCER on 2008_02_16.mkv
2017-02-28 06:45 - 2017-02-28 17:36 - 2685104966 _____ C:\Users\rever\Downloads\♺ TREASURE ISLAN MEDIA BBreed n Seed n Feed CUMpilation_vol 1.mov
2017-02-28 03:47 - 2017-02-28 03:47 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238504613312855
2017-02-28 02:27 - 2017-02-28 20:59 - 00000000 ____D C:\Program Files (x86)\DAZ 3D
2017-02-28 01:00 - 2017-02-28 02:31 - 00000000 ____D C:\Users\Public\Documents\My DAZ 3D Library
2017-02-28 01:00 - 2017-02-28 01:00 - 00000000 ____D C:\Users\rever\Documents\DAZ 3D
2017-02-28 00:57 - 2017-02-28 00:57 - 00000000 ____D C:\ProgramData\DAZ 3D
2017-02-28 00:55 - 2017-02-28 01:00 - 00000000 ____D C:\Users\rever\AppData\Roaming\DAZ 3D
2017-02-27 23:48 - 2017-02-27 23:49 - 00000000 ____D C:\ProgramData\Temp
2017-02-27 23:40 - 2017-02-28 21:01 - 00000000 ____D C:\Users\rever\AppData\Roaming\Notepad++
2017-02-27 23:40 - 2017-02-28 21:01 - 00000000 ____D C:\Program Files (x86)\Notepad++
2017-02-27 23:23 - 2017-02-27 23:53 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink WaveEditor 2
2017-02-27 23:23 - 2017-02-27 23:23 - 00000000 ____D C:\Users\rever\AppData\Roaming\proDAD
2017-02-27 23:23 - 2017-02-27 23:23 - 00000000 ____D C:\ProgramData\proDAD
2017-02-27 23:23 - 2017-02-27 23:23 - 00000000 ____D C:\Program Files\Common Files\NewBlue
2017-02-27 23:23 - 2017-02-27 23:06 - 00607256 _____ (proDAD GmbH) C:\WINDOWS\system32\prodad-codec.dll
2017-02-27 23:23 - 2017-02-27 23:04 - 00376344 _____ (proDAD GmbH) C:\WINDOWS\system32\proDAD-PA-Support.dll
2017-02-27 23:22 - 2017-03-01 22:22 - 00000000 ____D C:\Program Files (x86)\NewBlue
2017-02-27 23:20 - 2017-03-03 21:33 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2017-02-27 23:20 - 2017-02-27 23:48 - 00000000 ____D C:\ProgramData\install_backup
2017-02-27 23:20 - 2017-02-27 23:20 - 00000000 ____D C:\Users\Public\Cyberlink
2017-02-27 23:19 - 2017-02-27 23:49 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-02-27 23:19 - 2017-02-27 23:48 - 00000000 ____D C:\ProgramData\CLSK
2017-02-27 23:19 - 2017-02-27 23:23 - 00000000 ____D C:\ProgramData\install_clap
2017-02-27 23:00 - 2017-03-06 14:18 - 00000000 ____D C:\Users\rever\Downloads\CyberLink PowerDirector Ultimate 15 Suite
2017-02-27 20:33 - 2017-02-27 20:33 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238244312840294
2017-02-27 20:25 - 2017-02-27 20:25 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238239576335624
2017-02-27 20:13 - 2017-02-27 20:13 - 00000000 ____D C:\Users\rever\AppData\Roaming\Bandicam Company
2017-02-27 20:09 - 2017-02-27 20:15 - 00000000 ____D C:\Program Files (x86)\Bandicam
2017-02-27 20:09 - 2017-02-27 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-02-27 20:09 - 2017-02-27 20:09 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2017-02-27 18:36 - 2017-02-27 18:36 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238173613573309
2017-02-27 17:52 - 2017-02-27 17:52 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238147267937185
2017-02-27 17:21 - 2017-02-27 17:21 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238128636320837
2017-02-27 16:46 - 2017-02-27 16:51 - 00000000 ____D C:\Users\rever\Downloads\Lucas Entertainment - A Vito Gallo Collection
2017-02-25 21:23 - 2017-02-25 21:23 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636236545825821063
2017-02-25 11:35 - 2017-02-25 11:35 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636236193437600224
2017-02-25 06:35 - 2017-02-25 06:35 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636236013534579789
2017-02-25 04:18 - 2017-02-25 04:18 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235931055227546
2017-02-25 02:49 - 2017-02-25 02:49 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235877709867746
2017-02-25 02:48 - 2017-02-25 02:48 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2017-02-25 02:48 - 2017-02-25 02:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2017-02-25 02:42 - 2017-02-25 02:48 - 00000000 ____D C:\Program Files (x86)\Freemake
2017-02-25 00:03 - 2017-02-25 00:03 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235777911642478
2017-02-24 21:01 - 2017-02-24 21:01 - 00000000 ____D C:\Users\rever\Downloads\MANTICIPATION
2017-02-24 18:19 - 2017-02-24 18:19 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235571894182862
2017-02-24 17:00 - 2017-02-24 17:00 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235524120641681
2017-02-24 15:51 - 2017-03-04 11:36 - 00000000 ____D C:\Users\rever\Documents\Bandicam
2017-02-23 07:59 - 2017-02-23 07:59 - 00003584 _____ C:\Users\rever\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-23 07:10 - 2017-02-23 07:10 - 00000000 ____D C:\Users\rever\AppData\Local\.marble
2017-02-23 07:07 - 2017-02-23 07:07 - 00000000 ____D C:\Users\rever\AppData\Local\kxmlgui5
2017-02-23 07:05 - 2017-02-23 07:11 - 00019524 _____ C:\Users\rever\AppData\Local\digikamrc
2017-02-23 07:04 - 2017-02-23 07:04 - 00000000 ____D C:\Users\rever\AppData\Local\cache
2017-02-23 01:55 - 2017-02-25 03:14 - 00001256 _____ C:\Users\rever\Desktop\Windows 10 Manager.lnk
2017-02-23 01:55 - 2017-02-25 03:14 - 00001246 _____ C:\Users\rever\Desktop\1-Click Cleaner.lnk
2017-02-23 01:55 - 2017-02-23 01:55 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yamicsoft
2017-02-23 01:55 - 2017-02-23 01:55 - 00000000 ____D C:\Program Files\Yamicsoft
2017-02-22 05:22 - 2017-03-03 17:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-22 03:23 - 2017-02-22 03:23 - 00000000 ____D C:\Users\rever\Desktop\Data
2017-02-21 22:33 - 2017-02-21 22:33 - 00000000 ____D C:\Users\rever\Downloads\Yamicsoft Windows 10 Manager 2.0.5 Portable
2017-02-18 21:17 - 2017-02-18 21:17 - 00000000 ____D C:\Users\rever\AppData\Local\Apowersoft
2017-02-17 22:45 - 2017-03-06 15:12 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-17 22:25 - 2017-02-17 22:25 - 00000000 ____D C:\Users\rever\Intel
2017-02-17 18:45 - 2017-03-06 14:28 - 00002000 _____ C:\Users\rever\Desktop\ZHPCleaner.txt
2017-02-16 06:53 - 2017-03-03 17:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-16 06:32 - 2017-02-16 06:32 - 00000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2017-02-16 03:23 - 2017-02-16 03:33 - 972707671 ____R C:\Users\rever\Downloads\Brodie & Levi.mp4
2017-02-16 02:49 - 2017-03-06 17:54 - 00000000 ____D C:\Users\rever\AppData\Roaming\Anvsoft
2017-02-16 02:49 - 2017-02-16 02:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
2017-02-16 02:49 - 2017-02-16 02:49 - 00000000 ____D C:\Program Files (x86)\Anvsoft
2017-02-16 00:36 - 2017-03-04 20:13 - 00000000 ____D C:\Users\rever\AppData\Roaming\IDM
2017-02-16 00:34 - 2017-02-16 00:37 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-02-16 00:34 - 2017-02-16 00:34 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-02-16 00:34 - 2017-02-16 00:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-02-15 13:19 - 2017-02-15 14:51 - 00000000 ____D C:\Program Files\CCleaner
