Zoek.exe v5.0.0.1 Updated 27-09-2015 Tool run by widen-finalis on 09/05/2017 at 15:35:34,21. Microsoft Windows 7 Édition Starter 6.1.7601 Service Pack 1 x86 Running in: Safe Mode NETWORK No Internet Access Detected Launched: C:\Users\widen-finalis\Desktop\zoek.exe [Scan all users] [Script inserted] [Checkboxes used] ==== Running Processes ====================== C:\Windows\system32\csrss.exe C:\Windows\system32\wininit.exe C:\Windows\system32\csrss.exe C:\Windows\system32\winlogon.exe C:\Windows\system32\services.exe C:\Windows\system32\lsass.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\SUPERAntiSpyware\SASCORE.EXE C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\explorer.exe C:\Windows\system32\ctfmon.exe C:\Program Files\EaseUS\EaseUS EverySync\bin\EaseUSEverySyncCache.exe C:\Program Files\IObit\Advanced SystemCare\ASCInit.exe C:\Program Files\IObit\Advanced SystemCare\ASC.exe C:\Program Files\IObit\Advanced SystemCare\Monitor.exe C:\Program Files\IObit\Advanced SystemCare\ASCTray.exe C:\Program Files\Ashampoo\Ashampoo UnInstaller 6\UI6Guard.exe C:\Program Files\CCleaner\CCleaner.exe C:\Users\widen-finalis\Desktop\zoek.exe C:\Windows\system32\conhost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\wbem\wmiprvse.exe ==== System Restore Info ====================== ==== Reset Hosts File ====================== # Copyright (c) 1993-2006 Microsoft Corp. # # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. # # This file contains the mappings of IP addresses to host names. Each # entry should be kept on an individual line. The IP address should # be placed in the first column followed by the corresponding host name. # The IP address and the host name should be separated by at least one # space. # # Additionally, comments (such as these) may be inserted on individual # lines or following the machine name denoted by a '#' symbol. # # For example: # # 102.54.94.97 rhino.acme.com # source server # 38.25.63.10 x.acme.com # x client host # localhost name resolution is handled within DNS itself. 127.0.0.1 localhost ::1 localhost ==== Windows Installer Info ====================== Acrobat.com [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\4AFCE782A91734120AB96D1AD25EE404]C:\Windows\Installer\7cd2f.msi Acronis Backup Agent [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9C67BFB0B5A921C42AFFE99D46F04163]C:\Windows\Installer\34edd9.msi Adobe AIR [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1F9ACB2AC6655084791DF7CD39837632]c:\Windows\Installer\7cd2a.msi Advanced Installer 13.8.1 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8C796185CD33AB447A3C99B2D5920C11]C:\Windows\Installer\5929e70.msi AndroidInstaller [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5E182325DD195F94D9585914847F95A6]C:\Windows\Installer\13ccf3.msi Assistant de connexion Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\41DC8ECD5FBF46449B4A1EE87453647C]C:\Windows\Installer\13cd2a.msi COMODO Internet Security Complete [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9544AD768A3396E4C9B7BFC5ABAD06BA]C:\Windows\Installer\34ede2.msi COMODO Secure Shopping [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\0B9FD51D89A3FEB47B5DCFA3AE047506]C:\Windows\Installer\34edd0.msi eSobi v2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5B769D51EB4AEA24E94846DC60B252AA]C:\Windows\Installer\3c5f1.msi FileOpen [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\13EB9E64CD0779742AB4BCF70FBB86BB]C:\Windows\Installer\543e7ea.msi Foxit PhantomPDF [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\80924A8705027E11498A00C092297F90]C:\Windows\Installer\543e7ef.msi Galerie de photos Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\96740EE14C1960A4297BCFFA6EABDB9D]C:\Windows\Installer\13cd53.msi Installation Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AB24733164F6E3D458FA8736D1A98D8B]C:\Windows\Installer\13cd2f.msi Jing [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B8F487C80D9895A40A00E7FE21E95147]C:\Windows\Installer\473c1c2.msi Laplink PCmover Express [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DC62E2B2CB01EE041910108281593096]C:\Windows\Installer\b82726.msi LiteManager Pro - Server [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\574AFF175D42BF445AF1936B993E8DC2]C:\Windows\Installer\cf7f86.msi LiteManager Pro - Viewer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\484E6865631747644A2B05C8B762CD4A]C:\Windows\Installer\cf7f82.msi Macrium Reflect Free Edition [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\52F2754910BA7FE41ABF063AC589F4F4]C:\Windows\Installer\20566370.msi Microsoft .NET Framework 4.5.2 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\65FC11932FE9AB9348A62CB73DDC6058]C:\Windows\Installer\13c4d9.msi Microsoft Application Error Reporting [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\000021599B0090400000000000F01FEC]C:\Windows\Installer\13cd11.msi Microsoft Choice Guard [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\ABB21E0F66DA22044A351A8C0A4C5D07]C:\Windows\Installer\13cd34.msi Microsoft Office 2010 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\00004159070000000000000000F01FEC]C:\Windows\Installer\13cd0c.msi Microsoft Silverlight [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D7314F9862C648A4DB8BE2A5B47BE100]c:\Windows\Installer\7ccd4.msi Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D034B0FAA6BD374B960AAD30DF10D8B]C:\Windows\Installer\13cd49.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6F9E66FF7E38E3A3FA41D89E8A906A4A]C:\Windows\Installer\1b23247.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D20352A90C039D93DBF6126ECE614057]c:\Windows\Installer\7ccdf.msi Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\6E815EB96CCE9A53884E7857C57002F0]C:\Windows\Installer\d675b6.msi Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\1D5E3C0FEDA1E123187686FED06E995A]C:\Windows\Installer\2a078.msi Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\C025571B2A687A53689168CD7369889B]C:\Windows\Installer\3aa43.msi Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DC8A59DBF9D1DA5389A1E3975220E6BB]C:\Windows\Installer\3aa29.msi Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\22BEFC8F7E2A1793E9ADB411DEFE1C58]C:\Windows\Installer\b82732.msi Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\21EE4A31AE32173319EEFE3BD6FDFFE3]C:\Windows\Installer\b8272c.msi Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23506 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\F6BA540115164363C8C2EE03A81A6A7A]C:\Windows\Installer\3aa62.msi Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23506 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DA87DA56D32DE1A33950A36EC55D222C]C:\Windows\Installer\3aa5c.msi MSVCRT [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\7E577B2224C65CF4E801A9E52375DB49]C:\Windows\Installer\13cd16.msi Music Recorder [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\8B508F1FCA29FEE4C8EC54836FBEBE0A]C:\Windows\Installer\d675bc.msi MyWinLocker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9D0DC7D088A436A4F819F3E4F8737186]C:\Windows\Installer\7ccea.msi MyWinLocker Suite [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\3C5FB837B7FA0BB47BFE5E50FE7C65EB]C:\Windows\Installer\7cce4.msi Outil de t‚l‚chargement Windows Live [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDB6C50237B7ED245850A990F3532A83]C:\Windows\Installer\13cd25.msi PDQ Deploy [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\EF311DB58D8BA7E4B91A716C9434B2E3]C:\Windows\Installer\1373ae6.msi Shredder [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\38E5962CD1FC1D3448EF3BEB5C1610A2]C:\Windows\Installer\7cd19.msi UxStyle Core Beta [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\550363E85E51A8D4C9960A9AEDA93373]C:\Windows\Installer\330278.msi Vole Edutainment [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\B639C00648670F24F9FB4027F6D3542E]C:\Windows\Installer\b35c39.msi Windows Live Communications Platform [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\940E57139A9FD3A4F891CAF90B54411D]C:\Windows\Installer\13cd1b.msi Windows Live FolderShare [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\907018673D7AD86419761A87C0E167C6]C:\Windows\Installer\13cd4e.msi Windows Live Mail [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\68267DD57EB949849A099E509EA18C81]C:\Windows\Installer\13cd44.msi Windows Live Messenger [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\D381B5441F4F8C549BBD1F3155AC56B7]C:\Windows\Installer\13cd3a.msi Windows Live Movie Maker [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\5A38B03288D759B47BE14FC4C0870B20]C:\Windows\Installer\13cd59.msi Windows Live Writer [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A12B436470CC693498C0B2188666F1AE]C:\Windows\Installer\13cd5e.msi ==== Empty Folders Check ====================== C:\Program Files\Classic Shell deleted successfully C:\Program Files\eSobi deleted successfully C:\Program Files\Opera deleted successfully C:\PROGRA~2\Lavasoft deleted successfully C:\PROGRA~2\Nero deleted successfully C:\PROGRA~2\Shared Space deleted successfully C:\PROGRA~2\{74E9F814-C737-42CC-B721-DBBC4059367A} deleted successfully C:\Users\widen-finalis\AppData\Local\CrashDumps deleted successfully ==== Checking Systemdrive for Symlinks ====================== Le volume dans le lecteur C s'appelle Acer Le num‚ro de s‚rie du volume est 56EE-F47E R‚pertoire de C:\ 14/07/2009 06:53 Documents and Settings [C:\Users] 0 fichier(s) 0 octets R‚pertoire de C:\Program Files 12/12/2016 16:02 Fichiers communs [C:\Program Files\Common Files] 0 fichier(s) 0 octets R‚pertoire de C:\Program Files\Windows NT 12/12/2016 16:02 Accessoires [C:\Program Files\Windows NT\Accessories] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData 14/07/2009 06:53 Application Data [C:\ProgramData] 12/12/2016 16:02 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:53 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:53 Documents [C:\Users\Public\Documents] 12/12/2016 16:02 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:53 Favorites [C:\Users\Public\Favorites] 12/12/2016 16:02 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 12/12/2016 16:02 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:53 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:53 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\ProgramData\Microsoft\Windows\Start Menu 12/12/2016 16:02 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users 14/07/2009 06:53 All Users [C:\ProgramData] 14/07/2009 06:53 Default User [C:\Users\Default] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Acronis Agent User 04/02/2017 18:42 Application Data [C:\Users\Acronis Agent User\AppData\Roaming] 04/02/2017 18:42 Cookies [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Cookies] 04/02/2017 18:42 Local Settings [C:\Users\Acronis Agent User\AppData\Local] 04/02/2017 18:42 Menu D‚marrer [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu] 04/02/2017 18:42 Mes documents [C:\Users\Acronis Agent User\Documents] 04/02/2017 18:42 ModŠles [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Templates] 04/02/2017 18:42 Recent [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Recent] 04/02/2017 18:42 SendTo [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\SendTo] 04/02/2017 18:42 Voisinage d'impression [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 04/02/2017 18:42 Voisinage r‚seau [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Acronis Agent User\AppData\Local 04/02/2017 18:42 Application Data [C:\Users\Acronis Agent User\AppData\Local] 04/02/2017 18:42 Historique [C:\Users\Acronis Agent User\AppData\Local\Microsoft\Windows\History] 04/02/2017 18:42 Temporary Internet Files [C:\Users\Acronis Agent User\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu 04/02/2017 18:42 Programmes [C:\Users\Acronis Agent User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Acronis Agent User\Documents 04/02/2017 18:42 Ma musique [C:\Users\Acronis Agent User\Music] 04/02/2017 18:42 Mes images [C:\Users\Acronis Agent User\Pictures] 04/02/2017 18:42 Mes vid‚os [C:\Users\Acronis Agent User\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users 14/07/2009 06:53 Application Data [C:\ProgramData] 12/12/2016 16:02 Bureau [C:\Users\Public\Desktop] 14/07/2009 06:53 Desktop [C:\Users\Public\Desktop] 14/07/2009 06:53 Documents [C:\Users\Public\Documents] 12/12/2016 16:02 Favoris [C:\Users\Public\Favorites] 14/07/2009 06:53 Favorites [C:\Users\Public\Favorites] 12/12/2016 16:02 Menu D‚marrer [C:\ProgramData\Microsoft\Windows\Start Menu] 12/12/2016 16:02 ModŠles [C:\ProgramData\Microsoft\Windows\Templates] 14/07/2009 06:53 Start Menu [C:\ProgramData\Microsoft\Windows\Start Menu] 14/07/2009 06:53 Templates [C:\ProgramData\Microsoft\Windows\Templates] 0 fichier(s) 0 octets R‚pertoire de C:\Users\All Users\Microsoft\Windows\Start Menu 12/12/2016 16:02 Programmes [C:\ProgramData\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default 14/07/2009 06:53 Application Data [C:\Users\Default\AppData\Roaming] 14/07/2009 06:53 Cookies [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Cookies] 14/07/2009 06:53 Local Settings [C:\Users\Default\AppData\Local] 12/12/2016 16:02 Menu D‚marrer [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 12/12/2016 16:02 Mes documents [C:\Users\Default\Documents] 12/12/2016 16:02 ModŠles [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 14/07/2009 06:53 My Documents [C:\Users\Default\Documents] 14/07/2009 06:53 NetHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 14/07/2009 06:53 PrintHood [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 14/07/2009 06:53 Recent [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Recent] 14/07/2009 06:53 SendTo [C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo] 14/07/2009 06:53 Start Menu [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu] 14/07/2009 06:53 Templates [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Templates] 12/12/2016 16:02 Voisinage d'impression [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 12/12/2016 16:02 Voisinage r‚seau [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default\AppData\Local 14/07/2009 06:53 Application Data [C:\Users\Default\AppData\Local] 12/12/2016 16:02 Historique [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 14/07/2009 06:53 History [C:\Users\Default\AppData\Local\Microsoft\Windows\History] 14/07/2009 06:53 Temporary Internet Files [C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu 12/12/2016 16:02 Programmes [C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Default\Documents 12/12/2016 16:02 Ma musique [C:\Users\Default\Music] 12/12/2016 16:02 Mes images [C:\Users\Default\Pictures] 12/12/2016 16:02 Mes vid‚os [C:\Users\Default\Videos] 14/07/2009 06:53 My Music [C:\Users\Default\Music] 14/07/2009 06:53 My Pictures [C:\Users\Default\Pictures] 14/07/2009 06:53 My Videos [C:\Users\Default\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\Public\Documents 12/12/2016 16:02 Ma musique [C:\Users\Public\Music] 12/12/2016 16:02 Mes images [C:\Users\Public\Pictures] 12/12/2016 16:02 Mes vid‚os [C:\Users\Public\Videos] 14/07/2009 06:53 My Music [C:\Users\Public\Music] 14/07/2009 06:53 My Pictures [C:\Users\Public\Pictures] 14/07/2009 06:53 My Videos [C:\Users\Public\Videos] 0 fichier(s) 0 octets R‚pertoire de C:\Users\widen-finalis 12/12/2016 16:03 Application Data [C:\Users\widen-finalis\AppData\Roaming] 12/12/2016 16:03 Cookies [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Cookies] 12/12/2016 16:03 Local Settings [C:\Users\widen-finalis\AppData\Local] 12/12/2016 16:03 Menu D‚marrer [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu] 12/12/2016 16:03 Mes documents [C:\Users\widen-finalis\Documents] 12/12/2016 16:03 ModŠles [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Templates] 12/12/2016 16:03 Recent [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Recent] 12/12/2016 16:03 SendTo [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\SendTo] 12/12/2016 16:03 Voisinage d'impression [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Printer Shortcuts] 12/12/2016 16:03 Voisinage r‚seau [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Network Shortcuts] 0 fichier(s) 0 octets R‚pertoire de C:\Users\widen-finalis\AppData\Local 12/12/2016 16:03 Application Data [C:\Users\widen-finalis\AppData\Local] 12/12/2016 16:03 Historique [C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\History] 12/12/2016 16:03 Temporary Internet Files [C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files] 0 fichier(s) 0 octets R‚pertoire de C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu 12/12/2016 16:03 Programmes [C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs] 0 fichier(s) 0 octets R‚pertoire de C:\Users\widen-finalis\Documents 12/12/2016 16:03 Ma musique [C:\Users\widen-finalis\Music] 12/12/2016 16:03 Mes images [C:\Users\widen-finalis\Pictures] 12/12/2016 16:03 Mes vid‚os [C:\Users\widen-finalis\Videos] 0 fichier(s) 0 octets Total des fichiers list‚sÿ: 0 fichier(s) 0 octets 93 R‚p(s) 175ÿ919ÿ710ÿ208 octets libres ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== ==== Installed Programs ====================== 7-Zip 16.04 Acer Crystal Eye webcam Ver:1.1.192.810 Acer ePower Management Acer eRecovery Management Acer VCM Acrobat.com Acronis Backup Agent Adobe AIR Adobe Flash Player 10 ActiveX Adobe Shockwave Player 12.2 Advanced Installer 13.8.1 Advanced SystemCare 10 Advanced Uninstaller PRO - Version 12 Aiseesoft Video Enhancer 9.2.10 Amphetamine AndroidInstaller Anti-Locky AOMEI PE Builder 1.5 Ashampoo Burning Studio 2017 Ashampoo Snap 9 Ashampoo StartUp Tuner 2.00 Ashampoo UnInstaller 6 Assistant de connexion Windows Live Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver BatteryCare 0.9.26.0 BDAntiRansomware CCleaner CDBurnerXP Comodo Dragon COMODO Internet Security Complete COMODO Secure Shopping Copy Handler 1.44 CyberGhost 6 DebugMode Wink DIY DataRecovery CHK-Mate DriveImage XML (Private Edition) DriverMax 9 EaseUS EverySync 3.0 Easy File Locker 2.2 Encrypt4all Professional Edition version 6.0.0.183 ENE USB Card Reader Driver ETDWare PS/2-x86 7.0.6.5_WHQL EyesRelaxingAndFocusing 3.0 Fast File Copy version 1.0 Fast HTML Checker FastStone Photo Resizer 3.8 FileMenu Tools FileOpen FixIDE 1.0 Flip HTML5 Folderico 4.0 RC12 FolderIco 5.1 FolderViewer Foxit PhantomPDF Foxit Reader Free Download Manager Freeraser Galerie de photos Windows Live Greenshot 1.2.9.129 GridinSoft Anti-Ransomware 0.9.4 HissenIT Masterdata Icecream Screen Recorder version 4.76 Identity Card iGetting Audio IM-Magic Partition Resizer Free 2016 InfraRecorder Installation Windows Live Intel(R) Graphics Media Accelerator Driver Intel(R) Rapid Storage Technology Internet Security Essentials IObit Uninstaller IObit Unlocker ISO Workshop 7.5 Jing K-Lite Mega Codec Pack 13.1.0 KeyScrambler Kotobee Author version 1.3.1 Kotobee Publisher version 2.14 Kotobee Reader version 1.1.1 Laplink PCmover Express Launch Manager LiteManager Pro - Server LiteManager Pro - Viewer Macrium Reflect Free Edition Malwarebytes version 3.0.6.1469 MetroTextual version 2.0.1 Microsoft .NET Framework 4.5.2 Microsoft Application Error Reporting Microsoft Choice Guard Microsoft Office 2010 Microsoft Silverlight Microsoft SQL Server 2005 Compact Edition [ENU] Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23506 Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23506 MiniCopier Moo0 Clic Droit Pro 1.53 Moo0 Menu Transparent 1.20 Moo0 Multi-Bureau 1.17 Moo0 N‚ttoyeur de Disque 1.23 Moo0 Plus de Menu Fenˆtre 1.20 Moo0 Redimensionner Image 1.22 Moo0 SystŠme Moniteur 1.76 Moo0 Video … Audio 1.12 Moo0 Video Cutter 1.07 Moo0 YouTube Downloader 1.07 MSVCRT muCommander (remove only) MultiCommander (Win32) Music Recorder MyWinLocker MyWinLocker Suite NiceCopier Notepad++ (32-bit x86) Outil de t‚l‚chargement Windows Live Panda USB Vaccine 1.0.1.4 PDQ Deploy PeaZip 6.4.1 PerigeeCopy 1.7 Protected Folder Realtek High Definition Audio Driver Reason Core Security Remembr version 0.5 Remo Convert OST to PST Remo Drive Defrag Remo Drive Wipe 2.0.0 Remo File Eraser 2.0 Remo MORE 2.0 Remo Outlook Backup & Migrate 1.0.0 Remo Privacy Cleaner Remo Recover for Android Remo Recover FREE Edition 1.0 Remo Repair MOV Remo Repair PowerPoint Remo Repair RAR Remo Repair Registry Remo Repair ZIP Roadkil's Unstoppable Copier Version 5.2 Scadarlia version 1.1.2 SEAF By C_XX Shadow Defender ShadowExplorer 0.9 Shredder SkinPack Tango Software Informer 1.5.1324.0 SoundCloud Download Spotify Spybot Anti-Beacon SUPERAntiSpyware Supercopier 1.2.1.0 SyncBackFree SyncBackPro SyncBackTouch System GoBack Free System Ninja Pro version 3.1.7 TAP-Windows 9.21.2 TechPowerUp GPU-Z TeraCopy 3.0 Trojan Remover trolCommander (remove only) Ultracopier 1.2.1.0 Unlocker 1.9.2 Unreal Commander v3.57 Update for Microsoft .NET Framework 4.5.2 (KB3210139) UsbFix Premium 2016 UxStyle Core Beta Vision - Software for the Color Blinded VivPDF Editor Vole