Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 15-02-2017 02
Exécuté par Bao (administrateur) sur COLONELBAO (17-02-2017 19:39:22)
Exécuté depuis C:\Users\Bao\Desktop
Profils chargés: Bao (Profils disponibles: Bao & Remplacant)
Platform: Windows 10 Pro Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(MSI) C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(MSI) C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe
(Micro-Star INT'L CO., LTD.) C:\MSI\Smart Utilities\SuperRAIDSvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
() C:\Program Files (x86)\Weda SAS\Weda Synchro\WedaLinkClient.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
() C:\Program Files (x86)\Weda SAS\Weda Synchro\WedaUpdateService.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Realtek Semiconductor) C:\Program Files (x86)\MSI\NetworkGenie\NetworkGenie.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
() C:\Windows\System32\igfxTray.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP3LAK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABISWD.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABISWD.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNABISWD.EXE
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(CANON INC.) C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE
(Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\KHAL3\KHALMNPR.exe
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNAP2RPK.EXE
(CANON INC.) C:\Windows\System32\spool\drivers\x64\3\CNACDSWK.EXE
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(Google) C:\Program Files (x86)\Google\Drive\googledrivesync.exe
(PFU LIMITED) C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe
(ASIP SANTE) C:\Program Files\santesocial\CPS\CCM.exe
() C:\Program Files (x86)\Weda SAS\WedaTools\WedaDmpRepeater.exe
() C:\Program Files (x86)\Comunica SAS\VitalZen\VitalZenRepeater.exe
(PFU LIMITED) C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe
(PFU LIMITED) C:\Program Files (x86)\PFU\ScanSnap\SSFolder\SSFolderTray.exe
(Microsoft Corporation) C:\Windows\System32\wiawow64.exe
(PFU Limited) C:\Program Files (x86)\PFU\ScanSnap\Update\SsUWatcher.exe
(Pyxistem) C:\pyxvital\Pyxvital.exe
(Micro-Star INT'L CO.,LTD.) C:\Program Files (x86)\MSI\Fast Boot\FastBoot.exe
(PFU LIMITED) C:\Program Files (x86)\PFU\ScanSnap\Driver\SSDriver\fi5110\SsWiaChecker.exe
(GIE SESAM VITALE - ASIP SANTE) C:\Program Files\santesocial\galss\galsvw64.exe
() C:\Program Files (x86)\XIRING\V3S Reconnexion\V3S_Reconnexion.exe
(MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(CNAMTS - GIE SESAM-Vitale) C:\Program Files (x86)\santesocial\srvsvcnam\SRVSVCNAM.exe
() C:\Program Files (x86)\Comunica SAS\VitalZen\VitalZenUpdater.exe
(Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\Live Update.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\sp6\LU1\LULnchr.exe
(Logitech, Inc.) C:\Program Files\Common Files\Logishrd\sp6\LU1\LogitechUpdate.exe
(SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9192960 2017-01-05] (Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch
HKLM\...\Run: [CNAP3 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP3LAK.EXE [228520 2012-06-13] (CANON INC.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2014-05-28] (Intel Corporation)
HKLM\...\Run: [MBCfg64] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\MBCfg64.dll,RunDLLEntry MBCfg64
HKLM\...\Run: [MFNetworkScanUtility] => C:\Program Files\Canon\Canon MF Network Scan Utility\CNMFSUT6.EXE [486552 2012-09-27] (CANON INC.)
HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3111880 2015-07-23] (Logitech, Inc.)
HKLM\...\Run: [CNAP2 Launcher] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\CNAP2LAK.EXE [226784 2010-10-14] (CANON INC.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2017-01-16] (AVAST Software)
HKLM-x32\...\Run: [Sound Blaster Cinema] => C:\Program Files (x86)\Creative\Sound Blaster Cinema\Sound Blaster Cinema\SBCinema.exe [711680 2013-08-16] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [ScanSnap OnlineUpdate Watcher] => C:\Program Files (x86)\PFU\ScanSnap\Update\SsUWatcher.exe [454144 2016-09-06] (PFU Limited)
HKLM-x32\...\Run: [Fast Boot] => C:\Program Files (x86)\MSI\Fast Boot\StartFastBoot.exe [759120 2015-04-22] ()
HKLM-x32\...\Run: [ScanSnap WIA Service Checker] => C:\Program Files (x86)\PFU\ScanSnap\Driver\SSDriver\fi5110\SsWiaChecker.exe [86016 2016-02-18] (PFU LIMITED)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835680 2016-06-14] (MSI)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1022928 2016-07-27] (MSI)
HKLM-x32\...\Run: [SrvSVCNAM] => C:\Program Files (x86)\santesocial\srvsvcnam\SRVSVCNAM.exe [1718272 2016-05-12] (CNAMTS - GIE SESAM-Vitale)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [13396944 2017-01-24] (Micro-Star INT'L CO., LTD.)
Winlogon\Notify\LBTWlgn: c:\program files\common files\logishrd\bluetooth\LBTWlgn.dll (Logitech, Inc.)
HKU\S-1-5-21-2779406221-437713687-2509188895-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-2779406221-437713687-2509188895-1001\...\Run: [GoogleDriveSync] => C:\Program Files (x86)\Google\Drive\googledrivesync.exe [23818360 2016-11-30] (Google)
HKU\S-1-5-21-2779406221-437713687-2509188895-1001\...\MountPoints2: {93ac82b3-9496-11e6-8399-ac7ba183dba9} - "E:\HiSuiteDownLoader.exe"
HKU\S-1-5-21-2779406221-437713687-2509188895-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\ssText3d.scr [231936 2016-07-16] (Microsoft Corporation)
HKU\S-1-5-18\...\Run: [] => 0
ShellIconOverlayIdentifiers: [ GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [ GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll [2016-11-30] (Google)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2017-01-16] (AVAST Software)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\CardMinder Viewer.lnk [2017-02-01]
ShortcutTarget: CardMinder Viewer.lnk -> C:\Program Files (x86)\PFU\ScanSnap\CardMinder\CardLauncher.exe (PFU LIMITED)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Conversion au format PDF avec ScanSnap Organizer.lnk [2017-02-01]
ShortcutTarget: Conversion au format PDF avec ScanSnap Organizer.lnk -> C:\Program Files (x86)\PFU\ScanSnap\Organizer\PfuSsOrgOcrChk.exe (PFU LIMITED)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Démarrage du CCM.lnk [2017-02-01]
ShortcutTarget: Démarrage du CCM.lnk -> C:\Program Files\santesocial\CPS\CCM.exe (ASIP SANTE)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Lien Dmp Weda.lnk [2017-02-01]
ShortcutTarget: Lien Dmp Weda.lnk -> C:\WINDOWS\Installer\{DA9C0430-CE38-4C1A-8994-8F788934AFEE}\_Built_98EABE0F07BF4C7FAB4583CBCCC19118.exe (Pas de fichier)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Lien Weda.lnk [2017-02-01]
ShortcutTarget: Lien Weda.lnk -> C:\Windows\Installer\{492334DA-B940-477A-91ED-1D88469CA6A8}\_Built_BFC0157AB281428EB643EBAFD80265C7.exe (Flexera Software LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScanSnap Manager.lnk [2017-02-01]
ShortcutTarget: ScanSnap Manager.lnk -> C:\Program Files (x86)\PFU\ScanSnap\Driver\PfuSsMon.exe (PFU LIMITED)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\V3S Reconnexion.lnk [2017-02-01]
ShortcutTarget: V3S Reconnexion.lnk -> C:\Program Files (x86)\XIRING\V3S Reconnexion\V3S_Reconnexion.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VIDAL Menu.lnk [2017-02-01]
ShortcutTarget: VIDAL Menu.lnk -> C:\Program Files (x86)\Vidal Menu\VidalMenu.exe ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\VitalZenUpdater.lnk [2017-02-01]
ShortcutTarget: VitalZenUpdater.lnk -> C:\Windows\Installer\{492334DA-B940-477A-91ED-1D88469CA6A8}\_Built4_6B3371F48351420194A6BF3F1E8A94EB.exe (Flexera Software LLC)
BootExecute: autocheck autochk * sdnclean64.exe

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254 8.8.8.8
Tcpip\Parameters: [NameServer] 8.8.8.8,8.8.8.4
Tcpip\..\Interfaces\{389c7e80-449c-415f-96d8-9752a541eee4}: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{3b03230b-3a9d-4b81-a987-81fe3ae9bcce}: [DhcpNameServer] 192.168.1.254 8.8.8.8
Tcpip\..\Interfaces\{ea00878b-d12a-4d74-a41c-82366485f8c5}: [DhcpNameServer] 192.168.43.1
ManualProxies:

Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2779406221-437713687-2509188895-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2017-01-29] (Microsoft Corporation)
BHO: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\SetPointSmooth.dll [2015-07-23] (Logitech, Inc.)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2017-01-29] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2017-01-29] (Microsoft Corporation)
BHO-x32: Logitech SetPoint -> {AF949550-9094-4807-95EC-D1C317803333} -> C:\Program Files\Logitech\SetPointP\32-bit\SetPointSmooth.dll [2015-07-23] (Logitech, Inc.)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2017-01-29] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: 5b2mbjg7.default
FF ProfilePath: C:\Users\Bao\AppData\Roaming\Mozilla\Firefox\Profiles\5b2mbjg7.default [2017-02-10]
FF Homepage: Mozilla\Firefox\Profiles\5b2mbjg7.default -> user_pref("browser.startup.homepage", "hxxps://www.malwarebytes.org/restorebrowser/
FF Extension: (CPS Addon) - C:\Users\Bao\AppData\Roaming\Mozilla\Firefox\Profiles\5b2mbjg7.default\Extensions\CPS2ter-2020_Firefox@asipsante.fr [2017-02-02]
FF Extension: (Adblock Plus) - C:\Users\Bao\AppData\Roaming\Mozilla\Firefox\Profiles\5b2mbjg7.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-01-26]
FF Extension: (Tab Mix Plus) - C:\Users\Bao\AppData\Roaming\Mozilla\Firefox\Profiles\5b2mbjg7.default\Extensions\{dc572301-7619-498c-a57d-39143191b318}.xpi [2015-10-08]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2017-01-16]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2017-01-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2015-08-04] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-11-10] (Intel Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2017-01-29] (Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50901.0\npctrl.dll [2016-08-31] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2017-01-29] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-01] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2017-02-01] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.0 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Pas de fichier]
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-12-23] (Adobe Systems Inc.)

