Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 20-08-2017 Exécuté par Pulla (administrateur) sur PULLA (21-08-2017 19:42:52) Exécuté depuis C:\Users\Pulla\Desktop Profils chargés: Pulla (Profils disponibles: Pulla) Platform: Windows 10 Home Version 1703 (X64) Langue: Français (France) Internet Explorer Version 11 (Navigateur par défaut: Chrome) Mode d'amorçage: Normal Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processus (Avec liste blanche) ================= (Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (Microsoft Corporation) C:\Windows\System32\wlanext.exe (Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (Intel Corporation) C:\Windows\System32\ibtsiva.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe () D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (CyberGhost S.R.L) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe (Acer Cloud Technology) C:\Program Files (x86)\Acer\AOP Framework\acer\ccd.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe () D:\SteamLibrary\steamapps\common\wallpaper_engine\wallpaper32.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.19.820.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QASvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAgent.exe (Acer Incorporated) C:\Program Files\Acer\Acer Quick Access\QAAdminAgent.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Microsoft Corporation) C:\Windows\System32\rundll32.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe (CyberGhost S.R.L.) C:\Program Files\CyberGhost 6\CyberGhost.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (BitTorrent Inc.) C:\Users\Pulla\AppData\Roaming\uTorrent\uTorrent.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (BitTorrent Inc.) C:\Users\Pulla\AppData\Roaming\uTorrent\updates\3.5.0_43916\utorrentie.exe (BitTorrent Inc.) C:\Users\Pulla\AppData\Roaming\uTorrent\updates\3.5.0_43916\utorrentie.exe (SteelSeries ApS) C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe (Mega Limited) C:\Users\Pulla\AppData\Local\MEGAsync\MEGAsync.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Drive\AcerDriveTray.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Drive\AcerDriveProxy.exe (Acer Incorporated) C:\Program Files (x86)\Acer\Acer Drive\AcerDriveUI.exe (Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Acer Incorporated) C:\Program Files (x86)\Acer\AOP Framework\BackgroundAgent.exe () C:\Program Files (x86)\Acer\Care Center\ACCStd.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (Graphic Tablet Company Shenzhen) C:\PenTabletDriver\TabletDriver.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11706.1001.26.0_x64__8wekyb3d8bbwe\WinStore.App.exe () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2017.35071.13510.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17062.12911.0_x64__8wekyb3d8bbwe\Video.UI.exe () C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.17062.14111.0_x64__8wekyb3d8bbwe\Music.UI.exe (Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8400.40955.0_x64__8wekyb3d8bbwe\HxOutlook.exe (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.8400.40955.0_x64__8wekyb3d8bbwe\HxTsr.exe (Blizzard Entertainment) C:\ProgramData\Battle.net\Agent\Agent.5750\Agent.exe (Blizzard Entertainment) C:\Program Files (x86)\Blizzard App\Battle.net.9093\Battle.net.exe () C:\Program Files (x86)\Blizzard App\Battle.net.9093\Battle.net Helper.exe () C:\Program Files (x86)\Blizzard App\Battle.net.9093\Battle.net Helper.exe (Aequus Gaming) D:\jeux\LoLReplay2\LoLReplay2.exe (Aequus Gaming) D:\jeux\LoLReplay2\LoLReplay2.exe (Aequus Gaming) D:\jeux\LoLReplay2\LoLReplay2.exe (Aequus Gaming) D:\jeux\LoLReplay2\LoLReplay2.exe () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.89\deploy\LeagueClient.exe () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.89\deploy\LeagueClientUx.exe () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.89\deploy\LeagueClientUxRender.exe () C:\Riot Games\League of Legends\RADS\projects\league_client\releases\0.0.0.89\deploy\LeagueClientUxRender.exe (Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe (Aequus Gaming) D:\jeux\LoLReplay2\LoLReplay2.exe (Discord Inc.) C:\Users\Pulla\AppData\Local\Discord\app-0.0.298\Discord.exe (Discord Inc.) C:\Users\Pulla\AppData\Local\Discord\app-0.0.298\Discord.exe (Discord Inc.) C:\Users\Pulla\AppData\Local\Discord\app-0.0.298\Discord.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Registre (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [629152 2017-03-18] (Microsoft Corporation) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16412952 2015-10-12] (Realtek Semiconductor) HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [322472 2015-06-24] (Intel Corporation) HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64 HKLM\...\Run: [TabletDriver] => C:\PenTabletDriver\TabletDriver.exe [634240 2016-05-27] (Graphic Tablet Company Shenzhen) HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes) HKLM-x32\...\Run: [Sound Blaster Cinema 2] => C:\Program Files (x86)\Creative\Sound Blaster Cinema 2\Sound Blaster Cinema 2\SBCinema2.exe [1442304 2014-05-30] (Creative Technology Ltd) HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1157680 2017-05-03] (CyberGhost S.R.L.) HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\...\Run: [uTorrent] => C:\Users\Pulla\AppData\Roaming\uTorrent\uTorrent.exe [2406080 2017-07-18] (BitTorrent Inc.) HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd) HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\...\Run: [Steam] => c:\program files (x86)\steam\steam.exe [3062560 2017-07-18] (Valve Corporation) HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\...\Run: [Chromium] => c:\users\pulla\appdata\local\chromium\application\chrome.exe --auto-launch-at-startup --profile-directory=Default --restore-last-session HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\...\Run: [LoLReplay2] => D:\jeux\LoLReplay2\LoLReplay2.exe [25274368 2017-08-03] (Aequus Gaming) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SteelSeries Engine 3.lnk [2017-08-16] ShortcutTarget: SteelSeries Engine 3.lnk -> C:\Program Files\SteelSeries\SteelSeries Engine 3\SteelSeriesEngine3.exe (SteelSeries ApS) Startup: C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HWID Changer v7.0.exe [2014-07-23] (iMostLiked™) Startup: C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2017-08-17] ShortcutTarget: MEGAsync.lnk -> C:\Users\Pulla\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited) Startup: C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\System.lnk [2017-08-19] ShortcutTarget: System.lnk -> C:\ProgramData\taskmer\taskmer.exe (Pas de fichier) GroupPolicy: Restriction - Chrome <==== ATTENTION GroupPolicy\User: Restriction <==== ATTENTION ==================== Internet (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.) Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 Tcpip\Parameters: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{0b7538c7-ed11-4e87-9951-4784812cdfb7}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{1919a1b6-c992-414c-ba78-3db97a0f324f}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{1919a1b6-c992-414c-ba78-3db97a0f324f}: [DhcpNameServer] 192.168.1.1 Tcpip\..\Interfaces\{26b11a49-585f-4b43-a90c-9af3c3d7b25b}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{3ababeb5-6946-4fb8-a40e-8c68c572bd8b}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{49996ebe-b680-4a5f-af39-4d90e532cb35}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{49996ebe-b680-4a5f-af39-4d90e532cb35}: [DhcpNameServer] 8.8.8.8 Tcpip\..\Interfaces\{76ab533f-ac9b-42aa-a511-f6135eb135ec}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{b2ac0913-4c6a-4aa2-ac16-484653598a33}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{b5c423e9-6b37-11e7-8b6b-806e6f6e6963}: [NameServer] 8.8.8.8 Tcpip\..\Interfaces\{f6c2563d-bac1-48b2-9036-c5d77c468741}: [NameServer] 8.8.8.8 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ch.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://ch.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://ch.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D1%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer15.msn.com/?pc=ACTE SearchScopes: HKLM -> DefaultScope {C77DD7C2-37AB-4E14-B888-FCAF62BD2A36} URL = hxxps://ch.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM -> {C77DD7C2-37AB-4E14-B888-FCAF62BD2A36} URL = hxxps://ch.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> DefaultScope {C77DD7C2-37AB-4E14-B888-FCAF62BD2A36} URL = hxxps://ch.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKLM-x32 -> {C77DD7C2-37AB-4E14-B888-FCAF62BD2A36} URL = hxxps://ch.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-2170621112-2091516867-1202869241-1001 -> DefaultScope {FFEBBF0A-C22C-4172-89FF-45215A135AC7} URL = SearchScopes: HKU\S-1-5-21-2170621112-2091516867-1202869241-1001 -> {2211d4a5-48d0-47f5-a7cd-81e861470f7f} URL = hxxps://ch.search.yahoo.com/yhs/search?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D4%26b%3DIE%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome&p={searchTerms} SearchScopes: HKU\S-1-5-21-2170621112-2091516867-1202869241-1001 -> {B00FDF5C-7851-48A2-B983-E6E98D4EF348} URL = SearchScopes: HKU\S-1-5-21-2170621112-2091516867-1202869241-1001 -> {FCAF073A-28F5-4651-A6CC-CC122FF374B2} URL = hxxps://ch.search.yahoo.com/search?p={searchTerms}&intl=ch&fr=yset_ie_syc_oracle&type=orcl_default&partnerexternal-oracle=external-oracle BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-07-30] (Oracle Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-07-30] (Oracle Corporation) DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://files.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab FireFox: ======== FF DefaultProfile: fffi5atw.default FF ProfilePath: C:\Users\Pulla\AppData\Roaming\Mozilla\Firefox\Profiles\fffi5atw.default [2017-08-21] FF SelectedSearchEngine: Mozilla\Firefox\Profiles\fffi5atw.default -> Yahoo! Powered FF Homepage: Mozilla\Firefox\Profiles\fffi5atw.default -> hxxps://ch.search.yahoo.com/yhs/web?hspart=iry&hsimp=yhs-fullyhosted_003&type=wcg_chtengin_17_33¶m1=1¶m2=f%3D1%26b%3DFirefox%26cc%3Dch%26pa%3Dwincy%26cd%3D2XzuyEtN2Y1L1QzuyCyE0F0BzztCtB0E0C0DyC0Bzy0CtDzztN0D0Tzu0StBtDyDzztN1L2XzutAtFtBzytFtCtDyEtFyCyCtN1L1Czu1TtN1L1G1B1V1N2Y1L1Qzu2StCyD0FzztCzyyD0BtGtCzy0AzytGtBzytA0CtGyEtC0BtDtG0A0ByEyByB0BtDyEyBzzyCyB2QtN1M1F1B2Z1V1N2Y1L1Qzu2StCtC0A0Dzz0BtB0EtGzyyDyByDtGyEyE0EyCtG0A0AzzzytG0A0AyBtDtAyC0CyByEyDyB0C2QtN0A0LzutB%26cr%3D724902439%26a%3Dwcg_chtengin_17_33%26os_ver%3D10.0%26os%3DWindows%2B10%2BHome FF DefaultSearchEngine: Mozilla\Firefox\Profiles\fffi5atw.default -> Yahoo! Powered FF Keyword.URL: Mozilla\Firefox\Profiles\fffi5atw.default -> user_pref("keyword.URL", true); FF Extension: (Français Language Pack) - C:\Users\Pulla\AppData\Roaming\Mozilla\Firefox\Profiles\fffi5atw.default\Extensions\langpack-fr@firefox.mozilla.org [2017-07-17] [non signé] FF Extension: (Pas de nom) - C:\Users\Pulla\AppData\Roaming\Mozilla\Firefox\Profiles\fffi5atw.