Edutainment WebM Project Directshow Filters Welcome Center Windows 10 UX Pack Windows Live Communications Platform Windows Live FolderShare Windows Live Mail Windows Live Messenger Windows Live Movie Maker Windows Live Writer WinInizio PenSuite Multimedia 2.1 Winja version 3.0.3 WinMerge 2.14.0 WinRAR 5.40 (32-bit) Wise Folder Hider Wise Memory Optimizer 3.51 Wise Video Downloader 2.53 Wondershare Filmora(Build 7.8.1) Wondershare Helper Compact 2.5.2 Wondershare TidyMyMusic(Build 1.5.0.1) Xilisoft CHM en EPUB Convertisseur Xilisoft D‚coupeur Vid‚o 2 Xilisoft diteur Vid‚o 2 Xilisoft HTML en EPUB Convertisseur Xilisoft PDF en EPUB Convertisseur Xiph.Org Open Codecs 0.85.17777 ==== Deleting Services ====================== ==== Batch Command(s) Run By Tool====================== ==== Deleting Files \ Folders ====================== C:\Program Files\Classic Shell not found C:\Program Files\eSobi not found C:\Program Files\Opera not found C:\PROGRA~2\{74E9F814-C737-42CC-B721-DBBC4059367A} not found C:\Program Files\Fichiers communs deleted C:\Program Files\Windows Live SkyDrive deleted C:\Users\widen-finalis\AppData\Roaming\Scadarlia deleted C:\Program Files\MiniCopier deleted C:\Program Files\Remo MORE deleted C:\Program Files\GUM66A5.tmp deleted C:\Program Files\Remo Privacy Cleaner deleted C:\Program Files\Steganos Privacy Suite 18 deleted C:\Program Files\Common Files\DVDVideoSoft\bin deleted C:\Program Files\Wondershare deleted C:\Program Files\Common Files\Wondershare deleted C:\Users\widen-finalis\AppData\Roaming\Thinstall deleted C:\PROGRA~2\Wondershare Video Editor deleted C:\PROGRA~2\ProductData deleted C:\PROGRA~2\Package Cache deleted C:\Users\widen-finalis\AppData\Local\Thinstall deleted C:\Users\widen-finalis\AppData\Local\Wondershare deleted C:\Users\widen-finalis\AppData\Local\CrashRpt deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare deleted C:\Windows\system32\tasks\RunAsStdUser Task deleted ==== System Specs ====================== Windows: Windows 7 Starter Edition Service Pack 1 (Build 7601) Memory (RAM): 1014 MB CPU Info: Intel(R) Atom(TM) CPU N450 @ 1.66GHz CPU Speed: 1710,6 MHz Sound Card: Not detected Display Adapters: | RDP Encoder Mirror Driver Monitors: 1x; Screen Resolution: 800 X 600 - 32 bit Network: Network Present Network Adapters: TAP-Windows Adapter V9 | Intel(R) WiFi Link 1000 BGN | Atheros AR8152 PCI-E Fast Ethernet Controller (NDIS 6.20) CD / DVD Drives: 1x (E: | ) E: HL-DT-STDVDRAM GP40NW10 Ports: COM Ports NOT Present. LPT Port NOT Present. Mouse: 2 Button Mouse Present Hard Disks: C: 211,1GB | X: 4,1GB | Z: 2,8GB Hard Disks - Free: C: 163,6GB | X: 1,6GB | Z: 2,7GB Manufacturer *: Acer BIOS Info: AT/AT COMPATIBLE | 10/07/10 | ACRSYS - 1 Time Zone: Paris, Madrid Motherboard *: Acer JE02_PT Country: France Language: FRA ==== System Specs (Software) ====================== Anti-Virus: COMODO Antivirus On-access scanning disabled (Outdated) Anti-Spyware: COMODO Advanced Protection disabled (Outdated) Anti-Spyware: Malwarebytes disabled (Outdated) Anti-Spyware: Windows Defender disabled (Outdated) Firewall: COMODO Firewall disabled Default Browser: Comodo Dragon 52.15.25.664 Internet Explorer Version: 11.0.9600.17843 Shockwave Player version: 12.2.8r198 ==== Files Recently Created / Modified ====================== ====== C:\Windows ==== 2017-05-09 05:15:46 F1D3FF8443297732862DF21DC4E57262 4 --sha-w- C:\Windows\wisefs.dat 2017-05-09 05:15:45 462460082B97D96BFDCE6FD1A632E9F8 47472 ----a-w- C:\Windows\WiseFs32.sys 2017-05-07 07:06:44 4116CE62E6CBBBD7D0D5B4A20B89FB59 916480 ----a-w- C:\Windows\expstart.exe 2017-05-07 06:57:00 CD2200309CF3272C1E4CE018F3B0F443 48114 ----a-w- C:\Windows\driveicon.ico 2017-05-06 19:16:17 40D777B7A95E00593EB1568C68514493 2616320 ----a-w- C:\Windows\explorer.exe 2017-05-06 18:31:19 D6F717B7F6F2D38BFAC991D7D02D9C86 1996 ----a-w- C:\Windows\hosts 2017-05-06 18:14:18 7255732B7ED89086BEA8DD5C4014E57B 2413056 ----a-w- C:\Windows\UxStyle_Core_Jul13_x86.msi 2017-05-06 18:14:17 2BF7CEA794A8450B03159A2854A15511 352256 ----a-w- C:\Windows\uxpack.icons 2017-05-04 20:14:11 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\diskptex.dat 2017-05-04 20:14:11 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\diskpt.dat 2017-05-04 12:19:35 72F2D357120F95C1E725C22915FE95E1 193 ----a-w- C:\Windows\WORDPAD.INI 2017-05-04 11:58:20 E7EDA9CE45F0E63CC811A3568F3D26DC 64 ----a-w- C:\Windows\diskpt.crt ====== C:\Users\WIDEN-~1\AppData\Local\Temp ==== ====== Java Cache ===== ====== C:\Windows\system32 ===== 2017-05-09 06:13:10 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Windows\System32\LogMsg.txt 2017-05-09 06:13:10 78FF171860ADDC12A8D2C23362F29D59 156 ----a-w- C:\Windows\System32\LogVss.txt 2017-05-09 05:15:28 FF63021FFE82478535F255A6794B30F6 19496 ----a-w- C:\Windows\System32\fbnative.exe 2017-05-07 13:44:01 671FEF5266B8AA14C0B69B38C24BD8BD 415 ----a-w- C:\Windows\System32\lame_acm.xml 2017-05-07 13:44:00 FC726DD94F4DD4028A976FCC4DBF0C43 122880 ----a-w- C:\Windows\System32\ac3acm.acm 2017-05-07 13:44:00 FA425C74CE2EB719B2A77A7A2ADDAE32 216064 ----a-w- C:\Windows\System32\lagarith.dll 2017-05-07 13:44:00 335A224416BA985EAFA71D15C004F702 39936 ----a-w- C:\Windows\System32\huffyuv.dll 2017-05-07 13:44:00 2B24DB82C3C6A590591039153536183A 473088 ----a-w- C:\Windows\System32\lameACM.acm 2017-05-07 13:43:55 0554D656B9DCAE7E3DA72659DFACB67A 112128 ----a-w- C:\Windows\System32\ff_vfw.dll 2017-05-06 19:17:18 0E5AE41049351ED936A11FE3AFB729E4 28063232 ----a-w- C:\Windows\System32\imageres.dll 2017-05-06 19:17:11 5CB2886338C82E388F68557E2745200F 1498624 ----a-w- C:\Windows\System32\ExplorerFrame.dll 2017-05-06 19:17:05 F977BE7B8C5462087374364EAFB3C15B 10752 ----a-w- C:\Windows\System32\browseui.dll 2017-05-06 19:16:59 67C1B58706B47EEBA4E117AC197289E6 740864 ----a-w- C:\Windows\System32\batmeter.dll 2017-05-06 18:14:37 E62EE6F1EFC85CB36D62AB779DB6E4EC 517120 ----a-w- C:\Windows\System32\CLWCP.exe 2017-05-04 06:30:44 ACAA3955AEF5BE4B3A1035566A34CD7D 236792 ----a-w- C:\Windows\System32\iseguard32.dll ====== C:\Windows\system32\drivers ===== 2017-05-09 05:17:03 B5A5751F8A7CF9D6744D941D00C69C6D 15912 ----a-w- C:\Windows\System32\drivers\eudskacs.sys 2017-05-09 05:17:03 10528A270F2FED01A13328DFF812367A 189992 ----a-w- C:\Windows\System32\drivers\EuFdDisk.sys 2017-05-09 05:17:02 6F5C1B283EBBA5D259BE1576EE9A793B 51752 ----a-w- C:\Windows\System32\drivers\eubakup.sys 2017-05-09 05:17:01 7CB31C4CB830F8817D65F14A16AC18C3 41512 ----a-w- C:\Windows\System32\drivers\EUBKMON.sys 2017-05-07 12:58:46 899D9A335D58EA818936B6D7439C2394 37016 ----a-w- C:\Windows\System32\drivers\FolderHK.sys 2017-05-06 19:46:52 EE7A27F531CBD33928059F8BB0E31E34 1956 ----a-w- C:\Windows\System32\drivers\fvstore.dat 2017-05-06 14:08:34 D41D8CD98F00B204E9800998ECF8427E 0 ---ha-w- C:\Windows\System32\drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2017-05-05 08:28:42 CF30D43BD112080BAF33667651CBD1B0 49424 ----a-w- C:\Windows\System32\drivers\rsblk.sys 2017-05-05 08:23:35 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Windows\System32\drivers\rsdrv.sys 2017-05-04 13:45:48 07DE3E7A109069B56059BF910FB55CF6 33552 ----a-w- C:\Windows\System32\drivers\gsinspect.sys 2017-05-04 13:30:42 B653E03B1479ADCF69D164BB6DD65562 29968 ----a-w- C:\Windows\System32\drivers\gsars.sys 2017-05-04 11:58:14 242189D5C420C14F4BE70E26175C2927 351600 ----a-w- C:\Windows\System32\drivers\diskpt.sys 2017-05-04 06:30:45 048C878140F1DA2C560820EBFB541EB8 40952 ----a-w- C:\Windows\System32\drivers\isedrv.sys ====== C:\Windows\Tasks ====== 2017-05-09 12:47:37 A1F0A20D43E9FB69E95C4BA5ECD57B83 364 ----a-w- C:\Windows\Tasks\RunAsStdUser Task.job 2017-05-08 06:26:01 F09471CB414C209CC0EDE5B63EB1E429 3560 ----a-w- C:\Windows\system32\Tasks\Moo0 System Monitor 1.76 2017-05-05 08:44:47 B2B8C78BD7FB12C38A7296C87B469241 3666 ----a-w- C:\Windows\system32\Tasks\MORE_ChatAppDailyScheduleTask 2017-05-05 08:34:25 83743D252B25CE989D174BC7EFFE0ED5 3928 ----a-w- C:\Windows\system32\Tasks\MORE_SIE1 2017-05-04 15:48:19 8770F4656B276681403F8B18088418E9 3748 ----a-w- C:\Windows\system32\Tasks\AupAvUpdate 2017-05-04 15:48:14 B72847C22E7A7D509CEB8DF6FB65CBD7 3454 ----a-w- C:\Windows\system32\Tasks\UninstallMonitor 2017-05-04 15:45:10 81E61073C73F8EBF638FDC694B8436DE 2940 ----a-w- C:\Windows\system32\Tasks\Health-Check-deep 2017-05-04 15:45:09 57B8A00101F466A2C5577949CAE29368 348 ----a-w- C:\Windows\Tasks\Health-Check-deep.job 2017-05-04 15:45:05 B23668F69308F7C2F7E492A057051F14 2932 ----a-w- C:\Windows\system32\Tasks\Health-Check 2017-05-04 15:45:02 38A875C1D1A76EAB7B37516CC35B9B1F 340 ----a-w- C:\Windows\Tasks\Health-Check.job 2017-05-04 13:25:36 12323C1C2E996EEC240CC8C93C56BAD9 3198 ----a-w- C:\Windows\system32\Tasks\PandaUSBVaccine 2017-05-04 12:28:49 -------- d-----w- C:\Windows\system32\Tasks\Safer-Networking 2017-05-04 08:27:28 F231F8C57D73856C92DC26B1BDAD30B7 2846 ----a-w- C:\Windows\system32\Tasks\ASC10_SkipUac_widen-finalis ====== C:\Windows\Temp ====== ======= C:\Program Files ===== 2017-05-09 05:14:06 -------- d-----w- C:\Program Files\Wise 2017-05-09 05:08:26 -------- d-----w- C:\Program Files\TAP-Windows 2017-05-09 05:06:40 -------- d-----w- C:\Program Files\CyberGhost 6 2017-05-08 20:02:12 -------- d-----w- C:\Program Files\Flip HTML5 2017-05-08 12:25:16 -------- d-----w- C:\Program Files\Glorylogic 2017-05-08 06:19:29 -------- d-----w- C:\Program Files\Moo0 2017-05-08 06:03:32 -------- d-----w- C:\Program Files\SEAF 2017-05-06 18:12:12 -------- d-----w- C:\Program Files\UX Pack 2017-05-06 18:08:21 -------- d-----w- C:\Program Files\SUPERAntiSpyware 2017-05-06 18:04:15 -------- d-----w- C:\Program Files\Remembr 2017-05-06 18:02:30 -------- d-----w- C:\Program Files\System Ninja 2017-05-06 18:01:26 -------- d-----w- C:\Program Files\MetroTextual 2017-05-06 17:58:12 -------- d-----w- C:\Program Files\Fast HTML Checker 2017-05-06 17:53:40 -------- d-----w- C:\Program Files\FolderViewer 2017-05-06 17:31:41 -------- d-----w- C:\Program Files\Encrypt4all Software 2017-05-05 08:57:38 -------- d-----w- C:\Program Files\VivPDF Editor 2017-05-05 08:42:12 -------- d-----w- C:\Program Files\iGetting Audio 2017-05-05 08:29:25 -------- d-----w- C:\Program Files\Remo Recover for Android 2.0 2017-05-05 08:29:13 -------- d-----w- C:\Program Files\Remo Recover FREE Edition 2017-05-05 08:28:50 -------- d-----w- C:\Program Files\Remo Repair RAR 2.0 2017-05-05 08:28:40 -------- d-----w- C:\Program Files\Remo Repair ZIP 2.0 2017-05-05 08:28:30 -------- d-----w- C:\Program Files\Remo Repair Registry 2017-05-05 08:28:26 -------- d-----w- C:\Program Files\Remo File Eraser 2.0 2017-05-05 08:26:56 -------- d-----w- C:\Program Files\Remo Repair PowerPoint 2.0 2017-05-05 08:26:49 -------- d-----w- C:\Program Files\Remo Outlook Backup & Migrate 2017-05-05 08:26:39 -------- d-----w- C:\Program Files\Remo Repair MOV 2.0 2017-05-05 08:22:37 -------- d-----w- C:\Program Files\Remo Drive Wipe 2017-05-05 08:21:57 -------- d-----w- C:\Program Files\Remo Drive Defrag 2017-05-05 08:21:07 -------- d-----w- C:\Program Files\Remo Convert OST to PST 2017-05-05 08:19:18 -------- d-----w- C:\Program Files\LopeSoft 2017-05-05 08:15:18 -------- d-----w- C:\Program Files\Caphyon 2017-05-05 07:49:27 -------- d-----w- C:\Program Files\WiPS Golden 2.1 2017-05-05 07:02:40 -------- d-----w- C:\Program Files\Easy File Locker 2017-05-05 06:44:28 -------- d-----w- C:\Program Files\Foxit Software 2017-05-05 06:03:41 -------- d-----w- C:\Program Files\Foolish IT 2017-05-05 05:20:30 -------- d-----w- C:\Program Files\Runtime Software 2017-05-05 03:01:00 -------- d-----w- C:\Program Files\TechSmith 2017-05-04 19:26:43 -------- d-----w- C:\Program Files\K-Lite Codec Pack 2017-05-04 18:47:56 -------- d-----w- C:\Program Files\Microsoft VS Code 2017-05-04 17:32:05 -------- d-----w- C:\Program Files\Glary Utilities 5 2017-05-04 17:13:57 -------- d-----w- C:\Program Files\TeamViewer 2017-05-04 15:34:02 -------- d-----w- C:\Program Files\PeaZip 2017-05-04 15:33:03 -------- d-----w- C:\Program Files\Common Files\Innovative Solutions 2017-05-04 15:27:37 -------- d-----w- C:\Program Files\Innovative Solutions 2017-05-04 15:20:01 -------- d-----w- C:\Program Files\WinMerge 2017-05-04 15:19:53 -------- d-----w- C:\Program Files\CDBurnerXP 2017-05-04 15:16:14 -------- d-----w- C:\Program Files\InfraRecorder 2017-05-04 15:14:03 -------- d-----w- C:\Program Files\WinRAR 2017-05-04 15:04:30 -------- d-----w- C:\Program Files\Greenshot 2017-05-04 15:00:29 -------- d-----w- C:\Program Files\Notepad++ 2017-05-04 14:54:45 -------- d-----w- C:\Program Files\7-Zip 2017-05-04 14:22:54 -------- d-----w- C:\Program Files\VideoLAN 2017-05-04 14:19:54 -------- d-----w- C:\Program Files\Common Files\WebM Project 2017-05-04 14:02:17 -------- d-----w- C:\Program Files\Xiph.Org 2017-05-04 13:27:31 -------- d-----w- C:\Program Files\PerigeeCopy 2017-05-04 13:25:45 -------- d-----w- C:\Program Files\DebugMode 2017-05-04 13:21:04 -------- d-----w- C:\Program Files\Panda USB Vaccine 2017-05-04 13:15:08 -------- d-----w- C:\Program Files\NiceCopier 2017-05-04 13:09:32 -------- d-----w- C:\Program Files\GridinSoft Anti-Ransomware 2017-05-04 13:08:38 -------- d-----w- C:\Program Files\Roadkil.Net 2017-05-04 13:07:17 -------- d-----w- C:\Program Files\Fast File Copy by Daanav.com 2017-05-04 13:01:42 -------- d-----w- C:\Program Files\Icecream Screen Recorder 2017-05-04 12:57:36 -------- d-----w- C:\Program Files\Bitdefender 2017-05-04 12:47:25 -------- d-----w- C:\Program Files\ShadowExplorer 2017-05-04 12:36:06 -------- d-----w- C:\Program Files\DIY DataRecovery CHK-Mate 2017-05-04 12:35:30 -------- d-----w- C:\Program Files\Trojan Remover 2017-05-04 12:35:06 -------- d-----w- C:\Program Files\FreeCodecPack 2017-05-04 12:31:48 -------- d-----w- C:\Program Files\AxBx 2017-05-04 12:28:41 -------- d-----w- C:\Program Files\Common Files\DVDVideoSoft 2017-05-04 12:27:20 -------- d-----w- C:\Program Files\DVDVideoSoft 2017-05-04 12:21:52 -------- d-----w- C:\Program Files\Google 2017-05-04 12:18:09 -------- d-----w- C:\Program Files\MultiCommander 2017-05-04 12:16:05 -------- d-----w- C:\Program Files\Codyssey 2017-05-04 11:59:41 -------- d-----w- C:\Program Files\Admin Arsenal 2017-05-04 11:57:58 -------- d-----w- C:\Program Files\Shadow Defender 2017-05-04 11:55:17 -------- d-----w- C:\Program Files\Aiseesoft Studio 2017-05-04 11:53:32 -------- d-----w- C:\Program Files\Xilisoft 2017-05-04 11:49:29 -------- d-----w- C:\Program Files\trolCommander 2017-05-04 11:48:38 -------- d-----w- C:\Program Files\2BrightSparks 2017-05-04 11:48:01 -------- d-----w- C:\Program Files\FastStone Photo Resizer 2017-05-04 11:47:40 -------- d-----w- C:\Program Files\muCommander 2017-05-04 11:39:30 -------- d-----w- C:\Program Files\BatteryCare 2017-05-04 11:31:22 -------- d-----w- C:\Program Files\AOMEI PE Builder 1.5 2017-05-04 11:29:07 -------- d-----w- C:\Program Files\GPU-Z 2017-05-04 10:06:03 -------- d-----w- C:\Program Files\LiteManager Pro - Server 2017-05-04 10:02:17 -------- d-----w- C:\Program Files\LiteManager Pro - Viewer 2017-05-04 09:57:47 -------- d-----w- C:\Program Files\Eyes Relaxing And Focusing 3.0 2017-05-04 09:53:52 -------- d-----w- C:\Program Files\FolderIco 2017-05-04 09:48:37 -------- d-----w- C:\Program Files\Kotobee Publisher 2017-05-04 09:47:41 -------- d-----w- C:\Program Files\Kotobee Reader 2017-05-04 09:46:13 -------- d-----w- C:\Program Files\Kotobee Author 2017-05-04 09:33:09 -------- d-----w- C:\Program Files\HissenITMasterdata 2017-05-04 09:31:33 -------- d-----w- C:\Program Files\Sanwhole ======= C: ===== 2017-05-09 06:20:02 9FAAC65B59A425D7E5E6E93A44C8A3BA 433152 --sha-w- C:\EUMONBMP.SYS 2017-05-08 06:08:16 14F3C83C930FE34B46A55B71593BCD82 235944 ----a-w- C:\QuickDiag.txt ====== C:\Users\widen-finalis\AppData\Roaming ====== 2017-05-09 05:22:17 -------- d-----w- C:\Users\widen-finalis\AppData\Local\CyberGhost 2017-05-09 05:15:41 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Wise Folder Hider 2017-05-08 06:19:57 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Moo0 2017-05-07 07:27:01 9BE2D138C6F8173FF63A98B8710F0A16 142592 ----a-w- C:\Windows\serviceprofiles\Localservice\AppData\Local\FontCache3.0.0.0.dat 2017-05-07 06:27:56 8AFBEC516B4E8391ABE9B6E45A5D9630 60168 ----a-w- C:\Users\widen-finalis\AppData\Local\GDIPFONTCACHEV1.DAT 2017-05-06 18:29:17 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Locallow\IObit 2017-05-06 18:25:19 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Roaming\IObit 2017-05-06 18:09:03 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\SUPERAntiSpyware.com 2017-05-06 17:59:05 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Fast HTML Checker 2017-05-06 17:58:16 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fast HTML Checker 2017-05-06 17:31:43 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Encrypt4all Software 2017-05-05 08:59:17 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Viv 2017-05-05 08:58:43 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Roaming\Viv 2017-05-05 08:46:38 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\PhrozenWinja 2017-05-05 08:43:12 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Remo MORE 2017-05-05 08:42:30 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iGetting Audio 2017-05-05 08:22:57 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Remo 2017-05-05 07:26:12 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Roaming\Foxit Software 2017-05-05 07:02:40 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy File Locker 2017-05-05 06:55:08 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Foxit AgentInformation 2017-05-05 06:53:25 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Foxit Software 2017-05-05 03:02:10 -------- d-----w- C:\Users\widen-finalis\AppData\Local\TechSmith 2017-05-05 02:44:02 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Icecream 2017-05-05 02:40:43 -------- d--h--w- C:\Users\widen-finalis\AppData\Roaming\Obsidium 2017-05-04 21:13:55 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\WinRAR 2017-05-04 20:34:28 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Dropbox 2017-05-04 20:21:57 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Xilisoft 2017-05-04 20:21:24 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Spotify 2017-05-04 20:20:01 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Spotify 2017-05-04 18:26:14 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Skype 2017-05-04 15:40:04 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\PeaZip 2017-05-04 15:29:09 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Innovative Solutions 2017-05-04 15:22:58 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Canneverbe Limited 2017-05-04 15:17:36 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\InfraRecorder 2017-05-04 15:15:21 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-04 15:07:41 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Dropbox 2017-05-04 15:04:14 -------- d-----w- C:\Windows\system32\config\systemprofile\AppData\Local\Programs 2017-05-04 15:00:30 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Notepad++ 2017-05-04 13:30:23 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Debugmode 2017-05-04 13:28:19 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PerigeeCopy 2017-05-04 12:27:20 -------- d-----w- C:\Users\widen-finalis\AppData\Local\2BrightSparks 2017-05-04 12:19:57 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\DVDVideoSoft 2017-05-04 12:17:49 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Innovative Solutions 2017-05-04 12:16:07 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freeraser 2017-05-04 12:10:32 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\TeraCopy 2017-05-04 12:09:32 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Aiseesoft Studio 2017-05-04 12:01:19 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vision 2017-05-04 12:01:16 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Vision 2017-05-04 11:49:39 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\trolCommander 2017-05-04 11:47:42 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\muCommander 2017-05-04 11:29:07 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TechPowerUp GPU-Z 2017-05-04 09:47:49 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Kotobee Author 2017-05-04 09:37:11 -------- d-----w- C:\Users\widen-finalis\AppData\Local\Sanwhole 2017-05-04 09:36:30 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\java 2017-05-04 09:35:45 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\HissenIT Masterdata 2017-05-04 09:33:56 -------- d-----w- C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HissenIT 2017-05-04 08:27:39 -------- d-----w- C:\Users\widen-finalis\AppData\Locallow\IObit ====== C:\Users\widen-finalis ====== 2017-05-09 13:10:53 -------- d-----w- C:\Users\Public\Documents\Ashampoo 2017-05-09 12:45:16 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 2017-05-09 12:41:45 A151BDBE176F9FA01D3962FF1067C6B2 39658392 ----a-w- C:\Users\widen-finalis\Downloads\asc10-setup-aff.exe 