cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 05-03-2017
Exécuté par Franck Kasperski (administrateur) sur FRANCK (06-03-2017 22:38:05)
Exécuté depuis C:\Users\Franck Kasperski\Desktop
Profils chargés: Franck Kasperski (Profils disponibles: Franck Kasperski)
Platform: Windows 8.1 Connected (Update) (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: IE)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe
(Intel(R) Corporation) C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QASvc.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\RMSvc.exe
(Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe
(WildTangent) C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Pokki) C:\Users\Franck Kasperski\AppData\Local\SweetLabs App Platform\Engine\ServiceHostAppUpdater.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAEvent.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMLockHandler.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Launch Manager\LMTray.exe
(Acer Incorporate) C:\Program Files\Acer\Acer Quick Access\QAMsg.exe
(Spotify Ltd) C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerTray.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerEvent.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Power Management\ePowerWinMonitor.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe
() C:\Program Files (x86)\Acer\abDocs\abDocsDllLoaderMonitor.exe
(Pokki) C:\Users\Franck Kasperski\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(Pokki) C:\Users\Franck Kasperski\AppData\Local\SweetLabs App Platform\Engine\ServiceHostApp.exe
(Pokki) C:\Users\Franck Kasperski\AppData\Local\SweetLabs App Platform\Engine\ServiceStartMenuIndexer.exe
(acer) C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FLA5971.tmp

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [13672304 2014-03-21] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9044392 2016-11-10] (AVAST Software)
HKU\S-1-5-21-948202746-3344393963-2635493155-1001\...\Run: [Spotify Web Helper] => C:\Program Files (x86)\Spotify\Data\SpotifyWebHelper.exe [1168896 2014-12-04] (Spotify Ltd)
HKU\S-1-5-21-948202746-3344393963-2635493155-1001\...\Run: [AcerCloud] => "C:\Program Files (x86)\Acer\Acer Portal\AcerPortal.exe" startup**************************************************************************************************************************************** (l'élément de données a 59 caractères en plus).
HKU\S-1-5-21-948202746-3344393963-2635493155-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27427808 2017-02-08] (Skype Technologies S.A.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-10-04] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-12-04]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{12BBD024-1A1A-474C-9435-1D7E55C0E7FA}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-948202746-3344393963-2635493155-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.bing.com/?pc=cosp&ptag=A9C7EDF55B3&form=CONMHP&conlogo=CT3210127
HKU\S-1-5-21-948202746-3344393963-2635493155-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer13.msn.com/?pc=ACJB
SearchScopes: HKLM -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://fr.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKLM-x32 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://fr.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
SearchScopes: HKU\S-1-5-21-948202746-3344393963-2635493155-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-948202746-3344393963-2635493155-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://www.bing.com/search?PC=WCUG&FORM=WCUGDF&q={searchTerms}
SearchScopes: HKU\S-1-5-21-948202746-3344393963-2635493155-1001 -> {AA9A4890-4262-4441-8977-E2FFCBFB706C} URL = hxxp://fr.yhs4.search.yahoo.com/yhs/search?hspart=acer&hsimp=yhs-acer_001&p={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\Office15\OCHelper.dll [2014-01-23] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-26] (AVAST Software)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office\Office15\GROOVEEX.DLL [2014-01-23] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\Office15\OCHelper.dll [2014-01-21] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\Office15\GROOVEEX.DLL [2014-01-21] (Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-01-23] (Microsoft Corporation)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-03-05]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-03-05]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2014-05-14] ()
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office15\NPSPWRAP.DLL [2014-01-21] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-17] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll [2015-08-04] ()
FF Plugin ProgramFiles/Appdata: C:\Program Files (x86)\mozilla firefox\plugins\npMeetingJoinPluginOC.dll [2014-01-21] (Microsoft Corporation)

Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxps://www.google.fr/
CHR StartupUrls: Default -> "hxxp://homepage-web.com/?s=acer&m=start"
CHR Profile: C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default [2017-03-05]
CHR Extension: (Google Slides) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-06-29]
CHR Extension: (Google Docs) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-06-29]
CHR Extension: (Google Drive) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-06-28]
CHR Extension: (YouTube) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-06-28]
CHR Extension: (Recherche Google) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-06-29]
CHR Extension: (Avast Online Security) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\daanglpcpkjjlkhcbladppjphglbigam [2016-10-03]
CHR Extension: (Avast SafePrice) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-10-03]
CHR Extension: (Google Sheets) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-06-29]
CHR Extension: (Google Docs hors connexion) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-04-27]
CHR Extension: (Avast Online Security) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-11-10]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-05]
CHR Extension: (Gmail) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-29]
CHR Extension: (Chrome Media Router) - C:\Users\Franck Kasperski\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-03-05]
CHR HKLM-x32\...\Chrome\Extension: [daanglpcpkjjlkhcbladppjphglbigam] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-10-04] (AVAST Software)
S2 BcmBtRSupport; C:\Windows\system32\BtwRSupportService.exe [2251992 2013-11-14] (Broadcom Corporation.)