Chrome:
=======
CHR Profile: C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default [2017-02-17]
CHR Extension: (Google Slides) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-02-17]
CHR Extension: (Google Docs) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-02-17]
CHR Extension: (Google Drive) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-02-17]
CHR Extension: (YouTube) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-17]
CHR Extension: (Google Sheets) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-02-17]
CHR Extension: (Google Docs hors connexion) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-02-17]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-02-17]
CHR Extension: (Gmail) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-02-17]
CHR Extension: (Chrome Media Router) - C:\Users\Bao\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-02-17]
CHR HKU\S-1-5-21-2779406221-437713687-2509188895-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Bao\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2017-02-17]
CHR HKU\S-1-5-21-2779406221-437713687-2509188895-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2017-01-16] (AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3697352 2017-01-29] (Microsoft Corporation)
R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [4346320 2017-02-08] (SecureMix LLC)
S2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373744 2016-11-01] (Intel Corporation)
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
S3 iumsvc; C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe [177376 2016-08-12] (Intel Corporation)
S2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2014-11-10] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService.exe [4163680 2016-09-09] (MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2204768 2016-09-29] (MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService.exe [4171360 2016-11-23] (MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2014816 2016-11-15] (MSI)
R2 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2327648 2016-12-05] (MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2076768 2016-12-05] (MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [609888 2016-12-05] (MSI)
R2 MSI_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\FastBootService.exe [105296 2015-06-04] (MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2286032 2017-01-23] (Micro-Star INT'L CO., LTD.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [163280 2016-08-01] (MSI)
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2016-02-08] ()
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889896 2016-09-15] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [754784 2016-01-08] (DEVGURU Co., LTD.)
R2 SuperRAIDSvc; C:\MSI\Smart Utilities\SuperRAIDSvc.exe [29648 2015-02-09] (Micro-Star INT'L CO., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
S2 VitalZenService; C:\Program Files (x86)\Comunica SAS\VitalZen\VitalZenService.exe [7168 2016-12-21] () [Fichier non signé]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WedaSynchroClient; C:\Program Files (x86)\Weda SAS\Weda Synchro\WedaLinkClient.exe [6144 2017-01-11] () [Fichier non signé]
R2 WedaSynchroUpdate; C:\Program Files (x86)\Weda SAS\Weda Synchro\WedaUpdateService.exe [11264 2015-02-16] () [Fichier non signé]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)
S2 XTU3SERVICE; C:\Program Files (x86)\Intel\Extreme Tuning Utility\XtuService.exe [18384 2014-08-07] (Intel(R) Corporation)
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3833248 2016-02-08] (Intel® Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R3 AcpiCtlDrv; C:\WINDOWS\System32\drivers\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
S3 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [21160 2012-09-23] (Advanced Micro Devices, Inc.)
S3 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [37656 2017-01-16] (AVAST Software)
R1 aswKbd; C:\WINDOWS\system32\drivers\aswKbd.sys [37144 2017-01-16] (AVAST Software)
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [108816 2017-01-16] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr2.sys [103064 2017-01-16] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2017-01-16] (AVAST Software)
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [969184 2017-01-16] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [513632 2017-01-16] (AVAST Software)
R2 aswStm; C:\WINDOWS\system32\drivers\aswStm.sys [163416 2017-01-16] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2017-01-16] (AVAST Software)
S3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWB6.sys [223232 2014-06-21] (Advanced Micro Devices) [Fichier non signé]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 dtsoftbus01; C:\WINDOWS\System32\drivers\dtsoftbus01.sys [283064 2015-01-24] (Disc Soft Ltd)
R1 gwdrv; C:\WINDOWS\system32\DRIVERS\gwdrv.sys [33152 2015-05-29] (SecureMix LLC)
R3 ibtusb; C:\WINDOWS\system32\DRIVERS\ibtusb.sys [230656 2016-12-12] (Intel Corporation)
R3 ikbevent; C:\WINDOWS\system32\DRIVERS\ikbevent.sys [22216 2014-05-27] ()
R3 imsevent; C:\WINDOWS\system32\DRIVERS\imsevent.sys [22728 2014-05-27] ()
R2 iocbios2; C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [28912 2014-06-17] (Intel Corporation)
S3 ipadtst; C:\Program Files (x86)\MSI\Super Charger\ipadtst_64.sys [20464 2013-11-11] (Windows (R) Win 7 DDK provider)
S3 ipadtst2; C:\Program Files (x86)\MSI\Super Charger\ipadtst2_64.sys [16336 2016-07-29] (MSI)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-17] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
S3 NETwNb64; C:\WINDOWS\System32\drivers\Netwbw02.sys [3515664 2016-01-29] (Intel Corporation)
R3 NTIOLib_1_0_3; C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys [13368 2012-10-25] (MSI)
R3 NTIOLib_FastBoot; C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys [13368 2012-10-26] (MSI)
R3 NTIOLib_MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys [13368 2012-11-26] (MSI)
R3 NTIOLib_MSI_RAID; C:\MSI\Smart Utilities\NTIOLib_X64.sys [13808 2014-03-17] (MSI)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [937728 2016-05-17] (Realtek )
S3 RTCore64; C:\Program Files (x86)\MSI Afterburner\RTCore64.sys [13368 2013-03-11] ()
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
S3 catchme; \??\C:\Users\Bao\AppData\Local\Temp\catchme.sys [X] <==== ATTENTION

========================== MD5 Pilotes =======================

C:\WINDOWS\System32\drivers\1394ohci.sys A7901875F89D011C38CF52C98ACF5B29
C:\WINDOWS\System32\drivers\3ware.sys EE1CCC54F75C24727A218F98FC5349DA
C:\WINDOWS\System32\drivers\ACPI.sys 73C73E1AA0D4D727A04AAAB120B7F56A
C:\WINDOWS\System32\drivers\AcpiCtlDrv.sys 2EA3EB3E69B6480AB112E876F3096312
C:\WINDOWS\System32\drivers\AcpiDev.sys 0935496EF9624B46B935CB35ECE1F205
C:\WINDOWS\System32\Drivers\acpiex.sys D6794C31F4077B71433988787BAA926E
C:\WINDOWS\System32\drivers\acpipagr.sys FE5F656D6B35089DA39112E74EC6A85A
C:\WINDOWS\System32\drivers\acpipmi.sys 2F242941E4DFF69B883D77A16F039557
C:\WINDOWS\System32\drivers\acpitime.sys C247E35A21682DA8D0DC3AF9F025FCC5
C:\WINDOWS\System32\drivers\ADP80XX.SYS 49B9DB97AFC85DCCBDACDAB2E90085B7
C:\WINDOWS\system32\drivers\afd.sys 323AA1953ED9C01E23F740FA891FE064
C:\WINDOWS\System32\DRIVERS\ahcache.sys 23522E5D581F7722B1B5B86737CAE39C
C:\WINDOWS\System32\drivers\amdk8.sys DF21E05E41E5AC3F13F304D91457649A
C:\WINDOWS\System32\drivers\amdkmafd.sys F2FF8C1B41B3784EDBD5C6D5397F403C
C:\WINDOWS\System32\drivers\amdppm.sys 45D0AA4BB90B821DF92E8F19ABED0C5E
C:\WINDOWS\System32\drivers\amdsata.sys 74FFBC43B4B899C9A8CA06A892F2CE73