2017-05-09 05:21:45 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Video Downloader 2017-05-09 05:20:56 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Memory Optimizer 2017-05-09 05:16:47 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System GoBack Free 2017-05-09 05:14:12 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Folder Hider 2017-05-09 05:07:11 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6 2017-05-08 20:20:29 -------- d-----w- C:\ProgramData\Animation Editor 2017-05-08 20:20:16 -------- d-----w- C:\ProgramData\fpr 2017-05-08 20:13:08 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip HTML5 2017-05-08 20:02:12 -------- d-----w- C:\ProgramData\A-PDF 2017-05-08 12:25:47 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic 2017-05-06 18:08:31 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware 2017-05-06 18:08:21 -------- d-----w- C:\ProgramData\SUPERAntiSpyware.com 2017-05-06 18:04:16 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remembr 2017-05-06 18:02:36 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Ninja 2017-05-06 18:01:29 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetroTextual 2017-05-06 17:53:55 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderViewer 2017-05-06 17:31:46 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encrypt4all Software 2017-05-05 09:25:34 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack 2017-05-05 08:58:07 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VivPDF Editor 2017-05-05 08:47:03 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winja 2017-05-05 08:38:28 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover FREE Edition 2017-05-05 08:37:28 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Privacy Cleaner 2017-05-05 08:35:00 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover for Android 2017-05-05 08:32:31 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Registry 2017-05-05 08:30:58 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo MORE 2017-05-05 08:30:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo File Eraser 2.0 2017-05-05 08:29:58 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair RAR 2017-05-05 08:29:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair MOV 2017-05-05 08:29:32 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair ZIP 2017-05-05 08:28:57 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Outlook Backup & Migrate 2017-05-05 08:28:47 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair PowerPoint 2017-05-05 08:23:16 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Wipe 2017-05-05 08:22:36 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Defrag 2017-05-05 08:21:39 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Convert OST to PST 2017-05-05 08:19:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LopeSoft 2017-05-05 08:15:18 -------- d-----w- C:\ProgramData\regid.2003-04.com.caphyon 2017-05-05 08:15:18 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1 2017-05-05 08:11:50 -------- d-----w- C:\ProgramData\Caphyon 2017-05-05 07:24:34 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF 2017-05-05 07:08:46 -------- d-----w- C:\ProgramData\FileOpen 2017-05-05 07:02:57 -------- d-----w- C:\Users\Public\Documents\EFL 2017-05-05 06:57:43 -------- d-----w- C:\Users\Public\Foxit Software 2017-05-05 06:55:08 -------- d-----w- C:\ProgramData\Foxit ContentPlatform 2017-05-05 06:53:40 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader 2017-05-05 06:10:20 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT 2017-05-05 06:03:45 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amphetamine 2017-05-05 05:21:03 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software 2017-05-05 03:01:14 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith 2017-05-05 02:44:02 -------- d-----w- C:\Users\widen-finalis\.Icecream Screen Recorder 2017-05-05 02:40:43 -------- d--h--w- C:\Users\widen-finalis\.obs32 2017-05-04 21:47:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Commander 2017-05-04 19:37:55 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack 2017-05-04 18:05:22 -------- d-----w- C:\ProgramData\Microsoft OneDrive 2017-05-04 15:39:15 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip 2017-05-04 15:33:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO 2017-05-04 15:33:41 -------- d-----w- C:\ProgramData\Innovative Solutions 2017-05-04 15:30:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge 2017-05-04 15:28:56 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax 2017-05-04 15:16:38 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfraRecorder 2017-05-04 15:15:37 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2017-05-04 15:06:54 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot 2017-05-04 15:01:41 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ 2017-05-04 14:55:20 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip 2017-05-04 14:44:12 -------- d-----w- C:\ProgramData\Oracle 2017-05-04 14:40:21 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniCopier 2017-05-04 14:18:32 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org 2017-05-04 14:17:41 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft 2017-05-04 13:52:42 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker 2017-05-04 13:51:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Screen Recorder 2017-05-04 13:47:18 -------- d-----w- C:\ProgramData\Xilisoft 2017-05-04 13:46:02 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover 2017-05-04 13:45:58 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Anti-Ransomware 2017-05-04 13:40:07 -------- d-----w- C:\ProgramData\Skype 2017-05-04 13:30:37 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugmode 2017-05-04 13:26:23 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NiceCopier 2017-05-04 13:26:17 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShadowExplorer 2017-05-04 13:17:48 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BDAntiRansomware 2017-05-04 13:15:35 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast File Copy by Daanav.com 2017-05-04 13:13:46 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roadkil.Net 2017-05-04 12:47:15 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate 2017-05-04 12:35:30 -------- d-----w- C:\ProgramData\Simply Super Software 2017-05-04 12:32:27 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Locky 2017-05-04 12:18:19 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiCommander 2017-05-04 12:16:08 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freeraser 2017-05-04 12:14:31 -------- d-----w- C:\Users\Public\Documents\Admin Arsenal 2017-05-04 12:09:02 -------- d-----w- C:\ProgramData\Admin Arsenal 2017-05-04 12:04:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 8 - Codec Pack 2017-05-04 12:01:34 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDQ Deploy 2017-05-04 11:59:52 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft 2017-05-04 11:58:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shadow Defender 2017-05-04 11:55:25 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft 2017-05-04 11:55:17 -------- d-----w- C:\ProgramData\Aiseesoft Studio 2017-05-04 11:50:05 -------- d-----w- C:\ProgramData\2BrightSparks 2017-05-04 11:48:45 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks 2017-05-04 11:48:04 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer 2017-05-04 11:42:32 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS EverySync 3.0 2017-05-04 11:39:37 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BatteryCare 2017-05-04 11:34:33 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI PE Builder 1.5 2017-05-04 11:22:22 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder 2017-05-04 10:06:08 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server 2017-05-04 10:02:22 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Viewer 2017-05-04 09:57:51 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eyes Relaxing And Focusing 2017-05-04 09:54:48 -------- d-----w- C:\ProgramData\Folderico 2017-05-04 09:54:12 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderIco 2017-05-04 09:54:01 -------- d-----w- C:\ProgramData\Teorex 2017-05-04 09:51:49 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Publisher 2017-05-04 09:48:03 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Reader 2017-05-04 09:47:13 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Author 2017-05-04 09:35:24 -------- d-----w- C:\Users\widen-finalis\.oracle_jre_usage 2017-05-04 09:31:41 -------- d-----w- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sanwhole ====== C: exe-files == 2017-05-07 22:28:04 AD9B51DCBD4E1D33DF1E59244101B872 1225152 ----a-w- C:\AdwCleaner\quarantine\files\bobjhkawwjmojufwmhlxwveonpybmcbp\Giveaway Club Reminder\unins000.exe 2017-05-07 22:28:03 B5FFAAC648B01A6B8780ED5E106E48C9 568256 ----a-w- C:\AdwCleaner\quarantine\files\bobjhkawwjmojufwmhlxwveonpybmcbp\Giveaway Club Reminder\SendDebugLog.exe 2017-05-07 22:28:03 74790E0ED9BB0C6A4DD357AC4025AA8D 1050560 ----a-w- C:\AdwCleaner\quarantine\files\bobjhkawwjmojufwmhlxwveonpybmcbp\Giveaway Club Reminder\GiveawayClubReminder.exe 2017-05-05 08:40:12 103885A96CA4D77C5BC91D054827704A 1287736 ----a-w- C:\Program Files\2BrightSparks\SyncBackTouch\unins000.exe 2017-05-04 14:55:18 76686BD748F379AE749925AC3A0BEF24 333824 ----a-w- C:\Program Files\7-Zip\7zG.exe 2017-05-04 14:55:18 43BA0B2491205C6F45D642F555CC976A 14336 ----a-w- C:\Program Files\7-Zip\Uninstall.exe 2017-05-04 14:55:18 0B3E979BEF0D8B96231F7BBC95629F55 495104 ----a-w- C:\Program Files\7-Zip\7zFM.exe 2017-05-04 14:55:17 E7957B74BEFE1B2451C460B111C8E86F 265216 ----a-w- C:\Program Files\7-Zip\7z.exe 2017-05-04 12:49:42 C73D2F52CEF5934059777860815BB75D 90112 ----a-w- C:\MARMITON\MARMITON.EXE 2017-05-04 12:30:50 7BA95B7B85400D4F2D42B52FD2BD8434 2736696 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\RemBlankPwd.exe 2017-05-04 12:30:12 63DF32C5286F3ABFEC0114B0EF6286C8 2711096 ----a-w- C:\Program Files\2BrightSparks\SyncBackFree\RemBlankPwd.exe 2017-05-04 12:24:40 F2725E21A7F0DDFE27E026DC95A57150 21254200 ----a-w- C:\Program Files\2BrightSparks\SyncBackFree\SyncBackFree.exe 2017-05-04 12:24:38 371E8F9D2E346BFE48E2E54F65F55FC6 1287736 ----a-w- C:\Program Files\2BrightSparks\SyncBackFree\unins000.exe 2017-05-04 12:24:30 D31069E8C3E2EA3E9CB900BC6BD728F3 23341112 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\SyncBackPro.exe 2017-05-04 12:24:29 F9AC0CB0281272F46035113808298E6A 1287736 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\unins000.exe 2017-05-04 11:58:06 9F0D2726BBACC6EBCA0C74577D6A242E 199640 ----a-w- C:\Program Files\Aiseesoft Studio\Aiseesoft Video Enhancer\splashScreen.exe 2017-05-04 11:56:45 7312C239BABA5B3FF14B5B475284DD93 134616 ----a-w- C:\Program Files\Aiseesoft Studio\Aiseesoft Video Enhancer\convertor.exe 2017-05-04 11:55:33 10EDA97D8354DBE7F8E06980B701BAB9 442840 ----a-w- C:\Program Files\Aiseesoft Studio\Aiseesoft Video Enhancer\Aiseesoft Video Enhancer.exe 2017-05-04 11:55:17 48C4E439CF8C950A4EFB4B07F010FC7B 1952728 ----a-w- C:\Program Files\Aiseesoft Studio\Aiseesoft Video Enhancer\unins000.exe 2017-05-04 11:48:41 682165D14B468AEE60F67E7F4A2134A0 993848 ----a-w- C:\Program Files\2BrightSparks\SyncBackTouch\SBTouchUpdate.exe 2017-05-04 11:48:39 5665DF875B21C31A2CF10E0E69CB00BF 4715576 ----a-w- C:\Program Files\2BrightSparks\SyncBackTouch\SyncBackTouchSvc.exe 2017-05-04 11:34:24 728FA85866419A683C4EEF6159BD9E04 2614784 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Extra\explorer.exe 2017-05-04 11:34:21 393858CEF9FD126941E9801F8E8ADCE6 49152 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\system\qres.exe 2017-05-04 11:34:16 291DD924290DC69050DAC02BD80A798B 1804400 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\wnet\amd64\fre\ampa.exe 2017-05-04 11:34:15 C80841C0BF95EC6A775888B64071CD02 1573488 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\wlh\x86\fre\ampa.exe 2017-05-04 11:34:15 1D2909DE38A8EEA6EA56D6F8CA638D6B 1807472 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\wlh\amd64\fre\ampa.exe 2017-05-04 11:34:13 82BD2FB466A1AF6A895D5547C20A9B85 1567856 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\w2k\x86\fre\ampa.exe 2017-05-04 11:34:12 C5299010972BCC5BBD78247B97D670A8 71992 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\Winchk.exe 2017-05-04 11:34:12 0CE2D8625060079A4147CA1446BFC40A 115200 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\wimlib-imagex.exe 2017-05-04 11:34:11 E61F80BC0D427252A65B4B7375806FEF 17272 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\SetupGreen64.exe 2017-05-04 11:34:11 58CC3259DE47048968CA20CECCDCB607 15736 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\SetupGreen32.exe 2017-05-04 11:34:08 7B7DD8F06503783BD48FDEA75794EE53 4352440 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\PartAssist.exe 2017-05-04 11:34:07 FE7E61AACCB993709944950027650E71 907672 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\Ntfs2Fat32.exe 2017-05-04 11:34:06 5B86A6404290B4B48CE9F2DC25D1E861 67896 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\LoadDrv_Win32.exe 2017-05-04 11:34:06 4D1FAB0A05A56225A035334F062B811B 71992 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\LoadDrv_x64.exe 2017-05-04 11:34:05 5B86A6404290B4B48CE9F2DC25D1E861 67896 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\loaddrv.exe 2017-05-04 11:34:03 0BAF48DE9C4F708F3F82BA47B5B80249 137528 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\Info.exe 2017-05-04 11:34:01 F6C19CCDDA7DBC950D9E45D6C6776076 940344 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\Help.exe 2017-05-04 11:34:01 ED35B63C7BE1ED1E6CEC3E4FA0A96434 883128 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\EPW.exe 2017-05-04 11:34:00 A51D90F2F9394F5EA0A3ACAE3BD2B219 163840 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\7z.exe 2017-05-04 11:34:00 94294C3D1C41E6207C7E5D0CD0F80B2F 152464 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\bcdboot.exe 2017-05-04 11:33:57 84E1FE6CD632BFBA6E0EE4D16EE6D33A 65240 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\ValidCheck.exe 2017-05-04 11:33:52 908BF07333785D2976FA67FD7C518B28 69336 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\LoadDrv.exe 2017-05-04 11:33:50 E2701070DFE0A2E9FC9F8804C5E69F93 134872 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\Info.exe 2017-05-04 11:33:42 7B939288AF555F3A15694BB7EB4DC294 4476632 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\Backupper.exe 2017-05-04 11:32:33 4D97ACD127B2F25D8C681C14795B6C29 3793176 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\Recuva\Recuva.exe 2017-05-04 11:32:32 9BBECF49ACF5E1150C24E7B05FDACEA1 747520 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\Q-Dir\Q-Dir.exe 2017-05-04 11:32:13 3D2D408CCF031D718EAA049B255578F5 421888 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\Notepad++\updater\gpup.exe 2017-05-04 11:32:00 789629D1D2844D4E64CABDAD1B4ED1A6 1728512 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\Notepad++\notepad++.exe 2017-05-04 11:31:57 45D02C0B85A84CFCA8B504DCA3B8B22E 97280 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\IrfanView\Plugins\Slideshow.exe 2017-05-04 11:31:53 867D1B3AD637FFAC3D87E0DE2D6B75D4 593504 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\IrfanView\i_view32.exe 2017-05-04 11:31:51 C0B4B422FD58DD80C0FBB72D1821A6B6 1010176 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\Everything\Everything.exe 2017-05-04 11:31:51 1BCE2C02487972FF0D5E6702D79E7A75 421888 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\7-Zip\7zFM.exe 2017-05-04 11:31:51 130F7190FA9C17F6C88B103A9B93D930 227840 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\7-Zip\7zG.exe 2017-05-04 11:31:50 A51D90F2F9394F5EA0A3ACAE3BD2B219 163840 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\File\7-Zip\7z.exe 2017-05-04 11:31:23 BEF3A24AB7BCAA6B36311ED9BD0C3A67 5304024 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PEBuilder.exe 2017-05-04 11:31:22 B62D915D953583597A5E877C83A327D5 1174979 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\unins000.exe === C: other files == 2017-05-09 13:06:48 8BEF1F17B9F19EEA67864E098160D2D7 27736 ----a-w- C:\Program Files\Ashampoo\Ashampoo UnInstaller 6\IFS32.sys 2017-05-09 13:06:48 7B85EFDE02D74D73AD278B36F4DB7C0F 31320 ----a-w- C:\Program Files\Ashampoo\Ashampoo UnInstaller 6\IFS64.sys 2017-05-09 12:45:11 7DBA155B1ED45AE45EA2CD80FF6E4601 153926 ----a-w- C:\Program Files\IObit\Advanced SystemCare\Surfing Protection\BrowerProtect\ascsurfingprotectionnew@iobit.com.xpi 2017-05-09 12:38:24 41E0D03E2A16C9ADFBEBB5302107F753 92093 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_1440_7418\ip_dns_leakage_detector.crx 2017-05-09 11:26:41 09B222B07CC9E3364055EA9994DF45CA 23776 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_15926\share_page.crx 2017-05-09 11:26:39 A689632163E39A5F09C93BA84CD9A909 2606848 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_3835\dragon_theme.crx 2017-05-09 11:26:36 ECB252D2F09132C4DEAE8A211DD40EEC 561061 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_21138\price_suggestor.crx 2017-05-09 11:26:33 4C57237D07DD21C15995D34B964C4D88 599417 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_9975\media_downloader.crx 2017-05-09 11:26:28 C32438B2245A980B9BE9A585F850094E 7818 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_18410\web_inspector.crx 2017-05-09 11:26:03 2E6FD8899543AB65595740953145B844 239416 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_31003\drag_drop.crx 2017-05-09 11:26:00 41E0D03E2A16C9ADFBEBB5302107F753 92093 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_2915\ip_dns_leakage_detector.crx 2017-05-09 11:25:57 AEA7FF17B849FE6DD122630C18BC43FF 43528 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_27571\flash_download_helper.crx 2017-05-09 11:25:55 788939E1D2D303548755965D8329E181 48665 ----a-w- C:\Users\widen-finalis\AppData\Local\Temp\scoped_dir_2852_21279\https_enforcement.crx 2017-05-09 06:20:02 9FAAC65B59A425D7E5E6E93A44C8A3BA 433152 --sha-w- C:\EUMONBMP.SYS 2017-05-09 05:15:30 B5A5751F8A7CF9D6744D941D00C69C6D 15912 ----a-w- C:\Program Files\EaseUS\System GoBack Free\drv\EuDskAcs.sys 2017-05-09 05:15:30 89008A9F2F1BCE41A76471C55E63D7BD 15912 ----a-w- C:\Program Files\EaseUS\System GoBack Free\drv\EuFdMount.sys 2017-05-09 05:15:30 7CB31C4CB830F8817D65F14A16AC18C3 41512 ----a-w- C:\Program Files\EaseUS\System GoBack Free\drv\EUBKMON.sys 2017-05-09 05:15:30 10528A270F2FED01A13328DFF812367A 189992 ----a-w- C:\Program Files\EaseUS\System GoBack Free\drv\EuFdDisk.sys 2017-05-09 05:15:29 6F5C1B283EBBA5D259BE1576EE9A793B 51752 ----a-w- C:\Program Files\EaseUS\System GoBack Free\drv\EuBakup.sys 2017-05-09 05:15:10 ED50AF9C0174E8DAFCCD9929CFA051A6 109312 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\xp-x86\symmpi.sys 2017-05-09 05:15:08 8ADE1C877256A22E49B75D1CC9161F9C 89168 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\win7-x86\lsi_sas.sys 2017-05-09 05:15:08 81EF8693451002CCC7AA4A152C00412D 126464 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\xp-x64\lsi_sas.sys 2017-05-09 05:15:08 6B01CB678E1E390CEA9514D4774EFB51 93424 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\win8-x86\lsi_sas.sys 2017-05-09 05:15:08 022CDD12161B063D7852B1075BF3FFF2 108784 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\win8-x64\lsi_sas.sys 2017-05-09 05:15:07 EE01EBAE8C9BF0FA072E0FF68718920A 89656 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\vista-x86\lsi_sas.sys 2017-05-09 05:15:07 EE01EBAE8C9BF0FA072E0FF68718920A 89656 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\2k8-x86\lsi_sas.sys 2017-05-09 05:15:07 799FFB2FC4729FA46D2157C0065B3525 105016 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\vista-x64\lsi_sas.sys 2017-05-09 05:15:07 799FFB2FC4729FA46D2157C0065B3525 105016 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\2k8-x64\lsi_sas.sys 2017-05-09 05:15:07 1047184A9FDC8BDBFF857175875EE810 106560 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\win7-x64\lsi_sas.sys 2017-05-09 05:15:07 1047184A9FDC8BDBFF857175875EE810 106560 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\2K8-R2\lsi_sas.sys 2017-05-09 05:15:05 9437CFFBB2B1E1F172706919005F4480 102912 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\2k3-x86\lsi_sas.sys 2017-05-09 05:15:02 81EF8693451002CCC7AA4A152C00412D 126464 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\2k3-x64\lsi_sas.sys 2017-05-09 05:15:01 022CDD12161B063D7852B1075BF3FFF2 108784 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\sas\2012-x64\lsi_sas.sys 2017-05-09 05:15:00 868204832E011E2D64281D7EABEE572E 49664 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\xp-x86\symmpi.sys 2017-05-09 05:14:59 D3B52787F40DDB43ACAFA01583B079FE 84992 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\xp-x64\symmpi.sys 2017-05-09 05:14:59 216FB796AA4E252ACCE93B1BCB80B5EC 116976 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\win8-x64\lsi_scsi.sys 2017-05-09 05:14:59 