R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2267352 2016-08-15] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Acer\Acer Power Management\ePowerSvc.exe [2573032 2014-06-12] (Acer Incorporated)
R2 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [349728 2015-08-04] (WildTangent)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-05-30] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; C:\Program Files\Intel\TXE Components\TCS\HeciServer.exe [733696 2013-07-01] (Intel(R) Corporation) [Fichier non signé]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\TXE Components\TCS\SocketHeciServer.exe [822232 2013-07-01] (Intel(R) Corporation)
R2 LMSvc; C:\Program Files\Acer\Acer Launch Manager\LMSvc.exe [466664 2014-06-10] (Acer Incorporate)
R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [458984 2014-06-26] (Acer Incorporate)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [254512 2012-04-24] ()
R3 RMSvc; C:\Program Files\Acer\Acer Quick Access\RMSvc.exe [449768 2014-06-26] (Acer Incorporate)
R3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [234240 2014-07-15] (acer)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366552 2015-07-07] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23824 2015-07-07] (Microsoft Corporation)
S3 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-10-04] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-10-04] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-10-04] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-10-04] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-10-04] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2017-03-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2017-03-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-10-04] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2017-03-06] (AVAST Software)
R3 bcbtums; C:\Windows\system32\drivers\bcbtums.sys [170712 2013-11-14] (Broadcom Corporation.)
R3 BCM43XX; C:\Windows\system32\DRIVERS\bcmwl63a.sys [7549616 2014-02-25] (Broadcom Corporation)
S3 GPIO; C:\Windows\System32\drivers\iaiogpioe.sys [31232 2013-11-11] (Intel Corporation)
R3 iaioi2c; C:\Windows\System32\drivers\iaioi2ce.sys [67584 2013-11-11] (Intel Corporation)
R3 LMDriver; C:\Windows\System32\drivers\LMDriver.sys [21360 2013-07-17] (Acer Incorporated)
R3 RadioShim; C:\Windows\System32\drivers\RadioShim.sys [14680 2013-07-17] (Acer Incorporated)
R3 RTSPER; C:\Windows\system32\DRIVERS\RtsPer.sys [461528 2013-12-20] (Realsil Semiconductor Corporation)
R3 SynRMIHID; C:\Windows\system32\DRIVERS\SynRMIHID.sys [42224 2014-02-19] (Synaptics Incorporated)
R3 TXEIx64; C:\Windows\System32\drivers\TXEIx64.sys [88592 2014-01-15] (Intel Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44560 2015-07-07] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [270168 2015-07-07] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114520 2015-07-07] (Microsoft Corporation)
S2 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-03-06 22:38 - 2017-03-06 22:38 - 00017601 _____ C:\Users\Franck Kasperski\Desktop\FRST.txt
2017-03-06 22:37 - 2017-03-06 22:37 - 02423808 _____ (Farbar) C:\Users\Franck Kasperski\Desktop\FRST64.exe
2017-03-06 19:57 - 2017-03-06 22:38 - 00000000 ____D C:\FRST
2017-03-05 18:40 - 2016-10-14 08:22 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABE5.tmp
2017-03-05 18:40 - 2016-10-04 08:22 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswAB33.tmp
2017-03-05 18:40 - 2016-10-04 08:22 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABD4.tmp
2017-03-05 18:40 - 2016-10-04 08:20 - 00163416 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABF6.tmp
2017-03-05 18:40 - 2016-10-04 08:20 - 00108816 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABC3.tmp
2017-03-05 18:40 - 2016-10-04 08:20 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABB1.tmp
2017-03-05 18:40 - 2016-10-04 08:20 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABD3.tmp
2017-03-05 18:40 - 2016-10-04 08:20 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswABC2.tmp
2017-03-05 18:40 - 2016-10-04 08:19 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswAB32.tmp
2017-03-05 18:38 - 2016-10-04 08:20 - 00391496 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-03-06 22:36 - 2015-03-04 16:07 - 00000000 ____D C:\Users\Franck Kasperski\AppData\Local\SweetLabs App Platform
2017-03-06 21:49 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2017-03-06 21:48 - 2013-08-22 16:20 - 00000000 ____D C:\Windows\CbsTemp
2017-03-06 21:05 - 2015-03-04 16:14 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-948202746-3344393963-2635493155-1001
2017-03-06 21:04 - 2015-03-04 16:21 - 00969184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-03-06 21:04 - 2015-03-04 16:21 - 00513632 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2017-03-06 21:04 - 2015-03-04 16:21 - 00293352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys
2017-03-06 20:52 - 2015-06-29 13:06 - 00002217 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-03-06 20:52 - 2015-06-29 13:06 - 00002205 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-03-06 20:11 - 2015-10-23 12:39 - 00000000 ___RD C:\Program Files (x86)\Skype
2017-03-06 20:11 - 2015-10-23 12:39 - 00000000 ____D C:\ProgramData\Skype
2017-03-06 19:56 - 2015-03-04 16:18 - 00003972 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{527B24A9-8E2F-4FFE-8322-180D8A7B94E1}
2017-03-06 19:53 - 2015-10-23 12:40 - 00000000 ____D C:\Users\Franck Kasperski\AppData\Roaming\Skype
2017-03-05 21:33 - 2016-12-19 11:10 - 00003190 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task v2
2017-03-05 21:33 - 2016-04-27 08:32 - 00002415 _____ C:\Users\Franck Kasperski\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive Entreprise.lnk