2017-02-15 13:19 - 2017-02-15 13:19 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-15 13:19 - 2017-02-15 13:19 - 00000827 _____ C:\Users\rever\Desktop\CCleaner.lnk
2017-02-15 13:19 - 2017-02-15 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-14 00:12 - 2017-03-06 14:20 - 00000879 _____ C:\Users\rever\Desktop\ZHPCleaner.lnk
2017-02-14 00:12 - 2017-02-14 00:12 - 02702848 _____ C:\Users\rever\Desktop\ZHPCleaner.exe
2017-02-13 18:14 - 2016-10-17 16:35 - 00223464 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
2017-02-13 15:38 - 2017-02-13 16:08 - 2648317683 ____R C:\Users\rever\Downloads\[MEN] [Drill My Hole] Hideous Color [Arpad Miklos and John Magnum] [1080p].mp4
2017-02-13 07:16 - 2017-02-13 07:16 - 00000000 ____D C:\Users\rever\Downloads\Falcon (FVP113) - CALIFORNIA KINGS
2017-02-13 03:01 - 2017-03-04 06:53 - 00000000 ____D C:\Users\rever\AppData\Roaming\FastStone
2017-02-13 03:01 - 2017-02-13 03:01 - 00000000 ____D C:\Users\rever\AppData\Local\FastStone
2017-02-12 19:54 - 2017-02-12 20:19 - 00000000 ___HD C:\adobeTemp
2017-02-12 13:08 - 2017-02-12 13:08 - 108504137 _____ C:\Users\rever\Desktop\Temperament de feu.wmv
2017-02-11 06:28 - 2017-02-12 18:13 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2017-02-11 00:57 - 2017-02-17 14:48 - 00000000 ____D C:\Users\rever\Downloads\Adobe Photoshop Lightroom CC 6.8
2017-02-10 14:48 - 2017-02-10 14:48 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-02-10 14:48 - 2016-12-29 13:28 - 00133056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-02-10 14:48 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-02-10 14:48 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-02-10 14:48 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-02-10 14:48 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-02-08 02:30 - 2017-02-08 02:30 - 17836124 _____ C:\Users\rever\Downloads\Sheila You Light my fire Festivalbar Verone Rai Uno - vidéo Dailymotion.ts
2017-02-07 08:05 - 2017-02-17 21:42 - 00000000 ____D C:\WINDOWS\Microsoft Antimalware
2017-02-07 06:10 - 2017-02-07 06:10 - 01239752 _____ (Microsoft Corporation) C:\Users\rever\Desktop\wlsetup-web.exe
2017-02-06 21:49 - 2017-02-13 03:25 - 00063386 _____ C:\Users\rever\Documents\starburn.txt
2017-02-06 21:49 - 2017-02-06 21:49 - 00000000 ____D C:\Users\rever\AppData\Local\Wondershare
2017-02-06 21:49 - 2017-02-06 21:49 - 00000000 ____D C:\ProgramData\Wondershare
2017-02-06 21:48 - 2017-02-06 22:41 - 00000000 ____D C:\Users\rever\Documents\Wondershare Filmora
2017-02-04 17:11 - 2017-02-04 17:11 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64 bits
2017-02-04 16:05 - 2017-02-17 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux (64 bits)
2017-02-04 12:07 - 2017-02-04 12:10 - 683952928 ____R C:\Users\rever\Downloads\Robbie [IslandStuds].mp4
2017-02-04 00:01 - 2017-02-04 00:01 - 00000000 ____D C:\Users\rever\.MCTranscodingSDK
2017-02-04 00:00 - 2017-02-04 00:01 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2017-02-04 00:00 - 2017-02-04 00:00 - 00000000 ____D C:\ProgramData\Geevs
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-06 18:09 - 2017-01-11 12:26 - 00000000 ____D C:\Users\rever\AppData\LocalLow\Mozilla
2017-03-06 18:09 - 2017-01-03 21:40 - 00228223 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-03-06 18:09 - 2016-12-14 13:14 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-06 18:04 - 2017-01-31 01:18 - 00000000 ____D C:\Users\rever\AppData\Roaming\DMCache
2017-03-06 18:04 - 2016-12-14 17:00 - 00000000 ____D C:\Users\rever\AppData\Roaming\uTorrent
2017-03-06 18:04 - 2016-12-14 15:26 - 00000000 ____D C:\Users\rever\AppData\Local\Spotify
2017-03-06 18:01 - 2017-01-09 05:03 - 00000000 ____D C:\Users\rever\AppData\Local\CrashDumps
2017-03-06 17:34 - 2016-12-14 15:13 - 00000000 ____D C:\Users\rever\AppData\Roaming\avidemux
2017-03-06 17:32 - 2017-01-24 10:44 - 00000000 ____D C:\Users\rever\AppData\Roaming\vlc
2017-03-06 16:34 - 2016-12-14 13:20 - 00000000 ____D C:\Users\rever
2017-03-06 16:11 - 2016-12-14 20:36 - 00004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9DB31290-AF51-4C9A-8B42-1A984439DA55}
2017-03-06 16:05 - 2016-12-14 15:25 - 00000000 ____D C:\Users\rever\AppData\Roaming\Spotify
2017-03-06 15:07 - 2016-12-14 13:20 - 00000000 ____D C:\Users\rever\AppData\Local\Packages
2017-03-06 15:07 - 2016-12-14 11:45 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-06 14:28 - 2016-12-14 16:34 - 00000000 ____D C:\Users\rever\AppData\Roaming\ZHP
2017-03-06 14:20 - 2016-12-14 16:11 - 00000000 ____D C:\AdwCleaner
2017-03-06 14:12 - 2016-12-14 22:02 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-05 16:03 - 2017-01-27 17:57 - 00000000 ____D C:\Users\rever\AppData\Local\ElevatedDiagnostics
2017-03-05 03:28 - 2017-02-01 00:18 - 00000000 ____D C:\Users\rever\Desktop\mecs1
2017-03-04 20:11 - 2016-12-14 11:44 - 00000000 ____D C:\WINDOWS\INF
2017-03-04 15:45 - 2016-12-14 15:25 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-03-04 15:41 - 2016-12-14 22:02 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-04 15:41 - 2016-12-14 11:31 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-03-04 15:31 - 2016-12-15 12:29 - 02748416 _____ C:\Users\rever\ZHPCleaner.exe
2017-03-04 14:23 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\rescache
2017-03-04 09:35 - 2016-12-18 00:43 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-04 05:04 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-04 04:26 - 2016-12-14 22:10 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-04 04:26 - 2016-12-14 22:10 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-03 21:41 - 2017-01-27 18:42 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
2017-03-03 21:29 - 2016-12-23 18:35 - 00002938 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2017-03-03 20:30 - 2016-12-23 18:35 - 00003556 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:46 - 00003016 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00003142 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00003114 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00002996 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00002944 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00002902 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 17:11 - 2016-07-16 12:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2017-03-03 17:11 - 2016-07-16 12:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2017-03-03 17:11 - 2016-07-16 12:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2017-03-03 17:11 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2017-03-03 14:14 - 2017-01-08 11:47 - 00000000 ____D C:\Users\rever\AppData\LocalLow\Adobe
2017-03-03 14:14 - 2016-12-14 13:20 - 00000000 ____D C:\Users\rever\AppData\Roaming\Adobe
2017-03-02 02:33 - 2016-12-14 13:28 - 00000000 ____D C:\Users\rever\AppData\Roaming\Mozilla
2017-02-27 14:56 - 2016-12-21 19:48 - 00000000 ___HD C:\Users\rever\Desktop\.picasaoriginals
2017-02-25 02:49 - 2016-12-14 21:13 - 00000000 ____D C:\ProgramData\Freemake