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7} [non trouvé(e)] FF SearchPlugin: C:\Users\Pulla\AppData\Roaming\Mozilla\Firefox\Profiles\fffi5atw.default\searchplugins\yahoo! powered.xml [2017-08-20] FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\McSiteAdvisor.xml [2017-07-30] FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation) FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-07-30] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-07-30] (Oracle Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-07-19] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-07-19] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-17] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-07-17] (Google Inc.) Chrome: ======= CHR HomePage: Default -> hxxp://google.com/ CHR DefaultSearchKeyword: Default -> google.ch_ CHR Profile: C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default [2017-08-21] CHR Extension: (Google Slides) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-07-17] CHR Extension: (Magic Actions for YouTube™) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\abjcfabbhafbcdfjoecdgepllmpfceif [2017-08-21] CHR Extension: (Google Docs) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-07-17] CHR Extension: (Google Drive) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-07-17] CHR Extension: (Undertale Wallpapers New Tab (Undertale Fonds d'écran)) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\bccmelbiciaoaaggghpkbhhhmljomhfb [2017-07-17] CHR Extension: (YouTube) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-07-17] CHR Extension: (uBlock Origin) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-07-25] CHR Extension: (Bloqueur de pub pour Youtube™) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmhomipkklckpomafalojobppmmidlgl [2017-08-19] CHR Extension: (Dark Reader) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2017-07-17] CHR Extension: (Google Sheets) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-07-17] CHR Extension: (Google Docs hors connexion) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-07-17] CHR Extension: (QuickMyAnimeList) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbaegdehoobdkpfffdjmecohehhegaoo [2017-07-17] CHR Extension: (League of Legends Ahri Art 1920x1080) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfembdgecfacdcobfianigondfhcobgi [2017-07-17] CHR Extension: (Ghostery) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2017-08-19] CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-07-17] CHR Extension: (Gmail) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-07-17] CHR Extension: (Chrome Media Router) - C:\Users\Pulla\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-09] CHR HKLM\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx CHR HKLM\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx CHR HKU\S-1-5-21-2170621112-2091516867-1202869241-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [nahhmpbckpgdidfnmfkfgiflpjijilce] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [njpedbdniajflhgfoipnjkednnlkngbj] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [pilplloabdedfmialnfchjomjmpjcoej] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Avec liste blanche) ==================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1536520 2017-08-03] () S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [369720 2017-07-17] (BlueStack Systems, Inc.) R2 CCDMonitorService; C:\Program Files (x86)\Acer\AOP Framework\CCDMonitorService.exe [2860248 2015-09-30] (Acer Incorporated) R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [91184 2017-05-03] (CyberGhost S.R.L) S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [18856 2015-06-24] (Intel Corporation) S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé] S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-08-14] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes) S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-06-12] () R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [512960 2017-07-26] (NVIDIA Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [462968 2017-07-19] (NVIDIA Corporation) R2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [449984 2017-07-26] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2169696 2017-08-02] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3149672 2017-08-02] (Electronic Arts) R3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [450400 2015-07-18] (Acer Incorporated) R2 Wallpaper Engine Service; D:\SteamLibrary\steamapps\common\wallpaper_engine\bin\wallpaperservice32_c.exe [337408 2017-07-23] () [Fichier non signé] S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation) S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [102816 2017-07-17] (Microsoft Corporation) R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831200 2015-06-12] (Intel® Corporation) R2 ibtsiva; %SystemRoot%\system32\ibtsiva [X] ===================== Pilotes (Avec liste blanche) ====================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [270904 2017-06-21] (Bluestack System Inc. ) R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [77376 2017-08-19] () U5 iaStorA; C:\Windows\System32\Drivers\iaStorA.sys [1455552 2015-06-24] (Intel Corporation) R3 ibtusb; C:\Windows\system32\DRIVERS\ibtusb.sys [244744 2017-04-13] (Intel Corporation) R3 LifeCamTrueColor; C:\Windows\system32\DRIVERS\LifeCamTrueColor.sys [37928 2016-07-27] (Microsoft Corporation) R2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [188352 2017-08-20] (Malwarebytes) R3 MBAMFarflt; C:\Windows\system32\drivers\farflt.sys [101784 2017-08-21] (Malwarebytes) R3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [45472 2017-08-21] (Malwarebytes) R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [253856 2017-08-21] (Malwarebytes) R3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [93600 2017-08-21] (Malwarebytes) R3 Neo_VPN; C:\Windows\System32\drivers\Neo6_x64_VPN.sys [38216 2017-08-13] (SoftEther Corporation) R3 Netwtw04; C:\Windows\System32\drivers\Netwtw04.sys [7218176 2017-03-18] (Intel Corporation) R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvaei.inf_amd64_c5aaa75a1e3ab6e0\nvlddmkm.sys [15668664 2017-07-19] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-07-26] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48064 2017-07-26] (NVIDIA Corporation) R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [57792 2017-07-26] (NVIDIA Corporation) R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [604160 2017-03-18] (Realtek ) R2 RtkIOAC60; C:\Windows\system32\DRIVERS\RtkIOAC60.sys [38656 2015-06-09] (Realtek semiconductor corp) U5 RTSUER; C:\Windows\System32\Drivers\RTSUER.sys [402136 2015-05-27] (Realsil Semiconductor Corporation) S3 SDFRd; C:\Windows\System32\drivers\SDFRd.sys [31128 2017-03-18] () R1 SeLow; C:\Windows\system32\DRIVERS\SeLow_x64.sys [51024 2017-08-13] (SoftEther Corporation) R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [46408 2017-06-02] (SteelSeries ApS) R3 sshid; C:\Windows\System32\drivers\sshid.sys [45936 2017-08-15] (SteelSeries ApS) R3 vmulti; C:\Windows\System32\drivers\vmulti.sys [19504 2016-01-13] (Windows (R) Win 7 DDK provider) S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation) S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation) S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation) ==================== NetSvcs (Avec liste blanche) =================== (Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.) ==================== Un mois - Créés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-08-21 19:42 - 2017-08-21 19:43 - 000033050 _____ C:\Users\Pulla\Desktop\FRST.txt 2017-08-21 19:42 - 2017-08-21 19:42 - 002395648 _____ (Farbar) C:\Users\Pulla\Desktop\FRST64.exe 2017-08-21 19:42 - 2017-08-21 19:42 - 000000000 ____D C:\FRST 2017-08-21 12:49 - 2017-08-21 12:49 - 000000992 _____ C:\Users\Public\Desktop\Heroes of the Storm.lnk 2017-08-21 12:49 - 2017-08-21 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm 2017-08-21 12:43 - 2017-08-21 12:57 - 000000000 ____D C:\Program Files (x86)\Heroes of the Storm 2017-08-21 12:43 - 2017-08-21 12:43 - 000000000 ____D C:\Users\Pulla\Documents\Heroes of the Storm 2017-08-21 12:25 - 2017-08-21 12:26 - 000000000 ____D C:\Users\Pulla\Desktop\vidéo 2017-08-21 12:25 - 2017-08-21 12:25 - 000000000 ____D C:\Users\Pulla\Desktop\skining 2017-08-21 11:25 - 2017-08-21 11:25 - 000164905 _____ C:\Users\Pulla\Desktop\ZHPDiag.txt 2017-08-21 11:21 - 2017-08-21 11:21 - 000004645 _____ C:\Users\Pulla\Desktop\ZHPFixReport.txt 2017-08-21 11:21 - 2017-08-21 11:21 - 000004645 _____ C:\Users\Pulla\Desktop\ZHPFix[R1].txt 2017-08-21 11:18 - 2017-08-21 11:18 - 003067264 _____ (Nicolas Coolman) C:\Users\Pulla\Downloads\zhpfix_2017-6-13-1.exe 2017-08-21 11:18 - 2017-08-21 11:18 - 003067264 _____ (Nicolas Coolman) C:\Users\Pulla\Desktop\zhpfix_2017-6-13-1.exe 2017-08-21 11:18 - 2017-08-21 11:18 - 000000000 ____D C:\Users\Pulla\Desktop\Quarantine 2017-08-20 15:30 - 2017-08-20 15:30 - 000000000 ____D C:\ProgramData\WinZip 2017-08-20 15:30 - 2017-08-20 15:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip 2017-08-20 15:30 - 2017-08-20 15:30 - 000000000 ____D C:\Program Files\WinZip Registry Optimizer 2017-08-20 15:24 - 2017-08-20 15:24 - 012024632 _____ (Cheat Engine ) C:\Users\Pulla\Downloads\CheatEngine67 (1).exe 2017-08-20 15:24 - 2017-08-20 15:24 - 000000000 ____D C:\Users\Pulla\Documents\My Cheat Tables 2017-08-20 15:24 - 2017-08-20 15:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.7 2017-08-20 15:23 - 2017-08-20 15:23 - 012024632 _____ (Cheat Engine ) C:\Users\Pulla\Downloads\CheatEngine67.exe 2017-08-20 15:19 - 2017-08-20 15:19 - 000001032 _____ C:\Users\Pulla\Desktop\Gestionnaire de Patch Undertale.lnk 2017-08-20 15:18 - 2017-08-20 15:18 - 046717772 _____ C:\Users\Pulla\Downloads\UT_FR_win_V1.1.zip 2017-08-20 15:18 - 2017-08-20 15:18 - 000001394 _____ C:\Users\Pulla\Desktop\UNDERTALE - Raccourci.lnk 2017-08-20 12:18 - 2017-08-20 12:18 - 000001516 _____ C:\Users\Pulla\Desktop\malwarebytes.txt 2017-08-20 12:02 - 2017-08-20 12:02 - 000005493 _____ C:\Users\Pulla\Desktop\AdwCleaner[S0].txt 2017-08-20 11:41 - 2017-08-20 13:17 - 000000000 ____D C:\AdwCleaner 2017-08-20 11:32 - 2017-08-20 11:41 - 000006046 _____ C:\Users\Pulla\Desktop\ZHPCleaner.txt 2017-08-20 11:29 - 2017-08-20 11:41 - 000000916 _____ C:\Users\Pulla\Desktop\ZHPCleaner.lnk 2017-08-20 11:28 - 2017-08-20 11:28 - 008185288 _____ (Malwarebytes) C:\Users\Pulla\Downloads\adwcleaner_7.0.1.0.exe 2017-08-20 11:28 - 2017-08-20 11:28 - 008185288 _____ (Malwarebytes) C:\Users\Pulla\Desktop\adwcleaner_7.0.1.0.exe 2017-08-20 11:28 - 2017-08-20 11:27 - 002854784 _____ C:\Users\Pulla\Desktop\zhpcleaner_2017.8.15.140.exe 2017-08-20 11:27 - 