2017-03-05 21:33 - 2015-03-04 17:12 - 00003198 _____ C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-948202746-3344393963-2635493155-1001
2017-03-05 21:17 - 2015-03-04 16:14 - 00000000 ____D C:\Users\Franck Kasperski\AppData\Local\CrashDumps
2017-03-05 21:04 - 2016-08-17 09:15 - 00003912 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1467984774
2017-03-05 21:04 - 2016-07-08 14:33 - 00001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-03-05 21:04 - 2016-07-08 14:28 - 00001942 _____ C:\Users\Public\Desktop\Avast Antivirus Gratuit.lnk
2017-03-05 21:03 - 2015-07-17 11:13 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2017-03-05 18:38 - 2015-03-04 16:21 - 00513496 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys.148883065448406
2017-03-05 18:38 - 2015-03-04 16:21 - 00292704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys.148883065895308
2017-03-05 18:35 - 2015-03-04 16:21 - 00969560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys.148883064996803
2017-03-05 18:29 - 2015-03-04 16:07 - 00000000 ____D C:\Users\Franck Kasperski
2017-03-05 18:29 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-03-05 18:25 - 2015-12-14 11:13 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software
2017-03-05 18:25 - 2015-07-20 10:13 - 00000000 ____D C:\Users\Franck Kasperski\Documents\Fax courrier dossier
2017-03-05 18:25 - 2014-07-25 10:35 - 00000000 ____D C:\ProgramData\WildTangent
2017-03-05 18:25 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2017-03-05 18:25 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Macromed
2017-03-05 18:25 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\system32\Sysprep
2017-03-05 18:24 - 2015-12-11 09:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2017-03-05 18:16 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2017-03-05 18:07 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\registration
2017-03-05 18:00 - 2014-07-25 10:32 - 00000000 ____D C:\ProgramData\Package Cache
2017-02-27 09:39 - 2015-09-23 10:19 - 00000000 ____D C:\Users\Franck Kasperski\Documents\la famille , l'arbre
2017-02-06 20:41 - 2016-12-17 16:11 - 00835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-02-06 20:41 - 2016-12-17 16:11 - 00177656 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

==================== Fichiers à la racine de certains dossiers =======

2015-03-29 15:21 - 2015-03-29 15:21 - 0007605 _____ () C:\Users\Franck Kasperski\AppData\Local\Resmon.ResmonCfg
2014-12-04 01:31 - 2014-12-04 01:31 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Certains fichiers dans TEMP:
====================
2015-04-05 08:38 - 2014-06-19 17:42 - 7031360 _____ (Foxit Corporation) C:\Users\Franck Kasperski\AppData\Local\Temp\Foxit PhantomPDF Updater.exe
2016-03-12 08:53 - 2016-03-12 08:55 - 63142648 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1008.tmp.exe
2015-08-04 18:25 - 2015-08-04 18:26 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct10B.tmp.exe
2015-08-13 19:58 - 2015-08-13 19:58 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1235.tmp.exe
2015-07-31 09:29 - 2015-07-31 09:29 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct126A.tmp.exe
2015-08-07 08:58 - 2015-08-07 10:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1304.tmp.exe
2015-08-13 11:56 - 2015-08-13 11:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1478.tmp.exe
2015-08-12 08:31 - 2015-08-12 08:32 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct14A4.tmp.exe
2015-08-07 10:51 - 2015-08-07 10:51 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1503.tmp.exe
2015-08-14 09:45 - 2015-08-14 09:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct152B.tmp.exe
2015-08-13 11:49 - 2015-08-13 11:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1555.tmp.exe
2015-08-11 20:20 - 2015-08-11 20:20 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct156A.tmp.exe
2015-08-13 08:54 - 2015-08-13 08:54 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct157E.tmp.exe
2015-08-04 08:53 - 2015-08-04 08:53 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct165D.tmp.exe
2015-08-10 08:49 - 2015-08-10 08:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1695.tmp.exe
2015-08-10 09:02 - 2015-08-10 09:02 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1775.tmp.exe
2015-08-02 10:43 - 2015-08-02 10:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1860.tmp.exe
2015-08-12 11:19 - 2015-08-12 11:19 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1911.tmp.exe
2015-08-05 07:52 - 2015-08-05 07:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct197F.tmp.exe
2015-07-30 08:56 - 2015-07-30 08:56 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct19E8.tmp.exe
2015-08-12 11:11 - 2015-08-12 11:11 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1A7A.tmp.exe
2015-08-02 10:38 - 2015-08-02 10:38 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1AE9.tmp.exe
2015-08-12 09:03 - 2015-08-12 09:03 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1BB.tmp.exe
2015-08-13 09:29 - 2015-08-13 09:29 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1C0A.tmp.exe
2015-08-06 08:48 - 2015-08-06 08:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1C37.tmp.exe
2015-08-11 20:51 - 2015-08-11 20:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1CE0.tmp.exe
2015-08-06 11:01 - 2015-08-06 11:02 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1DBC.tmp.exe
2015-08-01 09:29 - 2015-08-01 09:30 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1DC4.tmp.exe
2015-08-11 09:20 - 2015-08-11 09:22 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1E2E.tmp.exe
2015-08-12 09:11 - 2015-08-12 09:11 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct1F63.tmp.exe