2017-02-24 23:23 - 2016-12-21 18:02 - 00000000 ____D C:\oem
2017-02-24 23:02 - 2016-12-15 06:41 - 00000000 ____D C:\Users\rever\AppData\Roaming\dvdcss
2017-02-23 09:34 - 2016-12-14 19:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-23 09:32 - 2016-12-14 19:58 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-23 01:54 - 2017-01-03 22:22 - 00000000 ____D C:\Users\rever\AppData\Roaming\Yamicsoft
2017-02-23 00:41 - 2016-12-29 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-18 21:22 - 2016-12-15 01:57 - 00000000 ____D C:\Users\rever\AppData\Roaming\Apowersoft
2017-02-18 14:50 - 2016-12-14 16:36 - 00120071 _____ C:\Users\rever\Desktop\ZHPDiag.txt
2017-02-17 22:02 - 2016-12-14 11:45 - 00000155 _____ C:\WINDOWS\win.ini
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 __RSD C:\WINDOWS\Media
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\security
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\Registration
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\Help
2017-02-15 23:42 - 2017-01-21 01:11 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-15 23:42 - 2016-12-14 22:02 - 00242632 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-14 18:34 - 2017-01-21 01:11 - 00003988 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-14 18:34 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-14 18:34 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-12 20:24 - 2016-12-29 15:45 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-11 07:02 - 2017-01-31 01:18 - 00000000 ____D C:\Users\rever\Downloads\Video
2017-02-10 22:40 - 2016-12-21 18:03 - 00000000 ____D C:\Users\rever\AppData\Local\Acer
2017-02-10 21:46 - 2017-01-08 11:29 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-02-10 21:18 - 2017-02-03 21:41 - 00001086 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-02-10 21:18 - 2017-02-03 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-02-08 05:19 - 2016-12-19 09:40 - 324695890 _____ C:\Users\rever\Downloads\SC-Marshall-Pierce.wmv
2017-02-08 05:12 - 2016-12-29 15:47 - 00000000 ____D C:\Users\rever\AppData\Roaming\NVIDIA
2017-02-07 07:48 - 2017-02-03 21:09 - 00000000 ____D C:\Program Files (x86)\Windows Live
2017-02-07 06:13 - 2016-12-14 13:23 - 00000000 ___RD C:\Users\rever\OneDrive
2017-02-06 23:07 - 2017-01-23 22:55 - 00002234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-06 20:48 - 2016-12-14 11:46 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-02-06 20:48 - 2016-12-14 11:46 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-06 16:55 - 2016-12-18 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download
2017-02-04 15:34 - 2016-12-21 18:02 - 00000000 ____D C:\Program Files (x86)\Acer
2017-02-04 15:33 - 2016-12-21 18:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\CareCenter
2017-02-04 15:33 - 2016-12-21 18:02 - 00000000 ____D C:\ProgramData\acer
2017-02-04 13:34 - 2016-12-14 22:09 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-04 00:55 - 2017-01-14 21:16 - 00000000 ____D C:\Users\rever\.thumbnails
==================== Fichiers à la racine de certains dossiers =======
2017-02-23 07:59 - 2017-02-23 07:59 - 0003584 _____ () C:\Users\rever\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-23 07:05 - 2017-02-23 07:11 - 0019524 _____ () C:\Users\rever\AppData\Local\digikamrc
2017-01-29 09:53 - 2017-01-29 09:53 - 0007605 _____ () C:\Users\rever\AppData\Local\Resmon.ResmonCfg
2016-12-14 22:10 - 2016-12-14 22:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-02-01 15:10 - 2017-02-01 15:10 - 0004975 _____ () C:\ProgramData\kjiixkes.ghp
2017-02-01 15:10 - 2017-02-01 15:10 - 0000016 _____ () C:\ProgramData\mntemp
2016-12-23 18:35 - 2017-03-03 21:34 - 0002312 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-23 18:35 - 2017-03-03 21:29 - 0002938 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
Fichiers à déplacer ou supprimer:
====================
C:\Users\rever\ZHPCleaner.exe
C:\Users\rever\ZHPDiag3.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-02-28 08:50
==================== Fin de FRST.txt ============================
Exécuté par rever (administrateur) sur DESKTOP-EUJRMEJ (06-03-2017 18:09:28)
Exécuté depuis C:\Users\rever\Desktop
Profils chargés: rever (Profils disponibles: defaultuser0 & rever)
Platform: Windows 10 Home Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.11.110.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Microsoft Corporation) C:\WINDOWS\System32\SettingSyncHost.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Microsoft Corporation) C:\WINDOWS\System32\dllhost.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgent.exe
(Microsoft Corporation) C:\WINDOWS\System32\InstallAgentUserBroker.exe
(Spotify Ltd) C:\Users\rever\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\WINDOWS\System32\browser_broker.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Google Inc.) C:\Program Files (x86)\Google\Picasa3\PicasaPhotoViewer.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-17] (Microsoft Corporation)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9363672 2017-02-08] (Piriform Ltd)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Run: [IDMan] => C:\Program Files (x86)\Internet Download Manager\IDMan.exe [4005944 2017-02-13] (Tonec Inc.)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Run: [Spotify Web Helper] => C:\Users\rever\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-02-17] (Spotify Ltd)
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\RunOnce: [Uninstall C:\Users\rever\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\rever\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328_1\amd64"
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - %SystemRoot%\system32\wpdshserviceobj.dll (Microsoft Corporation)
ShellIconOverlayIdentifiers: [ IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => C:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2015-08-14] (Tonec Inc.)
BootExecute:
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Winsock: Catalog5 07 C:\WINDOWS\SysWOW64\wlidNSP.dll [43520 2016-07-16] (Microsoft Corporation)
Winsock: Catalog5 08 C:\WINDOWS\SysWOW64\wlidNSP.dll [43520 2016-07-16] (Microsoft Corporation)
Winsock: Catalog5-x64 07 C:\WINDOWS\system32\wlidnsp.dll [66048 2016-07-16] (Microsoft Corporation)
Winsock: Catalog5-x64 08 C:\WINDOWS\system32\wlidnsp.dll [66048 2016-07-16] (Microsoft Corporation)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61
Tcpip\..\Interfaces\{21d25070-9945-423d-abd5-a2a0b0428d76}: [DhcpNameServer] 62.2.24.158 62.2.17.60 62.2.24.162 62.2.17.61
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1164751834-1112494924-2906029714-1001 -> DefaultScope {1E642EAE-BC07-46B3-AC6F-A23835BB21EE} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-1164751834-1112494924-2906029714-1001 -> {1E642EAE-BC07-46B3-AC6F-A23835BB21EE} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2016-12-10] (Internet Download Manager, Tonec Inc.)