2017-08-20 11:27 - 002854784 _____ C:\Users\Pulla\Downloads\zhpcleaner_2017.8.15.140.exe 2017-08-19 19:48 - 2017-08-21 11:24 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\ZHP 2017-08-19 19:48 - 2017-08-21 11:24 - 000000000 ____D C:\Users\Pulla\AppData\Local\ZHP 2017-08-19 19:48 - 2017-08-19 19:48 - 002812800 _____ C:\Users\Pulla\Downloads\zhpdiag_2017.8.15.140.exe 2017-08-19 19:48 - 2017-08-19 19:48 - 002812800 _____ C:\Users\Pulla\Desktop\zhpdiag_2017.8.15.140.exe 2017-08-19 18:18 - 2017-08-21 15:37 - 000093600 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys 2017-08-19 18:18 - 2017-08-21 11:22 - 000253856 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2017-08-19 18:18 - 2017-08-21 11:22 - 000101784 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys 2017-08-19 18:18 - 2017-08-21 11:22 - 000045472 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2017-08-19 18:18 - 2017-08-20 15:26 - 000188352 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMChameleon.sys 2017-08-19 18:18 - 2017-08-19 18:49 - 000077376 _____ C:\Windows\system32\Drivers\mbae64.sys 2017-08-19 18:18 - 2017-08-19 18:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-08-19 18:18 - 2017-08-19 18:18 - 000000000 ____D C:\ProgramData\Malwarebytes 2017-08-19 18:18 - 2017-08-19 18:18 - 000000000 ____D C:\Program Files\Malwarebytes 2017-08-19 18:17 - 2017-08-19 18:18 - 064025992 _____ (Malwarebytes ) C:\Users\Pulla\Downloads\mb3-setup-35891.35891-3.1.2.1733-1.0.139-1.0.2060.exe 2017-08-19 18:12 - 2017-08-19 18:12 - 000000290 __RSH C:\Users\Pulla\ntuser.pol 2017-08-19 18:10 - 2017-08-19 18:10 - 000000535 _____ C:\Users\Pulla\Downloads\new_hack_2017_308-11d.torrent 2017-08-19 18:05 - 2017-08-19 18:05 - 000000558 _____ C:\Users\Pulla\Downloads\h1z1_hack_l_2017_308-11d.torrent 2017-08-19 09:40 - 2017-08-19 09:40 - 000450651 _____ C:\Users\Pulla\Downloads\xpadder-2007.08.exe 2017-08-18 20:51 - 2017-08-18 20:51 - 000000000 ____D C:\output 2017-08-18 20:44 - 2017-08-18 21:10 - 000000000 ____D C:\Users\Pulla\Desktop\Originals 2017-08-18 20:39 - 2017-08-19 09:57 - 000030720 ____H C:\Users\Pulla\Desktop\photothumb.db 2017-08-18 18:14 - 2017-08-20 21:08 - 000000000 ____D C:\Users\Pulla\AppData\Local\UNDERTALE 2017-08-18 18:10 - 2017-08-18 18:10 - 000027043 _____ C:\Users\Pulla\Downloads\Undertale PC FR crack.torrent 2017-08-18 17:53 - 2017-08-18 17:53 - 000000000 ____D C:\Users\Pulla\Documents\KoeiTecmo 2017-08-18 10:38 - 2017-08-18 10:38 - 000037168 _____ C:\Windows\uninstaller.dat 2017-08-18 08:32 - 2017-08-18 08:32 - 000028736 _____ C:\Users\Pulla\Downloads\Kizumonogatari.03.VOSTFR.WEBDL.1080p.AAC.x264-AOTEAM.mp4.torrent 2017-08-18 08:31 - 2017-08-18 08:31 - 000035848 _____ C:\Users\Pulla\Downloads\Kizumonogatari II Nekketsu-hen- Vostfr Bluray 1080p x265 AAC 8Bits.mp4.torrent 2017-08-17 22:14 - 2017-08-17 22:15 - 627680252 _____ C:\Users\Pulla\Downloads\[Despair-Paradise] Saya no Uta - Français.zip 2017-08-17 20:43 - 2017-08-17 20:43 - 000551373 _____ C:\Users\Pulla\Downloads\star_guardian_jinx_hud___league_of_legends___niaa_by_aliceemad-damf2rr.rar 2017-08-17 18:22 - 2017-08-17 18:22 - 024244715 _____ C:\Users\Pulla\Downloads\minimalist.osk 2017-08-17 18:21 - 2017-08-17 18:12 - 000000462 _____ C:\Users\Pulla\Desktop\skin.ini 2017-08-17 15:45 - 2017-08-17 15:45 - 001064773 _____ C:\Users\Pulla\Downloads\MikuUI.stskin 2017-08-17 15:45 - 2017-08-17 15:45 - 000540046 _____ C:\Users\Pulla\Downloads\kawai dois ponto zero.stskin 2017-08-17 15:44 - 2017-08-17 15:44 - 000884239 _____ C:\Users\Pulla\Downloads\Chitoge Kirisaki.stskin 2017-08-17 15:44 - 2017-08-17 15:44 - 000333859 _____ C:\Users\Pulla\Downloads\OW Sexy Dva.stskin 2017-08-17 15:24 - 2017-08-17 15:24 - 006635813 _____ (Blumont) C:\Users\Pulla\Downloads\setup.exe 2017-08-17 15:24 - 2017-08-17 15:24 - 006635813 _____ (Blumont) C:\Users\Pulla\Downloads\setup (1).exe 2017-08-17 15:24 - 2017-08-17 15:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam Customizer 2017-08-17 15:24 - 2017-08-17 15:24 - 000000000 ____D C:\Program Files (x86)\Steam Customizer 2017-08-17 15:19 - 2017-08-17 15:19 - 000099891 _____ C:\Users\Pulla\Downloads\Akame.theme.css 2017-08-17 15:18 - 2017-08-17 15:18 - 000000608 _____ C:\Users\Pulla\Downloads\ReZero.theme.css 2017-08-17 15:10 - 2017-08-17 15:10 - 000044576 _____ C:\Users\Pulla\Downloads\Shiratsuyu-Class.theme.css 2017-08-17 15:04 - 2017-08-17 15:05 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\BetterDiscord 2017-08-17 15:03 - 2017-08-17 15:03 - 000282071 _____ C:\Users\Pulla\Downloads\BD0.2.82Windows.zip 2017-08-17 11:52 - 2017-08-17 11:52 - 000000000 ____D C:\Users\Pulla\AppData\LocalLow\Ankama 2017-08-17 11:51 - 2017-08-17 14:32 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\CPUCores 2017-08-17 11:49 - 2017-08-17 11:49 - 000001954 _____ C:\Users\Public\Desktop\CPUCores.lnk 2017-08-17 11:49 - 2017-08-17 11:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUCores 2017-08-17 11:49 - 2017-08-17 11:49 - 000000000 ____D C:\Program Files (x86)\CPUCores 2017-08-17 11:46 - 2017-08-17 12:27 - 000000000 ____D C:\Users\Pulla\AppData\Local\MegaDownloader 2017-08-17 11:46 - 2017-08-17 11:46 - 000000743 _____ C:\Users\Public\Desktop\MegaDownloader.lnk 2017-08-17 11:46 - 2017-08-17 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MegaDownloader 2017-08-17 11:45 - 2017-08-17 11:45 - 002091598 _____ (AppsForMega.info ) C:\Users\Pulla\Downloads\mega.nz - MegaDownloader.exe 2017-08-17 11:39 - 2017-08-17 11:39 - 000000000 ____D C:\Users\Pulla\AppData\Local\Ankama 2017-08-17 11:30 - 2017-08-17 11:37 - 000000000 ___RD C:\Users\Pulla\Documents\MEGA 2017-08-17 11:29 - 2017-08-17 11:29 - 013314392 _____ (MEGA Limited) C:\Users\Pulla\Downloads\MEGAsyncSetup.exe 2017-08-17 11:29 - 2017-08-17 11:29 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync 2017-08-17 11:29 - 2017-08-17 11:29 - 000000000 ____D C:\Users\Pulla\AppData\Local\MEGAsync 2017-08-17 11:29 - 2017-08-17 11:29 - 000000000 ____D C:\Users\Pulla\AppData\Local\Mega Limited 2017-08-17 11:23 - 2017-08-17 11:23 - 000000222 _____ C:\Users\Pulla\Desktop\Dead or Alive 5 Last Round.url 2017-08-17 11:08 - 2017-08-17 11:08 - 000000000 ____D C:\Windows\LastGood.Tmp 2017-08-16 22:46 - 2017-08-16 22:46 - 000833646 _____ C:\Users\Pulla\Downloads\video.mov 2017-08-16 11:16 - 2017-08-16 11:18 - 144103330 _____ C:\Users\Pulla\Downloads\Touhou Music Pack.rar 2017-08-16 11:16 - 2017-08-16 11:17 - 106526362 _____ C:\Users\Pulla\Downloads\Best of 2016.rar 2017-08-16 11:16 - 2017-08-16 11:16 - 095874360 _____ C:\Users\Pulla\Downloads\IIDX Pack, Volume 2.rar 2017-08-16 11:15 - 2017-08-16 11:17 - 171062318 _____ C:\Users\Pulla\Downloads\Beatmap Pack #562.rar 2017-08-15 22:28 - 2017-08-15 22:28 - 011370430 _____ C:\Users\Pulla\Downloads\M-SL8.osk 2017-08-15 19:32 - 2017-08-15 19:32 - 000000000 ____D C:\Users\Pulla\AppData\Local\Elisa 2017-08-15 19:32 - 2017-08-15 19:32 - 000000000 ____D C:\Users\Public\Documents\MAGIX 2017-08-15 19:31 - 2017-08-16 10:36 - 000000356 _____ C:\Windows\Tasks\Connect.job 2017-08-15 19:31 - 2017-08-15 19:31 - 000002764 _____ C:\Windows\System32\Tasks\Connect 2017-08-15 19:31 - 2017-08-15 19:31 - 000001238 _____ C:\Users\Public\Desktop\Music Maker.lnk 2017-08-15 19:31 - 2017-08-15 19:31 - 000000000 ___RD C:\Users\Pulla\Documents\MAGIX 2017-08-15 19:31 - 2017-08-15 19:31 - 000000000 ____D C:\ProgramData\simplitec 2017-08-15 19:31 - 2017-08-15 19:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MAGIX 2017-08-15 19:31 - 2017-08-15 19:31 - 000000000 ____D C:\ProgramData\Magix 2017-08-15 19:31 - 2017-08-15 19:31 - 000000000 ____D C:\Program Files (x86)\MSXML 4.0 2017-08-15 19:31 - 2017-08-15 19:31 - 000000000 ____D C:\Program Files (x86)\MAGIX 2017-08-15 19:24 - 2017-08-15 19:24 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Sony 2017-08-15 19:24 - 2017-08-15 19:24 - 000000000 ____D C:\Users\Pulla\AppData\Local\VEGAS 2017-08-15 19:24 - 2017-08-15 19:24 - 000000000 ____D C:\ProgramData\VEGAS 2017-08-15 19:24 - 2017-08-15 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS 2017-08-15 19:24 - 2017-08-15 19:24 - 000000000 ____D C:\Program Files\VEGAS 2017-08-15 19:24 - 2017-08-15 19:24 - 000000000 ____D C:\Program Files (x86)\VEGAS 2017-08-15 19:22 - 2017-08-15 19:31 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\MAGIX 2017-08-15 19:22 - 2017-08-15 19:22 - 000000000 ____D C:\Users\Pulla\Documents\MAGIX Downloads 2017-08-15 19:20 - 2017-08-15 19:20 - 017386715 _____ C:\Users\Pulla\Downloads\Vegas Pro 14 - cracked-games.org.rar 2017-08-15 16:17 - 2017-08-21 19:39 - 000000000 ____D C:\Users\Pulla\AppData\Local\osu! 2017-08-15 16:17 - 2017-08-15 16:17 - 000001027 _____ C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\osu!.lnk 2017-08-15 16:17 - 2017-08-15 16:17 - 000001019 _____ C:\Users\Pulla\Desktop\osu!.lnk 2017-08-15 15:44 - 2017-08-15 15:54 - 000000000 ____D C:\Users\Pulla\AppData\Local\CyberGhost 2017-08-15 15:44 - 2017-08-15 15:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6 2017-08-15 15:44 - 2017-08-15 15:44 - 000000000 ____D C:\Program Files\TAP-Windows 2017-08-15 15:44 - 2017-08-15 15:44 - 000000000 ____D C:\Program Files\CyberGhost 6 2017-08-14 22:01 - 2017-08-14 22:01 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Ultimate ZIP Cracker II Evaluation 2017-08-14 22:01 - 2017-08-14 22:01 - 000000000 ____D C:\Program Files (x86)\Ultimate ZIP Cracker II Evaluation 2017-08-13 18:01 - 2017-08-13 18:01 - 000143816 _____ (SoftEther VPN Project at University of Tsukuba, Japan.) C:\Windows\system32\vpncmd.exe 2017-08-13 18:01 - 2017-08-13 18:01 - 000038216 _____ (SoftEther Corporation) C:\Windows\system32\Drivers\Neo6_x64_VPN.sys 2017-08-13 18:00 - 2017-08-13 18:03 - 000000000 ____D C:\Program Files\SoftEther VPN Client 2017-08-13 18:00 - 2017-08-13 18:00 - 000051024 _____ (SoftEther Corporation) C:\Windows\system32\Drivers\SeLow_x64.sys 2017-08-13 17:47 - 2017-08-13 17:48 - 000000000 ____D C:\Users\Pulla\Desktop\osu new account 2017-08-13 11:33 - 2017-08-13 11:33 - 000000000 ____D C:\Users\Pulla\Documents\PCSX2 2017-08-13 11:23 - 2017-08-13 11:23 - 000000835 _____ C:\Users\Public\Desktop\PCSX2 0.9.8 (r4600).lnk 2017-08-13 11:23 - 2017-08-13 11:23 - 000000000 ____D C:\Windows\SysWOW64\directx 2017-08-13 11:23 - 2017-08-13 11:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PCSX2 2017-08-12 20:56 - 2017-08-12 20:58 - 000000000 ____D C:\Users\Pulla\Desktop\NohBoard 2017-08-12 20:10 - 2017-08-21 14:28 - 000000000 ____D C:\Users\Pulla\Documents\LoLReplay2 2017-08-12 20:09 - 2017-08-12 20:09 - 000000698 _____ C:\Users\Public\Desktop\LoLReplay2.lnk 2017-08-12 20:09 - 2017-08-12 20:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LoLReplay2 2017-08-11 11:25 - 2017-08-11 11:25 - 000000000 ____D C:\Users\Pulla\Documents\UnrealTournament 2017-08-10 23:12 - 2017-08-11 11:25 - 000000000 ____D C:\Users\Pulla\AppData\Local\UnrealEngine 2017-08-10 23:12 - 2017-08-10 23:13 - 000000000 ____D