0715DC27611C202D04BC0365D666DD27 100592 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\win8-x86\lsi_scsi.sys 2017-05-09 05:14:58 0A036C7D7CAB643A7F07135AC47E0524 96848 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\win7-x86\lsi_scsi.sys 2017-05-09 05:14:57 9BBAE169484C6B6CC8BBC8F803652328 109056 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\w2k-x86\symmpi.sys 2017-05-09 05:14:57 0504EACAFF0D3C8AED161C4B0D369D4A 115776 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\win7-x64\lsi_scsi.sys 2017-05-09 05:14:56 547DB1AE171EFCCC01749F7743F92C1A 102400 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\w2k-x86\lsi_sas.sys 2017-05-09 05:14:54 912A04696E9CA30146A62AFA1463DD5C 96312 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\vista-x86\lsi_scsi.sys 2017-05-09 05:14:53 F445FF1DAAD8A226366BFAF42551226B 113720 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\vista-x64\lsi_scsi.sys 2017-05-09 05:14:52 912A04696E9CA30146A62AFA1463DD5C 96312 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\2k8-x86\lsi_scsi.sys 2017-05-09 05:14:51 F445FF1DAAD8A226366BFAF42551226B 113720 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\2k8-x64\lsi_scsi.sys 2017-05-09 05:14:51 0504EACAFF0D3C8AED161C4B0D369D4A 115776 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\2k8-R2\lsi_scsi.sys 2017-05-09 05:14:49 868204832E011E2D64281D7EABEE572E 49664 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\2k3-x86\symmpi.sys 2017-05-09 05:14:48 D3B52787F40DDB43ACAFA01583B079FE 84992 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\2k3-x64\symmpi.sys 2017-05-09 05:14:47 216FB796AA4E252ACCE93B1BCB80B5EC 116976 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\lsi\2012-x64\lsi_scsi.sys 2017-05-09 05:14:45 55A928C40C11870DF5B90300BA329878 10880 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\ide\VMSCSI\vmscsi.sys 2017-05-09 05:14:42 57351998FEF624E0192673AB7F59B624 14232 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\buslogic\xp-x86\Drivers Backup\VMware VMSCSI Controller\vmscsi.sys 2017-05-09 05:14:41 55A928C40C11870DF5B90300BA329878 10880 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\DriversPack\buslogic\VMSCSI\vmscsi.sys 2017-05-09 05:13:59 B2DE3452DE03674C6CEC68B8C8CE7C78 47564 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\NTDETECT.COM 2017-05-09 05:13:35 BF344C94C136488188F46FC95169B95C 588 ----a-w- C:\Program Files\EaseUS\System GoBack Free\bin\uninstall_clean.bat 2017-05-08 06:25:51 845AF1BA23C8D5E64DEF61BCC441604C 14416 ----a-w- C:\Program Files\Moo0\SystemMonitor 1.76\WinRing0.sys 2017-05-08 06:25:51 0C0195C48B6B8582FA6F6373032118DA 14544 ----a-w- C:\Program Files\Moo0\SystemMonitor 1.76\WinRing0x64.sys 2017-05-08 06:21:18 CB9014BDB7119BBE00F1D75E2FCB476C 680793 ----a-w- C:\Program Files\Moo0\YouTube-DL 1.07\vdl\library.zip 2017-05-07 13:43:59 A147DA4D88A5B0AA9D5F145FF0422AB0 13922 ----a-w- C:\Program Files\K-Lite Codec Pack\Tools\Xvid_Quant_Matrices.zip 2017-05-07 06:55:17 6A032DA88BA5080474B2A032628AF6BE 110 ----a-w- C:\Program Files\UX Pack\RocketDock\start.vbs 2017-05-07 04:37:55 7CF2CBE4A60C78999510B5F4A3073A48 77 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_139104386F304BCA183319FF59DB1E29F8C30D6C.bat 2017-05-07 04:37:23 03B726A55664A3D001E325A4CFC2720D 77 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_6228AC7983B0FDAF08177E943B5D0FBBB2A5992E.bat 2017-05-07 04:37:15 2D07F58A1C9E0F210E568ECEC5E47364 77 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_2E9865D40FFEC734E56457A4025506B89E946EC8.bat 2017-05-06 22:43:11 57C023BE758A894205AE24B0DCA06026 71 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_B459D30662ED25BC17182A9BBA25D87BAD30EACF.bat 2017-05-05 17:39:45 676FA0FFC34485800A4D9978379E6284 77 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_C3B9372A89719F4BF4507859F6EDB6BD14A601D9.bat 2017-05-05 17:39:11 896FB293594C1BA6C8EF160E5AC10E7D 77 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_B6E2866051242433B9CF2529CBBBE7AF3D43877B.bat 2017-05-05 17:39:01 CA956E8502235F64C4E9594C5CA5E2B5 77 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_7053D45749ABBBE27952E94CCDB728BE6FC6ABA2.bat 2017-05-05 09:21:24 8EDD615F3EAFD0BA2C6A06D1B985C1D2 386 ----a-w- C:\SkinPack\RP.vbs 2017-05-05 09:14:37 90A4198DD0E51D0E0B3EAC4D825562D3 45 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_8C43454D92D877045DF3EC585E113CF095BF060D.bat 2017-05-05 09:13:52 D2F9A10B03211F37FA818B6F626F1539 44 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_2434FC445A6A3BD8067A4CF2261DC58641D8C437.bat 2017-05-05 08:36:37 4778EEECB75C6FB419745BEED3530B9D 26024 ----a-w- C:\Program Files\Remo Recover FREE Edition\rsdrvx64.sys 2017-05-05 08:36:36 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Program Files\Remo Recover FREE Edition\rsdrv.sys 2017-05-05 08:33:45 4778EEECB75C6FB419745BEED3530B9D 26024 ----a-w- C:\Program Files\Remo Recover for Android 2.0\rsdrvx64.sys 2017-05-05 08:33:43 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Program Files\Remo Recover for Android 2.0\rsdrv.sys 2017-05-05 08:31:03 4778EEECB75C6FB419745BEED3530B9D 26024 ----a-w- C:\Program Files\Remo Repair Registry\rsdrvx64.sys 2017-05-05 08:31:02 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Program Files\Remo Repair Registry\rsdrv.sys 2017-05-05 08:29:30 4778EEECB75C6FB419745BEED3530B9D 26024 ----a-w- C:\Program Files\Remo File Eraser 2.0\rsdrvx64.sys 2017-05-05 08:29:23 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Program Files\Remo File Eraser 2.0\rsdrv.sys 2017-05-05 08:23:01 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Program Files\Remo Drive Wipe\rsdrv.sys 2017-05-05 08:23:01 4778EEECB75C6FB419745BEED3530B9D 26024 ----a-w- C:\Program Files\Remo Drive Wipe\rsdrvx64.sys 2017-05-05 08:22:10 4778EEECB75C6FB419745BEED3530B9D 26024 ----a-w- C:\Program Files\Remo Drive Defrag\rsdrvx64.sys 2017-05-05 08:22:08 B8EAC99B14772BDC36CA963AED109FA2 22312 ----a-w- C:\Program Files\Remo Drive Defrag\rsdrv.sys 2017-05-05 06:03:50 85FA7471751DC501C5A2E9890AAFF35D 28 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_33D40C1B67D329681B97A0EB90F56F5DAA7DEBB6.bat 2017-05-05 06:03:44 84F7FFAE58B1CD004FBD3771B8F23D54 129259 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\WordTemplateInstaller.zip 2017-05-05 06:02:57 D511BD2AAD27BE88AAB95888F548CAC7 52382 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\UninstallAV.zip 2017-05-05 06:02:04 2FC8D556688E050EBFCD8BED3A47B8A5 78779 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\SetDevMgrShowNonPresentDevices.zip 2017-05-05 06:02:01 F68A684D06C9FE255A5964BA53F8F45F 3274899 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\savepart.zip 2017-05-05 05:59:25 450EEBF3A02498D31DB484EB0ED23688 29144 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\QuickSystemRestore.zip 2017-05-05 05:59:18 73CA186A8C074623CFB95DDAC53ABC63 1230367 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\QuickHash.zip 2017-05-05 05:59:06 73CA186A8C074623CFB95DDAC53ABC63 1230367 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\QuickHash(2).zip 2017-05-05 05:59:06 5FD3AC082ABB9BF4A0B5D22682E3297B 159964 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\qdr-code-16.zip 2017-05-05 05:58:42 8E985D3EFB8267136C52950D72157596 12380391 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\OODI_EXPRESS4.1.47_ENU.zip 2017-05-05 05:56:57 F39D9BB58FFE5DE776331362C735E6BC 4585813 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\KillEmAll_Portable.zip 2017-05-05 05:56:56 F39D9BB58FFE5DE776331362C735E6BC 4585813 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\KillEmAll_Portable(2).zip 2017-05-05 05:56:55 1CBBB5B43252C862EC191E8DA2E0BCC7 2399307 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\FixIDE-Setup.zip 2017-05-05 05:56:54 904A746A8B6850071BAB378881D707D2 42742 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\FixIDE-AppOnly.zip 2017-05-05 05:55:31 77F5801BC8CA29BE6BFD3F2D07F4100B 85709 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\ETS.zip 2017-05-05 05:55:31 6CF8418F5FD595D4312CDF4DF202989C 23307 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\fGet_Portable.zip 2017-05-05 05:55:30 F6F7E967A4C071AD7C48C20FD907282C 1109776 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\dUninstaller.zip 2017-05-05 05:55:30 F6F7E967A4C071AD7C48C20FD907282C 1109776 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\dUninstaller(2).zip 2017-05-05 05:53:01 F8F01B6C6A07D61ABC9996E9FA416C9D 123012 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\dBug.zip 2017-05-05 05:53:00 E2D9DD1461764CCDEB47818B15E8C3A0 140636 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\DataGrab.zip 2017-05-05 05:51:38 6BED361AF83D15B91BAF580E520EB563 83411 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\CleanMgrFullAuto-NoOfficeNoCompressNoDumps.zip 2017-05-05 05:51:37 9A78D8AEDFB2C61DFD8B118E43E0C34A 521308 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\AmphetamineSetup.zip 2017-05-05 05:51:37 11532BFEBD9D1126FE0D47093B003C50 62636 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\BootSafe.zip 2017-05-05 05:51:37 11532BFEBD9D1126FE0D47093B003C50 62636 ----a-w- C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt F Sigma\BootSafe(2).zip 2017-05-04 18:32:04 8CF4163521FDB8E53482003C7EFA7121 5850 ----a-w- C:\Users\widen-finalis\AppData\Local\Microsoft\OneDrive\17.3.6799.0327\CollectOneDriveLogs.bat 2017-05-04 15:40:23 12E641DBC9106C1D9B9CEBD0DF998BDE 62 ----a-w- C:\ProgramData\Comodo\Cis\tempscrpt\C_cmd.exe_28AA081DEBB6573DA72CC51872BDD01A387A9CC0.bat 2017-05-04 15:34:32 D6A2FEEAE052FB876C7C00293F4CA5AA 26 ----a-w- C:\Program Files\PeaZip\res\peazip-reset.bat 2017-05-04 15:33:40 1687AF80E57B97F31C1F7BEA3F42C01F 3278 ----a-w- C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\avupd-aup12.bat 2017-05-04 13:45:48 07DE3E7A109069B56059BF910FB55CF6 33552 ----a-w- C:\Program Files\GridinSoft Anti-Ransomware\driver\gsinspect.sys 2017-05-04 13:44:39 D99C92D2C506947F3F03A452231E92F4 29912 ----a-w- C:\Program Files\IObit\IObit Unlocker\IObitUnlocker.sys 2017-05-04 13:30:42 B653E03B1479ADCF69D164BB6DD65562 29968 ----a-w- C:\Program Files\GridinSoft Anti-Ransomware\driver\gsars.sys 2017-05-04 13:19:39 F328D1BD0F618CD2259C366D61B32B8F 3094 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\Versioning.vbs 2017-05-04 13:17:50 7C498007F2F6CEAFBC6C9FA297F79E7A 4415 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\WaitForFinishEx.vbs 2017-05-04 13:15:43 5727EC413C88A528956943500BF3A047 2563 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\WaitForFinish.vbs 2017-05-04 13:13:40 F53577CDF6A4B7B519CDC7101E8DA261 1422 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\TranslationExample.vbs 2017-05-04 13:11:39 7E4D917ADB32FAE6CD674DA5AD413F26 2995 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\timestamp.vbs 2017-05-04 13:09:47 9FA66E1D6C9AE0B4A0FC6D503BA4C09E 1472 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\StripZeros.vbs 2017-05-04 13:07:40 4AD069515B3EDB085D56D4764043399D 5723 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\StripVersionFiles_Folders.vbs 2017-05-04 13:05:43 F826CED4CD797C55173C71B2ED524131 5069 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\SendResultViaTwitterEx.vbs 2017-05-04 13:03:28 FB54D8F795DE712AD66601CC4CF67C7D 3249 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\SendResultViaTwitter.vbs 2017-05-04 13:01:21 348D81548843E13EE79D0E8C244B823C 5906 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\SendResultViaSMSEx.vbs 2017-05-04 12:59:11 FA3BCD955F7E25FF3731BFA2C4F9210F 3027 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\SendResultViaSMS.vbs 2017-05-04 12:57:01 3DA62630DF43A6F0760251F6CAF5FCF1 6943 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\RotateBackup.vbs 2017-05-04 12:54:19 D5274BBEB2F05AE1A63C9F9AE7852AA6 1432 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\ReSpace.vbs 2017-05-04 12:52:13 88DA258BC093874EF4AA7D2D6A23EF2C 1860 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\RemoveSourceAfter.vbs 2017-05-04 12:50:08 0AAFDBB4F8A1B2999FBD5506D4B7A5F0 5013 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\PreCopyExample.vbs 2017-05-04 12:48:03 20B87BD98ACE81AB5E6041A5D0BB4BF7 870 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\OnlyYesterday.vbs 2017-05-04 12:45:55 7561A578EAFDD61D004D76628B11FC85 3614 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\OncePerDayEx.vbs 2017-05-04 12:43:44 0F6A4FD3436D0976F6086BB58BFBB5F8 1652 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\OncePerDay.vbs 2017-05-04 12:41:34 ABA2966C1AEC583F30F96CB9AE69E69E 2585 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\MoveExpiredFiles.vbs 2017-05-04 12:39:27 A8D5D04DFF0D23A3A0CA576C5E1505F7 4449 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\MOTD.vbs 2017-05-04 12:38:37 D6A4D806933EE0E9D96ACCBFD3AD1820 2079 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\MapNextAvailableDriveLetter.vbs 2017-05-04 12:38:05 6B040A9EEDFE2BFF6CC3F21915CD0435 1693 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\IsHomeNetwork.vbs 2017-05-04 12:37:56 484D934F7CEBB1A41C16FCB6B6A961B2 754 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\IsDriveReady_NoPrompt.vbs 2017-05-04 12:37:39 367D4FE2769349BA93BD9A9FC685FF5D 981 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\IsDriveReady.vbs 2017-05-04 12:36:46 16CB18DB95320BF4A39AA3F818BF5464 6285 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\IncVarEx.vbs 2017-05-04 12:36:29 5E8429FD95C16A1D5372E0DB4D0DA024 3776 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\IncVar.vbs 2017-05-04 12:36:16 94C595157CB109A2AB00C95BEA0F93EB 2898 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\History.vbs 2017-05-04 12:36:01 6E57B31690A20CA7F36CA0198BFA5C70 1171 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\freespace.vbs 2017-05-04 12:35:46 0010266B2CFD99B397A83A2A32BE7EA3 2680 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\ExtraInfo.vbs 2017-05-04 12:35:07 89152625201F60F16EF6F1E2E9285928 963 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\EncryptCopy.vbs 2017-05-04 12:34:59 42F4582B106FD15A96F62D5FF6D0A80A 2322 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\DiffWindow.vbs 2017-05-04 12:34:47 A24BF6DD1C5E6A965CDADDC2127E8EA2 580 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\DiffPrompt.vbs 2017-05-04 12:34:38 299BCDF539C36CC6BC96A0A0820E656A 3580 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\DiffExport.vbs 2017-05-04 12:34:29 2E730795B9C254B79A662EBE10C874AA 995 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\DecryptCopy.vbs 2017-05-04 12:34:17 202696329681E65ECD926BE8155043AF 1821 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\DeSpace.vbs 2017-05-04 12:34:04 21FF88B1EDE63A489F2A09C1CBB164AE 1188 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\CreateRestorePoint.vbs 2017-05-04 12:33:59 98455C2B769D6BF15D3E8F02F3A53767 1182 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\CompressCopy.vbs 2017-05-04 12:33:51 33167D2A24442AE3C8390D71F74CDE7C 1244 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\ChangeIdentical.vbs 2017-05-04 12:33:39 04C725386351B2BF98439252F56118E4 17597 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\AllDrives.vbs 2017-05-04 12:33:21 86CA79D7F0771FCF14DAA78A21C61480 14078 ----a-r- C:\Program Files\2BrightSparks\SyncBackPro\SBConstants.vbs 2017-05-04 12:30:16 058D9035AD879AF0790107E7E22409A8 1455 ----a-w- C:\Program Files\2BrightSparks\SyncBackPro\vssreset.bat 2017-05-04 11:42:11 09193415E94A754B9936C43295593199 7188791 ----a-w- C:\Program Files\EaseUS\EaseUS EverySync\bin\python27.zip 2017-05-04 11:39:33 845AF1BA23C8D5E64DEF61BCC441604C 14416 ----a-w- C:\Program Files\BatteryCare\WinRing0.sys 2017-05-04 11:39:33 0C0195C48B6B8582FA6F6373032118DA 14544 ----a-w- C:\Program Files\BatteryCare\WinRing0x64.sys 2017-05-04 11:34:16 FA6D836BDBD818C4011EEA28BF81914F 15472 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\wnet\amd64\fre\ampa.sys 2017-05-04 11:34:16 A913BE84E18FB1A92853AB7525B448F9 14448 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\wlh\x86\fre\ampa.sys 2017-05-04 11:34:15 091F08BCEE2AEDDC89070370552DFD34 17008 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\wlh\amd64\fre\ampa.sys 2017-05-04 11:34:14 7677D6E2FEB694866C8D4BC7CAB63028 12656 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\native\w2k\x86\fre\ampa.sys 2017-05-04 11:34:11 C30DE019BC6D78AC5C1FFC8485D3596D 184 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\uninstall.bat 2017-05-04 11:34:03 D88880BD10EA40BA9992E56BC170AE45 1872 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\PartitionAssistant\install.bat 2017-05-04 11:33:59 9D6956A382EE791013B3FE4B7206D8C7 14392 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\i386\amwrtdrv.sys 2017-05-04 11:33:59 9059308FD5FE4317B6C489CA570567CB 129720 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\i386\ammntdrv.sys 2017-05-04 11:33:59 012C5F4E9349E711E11E0F19A8589F0A 28032 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\i386\msahci.sys 2017-05-04 11:33:58 E019017558B28A707119F8545AD1A1C0 30648 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\amd64\ambakdrv.sys 2017-05-04 11:33:58 DEB88D6B0D7CE5FB78FC4AB88E6B0C43 26424 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\i386\ambakdrv.sys 2017-05-04 11:33:58 C25F0BAFA182CBCA2DD3C851C2E75796 31104 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\amd64\msahci.sys 2017-05-04 11:33:58 7CD08E63219E00BB206077F5BA708677 17848 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\amd64\amwrtdrv.sys 2017-05-04 11:33:58 46014EDFDC8AF8733E14947448D122C5 151480 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\AomeiBackuper\driver\amd64\ammntdrv.sys 2017-05-04 11:33:30 195C48DEE1B2AFE92553EB5A947B1C19 974264 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\System\OSFMount\OSFMount.sys 2017-05-04 11:33:28 2E8E7FB0C829C20BDA02DEE9C4F9F966 1027184 ----a-w- C:\Program Files\AOMEI PE Builder 1.5\Tools\System\OSFMount\OSFMount.com 2017-05-04 11:22:29 FDFE12EACDD40B37253D5173C56694AE 60608 ----a-w- C:\Program Files\IObit\Protected Folder\pffilter.sys 2017-05-04 11:22:19 3632719857651169F41791579B71BE9B 141248 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\wxp_x86\pffilter.sys 2017-05-04 11:22:18 EB5E0A61B89F44B02E95CFAAE94C88B8 33984 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\wlh_x86\pffilter.sys 2017-05-04 11:22:18 DE114C43BFF51A9180959E9398E90417 39104 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\wlh_amd64\pffilter.sys 2017-05-04 11:22:18 97FDBED8393A614D1731875586DE6816 37568 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\wnet_amd64\pffilter.sys 2017-05-04 11:22:18 60CB2845D306D5B3C1EC077627702FED 33984 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\win8_x86\pffilter.sys 2017-05-04 11:22:18 41A16B7BF0571F18D962F012A098F2BB 48480 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\win8_amd64\pffilter.sys 2017-05-04 11:22:18 3DA7D5EC2ABBAD2D3DF55E640D2B189E 33472 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\wnet_x86\pffilter.sys 2017-05-04 11:22:17 FDFE12EACDD40B37253D5173C56694AE 60608 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\win7_x86\pffilter.sys 2017-05-04 11:22:17 8D8432455DE019021E4AB594BD2E2BCF 39104 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\win7_amd64\pffilter.sys 2017-05-04 11:22:17 60CB2845D306D5B3C1EC077627702FED 33984 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\win10_x86\pffilter.sys 2017-05-04 11:22:17 41A16B7BF0571F18D962F012A098F2BB 48480 ----a-w- C:\Program Files\IObit\Protected Folder\drivers\win10_amd64\pffilter.sys 2017-05-04 06:30:32 FC99686B66C084F4BC80C5FC239E2A4A 34176 ----a-w- C:\ProgramData\Comodo\ISE\Installer\IseDrv_xp_x32.sys 2017-05-04 06:30:32 AD3E5381C65468C238338E969FE3A9BA 41368 ----a-w- C:\ProgramData\Comodo\ISE\Installer\IseDrv_xp_x64.sys 2017-05-04 06:30:31 D247D5C0F8747B52F6AFC7E6E0F3DCCD 62208 ----a-w- C:\ProgramData\Comodo\ISE\Installer\IseDrv_win8_x64.sys 2017-05-04 06:30:31 B7F9DB871DC4FAAAFF3E9F37F213D790 49680 ----a-w- C:\ProgramData\Comodo\ISE\Installer\IseDrv_win8_x32.sys 2017-05-04 06:30:30 A6E0943BC7EEA1A5A6ABA972E5623F3A 50856 ----a-w- C:\ProgramData\Comodo\ISE\Installer\IseDrv_win7_x64.sys 2017-05-04 06:30:29 048C878140F1DA2C560820EBFB541EB8 40952 ----a-w- C:\ProgramData\Comodo\ISE\Installer\IseDrv_win7_x32.sys ==== Startup Registry Enabled ====================== [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run] "Sidebar"="%ProgramFiles%\Windows\Sidebar.exe /autoRun" [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\RunOnce] "mctadmin"="C:\Windows\System32\mctadmin.exe" [HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce] "SPReview"="C:\Windows\System32\SPReview\SPReview.exe /sp:1 /errorfwlink:http://go.microsoft.com/fwlink/?LinkID=122915 /build:7601" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" "PLFSetI"="C:\Windows\PLFSetI.exe" "IseUI"="C:\Program Files\COMODO\Internet Security Essentials\vkise.exe" "COMODO Internet Security"="C:\Program Files\COMODO\COMODO Internet Security\cistray.exe" "Wondershare