C:\WINDOWS\System32\drivers\amdsbs.sys AAB0F1D8D7E54761ABAB13AF161F1680
C:\WINDOWS\System32\drivers\amdxata.sys F91BAAC4237C40352A807000F3B716F9
C:\WINDOWS\System32\drivers\appid.sys BC121C099C6C659126AD2102AFDFF8CF
C:\WINDOWS\System32\drivers\applockerfltr.sys 68190E2BADF23BD782344970E5B5DE9E
C:\WINDOWS\system32\drivers\AppvStrm.sys B66ED2CB37F7E4696A51612AFBA08834
C:\WINDOWS\system32\drivers\AppvVemgr.sys 8DC924848E20F890BEFC6B31136D46BE
C:\WINDOWS\system32\drivers\AppvVfs.sys 9ADC5A8BEE10E174F95349E9232D8E76
C:\WINDOWS\System32\drivers\arcsas.sys E6AB1F0B4C3D4E0D2A88332D76FECD03
C:\WINDOWS\system32\drivers\aswHwid.sys 9B480B472D6826E7257C90E2D0EE2954
C:\WINDOWS\system32\drivers\aswKbd.sys 06362BBA1347CBA0996F4B39BB1D8353
C:\WINDOWS\system32\drivers\aswMonFlt.sys 1BB00571CC2C78463ABD7E9C32970758
C:\WINDOWS\system32\drivers\aswRdr2.sys 7010B57D708DA5C9686A5923EE621776
C:\Windows\System32\Drivers\aswRvrt.sys 937885085BFE5BD08EC1BC0245DD203B
C:\WINDOWS\system32\drivers\aswSnx.sys 0B6352251C5D84130DF4252D33D266C2
C:\WINDOWS\system32\drivers\aswSP.sys 28213B34725B18387CC1B8C3D73858A1
C:\WINDOWS\system32\drivers\aswStm.sys 9C58B6E9663D0A76D00D83E43C765BDF
C:\Windows\System32\Drivers\aswVmm.sys D60D9201739400F0FBDB9E36A3212D91
C:\WINDOWS\System32\drivers\asyncmac.sys 61C5A480C43E7E8E49C42869F49D0D3E
C:\WINDOWS\System32\drivers\atapi.sys A10F989A812B57B9695F6C305907C9C6
C:\WINDOWS\system32\drivers\AtihdWB6.sys 8523AA8BD207F937E8C047F8713D4788
C:\WINDOWS\System32\drivers\bxvbda.sys 61BAC67048CA5C1D08C48FCC8012B613
C:\WINDOWS\System32\drivers\BasicDisplay.sys 68F72B05EBC6D1779C0D60A147C7CA0B
C:\WINDOWS\System32\drivers\BasicRender.sys 23156E7EDAF613D839E2839746B168D3
C:\WINDOWS\System32\drivers\bcmfn.sys 3F5523DCEFE42B385659C5CB46A6B810
C:\WINDOWS\System32\drivers\bcmfn2.sys 0B750A6A6D847E73CA48ADD7A0F5A393
C:\Windows\System32\Drivers\Beep.sys 0A508274355745EEF01C6BE3198D02C4
C:\WINDOWS\System32\DRIVERS\bowser.sys 9CD2A4821DE379305CACB2E99AD8953A
C:\WINDOWS\System32\drivers\BthAvrcpTg.sys 722036C26D2C4E50EC2A2EC5FD678846
C:\WINDOWS\System32\drivers\BthEnum.sys 77630A51FAF6A07922FEE835F4DED8F6
C:\WINDOWS\System32\drivers\bthhfenum.sys C2E31BE025D46D189E38DD1EDF07837A
C:\WINDOWS\System32\drivers\BthHFHid.sys F7CD605FC0B0B22F3F6F247595E3A655
C:\WINDOWS\System32\drivers\BthLEEnum.sys 0AB691736D4D4029444AF62DE59CFD37
C:\WINDOWS\System32\drivers\bthmodem.sys 535DC41A33630AE4C262406F9E981C03
C:\WINDOWS\System32\drivers\bthpan.sys 224BA1CB1F3C702F0D001D2AFC9793B1
C:\WINDOWS\System32\drivers\BTHport.sys 851ED52AE3E62CD5374BD4BBFF7A9DAB
C:\WINDOWS\System32\drivers\BTHUSB.sys DC5955E589C55E2313D69B64E1A183F3
C:\WINDOWS\System32\drivers\buttonconverter.sys 23F9EF739F685E07482116425E7879AA
C:\WINDOWS\System32\drivers\capimg.sys 60EB6A4CE3E21887D302350631C16F26
C:\WINDOWS\System32\DRIVERS\cdfs.sys F8FB51B9EF6372610E9B31A1D86B62FC
C:\WINDOWS\System32\drivers\cdrom.sys 613D0137C269187FA298A157E3D14A18
C:\WINDOWS\System32\drivers\cht4sx64.sys 0AED948DA8D5F08B3D6F12E4E2089736
C:\WINDOWS\System32\drivers\cht4vx64.sys 0002A0FDE087C1657AB31CE73077539C
C:\WINDOWS\System32\drivers\circlass.sys 6B4F90A287D75CCD78694F6790C911B2
C:\WINDOWS\System32\drivers\CLFS.sys B72D26074E72A757D788FB1BEF8B2F2E
C:\WINDOWS\System32\drivers\registry.sys EEC3A4A98AE1A337E3CD1483AD6F2E15
C:\WINDOWS\System32\drivers\CmBatt.sys 429623E266EF067A44E8CF148E9DFB9B
C:\WINDOWS\System32\Drivers\cng.sys 90C07EB909C42316982E753BDAA7860D
C:\WINDOWS\System32\DRIVERS\cnghwassist.sys 3DB10C59405931E2C72EFB82C1AF97D1
C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_a140581a8f8b58b7\CompositeBus.sys 34C935AF2A414572B412B3556586D783
C:\WINDOWS\System32\drivers\condrv.sys 44EEEB2382F566999287E13F2067693C
C:\WINDOWS\System32\drivers\csc.sys 03214883D52FAD46573233852344C72C
C:\WINDOWS\System32\drivers\dam.sys 039B5A8CBD5C75D1C46DF15F7C74D136
C:\WINDOWS\System32\Drivers\dfsc.sys 0D1D392ED2597F295956D058D33BD7C3
C:\WINDOWS\system32\DRIVERS\ssudbus.sys 9593475FBC857A05D93BFF4FA7323C2B
C:\WINDOWS\System32\drivers\disk.sys 35B9D46560339A5A7F0CAC6ED702C817
C:\WINDOWS\System32\drivers\dmvsc.sys 815F45161A4571C2C44491564F3D5968
C:\WINDOWS\system32\DRIVERS\drmkaud.sys AE6BD4C879A8C849E53947C92DF3B3A0
C:\WINDOWS\System32\drivers\dtsoftbus01.sys 33F90B202E9DD9B7D489EB59310FDC34
C:\WINDOWS\System32\drivers\dxgkrnl.sys 19F2B54EE8861D90579BD0E3AE5182F9
C:\WINDOWS\System32\drivers\evbda.sys 7EC6FC0266D74BD47ABB130A328B70EC
C:\WINDOWS\System32\drivers\EhStorClass.sys 8D74B8B5D6F7C5BC4C525BAF2B083FF1
C:\WINDOWS\System32\drivers\EhStorTcgDrv.sys 2A9817B5A9260D8F60D52E36BEF10443
C:\WINDOWS\System32\drivers\errdev.sys 77B60DEC7DCB4233E4A69D3F52E5DB24
C:\Windows\System32\Drivers\exfat.sys FCD2C63754C2E739A8EEAD9BC63F9DDC
C:\Windows\System32\Drivers\fastfat.sys FA918EC296EB410FF02867D008D02421
C:\WINDOWS\System32\drivers\fdc.sys 99598ECA5E41996E005D5B9D9FF1EFA2
C:\WINDOWS\System32\drivers\filecrypt.sys F44F666B0EACC3181544FFCF8CA0FFC7
C:\WINDOWS\System32\drivers\fileinfo.sys 78A210DDFDF2C9EC884631D2DAA573F0
C:\WINDOWS\System32\drivers\filetrace.sys 1A97DB5E701A186989F3795223C3BE39
C:\WINDOWS\System32\drivers\flpydisk.sys 46626665F0E5906E45619B4EFD6186B8
C:\WINDOWS\System32\drivers\fltmgr.sys FDA72ACA14D516D18C33AFCD0FD9260F
C:\WINDOWS\System32\drivers\FsDepends.sys D152CCBFC8251670BF0AAFE00D6BC782
C:\Windows\System32\Drivers\Fs_Rec.sys 6D6BB5C7363CD35FA715E826F3D029EE
C:\WINDOWS\System32\DRIVERS\fvevol.sys 8EEC4925C03E375C4EC496E45C44139A
C:\WINDOWS\System32\drivers\vmgencounter.sys EF78034773CE506323655A868C949144
C:\WINDOWS\System32\drivers\genericusbfn.sys B55FEBC6A00DAA1FE074F020B6907516
C:\WINDOWS\System32\Drivers\msgpioclx.sys DDD8A8CDDC7F13EF57D1DAAE71865936
C:\WINDOWS\System32\drivers\gpuenergydrv.sys 7ACD8F69B5D6EC97E6D2C006E19BED88
C:\WINDOWS\system32\DRIVERS\gwdrv.sys 77621A3DF170D246DC744CD0767BFAB3
C:\WINDOWS\System32\drivers\HDAudBus.sys 10E3515FE5DBA6656FA62C29342EC4A1
C:\WINDOWS\System32\drivers\HidBatt.sys B90D284B97CD4CA9DE7430AAAD887A56
C:\WINDOWS\System32\drivers\hidbth.sys B2FE11643CC6ACDEE6C247DD36018FDB
C:\WINDOWS\System32\drivers\hidi2c.sys D24355488A2D4D2323518EC1AC7A6D9E
C:\WINDOWS\System32\drivers\hidinterrupt.sys 0AF9ABBA4F3F55C6C803890D64BC3C29
C:\WINDOWS\System32\drivers\hidir.sys CDBCF8E9AB06D88A1E1191D32F320C5D
C:\WINDOWS\System32\drivers\hidusb.sys D8536CB438CC4CCDAE047B768EED22B2
C:\WINDOWS\System32\drivers\HpSAMD.sys F5CA18197B4646E04DB9EB2D6642CC4D
C:\WINDOWS\System32\drivers\HTTP.sys A10C7C1E69FC90620C7BF2E51302A01F
C:\WINDOWS\System32\drivers\hvservice.sys 74FC79C52395B10FFD0B55CF22CF88FC
C:\WINDOWS\System32\drivers\hwpolicy.sys 771EDDA9830A3079F996F34D681FB6E5
C:\WINDOWS\System32\drivers\hyperkbd.sys 3B9F315E7FA72CC25228EB097DD9C694
C:\WINDOWS\System32\drivers\i8042prt.sys B54B30992620C97230013A74461C8517
C:\WINDOWS\System32\drivers\iagpio.sys C6B8743B213F06AA60943D8366FE968F
C:\WINDOWS\System32\drivers\iai2c.sys 9A2A2F3C69B9A30B6E78536F6D258BAD
C:\WINDOWS\System32\drivers\iaLPSS2i_GPIO2.sys 5A0E850F8CD17791A3E6A3CF81D0CA28
C:\WINDOWS\System32\drivers\iaLPSS2i_I2C.sys 7508F1096803385D6376BFD0BD473AC4
C:\WINDOWS\System32\drivers\iaLPSSi_GPIO.sys 16A10CCEDCF5AC4CAAE43DC9FC40392F
C:\WINDOWS\System32\drivers\iaLPSSi_I2C.sys EB82A11613326691508D9ED9A4FE29E7
C:\WINDOWS\System32\drivers\iaStorA.sys 9EBE1AE8B3DA91D06BE1971EB37F7DA0
C:\WINDOWS\System32\drivers\iaStorAV.sys 97E553D03219D3D51705C7235D9EAEBD
C:\WINDOWS\System32\drivers\iaStorV.sys 8350FE3BCDE3428BC040877BB7E9EAEB
C:\WINDOWS\System32\drivers\ibbus.sys 3BA03F7C7700DDF4C383DDE9252F5817
C:\WINDOWS\system32\DRIVERS\ibtusb.sys F8EFFD8ABDC134455667BD430FB74864
C:\WINDOWS\System32\drivers\ICCWDT.sys B9187F0E4F990357B9A5372066A40B57