C:\ProgramData\Epic 2017-08-10 23:12 - 2017-08-10 23:12 - 000000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2017-08-10 23:12 - 2017-08-10 23:12 - 000000000 ____D C:\Users\Pulla\AppData\Local\UnrealEngineLauncher 2017-08-10 23:12 - 2017-08-10 23:12 - 000000000 ____D C:\Users\Pulla\AppData\Local\EpicGamesLauncher 2017-08-10 18:57 - 2017-08-10 18:59 - 000000000 ____D C:\Users\Pulla\Desktop\PremierePortable 2017-08-09 12:29 - 2017-08-09 22:10 - 000000000 ____D C:\Users\Pulla\AppData\Local\Warframe 2017-08-09 10:05 - 2017-08-09 10:05 - 000004742 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier 2017-08-09 10:05 - 2017-08-09 10:05 - 000004584 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2017-08-09 08:43 - 2017-08-09 08:43 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc 2017-08-08 20:56 - 2017-08-08 20:56 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf 2017-08-08 20:08 - 2017-08-01 04:39 - 008319392 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2017-08-08 20:08 - 2017-08-01 04:38 - 000406544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\policymanager.dll 2017-08-08 20:08 - 2017-08-01 04:38 - 000382368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys 2017-08-08 20:08 - 2017-08-01 04:36 - 002165752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2017-08-08 20:08 - 2017-08-01 04:36 - 000750496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe 2017-08-08 20:08 - 2017-08-01 04:36 - 000119712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys 2017-08-08 20:08 - 2017-08-01 04:35 - 000280472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe 2017-08-08 20:08 - 2017-08-01 04:35 - 000133904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe 2017-08-08 20:08 - 2017-08-01 04:34 - 000610584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll 2017-08-08 20:08 - 2017-08-01 04:34 - 000359552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll 2017-08-08 20:08 - 2017-08-01 04:34 - 000349600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2017-08-08 20:08 - 2017-08-01 04:34 - 000168864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe 2017-08-08 20:08 - 2017-08-01 04:33 - 000473240 _____ (Microsoft Corporation) C:\Windows\system32\policymanager.dll 2017-08-08 20:08 - 2017-08-01 04:32 - 002444704 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys 2017-08-08 20:08 - 2017-08-01 04:32 - 000820128 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe 2017-08-08 20:08 - 2017-08-01 04:32 - 000712600 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms2.sys 2017-08-08 20:08 - 2017-08-01 04:31 - 005477088 _____ (Microsoft Corporation) C:\Windows\system32\OneCoreUAPCommonProxyStub.dll 2017-08-08 20:08 - 2017-08-01 04:31 - 002645680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2017-08-08 20:08 - 2017-08-01 04:31 - 000212384 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll 2017-08-08 20:08 - 2017-08-01 04:31 - 000176024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\basecsp.dll 2017-08-08 20:08 - 2017-08-01 04:30 - 000723680 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll 2017-08-08 20:08 - 2017-08-01 04:30 - 000411040 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2017-08-08 20:08 - 2017-08-01 04:30 - 000410160 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll 2017-08-08 20:08 - 2017-08-01 04:30 - 000315288 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe 2017-08-08 20:08 - 2017-08-01 04:30 - 000182688 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe 2017-08-08 20:08 - 2017-08-01 04:30 - 000143736 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe 2017-08-08 20:08 - 2017-08-01 04:30 - 000082336 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys 2017-08-08 20:08 - 2017-08-01 04:26 - 000204192 _____ (Microsoft Corporation) C:\Windows\system32\basecsp.dll 2017-08-08 20:08 - 2017-08-01 04:20 - 002956288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys 2017-08-08 20:08 - 2017-08-01 04:20 - 000404480 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll 2017-08-08 20:08 - 2017-08-01 04:20 - 000154624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE 2017-08-08 20:08 - 2017-08-01 04:18 - 013841408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll 2017-08-08 20:08 - 2017-08-01 04:18 - 002199552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-08-08 20:08 - 2017-08-01 04:17 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tokenbinding.dll 2017-08-08 20:08 - 2017-08-01 04:16 - 000080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakradiag.dll 2017-08-08 20:08 - 2017-08-01 04:14 - 000035840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll 2017-08-08 20:08 - 2017-08-01 04:13 - 020504064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll 2017-08-08 20:08 - 2017-08-01 04:13 - 000364032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msIso.dll 2017-08-08 20:08 - 2017-08-01 04:13 - 000127488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll 2017-08-08 20:08 - 2017-08-01 04:12 - 019336192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2017-08-08 20:08 - 2017-08-01 04:12 - 000229888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scksp.dll 2017-08-08 20:08 - 2017-08-01 04:10 - 000358400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll 2017-08-08 20:08 - 2017-08-01 04:09 - 000394240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Internal.Management.dll 2017-08-08 20:08 - 2017-08-01 04:08 - 000267264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll 2017-08-08 20:08 - 2017-08-01 04:07 - 011870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2017-08-08 20:08 - 2017-08-01 04:07 - 005961728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll 2017-08-08 20:08 - 2017-08-01 04:07 - 002671616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll 2017-08-08 20:08 - 2017-08-01 04:06 - 000798208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll 2017-08-08 20:08 - 2017-08-01 04:04 - 006269440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll 2017-08-08 20:08 - 2017-08-01 04:04 - 003656192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2017-08-08 20:08 - 2017-08-01 04:03 - 001627136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2017-08-08 20:08 - 2017-08-01 03:57 - 023677952 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll 2017-08-08 20:08 - 2017-08-01 03:45 - 003670016 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys 2017-08-08 20:08 - 2017-08-01 03:45 - 001275392 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll 2017-08-08 20:08 - 2017-08-01 03:45 - 000462848 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll 2017-08-08 20:08 - 2017-08-01 03:45 - 000092672 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll 2017-08-08 20:08 - 2017-08-01 03:44 - 000184320 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE 2017-08-08 20:08 - 2017-08-01 03:44 - 000083968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmclr.sys 2017-08-08 20:08 - 2017-08-01 03:44 - 000077824 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe 2017-08-08 20:08 - 2017-08-01 03:42 - 002199552 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.Resources.dll 2017-08-08 20:08 - 2017-08-01 03:41 - 000180736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rfcomm.sys 2017-08-08 20:08 - 2017-08-01 03:41 - 000130560 _____ (Microsoft Corporation) C:\Windows\system32\policymanagerprecheck.dll 2017-08-08 20:08 - 2017-08-01 03:41 - 000110592 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll 2017-08-08 20:08 - 2017-08-01 03:41 - 000042496 _____ (Microsoft Corporation) C:\Windows\system32\tokenbinding.dll 2017-08-08 20:08 - 2017-08-01 03:40 - 017366528 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.dll 2017-08-08 20:08 - 2017-08-01 03:40 - 000290816 _____ (Microsoft Corporation) C:\Windows\system32\dmenterprisediagnostics.dll 2017-08-08 20:08 - 2017-08-01 03:39 - 000046592 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll 2017-08-08 20:08 - 2017-08-01 03:38 - 000153088 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll 2017-08-08 20:08 - 2017-08-01 03:38 - 000143872 _____ (Microsoft Corporation) C:\Windows\system32\profsvcext.dll 2017-08-08 20:08 - 2017-08-01 03:37 - 000582656 _____ (Microsoft Corporation) C:\Windows\system32\SmsRouterSvc.dll 2017-08-08 20:08 - 2017-08-01 03:37 - 000433664 _____ (Microsoft Corporation) C:\Windows\system32\msIso.dll 2017-08-08 20:08 - 2017-08-01 03:37 - 000255488 _____ (Microsoft Corporation) C:\Windows\system32\scksp.dll 2017-08-08 20:08 - 2017-08-01 03:36 - 023681536 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2017-08-08 20:08 - 2017-08-01 03:35 - 000692736 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2017-08-08 20:08 - 2017-08-01 03:34 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll 2017-08-08 20:08 - 2017-08-01 03:33 - 001269760 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll 2017-08-08 20:08 - 2017-08-01 03:33 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll 2017-08-08 20:08 - 2017-08-01 03:32 - 007336960 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll 2017-08-08 20:08 - 2017-08-01 03:32 - 000176640 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll 2017-08-08 20:08 - 2017-08-01 03:31 - 012786176 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2017-08-08 20:08 - 2017-08-01 03:31 - 004445696 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll 2017-08-08 20:08 - 2017-08-01 03:31 - 001396736 _____ (Microsoft Corporation) C:\Windows\system32\wwansvc.dll 2017-08-08 20:08 - 2017-08-01 03:30 - 008209920 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll 2017-08-08 20:08 - 2017-08-01 03:30 - 003377664 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll 2017-08-08 20:08 - 2017-08-01 03:30 - 002055168 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys 2017-08-08 20:08 - 2017-08-01 03:30 - 001052160 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll 2017-08-08 20:08 - 2017-08-01 03:30 - 000303104 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll 2017-08-08 20:08 - 2017-08-01 03:28 - 004730368 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2017-08-08 20:08 - 2017-08-01 03:28 - 002516480 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll 2017-08-08 20:08 - 2017-08-01 03:27 - 001802752 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2017-08-08 20:08 - 2017-08-01 03:27 - 000574464 _____ (Microsoft Corporation) C:\Windows\system32\configmanager2.dll 2017-08-08 20:08 - 2017-08-01 03:27 - 000482816 _____ (Microsoft Corporation) C:\Windows\system32\dmenrollengine.dll 2017-08-08 20:08 - 2017-08-01 03:26 - 000323584 _____ (Microsoft Corporation) C:\Windows\system32\DeviceEnroller.exe 2017-08-08 20:08 - 2017-08-01 03:25 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\coredpus.dll 2017-08-08 20:08 - 2017-08-01 03:25 - 000194048 _____ (Microsoft Corporation) C:\Windows\system32\mdmregistration.dll 2017-08-08 20:08 - 2017-08-01 03:25 - 000140800 _____ (Microsoft Corporation) C:\Windows\system32\dmcsps.