Helper Compact.exe"="C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe" ==== Startup Registry Disabled ====================== [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\CCleaner Monitoring] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="CCleaner Monitoring" "hkey"="HKCU" "command"="\"C:\\Program Files\\CCleaner\\CCleaner.exe\" /MONITOR" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\KeyScrambler] "key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run" "item"="KeyScrambler" "hkey"="HKLM" "command"="C:\\Program Files\\KeyScrambler\\keyscrambler.exe /a" ==== Task Scheduler Jobs ====================== C:\Windows\tasks\Health-Check-deep.job --a------ C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe [30/01/2017 13:08] C:\Windows\tasks\Health-Check.job --a------ C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe [30/01/2017 13:08] C:\Windows\tasks\RunAsStdUser Task.job --a------ C:\Program Files\IObit\Advanced SystemCare\NoteIcon.exe [23/03/2017 17:31] ==== Other Scheduled Tasks ====================== "C:\Windows\system32\tasks\ASC10_SkipUac_widen-finalis" ["C:\Program Files\IObit\Advanced SystemCare\ASC.exe" /SkipUac] "C:\Windows\system32\tasks\AupAvUpdate" [C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\updAvTask.exe] "C:\Windows\system32\tasks\CCleanerSkipUAC" ["C:\Program Files\CCleaner\CCleaner.exe"] "C:\Windows\system32\tasks\Health-Check" [C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe] "C:\Windows\system32\tasks\Health-Check-deep" [C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe] "C:\Windows\system32\tasks\Moo0 System Monitor 1.76" [C:\Program Files\Moo0\SystemMonitor 1.76\SystemMonitor.exe] "C:\Windows\system32\tasks\MORE_ChatAppDailyScheduleTask" [C:\Program Files\Remo MORE\xmlclr.exe] "C:\Windows\system32\tasks\MORE_SIE1" [C:\Program Files\Remo MORE\xmlclrsi.exe] "C:\Windows\system32\tasks\PandaUSBVaccine" ["C:\Program Files\Panda USB Vaccine\RunInteractiveWin.exe"] "C:\Windows\system32\tasks\ReasonSecurityScheduledScan" [C:\Program Files\Reason\Security\rsUI.exe] "C:\Windows\system32\tasks\ReasonSecurityStart" [C:\Program Files\Reason\Security\rsUI.exe] "C:\Windows\system32\tasks\SoftwareInformerService" ["C:\Program Files\Software Informer\softinfo.exe"] "C:\Windows\system32\tasks\UninstallMonitor" [C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\Uninstaller.exe] "C:\Windows\system32\tasks\COMODO\COMODO Autostart {D5EFF3B3-E126-4AF6-BCE9-852A72129E10}" ["C:\Program Files\COMODO\COMODO Internet Security\cistray.exe"] "C:\Windows\system32\tasks\COMODO\COMODO CMC {06A09C0F-DD9C-4191-A670-71115CD78627}" ["C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"] "C:\Windows\system32\tasks\COMODO\COMODO Scan {F140D794-60B6-4F00-9235-D6457AA25B22}" ["C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"] "C:\Windows\system32\tasks\COMODO\COMODO Signature Update {B9D5C6F9-17D2-4917-8BD0-614BAA1C6A59}" ["C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"] "C:\Windows\system32\tasks\COMODO\COMODO Update {A6D52E4F-569B-4756-B3D8-DF217313DA85}" ["C:\Program Files\COMODO\COMODO Internet Security\cfpconfg.exe"] "C:\Windows\system32\tasks\Safer-Networking\Spybot Anti-Beacon\Refresh Anti-Beacon immunization" ["C:\Program Files\Spybot Anti-Beacon\SDAntiBeacon.exe"] ==== Firefox Extensions Registry ====================== [HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions] "FFExtnHTML2PDF@foxitsoftware.com"="C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi" [21/03/2017 18:30] ==== Chromium Look ====================== HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions cifnddnffldieaamihfkhkdgnbhfmaci - C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx[21/03/2017 18:30] Comodo Drag&Drop Service - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\aneodkojaglhnkkdbbdnmmmgimlcaogo Comodo Web Inspector - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bdngekjahnmlkinegnhdmmbcfnmbclnn Comodo Media Downloader - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\dihmnpngfonlhjmgkflpnibiaaliendo PriceSuggester - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\ejodbgfcaefpfbfgakjpjoppmkgmcpjp Comodo Dragon Browser Light Theme - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\kglppafajjeikfgmjjegogphhkjnnmgc Comodo Share Page Service - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\mcmdgbiocnkpnaccjkailibfgepaccgf Chrome Web Store Payments - widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda ==== Set IE to Default ====================== Old Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.fr/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://www.google.fr/" "Default_Page_URL"="http://www.google.fr/" "Start Page"="http://www.google.fr/" "Search Page"="http://www.google.fr/?q={searchTerms}" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Page_URL"="http://www.google.fr/" "Default_Search_URL"="http://www.google.fr/" "Start Page"="http://www.google.fr/" "Search Page"="http://www.google.fr/?q={searchTerms}" New Values: [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] "Start Page"="http://www.google.fr/" [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main] "Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896" "Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896" "Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157" "Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157" ==== All HKCU SearchScopes ====================== HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes "DefaultScope"="{96BBC430-9900-4299-9F5D-7951AB36EFDF}" {012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}" {96BBC430-9900-4299-9F5D-7951AB36EFDF} Google Url="http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}" ==== Reset Google Chrome ====================== C:\Users\widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Preferences was reset successfully C:\Users\widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Secure Preferences was reset successfully C:\Users\widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Web Data was reset successfully ==== Deleting CLSID Registry Keys ====================== ==== Deleting CLSID Registry Values ====================== HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\{00F0643E-B367-4779-B45D-7046EBA37A88} deleted successfully ==== shortcuts on All Users Desktop ====================== C:\Users\Public\Desktop\Advanced SystemCare 10.lnk - C:\Program Files\IObit\Advanced SystemCare\ASC.exe /manual C:\Users\Public\Desktop\Ashampoo UnInstaller 6.lnk - C:\Program Files\Ashampoo\Ashampoo UnInstaller 6\UI6.exe C:\Users\Public\Desktop\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe C:\Users\Public\Desktop\Comodo Dragon.lnk - C:\Program Files\Comodo\Dragon\dragon.exe C:\Users\Public\Desktop\COMODO Internet Security Complete 10.lnk - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe --shortcut C:\Users\Public\Desktop\System GoBack Free.lnk - C:\Program Files\EaseUS\System GoBack Free\bin\Loader.exe ==== shortcuts in All Users Start Menu ====================== C:\ProgramData\Microsoft\Windows\Start Menu\TeraCopy.lnk - C:\Program Files\TeraCopy\TeraCopy.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO 12.lnk - C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk - C:\Program Files\CDBurnerXP\cdbxpp.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackFree\Désinstaller SyncBackFree.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackFree\Forums en ligne.lnk - C:\Program Files\2BrightSparks\SyncBackFree\Forums.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackFree\Help.lnk - C:\Program Files\2BrightSparks\SyncBackFree\SyncBackFree.CHM C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackFree\Liste de diffusion.lnk - C:\Program Files\2BrightSparks\SyncBackFree\MailingList.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackFree\SyncBack Free.lnk - C:\Program Files\2BrightSparks\SyncBackFree\SyncBackFree.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackFree\Twitter.lnk - C:\Program Files\2BrightSparks\SyncBackFree\Twitter.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackPro\Désinstaller SyncBackPro.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackPro\Help.lnk - C:\Program Files\2BrightSparks\SyncBackPro\SyncBackPro.CHM C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackPro\SyncBack Pro.lnk - C:\Program Files\2BrightSparks\SyncBackPro\SyncBackPro.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks\SyncBackTouch\SyncBack Touch Quick Start Guide.lnk - C:\Program Files\2BrightSparks\SyncBackTouch\SyncBack Touch Quick Start.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip File Manager.lnk - C:\Program Files\7-Zip\7zFM.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip\7-Zip Help.lnk - C:\Program Files\7-Zip\7-zip.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\Advanced Installer 13.8.1 Help.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\advinst.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\Advanced Installer 13.8.1 License.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\license.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\Advanced Installer 13.8.1.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\bin\x86\advinst.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\Advanced Repackager 13.8.1.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\bin\x86\Repackager.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\Check for Advanced Installer 13.8.1 Updates.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\bin\x86\updater.exe /checknow C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\Conflicts Detector 13.8.1.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\bin\x86\ConflictsDetector.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1\SCCM Deploy Tool 13.8.1.lnk - C:\Program Files\Caphyon\Advanced Installer 13.8.1\bin\x86\sccm.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare\Advanced SystemCare 10.lnk - C:\Program Files\IObit\Advanced SystemCare\ASC.exe /manual C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare\Désinstaller Advanced SystemCare.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare\Protect.lnk - C:\Program Files\IObit\Advanced SystemCare\ASC.exe /Protect C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare\Speed Up.lnk - C:\Program Files\IObit\Advanced SystemCare\ASC.exe /turboboost C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare\Toolbox.lnk - C:\Program Files\IObit\Advanced SystemCare\ASC.exe /toolbox C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO\Advanced Uninstaller PRO 12.lnk - C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO\Uninstall.lnk - C:\Program Files\Innovative Solutions\Advanced Uninstaller PRO\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft\Aiseesoft Video Enhancer\Aiseesoft Video Enhancer.lnk - C:\Program Files\Aiseesoft Studio\Aiseesoft Video Enhancer\Aiseesoft Video Enhancer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft\Aiseesoft Video Enhancer\Désinstaller.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Aiseesoft\Aiseesoft Video Enhancer\Visiter le Produit.lnk - C:\Program Files\Aiseesoft Studio\Aiseesoft Video Enhancer\Aiseesoft Video Enhancer.exe --pop_product_url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amphetamine\Run Amphetamine.lnk - C:\Program Files\Foolish IT\Amphetamine\Amphetamine.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Amphetamine\Uninstall Amphetamine.lnk - C:\Program Files\Foolish IT\Amphetamine\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Locky\Anti-Locky.lnk - C:\Program Files\AxBx\Anti-Locky\antilocky.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Locky\Désinstaller Anti-Locky.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI PE Builder 1.5\AOMEI PE Builder 1.5.lnk - C:\Program Files\AOMEI PE Builder 1.5\PEBuilder.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AOMEI PE Builder 1.5\Uninstall AOMEI PE Builder.lnk - C:\Program Files\AOMEI PE Builder 1.5\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo Burning Studio 2017\Aide.lnk - C:\Program Files\Ashampoo\Ashampoo Burning Studio 2017\lang\BurningStudio-en-us.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo Burning Studio 2017\Ashampoo Burning Studio 2017 .lnk - C:\Program Files\Ashampoo\Ashampoo Burning Studio 2017\burningstudio2017.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo Snap 9\Aide.lnk - C:\Program Files\Ashampoo\Ashampoo Snap 9\Help\asy-en-us.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo Snap 9\Ashampoo Snap 9 .lnk - C:\Program Files\Ashampoo\Ashampoo Snap 9\ashsnap.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo StartUp Tuner 2\Ashampoo StartUp Tuner 2.lnk - C:\Program Files\Ashampoo\Ashampoo StartUp Tuner 2\ASST.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo StartUp Tuner 2\Help.lnk - C:\Program Files\Ashampoo\Ashampoo StartUp Tuner 2\translation\9.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo StartUp Tuner 2\Readme.lnk - C:\Program Files\Ashampoo\Ashampoo StartUp Tuner 2\readme_en.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo StartUp Tuner 2\Uninstall Ashampoo StartUp Tuner 2.lnk - C:\Program Files\Ashampoo\Ashampoo StartUp Tuner 2\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo\Ashampoo UnInstaller 6\Ashampoo UnInstaller 6 .lnk - C:\Program Files\Ashampoo\Ashampoo UnInstaller 6\UI6.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BatteryCare\BatteryCare.lnk - C:\Program Files\BatteryCare\BatteryCare.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BatteryCare\Désinstaller BatteryCare.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BDAntiRansomware\BDAntiRansomware.lnk - C:\Program Files\Bitdefender\Tools\BDAntiRansomware\BDAntiRansomware.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner\CCleaner.lnk - C:\Program Files\CCleaner\CCleaner.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo\COMODO Internet Security\COMODO Internet Security Complete 10.lnk - C:\Program Files\COMODO\COMODO Internet Security\cistray.exe --shortcut C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler\Copy Handler.lnk - C:\Program Files\Copy Handler\ch.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler\Translate Copy Handler.lnk - C:\Program Files\Copy Handler\ictranslate.exe "C:\Program Files\Copy Handler\langs\english.lng" C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler\Uninstall Copy Handler.lnk - C:\Program Files\Copy Handler\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6\CyberGhost 6.lnk - C:\Program Files\CyberGhost 6\CyberGhost.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6\Désinstallation CyberGhost 6.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugmode\Wink\Uninstall Wink.lnk - C:\Program Files\DebugMode\Wink\uninst.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugmode\Wink\Wink User Guide.lnk - C:\Program Files\DebugMode\Wink\Docs\Wink User Guide.pdf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Debugmode\Wink\Wink.lnk - C:\Program Files\DebugMode\Wink\Wink.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate\CHK-Mate.lnk - C:\Program Files\DIY DataRecovery CHK-Mate\CHK-Mate.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate\Contact and Support information.lnk - C:\Program Files\DIY DataRecovery CHK-Mate\contact.htm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate\DIYDataRecovery Product Family.lnk - C:\Program Files\DIY DataRecovery CHK-Mate\product_family.htm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate\License.lnk - C:\Program Files\DIY DataRecovery CHK-Mate\license.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate\Manual.lnk - C:\Program Files\DIY DataRecovery CHK-Mate\manual.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate\Uninstall CHK-Mate.lnk - C:\Program Files\DIY DataRecovery CHK-Mate\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax\DriverMax.lnk - C:\Program Files\Innovative Solutions\DriverMax\drivermax.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax\Other products by Innovative Solutions.lnk - C:\Program Files\Innovative Solutions\DriverMax\dmx.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverMax\Uninstall DriverMax.lnk - C:\Program Files\Innovative Solutions\DriverMax\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\DVDVideoSoft Free Studio.lnk - C:\Program Files\Common Files\DVDVideoSoft\lib\FreeStudioManager.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Log Report.lnk - C:\Program Files\Common Files\DVDVideoSoft\bin\DVSSysReport.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Premium Membership.lnk - C:\Program Files\Common Files\DVDVideoSoft\lib\PremiumMembershipOffer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\SoundCloud Download.lnk - C:\Program Files\DVDVideoSoft\SoundCloud Download\SoundCloudDownload.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft\Uninstall.lnk - C:\Program Files\Common Files\DVDVideoSoft\lib\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS EverySync 3.0\EaseUS EverySync 3.0.lnk - C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySync.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS EverySync 3.0\Uninstall EaseUS EverySync 3.0.lnk - C:\Program Files\EaseUS\EaseUS EverySync\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encrypt4all Software\Encrypt4all Professional\Encrypt4all Professional Edition.lnk - C:\Program Files\Encrypt4all Software\Encrypt4all Professional\Encrypt4all.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encrypt4all Software\Encrypt4all Professional\EULA.lnk - C:\Program Files\Encrypt4all Software\Encrypt4all Professional\eula.rtf C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Encrypt4all Software\Encrypt4all Professional\Read Me.lnk - C:\Program Files\Encrypt4all Software\Encrypt4all Professional\ReadMe.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eyes Relaxing And Focusing\Eyes Relaxing And Focusing.lnk - C:\Program Files\Eyes Relaxing And Focusing 3.0\Eyes.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eyes Relaxing And Focusing\Uninstall Eyes Relaxing And Focusing.lnk - C:\Program Files\Eyes Relaxing And Focusing 3.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast File Copy by Daanav.com\Fast File Copy.lnk - C:\Program Files\Fast File Copy by Daanav.com\FastFileCopy.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast File Copy by Daanav.com\Uninstall Fast File Copy.lnk - C:\Program Files\Fast File Copy by Daanav.com\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer\FastStone Photo Resizer.lnk - C:\Program Files\FastStone Photo Resizer\FSResizer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer\Help.lnk - C:\Program Files\FastStone Photo Resizer\FSResizerHelp.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Photo Resizer\Uninstall.lnk - C:\Program Files\FastStone Photo Resizer\uninst.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip HTML5\Flip HTML5 Help on the Web.lnk - C:\Program Files\Flip HTML5\help.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip HTML5\Flip HTML5 on the Web.lnk - C:\Program Files\Flip HTML5\WebSite.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip HTML5\Flip HTML5.lnk - C:\Program Files\Flip HTML5\eflippdfforipad.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Flip HTML5\Uninstall Flip HTML5.lnk - C:\Program Files\Flip HTML5\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderIco\FolderIco.lnk - C:\Program Files\FolderIco\FolderIco.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderIco\Uninstall.lnk - C:\Program Files\Folderico\uninst.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderViewer\FolderViewer.LNK - C:\Program Files\FolderViewer\FolderViewer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderViewer\Installation Log.LNK - C:\Program Files\FolderViewer\Uninstall\Install.LOG C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderViewer\Shortcut to reg.bat.LNK - C:\Program Files\FolderViewer\reg.bat C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FolderViewer\Uninstall FolderViewer.LNK - C:\Program Files\FolderViewer\Uninstall\Uninstall.exe /u:"FolderViewer" C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT\FixIDE\FixIDE - README.lnk - C:\Program Files\Foolish IT\FixIDE\README - FixIDE.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT\FixIDE\FixIDE for Windows XP.lnk - C:\Program Files\Foolish IT\FixIDE\FixIDE.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foolish IT\FixIDE\Uninstall FixIDE.lnk - C:\Program Files\Foolish IT\FixIDE\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF\Activation.lnk - C:\Program Files\Foxit Software\Foxit PhantomPDF\Activation.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF\Désinstaller.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit PhantomPDF\Foxit PhantomPDF.lnk - C:\Program Files\Foxit Software\Foxit PhantomPDF\FoxitPhantomPDF.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader\Désinstaller Foxit Reader.