C:\WINDOWS\system32\DRIVERS\igdkmd64.sys 658287D76E8D77C08AE98989F99B8948
C:\WINDOWS\system32\DRIVERS\ikbevent.sys FF604BCE2537A4734DA0CE19AD9B7B7A
C:\WINDOWS\system32\DRIVERS\imsevent.sys 298E67827BE3C4403C32EAB66987A334
C:\WINDOWS\System32\drivers\IndirectKmd.sys 2A01C96DF5802D3434634E55C91232D8
C:\WINDOWS\system32\drivers\RTKVHD64.sys 53325DA0638F3F5566A66AB9081CCA7A
C:\WINDOWS\system32\DRIVERS\IntcDAud.sys E300D1E37B737ED14F7A08CD5604E5D9
C:\WINDOWS\System32\drivers\intelide.sys 9F7E87F6595D065A8A200A291043045E
C:\WINDOWS\System32\drivers\intelpep.sys A6BD2E20AE1BC5CB2776C87C28E4F4CA
C:\WINDOWS\System32\drivers\intelppm.sys 2A48DA39542636DB0FA3BA915385D1B3
C:\Program Files (x86)\Intel\Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys 6D71CC813AC0963C5C78C19EC656048A
C:\WINDOWS\System32\drivers\iorate.sys DB32758F3A7F6CCE81A5430080A2EA65
C:\Program Files (x86)\MSI\Super Charger\ipadtst_64.sys 44A9B60ECA9F6D760E0292E56127BCED
C:\Program Files (x86)\MSI\Super Charger\ipadtst2_64.sys E59F589F4280E04ADBCFB9189F6A4750
C:\WINDOWS\System32\DRIVERS\ipfltdrv.sys FE85D0A86CA7A5A99CF8CD04DE7F80AE
C:\WINDOWS\System32\drivers\IPMIDrv.sys 450DBDD716C7911F83E05F78EE18BFA2
C:\WINDOWS\System32\drivers\ipnat.sys F1DAECC3B3D6399875D4F10529D6A77C
C:\WINDOWS\system32\drivers\irda.sys 7475A2903BB704B446AA6309E34D3362
C:\WINDOWS\System32\drivers\irenum.sys 9725E7F0C64CE9916A5CDABE8D6E13C3
C:\WINDOWS\System32\drivers\isapnp.sys 58040898883A96160D41739C80328BBF
C:\WINDOWS\System32\drivers\msiscsi.sys C9FD02D62E09337B67B0C61EC8CA38CC
C:\WINDOWS\System32\drivers\iwdbus.sys F1D3A377ED9BA1CA449824C41CAF104C
C:\WINDOWS\System32\drivers\kbdclass.sys 210808437570BDDEE71A43535E3A2D30
C:\WINDOWS\System32\drivers\kbdhid.sys 0B779E9FC426CA2268D28181FA6C222F
C:\WINDOWS\System32\drivers\kdnic.sys 813BA3EB2CE038F2A5382DDD75CAD60B
C:\WINDOWS\System32\Drivers\ksecdd.sys 705C0F8BCCEF6E7CB704CCB454192D7E
C:\WINDOWS\System32\Drivers\ksecpkg.sys 55AD13E2BAFC5AB53A10F8C271F5D242
C:\WINDOWS\system32\drivers\ksthunk.sys 4ED115CD1A1099705F56B5E0FFF97CC6
C:\WINDOWS\system32\DRIVERS\LEqdUsb.Sys EAB70270BDDCFEF56FCC7425C2D9883D
C:\WINDOWS\system32\DRIVERS\LHidEqd.Sys 5EBB7C1FC685D45A1D3D8B2B9A656E48
C:\WINDOWS\system32\DRIVERS\LHidFilt.Sys AFDFA4A6B0F7B15AA38E494FD4595741
C:\WINDOWS\System32\drivers\lltdio.sys 5933A6673F00D8255C52957E40C2D601
C:\WINDOWS\system32\DRIVERS\LMouFilt.Sys C3E82B320F34C97F32B8026F4C249BEF
C:\WINDOWS\System32\drivers\lsi_sas.sys 8E1B0946948CCC0BC1FA3CB70374A795
C:\WINDOWS\System32\drivers\lsi_sas2i.sys 4F68163FC04C973500DC4DA0946917B0
C:\WINDOWS\System32\drivers\lsi_sas3i.sys E5AC5F2815938651CDCC27F425474673
C:\WINDOWS\System32\drivers\lsi_sss.sys CCF6EC9FB9B8F18E05B4253E81013E48
C:\WINDOWS\system32\drivers\luafv.sys C9579D32219E5B936AC3A48D470117EC
C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys BDE2FC7213C0897524C1357BAAE30239
C:\WINDOWS\system32\drivers\MBfilt64.sys 42D3B200D357600CD9FAFF89C2FA3878
C:\WINDOWS\System32\drivers\megasas.sys C3CDCCF07486BD2616A7B82946E07AC0
C:\WINDOWS\System32\drivers\MegaSas2i.sys 2CF0CB2A0ED68C5455371E84C16F9627
C:\WINDOWS\System32\drivers\megasr.sys FADB2FE017E69EECE0E1BA78661C2E8C
C:\WINDOWS\System32\drivers\TeeDriverW8x64.sys 48F64A35BA9F2E4AC0587DDA555FF951
C:\WINDOWS\System32\drivers\mlx4_bus.sys FD60818B66B2E8A5415EA840E99A9D8F
C:\WINDOWS\system32\drivers\mmcss.sys 68F6977F1CFBAAC770D940A8C0326FA1
C:\WINDOWS\System32\drivers\modem.sys 0D50B3F3AB32D416786B58D4553859CE
C:\WINDOWS\System32\drivers\monitor.sys 9CCCB7FC3EDADEBA461D78615A6011A6
C:\WINDOWS\System32\drivers\mouclass.sys 27A07B2FB2E3057DA8DAEA4F25D843C7
C:\WINDOWS\System32\drivers\mouhid.sys 7BD6E7F7C9001AB21B8362CFFEE80B25
C:\WINDOWS\System32\drivers\mountmgr.sys F5BDAEE4B7D369D4C74668DCFBA3FF10
C:\WINDOWS\System32\drivers\mpsdrv.sys 30844BD376F9D01E62C820BEF446F1F8
C:\WINDOWS\system32\drivers\mrxdav.sys 25D32BE04FE0A23FDF57FD5382757672
C:\WINDOWS\System32\DRIVERS\mrxsmb.sys E671EDAB0726E05ECEF4058B4CD73C4D
C:\WINDOWS\System32\DRIVERS\mrxsmb10.sys D4D12BC29DE0F09280868FDCA65B3474
C:\WINDOWS\System32\DRIVERS\mrxsmb20.sys 93A77008A8932FC84A173C4E97E52874
C:\WINDOWS\System32\drivers\bridge.sys 74C9D21523DAE0C18F413C196DF0058A
C:\Windows\System32\Drivers\Msfs.sys F01B849D9D4A8CEAF32D4FDBD0B83C92
C:\WINDOWS\System32\drivers\msgpiowin32.sys 22ECD8F5D1DFADF2011BBB1700CB871D
C:\WINDOWS\System32\drivers\mshidkmdf.sys FD870F6968A145E4D2BA8A8842686B03
C:\WINDOWS\System32\drivers\mshidumdf.sys 30364757963A028CE5DF0FBAAC270173
C:\WINDOWS\System32\drivers\msisadrv.sys 6BB0FEDDAE7135FA37FFAFF4D9E0E876
C:\WINDOWS\system32\DRIVERS\MSKSSRV.sys 13D614E6B51ECF36746C48CE829FA7F6
C:\WINDOWS\System32\drivers\mslldp.sys 642CDE46351D5D2D90311E77072AB46D
C:\WINDOWS\system32\DRIVERS\MSPCLOCK.sys F2302A5CE63CA7673200FAFCEEEDB6AF
C:\WINDOWS\system32\DRIVERS\MSPQM.sys 6114512EA26E835BA522C63635429DB5
C:\Windows\System32\Drivers\MsRPC.sys AA538E16E644D00E3BA5349BBA9598EC
C:\WINDOWS\System32\drivers\mssecflt.sys 7ACFE7435317E791FF9EED2F49B402F2
C:\WINDOWS\System32\drivers\mssmbios.sys 0543BEFD41EC4D25C7F7CF36409CEC7D
C:\WINDOWS\system32\DRIVERS\MSTEE.sys C1569E4DB8EFE3617847BF041A3C842F
C:\WINDOWS\System32\drivers\MTConfig.sys 130B16970154BA9876B09E5C4BAC63BE
C:\WINDOWS\System32\Drivers\mup.sys 15D987C8F6CCD4AC94E070C5986762CB
C:\WINDOWS\System32\drivers\mvumis.sys 3D2C5B4995CA0751D32DEA0DE9FDFE44
C:\WINDOWS\System32\DRIVERS\nwifi.sys DB31EBB04C871F422C36A0962DA7D38B
C:\WINDOWS\System32\drivers\ndfltr.sys 629CB21AC49C8867E0F29DF1C16DB7B4
C:\WINDOWS\System32\drivers\ndis.sys D5564FC81350458ED570528C4E3B1CCF
C:\WINDOWS\System32\drivers\ndiscap.sys 6DD605338FAAF6BA17662AA874E0D162
C:\WINDOWS\System32\drivers\NdisImPlatform.sys E34196F285F8B8879E1FF36C31F7179E
C:\WINDOWS\system32\DRIVERS\ndisrd.sys 8DC4CF52E4BA1C85EDEF32A8F9444EDA
C:\WINDOWS\System32\DRIVERS\ndistapi.sys 1FAD2398673F30CEC616B89C46B7DCBA
C:\WINDOWS\System32\drivers\ndisuio.sys AEB8ECBE66CC46854066CB1F5623E179
C:\WINDOWS\System32\drivers\NdisVirtualBus.sys 7340104C2BF2F126714F7CDE85E63610
C:\WINDOWS\System32\drivers\ndiswan.sys 07ADC1F8DCBEB8104D75129B11584B8C
C:\WINDOWS\System32\DRIVERS\ndiswan.sys 07ADC1F8DCBEB8104D75129B11584B8C
C:\WINDOWS\System32\DRIVERS\NDProxy.sys 78A12E3DF035B5D054986949B19BE43C
C:\WINDOWS\System32\drivers\Ndu.sys 04C8859355C1DC9C0FA198D1894D71C2
C:\WINDOWS\System32\drivers\NetAdapterCx.sys 6C76780A01FC2B885BD6E957B5C36B02
C:\WINDOWS\System32\drivers\netbios.sys 5D1513BD6430307C9DB86C6E351372ED
C:\WINDOWS\System32\DRIVERS\netbt.sys 6FEBB0A847FFD5F057B9AC8889F1B9A7
C:\WINDOWS\System32\drivers\Netwbw02.sys 57B8053A3C2A01A2C2A2DB2577D653DB
C:\Windows\System32\Drivers\Npfs.sys 001CBD7A2CD45C4EB39C01C3C677EF73
C:\WINDOWS\System32\drivers\npsvctrig.sys 90F5DC9802AAA00CD0B6E2AD9E7FFADC
C:\WINDOWS\System32\drivers\nsiproxy.sys 0C6218321A09A7B51BA7FFAFBA4CCB21
C:\Windows\System32\Drivers\NTFS.sys DB69C6DA8B3DDFDC547D455CA23A8250
C:\Program Files (x86)\MSI\Super Charger\NTIOLib_X64.sys 23CF3DA010497EB2BF39A5C5A57E437C
C:\Program Files (x86)\MSI\Fast Boot\NTIOLib_X64.sys 992DED5B623BE3C228F32EDB4CA3F2D2
C:\Program Files (x86)\MSI\Command Center\DDR\NTIOLib_X64.sys 6CCE5BB9C8C2A8293DF2D3B1897941A2
C:\MSI\Smart Utilities\NTIOLib_X64.sys C6F8983DD3D75640C072A8459B8FA55A
C:\Windows\System32\Drivers\Null.sys 6E6DD6F9DD2A034CF85E94047DBDB992
C:\WINDOWS\System32\drivers\nvraid.sys D261DF41F0840F734856A2B4F5E072C7
C:\WINDOWS\System32\drivers\nvstor.sys 23B702B555EB0436B9DAA0BC63DA65CE
C:\WINDOWS\System32\drivers\parport.sys 6B81BF7853D161DB8AC62CD8B9C2DE6B
C:\WINDOWS\System32\drivers\partmgr.sys CDBD029BAEC8D09F6FBD404632D9AF28