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - Pas de fichier
Handler: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Pas de fichier
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Pas de fichier
Edge:
======
Edge HomeButtonPage: HKU\S-1-5-21-1164751834-1112494924-2906029714-1001 -> hxxp://google.ch/
Edge Extension: (AdBlock) -> EdgeExtension_BetaFishAdBlock_c1wakc4j0nefm => C:\Program Files\WindowsApps\BetaFish.AdBlock_1.11.0.0_neutral__c1wakc4j0nefm [2017-02-17]
Edge Extension: (Pin It Button) -> EdgeExtension_PinterestPinItButton_xnkra2w3aecd0 => C:\Program Files\WindowsApps\Pinterest.PinItButton_1.39.5.0_neutral__xnkra2w3aecd0 [2016-12-17]
Edge Extension: (Translator For Microsoft Edge) -> MicrosoftTranslate_MicrosoftTranslatorforMicrosoftEdge_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.TranslatorforMicrosoftEdge_0.91.16.0_neutral__8wekyb3d8bbwe [2016-12-17]
FireFox:
========
FF ProfilePath: C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079 [2017-03-06]
FF Homepage: Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079 -> hxxps://www.google.ch/
FF Extension: (Pin It button) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\Extensions\jid1-YcMV6ngYmQRA2w@jetpack.xpi [2017-03-06]
FF Extension: (S3.Google Translator) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\Extensions\s3google@translator.xpi [2017-03-04]
FF Extension: (Adblock Plus) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-03-02]
FF Extension: (SHA-1 deprecation staged rollout) - C:\Users\rever\AppData\Roaming\Mozilla\Firefox\Profiles\dnj6vgg2.default-1485540091079\features\{0ddc12a8-95b6-46f7-86c6-2501c2371a80}\disableSHA1rollout@mozilla.org.xpi [2017-03-03]
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\Firefox\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF HKU\S-1-5-21-1164751834-1112494924-2906029714-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\rever\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\rever\AppData\Roaming\IDM\idmmzcc5 [2017-03-06] [non signé]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-02-14] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-02-14] ()
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google, Inc.)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-23] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-01-23] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)
Chrome:
=======
CHR Profile: C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default [2017-03-06]
CHR Extension: (Google Slides) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-01-23]
CHR Extension: (Google Docs) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-01-23]
CHR Extension: (Google Drive) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-01-23]
CHR Extension: (YouTube) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-01-23]
CHR Extension: (Google Sheets) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-01-23]
CHR Extension: (Google Docs hors connexion) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-01-24]
CHR Extension: (IDM Integration Module) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-02-07]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-23]
CHR Extension: (Gmail) - C:\Users\rever\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-01-23]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-02-13]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2227312 2017-01-19] (Adobe Systems, Incorporated)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-30] (Acer Incorporated)
S2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "%ProgramData%\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugin"
S4 ZAMSvc; "C:\Program Files (x86)\Zemana AntiLogger\ZAM.exe" /service [X]
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 anvsnddrv; C:\WINDOWS\system32\drivers\anvsnddrv.sys [34416 2016-03-24] (AnvSoft Inc.)
S3 keycrypt; C:\WINDOWS\System32\DRIVERS\KeyCrypt64.sys [159360 2016-08-10] (Zemana Ltd.)
R3 MEIx64; C:\WINDOWS\System32\drivers\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R2 npf; C:\WINDOWS\System32\drivers\npf.sys [36600 2014-04-18] (Riverbed Technology, Inc.)
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nvaewu.inf_amd64_8baa9d083edacf87\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
R3 RTSUER; C:\WINDOWS\system32\Drivers\RtsUer.sys [402960 2015-05-14] (Realsil Semiconductor Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
R1 ZAM_Guard; C:\WINDOWS\System32\drivers\zamguard64.sys [203680 2017-01-03] (Zemana Ltd.)
S3 IntcAzAudAddService; \SystemRoot\system32\drivers\RTKVHD64.sys [X]
S1 ZAM; \??\C:\WINDOWS\System32\drivers\zam64.sys [X]
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-06 18:09 - 2017-03-06 18:10 - 00016316 _____ C:\Users\rever\Desktop\FRST.txt
2017-03-06 18:05 - 2017-03-06 18:09 - 00000000 ____D C:\FRST
2017-03-06 18:02 - 2017-03-06 18:02 - 02423808 _____ (Farbar) C:\Users\rever\Desktop\FRST64.exe
2017-03-06 17:12 - 2017-03-06 17:20 - 905986974 ____R C:\Users\rever\Downloads\La nuit de Varennes .Ettore Scola.1981.MULTI.HDRip.1080p.H264.AAC.CUSTOM-Candia06 .mkv
2017-03-06 17:11 - 2017-03-06 18:04 - 00000000 ____D C:\Users\rever\AppData\LocalLow\uTorrent
2017-03-06 17:11 - 2017-03-06 17:11 - 00397187 _____ C:\Users\rever\Downloads\La nuit de Varennes .Ettore Scola.1981.MULTI.HDRip.1080p.H264.AAC.CUSTOM-Candia06 .mkv.torrent
2017-03-06 16:48 - 2017-03-06 16:48 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636244156911336473
2017-03-06 16:34 - 2017-03-06 16:34 - 00000240 _____ C:\Users\rever\.swfinfo
2017-03-06 16:28 - 2017-03-06 17:11 - 00000000 ____D C:\Users\rever\Documents\VSO Downloader
2017-03-06 16:28 - 2017-03-06 16:31 - 00000000 ____D C:\ProgramData\VSO
2017-03-06 16:28 - 2017-03-06 16:28 - 00001317 _____ C:\Users\rever\Desktop\VSO Downloader 5.lnk
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\Users\rever\AppData\Roaming\VSO
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VSO
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\Program Files\WinPcap
2017-03-06 16:28 - 2017-03-06 16:28 - 00000000 ____D C:\Program Files (x86)\VSO
2017-03-06 16:26 - 2017-03-06 16:26 - 00014468 _____ C:\Users\rever\Downloads\VSO Downloader Ultimate 5.0.1.26.torrent
2017-03-06 16:26 - 2017-03-06 16:26 - 00000000 ____D C:\Users\rever\Downloads\VSO Downloader Ultimate 5.0.1.26
2017-03-06 15:36 - 2017-03-06 15:36 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636244113763690250
2017-03-06 15:19 - 2017-03-06 15:25 - 723627725 _____ C:\Users\rever\Downloads\MEN - Undercover Stripper Part 1 - Manuel Skye, Skyy Knox.mp4
2017-03-06 15:18 - 2017-03-06 15:18 - 00014153 _____ C:\Users\rever\Downloads\[gay-torrents.org] MEN - Undercover Stripper Part 1 - Manuel Skye, Skyy Knox.torrent
2017-03-06 15:09 - 2017-03-06 15:09 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636244097838167364
2017-03-06 15:05 - 2017-03-06 15:05 - 24097975 _____ C:\Users\rever\Desktop\Sheila - Quel tempérament de feu (1977).mp4
2017-03-06 13:38 - 2017-03-06 13:39 - 00000000 ____D C:\Users\rever\Downloads\Taboo.UK.S01E07.FASTSUB.VOSTFR.720p.HDTV.x264.AC3-GOBO2S