2015-08-13 09:15 - 2015-08-13 09:15 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct20EC.tmp.exe
2015-08-11 09:33 - 2015-08-11 09:33 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct21FD.tmp.exe
2015-08-03 16:02 - 2015-08-03 16:02 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct221D.tmp.exe
2015-08-13 19:53 - 2015-08-13 19:53 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct2383.tmp.exe
2015-08-06 10:56 - 2015-08-06 10:56 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct24C9.tmp.exe
2015-08-11 20:46 - 2015-08-11 20:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct260F.tmp.exe
2015-07-30 15:57 - 2015-07-30 15:57 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct268.tmp.exe
2015-04-05 08:25 - 2015-04-05 08:25 - 109032712 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct2693.tmp.exe
2015-07-29 10:50 - 2015-07-29 10:51 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct2708.tmp.exe
2015-08-04 08:35 - 2015-08-04 08:35 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct2767.tmp.exe
2015-08-06 18:33 - 2015-08-06 18:34 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct283E.tmp.exe
2015-08-03 10:02 - 2015-08-03 10:03 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct2A89.tmp.exe
2015-08-13 08:41 - 2015-08-13 08:41 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct2AE5.tmp.exe
2015-08-03 10:44 - 2015-08-03 10:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct303E.tmp.exe
2015-08-09 08:51 - 2015-08-09 08:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3123.tmp.exe
2015-08-11 20:33 - 2015-08-11 20:33 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct32FA.tmp.exe
2015-08-09 10:45 - 2015-08-09 10:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct332C.tmp.exe
2015-08-05 07:46 - 2015-08-05 07:47 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3443.tmp.exe
2015-08-11 20:14 - 2015-08-11 20:15 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3501.tmp.exe
2015-08-03 10:49 - 2015-08-03 10:50 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3517.tmp.exe
2015-07-30 15:51 - 2015-07-30 15:52 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3586.tmp.exe
2015-05-08 08:53 - 2015-05-08 08:55 - 107701776 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct35E9.tmp.exe
2015-07-30 16:02 - 2015-07-30 16:03 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3622.tmp.exe
2015-07-29 09:02 - 2015-07-29 09:02 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct365C.tmp.exe
2015-07-30 09:31 - 2015-07-30 09:32 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3738.tmp.exe
2015-08-07 10:54 - 2015-08-07 10:55 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3965.tmp.exe
2015-08-11 20:40 - 2015-08-11 20:41 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3B65.tmp.exe
2015-08-13 09:02 - 2015-08-13 09:02 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3C5D.tmp.exe
2015-08-03 09:57 - 2015-08-03 09:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3D20.tmp.exe
2015-08-03 10:31 - 2015-08-03 10:31 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3DC5.tmp.exe
2015-07-27 09:10 - 2015-07-27 09:10 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3DD6.tmp.exe
2015-07-31 09:18 - 2015-07-31 09:18 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3F08.tmp.exe
2015-08-13 12:04 - 2015-08-13 12:04 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3F7E.tmp.exe
2015-08-12 11:06 - 2015-08-12 11:06 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct3F8F.tmp.exe
2015-07-30 10:50 - 2015-07-30 10:50 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct405.tmp.exe
2015-08-03 13:48 - 2015-08-03 13:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct423E.tmp.exe
2015-07-30 10:52 - 2015-07-30 10:52 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct426C.tmp.exe
2015-08-07 08:46 - 2015-08-07 08:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct428B.tmp.exe
2015-08-02 10:51 - 2015-08-02 10:51 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4337.tmp.exe
2015-08-10 08:43 - 2015-08-10 08:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4425.tmp.exe
2015-08-13 08:49 - 2015-08-13 08:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct459F.tmp.exe
2015-08-04 09:01 - 2015-08-04 09:01 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4625.tmp.exe
2015-07-30 11:00 - 2015-07-30 11:00 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct46EE.tmp.exe
2015-08-13 09:09 - 2015-08-13 09:10 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct47B6.tmp.exe
2015-08-11 09:28 - 2015-08-11 09:28 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4869.tmp.exe
2015-08-12 11:26 - 2015-08-12 11:27 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4918.tmp.exe
2015-08-04 09:06 - 2015-08-04 09:07 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4959.tmp.exe
2015-08-04 08:48 - 2015-08-04 08:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct49AA.tmp.exe
2015-08-04 08:29 - 2015-08-04 08:30 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4AC6.tmp.exe
2015-08-13 11:43 - 2015-08-13 11:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4AD5.tmp.exe
2015-08-11 21:24 - 2015-08-11 21:25 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4AF3.tmp.exe
2015-08-04 18:20 - 2015-08-04 18:21 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4B9A.tmp.exe
2015-08-10 08:56 - 2015-08-10 08:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4BAD.tmp.exe
2015-08-03 16:15 - 2015-08-03 16:15 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4C01.tmp.exe
2015-08-04 18:14 - 2015-08-04 18:14 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4D1D.tmp.exe
2015-07-27 15:43 - 2015-07-27 15:43 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4D31.tmp.exe
2015-08-04 13:47 - 2015-08-04 13:47 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4E0B.tmp.exe