C:\WINDOWS\System32\drivers\pci.sys 29AF16726F4DD84376ECA85AB6AFF2C6
C:\WINDOWS\System32\drivers\pciide.sys 214DCC87E3898F738075D1341252A552
C:\WINDOWS\System32\drivers\pcmcia.sys AED76A3333B3A31536E430020E0226FC
C:\WINDOWS\System32\drivers\pcw.sys E63FB38B6E75B39467492FBAD2CD512A
C:\WINDOWS\System32\drivers\pdc.sys 9EA203A07EFA6D74F07F32EF0DAB5CA6
C:\WINDOWS\System32\drivers\peauth.sys 1509A77F840AA9E72CF8247D0CF2FBDE
C:\WINDOWS\System32\drivers\percsas2i.sys 540116170E2135FCD5DDE77702166B67
C:\WINDOWS\System32\drivers\percsas3i.sys 8356F87553BF49C703CF382033815898
C:\WINDOWS\System32\drivers\raspptp.sys 5645B9D9788CCA2C88B9534996ED2D6D
C:\WINDOWS\System32\drivers\processr.sys 372913E12677A8CBBBABDD8311894F9D
C:\WINDOWS\System32\drivers\pacer.sys FC98407B85A31161851FDE245517574F
C:\WINDOWS\system32\drivers\qwavedrv.sys 819602BBBFDB0BD46DEA3715BF0DD452
C:\WINDOWS\System32\DRIVERS\rasacd.sys CDF47037A0939F56D11F699629C276AD
C:\WINDOWS\System32\drivers\AgileVpn.sys 28C2EA278070EE12701D0EDF8CB0EC36
C:\WINDOWS\System32\drivers\rasl2tp.sys 17E565710172ED71B8531D8822E1C5D1
C:\WINDOWS\System32\DRIVERS\raspppoe.sys 9387DF155233D45D4E010F4F2FB52A57
C:\WINDOWS\System32\drivers\rassstp.sys F0F4EEDEEBEE7A4244FAFB96A16B5712
C:\WINDOWS\System32\DRIVERS\rdbss.sys AF6963414B820B7C45578ED3300438A7
C:\WINDOWS\System32\drivers\rdpbus.sys 79A415E6FA915EFC00297DAB16EC2635
C:\WINDOWS\System32\drivers\rdpdr.sys 7135785C21CA79D270D11037C43D3F19
C:\WINDOWS\System32\drivers\rdpvideominiport.sys 97A61A3CB2B5CB4FC32B3224EF333448
C:\WINDOWS\System32\drivers\rdyboost.sys 69BB204AE07EE84ECFAB1BF13C4BD04B
C:\Windows\System32\Drivers\ReFSv1.sys 940D6F5A2B0A61EE4170DF84F6C95C20
C:\WINDOWS\System32\drivers\rfcomm.sys E82F3B1918C6A5FE6EB761CDF1E772AF
C:\WINDOWS\System32\drivers\rspndr.sys 5FF28F097C9699097B473F8FC7C1AA7D
C:\WINDOWS\System32\drivers\rt640x64.sys D23AF14A8C26855B3D6CB5F8E32B08F3
C:\Program Files (x86)\MSI Afterburner\RTCore64.sys 0D992B69029D1F23A872FF5A3352FB5B
C:\WINDOWS\System32\drivers\vms3cap.sys B5DAEE69BACA64D2BB004568E22D8756
C:\WINDOWS\System32\drivers\sbp2port.sys 5E73FB63E2DBC75FE0C17DEB0010CE0E
C:\WINDOWS\System32\DRIVERS\scfilter.sys 3D9A82B03C92D1FEC42CB171D6F57778
C:\WINDOWS\System32\drivers\scmbus.sys 9055ADDFBA4C8B914C914CE693B55C0A
C:\WINDOWS\System32\drivers\scmdisk0101.sys B6F2363584E62960846F7C3F00124A4F
C:\WINDOWS\System32\drivers\sdbus.sys 7C3D10BEC8B0DBA00A78C78EB10B3AE2
C:\WINDOWS\System32\drivers\sdstor.sys 120DFCB71D6C502613A9E2D50E16850C
C:\WINDOWS\System32\drivers\SerCx.sys 401D706DDC0A7AF18C3DD228ADF74551
C:\WINDOWS\System32\drivers\SerCx2.sys 7084D11083F0CDCA8B5C76F9846ABF5D
C:\WINDOWS\System32\drivers\serenum.sys 3FF478A8ED32A83C36581425F6282B6C
C:\WINDOWS\System32\drivers\serial.sys 92509187AA171A80521528B36F753E1D
C:\WINDOWS\System32\drivers\sermouse.sys 433D38FF6D08B993847EA2A10EB8CB52
C:\WINDOWS\System32\drivers\sfloppy.sys 697D3EE0740AEAB62B66ABCA1C83D13B
C:\WINDOWS\System32\drivers\SiSRaid2.sys A34CE1830E45DA98932295FDE4B7908A
C:\WINDOWS\System32\drivers\sisraid4.sys A7B5C670770E908DA5FEF5BF1136E933
C:\WINDOWS\System32\drivers\spaceport.sys C994DF90427103CCB80F893FFD2B1CE8
C:\WINDOWS\System32\drivers\SpbCx.sys E03264C4C25B568F92ED1656AD541E64
C:\WINDOWS\System32\DRIVERS\srv.sys E83830BB74AE8CBECEA0ECD94DE436F9
C:\WINDOWS\System32\DRIVERS\srv2.sys 55CA5329D1ADEB8F8034045930147AE4
C:\WINDOWS\System32\DRIVERS\srvnet.sys F13EE0DB1FB1D6946AC3228D7EFCFC8F
C:\WINDOWS\system32\DRIVERS\ssudmdm.sys 592FF34A2FD6C6351B8A3AA76B2C0A9E
C:\WINDOWS\System32\drivers\stexstor.sys 29D26E1347AE1BBD4201014E19880B2C
C:\WINDOWS\system32\DRIVERS\serscan.sys B11724BFE7DA1BA55903B4D849415F1A
C:\WINDOWS\System32\drivers\storahci.sys 53EB8CE34B55A1EE63424C8DB7388BFC
C:\WINDOWS\System32\drivers\vmstorfl.sys C5E0ACE4771F5575D9D5B457ABF3AD03
C:\WINDOWS\System32\drivers\stornvme.sys B66D8C75C9BC59D637177AB3B1C569A6
C:\WINDOWS\System32\drivers\storqosflt.sys BEBF85EB4D90E6996047DA027D0ED26E
C:\WINDOWS\System32\drivers\storufs.sys 8E73037A6F8938475692FFCC26EBF385
C:\WINDOWS\System32\drivers\storvsc.sys 9D9DED47DA10E845EFF2DD57C94C809B
C:\WINDOWS\System32\drivers\swenum.sys 505E0C40B5D0ADDCBB414640F59BD2E0
C:\WINDOWS\System32\drivers\Synth3dVsc.sys 32F46FB0F290D16DAA452B289C985795
C:\WINDOWS\System32\drivers\tcpip.sys 4F25E481124059CC593B4C68BC485640
C:\WINDOWS\System32\drivers\tcpip.sys 4F25E481124059CC593B4C68BC485640
C:\WINDOWS\System32\drivers\tcpipreg.sys 8DBB1BE20C36E6D19BCC89EEA00B953C
C:\WINDOWS\system32\DRIVERS\tdx.sys 9D2DD64A0B51C56285512DC9454340F6
C:\WINDOWS\System32\drivers\terminpt.sys 06130AFFECEB94525FC2352936576B70
C:\WINDOWS\System32\drivers\tpm.sys 46171262D0E806779DEEDFCAB2F830CC
C:\WINDOWS\System32\drivers\TsUsbFlt.sys A6F4025664C9D4BC2A9EDAB4092706D7
C:\WINDOWS\System32\drivers\TsUsbGD.sys 37A96AD493E110C0BF1EE0AC0F9E7DBD
C:\WINDOWS\System32\drivers\tsusbhub.sys 5A91FDBA4D3FCB56DAEB8C091B3EB8E1
C:\WINDOWS\System32\drivers\tunnel.sys 79E264287F17D56D768440B0270466DE
C:\WINDOWS\System32\drivers\uaspstor.sys AA65954F512BA097DD190790876DD991
C:\WINDOWS\System32\Drivers\UcmCx.sys AB6268022C3A5B529075A39C33904DA6
C:\WINDOWS\System32\Drivers\UcmTcpciCx.sys 7ED2EDA43D21C7A5F589A7960E265C52
C:\WINDOWS\System32\drivers\UcmUcsi.sys 169351463039B45F5CDED9768879F712
C:\WINDOWS\System32\drivers\ucx01000.sys 08A9E3AD29B215484FBB68CDC175DF3A
C:\WINDOWS\System32\drivers\udecx.sys DA70AEE267491AA56BC63AA0C0C96CA2
C:\WINDOWS\System32\DRIVERS\udfs.sys FBC5ECF6D5A868D0B116C2DBB02B8168
C:\WINDOWS\System32\drivers\UEFI.sys B918E40FAA9CD118CCA4AD388B748C98
C:\WINDOWS\system32\drivers\UevAgentDriver.sys 166B17AE1DD24D8BA8CA474C7C31148F
C:\WINDOWS\System32\drivers\ufx01000.sys 0FD75222C1AD2687AB365BEBEA400DD4
C:\WINDOWS\System32\drivers\UfxChipidea.sys C1A78C53E01C641AE41BFA65797819F5
C:\WINDOWS\System32\drivers\ufxsynopsys.sys 767307212110EBEFB93EC9A5BE9E85B9
C:\WINDOWS\System32\drivers\umbus.sys DC460AAA18CA2342FBBFB2DF9B044472
C:\WINDOWS\System32\drivers\umpass.sys C3CF0377917ECE6D65D7623E1E61568F
C:\WINDOWS\System32\drivers\urschipidea.sys 6B46FC140C9AF68E6E7697D66D59CB4D
C:\WINDOWS\System32\drivers\urscx01000.sys B4402E7F0923F660270442CE76877ABE
C:\WINDOWS\System32\drivers\urssynopsys.sys 9DD431F1B94789CFB527E5D19261F124
C:\WINDOWS\System32\drivers\usbccgp.sys C87E32B90F085970D9637FBAD45EF6FE
C:\WINDOWS\System32\drivers\usbcir.sys 0B663856474AC41924D9E9112203858F
C:\WINDOWS\System32\drivers\usbehci.sys F83D2250256203AC5DA5E8601C1AFDD7
C:\WINDOWS\System32\drivers\usbhub.sys 7FFD26742321919590ED77FCA556D65F
C:\WINDOWS\System32\drivers\UsbHub3.sys 7A749B2863B5561BE34B39E8E249AD8F
C:\WINDOWS\System32\drivers\usbohci.sys D2109F1F4FEBF1DAC415CDC5DE876479
C:\WINDOWS\System32\drivers\usbprint.sys 29C9572F2D061CFC3C0BD48A3163E343
C:\WINDOWS\system32\DRIVERS\usbscan.sys 2EC7B2C8123236B1233A77281D378DF7
C:\WINDOWS\System32\drivers\usbser.sys 429477D6DEF3321FF7D3EF23CAAADA00
C:\WINDOWS\System32\drivers\USBSTOR.SYS 0CC16F7B91C57AE9A4E44425A295FDAA
C:\WINDOWS\System32\drivers\usbuhci.sys C917D09064CDBD18F75ADC9B2C48F847
C:\WINDOWS\System32\drivers\USBXHCI.SYS 95BCCEFBC40D06484CF16144FE79B8A5
C:\WINDOWS\System32\drivers\vdrvroot.sys 0CBDE344FB48E42D78E29469F202ADBC
C:\WINDOWS\System32\drivers\VerifierExt.sys 723195568C8755CAD57F7933C5F2C5C2
C:\WINDOWS\System32\drivers\vhdmp.sys 3BB8D153A9A514EC9FFCB586251A1925
C:\WINDOWS\System32\drivers\vhf.sys 7929228F0E8B0C2FA0495A17A4FC27F6
C:\WINDOWS\System32\drivers\vmbus.sys AEE432ED868831B1F068E373598F6D93
C:\WINDOWS\System32\drivers\VMBusHID.sys 9444B23FC694B5F90F21B0FC7F10D8DD
C:\WINDOWS\System32\drivers\vmgid.sys 4D0287F566B36536DD812A54C015FC4A
C:\WINDOWS\System32\drivers\volmgr.sys 29075915F9BDC3437F8BED71C067D399