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll 2017-08-08 20:08 - 2017-08-01 00:45 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll 2017-08-08 20:02 - 2017-08-16 10:34 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\steelseries-engine-3-client 2017-08-08 20:02 - 2017-08-08 20:02 - 000000000 ____D C:\ProgramData\SteelSeries 2017-08-08 20:02 - 2017-08-08 20:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries 2017-08-08 20:02 - 2017-08-08 20:02 - 000000000 ____D C:\Program Files\SteelSeries 2017-08-05 13:04 - 2017-08-05 13:04 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\StepMania 5 2017-08-05 13:04 - 2017-08-05 13:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\StepMania 5.0.12 2017-08-04 22:21 - 2017-08-05 19:49 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\TS3Client 2017-08-04 22:21 - 2017-08-04 22:21 - 000000934 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk 2017-08-04 22:21 - 2017-08-04 22:21 - 000000000 ____D C:\Program Files\TeamSpeak 3 Client 2017-08-04 22:19 - 2017-08-04 22:19 - 000000000 ____D C:\Users\Pulla\AppData\Local\Altis_Life_France 2017-08-04 22:18 - 2017-08-04 22:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Launcher Altis Life France 2017-08-04 22:18 - 2017-08-04 22:18 - 000000000 ____D C:\Program Files (x86)\Altislife-france.com 2017-08-04 21:57 - 2017-08-05 12:59 - 000000000 ____D C:\Users\Pulla\.VirtualBox 2017-08-04 21:57 - 2017-08-04 21:57 - 000000000 ____D C:\Users\Pulla\.android 2017-08-04 21:57 - 2017-08-04 21:57 - 000000000 ____D C:\Program Files\Oracle 2017-08-04 21:57 - 2017-08-04 21:57 - 000000000 ____D C:\Program Files\Droid4Xext 2017-08-04 21:57 - 2017-08-04 21:57 - 000000000 _____ C:\hsrv.txt 2017-08-04 21:57 - 2014-05-16 14:04 - 000254240 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys 2017-08-04 20:51 - 2017-08-05 12:54 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\VMware 2017-08-04 20:51 - 2017-08-04 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Andy 2017-08-04 20:50 - 2016-11-11 23:16 - 000052288 _____ (VMware, Inc.) C:\Windows\system32\Drivers\vmkbd.sys 2017-08-04 20:49 - 2017-08-04 20:49 - 000000000 ____D C:\ProgramData\Apple 2017-08-04 20:49 - 2017-08-04 20:49 - 000000000 ____D C:\Program Files\Bonjour 2017-08-04 20:49 - 2017-08-04 20:49 - 000000000 ____D C:\Program Files (x86)\Bonjour 2017-08-04 20:47 - 2017-08-05 12:55 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Andy 2017-08-04 20:47 - 2017-08-04 20:51 - 000000000 ____D C:\Users\Pulla\Andy 2017-08-04 20:47 - 2017-08-04 20:47 - 000000000 ____D C:\Users\Pull\Andy 2017-08-04 20:47 - 2017-08-04 20:47 - 000000000 ____D C:\Users\Pull 2017-08-04 20:44 - 2017-08-04 20:44 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\HaiYuInst 2017-08-04 20:44 - 2017-08-04 20:44 - 000000000 ____D C:\Users\Public\Thunder Network 2017-08-04 20:44 - 2017-08-04 20:44 - 000000000 ____D C:\ProgramData\Thunder Network 2017-08-04 00:10 - 2017-08-13 22:42 - 000000000 ____D C:\Users\Pulla\Documents\Arma 3 - Other Profiles 2017-08-03 23:58 - 2017-08-13 22:34 - 000000000 ____D C:\Users\Pulla\AppData\Local\Arma 3 2017-08-03 23:58 - 2017-08-13 21:02 - 000000000 ____D C:\Users\Pulla\AppData\Local\Arma 3 Launcher 2017-08-03 23:58 - 2017-08-04 00:01 - 000000000 ____D C:\Users\Pulla\Documents\Arma 3 2017-08-03 23:58 - 2017-08-03 23:58 - 000000000 ____D C:\Users\Pulla\AppData\Local\Bohemia_Interactive 2017-08-03 23:58 - 2017-08-03 23:58 - 000000000 ____D C:\ProgramData\Bohemia Interactive 2017-08-03 17:46 - 2017-08-03 17:46 - 000000000 ____D C:\Users\Pulla\Documents\CPY_SAVES 2017-08-03 17:42 - 2017-07-28 07:07 - 000805816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.dll 2017-08-03 17:42 - 2017-07-28 06:48 - 001839872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2017-08-03 17:42 - 2017-07-28 06:48 - 000100232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcd.dll 2017-08-03 17:42 - 2017-07-28 06:48 - 000096648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dmcmnutils.dll 2017-08-03 17:42 - 2017-07-28 06:47 - 002259768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreUIComponents.dll 2017-08-03 17:42 - 2017-07-28 06:40 - 005820984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll 2017-08-03 17:42 - 2017-07-28 06:40 - 000551200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll 2017-08-03 17:42 - 2017-07-28 06:38 - 004213656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll 2017-08-03 17:42 - 2017-07-28 06:37 - 000519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AppXDeploymentClient.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 020373408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 006761568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 005808640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 002424024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 001195760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioEng.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 000866808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DolbyDecMFT.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 000864248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AudioSes.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 000173104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfsensorgroup.dll 2017-08-03 17:42 - 2017-07-28 06:36 - 000090464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msacm32.dll 2017-08-03 17:42 - 2017-07-28 06:35 - 000988168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2017-08-03 17:42 - 2017-07-28 06:35 - 000277432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shlwapi.dll 2017-08-03 17:42 - 2017-07-28 06:33 - 000967584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ReAgent.dll 2017-08-03 17:42 - 2017-07-28 06:33 - 000583160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CoreMessaging.dll 2017-08-03 17:42 - 2017-07-28 06:33 - 000414296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TextInputFramework.dll 2017-08-03 17:42 - 2017-07-28 06:25 - 003464704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbon.dll 2017-08-03 17:42 - 2017-07-28 06:24 - 000584192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIRibbonRes.dll 2017-08-03 17:42 - 2017-07-28 06:21 - 000029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cmintegrator.dll 2017-08-03 17:42 - 2017-07-28 06:20 - 000079872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2017-08-03 17:42 - 2017-07-28 06:20 - 000018432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\IpNatHlpClient.dll 2017-08-03 17:42 - 2017-07-28 06:19 - 000147456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\VCardParser.dll 2017-08-03 17:42 - 2017-07-28 06:19 - 000117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepositoryUpgrade.dll 2017-08-03 17:42 - 2017-07-28 06:18 - 000139776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BluetoothApis.dll 2017-08-03 17:42 - 2017-07-28 06:17 - 006728192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll 2017-08-03 17:42 - 2017-07-28 06:16 - 001291776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MSVPXENC.dll 2017-08-03 17:42 - 2017-07-28 06:16 - 000470016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TpmCoreProvisioning.dll 2017-08-03 17:42 - 2017-07-28 06:16 - 000135680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qasf.dll 2017-08-03 17:42 - 2017-07-28 06:15 - 005721600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\BingMaps.dll 2017-08-03 17:42 - 2017-07-28 06:15 - 000586752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Security.Authentication.Web.Core.dll 2017-08-03 17:42 - 2017-07-28 06:14 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe 2017-08-03 17:42 - 2017-07-28 06:14 - 000357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ActivationManager.dll 2017-08-03 17:42 - 2017-07-28 06:14 - 000331264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastlsext.dll 2017-08-03 17:42 - 2017-07-28 06:13 - 000932352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GamePanel.exe 2017-08-03 17:42 - 2017-07-28 06:13 - 000665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll 2017-08-03 17:42 - 2017-07-28 06:13 - 000636416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll 2017-08-03 17:42 - 2017-07-28 06:12 - 000952832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comdlg32.dll 2017-08-03 17:42 - 2017-07-28 06:12 - 000587776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PCPKsp.dll 2017-08-03 17:42 - 2017-07-28 06:12 - 000446464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll 2017-08-03 17:42 - 2017-07-28 06:12 - 000337920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe 2017-08-03 17:42 - 2017-07-28 06:11 - 003667456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll 2017-08-03 17:42 - 2017-07-28 06:11 - 001248768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll 2017-08-03 17:42 - 2017-07-28 06:10 - 001019904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll 2017-08-03 17:42 - 2017-07-28 06:10 - 000787456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2017-08-03 17:42 - 2017-07-28 06:10 - 000564224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shsvcs.dll 2017-08-03 17:42 - 2017-07-28 06:09 - 005225984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll 2017-08-03 17:42 - 2017-07-28 06:08 - 004559360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll 2017-08-03 17:42 - 2017-07-28 06:08 - 004417024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2017-08-03 17:42 - 2017-07-28 06:08 - 004056064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MFMediaEngine.dll 2017-08-03 17:42 - 2017-07-28 06:08 - 000760832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll 2017-08-03 17:42 - 2017-07-28 06:07 - 002211840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InputService.dll 2017-08-03 17:42 - 2017-07-28 06:05 - 001536512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll 2017-08-03 17:42 - 2017-07-28 06:05 - 000892928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe 2017-08-03 17:42 - 2017-07-28 06:05 - 000538112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll 2017-08-03 17:42 - 2017-07-28 06:02 - 000877056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe 2017-08-03 17:42 - 2017-07-28 06:02 - 000853504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe 2017-08-03 17:42 - 2017-07-28 06:02 - 000077312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spbcd.dll 2017-08-03 17:41 - 2017-07-28 07:30 - 001068720 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.dll 2017-08-03 17:41 - 2017-07-28 07:25 - 002399728 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2017-08-03 17:41 - 2017-07-28 07:24 - 002327456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2017-08-03 17:41 - 2017-07-28 07:24 - 000455584 _____ (Microsoft Corporation) C:\Windows\system32\hal.dll 