2017-03-06 13:38 - 2017-03-06 13:38 - 00018859 _____ C:\Users\rever\Downloads\Taboo.UK.S01E07.FASTSUB.VOSTFR.720p.HDTV.x264.AC3-GOBO2S.torrent
2017-03-05 02:42 - 2017-03-05 02:46 - 551578600 ____R C:\Users\rever\Downloads\Gianni Maggio and Italo.mp4
2017-03-05 02:42 - 2017-03-05 02:42 - 00010839 _____ C:\Users\rever\Downloads\[gay-torrents.org] Tim Tales - Gianni Maggio and Italo.torrent
2017-03-05 01:36 - 2017-03-05 01:52 - 00000000 ____D C:\Users\rever\Downloads\MyStraightBuddy.com Siterip
2017-03-05 01:33 - 2017-03-05 01:33 - 00469880 _____ C:\Users\rever\Downloads\MyStraightBuddy Complete HD SiteRip (183 Vids) (720p).torrent
2017-03-04 23:32 - 2017-03-04 23:32 - 00380661 _____ C:\Users\rever\Downloads\Naked Kombat Collection (1).torrent
2017-03-04 23:21 - 2017-03-04 23:21 - 00380661 _____ C:\Users\rever\Downloads\Naked Kombat Collection.torrent
2017-03-04 18:42 - 2017-03-04 18:42 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242497417175754
2017-03-04 16:32 - 2017-03-05 02:15 - 541569008 ____R C:\Users\rever\Downloads\EBD-JayAlexander-BennettAnthony-540-SD.mp4
2017-03-04 16:32 - 2017-03-04 16:32 - 00010701 _____ C:\Users\rever\Downloads\I Need Big Cock - Jay Alexander & Bennett Anthony.torrent
2017-03-04 15:51 - 2017-03-04 15:51 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242394781968505
2017-03-04 14:42 - 2017-03-04 14:42 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242353620060416
2017-03-04 13:28 - 2017-03-04 13:35 - 1518637897 _____ C:\Users\rever\Downloads\MEN - Dad Group Part 1 - Connor Maguire, Jake Ashford (1080p).mp4
2017-03-04 12:47 - 2017-03-04 12:47 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242284258466936
2017-03-04 12:23 - 2017-03-04 12:23 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636242269922872097
2017-03-04 11:27 - 2017-03-04 11:30 - 472086717 _____ C:\Users\rever\Downloads\FuckerMate - Gianni Maggio and Louis Ricaute Horse Riding.mp4
2017-03-04 08:28 - 2017-03-04 08:38 - 1463573797 ____R C:\Users\rever\Downloads\Raging Stallion - Wasteland - Bruno Bernal, Bruce Beckham.mp4
2017-03-04 06:50 - 2017-03-04 06:50 - 00001142 _____ C:\Users\Public\Desktop\FastStone Image Viewer.lnk
2017-03-04 06:50 - 2017-03-04 06:50 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Image Viewer
2017-03-04 06:50 - 2017-03-04 06:50 - 00000000 ____D C:\Program Files (x86)\FastStone Image Viewer
2017-03-04 06:01 - 2017-03-04 07:34 - 1932553065 ____R C:\Users\rever\Downloads\The Making of the Warwick Rowers 2016 Calendar - England Film.mp4
2017-03-04 06:00 - 2017-03-04 06:00 - 00018777 _____ C:\Users\rever\Downloads\[gay-torrents.org] The Making of the Warwick Rowers 2016 Calendar - England Film.torrent
2017-03-04 04:28 - 2017-03-04 04:28 - 00000000 ____D C:\Users\rever\AppData\Local\NVIDIA Corporation
2017-03-04 01:43 - 2017-03-04 01:43 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241886039200045
2017-03-04 01:11 - 2017-03-04 01:11 - 00000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2017-03-03 22:04 - 2017-03-03 22:04 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241754903681773
2017-03-03 21:58 - 2017-03-03 22:07 - 1041977097 _____ C:\Users\rever\Downloads\RagingStallion - High n' Tight - Bruno Bernal & Ryan Cruz.mp4
2017-03-03 21:11 - 2017-03-04 20:11 - 00000000 ____D C:\WINDOWS\Minidump
2017-03-03 21:09 - 2017-03-03 21:08 - 00372736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NVUNINST.EXE
2017-03-03 21:08 - 2017-03-03 21:08 - 00000000 ____D C:\Program Files (x86)\NVIDIA nTune Performance Application
2017-03-03 18:40 - 2017-03-03 18:40 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241632493235881
2017-03-03 18:19 - 2017-03-03 18:19 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241619930446884
2017-03-03 17:51 - 2017-03-03 17:51 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636241603196134311
2017-03-03 17:35 - 2017-03-03 17:38 - 877563511 _____ C:\Users\rever\Downloads\[Hot House] Dirty Work - Jimmy Durano & Ace Era.mp4
2017-03-03 17:27 - 2017-03-03 17:27 - 00000000 ____D C:\Users\rever\Downloads\9
2017-03-03 16:48 - 2017-03-04 09:25 - 00000000 ____D C:\Users\rever\Documents\Snagit
2017-03-03 16:47 - 2017-03-04 09:36 - 00000000 ____D C:\Users\rever\AppData\Local\TechSmith
2017-03-03 16:47 - 2017-03-04 09:36 - 00000000 ____D C:\ProgramData\TechSmith
2017-03-03 16:44 - 2017-03-03 16:44 - 00000000 ____D C:\Users\rever\Downloads\Snagit 13
2017-03-03 16:41 - 2017-03-03 16:42 - 00000000 ____D C:\Users\rever\Downloads\TechSmith Snagit v13.1.1.7662
2017-03-03 15:03 - 2017-03-03 15:05 - 1650678391 _____ C:\Users\rever\Downloads\Next Door Originals - 20170303 The Talented Mr Bubbles (Mark Long, Ty Thomas) [1080p].mp4
2017-03-03 14:51 - 2017-03-03 21:41 - 00000000 ____D C:\Users\rever\Desktop\Fichier inutilisé (CU)
2017-03-03 14:51 - 2017-03-03 18:54 - 00000000 ____D C:\Users\Public\Desktop\Raccourci inutilisé (AU)
2017-03-03 14:51 - 2017-03-03 14:51 - 00000000 ____D C:\Users\rever\Desktop\Raccourci inutilisé (CU)
2017-03-03 14:51 - 2017-03-03 14:51 - 00000000 ____D C:\Users\Public\Desktop\Fichier inutilisé (AU)
2017-03-03 14:47 - 2017-03-03 14:47 - 04031440 _____ C:\Users\rever\Desktop\adwcleaner_6.044.exe
2017-03-02 10:08 - 2017-03-02 10:19 - 798897917 ____R C:\Users\rever\Downloads\HardBritLads-JordanFox-MattRichie-1080p.mp4
2017-03-02 08:45 - 2017-03-02 08:45 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636240411506276400
2017-03-02 08:30 - 2017-03-02 08:33 - 676695495 _____ C:\Users\rever\Downloads\TitanMen - 2 Men Kiss - Jason Vario fucks Lorenzo Flexx.mp4
2017-03-02 06:42 - 2017-03-02 06:42 - 00000000 ____D C:\Users\rever\Downloads\sean cody 1810 dominic 3
2017-03-02 06:20 - 2017-03-02 06:29 - 849226220 _____ C:\Users\rever\Downloads\TM-LorenzoFlexx-JasonVario.mp4
2017-03-02 02:33 - 2017-03-02 02:39 - 00000000 ____D C:\Users\rever\AppData\Local\Mozilla
2017-03-02 02:32 - 2017-03-03 14:54 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-03-02 02:32 - 2017-03-02 02:32 - 00001196 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-03-02 00:34 - 2017-03-02 00:35 - 401257606 _____ C:\Users\rever\Downloads\Raw Fuck Club - Loaded Up At The Gym - Owen Powers & Alejandro Fusco.mp4
2017-03-01 22:26 - 2017-03-01 22:27 - 800487229 _____ C:\Users\rever\Downloads\[Tim Tales] Ridder Rivera Barebacks Dano.mp4
2017-03-01 19:56 - 2017-03-01 19:56 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636239950087629862
2017-03-01 19:53 - 2017-03-01 20:02 - 450036931 _____ C:\Users\rever\Downloads\[Tim Tales] Caio Fucks Jonathan.mp4
2017-03-01 19:47 - 2017-03-01 19:49 - 233734112 _____ C:\Users\rever\Downloads\[Ridleydovarez] Abused, beaten, fucked and raped (Jordan Fox).mp4
2017-03-01 19:39 - 2017-03-01 19:39 - 00099460 _____ C:\Users\rever\Desktop\SFTGC.txt
2017-03-01 12:50 - 2017-03-01 12:52 - 130971586 _____ C:\Users\rever\Downloads\The Best Flex - Muscle Diamond Bedroom Flexing.mp4
2017-03-01 12:28 - 2017-03-01 12:28 - 00000000 ____D C:\Users\rever\Downloads\Universal Viewer Pro 6.5.6.2 + Serial