C:\WINDOWS\System32\drivers\volmgrx.sys 6BDB6CE6D2D9E3D3F28F1C97E12B62E2
C:\WINDOWS\System32\drivers\volsnap.sys BF2546583BB75F01DDA60A7921DFB230
C:\WINDOWS\System32\drivers\volume.sys AC2E20A74D09D24485BE8396CE04F07B
C:\WINDOWS\System32\drivers\vpci.sys 92F6E3E6D3F1795263EB34B37F74AEF7
C:\WINDOWS\System32\drivers\vsmraid.sys FD9BCB8920973CEAD4D49DC7A6D8A618
C:\WINDOWS\System32\drivers\vstxraid.sys 0C111F220798CCE80484026E06822379
C:\WINDOWS\System32\drivers\vwifibus.sys 607639716E9DB1CEF4E18B5B229293B4
C:\WINDOWS\System32\drivers\vwififlt.sys B1ED64E628763148BF84FBE23F2AD711
C:\WINDOWS\System32\drivers\vwifimp.sys 59920894C38A827091A06AF559834E47
C:\WINDOWS\System32\drivers\wacompen.sys 55D00B785A7587F4263D125817871283
C:\WINDOWS\System32\DRIVERS\wanarp.sys CEF3D306C09BEC1A800E9B4A06F859F6
C:\WINDOWS\System32\DRIVERS\wanarp.sys CEF3D306C09BEC1A800E9B4A06F859F6
C:\WINDOWS\system32\drivers\wcifs.sys E330144B97D493AA886000DCAAA8DAF5
C:\WINDOWS\system32\drivers\wcnfs.sys AEA1093B751339267D8C8C1EF3D669CF
C:\WINDOWS\system32\drivers\WdBoot.sys D520B1B849B6D4D707AB31722B952C2D
C:\WINDOWS\System32\drivers\Wdf01000.sys 5030C76047D756263093A47B82970868
C:\WINDOWS\system32\drivers\WdFilter.sys 29FF9199EDEB4F5470BB134D1A2563D2
C:\WINDOWS\System32\DRIVERS\wdiwifi.sys 8CB606A3057355FD5A9DBDD1A0AC94EF
C:\WINDOWS\System32\Drivers\WdNisDrv.sys 17CF416CFF408190F5A4CBD79AB12E55
C:\WINDOWS\System32\drivers\wfplwfs.sys E1785942AC51FEE6826CDF02075C5AA9
C:\WINDOWS\System32\drivers\wimmount.sys 0CF79A0EACFFBB75A50A469A27696D02
C:\WINDOWS\System32\drivers\WindowsTrustedRT.sys 0DE131733317EB4BE67028366B0CAAC6
C:\WINDOWS\System32\drivers\WindowsTrustedRTProxy.sys 92EB5D38BDF10C790450F3E46BF93A0E
C:\WINDOWS\System32\drivers\winmad.sys F95DE20312ACCA7761446DE152BD1F7C
C:\WINDOWS\System32\drivers\WinUSB.SYS 4EFB346BFDAEEB29316AA52BBB9852B1
C:\WINDOWS\System32\drivers\winverbs.sys 8B9AFF5F08E66A6F1F1063DEC9457FB6
C:\WINDOWS\System32\drivers\wmiacpi.sys 6F4F4F5A007D1710BD76FB311DA97C07
C:\Windows\System32\Drivers\Wof.sys 43C8D087B31C592163B33A4BDA540E40
C:\WINDOWS\System32\drivers\WpdUpFltr.sys 75A9284F01FE7CB1A7D5EAE5C1EB4F33
C:\WINDOWS\system32\drivers\ws2ifsl.sys 36D7B73ADC3E10607ED6EC874AFB5D1E
C:\WINDOWS\System32\drivers\WSDPrint.sys 696EC2EAA2A42A137CCBB9A84D6917C0
C:\WINDOWS\System32\drivers\WudfPf.sys AED7FE551E8672B824A56324076183EB
C:\WINDOWS\System32\drivers\WudfRd.sys CEFAB17FD7DFCFA515626C306262E89D
C:\WINDOWS\system32\DRIVERS\WUDFRd.sys CEFAB17FD7DFCFA515626C306262E89D
C:\WINDOWS\system32\DRIVERS\WUDFRd.sys CEFAB17FD7DFCFA515626C306262E89D
C:\WINDOWS\System32\drivers\xboxgip.sys 9627BBAA50878F6833A6A7843EE3B1D9
C:\WINDOWS\System32\drivers\xinputhid.sys 63088A3361D9A308F328F11E9099DD87

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-02-17 19:36 - 2017-02-17 19:36 - 00001588 _____ C:\Users\Bao\Desktop\ZHPFixReport.txt
2017-02-17 19:33 - 2017-02-17 19:33 - 03521617 _____ (Nicolas Coolman ) C:\Users\Bao\Desktop\ZHPFix.exe
2017-02-17 19:33 - 2017-02-17 19:33 - 00001918 _____ C:\Users\Public\Desktop\ZHPFix.lnk
2017-02-17 19:33 - 2017-02-17 19:33 - 00001912 _____ C:\Users\Bao\Desktop\ScriptZHPFix.txt
2017-02-17 19:33 - 2017-02-17 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ZHP
2017-02-17 19:33 - 2017-02-17 19:33 - 00000000 ____D C:\Program Files (x86)\ZHPFix
2017-02-17 18:55 - 2017-02-17 18:55 - 02664960 _____ C:\Users\Bao\Desktop\ZHPDiag3 (1).exe
2017-02-17 18:06 - 2017-02-17 18:06 - 00000848 _____ C:\Users\Bao\Desktop\JRT.txt
2017-02-17 18:05 - 2017-02-17 18:05 - 01663040 _____ (Malwarebytes) C:\Users\Bao\Desktop\JRT.exe
2017-02-17 18:03 - 2017-02-17 18:03 - 00001401 _____ C:\Users\Bao\Desktop\zoek-results.txt
2017-02-17 18:01 - 2017-02-17 18:15 - 00001286 _____ C:\runcheck.txt
2017-02-17 18:01 - 2017-02-17 18:01 - 01309184 _____ C:\Users\Bao\Desktop\zoek.exe
2017-02-17 18:01 - 2017-02-17 18:01 - 00000000 ____D C:\zoek_backup
2017-02-17 17:59 - 2017-02-17 17:59 - 00000343 _____ C:\Users\Bao\Desktop\ScriptZoek1.txt
2017-02-17 16:00 - 2017-02-17 16:00 - 00005062 _____ C:\Users\Bao\Desktop\rk_8B55.tmp.txt
2017-02-17 15:10 - 2017-02-17 15:10 - 00028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2017-02-17 15:09 - 2017-02-17 16:23 - 00000000 ____D C:\ProgramData\RogueKiller
2017-02-17 15:08 - 2017-02-17 15:09 - 25983048 _____ C:\Users\Bao\Desktop\RogueKillerX64.exe
2017-02-17 15:07 - 2017-02-17 15:07 - 00002834 _____ C:\Users\Bao\Desktop\AdwCleaner[S19].txt
2017-02-17 15:05 - 2017-02-17 15:05 - 00001816 _____ C:\Users\Bao\Desktop\ZHPCleaner.txt
2017-02-17 13:10 - 2017-02-17 13:10 - 00000801 _____ C:\WinChk.txt
2017-02-17 13:10 - 2017-02-17 13:10 - 00000801 _____ C:\Users\Bao\Desktop\WinChk.txt
2017-02-17 13:08 - 2017-02-17 19:39 - 00055102 _____ C:\Users\Bao\Desktop\FRST.txt
2017-02-17 13:08 - 2017-02-17 13:07 - 00315000 _____ C:\Users\Bao\Desktop\winchk_2.0.exe
2017-02-17 13:07 - 2017-02-17 13:07 - 00315000 _____ C:\Users\Bao\Downloads\winchk_2.0.exe
2017-02-17 12:56 - 2017-02-17 12:56 - 00000000 ____D C:\Users\Bao\AppData\Local\GlassWire
2017-02-17 12:55 - 2017-02-17 12:55 - 00001970 _____ C:\Users\Public\Desktop\GlassWire.lnk
2017-02-17 12:55 - 2017-02-17 12:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GlassWire
2017-02-17 12:55 - 2017-02-17 12:55 - 00000000 ____D C:\ProgramData\GlassWire
2017-02-17 12:55 - 2017-02-17 12:55 - 00000000 ____D C:\Program Files (x86)\GlassWire
2017-02-17 12:55 - 2015-05-29 05:30 - 00008392 _____ C:\WINDOWS\system32\Drivers\gwdrv.cat
2017-02-17 12:55 - 2015-05-29 05:15 - 00033152 _____ (SecureMix LLC) C:\WINDOWS\system32\Drivers\gwdrv.sys
2017-02-17 12:54 - 2017-02-17 12:54 - 30715264 _____ (SecureMix LLC) C:\Users\Bao\Downloads\GlassWireSetup.exe
2017-02-17 12:20 - 2017-02-17 12:20 - 00076547 _____ C:\Users\Bao\Desktop\surveillance glycémique.pdf
2017-02-17 10:51 - 2017-02-17 10:51 - 00281230 _____ C:\Users\Bao\Downloads\S3704a (1).pdf
2017-02-17 10:32 - 2017-02-17 10:32 - 00281240 _____ C:\Users\Bao\Downloads\S3704a.pdf
2017-02-17 10:07 - 2017-02-17 19:39 - 00000000 ____D C:\FRST
2017-02-17 10:06 - 2017-02-17 10:07 - 02422272 _____ (Farbar) C:\Users\Bao\Desktop\FRST64.exe
2017-02-17 09:31 - 2017-02-17 18:57 - 00159954 _____ C:\Users\Bao\Desktop\ZHPDiag.txt
2017-02-17 09:27 - 2017-02-17 16:19 - 00001351 _____ C:\Users\Bao\Desktop\mbam.txt
2017-02-17 09:17 - 2017-02-17 09:18 - 00002430 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-02-17 09:17 - 2017-02-17 09:17 - 00002342 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-02-16 21:26 - 2017-02-16 21:26 - 03087864 _____ (Google) C:\Users\Bao\Desktop\chrome_cleanup_tool.exe
2017-02-16 21:15 - 2017-02-17 09:27 - 00000000 ____D C:\Users\Bao\AppData\Local\Google
2017-02-16 20:16 - 2017-02-17 09:16 - 00001730 _____ C:\Users\Remplacant\Desktop\ZHPCleaner.txt
2017-02-16 20:14 - 2017-02-16 20:14 - 01129376 _____ (Google Inc.) C:\Users\Remplacant\Desktop\ChromeSetup.exe
2017-02-16 20:13 - 2017-02-16 20:13 - 04015056 _____ C:\Users\Remplacant\Desktop\adwcleaner_6.043.exe
2017-02-16 20:12 - 2017-02-17 09:14 - 00141025 _____ C:\Users\Remplacant\Desktop\ZHPDiag.txt
2017-02-16 20:12 - 2017-02-16 20:12 - 00000920 _____ C:\Users\Remplacant\Desktop\ZHPCleaner.lnk
2017-02-16 20:11 - 2017-02-17 09:16 - 00000000 ____D C:\Users\Remplacant\AppData\Roaming\ZHP
2017-02-16 20:11 - 2017-02-16 20:11 - 02705920 _____ C:\Users\Remplacant\Desktop\ZHPCleaner.exe
2017-02-16 20:11 - 2017-02-16 20:11 - 00000910 _____ C:\Users\Remplacant\Desktop\ZHPDiag.lnk
2017-02-16 20:10 - 2017-02-16 20:10 - 02705920 _____ C:\Users\Remplacant\Downloads\ZHPCleaner.exe
2017-02-16 20:09 - 2017-02-16 20:09 - 02664960 _____ C:\Users\Remplacant\Desktop\ZHPDiag3.exe