2017-08-03 17:41 - 2017-07-28 07:24 - 000119904 _____ (Microsoft Corporation) C:\Windows\system32\dmcmnutils.dll 2017-08-03 17:41 - 2017-07-28 07:24 - 000116280 _____ (Microsoft Corporation) C:\Windows\system32\bcd.dll 2017-08-03 17:41 - 2017-07-28 07:23 - 002969888 _____ (Microsoft Corporation) C:\Windows\system32\CoreUIComponents.dll 2017-08-03 17:41 - 2017-07-28 07:23 - 000723360 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\acpi.sys 2017-08-03 17:41 - 2017-07-28 07:22 - 000923048 _____ (Microsoft Corporation) C:\Windows\system32\CoreMessaging.dll 2017-08-03 17:41 - 2017-07-28 07:20 - 000279968 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys 2017-08-03 17:41 - 2017-07-28 07:17 - 000660680 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll 2017-08-03 17:41 - 2017-07-28 07:16 - 007326128 _____ (Microsoft Corporation) C:\Windows\system32\windows.storage.dll 2017-08-03 17:41 - 2017-07-28 07:16 - 000961952 _____ (Microsoft Corporation) C:\Windows\system32\efscore.dll 2017-08-03 17:41 - 2017-07-28 07:15 - 005302968 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepository.dll 2017-08-03 17:41 - 2017-07-28 07:15 - 000872472 _____ (Microsoft Corporation) C:\Windows\system32\ClipSVC.dll 2017-08-03 17:41 - 2017-07-28 07:15 - 000715168 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fvevol.sys 2017-08-03 17:41 - 2017-07-28 07:15 - 000554400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS 2017-08-03 17:41 - 2017-07-28 07:14 - 000654976 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentClient.dll 2017-08-03 17:41 - 2017-07-28 07:14 - 000318232 _____ (Microsoft Corporation) C:\Windows\system32\wininit.exe 2017-08-03 17:41 - 2017-07-28 07:13 - 007907344 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll 2017-08-03 17:41 - 2017-07-28 07:13 - 006557520 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll 2017-08-03 17:41 - 2017-07-28 07:13 - 002604248 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll 2017-08-03 17:41 - 2017-07-28 07:13 - 001054280 _____ (Microsoft Corporation) C:\Windows\system32\AudioSes.dll 2017-08-03 17:41 - 2017-07-28 07:13 - 001033544 _____ (Microsoft Corporation) C:\Windows\system32\DolbyDecMFT.dll 2017-08-03 17:41 - 2017-07-28 07:13 - 000192264 _____ (Microsoft Corporation) C:\Windows\system32\mfsensorgroup.dll 2017-08-03 17:41 - 2017-07-28 07:13 - 000104432 _____ (Microsoft Corporation) C:\Windows\system32\msacm32.dll 2017-08-03 17:41 - 2017-07-28 07:12 - 021353208 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2017-08-03 17:41 - 2017-07-28 07:12 - 001337856 _____ (Microsoft Corporation) C:\Windows\system32\AudioEng.dll 2017-08-03 17:41 - 2017-07-28 07:12 - 001325968 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2017-08-03 17:41 - 2017-07-28 07:12 - 000323936 _____ (Microsoft Corporation) C:\Windows\system32\shlwapi.dll 2017-08-03 17:41 - 2017-07-28 07:10 - 002679200 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys 2017-08-03 17:41 - 2017-07-28 07:10 - 001114528 _____ (Microsoft Corporation) C:\Windows\system32\ReAgent.dll 2017-08-03 17:41 - 2017-07-28 07:09 - 000529992 _____ (Microsoft Corporation) C:\Windows\system32\TextInputFramework.dll 2017-08-03 17:41 - 2017-07-28 07:09 - 000527976 _____ (Microsoft Corporation) C:\Windows\system32\services.exe 2017-08-03 17:41 - 2017-07-28 07:09 - 000387928 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll 2017-08-03 17:41 - 2017-07-28 06:31 - 003995136 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbon.dll 2017-08-03 17:41 - 2017-07-28 06:30 - 001722880 _____ (Microsoft Corporation) C:\Windows\system32\dui70.dll 2017-08-03 17:41 - 2017-07-28 06:29 - 000584192 _____ (Microsoft Corporation) C:\Windows\system32\UIRibbonRes.dll 2017-08-03 17:41 - 2017-07-28 06:29 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\dwmredir.dll 2017-08-03 17:41 - 2017-07-28 06:27 - 000051712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\UcmUcsi.sys 2017-08-03 17:41 - 2017-07-28 06:26 - 000102912 _____ (Microsoft Corporation) C:\Windows\system32\officecsp.dll 2017-08-03 17:41 - 2017-07-28 06:26 - 000094720 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2017-08-03 17:41 - 2017-07-28 06:26 - 000090112 _____ (Microsoft Corporation) C:\Windows\system32\ofdeploy.exe 2017-08-03 17:41 - 2017-07-28 06:26 - 000044032 _____ (Microsoft Corporation) C:\Windows\system32\cmintegrator.dll 2017-08-03 17:41 - 2017-07-28 06:26 - 000022528 _____ (Microsoft Corporation) C:\Windows\system32\IpNatHlpClient.dll 2017-08-03 17:41 - 2017-07-28 06:25 - 000231936 _____ (Microsoft Corporation) C:\Windows\system32\DolbyMATEnc.dll 2017-08-03 17:41 - 2017-07-28 06:25 - 000115712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bridge.sys 2017-08-03 17:41 - 2017-07-28 06:25 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\wuuhosdeployment.dll 2017-08-03 17:41 - 2017-07-28 06:25 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthenum.sys 2017-08-03 17:41 - 2017-07-28 06:25 - 000097280 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys 2017-08-03 17:41 - 2017-07-28 06:24 - 000184832 _____ (Microsoft Corporation) C:\Windows\system32\VCardParser.dll 2017-08-03 17:41 - 2017-07-28 06:24 - 000136192 _____ (Microsoft Corporation) C:\Windows\system32\Windows.StateRepositoryUpgrade.dll 2017-08-03 17:41 - 2017-07-28 06:24 - 000064512 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2017-08-03 17:41 - 2017-07-28 06:24 - 000043520 _____ (Microsoft Corporation) C:\Windows\system32\TpmTasks.dll 2017-08-03 17:41 - 2017-07-28 06:23 - 007931392 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll 2017-08-03 17:41 - 2017-07-28 06:23 - 000778240 _____ (Microsoft Corporation) C:\Windows\system32\DolbyHrtfEnc.dll 2017-08-03 17:41 - 2017-07-28 06:23 - 000189440 _____ (Microsoft Corporation) C:\Windows\system32\BluetoothApis.dll 2017-08-03 17:41 - 2017-07-28 06:22 - 000778240 _____ C:\Windows\system32\MBR2GPT.EXE 2017-08-03 17:41 - 2017-07-28 06:22 - 000555008 _____ (Microsoft Corporation) C:\Windows\system32\TpmCoreProvisioning.dll 2017-08-03 17:41 - 2017-07-28 06:22 - 000500224 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Shell.BlueLightReduction.dll 2017-08-03 17:41 - 2017-07-28 06:22 - 000491520 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Display.dll 2017-08-03 17:41 - 2017-07-28 06:22 - 000450048 _____ (Microsoft Corporation) C:\Windows\system32\bcdedit.exe 2017-08-03 17:41 - 2017-07-28 06:22 - 000259072 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Flights.dll 2017-08-03 17:41 - 2017-07-28 06:22 - 000209408 _____ (Microsoft Corporation) C:\Windows\system32\psmsrv.dll 2017-08-03 17:41 - 2017-07-28 06:22 - 000197120 _____ (Microsoft Corporation) C:\Windows\system32\bcdboot.exe 2017-08-03 17:41 - 2017-07-28 06:21 - 008333312 _____ (Microsoft Corporation) C:\Windows\system32\BingMaps.dll 2017-08-03 17:41 - 2017-07-28 06:21 - 000699904 _____ (Microsoft Corporation) C:\Windows\system32\FlightSettings.dll 2017-08-03 17:41 - 2017-07-28 06:21 - 000527360 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll 2017-08-03 17:41 - 2017-07-28 06:21 - 000365056 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_Notifications.dll 2017-08-03 17:41 - 2017-07-28 06:21 - 000165888 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll 2017-08-03 17:41 - 2017-07-28 06:21 - 000150528 _____ (Microsoft Corporation) C:\Windows\system32\qasf.dll 2017-08-03 17:41 - 2017-07-28 06:20 - 001015296 _____ (Microsoft Corporation) C:\Windows\system32\XblAuthManager.dll 2017-08-03 17:41 - 2017-07-28 06:20 - 000982016 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthport.sys 2017-08-03 17:41 - 2017-07-28 06:20 - 000524800 _____ (Microsoft Corporation) C:\Windows\system32\TileDataRepository.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 001878016 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000942592 _____ (Microsoft Corporation) C:\Windows\system32\wbiosrvc.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000847360 _____ (Microsoft Corporation) C:\Windows\system32\bisrv.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000817664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000687616 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000566784 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.UX.EapRequestHandler.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000417792 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe 2017-08-03 17:41 - 2017-07-28 06:19 - 000412160 _____ (Microsoft Corporation) C:\Windows\system32\ActivationManager.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000370688 _____ (Microsoft Corporation) C:\Windows\system32\rastlsext.dll 2017-08-03 17:41 - 2017-07-28 06:19 - 000229376 _____ (Microsoft Corporation) C:\Windows\system32\SIHClient.exe 2017-08-03 17:41 - 2017-07-28 06:18 - 001468416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll 2017-08-03 17:41 - 2017-07-28 06:18 - 001298432 _____ (Microsoft Corporation) C:\Windows\system32\lpasvc.dll 2017-08-03 17:41 - 2017-07-28 06:18 - 001260544 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe 2017-08-03 17:41 - 2017-07-28 06:18 - 000925696 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll 2017-08-03 17:41 - 2017-07-28 06:18 - 000777216 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll 2017-08-03 17:41 - 2017-07-28 06:18 - 000586240 _____ (Microsoft Corporation) C:\Windows\system32\AppReadiness.dll 2017-08-03 17:41 - 2017-07-28 06:18 - 000536064 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Internal.Management.dll 2017-08-03 17:41 - 2017-07-28 06:17 - 002805248 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll 2017-08-03 17:41 - 2017-07-28 06:17 - 001886208 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll 2017-08-03 17:41 - 2017-07-28 06:17 - 000770048 _____ (Microsoft Corporation) C:\Windows\system32\PCPKsp.dll 2017-08-03 17:41 - 2017-07-28 06:17 - 000497152 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll 2017-08-03 17:41 - 2017-07-28 06:17 - 000420864 _____ (Microsoft Corporation) C:\Windows\system32\facecredentialprovider.dll 2017-08-03 17:41 - 2017-07-28 06:16 - 001046016 _____ (Microsoft Corporation) C:\Windows\system32\comdlg32.dll 2017-08-03 17:41 - 2017-07-28 06:16 - 000383488 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe 2017-08-03 17:41 - 2017-07-28 06:15 - 003204608 _____ (Microsoft Corporation) C:\Windows\system32\Microsoft.Bluetooth.Profiles.Gatt.dll 2017-08-03 17:41 - 2017-07-28 06:15 - 000986112 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2017-08-03 17:41 - 2017-07-28 06:15 - 000612864 _____ (Microsoft Corporation) C:\Windows\system32\shsvcs.dll 2017-08-03 17:41 - 2017-07-28 06:14 - 004396032 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll 2017-08-03 17:41 - 2017-07-28 06:14 - 001305088 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll 2017-08-03 17:41 - 2017-07-28 06:13 - 004535296 _____ (Microsoft