2015-08-07 08:53 - 2015-08-07 08:54 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4F1B.tmp.exe
2015-08-12 09:06 - 2015-08-12 09:06 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct4F36.tmp.exe
2015-10-06 17:42 - 2015-10-06 17:43 - 67197784 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct506B.tmp.exe
2015-08-06 08:43 - 2015-08-06 08:43 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct512A.tmp.exe
2015-08-02 10:35 - 2015-08-02 10:35 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct538B.tmp.exe
2015-08-03 13:42 - 2015-08-03 13:42 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct53F9.tmp.exe
2015-08-11 21:13 - 2015-08-11 21:14 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct541B.tmp.exe
2015-08-03 09:48 - 2015-08-03 09:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct54D.tmp.exe
2015-08-13 08:32 - 2015-08-13 08:33 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5661.tmp.exe
2015-07-28 14:16 - 2015-07-28 14:17 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5719.tmp.exe
2015-08-07 11:02 - 2015-08-08 13:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct57B8.tmp.exe
2015-08-13 08:38 - 2015-08-13 08:38 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct57FF.tmp.exe
2015-08-03 10:10 - 2015-08-03 10:11 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5939.tmp.exe
2015-08-13 11:51 - 2015-08-13 11:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5A05.tmp.exe
2015-04-15 08:51 - 2015-04-15 08:54 - 107667040 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5AEC.tmp.exe
2015-07-30 10:45 - 2015-07-30 10:45 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5AF7.tmp.exe
2015-08-11 20:57 - 2015-08-11 20:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5BC5.tmp.exe
2015-08-11 20:09 - 2015-08-11 20:09 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5BEA.tmp.exe
2015-07-30 13:38 - 2015-07-30 13:39 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5CE6.tmp.exe
2015-08-03 10:39 - 2015-08-03 10:39 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5D80.tmp.exe
2015-08-05 07:54 - 2015-08-05 07:54 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct5EAD.tmp.exe
2015-08-12 11:13 - 2015-08-12 11:14 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct60F0.tmp.exe
2015-08-12 08:50 - 2015-08-12 08:51 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6225.tmp.exe
2015-08-09 08:57 - 2015-08-09 08:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct623.tmp.exe
2015-08-04 08:24 - 2015-08-04 08:24 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct625D.tmp.exe
2015-07-31 09:23 - 2015-07-31 09:24 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6266.tmp.exe
2015-08-01 09:12 - 2015-08-01 09:12 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6308.tmp.exe
2015-08-03 10:55 - 2015-08-03 10:55 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct642E.tmp.exe
2015-08-03 09:52 - 2015-08-03 09:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6512.tmp.exe
2015-08-03 16:10 - 2015-08-03 16:10 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct652F.tmp.exe
2015-08-09 08:46 - 2015-08-09 08:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6616.tmp.exe
2015-07-29 18:17 - 2015-07-29 18:18 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct664E.tmp.exe
2015-08-25 08:33 - 2015-08-25 08:34 - 67202952 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct681C.tmp.exe
2015-08-11 09:36 - 2015-08-11 09:36 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6872.tmp.exe
2015-08-03 10:16 - 2015-08-03 10:16 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct690F.tmp.exe
2015-07-30 08:51 - 2015-07-30 08:51 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6949.tmp.exe
2015-08-12 08:42 - 2015-08-12 08:43 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct69A.tmp.exe
2015-08-02 09:03 - 2015-08-02 09:03 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6D75.tmp.exe
2015-08-01 09:06 - 2015-08-01 09:07 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct6DD3.tmp.exe
2015-08-04 08:43 - 2015-08-04 08:43 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7084.tmp.exe
2015-08-11 20:04 - 2015-08-11 20:04 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7093.tmp.exe
2015-08-03 10:05 - 2015-08-03 10:05 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct71CA.tmp.exe
2015-08-13 08:43 - 2015-08-13 08:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7293.tmp.exe
2016-04-15 08:11 - 2016-04-15 08:12 - 63707840 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct72B8.tmp.exe
2015-08-11 20:28 - 2015-08-11 20:28 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct73C5.tmp.exe
2015-08-13 09:21 - 2015-08-13 09:21 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7608.tmp.exe
2015-07-27 13:17 - 2015-07-27 13:17 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct772B.tmp.exe
2015-07-30 15:59 - 2015-07-30 16:00 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct782B.tmp.exe
2015-08-02 10:26 - 2015-08-02 10:26 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7860.tmp.exe
2015-08-10 09:04 - 2015-08-10 09:05 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct78A6.tmp.exe
2015-07-31 09:31 - 2015-07-31 09:31 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7AFD.tmp.exe
2015-08-11 20:35 - 2015-08-11 20:36 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7D58.tmp.exe
2015-08-11 19:04 - 2015-08-11 19:04 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7E1C.tmp.exe
2015-08-03 10:26 - 2015-08-03 10:26 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7E41.tmp.exe
2015-08-13 19:55 - 2015-08-13 19:56 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7E7A.tmp.exe
2015-08-12 09:17 - 2015-08-12 09:17 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7E92.tmp.exe