2017-02-16 20:09 - 2017-02-16 20:09 - 00000000 ____D C:\Users\Remplacant\AppData\Roaming\Macromedia
2017-02-16 17:02 - 2017-02-16 17:02 - 01129376 _____ (Google Inc.) C:\Users\Bao\Desktop\ChromeSetup (1).exe
2017-02-16 16:48 - 2017-02-16 16:48 - 02705920 _____ C:\Users\Bao\Downloads\ZHPCleaner.exe
2017-02-16 16:48 - 2017-02-16 16:48 - 00000913 _____ C:\Users\Bao\Desktop\ZHPCleaner.lnk
2017-02-16 15:53 - 2017-02-16 15:53 - 01129376 _____ (Google Inc.) C:\Users\Bao\Downloads\ChromeSetup.exe
2017-02-16 15:17 - 2017-02-17 19:36 - 00000000 ____D C:\Users\Bao\AppData\Roaming\ZHP
2017-02-16 15:17 - 2017-02-17 15:06 - 00000000 ____D C:\AdwCleaner
2017-02-16 15:17 - 2017-02-17 08:58 - 00000903 _____ C:\Users\Bao\Desktop\ZHPDiag.lnk
2017-02-16 15:17 - 2017-02-16 15:17 - 04015056 _____ C:\Users\Bao\Desktop\adwcleaner_6.043.exe
2017-02-16 15:16 - 2017-02-16 15:16 - 02664960 _____ C:\Users\Bao\Desktop\ZHPDiag3.exe
2017-02-16 10:53 - 2017-02-16 10:53 - 01319464 _____ C:\Users\Remplacant\Downloads\RPC6_Toux_long.pdf
2017-02-15 13:27 - 2017-02-15 13:27 - 00001397 _____ C:\Users\Remplacant\Desktop\HPRIM - Raccourci.lnk
2017-02-15 13:23 - 2017-02-17 19:18 - 00000000 ____D C:\Users\Bao\Desktop\HPRIM
2017-02-13 17:35 - 2017-02-13 17:35 - 00249796 _____ C:\Users\Bao\Desktop\cp011-infection-a-helicobacter-pylori-de-ldulte_2015-06.pdf
2017-02-13 15:10 - 2017-02-13 15:10 - 00000000 ____D C:\WINDOWS\system32\RTCOM
2017-02-13 15:10 - 2017-02-13 15:10 - 00000000 ____D C:\WINDOWS\LastGood
2017-02-13 15:09 - 2017-01-05 08:37 - 00532376 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSX64.dll
2017-02-13 15:09 - 2017-01-05 08:37 - 00221968 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSTSH64.dll
2017-02-13 15:09 - 2017-01-05 08:37 - 00209536 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSHP64.dll
2017-02-13 15:09 - 2017-01-05 08:37 - 00166200 _____ (SRS Labs, Inc.) C:\WINDOWS\system32\SRSWOW64.dll
2017-02-13 15:09 - 2017-01-05 08:35 - 00343704 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtlCPAPI64.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 01353824 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTCOM64.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00689872 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00387312 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEP64A.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DHT64.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00321712 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RP3DAA64.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00214832 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEED64A.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00110984 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEL64A.dll
2017-02-13 15:09 - 2017-01-05 08:34 - 00088344 _____ (Dolby Laboratories, Inc.) C:\WINDOWS\system32\RTEEG64A.dll
2017-02-13 15:09 - 2017-01-05 08:32 - 03203584 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtPgEx64.dll
2017-02-13 15:09 - 2017-01-05 08:32 - 03014144 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTSnMg64.cpl
2017-02-13 15:09 - 2017-01-05 08:31 - 02201600 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RCoInstII64.dll
2017-02-13 15:09 - 2017-01-05 08:30 - 00122312 _____ (Real Sound Lab SIA) C:\WINDOWS\system32\CONEQMSAPOGUILibrary.dll
2017-02-13 15:09 - 2017-01-05 02:07 - 09120792 _____ C:\WINDOWS\system32\Drivers\RTAIODAT.DAT
2017-02-13 11:26 - 2017-02-13 11:26 - 00772262 _____ C:\Users\Remplacant\Downloads\AAT-AT-019111041-170213-112245-052 (1).pdf
2017-02-13 11:23 - 2017-02-13 11:23 - 00772262 _____ C:\Users\Remplacant\Downloads\AAT-AT-019111041-170213-112245-052.pdf
2017-02-10 19:56 - 2017-02-10 19:56 - 00003642 _____ C:\WINDOWS\System32\Tasks\CreateExplorerShellUnelevatedTask
2017-02-10 19:54 - 2017-02-10 19:56 - 00001090 _____ C:\DelFix.txt
2017-02-10 15:05 - 2017-02-10 15:05 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-02-10 15:05 - 2017-02-10 15:05 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-02-10 15:05 - 2017-02-10 15:05 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-02-10 15:05 - 2017-02-10 15:05 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-02-10 15:05 - 2017-02-10 15:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-02-10 15:05 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-02-10 15:04 - 2017-02-10 15:04 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-10 15:04 - 2017-02-10 15:04 - 00000000 ____D C:\Program Files\Malwarebytes
2017-02-10 14:40 - 2017-02-10 14:40 - 00000000 ____D C:\Users\Bao\AppData\Roaming\Sun
2017-02-10 09:19 - 2017-02-10 09:19 - 00000000 ____D C:\ProgramData\Nuance
2017-02-09 18:17 - 2017-02-09 18:17 - 00002441 _____ C:\Users\Bao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002588 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype Entreprise 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive Entreprise.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002514 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002499 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002497 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002487 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel 2016.lnk
2017-02-09 18:05 - 2017-02-09 18:05 - 00002437 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher 2016.lnk
2017-02-09 18:03 - 2017-02-10 09:31 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2017-02-09 17:56 - 2017-02-10 09:30 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2017-02-09 17:56 - 2017-02-09 17:56 - 00000000 ____D C:\Program Files\Microsoft Office 15
2017-02-09 17:47 - 2017-02-09 17:47 - 00000000 ____D C:\ProgramData\USOShared
2017-02-09 17:47 - 2017-02-09 17:47 - 00000000 ____D C:\ProgramData\USOPrivate
2017-02-09 17:31 - 2017-02-09 17:31 - 03804976 _____ (Microsoft Corporation) C:\Users\Bao\Desktop\Setup.x86.fr-FR_ProPlusRetail_29QKG-NKY8C-4MVQR-D8DXY-R6Y3P_TX_PR_.exe
2017-02-09 16:58 - 2017-02-09 16:58 - 00000000 ____D C:\Users\Remplacant\AppData\LocalLow\Sun
2017-02-09 16:57 - 2017-02-09 16:58 - 00000000 ____D C:\ProgramData\Oracle
2017-02-09 16:57 - 2017-02-09 16:57 - 00000000 ____D C:\Users\Remplacant\AppData\Roaming\Sun
2017-02-09 16:53 - 2017-02-09 16:54 - 00739392 _____ (Oracle Corporation) C:\Users\Remplacant\Downloads\JavaSetup8u121.exe
2017-02-09 16:40 - 2017-02-09 16:40 - 00003290 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-02-09 15:04 - 2017-02-09 15:04 - 00000000 ____D C:\Users\Bao\AppData\Roaming\LibreOffice
2017-02-06 19:04 - 2017-02-06 19:04 - 00595435 _____ C:\Users\Bao\Desktop\quelles_indications_aujourdhui_pour_la_radio_du_thorax_-_medec.pdf
2017-02-03 16:48 - 2017-02-03 16:48 - 01473292 _____ C:\Users\Bao\Desktop\DOSSIERS PARTAGE-REQUETE WEDA- 2016-anonymisé.pdf
2017-02-02 09:09 - 2017-02-02 09:09 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2017-02-01 16:35 - 2017-02-01 16:35 - 00000000 ____D C:\Program Files\santesocial
2017-02-01 14:29 - 2017-02-17 19:38 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-01 14:27 - 2017-02-01 14:27 - 00000000 ____D C:\WINDOWS\System32\Tasks\Safer-Networking
2017-02-01 14:17 - 2017-02-10 10:41 - 00000000 ____D C:\Program Files\Common Files\AV
2017-02-01 14:17 - 2017-02-01 14:17 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-02-01 14:03 - 2017-02-01 14:03 - 00000302 _____ C:\WINDOWS\SysWOW64\InstallUtil.InstallLog
2017-02-01 14:01 - 2017-02-01 14:01 - 00000000 ____D C:\Users\Bao\AppData\Local\AdvinstAnalytics
2017-02-01 13:55 - 2017-02-01 13:55 - 00000000 ____D C:\WINDOWS\system32\sstmp