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader\Foxit Reader.lnk - C:\Program Files\Foxit Software\Foxit Reader\FoxitReader.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freeraser\Freeraser Manual.lnk - C:\Program Files\Codyssey\Freeraser\Freeraser User Manual.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freeraser\Freeraser.lnk - C:\Program Files\Codyssey\Freeraser\Freeraser.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Freeraser\Uninstall Freeraser.lnk - C:\Program Files\Codyssey\Freeraser\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic\ISO Workshop\Help.lnk - C:\Program Files\Glorylogic\ISO Workshop\ISOWorkshop.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic\ISO Workshop\ISO Workshop.lnk - C:\Program Files\Glorylogic\ISO Workshop\ISOWorkshop.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glorylogic\ISO Workshop\Uninstall ISO Workshop.lnk - C:\Program Files\Glorylogic\ISO Workshop\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot\Greenshot.lnk - C:\Program Files\Greenshot\Greenshot.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot\License.txt.lnk - C:\Program Files\Greenshot\license.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot\Readme.txt.lnk - C:\Program Files\Greenshot\readme.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Greenshot\Uninstall Greenshot.lnk - C:\Program Files\Greenshot\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Anti-Ransomware\GridinSoft Anti-Ransomware.lnk - C:\Program Files\GridinSoft Anti-Ransomware\gsar.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Screen Recorder\Icecream Screen Recorder.lnk - C:\Program Files\Icecream Screen Recorder\recorder.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfraRecorder\InfraRecorder Help.lnk - C:\Program Files\InfraRecorder\infrarecorder.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfraRecorder\InfraRecorder.lnk - C:\Program Files\InfraRecorder\infrarecorder.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\InfraRecorder\Uninstall.lnk - C:\Program Files\InfraRecorder\uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker\Désinstaller IObit Unlocker.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker\IObit Unlocker.lnk - C:\Program Files\IObit\IObit Unlocker\IObitUnlocker.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Codec Tweak Tool.lnk - C:\Program Files\K-Lite Codec Pack\Tools\CodecTweakTool.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Media Player Classic.lnk - C:\Program Files\K-Lite Codec Pack\MPC-HC\mpc-hc.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\DirectVobSub.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files\K-Lite Codec Pack\Filters\DirectVobSub\vsfilter.dll",DirectVobSub C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow audio decoder.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configureAudio C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow VFW interface.lnk - C:\Windows\System32\rundll32.exe "C:\Windows\system32\ff_vfw.dll",configureVFW C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\ffdshow video decoder.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files\K-Lite Codec Pack\Filters\ffdshow\ffdshow.ax",configure C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Audio.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files\K-Lite Codec Pack\Filters\LAV\lavaudio.ax",OpenConfiguration C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Splitter.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files\K-Lite Codec Pack\Filters\LAV\lavsplitter.ax",OpenConfiguration C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\LAV Video.lnk - C:\Windows\System32\rundll32.exe "C:\Program Files\K-Lite Codec Pack\Filters\LAV\lavvideo.ax",OpenConfiguration C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\x264 VFW (x86).lnk - C:\Windows\System32\rundll32.exe "C:\Windows\system32\x264vfw.dll",Configure C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Configuration\Xvid VFW.lnk - C:\Windows\System32\rundll32.exe "C:\Windows\system32\xvidvfw.dll",Configure C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\FourCC Code Changer.lnk - C:\Program Files\K-Lite Codec Pack\Tools\fourcc.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\GraphStudioNext.lnk - C:\Program Files\K-Lite Codec Pack\Tools\GraphStudioNext.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\Haali Muxer.lnk - C:\Program Files\K-Lite Codec Pack\Filters\Haali\gdsmux.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\MediaInfo.lnk - C:\Program Files\K-Lite Codec Pack\Tools\mediainfo.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Tools\VobSubStrip.lnk - C:\Program Files\K-Lite Codec Pack\Tools\VobSubStrip.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack\Uninstall\Uninstall K-Lite Codec Pack.lnk - C:\Program Files\K-Lite Codec Pack\unins001.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Author\Désinstaller Kotobee Author.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Author\Kotobee Author.lnk - C:\Program Files\Kotobee Author\Kotobee Author.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Publisher\Kotobee Publisher.lnk - C:\Program Files\Kotobee Publisher\Kotobee Publisher.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Publisher\Uninstall Kotobee Publisher.lnk - C:\Program Files\Kotobee Publisher\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Reader\Désinstaller Kotobee Reader.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Reader\Kotobee Reader.lnk - C:\Program Files\Kotobee Reader\Kotobee Reader.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Settings for LM-Server.lnk - C:\Program Files\LiteManager Pro - Server\ROMServer.exe /config C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Start LM-Server.lnk - C:\Program Files\LiteManager Pro - Server\ROMServer.exe /start C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Stop LM-Server.lnk - C:\Program Files\LiteManager Pro - Server\ROMServer.exe /stop C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Server\Uninstall LiteManager - Server.lnk - C:\Windows\System32\msiexec.exe /x {71FFA475-24D5-44FB-A51F-39B699E3D82C} C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Viewer\Help.lnk - C:\Program Files\LiteManager Pro - Viewer\rom3.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Viewer\LM-Viewer.lnk - C:\Program Files\LiteManager Pro - Viewer\ROMViewer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Viewer\LMNoIpServer.lnk - C:\Program Files\LiteManager Pro - Viewer\LMNoIpServer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LiteManager Pro - Viewer\Uninstall LiteManager Pro - Viewer.lnk - C:\Windows\System32\msiexec.exe /x {5686E484-7136-4674-A4B2-508C7B26DCA4} C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LopeSoft\FileMenu Tools\Configure FileMenu Tools.lnk - C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LopeSoft\FileMenu Tools\FileMenu Tools Help.lnk - C:\Program Files\LopeSoft\FileMenu Tools\FileMenuTools_enu.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MetroTextual\MetroTextual.lnk - C:\Program Files\MetroTextual\MetroTextual.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniCopier\MiniCopier.lnk - C:\Program Files\MiniCopier\MiniCopier.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiCommander\MultiCommander.lnk - C:\Program Files\MultiCommander\MultiCommander.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiCommander\Uninstall MultiCommander.lnk - C:\Program Files\MultiCommander\Uninstall MultiCommander.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiCommander\Update MultiCommander.lnk - C:\Program Files\MultiCommander\MultiUpdate.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NiceCopier\NiceCopier.lnk - C:\Program Files\NiceCopier\NiceCopier.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NiceCopier\Uninstall NiceCopier.lnk - C:\Program Files\NiceCopier\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++\Notepad++.lnk - C:\Program Files\Notepad++\notepad++.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security\Panda USB Vaccine\Panda USB Vaccine.lnk - C:\Program Files\Panda USB Vaccine\USBVaccine.exe /resident /experimentalntfs /shownow C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Panda Security\Panda USB Vaccine\Uninstall Panda USB Vaccine.lnk - C:\Program Files\Panda USB Vaccine\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDQ Deploy\PDQ Deploy.lnk - C:\Program Files\Admin Arsenal\PDQ Deploy\PDQDeployConsole.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip\PeaZip on the Web.lnk - C:\Program Files\PeaZip\peazip.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip\PeaZip.lnk - C:\Program Files\PeaZip\peazip.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PeaZip\Uninstall PeaZip.lnk - C:\Program Files\PeaZip\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder\Désinstaller Protected Folder.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder\Protected Folder.lnk - C:\Program Files\IObit\Protected Folder\ProtectedFolder.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remembr\Remembr.lnk - C:\Program Files\Remembr\Remembr.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Convert OST to PST\Help Manual.lnk - C:\Program Files\Remo Convert OST to PST\rs-cop.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Convert OST to PST\Remo Convert OST to PST.lnk - C:\Program Files\Remo Convert OST to PST\rs-cop.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Convert OST to PST\Uninstall Remo Convert OST to PST.lnk - C:\Program Files\Remo Convert OST to PST\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Convert OST to PST\Update Wizard.lnk - C:\Program Files\Remo Convert OST to PST\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Defrag\Help Manual.lnk - C:\Program Files\Remo Drive Defrag\remodefrag.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Defrag\Remo Drive Defrag.lnk - C:\Program Files\Remo Drive Defrag\remodefrag.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Defrag\Uninstall Remo Drive Defrag.lnk - C:\Program Files\Remo Drive Defrag\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Defrag\Update Wizard.lnk - C:\Program Files\Remo Drive Defrag\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Wipe\Help Manual.lnk - C:\Program Files\Remo Drive Wipe\rsdrivewipe.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Wipe\Remo Drive Wipe.lnk - C:\Program Files\Remo Drive Wipe\rsdrivewipe.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Wipe\Uninstall Remo Drive Wipe.lnk - C:\Program Files\Remo Drive Wipe\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Wipe\Update Wizard.lnk - C:\Program Files\Remo Drive Wipe\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo File Eraser 2.0\Help Manual.lnk - C:\Program Files\Remo File Eraser 2.0\rs-fileeraser.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo File Eraser 2.0\Remo File Eraser.lnk - C:\Program Files\Remo File Eraser 2.0\rs-fileeraser.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo File Eraser 2.0\Uninstall Remo File Eraser.lnk - C:\Program Files\Remo File Eraser 2.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo File Eraser 2.0\Update Wizard.lnk - C:\Program Files\Remo File Eraser 2.0\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo MORE\Remo MORE.lnk - C:\Program Files\Remo MORE\rs-more.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo MORE\Uninstall Remo MORE.lnk - C:\Program Files\Remo MORE\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo MORE\Update Wizard.lnk - C:\Program Files\Remo MORE\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Outlook Backup & Migrate\Help Manual.lnk - C:\Program Files\Remo Outlook Backup & Migrate\rsobm.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Outlook Backup & Migrate\Remo Outlook Backup & Migrate.lnk - C:\Program Files\Remo Outlook Backup & Migrate\rsobm.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Outlook Backup & Migrate\Uninstall Remo Outlook Backup & Migrate.lnk - C:\Program Files\Remo Outlook Backup & Migrate\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Outlook Backup & Migrate\Update Wizard.lnk - C:\Program Files\Remo Outlook Backup & Migrate\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Privacy Cleaner\Help Manual.lnk - C:\Program Files\Remo Privacy Cleaner\rs-pcleaner.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Privacy Cleaner\Remo Privacy Cleaner.lnk - C:\Program Files\Remo Privacy Cleaner\rs-pcleaner.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Privacy Cleaner\Uninstall Remo Privacy Cleaner.lnk - C:\Program Files\Remo Privacy Cleaner\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Privacy Cleaner\Update Wizard.lnk - C:\Program Files\Remo Privacy Cleaner\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover for Android\Help Manual.lnk - C:\Program Files\Remo Recover for Android 2.0\rs-and.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover for Android\Remo Recover for Android.lnk - C:\Program Files\Remo Recover for Android 2.0\rs-and.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover for Android\Uninstall Remo Recover for Android.lnk - C:\Program Files\Remo Recover for Android 2.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover for Android\Update Wizard.lnk - C:\Program Files\Remo Recover for Android 2.0\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover FREE Edition\Help Manual.lnk - C:\Program Files\Remo Recover FREE Edition\rs-qrecovery.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover FREE Edition\Remo Recover FREE Edition.lnk - C:\Program Files\Remo Recover FREE Edition\rs-qrecovery.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover FREE Edition\Uninstall Remo Recover FREE Edition.lnk - C:\Program Files\Remo Recover FREE Edition\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover FREE Edition\Update Wizard.lnk - C:\Program Files\Remo Recover FREE Edition\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair MOV\Help Manual.lnk - C:\Program Files\Remo Repair MOV 2.0\rs-repairmov.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair MOV\Remo Repair MOV.lnk - C:\Program Files\Remo Repair MOV 2.0\rs-repairmov.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair MOV\Uninstall Remo Repair MOV.lnk - C:\Program Files\Remo Repair MOV 2.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair MOV\Update Wizard.lnk - C:\Program Files\Remo Repair MOV 2.0\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair PowerPoint\Help Manual.lnk - C:\Program Files\Remo Repair PowerPoint 2.0\rs-repairppt.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair PowerPoint\Remo Repair PowerPoint.lnk - C:\Program Files\Remo Repair PowerPoint 2.0\rs-repairppt.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair PowerPoint\Uninstall Remo Repair PowerPoint.lnk - C:\Program Files\Remo Repair PowerPoint 2.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair PowerPoint\Update Wizard.lnk - C:\Program Files\Remo Repair PowerPoint 2.0\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair RAR\Remo Repair RAR.lnk - C:\Program Files\Remo Repair RAR 2.0\rs-repairrar.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair RAR\Uninstall Remo Repair RAR.lnk - C:\Program Files\Remo Repair RAR 2.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair RAR\Update Wizard.lnk - C:\Program Files\Remo Repair RAR 2.0\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Registry\Help Manual.lnk - C:\Program Files\Remo Repair Registry\rs-repairregistry.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Registry\Remo Repair Registry.lnk - C:\Program Files\Remo Repair Registry\rs-repairregistry.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Registry\Uninstall Remo Repair Registry.lnk - C:\Program Files\Remo Repair Registry\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Registry\Update Wizard.lnk - C:\Program Files\Remo Repair Registry\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair ZIP\Remo Repair ZIP.lnk - C:\Program Files\Remo Repair ZIP 2.0\rsziprpr.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair ZIP\Uninstall Remo Repair ZIP.lnk - C:\Program Files\Remo Repair ZIP 2.0\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair ZIP\Update Wizard.lnk - C:\Program Files\Remo Repair ZIP 2.0\rsupdate.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Roadkil.Net\Roadkil's Unstoppable Copier.lnk - C:\Program Files\Roadkil.Net\UnstopCpy_5_2_Win2K_UP.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software\DriveImage XML.lnk - C:\Program Files\Runtime Software\DriveImage XML\dixml.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software\Windows Disk Management.lnk - C:\Program Files\Runtime Software\DriveImage XML\diskmagn.msc C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sanwhole\Vole Edutainment\Uninstall Vole Edutainment.lnk - C:\Windows\Installer\{600C936B-7684-42F0-9FBF-04726F3D45E2}\_A8DAF100E4417D79709043.exe /x {600C936B-7684-42F0-9FBF-04726F3D45E2} /qr C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sanwhole\Vole Edutainment\Vole Edutainment.lnk - C:\Windows\Installer\{600C936B-7684-42F0-9FBF-04726F3D45E2}\_435336CC62D6F4F60EBF9C.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shadow Defender\Help.lnk - C:\Program Files\Shadow Defender\Help.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shadow Defender\Shadow Defender.lnk - C:\Program Files\Shadow Defender\Defender.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shadow Defender\Uninstall Shadow Defender.lnk - C:\Program Files\Shadow Defender\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ShadowExplorer\ShadowExplorer.lnk - C:\Program Files\ShadowExplorer\ShadowExplorer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack\RocketDock.lnk - C:\SkinPack\RocketDock\RocketDock.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack\Uninstall.lnk - C:\SkinPack\uninst.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack\Website.lnk - C:\SkinPack\SkinPack.url C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot Anti-Beacon\Spybot Anti-Beacon.lnk - C:\Program Files\Spybot Anti-Beacon\SDAntiBeacon.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Alternate Start.lnk - C:\Program Files\SUPERAntiSpyware\RUNSAS.EXE C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Free Edition.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware\SUPERAntiSpyware Registration-Activation.lnk - C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe /register C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System GoBack Free\System GoBack Free.lnk - C:\Program Files\EaseUS\System GoBack Free\bin\Loader.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System GoBack Free\Uninstall System GoBack Free.lnk - C:\Program Files\EaseUS\System GoBack Free\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Ninja\System Ninja.lnk - C:\Program Files\System Ninja\System Ninja.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Ninja\Uninstall System Ninja.lnk - C:\Program Files\System Ninja\unins000.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith\Jing.lnk - C:\Windows\Installer\{8C784F8B-89D0-4A59-A000-7EEF129E1574}\IconA17C9A58.exe /splash C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover\Aide pour Trojan Remover.lnk - C:\Program Files\Trojan Remover\trjhelp.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover\Désinstaller Trojan Remover.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover\FastScan.lnk - C:\Program Files\Trojan Remover\Trjscan.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover\Trojan Remover.lnk - C:\Program Files\Trojan Remover\Rmvtrjan.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover\Updater.lnk - C:\Program Files\Trojan Remover\trupd.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unreal Commander\Unreal Commander.lnk - C:\Unreal Commander\Uncom.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VivPDF Editor\Désinstaller VivPDF Editor.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VivPDF Editor\VivPDF Editor.lnk - C:\Program Files\VivPDF Editor\VivPDF Editor.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Winja\Winja.lnk - C:\Users\widen-finalis\AppData\Roaming\PhrozenWinja\Winja.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\Guide de l'usager.lnk - C:\Program Files\WinMerge\Docs\WinMerge.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\Lisez moi.lnk - C:\Program Files\WinMerge\Docs\ReadMe-French.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMerge\WinMerge.lnk - C:\Program Files\WinMerge\WinMergeU.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Aide de WinRAR.lnk - C:\Program Files\WinRAR\WinRAR.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Manuel de la console RAR.lnk - C:\Program Files\WinRAR\Rar.txt C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Quelles sont les nouveautés de la dernière version.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk - C:\Program Files\WinRAR\WinRAR.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Folder Hider\Wise Folder Hider.lnk - C:\Program Files\Wise\Wise Folder Hider\WiseFolderHider.