OTL logfile created on: 28/12/2016 23:27:49 - Run 1 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Bruno\Desktop 64bit- Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.11.9600.18537) Locale: 0000040c | Country: France | Language: FRA | Date Format: dd/MM/yyyy 7,93 Gb Total Physical Memory | 6,48 Gb Available Physical Memory | 81,70% Memory free 7,93 Gb Paging File | 6,59 Gb Available in Paging File | 83,08% Paging File free Paging file location(s): [binary data] %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86) Drive C: | 80,27 Gb Total Space | 33,26 Gb Free Space | 41,43% Space Free | Partition Type: NTFS Drive D: | 196,92 Gb Total Space | 36,41 Gb Free Space | 18,49% Space Free | Partition Type: NTFS Drive E: | 75,94 Gb Total Space | 29,38 Gb Free Space | 38,70% Space Free | Partition Type: NTFS Drive F: | 30,10 Gb Total Space | 7,96 Gb Free Space | 26,45% Space Free | Partition Type: NTFS Drive I: | 100,00 Gb Total Space | 49,48 Gb Free Space | 49,48% Space Free | Partition Type: NTFS Computer Name: BRUNO-PC | User Name: Bruno | Logged in as Administrator. Boot Mode: Normal | Scan Mode: All users Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days [color=#E56717]========== Processes (All) ==========[/color] PRC - [2016/12/28 23:25:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Bruno\Desktop\OTL.exe PRC - [2016/11/15 11:07:58 | 009,080,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe PRC - [2016/09/18 12:56:30 | 000,197,128 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2009/07/14 02:14:31 | 000,044,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rundll32.exe [color=#E56717]========== Modules (All) ==========[/color] MOD - [2016/12/28 23:25:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Bruno\Desktop\OTL.exe MOD - [2016/12/28 22:14:11 | 000,504,296 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\defs\16122801\aswCmnBS.dll MOD - [2016/12/28 22:14:11 | 000,463,248 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\defs\16122801\aswCmnIS.dll MOD - [2016/12/28 22:14:11 | 000,150,584 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\defs\16122801\aswCmnOS.dll MOD - [2016/12/28 22:14:11 | 000,067,408 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\defs\16122801\uiext.dll MOD - [2016/11/20 17:20:03 | 000,666,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rpcrt4.dll MOD - [2016/11/20 17:20:03 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sspicli.dll MOD - [2016/11/20 17:20:03 | 000,082,944 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bcrypt.dll MOD - [2016/11/20 17:19:57 | 000,254,464 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\schannel.dll MOD - [2016/11/20 17:19:57 | 000,022,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\secur32.dll MOD - [2016/11/20 17:19:53 | 000,223,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ncrypt.dll MOD - [2016/11/20 17:19:43 | 000,017,408 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\credssp.dll MOD - [2016/11/20 16:52:42 | 000,036,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptbase.dll MOD - [2016/11/15 11:07:58 | 009,080,768 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastui.exe MOD - [2016/11/12 19:20:21 | 002,287,616 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\iertutil.dll MOD - [2016/11/12 18:05:59 | 002,444,800 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wininet.dll MOD - [2016/11/12 18:02:30 | 001,312,256 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\urlmon.dll MOD - [2016/11/10 17:19:40 | 000,833,024 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\user32.dll MOD - [2016/11/06 17:16:46 | 000,312,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gdi32.dll MOD - [2016/11/02 16:16:31 | 000,025,600 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\lpk.dll MOD - [2016/10/27 16:20:17 | 000,627,712 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\usp10.dll MOD - [2016/10/13 19:35:11 | 004,376,160 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\commonres.dll MOD - [2016/10/11 16:21:52 | 001,314,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntdll.dll MOD - [2016/10/11 16:18:43 | 001,114,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\kernel32.dll MOD - [2016/10/11 16:18:43 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\KernelBase.dll MOD - [2016/10/11 16:18:40 | 000,043,008 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srclient.dll MOD - [2016/10/11 16:18:29 | 000,829,952 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msctf.dll MOD - [2016/10/11 16:18:02 | 000,644,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\advapi32.dll MOD - [2016/10/07 16:12:49 | 000,581,632 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleaut32.dll MOD - [2016/10/04 16:13:15 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wintrust.dll MOD - [2016/10/04 16:13:00 | 001,176,064 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\crypt32.dll MOD - [2016/09/26 19:41:26 | 001,060,176 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashbase.dll MOD - [2016/09/25 22:54:03 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll MOD - [2016/09/25 22:54:03 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll MOD - [2016/09/25 22:54:03 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll MOD - [2016/09/25 22:54:03 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll MOD - [2016/09/25 22:54:03 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll MOD - [2016/09/25 22:54:03 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll MOD - [2016/09/25 21:43:03 | 000,249,352 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\bcryptprimitives.dll MOD - [2016/09/25 21:43:03 | 000,090,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\olepro32.dll MOD - [2016/09/25 21:38:52 | 000,180,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shdocvw.dll MOD - [2016/09/25 21:38:52 | 000,061,440 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc.dll MOD - [2016/09/25 21:38:52 | 000,060,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samlib.dll MOD - [2016/09/25 21:38:52 | 000,043,520 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dhcpcsvc6.dll MOD - [2016/09/25 21:38:48 | 000,172,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\spp.dll MOD - [2016/09/25 21:38:30 | 000,295,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\apphelp.dll MOD - [2016/09/25 21:38:28 | 000,269,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dnsapi.dll MOD - [2016/09/25 21:38:28 | 000,233,472 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\oleacc.dll MOD - [2016/09/25 21:38:28 | 000,216,576 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\FWPUCLNT.DLL MOD - [2016/09/25 21:38:28 | 000,145,920 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cfgmgr32.dll MOD - [2016/09/25 21:38:28 | 000,119,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\imm32.dll MOD - [2016/09/25 21:38:28 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\devobj.dll MOD - [2016/09/25 21:38:28 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nlaapi.dll MOD - [2016/09/25 21:38:20 | 001,668,096 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\setupapi.dll MOD - [2016/09/25 21:38:20 | 001,127,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vssapi.dll MOD - [2016/09/25 21:38:20 | 000,245,760 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\uxtheme.dll MOD - [2016/09/25 21:38:20 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\vsstrace.dll MOD - [2016/09/25 21:38:20 | 000,016,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winnsi.dll MOD - [2016/09/25 21:38:20 | 000,008,704 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\nsi.dll MOD - [2016/09/25 21:38:19 | 000,316,416 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\webio.dll MOD - [2016/09/25 21:38:18 | 001,680,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.23403_none_2b180b30457f196c\comctl32.dll MOD - [2016/09/25 21:38:18 | 000,194,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winmm.dll MOD - [2016/09/25 21:38:17 | 000,522,240 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\clbcatq.dll MOD - [2016/09/25 21:38:17 | 000,486,400 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\comdlg32.dll MOD - [2016/09/25 21:38:16 | 000,067,584 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dwmapi.dll MOD - [2016/09/25 21:38:10 | 000,988,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\propsys.dll MOD - [2016/09/25 21:38:10 | 000,689,664 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msvcrt.dll MOD - [2016/09/25 21:38:10 | 000,320,512 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winspool.drv MOD - [2016/09/25 21:38:10 | 000,270,848 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\Wldap32.dll MOD - [2016/09/25 21:38:10 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\sechost.dll MOD - [2016/09/25 21:38:10 | 000,056,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netapi32.dll MOD - [2016/09/25 21:38:10 | 000,033,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msasn1.dll MOD - [2016/09/25 21:38:06 | 001,414,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ole32.dll MOD - [2016/09/25 21:38:06 | 000,350,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shlwapi.dll MOD - [2016/09/25 21:38:06 | 000,103,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\IPHLPAPI.DLL MOD - [2016/09/25 21:38:06 | 000,083,456 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\userenv.dll MOD - [2016/09/25 21:38:06 | 000,021,504 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\version.dll MOD - [2016/09/18 12:57:29 | 000,439,968 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashtask.dll MOD - [2016/09/18 12:57:27 | 003,748,584 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aavm4h.dll MOD - [2016/09/18 12:57:26 | 000,456,912 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswproperty.dll MOD - [2016/09/18 12:56:42 | 004,775,736 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.mfc_fcc99ee6193ebbca_14.0.24210.0_none_a338d8ea2df29efb\mfc140u.dll MOD - [2016/09/18 12:56:39 | 000,921,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\ucrtbase.dll MOD - [2016/09/18 12:56:39 | 000,440,120 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\msvcp140.dll MOD - [2016/09/18 12:56:39 | 000,083,784 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\vcruntime140.dll MOD - [2016/09/18 12:56:39 | 000,029,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-math-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,026,816 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-multibyte-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,024,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-string-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,024,768 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-stdio-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,023,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-runtime-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,022,720 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-convert-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,021,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-time-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,021,184 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-core-localization-l1-2-0.dll MOD - [2016/09/18 12:56:39 | 000,020,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-filesystem-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,019,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-heap-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,019,648 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-conio-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,019,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-utility-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,019,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-locale-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,019,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-crt-environment-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,019,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-core-synch-l1-2-0.dll MOD - [2016/09/18 12:56:39 | 000,019,136 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-core-processthreads-l1-1-1.dll MOD - [2016/09/18 12:56:39 | 000,018,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-core-timezone-l1-1-0.dll MOD - [2016/09/18 12:56:39 | 000,018,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-core-file-l2-1-0.dll MOD - [2016/09/18 12:56:39 | 000,018,624 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_avast.vc140.crt_fcc99ee6193ebbca_14.0.24210.0_none_9e58d6f8311e6fc8\api-ms-win-core-file-l1-2-0.dll MOD - [2016/09/18 12:56:33 | 001,354,928 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\AVAST Software\Avast\libeay32.dll MOD - [2016/09/18 12:56:33 | 000,310,744 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Program Files\AVAST Software\Avast\ssleay32.dll MOD - [2016/09/18 12:56:32 | 048,936,448 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\libcef.dll MOD - [2016/09/18 12:56:31 | 000,123,344 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\log.dll MOD - [2016/09/18 12:56:30 | 000,923,856 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswAux.dll MOD - [2016/09/18 12:56:30 | 000,755,176 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswData.dll MOD - [2016/09/18 12:56:30 | 000,630,952 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\CommChannel.dll MOD - [2016/09/18 12:56:30 | 000,597,584 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswSqLt.dll MOD - [2016/09/18 12:56:30 | 000,482,928 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\ffl2.dll MOD - [2016/09/18 12:56:30 | 000,435,616 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\1036\uiLangRes.dll MOD - [2016/09/18 12:56:30 | 000,403,336 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCmnIS.dll MOD - [2016/09/18 12:56:30 | 000,379,032 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\ashTaskEx.dll MOD - [2016/09/18 12:56:30 | 000,377,376 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCmnBS.dll MOD - [2016/09/18 12:56:30 | 000,333,704 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AavmRpch.dll MOD - [2016/09/18 12:56:30 | 000,302,624 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswLog.dll MOD - [2016/09/18 12:56:30 | 000,245,464 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\event_manager.dll MOD - [2016/09/18 12:56:30 | 000,220,592 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswUtil.dll MOD - [2016/09/18 12:56:30 | 000,169,064 | ---- | M] () -- C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll MOD - [2016/09/18 12:56:30 | 000,142,016 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswCmnOS.dll MOD - [2016/09/18 12:56:30 | 000,113,376 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\1036\Base.dll MOD - [2016/09/18 12:56:30 | 000,111,960 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswRemoteCache.dll MOD - [2016/09/18 12:56:30 | 000,096,816 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\avastIP.dll MOD - [2016/09/18 12:56:30 | 000,087,480 