2015-08-02 10:46 - 2015-08-02 10:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct7EE0.tmp.exe
2015-12-14 09:35 - 2015-12-14 09:35 - 63066872 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct81C5.tmp.exe
2015-08-03 13:55 - 2015-08-03 13:56 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct82DF.tmp.exe
2015-08-12 09:00 - 2015-08-12 09:01 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct83BB.tmp.exe
2015-08-03 15:56 - 2015-08-03 15:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8401.tmp.exe
2015-08-13 08:57 - 2015-08-13 08:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct869D.tmp.exe
2015-07-26 12:59 - 2015-07-26 12:59 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8774.tmp.exe
2015-08-12 11:21 - 2015-08-12 11:22 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct87A0.tmp.exe
2015-08-04 08:56 - 2015-08-04 08:56 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct87F9.tmp.exe
2015-08-02 10:40 - 2015-08-02 10:41 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct887E.tmp.exe
2015-08-12 08:45 - 2015-08-12 08:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct88A1.tmp.exe
2015-08-04 09:12 - 2015-08-04 09:13 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8B9A.tmp.exe
2015-08-13 09:32 - 2015-08-13 09:32 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8BC2.tmp.exe
2015-08-06 11:04 - 2015-08-06 18:31 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8C0D.tmp.exe
2015-08-13 11:59 - 2015-08-13 11:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8C8D.tmp.exe
2015-08-13 09:04 - 2015-08-13 09:05 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct8E6B.tmp.exe
2015-08-11 21:11 - 2015-08-11 21:11 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct902.tmp.exe
2015-08-10 08:51 - 2015-08-10 08:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct90EC.tmp.exe
2015-08-07 08:48 - 2015-08-07 08:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct911E.tmp.exe
2015-08-11 21:03 - 2015-08-11 21:03 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9182.tmp.exe
2015-08-10 08:59 - 2015-08-10 08:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9280.tmp.exe
2015-08-11 21:08 - 2015-08-11 21:09 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9487.tmp.exe
2015-08-07 08:51 - 2015-08-07 08:51 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct952.tmp.exe
2015-08-03 16:04 - 2015-08-03 16:05 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct95AD.tmp.exe
2015-08-03 09:43 - 2015-08-03 09:43 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct96C.tmp.exe
2015-08-13 09:26 - 2015-08-13 09:27 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9715.tmp.exe
2015-08-04 08:37 - 2015-08-04 08:38 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct973E.tmp.exe
2015-08-09 08:43 - 2015-08-09 08:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct988.tmp.exe
2015-08-12 08:40 - 2015-08-12 08:40 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9888.tmp.exe
2015-08-03 10:33 - 2015-08-03 10:34 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct98FB.tmp.exe
2015-07-30 10:47 - 2015-07-30 10:47 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct998D.tmp.exe
2015-08-03 13:50 - 2015-08-03 13:50 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9A76.tmp.exe
2015-08-12 08:34 - 2015-08-12 08:34 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9AD2.tmp.exe
2015-08-11 21:21 - 2015-08-11 21:22 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9B63.tmp.exe
2015-08-12 11:08 - 2015-08-12 11:08 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9B90.tmp.exe
2015-08-12 11:03 - 2015-08-12 11:03 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9B98.tmp.exe
2015-08-13 11:46 - 2015-08-13 11:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9C85.tmp.exe
2015-08-11 09:30 - 2015-08-11 09:31 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9D94.tmp.exe
2015-08-07 08:43 - 2015-08-07 08:43 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9EC3.tmp.exe
2015-07-30 16:08 - 2015-07-30 16:09 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9F24.tmp.exe
2015-08-05 07:49 - 2015-08-05 07:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\oct9F58.tmp.exe
2015-08-11 20:22 - 2015-08-11 20:23 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA174.tmp.exe
2015-08-09 10:48 - 2015-08-09 10:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA2D5.tmp.exe
2015-10-31 11:22 - 2015-10-31 11:23 - 64809432 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA3DE.tmp.exe
2015-08-03 10:00 - 2016-07-25 08:25 - 63953600 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA3FE.tmp.exe
2015-07-30 15:54 - 2015-07-30 15:54 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA5DA.tmp.exe
2015-08-03 09:45 - 2015-08-03 09:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA72A.tmp.exe
2015-08-06 18:36 - 2015-08-06 18:37 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA8BF.tmp.exe
2015-08-14 08:06 - 2015-08-14 08:06 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octA9DA.tmp.exe
2015-08-14 08:03 - 2015-08-14 08:04 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octAA6.tmp.exe
2015-07-30 10:55 - 2015-07-30 10:55 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octAAB1.tmp.exe
2015-08-11 21:05 - 2015-08-11 21:06 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octAB0.tmp.exe
2015-07-30 08:54 - 2015-07-30 08:54 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octAB0B.tmp.exe
2015-07-20 07:55 - 2015-07-20 07:56 - 67099128 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octAC89.tmp.exe
2015-08-03 13:45 - 2015-08-03 13:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octAE93.tmp.exe
2015-08-02 09:00 - 2015-08-02 09:00 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB1EF.tmp.exe