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Memory Optimizer\Wise Memory Optimizer.lnk - C:\Program Files\Wise\Wise Memory Optimizer\WiseMemoryOptimzer.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Video Downloader\Wise Video Downloader.lnk - C:\Program Files\Wise\Wise Video Downloader\WiseDownloader.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\CHM to EPUB Converter\Buy.lnk - C:\Program Files\Xilisoft\CHM to EPUB Converter\epubmaker_buy.exe -buyurl C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\CHM to EPUB Converter\Uninstall.lnk - C:\Program Files\Xilisoft\CHM to EPUB Converter\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\CHM to EPUB Converter\Xilisoft CHM en EPUB Convertisseur Help.lnk - C:\Program Files\Xilisoft\CHM to EPUB Converter\epubmaker.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\CHM to EPUB Converter\Xilisoft CHM en EPUB Convertisseur.lnk - C:\Program Files\Xilisoft\CHM to EPUB Converter\SplashScreen.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\HTML to EPUB Converter\Buy.lnk - C:\Program Files\Xilisoft\HTML to EPUB Converter\epubmaker_buy.exe -buyurl C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\HTML to EPUB Converter\Uninstall.lnk - C:\Program Files\Xilisoft\HTML to EPUB Converter\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\HTML to EPUB Converter\Xilisoft HTML en EPUB Convertisseur Help.lnk - C:\Program Files\Xilisoft\HTML to EPUB Converter\epubmaker.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\HTML to EPUB Converter\Xilisoft HTML en EPUB Convertisseur.lnk - C:\Program Files\Xilisoft\HTML to EPUB Converter\SplashScreen.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\PDF to EPUB Converter\Buy.lnk - C:\Program Files\Xilisoft\PDF to EPUB Converter\pdf2epub_buy.exe -buyurl C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\PDF to EPUB Converter\Uninstall.lnk - C:\Program Files\Xilisoft\PDF to EPUB Converter\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\PDF to EPUB Converter\Xilisoft PDF en EPUB Convertisseur Help.lnk - C:\Program Files\Xilisoft\PDF to EPUB Converter\pdf2epub.chm C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\PDF to EPUB Converter\Xilisoft PDF en EPUB Convertisseur.lnk - C:\Program Files\Xilisoft\PDF to EPUB Converter\pdf2epub.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Editor 2\Buy.lnk - C:\Program Files\Xilisoft\Video Editor 2\videoeditor_buy.exe -buyurl C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Editor 2\Uninstall.lnk - C:\Program Files\Xilisoft\Video Editor 2\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Editor 2\Xilisoft Éditeur Vidéo 2.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Editor 2\Xilisoft Éditeur Vidéo Help.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Splitter 2\Buy.lnk - C:\Program Files\Xilisoft\Video Splitter 2\videosplitter_buy.exe -buyurl C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Splitter 2\Uninstall.lnk - C:\Program Files\Xilisoft\Video Splitter 2\Uninstall.exe C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Splitter 2\Xilisoft Découpeur Vidéo 2.lnk - C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft\Video Splitter 2\Xilisoft Découpeur Vidéo Help.lnk - ==== shortcuts in Quick Launch ====================== C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk - C:\Users\Default User\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk - ==== Reset IE Proxy ====================== Value(s) before fix: "ProxyEnable"=dword:00000000 Value(s) after fix: "ProxyEnable"=dword:00000000 ==== Uninstall List x86 ====================== 7-Zip 16.04 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip] Acer Crystal Eye webcam Ver:1.1.192.810 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D0ACE89D-EC7F-470F-80BE-4C98ED366B32}] Acer ePower Management [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3DB0448D-AD82-4923-B305-D001E521A964}] Acer eRecovery Management [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7F811A54-5A09-4579-90E1-C93498E230D9}] Acer VCM [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{047F790A-7A2A-4B6A-AD02-38092BA63DAC}] Acrobat.com [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{287ECFA4-719A-2143-A09B-D6A12DE54E40}] Acronis Backup Agent [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0BFB76C9-9A5B-4C12-A2FF-9ED9640F1436}] Acronis Backup Agent [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\9EBDE6F5-EAE6-4326-A3A1-DEAA29F32D1D_BackupAndRecovery] Adobe AIR [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A2BCA9F1-566C-4805-97D1-7FDC93386723}] Adobe AIR [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe AIR] Adobe Flash Player 10 ActiveX [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player ActiveX] Adobe Shockwave Player 12.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Shockwave Player] Advanced Installer 13.8.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{581697C8-33DC-44BA-A7C3-992B5D29C011}] Advanced SystemCare 10 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Advanced SystemCare_is1] Advanced Uninstaller PRO - Version 12 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\AU11_is1] Aiseesoft Video Enhancer 9.2.10 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F8A1CB4-7F19-4fe9-A724-5F3DE1CB4513}_is1] Amphetamine [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AB68C732-751C-4C0F-9CB7-DC972F64AD1A}_is1] AndroidInstaller [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{523281E5-91DD-49F5-9D85-954148F7596A}] AndroidInstaller [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{523281E5-91DD-49F5-9D85-954148F7596A}] Anti-Locky [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Anti-Locky_is1] AOMEI PE Builder 1.5 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A83692F5-3E9B-4E95-9E7E-B5DF5566909D}_is1] Ashampoo Burning Studio 2017 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{91B33C97-C878-6579-69BA-23E5405C7AAB}_is1] Ashampoo Snap 9 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0A11EA01-D628-EEFD-B5E8-864238AE9105}_is1] Ashampoo StartUp Tuner 2.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ashampoo StartUp Tuner 2_is1] Ashampoo UnInstaller 6 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4209F371-7DE5-9DF2-5DEF-91667EBBBBC5}_is1] Assistant de connexion Windows Live [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DCE8CD14-FBF5-4464-B9A4-E18E473546C7}] Atheros Communications Inc.(R) AR81Family Gigabit/Fast Ethernet Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3108C217-BE83-42E4-AE9E-A56A2A92E549}] BatteryCare 0.9.26.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C6A6036D-FBD0-4324-BEAA-C0845257160C}_is1] BDAntiRansomware [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BE40AB1F-558F-4434-B72F-461EF97E7796}_is1] CCleaner [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CCleaner] CDBurnerXP [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7E265513-8CDA-4631-B696-F40D983F3B07}_is1] Comodo Dragon [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Comodo Dragon] COMODO Internet Security Complete [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{67DA4459-33A8-4E69-9C7B-FB5CBADA60AB}] COMODO Internet Security Complete [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\COMODO Internet Security] COMODO Secure Shopping [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D15DF9B0-3A98-4BEF-B7D5-FC3AEA405760}] COMODO Secure Shopping [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Comodo Secure_Shopping_list_uninstall] Copy Handler 1.44 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9CF6A157-F0E8-4216-B229-C0CA8204BE2C}_is1] CyberGhost 6 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CyberGhost 6_is1] DebugMode Wink [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\DebugMode Wink] DIY DataRecovery CHK-Mate [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\CHK-Mate_is1] DriveImage XML (Private Edition) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F7E1CA14-B39D-452A-960B-39423DDDD933}] DriverMax 9 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\DMX5_is1] EaseUS EverySync 3.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\EaseUS EverySync_is1] Easy File Locker 2.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Easy File Locker] Encrypt4all Professional Edition version 6.0.0.183 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3BAE1213-33F0-4482-A6F5-7360F9CD73E1}_is1] ENE USB Card Reader Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\3B29FD3CCF1F5B855DA0C521597413EBABE97DFB] ETDWare PS/2-x86 7.0.6.5_WHQL [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Elantech] EyesRelaxingAndFocusing 3.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{38FFFD17-81AD-49EE-80F0-12DF92162DD2}_is1] Fast File Copy version 1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C3E8DEF8-0993-4828-9C95-4FB450AE45C1}_is1] Fast HTML Checker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8751AE19-FF09-42CB-8316-C9615DDD02AC}] FastStone Photo Resizer 3.8 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\FastStone Photo Resizer] FileMenu Tools [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\FileMenu Tools_is1] FileOpen [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{46E9BE31-70DC-4797-A24B-CB7FF0BB68BB}] FixIDE 1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5363E7DF-7CBE-4D7F-B832-40363AAFA184}_is1] Flip HTML5 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Flip HTML5_is1] Folderico 4.0 RC12 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Folderico] FolderIco 5.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{22C37D82-6137-40BF-8625-7A846ED65F3A}_is1] FolderViewer [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\FolderViewer] Foxit PhantomPDF [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{78A42908-2050-11E7-94A8-000C2992F709}] Foxit Reader [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Foxit Reader_is1] Free Download Manager [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{43781dff-e0df-49ce-a6d2-47da96a485e7}}_is1] Freeraser [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Freeraser] Galerie de photos Windows Live [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1EE04769-91C4-4A06-92B7-FCAFE6BABDD9}] Greenshot 1.2.9.129 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Greenshot_is1] GridinSoft Anti-Ransomware 0.9.4 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F008F551-A58D-4257-9FB6-2F750860A0DE}_is1] HissenIT Masterdata [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\HissenITMasterdata] Icecream Screen Recorder version 4.76 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7ADEC622-3230-4C9A-9DCE-9BD462B74095}_is1] Identity Card [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Identity Card] iGetting Audio [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iGetting Audio] IM-Magic Partition Resizer Free 2016 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IM_Magic_PR] InfraRecorder [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\InfraRecorder] Installation Windows Live [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{133742BA-6F46-4D3E-85AF-78631D9AD8B8}] Installation Windows Live [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinLiveSuite_Wave3] Intel(R) Graphics Media Accelerator Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\HDMI] Intel(R) Rapid Storage Technology [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}] Internet Security Essentials [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ComodoIse] IObit Uninstaller [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IObitUninstall] IObit Unlocker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\IObit Unlocker_is1] ISO Workshop 7.5 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ISO Workshop_is1] Jing [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8C784F8B-89D0-4A59-A000-7EEF129E1574}] K-Lite Mega Codec Pack 13.1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KLiteCodecPack_is1] KeyScrambler [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\KeyScrambler] Kotobee Author version 1.3.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{11FC9C17-17FF-4F2B-9D5A-4DE097629F21}}_is1] Kotobee Publisher version 2.14 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{64AB8FE0-0627-4FE2-A136-2DAB4B0AF087}_is1] Kotobee Reader version 1.1.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{11FC9C17-17FF-4F2B-9D5A-4DE097629F00}}_is1] Laplink PCmover Express [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B2E26CD-10BC-40EE-9101-012818950369}] Launch Manager [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\LManager] LiteManager Pro - Server [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{71FFA475-24D5-44FB-A51F-39B699E3D82C}] LiteManager Pro - Viewer [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5686E484-7136-4674-A4B2-508C7B26DCA4}] Macrium Reflect Free Edition [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{94572F25-AB01-4EF7-A1FB-60A35C984F4F}] Macrium Reflect Free Edition [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MacriumReflect] Malwarebytes version 3.0.6.1469 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1] MetroTextual version 2.0.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0562579B-8E30-4B3F-814D-539D66F2A571}_is1] Microsoft .NET Framework 4.5.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3911CF56-9EF2-39BA-846A-C27BD3CD0685}] Microsoft Choice Guard [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}] Microsoft Silverlight [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}] Microsoft SQL Server 2005 Compact Edition [ENU] [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9A25302D-30C0-39D9-BD6F-21E6EC160475}] Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{9BE518E6-ECC6-35A9-88E4-87755C07200F}] Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}] Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}] Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B175520C-86A2-35A7-8619-86DC379688B9}] Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}] Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4fcf070a-daac-45e9-a8b0-6850941f7ed8}] Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}] Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}] Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{23daf363-3020-4059-b3ae-dc4ad39fed19}] Microsoft Visual C++ 2015 x86 Additional Runtime - 14.0.23506 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{1045AB6F-6151-3634-8C2C-EE308AA1A6A7}] Microsoft Visual C++ 2015 x86 Minimum Runtime - 14.0.23506 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{65AD78AD-D23D-3A1E-9305-3AE65CD522C2}] MiniCopier [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0B11329E-1DDE-448A-95E6-AA003C63A6A7}_is1] Moo0 Clic Droit Pro 1.53 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 RightClicker] Moo0 Menu Transparent 1.20 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 TransparentMenu] Moo0 Multi-Bureau 1.17 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 MultiDesktop] Moo0 N‚ttoyeur de Disque 1.23 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 DiskCleaner] Moo0 Plus de Menu Fenˆtre 1.20 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 WindowMenuPlus] Moo0 Redimensionner Image 1.22 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 ImageSizer] Moo0 SystŠme Moniteur 1.76 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 SystemMonitor] Moo0 Video … Audio 1.12 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 VideoToAudio] Moo0 Video Cutter 1.07 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 VideoCutter] Moo0 YouTube Downloader 1.07 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Moo0 Utube-DL] MSVCRT [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}] muCommander (remove only) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\muCommander] MultiCommander (Win32) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\MultiCommander Win32] Music Recorder [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F1F805B8-92AC-4EEF-8CCE-4538F6EBEBA0}] MyWinLocker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0D7CD0D9-4A88-4A63-8F91-3F4E8F371768}] MyWinLocker Suite [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}] MyWinLocker Suite [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{738BF5C3-AF7B-4BB0-B7EF-E505EFC756BE}] NiceCopier [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\NiceCopier_is1] Notepad++ (32-bit x86) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Notepad++] Outil de t‚l‚chargement Windows Live [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{205C6BDD-7B73-42DE-8505-9A093F35A238}] Panda USB Vaccine 1.0.1.4 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{55A41219-9B22-4098-BAE7-AE289B3C569A}_is1] PDQ Deploy [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5BD113FE-B8D8-4E7A-9BA1-17C649432B3E}] PeaZip 6.4.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5A2BC38A-406C-4A5B-BF45-6991F9A05325}_is1] PerigeeCopy 1.7 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\PerigeeCopy] Protected Folder [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Protected Folder_is1] Realtek High Definition Audio Driver [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}] Reason Core Security [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Reason Core Security] Remembr version 0.5 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0D9815CB-32F7-4842-8D16-5E411FA919C0}_is1] Remo Convert OST to PST [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{17520B79-9D56-4107-891F-5207F2B5B4D8}_is1] Remo Drive Defrag [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6C4F538B-A66F-444E-9615-A2EBC202EFC5}_is1] Remo Drive Wipe 2.0.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{7BAA8C5C-160C-4258-AEC0-729E43638F9B}_is1] Remo File Eraser 2.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D78E5094-F665-4F98-A552-43AE08C6C105}_is1] Remo MORE 2.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{87C6FC15-4339-4A54-B50C-02CF2136346A}_is1] Remo Outlook Backup & Migrate 1.0.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6D74EB04-2E10-4266-A435-C5012FC68A36}_is1] Remo Privacy Cleaner [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{76C8F882-DBFC-43FB-9483-E5DE5D7D5FFA}_is1] Remo Recover for Android [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3BF6B4CF-E6A1-45B3-9BC5-67213D146CB6}_is1] Remo Recover FREE Edition 1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A6CD3589-2B65-44D1-B68D-E0E6C79EE639}_is1] Remo Repair MOV [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8DD5B1BF-E1BB-43DB-965C-DC6180A19518}_is1] Remo Repair PowerPoint [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{789E7816-C3DD-4392-B486-7C913C26FEDA}_is1] Remo Repair RAR [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{665680CE-EABF-4678-94AA-F3253AD70B0A}_is1] Remo Repair Registry [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{B8D1E97B-3C79-47A4-ADB7-09625917A2FB}_is1] Remo Repair ZIP [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C2E9BCE3-56A8-4A85-9944-6FF3DDCCE816}_is1] Roadkil's Unstoppable Copier Version 5.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{A306FD29-7D3A-4287-91AC-9A0180931395}_is1] Scadarlia version 1.1.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{AAC7A336-EC23-4829-865A-EAE041171023}_is1] SEAF By C_XX [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SEAF] Shadow Defender [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{93A07A0D-454E-43d1-86A9-5DE9C5F4411A}] ShadowExplorer 0.9 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\ShadowExplorer_is1] Shredder [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{C2695E83-CF1D-43D1-84FE-B3BEC561012A}] SkinPack Tango [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SkinPack] Software Informer 1.5.1324.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Software Informer_is1] SoundCloud Download [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SoundCloud Download_is1] Spotify [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Spotify] Spybot Anti-Beacon [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{419A7FCF-93E1-474D-BFE9-987CF3F90C88}_is1] SUPERAntiSpyware [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}] Supercopier 1.2.1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Supercopier] SyncBackFree [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SyncBackFree_is1] SyncBackPro [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SyncBackPro_is1] SyncBackTouch [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\SyncBackTouch_is1] System GoBack Free [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\EaseUS Todo Backup_is1] System Ninja Pro version 3.1.7 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{6E67710E-206D-43AB-BF21-E7CD63056C55}_is1] TAP-Windows 9.21.