Corporation) C:\Windows\system32\MFMediaEngine.dll 2017-08-03 17:41 - 2017-07-28 06:13 - 001293824 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll 2017-08-03 17:41 - 2017-07-28 06:13 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll 2017-08-03 17:41 - 2017-07-28 06:13 - 000809984 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll 2017-08-03 17:41 - 2017-07-28 06:12 - 005557760 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll 2017-08-03 17:41 - 2017-07-28 06:12 - 004707840 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2017-08-03 17:41 - 2017-07-28 06:12 - 002939392 _____ (Microsoft Corporation) C:\Windows\system32\InputService.dll 2017-08-03 17:41 - 2017-07-28 06:12 - 002444288 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2017-08-03 17:41 - 2017-07-28 06:12 - 000406528 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll 2017-08-03 17:41 - 2017-07-28 06:11 - 001357312 _____ (Microsoft Corporation) C:\Windows\system32\audiosrv.dll 2017-08-03 17:41 - 2017-07-28 06:10 - 001706496 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll 2017-08-03 17:41 - 2017-07-28 06:10 - 000625152 _____ (Microsoft Corporation) C:\Windows\system32\AudioEndpointBuilder.dll 2017-08-03 17:41 - 2017-07-28 06:09 - 000971264 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe 2017-08-03 17:41 - 2017-07-28 06:09 - 000579072 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll 2017-08-03 17:41 - 2017-07-28 06:08 - 000600576 _____ (Microsoft Corporation) C:\Windows\system32\FrameServer.dll 2017-08-03 17:41 - 2017-07-28 06:08 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys 2017-08-03 17:41 - 2017-07-28 06:07 - 000112640 _____ (Microsoft Corporation) C:\Windows\system32\MDMAppInstaller.exe 2017-08-03 17:41 - 2017-07-28 06:07 - 000105472 _____ (Microsoft Corporation) C:\Windows\system32\RjvMDMConfig.dll 2017-08-03 17:41 - 2017-07-28 06:07 - 000074240 _____ (Microsoft Corporation) C:\Windows\system32\EnterpriseDesktopAppMgmtCSP.dll 2017-08-03 17:41 - 2017-07-28 06:07 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\DmApiSetExtImplDesktop.dll 2017-08-03 17:41 - 2017-07-28 06:06 - 001833984 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll 2017-08-03 17:41 - 2017-07-28 06:06 - 000593408 _____ (Microsoft Corporation) C:\Windows\system32\BootMenuUX.dll 2017-08-03 17:41 - 2017-07-28 06:06 - 000093696 _____ (Microsoft Corporation) C:\Windows\system32\spbcd.dll 2017-08-03 17:41 - 2017-07-28 06:05 - 001525760 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe 2017-08-03 17:41 - 2017-07-28 06:05 - 001087488 _____ (Microsoft Corporation) C:\Windows\system32\reseteng.dll 2017-08-03 17:41 - 2017-07-28 06:05 - 000954368 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe 2017-08-03 17:41 - 2017-07-28 06:05 - 000926208 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe 2017-08-03 17:41 - 2017-07-28 06:05 - 000078848 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll 2017-08-03 16:27 - 2017-08-03 16:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mephisto 2017-08-03 15:41 - 2017-08-03 15:41 - 000001108 _____ C:\Users\Pulla\Desktop\PhotoScape.lnk 2017-08-03 15:41 - 2017-08-03 15:41 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\PhotoScape 2017-08-03 15:41 - 2017-08-03 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PhotoScape 2017-08-03 15:41 - 2017-08-03 15:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Backup and Sync from Google 2017-08-03 15:41 - 2017-08-03 15:41 - 000000000 ____D C:\Program Files (x86)\PhotoScape 2017-08-02 15:52 - 2017-08-02 15:52 - 000000000 ____D C:\Users\Pulla\.QtWebEngineProcess 2017-08-02 15:52 - 2017-08-02 15:52 - 000000000 ____D C:\Users\Pulla\.Origin 2017-08-02 15:51 - 2017-08-02 15:53 - 000000000 ____D C:\ProgramData\Origin 2017-08-02 15:51 - 2017-08-02 15:52 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Origin 2017-08-02 15:51 - 2017-08-02 15:52 - 000000000 ____D C:\Users\Pulla\AppData\Local\Origin 2017-08-02 15:51 - 2017-08-02 15:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Origin 2017-08-02 15:51 - 2017-08-02 15:52 - 000000000 ____D C:\Program Files (x86)\Origin 2017-08-02 15:51 - 2017-08-02 15:51 - 000000000 ____D C:\Program Files (x86)\Origin Games 2017-08-02 15:50 - 2017-08-10 19:14 - 000000000 ____D C:\ProgramData\Adobe 2017-08-02 15:50 - 2017-08-02 15:52 - 000000000 ____D C:\ProgramData\Solidshield 2017-08-02 15:50 - 2017-08-02 15:50 - 000000000 ____D C:\Users\Default\AppData\Roaming\Macromedia 2017-08-02 15:50 - 2017-08-02 15:50 - 000000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia 2017-08-02 15:50 - 2017-08-02 15:50 - 000000000 ____D C:\Program Files (x86)\Adobe 2017-08-02 15:49 - 2017-08-10 19:14 - 000000000 ____D C:\Users\Pulla\AppData\Local\Adobe 2017-08-02 15:47 - 2017-08-02 15:51 - 000000000 ____D C:\Program Files (x86)\Electronic Arts 2017-08-02 15:43 - 2017-08-02 15:43 - 000000000 ____D C:\ProgramData\Electronic Arts 2017-08-02 15:43 - 2017-08-02 15:43 - 000000000 ____D C:\ProgramData\EA Core 2017-08-02 15:42 - 2017-08-02 15:42 - 000000000 ____D C:\Users\Pulla\Documents\Criterion Games 2017-07-30 22:52 - 2017-07-30 22:52 - 000000000 ____D C:\Users\Public\Documents\Steam 2017-07-30 21:27 - 2017-07-30 21:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fate Extella 2017-07-30 18:34 - 2017-07-30 18:34 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader 2017-07-30 18:33 - 2017-08-03 21:02 - 000000000 ____D C:\ProgramData\McAfee 2017-07-30 18:33 - 2017-07-30 18:39 - 000000000 ____D C:\Users\Pulla\AppData\Local\JDownloader v2.0 2017-07-30 14:35 - 2017-08-21 11:22 - 000000000 ____D C:\Users\Pulla\AppData\Local\CrashDumps 2017-07-30 14:35 - 2017-07-30 14:35 - 000000000 ____D C:\Program Files (x86)\VulkanRT 2017-07-30 14:35 - 2017-07-19 00:38 - 000135800 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2017-07-30 14:35 - 2017-03-10 23:17 - 000536864 _____ C:\Windows\system32\vulkan-1.dll 2017-07-30 14:35 - 2017-03-10 23:17 - 000525600 _____ C:\Windows\SysWOW64\vulkan-1.dll 2017-07-30 14:35 - 2017-03-10 23:17 - 000254240 _____ C:\Windows\system32\vulkaninfo.exe 2017-07-30 14:35 - 2017-03-10 23:17 - 000233760 _____ C:\Windows\SysWOW64\vulkaninfo.exe 2017-07-30 14:34 - 2017-07-19 02:40 - 000513144 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2017-07-30 14:34 - 2017-07-19 02:40 - 000418936 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 040239736 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 035844728 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 035314296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 028960376 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 013655672 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 012451424 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 012133112 _____ (NVIDIA Corporation) C:\Windows\system32\nvptxJitCompiler.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 011591576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 010487760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 009982968 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvptxJitCompiler.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 004163520 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 003595896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 001988216 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6438494.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 001598072 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6438494.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 001278528 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFTH264.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 001276992 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncMFThevc.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 001068152 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 001004992 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000996760 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFTH264.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000995408 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncMFThevc.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000972920 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000924280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000781544 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000725112 _____ (NVIDIA Corporation) C:\Windows\system32\nvDecMFTMjpeg.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000689992 _____ (NVIDIA Corporation) C:\Windows\system32\nvfatbinaryLoader.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000618744 _____ (NVIDIA Corporation) C:\Windows\system32\nvmcumd.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000617416 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000609912 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000584312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvDecMFTMjpeg.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000578056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvfatbinaryLoader.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000499136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000045976 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2017-07-30 14:33 - 2017-07-19 02:40 - 000000669 _____ C:\Windows\SysWOW64\nv-vk32.json 2017-07-30 14:33 - 2017-07-19 02:40 - 000000669 _____ C:\Windows\system32\nv-vk64.json 2017-07-30 14:24 - 2017-08-17 11:08 - 000004308 _____ C:\Windows\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000004000 _____ C:\Windows\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000003994 _____ C:\Windows\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000003894 _____ C:\Windows\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000003866 _____ C:\Windows\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000003858 _____ C:\Windows\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000003696 _____ C:\Windows\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-08-17 11:08 - 000003654 _____ C:\Windows\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2017-07-30 14:24 - 2017-07-30 14:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-07-30 14:24 - 2017-07-26 19:09 - 000057792 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvhci.sys 2017-07-30 14:24 - 2017-07-26 15:40 - 000001951 _____ C:\Windows\NvTelemetryContainerRecovery.bat 2017-07-30 14:19 - 2017-08-10 18:42 - 000000000 ____D C:\Users\Pulla\AppData\Local\NVIDIA Corporation 2017-07-30 14:19 - 2017-07-26 19:09 - 000121280 _____ C:\Windows\system32\NvRtmpStreamer64.dll 2017-07-30 14:18 - 2017-07-26 19:09 - 000179136 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll 2017-07-30 14:18 - 2017-07-26 19:09 - 000146368 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2017-07-30 14:18 - 2017-07-26 19:09 - 000048064 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2017-07-30 13:00 - 2017-07-30 13:00 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\java 