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\aswEngLdr.dll MOD - [2016/09/18 12:56:30 | 000,087,024 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\event_manager_rpc.dll MOD - [2016/09/18 12:55:19 | 003,558,256 | ---- | M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\HTMLayout.dll MOD - [2016/09/12 20:08:46 | 001,251,328 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\DWrite.dll MOD - [2016/08/29 16:12:50 | 012,880,384 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\shell32.dll MOD - [2016/06/14 16:21:20 | 001,005,056 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptui.dll MOD - [2016/06/14 16:21:20 | 000,080,896 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\cryptsp.dll MOD - [2016/05/12 16:18:23 | 000,079,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\gpapi.dll MOD - [2016/05/11 16:19:26 | 000,206,336 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ws2_32.dll MOD - [2016/05/11 16:19:25 | 000,351,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\winhttp.dll MOD - [2016/05/11 16:19:16 | 000,231,424 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\mswsock.dll MOD - [2015/07/23 15:26:10 | 000,095,744 | ---- | M] (Softros Systems, inc.) -- C:\Program Files\Softros Systems\Process Blocker\HelperLib86.dll MOD - [2015/04/24 18:56:58 | 000,530,432 | ---- | M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_5.82.7601.18837_none_ec86b8d6858ec0bc\comctl32.dll MOD - [2010/11/20 13:21:39 | 000,040,448 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wtsapi32.dll MOD - [2010/11/20 13:21:36 | 000,047,104 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wkscli.dll MOD - [2010/11/20 13:21:26 | 000,090,112 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\srvcli.dll MOD - [2010/11/20 13:21:04 | 000,051,200 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\samcli.dll MOD - [2010/11/20 13:21:03 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\RpcRtRemote.dll MOD - [2010/11/20 13:20:29 | 000,022,528 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\netutils.dll MOD - [2010/11/20 13:18:27 | 000,854,016 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\dbghelp.dll MOD - [2009/07/14 02:17:54 | 000,242,936 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rsaenh.dll MOD - [2009/07/14 02:16:20 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wsock32.dll MOD - [2009/07/14 02:16:20 | 000,013,824 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wshqos.dll MOD - [2009/07/14 02:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\wship6.dll MOD - [2009/07/14 02:16:20 | 000,009,216 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\WSHTCPIP.DLL MOD - [2009/07/14 02:16:12 | 000,031,744 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\profapi.dll MOD - [2009/07/14 02:16:12 | 000,011,776 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\rasadhlp.dll MOD - [2009/07/14 02:16:12 | 000,006,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\psapi.dll MOD - [2009/07/14 02:16:11 | 000,121,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\ntmarta.dll MOD - [2009/07/14 02:15:44 | 000,004,608 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msimg32.dll MOD - [2009/07/14 02:14:57 | 000,070,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\atl.dll MOD - [2009/07/14 02:14:10 | 000,095,232 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\msscript.ocx MOD - [2009/07/14 02:09:00 | 000,002,048 | ---- | M] (Microsoft Corporation) -- C:\Windows\SysWOW64\normaliz.dll [color=#E56717]========== Services (All) ==========[/color] SRV - [2016/12/14 12:20:21 | 000,172,488 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance) SRV - [2016/11/09 16:55:06 | 000,073,216 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\msiexec.exe -- (msiserver) SRV - [2016/10/04 16:13:00 | 000,145,920 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\cryptsvc.dll -- (CryptSvc) SRV - [2016/09/25 21:38:52 | 000,256,512 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\dhcpcore.dll -- (Dhcp) SRV - [2016/09/25 21:38:48 | 000,427,520 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWow64\SearchIndexer.exe -- (WSearch) SRV - [2016/09/25 21:38:42 | 000,859,288 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\Windows Communication Foundation\infocard.exe -- (idsvc) SRV - [2016/09/25 21:38:32 | 000,696,832 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehrecvr.exe -- (ehRecvr) SRV - [2016/09/25 21:38:32 | 000,149,504 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\appmgmts.dll -- (AppMgmt) SRV - [2016/09/25 21:38:28 | 000,359,936 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\netprofm.dll -- (netprofm) SRV - [2016/09/25 21:38:28 | 000,075,264 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\mprdim.dll -- (RemoteAccess) SRV - [2016/09/25 21:38:20 | 000,328,704 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\shsvcs.dll -- (ShellHWDetection) SRV - [2016/09/25 21:38:20 | 000,119,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\SessEnv.dll -- (SessionEnv) SRV - [2016/09/25 21:38:10 | 000,075,776 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wdi.dll -- (WdiSystemHost) SRV - [2016/09/25 21:38:10 | 000,075,776 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\wdi.dll -- (WdiServiceHost) SRV - [2016/09/25 21:38:06 | 001,508,352 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\pla.dll -- (pla) SRV - [2016/09/25 21:38:06 | 000,242,176 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\tapisrv.dll -- (TapiSrv) SRV - [2016/09/25 21:38:02 | 000,090,776 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_64) SRV - [2016/09/25 21:38:02 | 000,067,224 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2016/09/20 11:54:54 | 000,324,224 | ---- | M] (Skype Technologies) [Disabled | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2016/09/16 10:24:06 | 000,082,128 | ---- | M] (Adobe Systems Incorporated) [Disabled | Stopped] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2016/09/08 21:34:14 | 000,208,896 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WebClnt.dll -- (WebClient) SRV - [2016/07/14 13:43:42 | 000,107,192 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2016/07/14 13:37:18 | 000,128,696 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_64) SRV - [2016/07/14 13:37:18 | 000,052,920 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe -- (aspnet_state) SRV - [2016/05/11 16:19:25 | 000,351,744 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWow64\winhttp.dll -- (WinHttpAutoProxySvc) SRV - [2012/08/21 13:52:14 | 002,039,296 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WsmSvc.dll -- (WinRM) SRV - [2011/07/20 04:18:24 | 000,440,696 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\ODSERV.EXE -- (odserv) SRV - [2010/11/20 14:25:23 | 000,194,048 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\servicing\TrustedInstaller.exe -- (TrustedInstaller) SRV - [2010/11/20 13:21:35 | 000,276,992 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\wcncsvc.dll -- (wcncsvc) SRV - [2010/11/20 13:20:57 | 000,165,376 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Windows\SysWOW64\provsvc.dll -- (HomeGroupProvider) SRV - [2010/11/05 02:53:03 | 000,042,856 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe -- (FontCache3.0.0.0) SRV - [2009/07/14 02:39:09 | 000,127,488 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\ehome\ehsched.exe -- (ehSched) SRV - [2009/07/14 02:16:20 | 000,010,752 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\wpcsvc.dll -- (WPCSvc) SRV - [2009/07/14 02:16:18 | 000,032,768 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\WcsPlugInService.dll -- (WcsPlugInService) SRV - [2009/07/14 02:16:17 | 000,266,752 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\SysWOW64\upnphost.dll -- (upnphost) SRV - [2009/07/14 02:16:13 | 000,049,664 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\Sens.dll -- (SENS) SRV - [2009/07/14 02:16:12 | 000,210,944 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\qwave.dll -- (QWAVE) SRV - [2009/07/14 02:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\hidserv.dll -- (hidserv) SRV - [2009/07/14 02:15:19 | 000,271,360 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\SysWOW64\es.dll -- (EventSystem) SRV - [2009/07/14 02:14:28 | 000,020,992 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWOW64\perfhost.exe -- (PerfHost) SRV - [2009/07/14 02:14:18 | 000,007,168 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysWow64\dllhost.exe -- (COMSysApp) SRV - [2006/10/26 13:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\microsoft shared\Source Engine\OSE.EXE -- (ose) [color=#E56717]========== Driver Services (All) ==========[/color] DRV - [2013/11/21 10:22:10 | 000,115,448 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys -- (ISODrive) DRV - [2009/07/14 02:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) [color=#E56717]========== Standard Registry (All) ==========[/color] [color=#E56717]========== Internet Explorer ==========[/color] IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Page_Transitions = 1 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkID=617912&ResetID=131231726100295256&GUID=4BB123CC-697A-43A0-93A8-E01B2557B8C2 IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-19\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-20\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = Preserve IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE09&ocid=UE09DHP IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/fr-fr/?pc=UE09&ocid=UE09DHP IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 74 FB A2 16 F7 36 D2 01 [binary data] IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = CA E6 60 03 F6 36 D2 01 [binary data] IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error. IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll (Microsoft Corporation) IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A} IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE10 IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\..\SearchScopes\{96BBC430-9900-4299-9F5D-7951AB36EFDF}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?} IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local [color=#E56717]========== FireFox ==========[/color] FF - prefs.js..browser.search.countryCode: "FR" FF - prefs.js..browser.search.defaultengine: "Google" FF - prefs.js..browser.search.defaultenginename: "Google" FF - prefs.js..browser.search.defaultthis.engineName: "Google" FF - prefs.js..browser.search.defaulturl: "https://www.google.com/search?bcutc=sp-006" FF - prefs.js..browser.search.order.1: "Google" FF - prefs.js..browser.search.region: "FR" FF - prefs.js..browser.search.selectedEngine: "Google" FF - prefs.js..browser.startup.homepage: "https://www.google.com/?bcutc=sp-006" FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:50.1.0 FF - prefs.js..keyword.URL: "https://www.google.com/search?bcutc=sp-006" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_186.dll () FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\5.1.50709.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\sp@avast.com: C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016/10/10 09:27:30 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2016/10/10 09:27:31 | 000,000,000 | ---D | M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 50.1.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 50.1.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins [2016/10/17 10:35:03 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bruno\AppData\Roaming\Mozilla\Extensions [2016/11/24 12:00:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\ai2e8xqs.default-1473587225518\extensions [2016/11/24 12:00:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\ai2e8xqs.default-1473587225518\extensions\trash [2016/11/24 12:00:50 | 001,055,311 | ---- | M] () (No name found) -- C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\ai2e8xqs.default-1473587225518\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016/10/28 22:09:19 | 001,054,986 | ---- | M] () (No name found) -- C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\ai2e8xqs.default-1473587225518\extensions\trash\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016/10/19 23:01:25 | 000,002,426 | ---- | M] () -- C:\Users\Bruno\AppData\Roaming\Mozilla\Firefox\Profiles\ai2e8xqs.default-1473587225518\searchplugins\google-avast.xml [2016/12/14 12:20:21 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\browser\extensions [color=#E56717]========== Chrome ==========[/color] O1 HOSTS File: ([2016/09/10 19:30:18 | 000,000,841 | -HS- | M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: ::1 localhost O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found. O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (AVAST Software) O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation) O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: ForceActiveDesktopOn = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext = O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStartupSound = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DisableStatusMessages = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17 O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\Software\Policies\Microsoft\Internet Explorer\Restrictions present O7 - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoThumbnailCache = 1 O7 - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: DisableThumbnailsOnNetworkFolders = 1 O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\SysWOW64\nlaapi.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\SysWOW64\NapiNSP.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\SysWOW64\pnrpnsp.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\SysWOW64\winrnr.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\SysWOW64\mswsock.dll (Microsoft Corporation) O13 - gopher Prefix: missing O15 - HKU\S-1-5-21-1413675022-3679237491-1003182551-1000\..Trusted Domains: line6.net ([]* in Trusted sites) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BB25D6E6-0F47-4F3D-8BF4-7881202587C9}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\gopher {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\SysWOW64\inetcomm.dll (Microsoft Corporation) O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\SysWOW64\urlmon.