2017-03-01 08:34 - 2017-03-01 08:35 - 41828732 ____R C:\Users\rever\Downloads\PlanB-2.mp4
2017-03-01 04:46 - 2017-03-01 04:51 - 00000000 ____D C:\Users\rever\AppData\Roaming\ATViewer
2017-03-01 04:45 - 2017-03-01 04:45 - 00000000 ____D C:\Users\rever\AppData\Roaming\WinRAR
2017-03-01 04:44 - 2017-03-01 04:44 - 00001028 _____ C:\Users\Public\Desktop\WinRAR.lnk
2017-03-01 04:44 - 2017-03-01 04:44 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-01 04:44 - 2017-03-01 04:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-03-01 04:44 - 2017-03-01 04:44 - 00000000 ____D C:\Program Files\WinRAR
2017-03-01 04:24 - 2012-06-13 12:58 - 00000000 ____D C:\Users\rever\Desktop\Plugins
2017-03-01 03:26 - 2017-03-01 03:41 - 2174473384 _____ C:\Users\rever\Downloads\HEAVENLY - Pleasure Productions.mp4
2017-02-28 23:54 - 2017-03-01 00:50 - 3032484657 _____ C:\Users\rever\Downloads\Devon S (Shoot 02).mp4
2017-02-28 22:20 - 2017-02-28 22:20 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636239172038728988
2017-02-28 21:55 - 2017-02-28 21:57 - 527157066 _____ C:\Users\rever\Downloads\Jake Cruise - Leo Giamani Massaged (Oct 31, 08).wmv
2017-02-28 19:57 - 2017-02-28 19:57 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636239086416716187
2017-02-28 16:27 - 2017-02-28 16:32 - 579465361 ____R C:\Users\rever\Downloads\Muscle Hunks - Claude Carroll Solo.mp4
2017-02-28 07:29 - 2017-02-28 07:29 - 02041535 _____ C:\Users\rever\Desktop\FRATMEN™ _ FRATPAD Archive_ SPENCER on 2008_02_16.mkv
2017-02-28 06:45 - 2017-02-28 17:36 - 2685104966 _____ C:\Users\rever\Downloads\♺ TREASURE ISLAN MEDIA BBreed n Seed n Feed CUMpilation_vol 1.mov
2017-02-28 03:47 - 2017-02-28 03:47 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238504613312855
2017-02-28 02:27 - 2017-02-28 20:59 - 00000000 ____D C:\Program Files (x86)\DAZ 3D
2017-02-28 01:00 - 2017-02-28 02:31 - 00000000 ____D C:\Users\Public\Documents\My DAZ 3D Library
2017-02-28 01:00 - 2017-02-28 01:00 - 00000000 ____D C:\Users\rever\Documents\DAZ 3D
2017-02-28 00:57 - 2017-02-28 00:57 - 00000000 ____D C:\ProgramData\DAZ 3D
2017-02-28 00:55 - 2017-02-28 01:00 - 00000000 ____D C:\Users\rever\AppData\Roaming\DAZ 3D
2017-02-27 23:48 - 2017-02-27 23:49 - 00000000 ____D C:\ProgramData\Temp
2017-02-27 23:40 - 2017-02-28 21:01 - 00000000 ____D C:\Users\rever\AppData\Roaming\Notepad++
2017-02-27 23:40 - 2017-02-28 21:01 - 00000000 ____D C:\Program Files (x86)\Notepad++
2017-02-27 23:23 - 2017-02-27 23:53 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink WaveEditor 2
2017-02-27 23:23 - 2017-02-27 23:23 - 00000000 ____D C:\Users\rever\AppData\Roaming\proDAD
2017-02-27 23:23 - 2017-02-27 23:23 - 00000000 ____D C:\ProgramData\proDAD
2017-02-27 23:23 - 2017-02-27 23:23 - 00000000 ____D C:\Program Files\Common Files\NewBlue
2017-02-27 23:23 - 2017-02-27 23:06 - 00607256 _____ (proDAD GmbH) C:\WINDOWS\system32\prodad-codec.dll
2017-02-27 23:23 - 2017-02-27 23:04 - 00376344 _____ (proDAD GmbH) C:\WINDOWS\system32\proDAD-PA-Support.dll
2017-02-27 23:22 - 2017-03-01 22:22 - 00000000 ____D C:\Program Files (x86)\NewBlue
2017-02-27 23:20 - 2017-03-03 21:33 - 00000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2017-02-27 23:20 - 2017-02-27 23:48 - 00000000 ____D C:\ProgramData\install_backup
2017-02-27 23:20 - 2017-02-27 23:20 - 00000000 ____D C:\Users\Public\Cyberlink
2017-02-27 23:19 - 2017-02-27 23:49 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-02-27 23:19 - 2017-02-27 23:48 - 00000000 ____D C:\ProgramData\CLSK
2017-02-27 23:19 - 2017-02-27 23:23 - 00000000 ____D C:\ProgramData\install_clap
2017-02-27 23:00 - 2017-03-06 14:18 - 00000000 ____D C:\Users\rever\Downloads\CyberLink PowerDirector Ultimate 15 Suite
2017-02-27 20:33 - 2017-02-27 20:33 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238244312840294
2017-02-27 20:25 - 2017-02-27 20:25 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238239576335624
2017-02-27 20:13 - 2017-02-27 20:13 - 00000000 ____D C:\Users\rever\AppData\Roaming\Bandicam Company
2017-02-27 20:09 - 2017-02-27 20:15 - 00000000 ____D C:\Program Files (x86)\Bandicam
2017-02-27 20:09 - 2017-02-27 20:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bandicam
2017-02-27 20:09 - 2017-02-27 20:09 - 00000000 ____D C:\Program Files (x86)\BandiMPEG1
2017-02-27 18:36 - 2017-02-27 18:36 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238173613573309
2017-02-27 17:52 - 2017-02-27 17:52 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238147267937185
2017-02-27 17:21 - 2017-02-27 17:21 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636238128636320837
2017-02-27 16:46 - 2017-02-27 16:51 - 00000000 ____D C:\Users\rever\Downloads\Lucas Entertainment - A Vito Gallo Collection
2017-02-25 21:23 - 2017-02-25 21:23 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636236545825821063
2017-02-25 11:35 - 2017-02-25 11:35 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636236193437600224
2017-02-25 06:35 - 2017-02-25 06:35 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636236013534579789
2017-02-25 04:18 - 2017-02-25 04:18 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235931055227546
2017-02-25 02:49 - 2017-02-25 02:49 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235877709867746
2017-02-25 02:48 - 2017-02-25 02:48 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freemake
2017-02-25 02:48 - 2017-02-25 02:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freemake
2017-02-25 02:42 - 2017-02-25 02:48 - 00000000 ____D C:\Program Files (x86)\Freemake
2017-02-25 00:03 - 2017-02-25 00:03 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235777911642478
2017-02-24 21:01 - 2017-02-24 21:01 - 00000000 ____D C:\Users\rever\Downloads\MANTICIPATION
2017-02-24 18:19 - 2017-02-24 18:19 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235571894182862
2017-02-24 17:00 - 2017-02-24 17:00 - 00000000 ___HD C:\Users\rever\Documents\Freemake_do_not_remove_this_folder636235524120641681
2017-02-24 15:51 - 2017-03-04 11:36 - 00000000 ____D C:\Users\rever\Documents\Bandicam
2017-02-23 07:59 - 2017-02-23 07:59 - 00003584 _____ C:\Users\rever\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-23 07:10 - 2017-02-23 07:10 - 00000000 ____D C:\Users\rever\AppData\Local\.marble
2017-02-23 07:07 - 2017-02-23 07:07 - 00000000 ____D C:\Users\rever\AppData\Local\kxmlgui5
2017-02-23 07:05 - 2017-02-23 07:11 - 00019524 _____ C:\Users\rever\AppData\Local\digikamrc
2017-02-23 07:04 - 2017-02-23 07:04 - 00000000 ____D C:\Users\rever\AppData\Local\cache
2017-02-23 01:55 - 2017-02-25 03:14 - 00001256 _____ C:\Users\rever\Desktop\Windows 10 Manager.lnk
2017-02-23 01:55 - 2017-02-25 03:14 - 00001246 _____ C:\Users\rever\Desktop\1-Click Cleaner.lnk
2017-02-23 01:55 - 2017-02-23 01:55 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yamicsoft
2017-02-23 01:55 - 2017-02-23 01:55 - 00000000 ____D C:\Program Files\Yamicsoft
2017-02-22 05:22 - 2017-03-03 17:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-02-22 03:23 - 2017-02-22 03:23 - 00000000 ____D C:\Users\rever\Desktop\Data