2015-08-03 09:54 - 2015-08-03 09:55 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB29C.tmp.exe
2015-07-30 10:40 - 2015-07-30 10:40 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB370.tmp.exe
2015-12-01 14:51 - 2015-12-01 14:52 - 62760704 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB371.tmp.exe
2015-07-30 09:29 - 2015-07-30 09:29 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB456.tmp.exe
2015-08-01 09:27 - 2015-08-01 09:27 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB540.tmp.exe
2015-08-11 09:25 - 2015-08-11 09:25 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB5F6.tmp.exe
2015-08-03 10:47 - 2015-08-03 10:47 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB831.tmp.exe
2015-08-06 10:59 - 2015-08-06 10:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB8E2.tmp.exe
2015-08-14 08:40 - 2015-08-14 08:41 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB8E7.tmp.exe
2015-08-11 21:19 - 2015-08-11 21:19 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB90.tmp.exe
2015-08-11 20:17 - 2015-08-11 20:17 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB93B.tmp.exe
2015-08-14 08:44 - 2015-08-14 08:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octB9AE.tmp.exe
2015-08-04 18:23 - 2015-08-04 18:23 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBA48.tmp.exe
2015-08-02 08:51 - 2015-08-02 08:53 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBBC9.tmp.exe
2015-08-13 09:18 - 2015-08-13 09:18 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBC95.tmp.exe
2015-08-07 08:56 - 2015-08-07 08:56 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBCD0.tmp.exe
2015-07-31 09:21 - 2015-07-31 09:21 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBCD9.tmp.exe
2015-08-09 08:54 - 2015-08-09 08:54 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBD0D.tmp.exe
2015-08-11 20:49 - 2015-08-11 20:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBD35.tmp.exe
2015-08-10 08:46 - 2015-08-10 08:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octBD43.tmp.exe
2015-08-11 20:30 - 2015-08-11 20:30 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC17D.tmp.exe
2015-08-11 21:16 - 2015-08-11 21:16 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC1FE.tmp.exe
2015-08-04 08:32 - 2015-08-04 08:32 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC21F.tmp.exe
2015-08-03 10:36 - 2015-08-03 10:36 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC2D.tmp.exe
2015-08-04 08:51 - 2015-08-04 08:51 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC355.tmp.exe
2015-08-12 08:53 - 2015-08-12 08:53 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC376.tmp.exe
2016-07-29 08:56 - 2016-07-29 08:57 - 63953128 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC39A.tmp.exe
2015-08-03 15:59 - 2015-08-03 15:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC409.tmp.exe
2015-08-12 09:14 - 2015-08-12 09:14 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC53E.tmp.exe
2015-08-06 08:40 - 2015-08-06 08:40 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC56E.tmp.exe
2015-08-03 10:52 - 2015-08-03 10:53 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC5C5.tmp.exe
2015-08-06 08:45 - 2015-08-06 08:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC6BE.tmp.exe
2015-08-03 16:18 - 2015-08-04 08:22 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC6E4.tmp.exe
2015-08-13 11:54 - 2015-08-13 11:54 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC7B9.tmp.exe
2015-08-13 09:12 - 2015-08-13 09:13 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC817.tmp.exe
2015-08-13 08:51 - 2015-08-13 08:52 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC97B.tmp.exe
2016-03-09 08:31 - 2016-03-09 08:33 - 63143840 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octC98F.tmp.exe
2015-08-03 10:28 - 2015-08-03 10:29 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCB6D.tmp.exe
2015-08-11 20:43 - 2015-08-11 20:44 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCBE3.tmp.exe
2015-08-04 08:45 - 2015-08-04 08:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCC46.tmp.exe
2015-08-03 13:58 - 2015-08-03 13:58 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCDA9.tmp.exe
2015-07-31 09:26 - 2015-07-31 09:26 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCDAA.tmp.exe
2015-03-04 16:11 - 2015-03-04 16:12 - 135518328 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCE5B.tmp.exe
2015-08-12 11:16 - 2015-08-12 11:16 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCEA4.tmp.exe
2016-02-17 09:01 - 2016-02-17 09:02 - 63078856 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCF1E.tmp.exe
2015-08-02 10:32 - 2015-08-02 10:32 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octCFBF.tmp.exe
2015-08-13 08:59 - 2015-08-13 08:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD030.tmp.exe
2015-08-04 13:44 - 2015-08-04 13:45 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD068.tmp.exe
2015-08-11 19:06 - 2015-08-11 19:06 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD114.tmp.exe
2015-07-31 09:15 - 2015-07-31 09:15 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD183.tmp.exe
2015-08-05 07:57 - 2015-08-05 07:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD21E.tmp.exe
2015-08-04 08:58 - 2015-08-04 08:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD266.tmp.exe
2015-08-13 12:02 - 2015-08-13 12:02 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD275.tmp.exe
2015-08-12 08:28 - 2015-08-12 08:29 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD2B9.tmp.exe
2015-08-10 16:08 - 2015-08-10 16:09 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD2BE.tmp.exe
2015-08-04 09:04 - 2015-08-04 09:04 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD368.tmp.exe