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files (x86)\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation) O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\SysWOW64\itss.dll (Microsoft Corporation) O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\SysWOW64\MSVidCtl.dll (Microsoft Corporation) O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\SysWOW64\mshtml.dll (Microsoft Corporation) O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\SysWow64\mscoree.dll (Microsoft Corporation) O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysWow64\SystemPropertiesPerformance.exe (Microsoft Corporation) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\SysWow64\credssp.dll (Microsoft Corporation) O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (kerberos) - C:\Windows\SysWow64\kerberos.dll (Microsoft Corporation) O30 - LSA: Security Packages - (msv1_0) - C:\Windows\SysWow64\msv1_0.dll (Microsoft Corporation) O30 - LSA: Security Packages - (schannel) - C:\Windows\SysWow64\schannel.dll (Microsoft Corporation) O30 - LSA: Security Packages - (wdigest) - C:\Windows\SysWow64\wdigest.dll (Microsoft Corporation) O30 - LSA: Security Packages - (tspkg) - C:\Windows\SysWow64\tspkg.dll (Microsoft Corporation) O30 - LSA: Security Packages - (pku2u) - C:\Windows\SysWow64\pku2u.dll (Microsoft Corporation) O31 - SafeBoot: AlternateShell - cmd.exe O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{e3bd1006-75dc-11e6-baf2-d8cb8aea4dfd}\Shell - "" = AutoRun O33 - MountPoints2\{e3bd1006-75dc-11e6-baf2-d8cb8aea4dfd}\Shell\AutoRun\command - "" = H:\setup.exe O34 - HKLM BootExecute: (autocheck autochk *) O34 - HKLM BootExecute: (MACHINE BootExecut) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O36 - AppCertDlls: ProcessBlocker - (C:\Program Files\Softros Systems\Process Blocker\HelperLib.dll) - C:\Program Files\Softros Systems\Process Blocker\HelperLib.dll (Softros Systems, inc.) O36 - AppCertDlls: ProcessBlocker86 - (C:\Program Files\Softros Systems\Process Blocker\HelperLib86.dll) - C:\Program Files\Softros Systems\Process Blocker\HelperLib86.dll (Softros Systems, inc.) O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) MsConfig:64bit - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd) MsConfig:64bit - StartUpReg: [b]SunJavaUpdateSched[/b] - hkey= - key= - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Oracle Corporation) MsConfig:64bit - StartUpReg: [b]USB3MON[/b] - hkey= - key= - File not found MsConfig:64bit - State: "startup" - Reg Error: Key error. ActiveX: {1AD147D0-BE0E-3D6C-AC11-64F6DC4163F1} - .NET Framework ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0 ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles(x86)%\Windows Mail\WinMail.exe" OCInstallUserConfigOE ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6 ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements ActiveX: {63DF5C4B-E3BF-3346-A033-C57B22F44C9E} - .NET Framework ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7 ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\SysWOW64\Rundll32.exe C:\Windows\SysWOW64\mscories.dll,Install ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface ActiveX: {F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4} - .NET Framework ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP SafeBootMin: 17000312.sys - Driver SafeBootMin: 89075640.sys - Driver SafeBootMin: Base - Driver Group SafeBootMin: Boot Bus Extender - Driver Group SafeBootMin: Boot file system - Driver Group SafeBootMin: File system - Driver Group SafeBootMin: Filter - Driver Group SafeBootMin: HelpSvc - Service SafeBootMin: PCI Configuration - Driver Group SafeBootMin: PNP Filter - Driver Group SafeBootMin: Primary disk - Driver Group SafeBootMin: sacsvr - Service SafeBootMin: SCSI Class - Driver Group SafeBootMin: System Bus Extender - Driver Group SafeBootMin: TBS - Service SafeBootMin: vmms - Service SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices SafeBootNet: 17000312.sys - Driver SafeBootNet: 89075640.sys - Driver SafeBootNet: Base - Driver Group SafeBootNet: Boot Bus Extender - Driver Group SafeBootNet: Boot file system - Driver Group SafeBootNet: File system - Driver Group SafeBootNet: Filter - Driver Group SafeBootNet: HelpSvc - Service SafeBootNet: Messenger - Service SafeBootNet: NDIS Wrapper - Driver Group SafeBootNet: NetBIOSGroup - Driver Group SafeBootNet: NetDDEGroup - Driver Group SafeBootNet: Network - Driver Group SafeBootNet: NetworkProvider - Driver Group SafeBootNet: PCI Configuration - Driver Group SafeBootNet: PNP Filter - Driver Group SafeBootNet: PNP_TDI - Driver Group SafeBootNet: Primary disk - Driver Group SafeBootNet: rdsessmgr - Service SafeBootNet: sacsvr - Service SafeBootNet: SCSI Class - Driver Group SafeBootNet: Streams Drivers - Driver Group SafeBootNet: System Bus Extender - Driver Group SafeBootNet: TBS - Service SafeBootNet: TDI - Driver Group SafeBootNet: vmms - Service SafeBootNet: WudfUsbccidDriver - Driver SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices CREATERESTOREPOINT Restore point Set: OTL Restore Point [color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color] [2016/12/28 23:25:27 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Bruno\Desktop\OTL.exe [2016/12/21 15:08:15 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\AdAnti [2016/12/20 23:27:48 | 001,394,688 | ---- | C] (Microsoft Corporation) -- C:\Users\Bruno\Desktop\mfc42.dll [2016/12/17 01:14:44 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\WinRAR [2016/12/17 01:13:40 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2016/12/17 01:13:40 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2016/12/14 12:20:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox [2016/12/14 09:59:30 | 004,000,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2016/12/14 09:59:30 | 003,944,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2016/12/14 09:59:29 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2016/12/14 09:59:29 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmlmedia.dll [2016/12/14 09:59:29 | 000,663,552 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2016/12/14 09:59:29 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\certcli.dll [2016/12/14 09:59:28 | 001,806,848 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\authui.dll [2016/12/14 09:59:28 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieapfltr.dll [2016/12/14 09:59:28 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2016/12/14 09:59:28 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec [2016/12/14 09:59:28 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msihnd.dll [2016/12/14 09:59:27 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript9diag.dll [2016/12/14 09:59:27 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msrating.dll [2016/12/14 09:59:27 | 000,130,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\occache.dll [2016/12/14 09:59:27 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2016/12/14 09:59:27 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2016/12/14 09:59:27 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieetwproxystub.dll [2016/12/14 09:59:26 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\inseng.dll [2016/12/14 09:59:26 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\MshtmlDac.dll [2016/12/14 09:59:26 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\JavaScriptCollectionAgent.dll [2016/12/14 09:59:25 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rpchttp.dll [2016/12/14 09:59:25 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iesetup.dll [2016/12/14 09:59:25 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\appidapi.dll [2016/12/14 09:59:25 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\auditpol.exe [2016/12/14 09:59:25 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iernonce.dll [2016/12/14 09:59:25 | 000,025,600 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\setup16.exe [2016/12/14 09:59:25 | 000,014,336 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntvdm64.dll [2016/12/14 09:59:25 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\apisetschema.dll [2016/12/14 09:59:25 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-security-base-l1-1-0.dll [2016/12/14 09:59:25 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-file-l1-1-0.dll [2016/12/14 09:59:25 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\wow32.dll [2016/12/14 09:59:25 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-threadpool-l1-1-0.dll [2016/12/14 09:59:25 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processthreads-l1-1-0.dll [2016/12/14 09:59:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-sysinfo-l1-1-0.dll [2016/12/14 09:59:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-synch-l1-1-0.dll [2016/12/14 09:59:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-misc-l1-1-0.dll [2016/12/14 09:59:25 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localregistry-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-xstate-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-processenvironment-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-namedpipe-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-memory-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-libraryloader-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-interlocked-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-heap-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-util-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-string-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-rtlsupport-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-profile-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-io-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-handle-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-fibers-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-errorhandling-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-delayload-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-debug-l1-1-0.dll [2016/12/14 09:59:25 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-datetime-l1-1-0.dll [2016/12/14 09:59:24 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\adtschema.dll [2016/12/14 09:59:24 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msaudite.dll [2016/12/14 09:59:24 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\nlsbres.dll [2016/12/14 09:59:24 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msobjs.dll [2016/12/14 09:59:24 | 000,025,088 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msimsg.dll [2016/12/14 09:59:24 | 000,007,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\instnm.exe [2016/12/14 09:59:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-localization-l1-1-0.dll [2016/12/14 09:59:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\api-ms-win-core-console-l1-1-0.dll [2016/12/14 09:59:24 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\user.exe [2016/12/13 10:48:26 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Apple Computer [2016/12/12 19:20:37 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime [2016/12/12 19:20:29 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\QuickTime [2016/12/12 19:20:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple Computer [2016/12/12 19:20:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Apple Software Update [2016/12/12 19:20:22 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Local\Apple [2016/12/12 19:20:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Apple [2016/12/12 19:20:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Apple [2016/12/11 10:39:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\KaraFun Player 2 [2016/12/03 20:49:26 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Intel Corporation [2016/12/03 20:44:38 | 000,000,000 | ---D | C] -- C:\Users\Bruno\AppData\Roaming\Intel Corporation [2016/12/03 20:44:24 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel [2016/12/03 20:43:25 | 000,000,000 | ---D | C] -- C:\Users\Bruno\Intel [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files - Modified Within 30 Days ==========[/color] [2016/12/28 23:25:31 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Bruno\Desktop\OTL.exe [2016/12/28 10:11:19 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat [2016/12/27 12:37:58 | 000,011,264 | ---- | M] () -- C:\Users\Bruno\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2016/12/26 16:57:15 | 000,263,587 | ---- | M] () -- C:\Users\Bruno\Documents\Revenu AE Rokia 11 2016.xps [2016/12/21 18:15:25 | 000,802,904 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2016/12/21 18:15:25 | 000,144,472 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2016/12/18 22:27:14 | 000,001,130 | ---- | M] () -- C:\Users\Bruno\Desktop\wumt_x64.exe - Raccourci.lnk [2016/12/17 11:14:37 | 002,751,664 | ---- | M] () -- C:\Users\Public\Documents\Windows6.1-KB3102810-x86.msu [2016/12/17 01:09:07 | 000,001,003 | ---- | M] () -- C:\Users\Public\Desktop\Revo Uninstaller.lnk [2016/12/12 19:20:37 | 000,001,814 | ---- | M] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2016/12/03 20:44:42 | 001,706,688 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2016/12/03 09:17:23 | 000,063,008 | ---- | M] () -- C:\Users\Bruno\Desktop\Console1.msc [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#E56717]========== Files Created - No Company Name ==========[/color] [2016/12/26 16:57:13 | 000,263,587 | ---- | C] () -- C:\Users\Bruno\Documents\Revenu AE Rokia 11 2016.xps [2016/12/18 22:26:40 | 000,001,130 | ---- | C] () -- C:\Users\Bruno\Desktop\wumt_x64.exe - Raccourci.lnk [2016/12/17 11:14:59 | 002,751,664 | ---- | C] () -- C:\Users\Public\Documents\Windows6.1-KB3102810-x86.msu [2016/12/17 01:09:07 | 000,001,003 | ---- | C] () -- C:\Users\Public\Desktop\Revo Uninstaller.lnk [2016/12/12 19:20:37 | 000,001,814 | ---- | C] () -- C:\Users\Public\Desktop\QuickTime Player.lnk [2016/12/12 19:20:22 | 000,002,519 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk [2016/12/03 09:10:50 | 000,063,008 | ---- | C] () -- C:\Users\Bruno\Desktop\Console1.msc [2016/11/08 16:23:18 | 000,000,085 | ---- | C] () -- C:\Windows\wininit.ini [2016/10/11 23:37:14 | 000,000,016 | ---- | C] () -- C:\ProgramData\mntemp [2016/10/03 10:00:36 | 000,011,264 | ---- | C] () -- C:\Users\Bruno\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2016/09/25 21:38:17 | 000,064,000 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2016/09/24 09:33:43 | 000,053,248 | ---- | C] () -- C:\Windows\SysWow64\CommonDL.dll [2016/09/24 09:33:43 | 000,002,760 | ---- | C] () -- C:\Windows\SysWow64\lgAxconfig.ini [2016/09/10 13:06:04 | 000,178,359 | ---- | C] () -- C:\Users\Bruno\AppData\Local\census.cache [2016/09/10 13:06:01 | 000,084,742 | ---- | C] () -- C:\Users\Bruno\AppData\Local\ars.cache [2016/09/10 12:52:36 | 000,000,036 | ---- | C] () -- C:\Users\Bruno\AppData\Local\housecall.guid.cache [2016/09/09 12:32:38 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin [2016/09/08 16:39:28 | 001,706,688 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2015/04/24 09:35:42 | 000,204,952 | ---- | C] () -- C:\Windows\SysWow64\ativvsvl.dat [2015/04/24 09:35:42 | 000,157,144 | ---- | C] () -- C:\Windows\SysWow64\ativvsva.dat [2015/04/24 09:35:32 | 000,003,917 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat [2015/04/24 09:35:02 | 000,995,342 | ---- | C] () -- C:\Windows\SysWow64\amdocl_as32.exe [2015/04/24 09:35:02 | 000,798,734 | ---- | C] () -- C:\Windows\SysWow64\amdocl_ld32.exe [color=#E56717]========== ZeroAccess Check ==========[/color] [2009/07/14 05:55:00 | 000,000,227 | ---- | M] () -- C:\Windows\assembly\Desktop.ini [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64 [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64 "" = C:\Windows\SysNative\shell32.dll -- [2016/08/29 16:31:19 | 014,183,424 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] "" = %SystemRoot%\system32\shell32.dll -- [2016/08/29 16:12:50 | 012,880,384 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Apartment [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/08/21 14:11:31 | 000,857,088 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] "" = %systemroot%\system32\wbem\fastprox.dll -- [2012/08/21 14:37:44 | 000,636,928 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Free [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64 "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/08/21 14:08:38 | 000,453,120 | ---- | M] (Microsoft Corporation) "ThreadingModel" = Both [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] [color=#E56717]========== LOP Check ==========[/color] [2016/12/21 15:08:15 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\AdAnti [2016/09/13 19:11:07 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\AMD [2016/09/08 19:15:49 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Auslogics [2016/10/17 10:31:06 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\AVAST Software [2016/10/10 09:27:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\BANDISOFT [2016/11/30 12:13:15 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Cakewalk [2016/09/19 09:54:30 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Guitar Pro 6 [2016/09/08 18:28:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Leadertech [2016/10/10 09:27:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Line 6 [2016/10/26 08:40:50 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\LockHunter [2016/10/11 22:52:31 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\MAGIX [2016/09/10 10:40:37 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Profiles [2016/09/13 19:10:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Publish Providers [2016/10/12 09:08:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Sony [2016/10/21 11:54:34 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\TeamViewer [2016/10/11 23:01:37 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\VEGAS [2016/10/11 22:52:29 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\VEGAS Pro [2016/10/10 09:06:23 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\VS Revo Group [2016/10/10 09:27:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\ZHP [color=#E56717]========== Purity Check ==========[/color] [color=#E56717]========== Custom Scans ==========[/color] [color=#A23BEC]< HKCU\Software >[/color] [HKEY_CURRENT_USER\Software\Acro Software Inc] [HKEY_CURRENT_USER\Software\AdblockPlus] [HKEY_CURRENT_USER\Software\Adobe] [HKEY_CURRENT_USER\Software\AppDataLow] [HKEY_CURRENT_USER\Software\Apple Computer, Inc.] [HKEY_CURRENT_USER\Software\Apple Inc.] [HKEY_CURRENT_USER\Software\Arobas Music] [HKEY_CURRENT_USER\Software\ASProtect] [HKEY_CURRENT_USER\Software\ATI] [HKEY_CURRENT_USER\Software\Auslogics] [HKEY_CURRENT_USER\Software\AVAST Software] [HKEY_CURRENT_USER\Software\AVS4YOU] [HKEY_CURRENT_USER\Software\BandiMPEG1] [HKEY_CURRENT_USER\Software\BANDISOFT] [HKEY_CURRENT_USER\Software\BugSplat] [HKEY_CURRENT_USER\Software\Cakewalk Music Software] [HKEY_CURRENT_USER\Software\Canon] [HKEY_CURRENT_USER\Software\Clients] [HKEY_CURRENT_USER\Software\DAMN] [HKEY_CURRENT_USER\Software\DirectShow] [HKEY_CURRENT_USER\Software\Disc Soft] [HKEY_CURRENT_USER\Software\dlr] [HKEY_CURRENT_USER\Software\EasyBoot Systems] [HKEY_CURRENT_USER\Software\Elaborate Bytes] [HKEY_CURRENT_USER\Software\FreeTime] [HKEY_CURRENT_USER\Software\g3n-h@ckm@n] [HKEY_CURRENT_USER\Software\GNU] [HKEY_CURRENT_USER\Software\Google] [HKEY_CURRENT_USER\Software\Icaros] [HKEY_CURRENT_USER\Software\IM Providers] [HKEY_CURRENT_USER\Software\Intel] [HKEY_CURRENT_USER\Software\JavaSoft] [HKEY_CURRENT_USER\Software\Kingsoft] [HKEY_CURRENT_USER\Software\Lavalys] [HKEY_CURRENT_USER\Software\Leadertech] [HKEY_CURRENT_USER\Software\LockHunter] [HKEY_CURRENT_USER\Software\LogiShrd] [HKEY_CURRENT_USER\Software\Logitech] [HKEY_CURRENT_USER\Software\LowRegistry] [HKEY_CURRENT_USER\Software\Macromedia] [HKEY_CURRENT_USER\Software\madshi] [HKEY_CURRENT_USER\Software\MAGIX] [HKEY_CURRENT_USER\Software\MediaInfo] [HKEY_CURRENT_USER\Software\Microsoft] [HKEY_CURRENT_USER\Software\MOVAVI] [HKEY_CURRENT_USER\Software\Mozilla] [HKEY_CURRENT_USER\Software\MozillaPlugins] [HKEY_CURRENT_USER\Software\MPC-HC] [HKEY_CURRENT_USER\Software\Native Instruments] [HKEY_CURRENT_USER\Software\Netscape] [HKEY_CURRENT_USER\Software\Neuber GbR] [HKEY_CURRENT_USER\Software\ODBC] [HKEY_CURRENT_USER\Software\Piriform] [HKEY_CURRENT_USER\Software\Policies] [HKEY_CURRENT_USER\Software\PopWnd] [HKEY_CURRENT_USER\Software\Psicraft] [HKEY_CURRENT_USER\Software\QiLu Inc.] [HKEY_CURRENT_USER\Software\QtProject] [HKEY_CURRENT_USER\Software\Seventh String Software] [HKEY_CURRENT_USER\Software\Skype] [HKEY_CURRENT_USER\Software\Softros] [HKEY_CURRENT_USER\Software\Sony Creative Software] [HKEY_CURRENT_USER\Software\Sound Quest] [HKEY_CURRENT_USER\Software\sysinternals] [HKEY_CURRENT_USER\Software\TeamViewer] [HKEY_CURRENT_USER\Software\Trolltech] [HKEY_CURRENT_USER\Software\vanBasco] [HKEY_CURRENT_USER\Software\VS Revo Group] [HKEY_CURRENT_USER\Software\WinRAR] [HKEY_CURRENT_USER\Software\WinRAR SFX] [HKEY_CURRENT_USER\Software\Wondershare] [HKEY_CURRENT_USER\Software\Wow6432Node] [HKEY_CURRENT_USER\Software\ZebHelpProcess Helper] [HKEY_CURRENT_USER\Software\{B2CB09FF-2453-4f85-9F40-21C05BE4CBA8}] [HKEY_CURRENT_USER\Software\{F51B5B89-A3AC-4BD6-b917-556C2DF511BC}] [HKEY_CURRENT_USER\Software\Classes] [color=#A23BEC]< HKCU\Software\AppDataLow /s >[/color] [HKEY_CURRENT_USER\Software\AppDataLow\Software] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\AntiPhishing] "i" = 482B4EE6-09FF-4108-AC25-39B4E1FB0C22 [binary data] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\Internet Explorer\Security\AntiPhishing\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2] "UserFile" = 01 00 00 00 D0 8C 9D DF 01 15 D1 11 8C 7A 00 C0 4F C2 97 EB 01 00 00 00 F4 B3 0F 25 F9 96 42 49 A3 DB 04 8C 91 E4 7C 20 00 00 00 00 12 00 00 00 55 00 73 00 65 00 72 00 46 00 69 00 6C 00 65 00 00 00 10 66 00 00 00 01 00 00 20 00 00 00 E0 39 09 2A F0 49 7E C4 CA 0C 2E F6 E7 85 00 34 5F C7 34 05 7A 1A AB 5A 6F 3D AF 8A 91 EC D5 34 00 00 00 00 0E 80 00 00 00 02 00 00 20 00 00 00 C6 6A 13 C7 68 3C 4B 0C E9 12 12 17 72 72 5E A4 96 56 38 E9 61 DF 69 59 8F EF 2D 3C 3B 8B AA 0E 10 00 00 00 9D 49 B5 42 31 1E 0D F4 8E A8 0F DA 1B 03 08 35 40 00 00 00 AF 8F BF 8C 90 41 3B 6C 9F 07 7B F9 1D 9B CB C1 B2 BF E2 07 67 AD CB 2E 3A 15 19 BD 66 1F 10 EF 5E 96 2C CD 68 B8 80 CB D0 92 48 A7 0E 5E 9A B1 3E 5C 06 F6 82 93 D4 2B 42 49 65 52 42 EE 98 B9 [Binary data over 200 bytes] [HKEY_CURRENT_USER\Software\AppDataLow\Software\Microsoft\RepService] "i" = 71ADA985-B48C-4DAA-8213-08D4027839E4 [binary data] [color=#A23BEC]< HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /s >[/color] "NoDriveTypeAutoRun" = 255 "NoThumbnailCache" = 1 "DisableThumbnailsOnNetworkFolders" = 1 [color=#A23BEC]< HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System /s >[/color] [color=#A23BEC]< HKLM\Software >[/color] [HKEY_LOCAL_MACHINE\Software\ACE Compression Software] [HKEY_LOCAL_MACHINE\Software\Adobe] [HKEY_LOCAL_MACHINE\Software\AMD] [HKEY_LOCAL_MACHINE\Software\Apple Computer, Inc.] [HKEY_LOCAL_MACHINE\Software\Apple Inc.] [HKEY_LOCAL_MACHINE\Software\ASIO] [HKEY_LOCAL_MACHINE\Software\ATI] [HKEY_LOCAL_MACHINE\Software\ATI Technologies] [HKEY_LOCAL_MACHINE\Software\AVAST Software] [HKEY_LOCAL_MACHINE\Software\AVS4YOU] [HKEY_LOCAL_MACHINE\Software\BandiMPEG1] [HKEY_LOCAL_MACHINE\Software\BANDISOFT] [HKEY_LOCAL_MACHINE\Software\Cakewalk Music Software] [HKEY_LOCAL_MACHINE\Software\CDDB] [HKEY_LOCAL_MACHINE\Software\DAMN] [HKEY_LOCAL_MACHINE\Software\EasyBoot Systems] [HKEY_LOCAL_MACHINE\Software\EDIROL] [HKEY_LOCAL_MACHINE\Software\Elaborate Bytes] [HKEY_LOCAL_MACHINE\Software\GNU] [HKEY_LOCAL_MACHINE\Software\Google] [HKEY_LOCAL_MACHINE\Software\GPL Ghostscript] [HKEY_LOCAL_MACHINE\Software\Icaros] [HKEY_LOCAL_MACHINE\Software\IM Providers] [HKEY_LOCAL_MACHINE\Software\Intel] [HKEY_LOCAL_MACHINE\Software\JavaSoft] [HKEY_LOCAL_MACHINE\Software\JreMetrics] [HKEY_LOCAL_MACHINE\Software\Khronos] [HKEY_LOCAL_MACHINE\Software\Kingsoft] [HKEY_LOCAL_MACHINE\Software\KLCodecPack] [HKEY_LOCAL_MACHINE\Software\LAV] [HKEY_LOCAL_MACHINE\Software\LDSGameCenter] [HKEY_LOCAL_MACHINE\Software\ldssrv] [HKEY_LOCAL_MACHINE\Software\LG Electronics] [HKEY_LOCAL_MACHINE\Software\Licenses] [HKEY_LOCAL_MACHINE\Software\Line 6] [HKEY_LOCAL_MACHINE\Software\logishrd] [HKEY_LOCAL_MACHINE\Software\Logitech] [HKEY_LOCAL_MACHINE\Software\Macromedia] [HKEY_LOCAL_MACHINE\Software\MAGIX] [HKEY_LOCAL_MACHINE\Software\Malwarebytes' Anti-Malware] [HKEY_LOCAL_MACHINE\Software\Microsoft] [HKEY_LOCAL_MACHINE\Software\MimarSinan] [HKEY_LOCAL_MACHINE\Software\Mozilla] [HKEY_LOCAL_MACHINE\Software\mozilla.org] [HKEY_LOCAL_MACHINE\Software\MozillaPlugin] [HKEY_LOCAL_MACHINE\Software\MozillaPlugins] [HKEY_LOCAL_MACHINE\Software\MSI] [HKEY_LOCAL_MACHINE\Software\Native Instruments] [HKEY_LOCAL_MACHINE\Software\ODBC] [HKEY_LOCAL_MACHINE\Software\OldTimer Tools] [HKEY_LOCAL_MACHINE\Software\Oracle] [HKEY_LOCAL_MACHINE\Software\Pocket Soft] [HKEY_LOCAL_MACHINE\Software\PocketSoft] [HKEY_LOCAL_MACHINE\Software\QiLu Inc.] [HKEY_LOCAL_MACHINE\Software\Realtek] [HKEY_LOCAL_MACHINE\Software\Secunia] [HKEY_LOCAL_MACHINE\Software\Sensible Vision] [HKEY_LOCAL_MACHINE\Software\Skype] [HKEY_LOCAL_MACHINE\Software\Sony Creative Software] [HKEY_LOCAL_MACHINE\Software\Sony Media Software] [HKEY_LOCAL_MACHINE\Software\SymNRT] [HKEY_LOCAL_MACHINE\Software\TeamViewer] [HKEY_LOCAL_MACHINE\Software\TuxGuitar] [HKEY_LOCAL_MACHINE\Software\VideoLAN] [HKEY_LOCAL_MACHINE\Software\Volatile] [HKEY_LOCAL_MACHINE\Software\WafCX] [HKEY_LOCAL_MACHINE\Software\Wondershare] [HKEY_LOCAL_MACHINE\Software\Yahoo] [HKEY_LOCAL_MACHINE\Software\Classes] [HKEY_LOCAL_MACHINE\Software\Clients] [HKEY_LOCAL_MACHINE\Software\Policies] [HKEY_LOCAL_MACHINE\Software\RegisteredApplications] [color=#A23BEC]< HKCU\Software\Microsoft\Command Processor /s >[/color] "CompletionChar" = 9 "DefaultColor" = 0 "EnableExtensions" = 1 "PathCompletionChar" = 9 [color=#A23BEC]< HKLM\Software\Microsoft\Command Processor /s >[/color] "CompletionChar" = 64 "DefaultColor" = 0 "EnableExtensions" = 1 "PathCompletionChar" = 64 [color=#A23BEC]< HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /s >[/color] "NoActiveDesktop" = 1 "NoActiveDesktopChanges" = 1 "ForceActiveDesktopOn" = 0 [color=#A23BEC]< HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /s >[/color] "ConsentPromptBehaviorAdmin" = 0 "ConsentPromptBehaviorUser" = 3 "EnableInstallerDetection" = 1 "EnableLUA" = 0 "EnableSecureUIAPaths" = 1 "EnableUIADesktopToggle" = 0 "EnableVirtualization" = 1 "PromptOnSecureDesktop" = 0 "ValidateAdminCodeSignatures" = 0 "dontdisplaylastusername" = 0 "legalnoticecaption" = "legalnoticetext" = "scforceoption" = 0 "shutdownwithoutlogon" = 1 "undockwithoutlogon" = 1 "FilterAdministratorToken" = 0 "DisableStartupSound" = 1 "DisableStatusMessages" = 1 "VerboseStatus" = 0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UIPI\Clipboard\ExceptionFormats] "CF_TEXT" = 1 "CF_BITMAP" = 2 "CF_OEMTEXT" = 7 "CF_DIB" = 8 "CF_PALETTE" = 9 "CF_UNICODETEXT" = 13 "CF_DIBV5" = 17 [color=#A23BEC]< HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU /s >[/color] [color=#A23BEC]< HKLM\System\CurrentControlSet\Control\Session Manager\AppcertDlls /s >[/color] "ProcessBlocker" = C:\Program Files\Softros Systems\Process Blocker\HelperLib.dll -- [2015/07/23 15:26:08 | 000,114,176 | ---- | M] (Softros Systems, inc.) "ProcessBlocker86" = C:\Program Files\Softros Systems\Process Blocker\HelperLib86.dll -- [2015/07/23 15:26:10 | 000,095,744 | ---- | M] (Softros Systems, inc.) [color=#A23BEC]< %Homedrive%\* >[/color] [2016/09/12 12:53:44 | 000,014,960 | ---- | M] () -- C:\AdsFix_12_09_2016_13_53_55.txt [2016/09/08 23:14:36 | 000,001,024 | -H-- | M] () -- C:\AMTAG.BIN [2016/07/11 11:40:32 | 000,013,361 | ---- | M] () -- C:\app_updater.log [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat [2016/09/09 08:32:08 | 001,263,710 | ---- | M] () -- C:\BESR2010PatchLog.txt [2016/09/25 21:38:17 | 000,399,860 | RHS- | M] () -- C:\bootmgr [2016/09/08 17:05:09 | 000,008,192 | -HS- | M] () -- C:\BOOTSECT.BAK [2009/06/10 22:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys [2016/09/10 21:18:33 | 000,001,456 | ---- | M] () -- C:\DelFix.txt [2016/09/08 16:30:04 | 000,203,308 | -HS- | M] () -- C:\grldr [2016/03/20 10:23:10 | 000,203,308 | ---- | M] () -- C:\grldr.bak [2014/12/23 18:16:00 | 000,000,000 | -HS- | M] () -- C:\IO.SYS [2014/12/23 18:16:00 | 000,000,000 | -HS- | M] () -- C:\MSDOS.SYS [2016/09/08 16:53:32 | 000,000,189 | ---- | M] () -- C:\mylog.log [2016/12/04 01:11:59 | 000,453,796 | ---- | M] () -- C:\QuickDiag_04_12_2016_01_12_04.txt [2016/11/07 14:18:25 | 000,434,454 | ---- | M] () -- C:\QuickDiag_07_11_2016_14_18_29.txt [2016/09/17 10:47:31 | 000,211,224 | ---- | M] () -- C:\QuickDiag_17_09_2016_11_47_35.txt [2016/09/27 22:55:01 | 000,212,681 | ---- | M] () -- C:\QuickDiag_27_09_2016_23_55_04.txt [2016/09/29 23:30:28 | 000,214,565 | ---- | M] () -- C:\QuickDiag_30_09_2016_00_30_31.txt [2016/09/25 18:14:50 | 000,001,122 | ---- | M] () -- C:\Reset.cmd [2016/11/26 10:27:53 | 000,000,697 | ---- | M] () -- C:\Seaf guitar.bruno 261116.txt [2016/12/20 22:00:22 | 000,000,624 | ---- | M] () -- C:\SeafLog.txt [2016/11/23 18:45:58 | 000,006,388 | ---- | M] () -- C:\TDSSKiller.3.1.0.12_23.11.2016_18.45.35_log.txt [2016/11/23 18:50:24 | 000,578,362 | ---- | M] () -- C:\TDSSKiller.3.1.0.12_23.11.2016_18.47.07_log.txt [2016/11/23 19:01:20 | 000,006,388 | ---- | M] () -- C:\TDSSKiller.3.1.0.12_23.11.2016_19.01.06_log.txt [2016/11/23 19:06:29 | 001,201,902 | ---- | M] () -- C:\TDSSKiller.3.1.0.12_23.11.2016_19.02.31_log.txt [2016/11/23 20:10:28 | 000,186,358 | ---- | M] () -- C:\TDSSKiller.3.1.0.12_23.11.2016_20.09.47_log.txt [2016/11/23 20:11:48 | 000,735,178 | ---- | M] () -- C:\TDSSKiller.3.1.0.12_23.11.2016_20.10.33_log.txt [2016/09/07 23:31:13 | 000,004,096 | -HS- | M] () -- C:\VSNAP.IDX [2016/03/20 10:24:01 | 000,000,003 | -HS- | M] () -- C:\win7ldr [1 C:\*.tmp files -> C:\*.tmp -> ] [color=#A23BEC]< %Homedrive%\*. >[/color] [2016/10/26 08:48:14 | 000,000,000 | -HSD | M] -- C:\$RECYCLE.BIN [2016/11/13 23:57:37 | 000,000,000 | ---D | M] -- C:\@RestoreQuarantine [2016/10/10 09:27:17 | 000,000,000 | ---D | M] -- C:\AdsFix [2016/11/05 13:49:28 | 000,000,000 | ---D | M] -- C:\AdwCleaner [2016/11/05 14:00:55 | 000,000,000 | ---D | M] -- C:\AMD [2016/10/12 08:14:33 | 000,000,000 | -HSD | M] -- C:\Boot [2016/12/27 12:26:51 | 000,000,000 | ---D | M] -- C:\Cakewalk Projects [2016/12/14 10:01:54 | 000,000,000 | -HSD | M] -- C:\Config.Msi [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\Documents and Settings [2015/01/10 23:11:44 | 000,000,000 | ---D | M] -- C:\Drivers [2016/07/31 10:04:27 | 000,000,000 | ---D | M] -- C:\FFOutput [2016/09/09 09:42:06 | 000,000,000 | ---D | M] -- C:\Intel [2016/10/10 08:53:11 | 000,000,000 | -HSD | M] -- C:\KRECYCLE [2016/06/21 11:18:04 | 000,000,000 | ---D | M] -- C:\LGMobileUpgrade [2016/10/10 09:00:27 | 000,000,000 | ---D | M] -- C:\LGP500 [2016/10/10 09:00:27 | 000,000,000 | ---D | M] -- C:\LGP700 [2016/03/09 16:07:26 | 000,000,000 | -H-D | M] -- C:\MSOCache [2009/07/14 04:20:08 | 000,000,000 | ---D | M] -- C:\PerfLogs [2016/12/28 20:09:58 | 000,000,000 | ---D | M] -- C:\Program Files [2016/12/14 15:17:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86) [2016/12/28 20:11:13 | 000,000,000 | -H-D | M] -- C:\ProgramData [2016/12/28 19:27:40 | 000,000,000 | ---D | M] -- C:\QuickDiag [2016/09/08 16:22:05 | 000,000,000 | -HSD | M] -- C:\Recovery [2016/03/12 11:38:08 | 000,000,000 | -H-D | M] -- C:\Rollback [2016/07/01 11:08:48 | 000,000,000 | ---D | M] -- C:\Spacekace [2015/01/10 23:40:52 | 000,000,000 | ---D | M] -- C:\SWTOOLS [2016/12/28 23:28:48 | 000,000,000 | -HSD | M] -- C:\System Volume Information [2016/11/23 19:06:19 | 000,000,000 | ---D | M] -- C:\TDSSKiller_Quarantine [2016/09/12 11:47:03 | 000,000,000 | -H-D | M] -- C:\Temp [2016/09/08 16:22:20 | 000,000,000 | ---D | M] -- C:\Users [2014/12/23 18:22:33 | 000,000,000 | -H-D | M] -- C:\VProRecovery [2016/10/12 11:11:59 | 000,000,000 | ---D | M] -- C:\VueScan [2016/12/18 15:48:31 | 000,000,000 | --SD | M] -- C:\Windows [color=#A23BEC]< %Homedrive%\Recycler\*.exe /s >[/color] [color=#A23BEC]< %Homedrive%\Recycler\*.scr /s >[/color] [color=#A23BEC]< %Homedrive%\Recycler\*.pif /s >[/color] [color=#A23BEC]< %Homedrive%\Recycler\*.vb* /s >[/color] [color=#A23BEC]< %Homedrive%\$Recycle.bin\*.exe /s >[/color] [color=#A23BEC]< %Homedrive%\$Recycle.bin\*.scr /s >[/color] [color=#A23BEC]< %Homedrive%\$Recycle.bin\*.pif /s >[/color] [color=#A23BEC]< %Homedrive%\$Recycle.bin\*.vb* /s >[/color] [color=#A23BEC]< %Userprofile%\* >[/color] [2016/12/28 23:30:26 | 002,621,440 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat [2016/12/28 23:30:26 | 000,262,144 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat.LOG1 [2016/09/08 16:22:21 | 000,000,000 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat.LOG2 [2016/09/08 16:30:21 | 000,065,536 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf [2016/09/08 16:30:21 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms [2016/09/08 16:30:21 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms [2016/10/10 08:59:01 | 000,065,536 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat{6033665b-8eb9-11e6-92c3-d8cb8aea4dfd}.TM.blf [2016/10/10 08:59:01 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat{6033665b-8eb9-11e6-92c3-d8cb8aea4dfd}.TMContainer00000000000000000001.regtrans-ms [2016/10/10 08:59:01 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat{6033665b-8eb9-11e6-92c3-d8cb8aea4dfd}.TMContainer00000000000000000002.regtrans-ms [2016/10/10 11:05:17 | 000,065,536 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat{6bd7b5a9-8ebe-11e6-82d3-d8cb8aea4dfd}.TM.blf [2016/10/10 11:05:17 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat{6bd7b5a9-8ebe-11e6-82d3-d8cb8aea4dfd}.TMContainer00000000000000000001.regtrans-ms [2016/10/10 11:05:17 | 000,524,288 | -HS- | M] () -- C:\Users\Bruno\ntuser.dat{6bd7b5a9-8ebe-11e6-82d3-d8cb8aea4dfd}.TMContainer00000000000000000002.regtrans-ms [2016/09/08 16:22:21 | 000,000,020 | -HS- | M] () -- C:\Users\Bruno\ntuser.ini [color=#A23BEC]< %Userprofile%\*. >[/color] [2016/10/10 22:26:03 | 000,000,000 | ---D | M] -- C:\Users\Bruno\.oracle_jre_usage [2016/10/10 22:26:04 | 000,000,000 | ---D | M] -- C:\Users\Bruno\.swt [2016/10/10 22:26:04 | 000,000,000 | ---D | M] -- C:\Users\Bruno\.tuxguitar-1.3.2 [2016/10/17 10:29:59 | 000,000,000 | -H-D | M] -- C:\Users\Bruno\AppData [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Application Data [2016/10/12 08:15:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Contacts [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Cookies [2016/12/28 23:25:44 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Desktop [2016/12/27 15:17:58 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Documents [2016/12/28 23:25:44 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Downloads [2016/10/12 08:15:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Favorites [2016/12/03 20:43:25 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Intel [2016/10/12 08:15:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Links [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Local Settings [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Menu Démarrer [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Mes documents [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Modèles [2016/10/12 08:15:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Music [2016/12/18 15:34:25 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Pictures [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Recent [2016/10/20 21:22:46 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Saved Games [2016/10/12 08:15:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Searches [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\SendTo [2016/09/10 18:47:53 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Start Menu [2016/10/05 22:44:53 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Tracing [2016/10/15 21:07:13 | 000,000,000 | ---D | M] -- C:\Users\Bruno\Videos [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Voisinage d'impression [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\Voisinage réseau [color=#A23BEC]< %Allusersprofile%\* >[/color] [2016/10/11 23:37:14 | 000,000,016 | ---- | M] () -- C:\ProgramData\mntemp [color=#A23BEC]< %Allusersprofile%\*. >[/color] [2016/10/10 09:05:34 | 000,000,000 | ---D | M] -- C:\ProgramData\Adobe [2016/12/12 19:20:12 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple [2016/12/12 19:20:29 | 000,000,000 | ---D | M] -- C:\ProgramData\Apple Computer [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Application Data [2016/09/12 09:10:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Auslogics [2016/10/10 09:05:36 | 000,000,000 | ---D | M] -- C:\ProgramData\AVAST Software [2016/09/10 10:41:06 | 000,000,000 | ---D | M] -- C:\ProgramData\Avg [2016/09/16 15:00:32 | 000,000,000 | ---D | M] -- C:\ProgramData\AVS4YOU [2016/09/08 16:22:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Bureau [2016/10/10 09:05:40 | 000,000,000 | ---D | M] -- C:\ProgramData\Cakewalk [2016/09/08 17:16:07 | 000,000,000 | ---D | M] -- C:\ProgramData\DAEMON Tools Lite [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Desktop [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Documents [2016/10/11 21:12:39 | 000,000,000 | ---D | M] -- C:\ProgramData\DriversCloud.com [2016/09/08 16:22:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favoris [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Favorites [2016/10/17 09:15:39 | 000,000,000 | ---D | M] -- C:\ProgramData\GridinSoft [2016/09/12 16:42:56 | 000,000,000 | ---D | M] -- C:\ProgramData\Guitar Pro 6 [2016/09/08 17:23:55 | 000,000,000 | ---D | M] -- C:\ProgramData\Identities [2016/12/03 20:44:24 | 000,000,000 | ---D | M] -- C:\ProgramData\Intel [2016/10/10 09:05:41 | 000,000,000 | ---D | M] -- C:\ProgramData\kingsoft [2016/11/27 19:32:19 | 000,000,000 | ---D | M] -- C:\ProgramData\LGMOBILEAX [2016/10/26 08:48:10 | 000,000,000 | ---D | M] -- C:\ProgramData\LHService [2016/10/10 09:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Line 6 [2016/10/26 08:47:13 | 000,000,000 | ---D | M] -- C:\ProgramData\LockHunter [2016/10/10 09:05:42 | 000,000,000 | ---D | M] -- C:\ProgramData\LogiShrd [2016/10/11 22:52:10 | 000,000,000 | ---D | M] -- C:\ProgramData\MAGIX [2016/10/10 09:05:42 | 000,000,000 | ---D | M] -- C:\ProgramData\Malwarebytes [2016/09/08 16:22:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Menu Démarrer [2016/11/08 16:23:20 | 000,000,000 | --SD | M] -- C:\ProgramData\Microsoft [2016/10/10 09:27:37 | 000,000,000 | ---D | M] -- C:\ProgramData\Microsoft Help [2016/09/08 16:22:04 | 000,000,000 | -HSD | M] -- C:\ProgramData\Modèles [2016/10/10 09:27:46 | 000,000,000 | ---D | M] -- C:\ProgramData\Native Instruments [2016/10/21 10:43:20 | 000,000,000 | ---D | M] -- C:\ProgramData\Oracle [2016/11/13 23:45:49 | 000,000,000 | ---D | M] -- C:\ProgramData\Package Cache [2016/10/10 09:06:00 | 000,000,000 | ---D | M] -- C:\ProgramData\Psicraft [2016/11/22 22:57:03 | 000,000,000 | ---D | M] -- C:\ProgramData\Skype [2016/10/12 09:09:25 | 000,000,000 | ---D | M] -- C:\ProgramData\Sony [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Start Menu [2016/12/16 10:41:44 | 000,000,000 | ---D | M] -- C:\ProgramData\TEMP [2009/07/14 06:08:56 | 000,000,000 | -HSD | M] -- C:\ProgramData\Templates [2016/10/12 09:05:39 | 000,000,000 | ---D | M] -- C:\ProgramData\VEGAS [2016/10/11 22:52:38 | 000,000,000 | ---D | M] -- C:\ProgramData\VEGAS Pro [color=#A23BEC]< %LocalAppData%\* >[/color] [2016/09/10 13:06:01 | 000,084,742 | ---- | M] () -- C:\Users\Bruno\AppData\Local\ars.cache [2016/09/10 13:06:04 | 000,178,359 | ---- | M] () -- C:\Users\Bruno\AppData\Local\census.cache [2016/12/27 12:37:58 | 000,011,264 | ---- | M] () -- C:\Users\Bruno\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2016/12/16 12:22:29 | 000,064,552 | ---- | M] () -- C:\Users\Bruno\AppData\Local\GDIPFONTCACHEV1.DAT [2016/09/10 12:52:36 | 000,000,036 | ---- | M] () -- C:\Users\Bruno\AppData\Local\housecall.guid.cache [2016/12/28 00:58:53 | 004,461,222 | -H-- | M] () -- C:\Users\Bruno\AppData\Local\IconCache.db [color=#A23BEC]< %LocalAppData%\*. >[/color] [2016/12/21 18:14:36 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Adobe [2016/12/12 19:20:22 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Apple [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\AppData\Local\Application Data [2016/10/10 09:06:05 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Apps [2016/09/08 21:11:31 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\CEF [2016/10/17 18:30:31 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\CutePDF Writer [2016/09/10 17:47:58 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Deployment [2016/10/11 22:19:22 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Diagnostics [2016/10/10 09:06:05 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\fontconfig [2016/10/10 09:06:05 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Google [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\AppData\Local\Historique [2016/10/19 10:23:05 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\IIIQF [2016/10/10 09:27:47 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Intel [2016/10/10 09:06:08 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Logitech® Webcam Software [2016/09/28 21:34:42 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Macromedia [2016/10/10 09:06:09 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Microsoft [2016/10/20 22:53:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Microsoft Games [2016/09/08 19:40:27 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Microsoft Help [2016/10/11 23:37:56 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Movavi [2016/10/10 09:06:15 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Mozilla [2016/09/08 17:32:12 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Native Instruments [2016/11/13 23:44:16 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Power Tab [2016/09/08 16:39:38 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Programs [2016/10/11 22:52:30 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Sony [2016/12/28 23:25:31 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Temp [2016/09/08 16:22:21 | 000,000,000 | -HSD | M] -- C:\Users\Bruno\AppData\Local\Temporary Internet Files [2016/10/11 22:49:56 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\VEGAS [2016/10/11 22:52:29 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\VEGAS Pro [2016/10/11 23:37:56 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\VideoEditor [2016/10/11 21:38:10 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\VirtualStore [2016/09/25 19:35:29 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\WindowsUpdate [2016/10/12 00:04:06 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Local\Wondershare [color=#A23BEC]< %AppData%\* >[/color] [color=#A23BEC]< %AppData%\*. >[/color] [2016/12/21 15:08:15 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\AdAnti [2016/10/10 09:06:16 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Adobe [2016/09/13 19:11:07 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\AMD [2016/12/13 10:48:26 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Apple Computer [2016/09/08 19:15:49 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Auslogics [2016/10/17 10:31:06 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\AVAST Software [2016/10/10 09:27:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\BANDISOFT [2016/11/30 12:13:15 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Cakewalk [2016/12/28 19:33:05 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\dvdcss [2016/09/19 09:54:30 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Guitar Pro 6 [2016/09/08 16:23:04 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Identities [2016/12/03 20:44:38 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Intel Corporation [2016/09/08 18:28:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Leadertech [2016/10/10 09:27:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Line 6 [2016/10/26 08:40:50 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\LockHunter [2016/09/28 21:34:42 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Macromedia [2016/10/11 22:52:31 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\MAGIX [2009/07/14 16:35:02 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Media Center Programs [2016/11/05 17:54:53 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Microsoft [2016/10/17 10:35:03 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Mozilla [2016/09/10 10:40:37 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Profiles [2016/09/13 19:10:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Publish Providers [2016/12/10 15:32:26 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Skype [2016/10/12 09:08:59 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Sony [2016/10/10 21:51:37 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\Sun [2016/10/21 11:54:34 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\TeamViewer [2016/10/11 23:01:37 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\VEGAS [2016/10/11 22:52:29 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\VEGAS Pro [2016/12/28 20:08:42 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\vlc [2016/10/10 09:06:23 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\VS Revo Group [2016/12/17 01:14:44 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\WinRAR [2016/10/10 09:27:48 | 000,000,000 | ---D | M] -- C:\Users\Bruno\AppData\Roaming\ZHP [color=#A23BEC]< %Userprofile%\Local Settings\* >[/color] [color=#A23BEC]< %Userprofile%\Local Settings\*. >[/color] [color=#A23BEC]< %Userprofile%\Local Settings\Application Data\* >[/color] [color=#A23BEC]< %Userprofile%\Local Settings\Application