2017-02-21 22:33 - 2017-02-21 22:33 - 00000000 ____D C:\Users\rever\Downloads\Yamicsoft Windows 10 Manager 2.0.5 Portable
2017-02-18 21:17 - 2017-02-18 21:17 - 00000000 ____D C:\Users\rever\AppData\Local\Apowersoft
2017-02-17 22:45 - 2017-03-06 15:12 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-17 22:25 - 2017-02-17 22:25 - 00000000 ____D C:\Users\rever\Intel
2017-02-17 18:45 - 2017-03-06 14:28 - 00002000 _____ C:\Users\rever\Desktop\ZHPCleaner.txt
2017-02-16 06:53 - 2017-03-03 17:13 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-02-16 06:32 - 2017-02-16 06:32 - 00000000 ____D C:\Program Files (x86)\Adware Removal Tool by TSA
2017-02-16 03:23 - 2017-02-16 03:33 - 972707671 ____R C:\Users\rever\Downloads\Brodie & Levi.mp4
2017-02-16 02:49 - 2017-03-06 17:54 - 00000000 ____D C:\Users\rever\AppData\Roaming\Anvsoft
2017-02-16 02:49 - 2017-02-16 02:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvsoft
2017-02-16 02:49 - 2017-02-16 02:49 - 00000000 ____D C:\Program Files (x86)\Anvsoft
2017-02-16 00:36 - 2017-03-04 20:13 - 00000000 ____D C:\Users\rever\AppData\Roaming\IDM
2017-02-16 00:34 - 2017-02-16 00:37 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-02-16 00:34 - 2017-02-16 00:34 - 00000000 ____D C:\Users\rever\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-02-16 00:34 - 2017-02-16 00:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-02-15 13:19 - 2017-02-15 14:51 - 00000000 ____D C:\Program Files\CCleaner
2017-02-15 13:19 - 2017-02-15 13:19 - 00002870 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2017-02-15 13:19 - 2017-02-15 13:19 - 00000827 _____ C:\Users\rever\Desktop\CCleaner.lnk
2017-02-15 13:19 - 2017-02-15 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-02-14 00:12 - 2017-03-06 14:20 - 00000879 _____ C:\Users\rever\Desktop\ZHPCleaner.lnk
2017-02-14 00:12 - 2017-02-14 00:12 - 02702848 _____ C:\Users\rever\Desktop\ZHPCleaner.exe
2017-02-13 18:14 - 2016-10-17 16:35 - 00223464 _____ (Tonec Inc.) C:\WINDOWS\system32\Drivers\idmwfp.sys
2017-02-13 15:38 - 2017-02-13 16:08 - 2648317683 ____R C:\Users\rever\Downloads\[MEN] [Drill My Hole] Hideous Color [Arpad Miklos and John Magnum] [1080p].mp4
2017-02-13 07:16 - 2017-02-13 07:16 - 00000000 ____D C:\Users\rever\Downloads\Falcon (FVP113) - CALIFORNIA KINGS
2017-02-13 03:01 - 2017-03-04 06:53 - 00000000 ____D C:\Users\rever\AppData\Roaming\FastStone
2017-02-13 03:01 - 2017-02-13 03:01 - 00000000 ____D C:\Users\rever\AppData\Local\FastStone
2017-02-12 19:54 - 2017-02-12 20:19 - 00000000 ___HD C:\adobeTemp
2017-02-12 13:08 - 2017-02-12 13:08 - 108504137 _____ C:\Users\rever\Desktop\Temperament de feu.wmv
2017-02-11 06:28 - 2017-02-12 18:13 - 00000000 ___HD C:\Program Files (x86)\InstallJammer Registry
2017-02-11 00:57 - 2017-02-17 14:48 - 00000000 ____D C:\Users\rever\Downloads\Adobe Photoshop Lightroom CC 6.8
2017-02-10 14:48 - 2017-02-10 14:48 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-02-10 14:48 - 2016-12-29 13:28 - 00133056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-02-10 14:48 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-02-10 14:48 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-02-10 14:48 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-02-10 14:48 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-02-08 02:30 - 2017-02-08 02:30 - 17836124 _____ C:\Users\rever\Downloads\Sheila You Light my fire Festivalbar Verone Rai Uno - vidéo Dailymotion.ts
2017-02-07 08:05 - 2017-02-17 21:42 - 00000000 ____D C:\WINDOWS\Microsoft Antimalware
2017-02-07 06:10 - 2017-02-07 06:10 - 01239752 _____ (Microsoft Corporation) C:\Users\rever\Desktop\wlsetup-web.exe
2017-02-06 21:49 - 2017-02-13 03:25 - 00063386 _____ C:\Users\rever\Documents\starburn.txt
2017-02-06 21:49 - 2017-02-06 21:49 - 00000000 ____D C:\Users\rever\AppData\Local\Wondershare
2017-02-06 21:49 - 2017-02-06 21:49 - 00000000 ____D C:\ProgramData\Wondershare
2017-02-06 21:48 - 2017-02-06 22:41 - 00000000 ____D C:\Users\rever\Documents\Wondershare Filmora
2017-02-04 17:11 - 2017-02-04 17:11 - 00000000 ____D C:\Program Files\Avidemux 2.6 - 64 bits
2017-02-04 16:05 - 2017-02-17 14:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avidemux (64 bits)
2017-02-04 12:07 - 2017-02-04 12:10 - 683952928 ____R C:\Users\rever\Downloads\Robbie [IslandStuds].mp4
2017-02-04 00:01 - 2017-02-04 00:01 - 00000000 ____D C:\Users\rever\.MCTranscodingSDK
2017-02-04 00:00 - 2017-02-04 00:01 - 00000000 ____D C:\Users\Public\Documents\Lightworks
2017-02-04 00:00 - 2017-02-04 00:00 - 00000000 ____D C:\ProgramData\Geevs
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-03-06 18:09 - 2017-01-11 12:26 - 00000000 ____D C:\Users\rever\AppData\LocalLow\Mozilla
2017-03-06 18:09 - 2017-01-03 21:40 - 00228223 _____ C:\WINDOWS\ZAM_Guard.krnl.trace
2017-03-06 18:09 - 2016-12-14 13:14 - 00000000 ____D C:\ProgramData\NVIDIA
2017-03-06 18:04 - 2017-01-31 01:18 - 00000000 ____D C:\Users\rever\AppData\Roaming\DMCache
2017-03-06 18:04 - 2016-12-14 17:00 - 00000000 ____D C:\Users\rever\AppData\Roaming\uTorrent
2017-03-06 18:04 - 2016-12-14 15:26 - 00000000 ____D C:\Users\rever\AppData\Local\Spotify
2017-03-06 18:01 - 2017-01-09 05:03 - 00000000 ____D C:\Users\rever\AppData\Local\CrashDumps
2017-03-06 17:34 - 2016-12-14 15:13 - 00000000 ____D C:\Users\rever\AppData\Roaming\avidemux
2017-03-06 17:32 - 2017-01-24 10:44 - 00000000 ____D C:\Users\rever\AppData\Roaming\vlc
2017-03-06 16:34 - 2016-12-14 13:20 - 00000000 ____D C:\Users\rever
2017-03-06 16:11 - 2016-12-14 20:36 - 00004178 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{9DB31290-AF51-4C9A-8B42-1A984439DA55}
2017-03-06 16:05 - 2016-12-14 15:25 - 00000000 ____D C:\Users\rever\AppData\Roaming\Spotify
2017-03-06 15:07 - 2016-12-14 13:20 - 00000000 ____D C:\Users\rever\AppData\Local\Packages
2017-03-06 15:07 - 2016-12-14 11:45 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-06 14:28 - 2016-12-14 16:34 - 00000000 ____D C:\Users\rever\AppData\Roaming\ZHP
2017-03-06 14:20 - 2016-12-14 16:11 - 00000000 ____D C:\AdwCleaner
2017-03-06 14:12 - 2016-12-14 22:02 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-03-05 16:03 - 2017-01-27 17:57 - 00000000 ____D C:\Users\rever\AppData\Local\ElevatedDiagnostics
2017-03-05 03:28 - 2017-02-01 00:18 - 00000000 ____D C:\Users\rever\Desktop\mecs1
2017-03-04 20:11 - 2016-12-14 11:44 - 00000000 ____D C:\WINDOWS\INF
2017-03-04 15:45 - 2016-12-14 15:25 - 00485032 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2017-03-04 15:41 - 2016-12-14 22:02 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-03-04 15:41 - 2016-12-14 11:31 - 00524288 _____ C:\WINDOWS\system32\config\BBI
2017-03-04 15:31 - 2016-12-15 12:29 - 02748416 _____ C:\Users\rever\ZHPCleaner.exe
2017-03-04 14:23 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\rescache
2017-03-04 09:35 - 2016-12-18 00:43 - 00000000 ____D C:\ProgramData\Package Cache
2017-03-04 05:04 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-03-04 04:26 - 2016-12-14 22:10 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-03-04 04:26 - 2016-12-14 22:10 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-03-03 21:41 - 2017-01-27 18:42 - 00290304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\subinacl.exe