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TAP-Windows] TechPowerUp GPU-Z [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TechPowerUp GPU-Z] TeraCopy 3.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\TeraCopy_is1] Trojan Remover [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Trojan Remover_is1] trolCommander (remove only) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\trolCommander] Ultracopier 1.2.1.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Ultracopier] Unlocker 1.9.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Unlocker] Unreal Commander v3.57 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\UnrealCommander_is1] UsbFix Premium 2016 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Usbfix] UxStyle Core Beta [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{8E363055-15E5-4D8A-9C69-A0A9DE9A3337}] Vision - Software for the Color Blinded [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\Vision Technology Vision] VivPDF Editor [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\VivPDFEditor_is1] Vole Edutainment [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{600C936B-7684-42F0-9FBF-04726F3D45E2}] WebM Project Directshow Filters [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Uninstall\webmdshow] Welcome Center [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Acer Welcome Center] Windows 10 UX Pack [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\UX Pack] Windows Live Communications Platform [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}] Windows Live FolderShare [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{76810709-A7D3-468D-9167-A1780C1E766C}] Windows Live Mail [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5DD76286-9BE7-4894-A990-E905E91AC818}] Windows Live Messenger [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{445B183D-F4F1-45C8-B9DB-F11355CA657B}] Windows Live Movie Maker [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{230B83A5-7D88-4B95-B71E-F44C0C78B002}] Windows Live Writer [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{4634B21A-CC07-4396-890C-2B8168661FEA}] WinInizio PenSuite Multimedia 2.1 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{2B9DD034-5045-4CC7-AFC4-980589EE71E5}_is1] Winja version 3.0.3 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Winja_is1] WinMerge 2.14.0 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinMerge_is1] WinRAR 5.40 (32-bit) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\WinRAR archiver] Wise Folder Hider [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wise Folder Hider_is1] Wise Memory Optimizer 3.51 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wise Memory Optimizer_is1] Wise Video Downloader 2.53 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wise Video Downloader_is1] Wondershare Filmora(Build 7.8.1) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wondershare Filmora_is1] Wondershare Helper Compact 2.5.2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1] Wondershare TidyMyMusic(Build 1.5.0.1) [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Wondershare TidyMyMusic_is1] Xilisoft CHM en EPUB Convertisseur [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Xilisoft CHM to EPUB Converter] Xilisoft D‚coupeur Vid‚o 2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Xilisoft Video Splitter 2] Xilisoft diteur Vid‚o 2 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Xilisoft Video Editor 2] Xilisoft HTML en EPUB Convertisseur [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Xilisoft HTML to EPUB Converter] Xilisoft PDF en EPUB Convertisseur [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Xilisoft PDF to EPUB Converter] Xiph.Org Open Codecs 0.85.17777 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Open Codecs] ==== Deleting Registry Keys ====================== HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{0F8A1CB4-7F19-4fe9-A724-5F3DE1CB4513}_is1 deleted successfully ==== HijackThis Entries ====================== O1 - Hosts: ::1 localhost O2 - BHO: (no name) - {13D67BB7-DB5F-48AA-884D-7A5D94168509} - (no file) O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe O4 - HKLM\..\Run: [PLFSetI] C:\Windows\PLFSetI.exe O4 - HKLM\..\Run: [IseUI] C:\Program Files\COMODO\Internet Security Essentials\vkise.exe O4 - HKLM\..\Run: [COMODO Internet Security] C:\Program Files\COMODO\COMODO Internet Security\cistray.exe O4 - HKLM\..\Run: [Wondershare Helper Compact.exe] C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE LOCAL') O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'SERVICE RÉSEAU') O4 - HKUS\S-1-5-18\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Système') O4 - HKUS\.DEFAULT\..\RunOnce: [SPReview] "C:\Windows\System32\SPReview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601 (User 'Default user') O8 - Extra context menu item: Append Link Page to Another PDF - res://C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuLinkAppendPDF.html O8 - Extra context menu item: Append to Another PDF - res://C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuCurrentAppendPDF.html O8 - Extra context menu item: Convert Link Page to Foxit PDF - res://C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuLinkNewPDF.html O8 - Extra context menu item: Convert to Foxit PDF - res://C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\Creator\IEAddin\IEAddin.dll/IEContextMenuCurrentNewPDF.html O8 - Extra context menu item: Download all with FDM - file://C:/Program Files/FreeDownloadManager.ORG/Free Download Manager/dlall.htm O8 - Extra context menu item: Download selected with FDM - file://C:/Program Files/FreeDownloadManager.ORG/Free Download Manager/dlselected.htm O8 - Extra context menu item: Download video with Wise Video Downloader - C:\Program Files\Wise\Wise Video Downloader\IEydown.htm O8 - Extra context menu item: Download with FDM - file://C:/Program Files/FreeDownloadManager.ORG/Free Download Manager/dllink.htm O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Acer\Acer VCM\Skype4COM.dll O22 - SharedTaskScheduler: Theme Resource Changer - {F791A188-699D-4FD4-955A-EB59E89B1907} - C:\SkinPack\ThemeResourceChanger.dll O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:\Program Files\SUPERAntiSpyware\SASCORE.EXE O23 - Service: Acronis Remote Agent Service (AcronisAgent) - Acronis - C:\Program Files\Common Files\Acronis\Agent\agent.exe O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis International GmbH - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe O23 - Service: Advanced SystemCare Service 10 (AdvancedSystemCareService10) - IObit - C:\Program Files\IObit\Advanced SystemCare\ASCService.exe O23 - Service: @%SystemRoot%\system32\aelupsvc.dll,-1 (AeLookupSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe O23 - Service: @%systemroot%\system32\appidsvc.dll,-100 (AppIDSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\appinfo.dll,-100 (Appinfo) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-204 (AudioEndpointBuilder) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\audiosrv.dll,-200 (Audiosrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\AxInstSV.dll,-103 (AxInstSV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\bdesvc.dll,-100 (BDESVC) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\bfe.dll,-1001 (BFE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qmgr.dll,-1000 (BITS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\browser.dll,-100 (Browser) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\bthserv.dll,-101 (bthserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: CyberGhost 6 Service (CG6Service) - CyberGhost S.R.L - C:\Program Files\CyberGhost 6\CyberGhost.Service.exe O23 - Service: COMODO Internet Security Helper Service (CmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe O23 - Service: COMODO Virtual Service Manager (cmdvirth) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe O23 - Service: @%SystemRoot%\system32\cryptsvc.dll,-1001 (CryptSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @oleres.dll,-5012 (DcomLaunch) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\defragsvc.dll,-101 (defragsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Service de Défragmentation (DfSdkS) - mst software GmbH, Germany - C:\Program Files\Ashampoo\Ashampoo UnInstaller 6\DfSdkS.exe O23 - Service: @%SystemRoot%\system32\dhcpcore.dll,-100 (Dhcp) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Digital Wave Update Service (DigitalWave.Update.Service) - Digital Wave Ltd. - C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe O23 - Service: @%SystemRoot%\System32\dnsapi.dll,-101 (Dnscache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dot3svc.dll,-1102 (dot3svc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\dps.dll,-500 (DPS) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Comodo - C:\Program Files\Comodo\Dragon\dragon_updater.exe O23 - Service: Dritek WMI Service (DsiWMIService) - Dritek System Inc. - C:\Program Files\Launch Manager\dsiwmis.exe O23 - Service: @%systemroot%\system32\eapsvc.dll,-1 (EapHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: EaseUS Agent Service (EaseUS Agent) - CHENGDU YIWO Tech Development Co., Ltd - C:\Program Files\EaseUS\System GoBack Free\bin\Agent.exe O23 - Service: ESLoadService - TODO: - C:\Program Files\EaseUS\EaseUS EverySync\bin\ESLoadService.exe O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @comres.dll,-2450 (EventSystem) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdPHost.dll,-100 (fdPHost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\fdrespub.dll,-100 (FDResPub) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\FntCache.dll,-100 (FontCache) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: FoxitPhantomService - Foxit Software Inc. - C:\Program Files\Foxit Software\Foxit PhantomPDF\FoxitConnectedPDFService.exe O23 - Service: @gpapi.dll,-112 (gpsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\hidserv.dll,-101 (hidserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\kmsvc.dll,-6 (hkmsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\ListSvc.dll,-100 (HomeGroupListener) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\provsvc.dll,-100 (HomeGroupProvider) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe O23 - Service: @%SystemRoot%\system32\ikeext.dll,-501 (IKEEXT) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Innovative Solutions Service Monitor (InnovativeSolutions_monitor) - Unknown owner - C:\Program Files\Common Files\Innovative Solutions\Advanced Uninstaller\InnovativeSolutions_monitor_Svr.exe O23 - Service: @%systemroot%\system32\IPBusEnum.dll,-102 (IPBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\iphlpsvc.dll,-500 (iphlpsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: isesrv - COMODO - C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe O23 - Service: @comres.dll,-2946 (KtmRm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\srvsvc.dll,-100 (LanmanServer) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wkssvc.dll,-100 (LanmanWorkstation) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lltdres.dll,-1 (lltdsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\lmhsvc.dll,-101 (lmhosts) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Macrium Service (MacriumService) - Paramount Software UK Ltd - C:\Program Files\Macrium\Common\MacriumService.exe O23 - Service: Malwarebytes Service (MBAMService) - Malwarebytes - C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe O23 - Service: WinMetro Service (MetroServ) - IObit - C:\Program Files\UX Pack\WinMetro\MetroSvc.exe O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Windows\system32\mfevtps.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-100 (MMCSS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Acronis Managed Machine Service (MMS) - Unknown owner - C:\Program Files\BackupClient\BackupAndRecovery\mms.exe O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23090 (MpsSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe O23 - Service: @%SystemRoot%\system32\msimsg.dll,-27 (msiserver) - Unknown owner - C:\Windows\system32\msiexec.exe O23 - Service: @%SystemRoot%\system32\netman.dll,-109 (Netman) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\netprofm.dll,-202 (netprofm) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\nlasvc.dll,-1 (NlaSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: NMSAccess - Unknown owner - C:\Windows\system32\NMSAccessU.exe O23 - Service: @%SystemRoot%\system32\nsisvc.dll,-200 (nsi) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8004 (p2pimsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\p2psvc.dll,-8006 (p2psvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pcasvc.dll,-1 (PcaSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: PDQ Deploy (PDQDeploy) - Admin Arsenal - C:\Program Files\Admin Arsenal\PDQ Deploy\PDQDeployService.exe O23 - Service: @%systemroot%\system32\pla.dll,-500 (pla) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpnpmgr.dll,-100 (PlugPlay) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpauto.dll,-8002 (PNRPAutoReg) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\pnrpsvc.dll,-8000 (PNRPsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\polstore.dll,-5010 (PolicyAgent) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\umpo.dll,-100 (Power) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\profsvc.dll,-300 (ProfSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\rasauto.dll,-200 (RasAuto) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%Systemroot%\system32\rasmans.dll,-200 (RasMan) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @regsvc.dll,-1 (RemoteRegistry) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: LiteManagerTeam LiteManager (ROMService) - Unknown owner - C:\Program Files\LiteManager Pro - Server\ROMServer.exe O23 - Service: @%windir%\system32\RpcEpMap.dll,-1001 (RpcEptMapper) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe O23 - Service: @oleres.dll,-5010 (RpcSs) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Raw Socket Service (RS_Service) - Acer Incorporated - C:\Program Files\Acer\Acer VCM\RS_Service.exe O23 - Service: @%SystemRoot%\System32\SCardSvr.dll,-1 (SCardSvr) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\schedsvc.dll,-100 (Schedule) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\certprop.dll,-13 (SCPolicySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sdrsvc.dll,-107 (SDRSVC) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\Sens.dll,-200 (SENS) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\SessEnv.dll,-1026 (SessionEnv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: ShadowExplorer Service (sesvc) - www.shadowexplorer.com - C:\Program Files\ShadowExplorer\sesvc.exe O23 - Service: @%SystemRoot%\System32\shsvcs.dll,-12288 (ShellHWDetection) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe O23 - Service: @%SystemRoot%\system32\sppuinotify.dll,-103 (sppuinotify) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\ssdpsrv.dll,-100 (SSDPSRV) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\sstpsvc.dll,-200 (SstpSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Start Menu Logon Manager - ReviverSoft - C:\Program Files\UX Pack\Start Menu Reviver\StartMenuReviverService.exe O23 - Service: @%SystemRoot%\system32\wiaservc.dll,-9 (StiSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\swprv.dll,-103 (swprv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: SyncBack Touch (SyncBackTouch) - 2BrightSparks Pte. Ltd. - C:\Program Files\2BrightSparks\SyncBackTouch\SyncBackTouchSvc.exe O23 - Service: @%SystemRoot%\system32\sysmain.dll,-1000 (SysMain) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\TabSvc.dll,-100 (TabletInputService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\tapisrv.dll,-10100 (TapiSrv) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: TeraCopy Service (TeraCopyService) - Code Sector - C:\Program Files\TeraCopy\TeraCopyService.exe O23 - Service: @%SystemRoot%\System32\termsrv.dll,-268 (TermService) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\themeservice.dll,-8192 (Themes) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\mmcss.dll,-102 (THREADORDER) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\trkwks.dll,-1 (TrkWks) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\servicing\TrustedInstaller.exe,-100 (TrustedInstaller) - Unknown owner - C:\Windows\servicing\TrustedInstaller.exe O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe O23 - Service: Unsigned Themes (UnsignedThemes) - The Within Network, LLC - C:\Windows\UnsignedThemesSvc.exe O23 - Service: Updater Service - Acer Group - C:\Program Files\Acer\Acer Updater\UpdaterService.exe O23 - Service: @%systemroot%\system32\upnphost.dll,-213 (upnphost) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\dwm.exe,-2000 (UxSms) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe O23 - Service: @%SystemRoot%\system32\w32time.dll,-200 (W32Time) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe O23 - Service: @%systemroot%\system32\wbiosrvc.dll,-100 (WbioSrvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wcncsvc.dll,-3 (wcncsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\WcsPlugInService.dll,-200 (WcsPlugInService) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-502 (WdiServiceHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\wdi.dll,-500 (WdiSystemHost) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\webclnt.dll,-100 (WebClient) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wecsvc.dll,-200 (Wecsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wercplsupport.dll,-101 (wercplsupport) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wersvc.dll,-100 (WerSvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%ProgramFiles%\Windows Defender\MsMpRes.dll,-103 (WinDefend) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\system32\winhttp.dll,-100 (WinHttpAutoProxySvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmisvc.dll,-205 (Winmgmt) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wsmsvc.dll,-101 (WinRM) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%SystemRoot%\System32\wlansvc.dll,-257 (Wlansvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: @%SystemRoot%\system32\wpcsvc.dll,-100 (WPCSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wpdbusenum.dll,-100 (WPDBusEnum) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wscsvc.dll,-200 (wscsvc) - Unknown owner - C:\Windows\System32\svchost.exe O23 - Service: @%systemroot%\system32\SearchIndexer.exe,-103 (WSearch) - Unknown owner - C:\Windows\system32\SearchIndexer.exe O23 - Service: @%systemroot%\system32\wuaueng.dll,-105 (wuauserv) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\system32\wudfsvc.dll,-1000 (wudfsvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: @%SystemRoot%\System32\wwansvc.dll,-257 (WwanSvc) - Unknown owner - C:\Windows\system32\svchost.exe O23 - Service: Shadow Defender Service ({0CBD4F48-3751-475D-BE88-4F271385B672}) - SHADOWDEFENDER.COM - C:\Program Files\Shadow Defender\Service.exe ==== Silent Runners ====================== ==== Empty IE Cache ====================== C:\Users\Acronis Agent User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\Default\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully C:\Users\widen-finalis\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully ==== Empty FireFox Cache ====================== No FireFox Profiles found ==== Empty Chrome Cache ====================== C:\Users\widen-finalis\AppData\Local\Comodo\Dragon\User Data\Default\Cache emptied successfully ==== Empty All Flash Cache ====================== Flash Cache Emptied Successfully ==== Empty All Java Cache ====================== No Java Cache Found ======== System Restore Points ======== RP61: 05/05/2017 10:12:06 - Installed Advanced Installer 13.8.1 RP62: 06/05/2017 19:55:54 - Installed Fast HTML Checker RP63: 06/05/2017 20:15:21 - UxStyle RP64: 06/05/2017 20:17:17 - UxStyle RP65: 06/05/2017 21:04:30 - UxStyle RP66: 06/05/2017 21:07:36 - UxStyle RP67: 07/05/2017 09:03:21 - UxStyle RP68: 07/05/2017 09:12:16 - UxStyle RP69: 09/05/2017 07:09:51 - Installation du package de pilotes : TAP-Windows Provider V9 Cartes réseau ==== C:\zoek_backup content ====================== ==== Empty Temp Folders ====================== C:\Users\Acronis Agent User\AppData\Local\Temp emptied successfully C:\Users\Default\AppData\Local\Temp emptied successfully C:\Users\Default User\AppData\Local\Temp emptied successfully C:\Users\widen-finalis\AppData\Local\Temp will be emptied at reboot C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully C:\Windows\Temp will be emptied at reboot ==== After Reboot ====================== ==== Empty Temp Folders ====================== C:\Windows\Temp successfully emptied C:\Users\WIDEN-~1\AppData\Local\Temp successfully emptied ==== Empty Recycle Bin ====================== C:\$RECYCLE.BIN successfully emptied ==== EOF on 09/05/2017 at 17:30:50,49 ======================