Data\*. >[/color] [color=#A23BEC]< %Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave\FlashWritableRoot\#SharedObjects\* >[/color] [color=#A23BEC]< %Userprofile%\AppData\Local\Google\Chrome\User Data\Default\Pepper Data\Shockwave\FlashWritableRoot\#SharedObjects\*. >[/color] [color=#A23BEC]< %Userprofile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Pepper Data\Shockwave FlashWritableRoot\#SharedObjects\* >[/color] [color=#A23BEC]< %Userprofile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Pepper Data\Shockwave FlashWritableRoot\#SharedObjects\*. >[/color] [color=#A23BEC]< %programFiles%\* >[/color] [2009/07/14 05:54:24 | 000,000,174 | -HS- | M] () -- C:\Program Files (x86)\desktop.ini [color=#A23BEC]< %programFiles%\*. >[/color] [2016/10/29 10:02:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Acro Software [2016/10/10 09:00:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Adobe [2016/12/12 19:20:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Apple Software Update [2016/10/10 09:00:44 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Auslogics [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Bandicam [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\BandiMPEG1 [2016/10/10 09:00:56 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Cakewalk [2016/12/12 19:20:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files [2016/10/10 09:27:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\DAMN NFO Viewer [2016/10/10 09:01:33 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Elaborate Bytes [2016/10/10 09:27:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\FormatFactory [2016/09/10 20:34:03 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Google [2016/10/10 09:27:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\GPLGS [2016/10/10 09:27:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Guitar Pro 6 [2016/10/13 08:52:59 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\InstallShield Installation Information [2016/12/03 20:42:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel [2016/10/10 09:27:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Intel Driver Update Utility [2016/12/14 10:04:47 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Internet Explorer [2016/10/10 09:27:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\K-Lite Codec Pack [2016/12/28 20:11:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\KaraFun Player 2 [2016/10/10 08:36:00 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\kingsoft [2016/10/11 15:16:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Lavalys [2016/10/10 09:02:01 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\LG Electronics [2016/10/10 09:27:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Line6 [2016/10/10 09:27:25 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Logitech [2016/10/10 09:27:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Malwarebytes Anti-Malware [2016/10/10 09:27:26 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Office [2016/10/10 09:27:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Silverlight [2016/10/10 09:27:27 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft Visual Studio [2016/10/11 22:26:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Microsoft.NET [2016/12/14 15:17:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Firefox [2016/12/14 17:17:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Mozilla Maintenance Service [2016/10/10 09:02:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSBuild [2016/10/10 09:02:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSI [2016/09/26 08:45:42 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\MSXML 4.0 [2016/10/10 09:02:43 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Psicraft [2016/12/12 19:20:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\QuickTime [2016/10/10 09:02:45 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Realtek [2016/10/10 09:02:46 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Reference Assemblies [2016/10/10 09:27:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\SEAF [2016/09/26 22:15:37 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Secunia [2016/10/10 09:27:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Security Task Manager [2016/11/22 22:57:06 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Skype [2016/10/11 20:58:20 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Sony [2016/10/10 09:27:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Transcribe! [2016/10/10 22:16:14 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\tuxguitar-1.3.2 [2016/10/30 21:40:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\UltraISO [2016/12/05 14:17:51 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\UnHackMe [2009/07/14 05:57:06 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Uninstall Information [2016/10/28 22:05:02 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\vanBasco's Karaoke Player [2016/10/10 09:03:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\VideoLAN [2016/10/10 09:29:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Defender [2016/10/10 09:29:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Mail [2016/10/12 08:11:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Media Player [2016/10/10 09:03:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows NT [2016/10/10 09:29:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Photo Viewer [2016/09/09 20:08:53 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Portable Devices [2016/10/10 09:03:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Resource Kits [2016/10/10 09:29:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Windows Sidebar [2016/12/17 10:25:41 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\WinRAR [color=#A23BEC]< %programfiles%\Google\Desktop\*. >[/color] [color=#A23BEC]< %ProgramFiles%\Common Files\* >[/color] [color=#A23BEC]< %ProgramFiles%\Common Files\*. >[/color] [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Adobe [2016/12/12 19:20:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Apple [2016/09/18 12:57:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\AV [2016/09/16 23:50:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\AVSMedia [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\DESIGNER [2016/09/08 17:30:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Digidesign [2016/10/30 21:40:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\EZB Systems [2016/12/03 20:49:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Intel Corporation [2016/10/21 10:39:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Java [2016/10/10 09:00:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Kingsoft [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\LogiShrd [2016/10/10 09:27:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\microsoft shared [2016/09/08 20:40:55 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Common Files\nsklog [2009/07/14 04:20:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Services [2016/10/17 18:42:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Skype [2009/07/14 04:20:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\SpeechEngines [2016/10/10 09:29:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\System [color=#A23BEC]< %ProgramFiles(X86)%\Common Files\* >[/color] [color=#A23BEC]< %ProgramFiles(X86)%\Common Files\*. >[/color] [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Adobe [2016/12/12 19:20:12 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Apple [2016/09/18 12:57:23 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\AV [2016/09/16 23:50:15 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\AVSMedia [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\DESIGNER [2016/09/08 17:30:32 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Digidesign [2016/10/30 21:40:07 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\EZB Systems [2016/12/03 20:49:28 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Intel Corporation [2016/10/21 10:39:29 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Java [2016/10/10 09:00:59 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Kingsoft [2016/10/10 09:27:21 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\LogiShrd [2016/10/10 09:27:22 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\microsoft shared [2016/09/08 20:40:55 | 000,000,000 | -H-D | M] -- C:\Program Files (x86)\Common Files\nsklog [2009/07/14 04:20:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Services [2016/10/17 18:42:35 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\Skype [2009/07/14 04:20:08 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\SpeechEngines [2016/10/10 09:29:49 | 000,000,000 | ---D | M] -- C:\Program Files (x86)\Common Files\System [color=#A23BEC]< %Systemroot%\Installer\* >[/color] [2012/07/25 15:57:06 | 003,157,504 | ---- | M] () -- C:\Windows\Installer\11638d6.msp [2011/11/01 12:34:58 | 004,225,536 | ---- | M] () -- C:\Windows\Installer\11638ed.msp [2015/07/14 14:00:26 | 004,939,776 | ---- | M] () -- C:\Windows\Installer\1163904.msp [2011/04/16 07:44:26 | 002,770,944 | ---- | M] () -- C:\Windows\Installer\11693df.msi [2016/09/08 17:28:16 | 000,304,128 | ---- | M] () -- C:\Windows\Installer\16a62d.msi [2016/09/08 17:28:22 | 000,330,752 | ---- | M] () -- C:\Windows\Installer\16a65c.msi [2016/09/08 17:28:31 | 000,286,720 | ---- | M] () -- C:\Windows\Installer\16a664.msi [2016/09/08 17:29:09 | 000,286,720 | ---- | M] () -- C:\Windows\Installer\16a66c.msi [2016/09/08 17:29:49 | 000,286,720 | ---- | M] () -- C:\Windows\Installer\16a674.msi [2016/09/08 17:30:28 | 001,154,048 | ---- | M] () -- C:\Windows\Installer\16adac.msi [2015/12/08 15:03:34 | 021,402,624 | ---- | M] () -- C:\Windows\Installer\1d7317d.msi [2015/12/08 16:43:26 | 002,323,456 | ---- | M] () -- C:\Windows\Installer\1d73186.msi [2015/12/15 15:18:36 | 028,397,568 | ---- | M] () -- C:\Windows\Installer\1d7318a.msi [2013/01/23 17:05:40 | 009,765,376 | ---- | M] () -- C:\Windows\Installer\2334bf.msp [2013/11/01 17:17:42 | 005,009,920 | ---- | M] () -- C:\Windows\Installer\2334d7.msp [2011/09/15 17:39:56 | 015,017,984 | ---- | M] () -- C:\Windows\Installer\2334e1.msp [2011/09/15 17:40:24 | 033,243,648 | ---- | M] () -- C:\Windows\Installer\233504.msp [2011/09/15 17:34:54 | 428,804,608 | ---- | M] () -- C:\Windows\Installer\23360b.msp [2011/09/15 17:34:14 | 008,499,712 | ---- | M] () -- C:\Windows\Installer\23361c.msp [2011/09/15 17:35:04 | 001,833,984 | ---- | M] () -- C:\Windows\Installer\233629.msp [2011/09/15 17:37:06 | 014,140,416 | ---- | M] () -- C:\Windows\Installer\233636.msp [2011/09/15 17:38:04 | 010,838,528 | ---- | M] () -- C:\Windows\Installer\233643.msp [2011/09/15 17:39:22 | 011,163,136 | ---- | M] () -- C:\Windows\Installer\233650.msp [2011/09/15 17:40:36 | 007,959,552 | ---- | M] () -- C:\Windows\Installer\23365b.msp [2011/09/15 17:40:52 | 004,760,064 | ---- | M] () -- C:\Windows\Installer\233668.msp [2009/04/14 03:56:48 | 010,826,752 | ---- | M] () -- C:\Windows\Installer\233673.msp [2009/02/25 18:08:18 | 008,311,808 | ---- | M] () -- C:\Windows\Installer\23368a.msp [2016/07/11 19:29:16 | 000,038,912 | ---- | M] () -- C:\Windows\Installer\233769.msi [2016/09/25 22:34:38 | 053,339,648 | ---- | M] () -- C:\Windows\Installer\233774.msp [2016/07/21 04:18:58 | 011,169,792 | ---- | M] () -- C:\Windows\Installer\2523c48.msp [2012/09/25 11:39:54 | 001,794,560 | ---- | M] () -- C:\Windows\Installer\2523c56.msp [2012/09/25 11:38:52 | 011,885,568 | ---- | M] () -- C:\Windows\Installer\2523c87.msp [2013/05/08 20:36:50 | 010,943,488 | ---- | M] () -- C:\Windows\Installer\2523cad.msp [2012/02/17 07:45:24 | 002,299,392 | ---- | M] () -- C:\Windows\Installer\2523cc4.msp [2014/11/19 07:45:32 | 011,059,200 | ---- | M] () -- C:\Windows\Installer\2523cdc.msp [2012/03/15 01:24:28 | 001,795,584 | ---- | M] () -- C:\Windows\Installer\2523cf4.msp [2015/01/14 21:35:04 | 010,158,080 | ---- | M] () -- C:\Windows\Installer\2523d0b.msp [2014/04/16 07:41:38 | 007,844,864 | ---- | M] () -- C:\Windows\Installer\2523d2c.msp [2012/07/18 14:46:48 | 000,593,408 | ---- | M] () -- C:\Windows\Installer\2523d43.msp [2011/11/01 12:34:26 | 001,169,920 | ---- | M] () -- C:\Windows\Installer\2523d5a.msp [2013/11/01 17:15:08 | 006,185,472 | ---- | M] () -- C:\Windows\Installer\2523d72.msp [2014/04/16 07:40:26 | 007,900,672 | ---- | M] () -- C:\Windows\Installer\2523d8a.msp [2016/04/14 07:01:50 | 005,959,680 | ---- | M] () -- C:\Windows\Installer\2523da2.msp [2011/01/15 08:46:32 | 002,049,536 | ---- | M] () -- C:\Windows\Installer\2523dac.msi [2015/03/18 03:08:56 | 009,019,392 | ---- | M] () -- C:\Windows\Installer\2523dc2.msp [2015/06/20 02:57:20 | 013,508,608 | ---- | M] () -- C:\Windows\Installer\2523dda.msp [2016/08/16 23:18:52 | 013,074,432 | ---- | M] () -- C:\Windows\Installer\2523dfb.msp [2016/06/29 02:24:56 | 009,805,824 | ---- | M] () -- C:\Windows\Installer\2523e13.msp [2016/08/16 23:15:28 | 009,695,232 | ---- | M] () -- C:\Windows\Installer\2523e2b.msp [2016/02/10 10:39:52 | 002,584,576 | ---- | M] () -- C:\Windows\Installer\2523e45.msp [2016/04/14 07:00:42 | 011,554,816 | ---- | M] () -- C:\Windows\Installer\2523e5d.msp [2015/11/11 21:32:34 | 008,818,688 | ---- | M] () -- C:\Windows\Installer\2523e75.msp [2015/07/22 08:07:40 | 005,079,040 | ---- | M] () -- C:\Windows\Installer\2523e8d.msp [2016/08/16 23:15:52 | 016,412,672 | ---- | M] () -- C:\Windows\Installer\2523ea5.msp [2012/12/19 21:36:38 | 013,662,720 | ---- | M] () -- C:\Windows\Installer\2523ebd.msp [2016/08/16 23:18:00 | 010,465,280 | ---- | M] () -- C:\Windows\Installer\2523ed5.msp [2016/05/19 03:14:28 | 004,030,464 | ---- | M] () -- C:\Windows\Installer\2523eee.msp [2015/07/22 08:10:44 | 010,031,104 | ---- | M] () -- C:\Windows\Installer\2523efa.msp [2016/07/13 00:04:54 | 001,126,400 | ---- | M] () -- C:\Windows\Installer\2523f1c.msp [2014/05/16 04:08:36 | 008,179,200 | ---- | M] () -- C:\Windows\Installer\2523f34.msp [2015/12/10 10:57:36 | 024,256,512 | ---- | M] () -- C:\Windows\Installer\2523f52.msp [2016/07/21 04:24:44 | 004,337,664 | ---- | M] () -- C:\Windows\Installer\2523f69.msp [2016/11/22 22:56:53 | 043,524,096 | ---- | M] () -- C:\Windows\Installer\2983bca.msi [2009/05/07 08:04:18 | 010,289,664 | ---- | M] () -- C:\Windows\Installer\2d484f.msp [2009/04/14 02:46:40 | 007,391,744 | ---- | M] () -- C:\Windows\Installer\2d485a.msp [2016/07/13 00:06:16 | 004,984,832 | ---- | M] () -- C:\Windows\Installer\2d4c2a.msp [2009/04/14 03:22:04 | 007,532,544 | ---- | M] () -- C:\Windows\Installer\2d4c3e.msp [2014/04/10 16:27:19 | 005,423,104 | ---- | M] () -- C:\Windows\Installer\2ff63b.msi [2016/10/12 09:08:59 | 000,634,880 | ---- | M] () -- C:\Windows\Installer\2ff646.msi [2016/07/14 23:38:16 | 001,605,632 | ---- | M] () -- C:\Windows\Installer\311012.msi [2016/10/10 13:37:48 | 007,573,504 | ---- | M] () -- C:\Windows\Installer\32cbc.msi [2010/12/27 21:15:53 | 002,358,784 | ---- | M] () -- C:\Windows\Installer\333b24.msi [2015/07/14 12:51:48 | 000,778,240 | ---- | M] () -- C:\Windows\Installer\38913.msi [2016/09/08 16:55:57 | 000,025,600 | ---- | M] () -- C:\Windows\Installer\39b1d.msi [2013/04/03 22:14:43 | 003,059,712 | ---- | M] () -- C:\Windows\Installer\3d4002.msi [2016/09/11 13:55:08 | 006,541,312 | ---- | M] () -- C:\Windows\Installer\42bb4.msi [2016/09/25 18:11:33 | 000,379,392 | ---- | M] () -- C:\Windows\Installer\431133.msi [2012/09/27 00:34:20 | 001,691,648 | ---- | M] () -- C:\Windows\Installer\516a47.msi [2012/09/13 08:41:18 | 012,635,648 | ---- | M] () -- C:\Windows\Installer\516a4f.msi [2012/09/13 08:41:16 | 000,734,720 | ---- | M] () -- C:\Windows\Installer\516a57.msi [2012/09/27 00:46:08 | 000,889,344 | ---- | M] () -- C:\Windows\Installer\516a5f.msi [2012/07/23 23:15:18 | 000,487,936 | ---- | M] () -- C:\Windows\Installer\516a67.msi [2012/09/26 23:19:08 | 001,406,976 | ---- | M] () -- C:\Windows\Installer\516a6f.msi [2012/09/27 00:36:58 | 001,686,528 | ---- | M] () -- C:\Windows\Installer\516a77.msi [2012/09/13 08:41:22 | 004,807,680 | ---- | M] () -- C:\Windows\Installer\516a7f.msi [2011/07/27 03:51:16 | 000,468,992 | ---- | M] () -- C:\Windows\Installer\516a87.msi [2011/06/13 04:26:48 | 000,119,296 | ---- | M] () -- C:\Windows\Installer\516a8f.msi [2011/11/11 23:14:28 | 000,379,904 | ---- | M] () -- C:\Windows\Installer\516a97.msi [2015/03/17 09:41:29 | 002,805,760 | ---- | M] () -- C:\Windows\Installer\520f9.msi [2016/06/30 14:28:39 | 071,077,888 | ---- | M] () -- C:\Windows\Installer\520fa.msp [2015/01/08 22:56:33 | 003,026,944 | ---- | M] () -- C:\Windows\Installer\6ffa7e.msi [2016/09/10 10:07:29 | 000,081,920 | ---- | M] () -- C:\Windows\Installer\6ffa94.msi [2016/10/21 10:38:41 | 031,068,160 | ---- | M] () -- C:\Windows\Installer\7e3379.msi [2016/10/21 10:38:41 | 000,761,856 | ---- | M] () -- C:\Windows\Installer\7e338c.msi [2008/09/30 20:07:10 | 006,042,112 | ---- | M] () -- C:\Windows\Installer\a0131.msi [2009/07/20 23:29:14 | 006,057,984 | ---- | M] () -- C:\Windows\Installer\a013b.msi [2015/09/22 17:20:46 | 004,911,104 | ---- | M] () -- C:\Windows\Installer\ae429.msi [2016/02/12 15:29:16 | 003,092,480 | ---- | M] () -- C:\Windows\Installer\af7bbf.msi [2016/09/13 22:48:10 | 006,299,648 | ---- | M] () -- C:\Windows\Installer\afd5e.msi [2016/08/11 10:11:02 | 001,060,864 | ---- | M] () -- C:\Windows\Installer\b89a1.msi [2016/08/11 10:11:30 | 005,042,176 | ---- | M] () -- C:\Windows\Installer\b89aa.msi [2016/08/02 12:49:06 | 001,511,424 | ---- | M] () -- C:\Windows\Installer\bc3b3.msp [2012/07/26 21:01:48 | 000,151,552 | ---- | M] () -- C:\Windows\Installer\c11e3.msi [2012/07/26 21:05:02 | 000,155,648 | ---- | M] () -- C:\Windows\Installer\c11ec.msi [2012/07/26 20:58:40 | 000,155,648 | ---- | M] () -- C:\Windows\Installer\c11f5.msi [2012/07/26 21:09:22 | 000,155,648 | ---- | M] () -- C:\Windows\Installer\c11fe.msi [2016/09/28 15:59:24 | 010,656,768 | ---- | M] () -- C:\Windows\Installer\c126d.msi [2015/06/25 23:59:22 | 000,147,456 | ---- | M] () -- C:\Windows\Installer\c7f735.msi [2015/06/25 23:59:42 | 000,143,360 | ---- | M] () -- C:\Windows\Installer\c7f73e.msi [2016/12/01 01:51:30 | 001,978,368 | ---- | M] () -- C:\Windows\Installer\cf1aa.msp [2016/10/13 19:40:57 | 000,873,472 | ---- | M] () -- C:\Windows\Installer\d11a7.msi [2016/10/10 08:29:03 | 036,499,456 | ---- | M] () -- C:\Windows\Installer\d124e.msp [2016/11/03 08:25:06 | 001,642,496 | ---- | M] () -- C:\Windows\Installer\de89c4.msp [2016/09/08 19:39:56 | 002,419,200 | ---- | M] () -- C:\Windows\Installer\fb0a0.msi [2016/09/08 19:39:57 | 001,755,136 | ---- | M] () -- C:\Windows\Installer\fb0a8.msi [2016/09/08 19:39:58 | 002,029,056 | ---- | M] () -- C:\Windows\Installer\fb0b1.msi [2016/09/08 19:39:58 | 001,647,104 | ---- | M] () -- C:\Windows\Installer\fb0b9.msi [2016/09/08 19:40:01 | 002,368,000 | ---- | M] () -- C:\Windows\Installer\fb0c1.msi [2016/09/08 19:40:02 | 000,506,880 | ---- | M] () -- C:\Windows\Installer\fb0c9.msi [2016/09/08 19:40:04 | 000,506,368 | ---- | M] () -- C:\Windows\Installer\fb0d1.msi [2016/09/08 19:40:03 | 000,515,072 | ---- | M] () -- C:\Windows\Installer\fb0d9.msi [2016/09/08 19:40:03 | 000,514,048 | ---- | M] () -- C:\Windows\Installer\fb0e1.msi [2016/09/08 19:40:03 | 000,518,144 | ---- | M] () -- C:\Windows\Installer\fb0e9.msi [2016/09/08 19:40:03 | 000,507,904 | ---- | M] () -- C:\Windows\Installer\fb0f1.msi [2016/09/08 19:40:02 | 000,515,584 | ---- | M] () -- C:\Windows\Installer\fb0f9.msi [2016/09/08 19:40:02 | 000,505,856 | ---- | M] () -- C:\Windows\Installer\fb101.msi [2016/09/08 19:40:04 | 001,667,072 | ---- | M] () -- C:\Windows\Installer\fb109.msi [2016/09/08 19:40:04 | 001,658,880 | ---- | M] () -- C:\Windows\Installer\fb112.msi [2016/09/08 19:40:05 | 001,659,392 | ---- | M] () -- C:\Windows\Installer\fb11a.msi [2016/09/08 19:40:06 | 000,847,872 | ---- | M] () -- C:\Windows\Installer\fb123.msi [2016/09/08 19:40:07 | 015,831,552 | ---- | M] () -- C:\Windows\Installer\fb12d.msi [2016/11/13 23:36:28 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{0D3E9E15-DE7A-300B-96F1-B4AF12B96488} [2016/09/27 08:30:52 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{20F9CFAA-04FD-423D-869A-279985494E09} [2016/10/21 10:38:49 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{26A24AE4-039D-4CA4-87B4-2F64180111F0} [2016/11/05 14:03:26 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36} [2016/12/12 19:20:11 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{46F044A5-CE8B-4196-984E-5BD6525E361D} [2016/10/21 10:39:29 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{4A03706F-666A-4037-7777-5F2748764D10} [2016/10/11 22:49:40 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{52116C70-79F9-11E6-9541-BB95F5A309BD} [2016/10/11 22:26:01 | 000,028,672 | ---- | M] () -- C:\Windows\Installer\SourceHash{63DF5C4B-E3BF-3346-A033-C57B22F44C9E} [2016/12/12 19:20:21 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} [2016/11/05 14:04:27 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{80595353-6197-2EB6-F14C-C1F4AC093311} [2016/09/26 08:45:41 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} [2016/09/25 22:34:37 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} [2016/09/26 19:27:11 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{90140000-2005-0000-0000-0000000FF1CE} [2016/11/05 14:04:16 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{A2CB1ACB-94A2-32BA-A15E-7D80319F7589} [2016/11/05 14:04:19 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{AC53FC8B-EE18-3F9C-9B59-60937D0B182C} [2016/10/13 19:41:00 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{AC76BA86-0804-1033-1959-001824202044} [2016/10/11 21:12:37 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{AEEC522D-38DD-46FD-9367-3E32F51B3A42} [2016/11/13 23:36:37 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{BC958BD2-5DAC-3862-BB1A-C1BE0790438D} [2016/10/12 09:09:24 | 000,028,672 | ---- | M] () -- C:\Windows\Installer\SourceHash{CE20A68F-BFBC-11E3-AA73-F04DA23A5C58} [2016/10/12 09:09:13 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{D4BD27CF-BFBC-11E3-9B8F-F04DA23A5C58} [2016/09/26 08:47:05 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} [2016/10/05 22:44:34 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FC965A47-4839-40CA-B618-18F486F042C6} [2016/11/05 14:03:29 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607} [2016/12/12 19:20:28 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} [2016/12/03 20:43:33 | 000,020,480 | ---- | M] () -- C:\Windows\Installer\SourceHash{FF8F5F84-9660-40DB-BDAD-CCD03F6BD1F6} [5 C:\Windows\Installer\*.tmp files -> C:\Windows\Installer\*.tmp -> ] [color=#A23BEC]< %Systemroot%\Installer\*. >[/color] [2016/10/10 09:09:04 | 000,000,000 | --SD | M] -- C:\Windows\Installer\$PatchCache$ [2016/09/08 16:55:16 | 000,000,000 | --SD | M] -- C:\Windows\Installer\MSI1EF9.tmp- [2016/09/08 16:55:18 | 000,000,000 | --SD | M] -- C:\Windows\Installer\MSI285E.tmp- [2016/09/08 16:54:53 | 000,000,000 | --SD | M] -- C:\Windows\Installer\MSIB0D8.tmp- [2016/09/08 16:54:57 | 000,000,000 | --SD | M] -- C:\Windows\Installer\MSIC949.tmp- [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\MSID7EB.tmp- [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{06DA421D-EE23-487D-878F-F0AF97EF69AD} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{1C9A24E0-CA21-414D-8D21-22BF8981FC9F} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{36DF4580-D1B3-11E3-A23E-F04DA23A5C58} [2016/12/12 19:20:18 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{46F044A5-CE8B-4196-984E-5BD6525E361D} [2016/12/12 19:20:22 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE} [2016/11/05 14:04:29 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{80595353-6197-2EB6-F14C-C1F4AC093311} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{90120000-0011-0000-0000-0000000FF1CE} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{90120000-002A-0000-1000-0000000FF1CE} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{90120000-006E-040C-0000-0000000FF1CE} [2016/10/13 19:41:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{AC76BA86-0804-1033-1959-001824202044} [2016/11/03 12:57:55 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{AC76BA86-7AD7-1036-7B44-AC0F074E4100} [2016/10/11 21:12:38 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{AEEC522D-38DD-46FD-9367-3E32F51B3A42} [2016/11/05 14:04:25 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{B8B3C25D-13D3-B5C2-9AD4-32157EFCEA5F} [2016/10/12 09:09:37 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{CE20A68F-BFBC-11E3-AA73-F04DA23A5C58} [2016/10/10 09:28:01 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC} [2016/11/22 22:57:06 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{FC965A47-4839-40CA-B618-18F486F042C6} [2016/12/12 19:20:37 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{FF59BD75-466A-4D5A-AD23-AAD87C5FD44C} [2016/12/03 20:44:24 | 000,000,000 | --SD | M] -- C:\Windows\Installer\{FF8F5F84-9660-40DB-BDAD-CCD03F6BD1F6} [color=#A23BEC]< %Systemroot%\Temp\*.exe /s >[/color] [2016/12/28 22:18:23 | 000,321,480 | ---- | M] (Mozilla Foundation) -- C:\Windows\Temp\avast_ash2\Mozilla Firefox\updater.exe [color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\*.exe /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\*.in* >[/color] [2016/09/25 22:55:04 | 000,016,303 | ---- | M] () -- C:\Windows\system32\ieuinit.inf [2016/11/27 19:34:54 | 000,002,760 | ---- | M] () -- C:\Windows\system32\lgAxconfig.ini [2009/07/14 05:55:01 | 000,000,535 | ---- | M] () -- C:\Windows\system32\mapisvc.inf [2016/12/03 20:44:42 | 001,706,688 | ---- | M] () -- C:\Windows\system32\PerfStringBackup.INI [color=#A23BEC]< %systemroot%\PSS\* /s >[/color] [color=#A23BEC]< %systemroot%\Tasks\* >[/color] [2016/10/21 15:10:11 | 000,001,064 | ---- | M] () -- C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job [2016/12/28 10:11:30 | 000,000,006 | -H-- | M] () -- C:\Windows\Tasks\SA.DAT [2016/11/25 10:35:30 | 000,032,496 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT [color=#A23BEC]< %systemroot%\Tasks\*. >[/color] [color=#A23BEC]< %systemroot%\system32\Tasks\* >[/color] [color=#A23BEC]< %systemroot%\system32\Tasks\*. >[/color] [2009/07/14 04:20:14 | 000,000,000 | --SD | M] -- C:\Windows\system32\Tasks\Microsoft [color=#A23BEC]< %systemroot%\syswow64\Tasks\* >[/color] [color=#A23BEC]< %systemroot%\syswow64\Tasks\*. >[/color] [2009/07/14 04:20:14 | 000,000,000 | --SD | M] -- C:\Windows\syswow64\Tasks\Microsoft [color=#A23BEC]< %systemroot%\system32\drivers\*.sy* /lockedfiles >[/color] [color=#A23BEC]< %systemroot%\system32\config\*.exe /s >[/color] [color=#A23BEC]< %Systemroot%\ServiceProfiles\*.exe /s >[/color] [color=#A23BEC]< %systemroot%\system32\*.sys >[/color] [color=#A23BEC]< dir %Homedrive%\* /S /A:L /C >[/color] Le volume dans le lecteur C s'appelle WINDOWS 7 Le num‚ro de s‚rie du volume est 2C3C-E92C R‚pertoire de C:\ 14/07/2009 06:08 Documents and Settings [C:\Users] 0 fichier(s) 0 octets R‚pertoire de C:\Program Files 08/09/2016 16:22 Fichiers communs [C:\Program Files\Common Files] 0 fichier(s) 0 octets R‚pertoire de C:\Program Files\Windows NT 08/09/2016 16:22 Accessoires [C:\Program Files\Windows NT\Accessories] 0 fichier(s) 0 octets R‚pertoire de C:\Program Files (x86)\Common Files\AV 18/09/2016 12:57 avast! Antivirus [C:\Program Files\Common Files\AV\avast! Antivirus] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [.] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [.] 14/07/2009 06:08 Documents [.] 08/09/2016 16:22 Favoris [.] 14/07/2009 06:08 Favorites [.] 08/09/2016 16:22 Menu D‚marrer [.] 08/09/2016 16:22 ModŠles [.] 14/07/2009 06:08 Start Menu [.] 14/07/2009 06:08 Templates [.] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [.] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users 14/07/2009 06:08 All Users [C:\ProgramData] 14/07/2009 06:08 Default User [C:\Users\Default] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [C:\ProgramData] 08/09/2016 16:22 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:08 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:08 Documents [C:\Users\Public\Documents] 08/09/2016 16:22 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:08 Favorites [C:\Users\Public\Favorites] 08/09/2016 16:22 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 08/09/2016 16:22 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:08 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data 14/07/2009 06:08 Application Data [.] 08/09/2016 16:22 Bureau [.] 14/07/2009 06:08 Desktop [.] 14/07/2009 06:08 Documents [.] 08/09/2016 16:22 Favoris [.] 14/07/2009 06:08 Favorites [.] 08/09/2016 16:22 Menu D‚marrer [.] 08/09/2016 16:22 ModŠles [.] 14/07/2009 06:08 Start Menu [.] 14/07/2009 06:08 Templates [.] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [.] 08/09/2016 16:22 Mes images [.] 08/09/2016 16:22 Mes vid‚os [.] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [.] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [.] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [.] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Application Data\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Menu D‚marrer 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Oracle\Java\javapath 21/10/2016 10:39 java.exe [C:\Program Files\Java\jre1.8.0_111\bin\java.exe] 21/10/2016 10:39 javaw.