2015-08-02 10:29 - 2015-08-02 10:29 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD470.tmp.exe
2015-08-12 09:08 - 2015-08-12 09:09 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD4D7.tmp.exe
2015-08-07 10:58 - 2015-08-07 10:59 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD4EB.tmp.exe
2015-08-03 10:41 - 2015-08-03 10:42 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD556.tmp.exe
2015-08-12 11:24 - 2015-08-12 11:24 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD559.tmp.exe
2015-08-01 09:09 - 2015-08-01 09:10 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD931.tmp.exe
2015-08-11 20:12 - 2015-08-11 20:12 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octD9CB.tmp.exe
2015-07-30 16:11 - 2015-07-30 16:11 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octDE37.tmp.exe
2015-08-01 09:15 - 2015-08-01 09:15 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octDEA7.tmp.exe
2015-08-13 09:34 - 2015-08-13 11:41 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octDF09.tmp.exe
2015-08-10 08:54 - 2015-08-10 08:54 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octDF50.tmp.exe
2015-08-12 08:56 - 2015-08-12 08:57 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octDF8B.tmp.exe
2015-08-09 08:49 - 2015-08-09 08:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE09B.tmp.exe
2015-08-04 09:09 - 2015-08-04 09:10 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE1B8.tmp.exe
2015-12-11 09:47 - 2015-12-11 09:48 - 62903592 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE3.tmp.exe
2015-08-11 20:54 - 2015-08-11 20:55 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE3A1.tmp.exe
2015-08-12 08:48 - 2015-08-12 08:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE3A8.tmp.exe
2015-08-13 16:27 - 2015-08-13 16:27 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE45A.tmp.exe
2015-08-04 08:40 - 2015-08-04 08:40 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE4F7.tmp.exe
2015-07-30 08:48 - 2015-07-30 08:49 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE628.tmp.exe
2015-08-13 08:35 - 2015-08-13 08:36 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE6C0.tmp.exe
2016-11-17 10:06 - 2016-11-17 10:06 - 64111920 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE77C.tmp.exe
2015-08-09 10:42 - 2015-08-09 10:43 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE787.tmp.exe
2016-09-20 08:26 - 2016-09-20 08:26 - 64108904 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE7DB.tmp.exe
2015-08-02 09:06 - 2015-08-02 10:22 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE80A.tmp.exe
2015-05-30 09:44 - 2015-05-30 09:44 - 67289280 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octE9F1.tmp.exe
2015-07-30 10:57 - 2015-07-30 10:58 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octEA80.tmp.exe
2015-08-03 10:23 - 2015-08-03 10:23 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octEB03.tmp.exe
2015-08-03 13:53 - 2015-08-03 13:53 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octEB2.tmp.exe
2015-07-28 08:38 - 2015-07-28 08:39 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octEEF8.tmp.exe
2015-08-11 20:38 - 2015-08-11 20:38 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF07B.tmp.exe
2015-08-03 10:08 - 2015-08-03 10:08 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF086.tmp.exe
2015-08-13 09:23 - 2015-08-13 09:24 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF169.tmp.exe
2015-08-03 16:12 - 2015-08-03 16:13 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF187.tmp.exe
2015-08-09 10:39 - 2015-08-09 10:40 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF32.tmp.exe
2015-08-04 08:27 - 2015-08-04 08:27 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF388.tmp.exe
2015-08-03 16:07 - 2015-08-03 16:07 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF45E.tmp.exe
2015-08-13 08:46 - 2015-08-13 08:46 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF556.tmp.exe
2015-08-04 18:17 - 2015-08-04 18:18 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF693.tmp.exe
2015-05-25 09:24 - 2015-05-25 09:24 - 66882760 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF765.tmp.exe
2015-08-08 13:47 - 2015-08-08 13:48 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octF920.tmp.exe
2015-07-30 10:42 - 2015-07-30 10:42 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFA52.tmp.exe
2015-07-30 10:37 - 2015-07-30 10:37 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFA99.tmp.exe
2015-08-11 19:01 - 2015-08-11 19:01 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFB49.tmp.exe
2015-08-11 21:00 - 2015-08-11 21:00 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFB66.tmp.exe
2015-08-02 10:48 - 2015-08-02 10:49 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFC44.tmp.exe
2015-08-11 20:06 - 2015-08-11 20:07 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFC7E.tmp.exe
2015-08-03 10:13 - 2015-08-03 10:13 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFD7E.tmp.exe
2015-07-30 16:05 - 2015-07-30 16:06 - 67096576 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFD7F.tmp.exe
2015-08-11 20:25 - 2015-08-11 20:25 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFDD3.tmp.exe
2015-08-13 09:07 - 2015-08-13 09:07 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFF0E.tmp.exe
2015-08-12 08:37 - 2015-08-12 08:37 - 67114248 _____ (SweetLabs,Inc.) C:\Users\Franck Kasperski\AppData\Local\Temp\octFF8E.tmp.exe
2015-12-27 17:16 - 2015-12-27 17:16 - 46863488 _____ (Skype Technologies S.A.) C:\Users\Franck Kasperski\AppData\Local\Temp\SkypeSetup.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2016-11-28 15:13

==================== Fin de FRST.txt ============================

Publicité


Signaler le contenu de ce document

Publicité