2017-07-30 12:50 - 2017-07-30 12:50 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Yahoo 2017-07-30 12:47 - 2017-08-21 17:58 - 000004158 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{BE13F346-CFAF-4186-AE68-2B58E8A5C93C} 2017-07-30 12:47 - 2017-07-30 12:47 - 000097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2017-07-30 12:47 - 2017-07-30 12:47 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Sun 2017-07-30 12:47 - 2017-07-30 12:47 - 000000000 ____D C:\Users\Pulla\AppData\LocalLow\Sun 2017-07-30 12:47 - 2017-07-30 12:47 - 000000000 ____D C:\ProgramData\Oracle 2017-07-30 12:47 - 2017-07-30 12:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2017-07-30 12:47 - 2017-07-30 12:47 - 000000000 ____D C:\Program Files (x86)\Java 2017-07-30 12:42 - 2017-07-30 12:42 - 000000000 ____D C:\Users\Pulla\AppData\Local\PoGo 2017-07-30 12:42 - 2017-07-30 12:42 - 000000000 ____D C:\Users\Pulla\AppData\Local\GMap.NET 2017-07-30 12:42 - 2017-07-30 12:42 - 000000000 ____D C:\Users\Pulla\AppData\Local\DotNetBrowser 2017-07-30 01:42 - 2017-08-19 18:11 - 000000290 __RSH C:\ProgramData\ntuser.pol 2017-07-29 20:44 - 2017-07-29 20:44 - 000002870 _____ C:\Windows\System32\Tasks\CCleanerSkipUAC 2017-07-29 20:44 - 2017-07-29 20:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2017-07-29 20:44 - 2017-07-29 20:44 - 000000000 ____D C:\Program Files\CCleaner 2017-07-29 20:33 - 2017-07-29 20:33 - 000000000 _____ C:\Users\Pulla\volumeid 2017-07-29 20:23 - 2017-07-29 20:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller 2017-07-29 20:23 - 2017-07-29 20:23 - 000000000 ____D C:\Program Files\VS Revo Group 2017-07-29 19:36 - 2017-07-29 19:36 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Macromedia 2017-07-29 15:24 - 2017-07-29 15:24 - 000000000 ____D C:\Users\Pulla\AppData\LocalLow\Re_Zero 2017-07-28 20:16 - 2017-08-09 08:43 - 000000000 ____D C:\Users\Pulla\AppData\Local\Discord 2017-07-28 16:08 - 2017-07-28 16:08 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2170621112-2091516867-1202869241-1001 2017-07-26 16:44 - 2017-07-26 18:03 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\RenPy 2017-07-26 16:43 - 2017-07-26 16:43 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Katawa Shoujo Act 1 2017-07-26 13:18 - 2017-07-26 13:18 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Twitch Leecher 2017-07-26 13:17 - 2017-07-26 13:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Twitch Leecher 2017-07-26 13:17 - 2017-07-26 13:17 - 000000000 ____D C:\Program Files\Twitch Leecher 2017-07-25 18:53 - 2017-07-25 18:53 - 000000000 ____D C:\Users\Pulla\AppData\LocalLow\Daybreak Game Company 2017-07-25 18:53 - 2017-07-25 18:53 - 000000000 ____D C:\Users\Pulla\AppData\Local\SCE 2017-07-25 18:53 - 2017-07-25 18:53 - 000000000 ____D C:\Users\Pulla\AppData\Local\Daybreak Game Company 2017-07-23 19:42 - 2017-07-23 19:42 - 000000000 ____D C:\Users\Pulla\AppData\Local\Solid State Networks 2017-07-23 18:48 - 2017-07-23 18:48 - 000000222 _____ C:\Users\Pulla\Desktop\TERA.url ==================== Un mois - Modifiés - fichiers et dossiers ======== (Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.) 2017-08-21 19:43 - 2017-07-18 12:26 - 000000000 ____D C:\Users\Pulla\AppData\Local\Battle.net 2017-08-21 19:42 - 2017-07-18 19:11 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\uTorrent 2017-08-21 19:34 - 2017-07-17 22:34 - 000000000 ____D C:\Windows\system32\SleepStudy 2017-08-21 12:41 - 2017-07-18 12:26 - 000000000 ____D C:\Program Files (x86)\Blizzard App 2017-08-21 12:33 - 2017-07-17 17:19 - 000000000 ____D C:\Users\Pulla\AppData\Local\ElevatedDiagnostics 2017-08-21 12:26 - 2017-07-18 12:52 - 000000000 ____D C:\Users\Pulla\Desktop\streaming 2017-08-21 12:25 - 2017-07-17 22:35 - 000000000 ____D C:\ProgramData\NVIDIA 2017-08-21 12:00 - 2016-01-08 22:47 - 000000000 ____D C:\Program Files (x86)\Steam 2017-08-21 11:33 - 2017-07-17 14:49 - 000000000 ____D C:\Users\Pulla 2017-08-21 11:28 - 2017-07-17 11:11 - 001291760 _____ C:\Windows\system32\perfh00C.dat 2017-08-21 11:28 - 2017-07-17 11:11 - 000295788 _____ C:\Windows\system32\perfc00C.dat 2017-08-21 11:28 - 2015-09-04 03:52 - 002734464 _____ C:\Windows\system32\PerfStringBackup.INI 2017-08-21 11:22 - 2017-07-18 19:12 - 000000000 ____D C:\Users\Pulla\AppData\LocalLow\uTorrent 2017-08-21 11:22 - 2017-07-17 22:39 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2017-08-21 11:21 - 2017-07-17 11:07 - 001048576 _____ C:\Windows\system32\config\BBI 2017-08-20 13:57 - 2017-07-18 13:00 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\obs-studio 2017-08-20 11:27 - 2017-07-17 11:09 - 000000000 ___HD C:\Program Files\WindowsApps 2017-08-20 11:27 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\AppReadiness 2017-08-19 18:55 - 2017-07-17 11:09 - 000000000 ____D C:\Program Files\AOpen MM3 iCall 2017-08-19 18:11 - 2017-07-17 11:09 - 000000000 ___HD C:\Windows\system32\GroupPolicy 2017-08-19 18:10 - 2017-07-17 11:09 - 000000000 ____D C:\Program Files\Windows NT 2017-08-19 18:10 - 2015-07-10 15:14 - 000000000 ____D C:\Program Files\Windows Journal 2017-08-18 15:42 - 2017-07-17 18:35 - 000544424 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe 2017-08-17 21:09 - 2017-07-17 15:03 - 000002274 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2017-08-17 11:10 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\INF 2017-08-17 11:08 - 2017-07-17 22:35 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2017-08-17 11:08 - 2017-07-17 22:34 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2017-08-17 11:08 - 2017-07-17 22:34 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2017-08-16 10:36 - 2017-07-17 22:34 - 000313696 _____ C:\Windows\system32\FNTCACHE.DAT 2017-08-15 16:36 - 2017-07-18 22:59 - 000000000 ____D C:\ProgramData\BlueStacksSetup 2017-08-15 13:29 - 2017-06-30 21:21 - 001804672 _____ (Microsoft Corporation) C:\Windows\system32\WdfCoInstaller01011.dll 2017-08-15 13:29 - 2017-06-30 21:21 - 000045936 _____ (SteelSeries ApS) C:\Windows\system32\Drivers\sshid.sys 2017-08-13 22:38 - 2017-07-17 17:28 - 000000000 ____D C:\Users\Pulla\Documents\League of Legends 2017-08-13 17:49 - 2017-07-18 13:03 - 000000000 ____D C:\Program Files (x86)\StreamCompanion 2017-08-11 12:39 - 2017-07-18 12:29 - 000000000 ____D C:\Program Files (x86)\Overwatch 2017-08-10 23:13 - 2016-01-08 22:22 - 000000000 ____D C:\ProgramData\Package Cache 2017-08-10 19:14 - 2017-07-17 14:50 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Adobe 2017-08-10 13:28 - 2017-07-18 11:40 - 000000000 ____D C:\Users\Pulla\Documents\My Games 2017-08-09 23:01 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\rescache 2017-08-09 18:48 - 2017-07-17 14:50 - 000000000 ____D C:\Users\Pulla\AppData\Local\Packages 2017-08-09 10:04 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\SysWOW64\Macromed 2017-08-09 10:04 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\system32\Macromed 2017-08-09 08:43 - 2017-07-17 16:32 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\discord 2017-08-08 20:10 - 2017-07-17 11:07 - 000000000 ____D C:\Windows\CbsTemp 2017-08-08 20:09 - 2017-07-17 18:34 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe 2017-08-08 20:09 - 2017-07-17 18:34 - 000000000 ____D C:\Windows\system32\MRT 2017-08-04 21:36 - 2017-07-18 12:26 - 000000000 ____D C:\Users\Pulla\AppData\Local\Blizzard Entertainment 2017-08-04 20:50 - 2016-01-08 22:21 - 002272062 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2017-08-03 21:07 - 2015-09-04 03:48 - 000000000 __RHD C:\Users\Public\AccountPictures 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ___RD C:\Windows\ImmersiveControlPanel 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\system32\WinMetadata 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\system32\WinBioPlugIns 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\system32\oobe 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\ShellExperiences 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2017-08-03 21:05 - 2017-07-17 11:09 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2017-08-03 15:41 - 2017-07-17 15:03 - 000000000 ____D C:\Users\Pulla\AppData\Local\Google 2017-08-03 15:41 - 2017-07-17 15:03 - 000000000 ____D C:\Program Files (x86)\Google 2017-07-31 17:15 - 2017-07-17 11:10 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2017-07-31 17:15 - 2017-07-17 11:10 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2017-07-30 14:24 - 2017-07-17 14:51 - 000000000 ____D C:\Users\Pulla\AppData\Local\NVIDIA 2017-07-29 20:44 - 2017-07-17 11:06 - 000000000 ____D C:\Windows\Panther 2017-07-29 20:20 - 2017-07-17 15:08 - 000001283 _____ C:\ProgramData\Microsoft\Windows\Start Menu\TMAC v6.lnk 2017-07-28 20:16 - 2017-07-17 16:32 - 000000000 ____D C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc 2017-07-28 20:16 - 2017-07-17 16:32 - 000000000 ____D C:\Users\Pulla\AppData\Local\SquirrelTemp 2017-07-28 20:06 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\LiveKernelReports 2017-07-28 16:08 - 2017-07-17 14:51 - 000002415 _____ C:\Users\Pulla\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-07-28 16:08 - 2017-07-17 14:51 - 000000000 ___RD C:\Users\Pulla\OneDrive 2017-07-28 16:08 - 2017-07-17 14:50 - 000000000 ____D C:\Users\Pulla\AppData\Local\ConnectedDevicesPlatform 2017-07-26 19:09 - 2016-01-08 22:31 - 001922496 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2017-07-26 19:09 - 2016-01-08 22:31 - 001755072 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2017-07-26 19:09 - 2016-01-08 22:31 - 001505728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll 2017-07-26 19:09 - 2016-01-08 22:31 - 001317312 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2017-07-26 15:36 - 2017-07-17 22:35 - 000001951 _____ C:\Windows\NvContainerRecovery.bat 2017-07-25 18:24 - 2017-07-17 11:11 - 000000000 ____D C:\Windows\OCR 2017-07-23 17:00 - 2017-07-17 11:09 - 000000000 ____D C:\Windows\appcompat ==================== Fichiers à la racine de certains dossiers ======= 2017-08-04 20:44 - 2017-08-04 21:57 - 000003106 _____ () C:\Users\Pulla\AppData\Roaming\droid4xinstaller.log ==================== Bamital & volsnap ====================== (Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.) C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement C:\Windows\system32\wininit.exe => Le fichier est signé numériquement C:\Windows\explorer.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement C:\Windows\system32\svchost.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement C:\Windows\system32\services.exe => Le fichier est signé numériquement C:\Windows\system32\User32.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement C:\Windows\system32\userinit.exe => Le fichier est signé numériquement C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement LastRegBack: 2017-08-12 16:02 ==================== Fin de FRST.txt ============================