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaw.exe] 21/10/2016 10:39 javaws.exe [C:\Program Files\Java\jre1.8.0_111\bin\javaws.exe] 3 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Start Menu 08/09/2016 16:22 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Bruno 08/09/2016 16:22 Application Data [C:\Users\Bruno\AppData\Roaming] 08/09/2016 16:22 Cookies [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Cookies] 08/09/2016 16:22 Local Settings [C:\Users\Bruno\AppData\Local] 08/09/2016 16:22 Menu D‚marrer [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu] 08/09/2016 16:22 Mes documents [C:\Users\Bruno\Documents] 08/09/2016 16:22 ModŠles [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Templates] 08/09/2016 16:22 Recent [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Recent] 08/09/2016 16:22 SendTo [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\SendTo] 08/09/2016 16:22 Voisinage d'impression [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 08/09/2016 16:22 Voisinage r‚seau [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Bruno\AppData\Local 08/09/2016 16:22 Application Data [C:\Users\Bruno\AppData\Local] 08/09/2016 16:22 Historique [C:\Users\Bruno\AppData\Local\Microsoft\Windows\History] 08/09/2016 16:22 Temporary Internet Files [C:\Users\Bruno\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\Users\Bruno\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Bruno\Documents 08/09/2016 16:22 Ma musique [C:\Users\Bruno\Music] 08/09/2016 16:22 Mes images [C:\Users\Bruno\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Bruno\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default 14/07/2009 06:08 Application Data [C:\Users\Default\AppData\Roaming] 14/07/2009 06:08 Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies] 14/07/2009 06:08 Local Settings [C:\Users\Default\AppData\Local] 08/09/2016 16:22 Menu D‚marrer [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 08/09/2016 16:22 Mes documents [C:\Users\Default\Documents] 08/09/2016 16:22 ModŠles [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 14/07/2009 06:08 My Documents [C:\Users\Default\Documents] 14/07/2009 06:08 NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 14/07/2009 06:08 PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 14/07/2009 06:08 Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent] 14/07/2009 06:08 SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo] 14/07/2009 06:08 Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 14/07/2009 06:08 Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 08/09/2016 16:22 Voisinage d'impression [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 08/09/2016 16:22 Voisinage r‚seau [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default\AppData\Local 14/07/2009 06:08 Application Data [C:\Users\Default\AppData\Local] 08/09/2016 16:22 Historique [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 14/07/2009 06:08 History [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 14/07/2009 06:08 Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu 08/09/2016 16:22 Programmes [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default\Documents 08/09/2016 16:22 Ma musique [C:\Users\Default\Music] 08/09/2016 16:22 Mes images [C:\Users\Default\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Default\Videos] 14/07/2009 06:08 My Music [C:\Users\Default\Music] 14/07/2009 06:08 My Pictures [C:\Users\Default\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Default\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Public\Documents 08/09/2016 16:22 Ma musique [C:\Users\Public\Music] 08/09/2016 16:22 Mes images [C:\Users\Public\Pictures] 08/09/2016 16:22 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:08 My Music [C:\Users\Public\Music] 14/07/2009 06:08 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:08 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets Total des fichiers list‚sÿ: 78 fichier(s) 0 octets 603 R‚p(s) 37ÿ274ÿ062ÿ848 octets libres [color=#A23BEC]< MD5 for: AFD.SYS >[/color] [2016/09/25 21:38:30 | 000,496,128 | ---- | M] (Microsoft Corporation) MD5=6621364405B22FB2C642CDB6B6DE751C -- C:\Windows\SysNative\drivers\afd.sys [2016/09/25 21:38:30 | 000,496,128 | ---- | M] (Microsoft Corporation) MD5=6621364405B22FB2C642CDB6B6DE751C -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.23403_none_36a183128e234d07\afd.sys [2009/07/14 00:21:42 | 000,500,224 | ---- | M] (Microsoft Corporation) MD5=B9384E03479D2506BC924C16A3DB87BC -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7600.16385_none_33dd3439781e25f7\afd.sys [2010/11/20 10:23:34 | 000,499,712 | ---- | M] (Microsoft Corporation) MD5=D31DC7A16DEA4A9BAF179F3D6FBDB38C -- C:\Windows\winsxs\amd64_microsoft-windows-winsock-core_31bf3856ad364e35_6.1.7601.17514_none_360e4801750ca991\afd.sys [color=#A23BEC]< MD5 for: ATAPI.SYS >[/color] [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_aad30bdeec04ea5e\atapi.sys [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7600.16385_none_392d19c13b3ad543\atapi.sys [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_3b5e2d89382958dd\atapi.sys [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_3b457059383c66e6\atapi.sys [2009/07/14 02:52:21 | 000,024,128 | ---- | M] (Microsoft Corporation) MD5=02062C0B390B7729EDC9E69C680A6F3C -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_3be7afc0514717fa\atapi.sys [2016/09/25 21:37:56 | 000,023,784 | ---- | M] (Microsoft Corporation) MD5=C8AA50005E6461D5C2C247DBABBF2008 -- C:\Windows\SysNative\drivers\atapi.sys [2016/09/25 21:37:56 | 000,023,784 | ---- | M] (Microsoft Corporation) MD5=C8AA50005E6461D5C2C247DBABBF2008 -- C:\Windows\SysNative\DriverStore\FileRepository\mshdc.inf_amd64_neutral_f012f5ea068cd6ca\atapi.sys [2016/09/25 21:37:56 | 000,023,784 | ---- | M] (Microsoft Corporation) MD5=C8AA50005E6461D5C2C247DBABBF2008 -- C:\Windows\winsxs\amd64_mshdc.inf_31bf3856ad364e35_6.1.7601.23403_none_3bf1689a513ffc53\atapi.sys [color=#A23BEC]< MD5 for: CDROM.SYS >[/color] [2016/09/25 21:37:56 | 000,150,016 | ---- | M] (Microsoft Corporation) MD5=7200A15FCDDECA736E97D2815A32A54F -- C:\Windows\SysNative\drivers\cdrom.sys [2016/09/25 21:37:56 | 000,150,016 | ---- | M] (Microsoft Corporation) MD5=7200A15FCDDECA736E97D2815A32A54F -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_510433adb8471ccf\cdrom.sys [2016/09/25 21:37:56 | 000,150,016 | ---- | M] (Microsoft Corporation) MD5=7200A15FCDDECA736E97D2815A32A54F -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.23403_none_be629c62d37d9801\cdrom.sys [2009/07/14 00:19:54 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=83D2D75E1EFB81B3450C18131443F7DB -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7600.16385_none_bb9e4d89bd7870f1\cdrom.sys [2010/11/20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\SysNative\DriverStore\FileRepository\cdrom.inf_amd64_neutral_0b3d0d1942ab684b\cdrom.sys [2010/11/20 10:19:21 | 000,147,456 | ---- | M] (Microsoft Corporation) MD5=F036CE71586E93D94DAB220D7BDF4416 -- C:\Windows\winsxs\amd64_cdrom.inf_31bf3856ad364e35_6.1.7601.17514_none_bdcf6151ba66f48b\cdrom.sys [color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color] [2009/07/14 02:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) MD5=15BC38A7492BEFE831966ADB477CF76F -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_b7fe430bc7ce3761\explorer.exe [2016/08/29 16:04:37 | 003,229,696 | ---- | M] (Microsoft Corporation) MD5=38AE1B3C38FAEF56FE4907922F0385BA -- C:\Windows\explorer.exe [2016/08/29 16:04:37 | 003,229,696 | ---- | M] (Microsoft Corporation) MD5=38AE1B3C38FAEF56FE4907922F0385BA -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_b0517adca98752cc\explorer.exe [2010/11/20 13:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_ba2f56d3c4bcbafb\explorer.exe [2016/08/29 15:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\SysWOW64\explorer.exe [2016/08/29 15:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_baa6252edde814c7\explorer.exe [2016/09/25 21:38:28 | 003,230,720 | ---- | M] (Microsoft Corporation) MD5=94FDE1A551352E1305E48EA853C4E907 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23403_none_b06de792a9729c76\explorer.exe [2010/11/20 14:24:45 | 002,872,320 | ---- | M] (Microsoft Corporation) MD5=AC4C51EB24AA95B77F705AB159189E24 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_afdaac81905bf900\explorer.exe [2009/07/14 02:39:10 | 002,868,224 | ---- | M] (Microsoft Corporation) MD5=C235A51CB740E45FFA0EBFB9BAFCDA64 -- C:\Windows\winsxs\amd64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_ada998b9936d7566\explorer.exe [2016/09/25 21:38:28 | 002,973,184 | ---- | M] (Microsoft Corporation) MD5=DD5FC870BDE759BF621B86C9BEB8FDE6 -- C:\Windows\winsxs\wow64_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23403_none_bac291e4ddd35e71\explorer.exe [color=#A23BEC]< MD5 for: I8042PRT.SYS >[/color] [2016/09/25 21:37:56 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=55CCD3E5E4DA18FCF0598F42249D47DF -- C:\Windows\SysNative\drivers\i8042prt.sys [2016/09/25 21:37:56 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=55CCD3E5E4DA18FCF0598F42249D47DF -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_6ccdaaf58e9b21ba\i8042prt.sys [2016/09/25 21:37:56 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=55CCD3E5E4DA18FCF0598F42249D47DF -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.23403_none_f607ae5908af1a35\i8042prt.sys [2009/07/14 00:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\keyboard.inf_amd64_neutral_0684fdc43059f486\i8042prt.sys [2009/07/14 00:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\SysNative\DriverStore\FileRepository\msmouse.inf_amd64_neutral_7a5f47d3150cc0eb\i8042prt.sys [2009/07/14 00:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7600.16385_none_f3435f7ff2a9f325\i8042prt.sys [2009/07/14 00:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_keyboard.inf_31bf3856ad364e35_6.1.7601.17514_none_f5747347ef9876bf\i8042prt.sys [2009/07/14 00:19:57 | 000,105,472 | ---- | M] (Microsoft Corporation) MD5=FA55C73D4AFFA7EE23AC4BE53B4592D3 -- C:\Windows\winsxs\amd64_msmouse.inf_31bf3856ad364e35_6.1.7600.16385_none_aa28fd23ec0c39f9\i8042prt.sys [color=#A23BEC]< MD5 for: NDIS.SYS >[/color] [2010/11/20 14:33:45 | 000,951,680 | ---- | M] (Microsoft Corporation) MD5=79B47FD40D9A817E932F9D26FAC0A81C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_05ed313632ae9759\ndis.sys [2016/09/25 21:38:30 | 000,948,968 | ---- | M] (Microsoft Corporation) MD5=8664770EC3CF87492AD1CDDA424FD3CB -- C:\Windows\SysNative\drivers\ndis.sys [2016/09/25 21:38:30 | 000,948,968 | ---- | M] (Microsoft Corporation) MD5=8664770EC3CF87492AD1CDDA424FD3CB -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.23403_none_06806c474bc53acf\ndis.sys [2009/07/14 02:48:27 | 000,947,776 | ---- | M] (Microsoft Corporation) MD5=CAD515DBD07D082BB317D9928CE8962C -- C:\Windows\winsxs\amd64_microsoft-windows-ndis_31bf3856ad364e35_6.1.7600.16385_none_03bc1d6e35c013bf\ndis.sys [color=#A23BEC]< MD5 for: NETBT.SYS >[/color] [2010/11/20 10:23:20 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=09594D1089C523423B32A4229263F068 -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.17514_none_be8acdd10de3b1a6\netbt.sys [2016/09/25 21:38:28 | 000,261,632 | ---- | M] (Microsoft Corporation) MD5=4B446DCE1B5059BEA80430E7C5498F5A -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.23403_none_bf1e08e226fa551c\netbt.sys [2009/07/14 00:21:29 | 000,259,072 | ---- | M] (Microsoft Corporation) MD5=9162B273A44AB9DCE5B44362731D062A -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7600.16385_none_bc59ba0910f52e0c\netbt.sys [2016/05/11 15:58:23 | 000,262,144 | ---- | M] (Microsoft Corporation) MD5=E47D571FEC2C76E867935109AB2A770C -- C:\Windows\SysNative\drivers\netbt.sys [2016/05/11 15:58:23 | 000,262,144 | ---- | M] (Microsoft Corporation) MD5=E47D571FEC2C76E867935109AB2A770C -- C:\Windows\winsxs\amd64_microsoft-windows-netbt_31bf3856ad364e35_6.1.7601.23451_none_bee5f8b22724ae23\netbt.sys [color=#A23BEC]< MD5 for: TDX.SYS >[/color] [2009/07/14 00:21:15 | 000,099,840 | ---- | M] (Microsoft Corporation) MD5=079125C4B17B01FCAEEBCE0BCB290C0F -- C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7600.16385_none_4632b9f2f5c6af5e\tdx.sys [2016/09/25 21:38:30 | 000,117,760 | ---- | M] (Microsoft Corporation) MD5=106269AB8623435C130A33DCA499A7EF -- C:\Windows\SysNative\drivers\tdx.sys [2016/09/25 21:38:30 | 000,117,760 | ---- | M] (Microsoft Corporation) MD5=106269AB8623435C130A33DCA499A7EF -- C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.23403_none_48f708cc0bcbd66e\tdx.sys [2010/11/20 10:21:56 | 000,119,296 | ---- | M] (Microsoft Corporation) MD5=DDAD5A7AB24D8B65F8D724F5C20FD806 -- C:\Windows\winsxs\amd64_microsoft-windows-tdi-over-tcpip_31bf3856ad364e35_6.1.7601.17514_none_4863cdbaf2b532f8\tdx.sys [color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color] [2010/11/20 14:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_df8bea40ac96ca21\volsnap.sys [2010/11/20 14:34:02 | 000,295,808 | ---- | M] (Microsoft Corporation) MD5=0D08D2F3B3FF84E433346669B5E0F639 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_73dcbcf012b4850e\volsnap.sys [2009/07/14 02:45:55 | 000,294,992 | ---- | M] (Microsoft Corporation) MD5=58F82EED8CA24B461441F9C3E4F0BF5C -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7600.16385_none_71aba92815c60174\volsnap.sys [2016/09/25 21:37:56 | 000,297,192 | ---- | M] (Microsoft Corporation) MD5=B52F1F5F55CD773BA89E5739B82E9C34 -- C:\Windows\SysNative\drivers\volsnap.sys [2016/09/25 21:37:56 | 000,297,192 | ---- | M] (Microsoft Corporation) MD5=B52F1F5F55CD773BA89E5739B82E9C34 -- C:\Windows\SysNative\DriverStore\FileRepository\volume.inf_amd64_neutral_4574fcaa69621dfb\volsnap.sys [2016/09/25 21:37:56 | 000,297,192 | ---- | M] (Microsoft Corporation) MD5=B52F1F5F55CD773BA89E5739B82E9C34 -- C:\Windows\winsxs\amd64_volume.inf_31bf3856ad364e35_6.1.7601.23403_none_746ff8012bcb2884\volsnap.sys [color=#A23BEC]< MD5 for: WININIT.EXE >[/color] [2009/07/14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\SysNative\wininit.exe [2009/07/14 02:39:52 | 000,129,024 | ---- | M] (Microsoft Corporation) MD5=94355C28C1970635A31B3FE52EB7CEBA -- C:\Windows\winsxs\amd64_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_8ce7aa761e01ad49\wininit.exe [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\SysWOW64\wininit.exe [2009/07/14 02:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe [color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color] [2015/09/03 21:48:21 | 000,038,400 | ---- | M] () MD5=098D1E9C1B749142F999973C794BE54D -- C:\AdsFix\winlogon.exe [2010/11/20 14:25:30 | 000,390,656 | ---- | M] (Microsoft Corporation) MD5=1151B1BAA6F350B1DB6598E0FEA7C457 -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_cde90685eb910636\winlogon.exe [2009/07/14 02:39:52 | 000,389,120 | ---- | M] (Microsoft Corporation) MD5=132328DF455B0028F13BF0ABEE51A63A -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_cbb7f2bdeea2829c\winlogon.exe [2014/07/17 03:07:24 | 000,455,168 | ---- | M] (Microsoft Corporation) MD5=8CEBD9D0A0A879CDE9F36F4383B7CAEA -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_cdc47ed1ebad0e4e\winlogon.exe [2016/09/25 21:38:30 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=9562F469F07315BE916AE3B780E2C42C -- C:\Windows\SysNative\winlogon.exe [2016/09/25 21:38:30 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=9562F469F07315BE916AE3B780E2C42C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.23403_none_ce7c419704a7a9ac\winlogon.exe [2014/07/16 04:23:23 | 000,455,680 | ---- | M] (Microsoft Corporation) MD5=98AA0BFEE089C7E5DADB94190D93456C -- C:\Windows\winsxs\amd64_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_ce434d9704d2c730\winlogon.exe [2016/07/27 23:38:59 | 000,074,240 | ---- | M] () MD5=A6C645EF2F30ABF61FCDBE5E76999730 -- C:\QuickDiag\MBR\Winlogon.exe [2016/03/10 13:07:16 | 000,960,480 | ---- | M] (MalwareBytes) MD5=F86A4139730504047F52CCFB8C47E9F5 -- C:\Program Files (x86)\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe [color=#E56717]========== Alternate Data Streams ==========[/color] @Alternate Data Stream - 162 bytes -> C:\ProgramData\TEMP:07BF512B < End of report >