2017-03-03 21:29 - 2016-12-23 18:35 - 00002938 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2017-03-03 20:30 - 2016-12-23 18:35 - 00003556 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:46 - 00003016 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00003142 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00003114 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00002996 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00002944 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 20:30 - 2016-12-18 00:45 - 00002902 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2017-03-03 17:11 - 2016-07-16 12:43 - 00471040 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnet.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00395264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnet.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplayx.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00068096 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnathlp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00061952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnathlp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00047104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpwsockx.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnsvr.exe
2017-03-03 17:11 - 2016-07-16 12:43 - 00025088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpmodemx.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00023040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnsvr.exe
2017-03-03 17:11 - 2016-07-16 12:43 - 00020992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dplaysvr.exe
2017-03-03 17:11 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhupnp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnhpast.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhupnp.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnhpast.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnlobby.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00006144 _____ (Microsoft Corporation) C:\WINDOWS\system32\dpnaddr.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnlobby.dll
2017-03-03 17:11 - 2016-07-16 12:43 - 00005120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dpnaddr.dll
2017-03-03 14:14 - 2017-01-08 11:47 - 00000000 ____D C:\Users\rever\AppData\LocalLow\Adobe
2017-03-03 14:14 - 2016-12-14 13:20 - 00000000 ____D C:\Users\rever\AppData\Roaming\Adobe
2017-03-02 02:33 - 2016-12-14 13:28 - 00000000 ____D C:\Users\rever\AppData\Roaming\Mozilla
2017-02-27 14:56 - 2016-12-21 19:48 - 00000000 ___HD C:\Users\rever\Desktop\.picasaoriginals
2017-02-25 02:49 - 2016-12-14 21:13 - 00000000 ____D C:\ProgramData\Freemake
2017-02-24 23:23 - 2016-12-21 18:02 - 00000000 ____D C:\oem
2017-02-24 23:02 - 2016-12-15 06:41 - 00000000 ____D C:\Users\rever\AppData\Roaming\dvdcss
2017-02-23 09:34 - 2016-12-14 19:59 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-02-23 09:32 - 2016-12-14 19:58 - 138020592 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-02-23 01:54 - 2017-01-03 22:22 - 00000000 ____D C:\Users\rever\AppData\Roaming\Yamicsoft
2017-02-23 00:41 - 2016-12-29 15:45 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-18 21:22 - 2016-12-15 01:57 - 00000000 ____D C:\Users\rever\AppData\Roaming\Apowersoft
2017-02-18 14:50 - 2016-12-14 16:36 - 00120071 _____ C:\Users\rever\Desktop\ZHPDiag.txt
2017-02-17 22:02 - 2016-12-14 11:45 - 00000155 _____ C:\WINDOWS\win.ini
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 __RSD C:\WINDOWS\Media
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\security
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\Registration
2017-02-17 21:42 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\Help
2017-02-15 23:42 - 2017-01-21 01:11 - 00001002 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-02-15 23:42 - 2016-12-14 22:02 - 00242632 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-14 18:34 - 2017-01-21 01:11 - 00003988 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-02-14 18:34 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-02-14 18:34 - 2016-12-14 11:45 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-02-12 20:24 - 2016-12-29 15:45 - 00000000 ____D C:\Program Files (x86)\Adobe
2017-02-11 07:02 - 2017-01-31 01:18 - 00000000 ____D C:\Users\rever\Downloads\Video
2017-02-10 22:40 - 2016-12-21 18:03 - 00000000 ____D C:\Users\rever\AppData\Local\Acer
2017-02-10 21:46 - 2017-01-08 11:29 - 00000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2017-02-10 21:18 - 2017-02-03 21:41 - 00001086 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2017-02-10 21:18 - 2017-02-03 21:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2017-02-08 05:19 - 2016-12-19 09:40 - 324695890 _____ C:\Users\rever\Downloads\SC-Marshall-Pierce.wmv
2017-02-08 05:12 - 2016-12-29 15:47 - 00000000 ____D C:\Users\rever\AppData\Roaming\NVIDIA
2017-02-07 07:48 - 2017-02-03 21:09 - 00000000 ____D C:\Program Files (x86)\Windows Live
2017-02-07 06:13 - 2016-12-14 13:23 - 00000000 ___RD C:\Users\rever\OneDrive
2017-02-06 23:07 - 2017-01-23 22:55 - 00002234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-06 20:48 - 2016-12-14 11:46 - 00835576 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2017-02-06 20:48 - 2016-12-14 11:46 - 00177656 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2017-02-06 16:55 - 2016-12-18 12:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\4K Download
2017-02-04 15:34 - 2016-12-21 18:02 - 00000000 ____D C:\Program Files (x86)\Acer
2017-02-04 15:33 - 2016-12-21 18:24 - 00000000 ____D C:\WINDOWS\System32\Tasks\CareCenter
2017-02-04 15:33 - 2016-12-21 18:02 - 00000000 ____D C:\ProgramData\acer
2017-02-04 13:34 - 2016-12-14 22:09 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-04 00:55 - 2017-01-14 21:16 - 00000000 ____D C:\Users\rever\.thumbnails
==================== Fichiers à la racine de certains dossiers =======
2017-02-23 07:59 - 2017-02-23 07:59 - 0003584 _____ () C:\Users\rever\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-02-23 07:05 - 2017-02-23 07:11 - 0019524 _____ () C:\Users\rever\AppData\Local\digikamrc
2017-01-29 09:53 - 2017-01-29 09:53 - 0007605 _____ () C:\Users\rever\AppData\Local\Resmon.ResmonCfg
2016-12-14 22:10 - 2016-12-14 22:10 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2017-02-01 15:10 - 2017-02-01 15:10 - 0004975 _____ () C:\ProgramData\kjiixkes.ghp
2017-02-01 15:10 - 2017-02-01 15:10 - 0000016 _____ () C:\ProgramData\mntemp
2016-12-23 18:35 - 2017-03-03 21:34 - 0002312 _____ () C:\ProgramData\NvTelemetryContainer.log
2016-12-23 18:35 - 2017-03-03 21:29 - 0002938 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
Fichiers à déplacer ou supprimer:
====================
C:\Users\rever\ZHPCleaner.exe
C:\Users\rever\ZHPDiag3.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-02-28 08:50
==================== Fin de FRST.txt ============================