2017-02-01 13:55 - 2017-02-01 13:55 - 00000000 ____D C:\Users\Default\AppData\Local\AdvinstAnalytics
2017-02-01 13:55 - 2017-02-01 13:55 - 00000000 ____D C:\Users\Default User\AppData\Local\AdvinstAnalytics
2017-01-31 14:46 - 2017-01-31 14:46 - 01057106 _____ C:\Users\Bao\Documents\test.pdf
2017-01-30 15:40 - 2017-01-30 15:40 - 03137209 _____ C:\WINDOWS\7eefec0fe1a2173a2c5a60d231bfbec9.exe
2017-01-26 09:22 - 2017-01-26 09:22 - 00051137 _____ C:\Users\Bao\Desktop\MAPA-releve.pdf
2017-01-25 09:16 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 09:16 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-02-17 19:39 - 2015-01-24 21:38 - 00000000 ____D C:\Temp
2017-02-17 19:38 - 2016-08-28 13:38 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-02-17 19:38 - 2015-01-24 21:55 - 00000000 ___RD C:\Users\Bao\Google Drive
2017-02-17 19:38 - 2015-01-24 18:43 - 00000000 __SHD C:\Users\Bao\IntelGraphicsProfiles
2017-02-17 19:37 - 2016-08-28 13:44 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-17 19:37 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-02-17 19:19 - 2015-05-15 12:10 - 00000000 ____D C:\Users\Bao\Desktop\scan
2017-02-17 18:22 - 2016-07-16 23:40 - 01736396 _____ C:\WINDOWS\system32\perfh00C.dat
2017-02-17 18:22 - 2016-07-16 23:40 - 00448868 _____ C:\WINDOWS\system32\perfc00C.dat
2017-02-17 18:22 - 2015-08-04 15:52 - 03771244 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-17 18:21 - 2015-05-06 10:12 - 00000000 ____D C:\Users\Bao\.Vidal
2017-02-17 16:28 - 2016-08-28 13:38 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-17 15:27 - 2013-08-22 16:36 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-02-17 14:48 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-17 14:48 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-17 09:17 - 2015-01-24 18:20 - 00000000 ____D C:\Program Files (x86)\Google
2017-02-17 09:13 - 2015-10-08 18:02 - 00000000 ____D C:\Users\Remplacant\AppData\Local\Google
2017-02-17 09:12 - 2015-10-08 18:02 - 00000000 __SHD C:\Users\Remplacant\IntelGraphicsProfiles
2017-02-17 09:04 - 2015-01-24 22:04 - 00000000 ___RD C:\Users\Bao\Desktop\Utilitaires
2017-02-16 21:15 - 2015-01-24 21:55 - 00001796 _____ C:\Users\Bao\Desktop\Google Drive.lnk
2017-02-16 13:19 - 2015-10-08 20:06 - 00000000 ____D C:\Users\Remplacant\Desktop\scan
2017-02-15 09:06 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-13 19:21 - 2015-01-25 01:10 - 00000000 ____D C:\Users\Bao\AppData\Local\Packages
2017-02-13 19:04 - 2016-02-11 18:51 - 00000000 ____D C:\Users\Bao\AppData\Roaming\Telegram Desktop
2017-02-13 15:10 - 2016-08-28 13:38 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-02-13 15:10 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-02-13 15:10 - 2015-01-24 21:12 - 00000000 ___HD C:\Program Files (x86)\Temp
2017-02-13 15:04 - 2015-01-24 22:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2017-02-13 15:04 - 2015-01-24 22:21 - 00000000 ____D C:\Program Files (x86)\MSI
2017-02-11 09:48 - 2015-10-09 11:08 - 00000000 ____D C:\Users\Remplacant\.Vidal
2017-02-10 19:13 - 2016-09-20 09:01 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-02-10 19:13 - 2016-03-09 11:04 - 00000000 ____D C:\Users\Remplacant\AppData\LocalLow\Temp
2017-02-10 16:00 - 2015-05-06 10:12 - 00000000 ____D C:\Program Files (x86)\Vidal Menu
2017-02-10 14:11 - 2016-08-28 14:37 - 00000000 ___DC C:\WINDOWS\Panther
2017-02-10 14:11 - 2015-04-29 09:50 - 00000000 ____D C:\Program Files (x86)\TeamViewer
2017-02-10 14:11 - 2015-01-24 21:33 - 00000000 ____D C:\Users\Bao\AppData\Roaming\DAEMON Tools Lite
2017-02-10 10:41 - 2016-08-28 13:38 - 00344016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-02-09 18:17 - 2015-01-25 01:12 - 00000000 ___RD C:\Users\Bao\OneDrive
2017-02-09 18:05 - 2016-09-27 08:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outils Microsoft Office 2016
2017-02-09 17:56 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2017-02-09 17:31 - 2015-10-30 20:03 - 00000000 ____D C:\WINDOWS\ShellNew
2017-02-09 17:31 - 2015-01-24 23:19 - 00000000 ____D C:\Program Files\Microsoft Office
2017-02-09 17:30 - 2016-07-16 12:47 - 00000000 ____D C:\Program Files\Common Files\System
2017-02-09 17:30 - 2013-08-22 14:25 - 00000076 _____ C:\WINDOWS\win.ini
2017-02-09 16:40 - 2015-10-08 18:03 - 00002462 _____ C:\Users\Remplacant\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-02-09 16:40 - 2015-10-08 18:03 - 00000000 ___RD C:\Users\Remplacant\OneDrive
2017-02-09 16:22 - 2017-01-02 16:36 - 00000000 ____D C:\pyxvital
2017-02-07 19:40 - 2015-05-06 10:11 - 00000000 ____D C:\Program Files (x86)\Vidal Expert
2017-02-06 10:14 - 2016-06-03 10:28 - 00000000 ____D C:\Users\Bao\Desktop\facture telephone
2017-02-02 18:55 - 2015-04-27 10:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Santé Social
2017-02-02 18:52 - 2015-06-08 17:32 - 00000000 ____D C:\Users\Bao\AppData\Local\santesocial
2017-02-02 18:52 - 2010-12-14 16:01 - 00000571 _____ C:\WINDOWS\galss.ini
2017-02-01 17:45 - 2015-10-08 18:03 - 00000000 ____D C:\Users\Remplacant\AppData\Local\santesocial
2017-02-01 17:44 - 2015-10-08 18:02 - 00000000 ____D C:\Users\Remplacant\AppData\Local\Packages
2017-02-01 17:44 - 2015-01-25 01:11 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-02-01 17:20 - 2015-01-24 21:32 - 00000000 ____D C:\ProgramData\DAEMON Tools Lite
2017-02-01 16:35 - 2015-09-03 19:34 - 00000134 _____ C:\Users\Public\Desktop\EspacePRO.url
2017-02-01 16:35 - 2015-04-27 10:40 - 00002031 _____ C:\Users\Public\Desktop\Gestionnaire de la carte CPS.lnk
2017-02-01 16:35 - 2015-04-27 10:39 - 00000000 ____D C:\ProgramData\santesocial
2017-02-01 16:35 - 2015-04-27 10:39 - 00000000 ____D C:\Program Files (x86)\santesocial
2017-02-01 14:40 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\PLA
2017-02-01 14:39 - 2016-08-28 13:42 - 00001576 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2017-02-01 14:39 - 2016-05-09 08:57 - 00002023 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Antivirus Gratuit.lnk
2017-02-01 14:39 - 2016-03-24 11:38 - 00001222 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-02-01 14:39 - 2016-01-14 10:33 - 00002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project 2016.lnk
2017-02-01 14:39 - 2015-11-02 10:30 - 00002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-02-01 14:39 - 2015-04-29 09:50 - 00001040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 10.lnk
2017-02-01 14:39 - 2015-01-24 21:38 - 00000652 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) HD Graphics Control Panel.lnk
2017-02-01 14:38 - 2017-01-02 16:35 - 00002637 _____ C:\Users\Public\Desktop\VitalZen Local.lnk
2017-02-01 14:38 - 2016-09-13 18:02 - 00000279 _____ C:\Users\Bao\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Corbeille.lnk
2017-02-01 14:38 - 2016-06-02 17:22 - 00002264 _____ C:\Users\Bao\Desktop\WhatsApp.lnk
2017-02-01 14:38 - 2015-11-23 13:01 - 00000788 _____ C:\Users\Bao\Desktop\Documents - Raccourci.lnk
2017-02-01 14:38 - 2015-10-05 18:57 - 00001230 _____ C:\Users\Public\Desktop\CardMinder.lnk
2017-02-01 14:38 - 2015-10-01 13:23 - 00002631 _____ C:\Users\Public\Desktop\Weda Synchro.lnk
2017-02-01 14:38 - 2015-09-03 19:20 - 00002196 _____ C:\Users\Public\Desktop\EspacePRO pour Internet Explorer.lnk
2017-02-01 14:38 - 2015-08-04 17:55 - 00002218 _____ C:\Users\Public\Desktop\ScanSnap Organizer.lnk
2017-02-01 14:38 - 2015-04-29 09:50 - 00001028 _____ C:\Users\Public\Desktop\TeamViewer 10.lnk
2017-02-01 14:38 - 2015-01-26 17:50 - 00001098 _____ C:\Users\Bao\Desktop\MSI Afterburner.lnk
2017-02-01 14:38 - 2015-01-25 01:10 - 00000916 _____ C:\Users\Bao\Desktop\Downloads.lnk
2017-02-01 14:38 - 2015-01-24 22:38 - 00000707 _____ C:\Users\Bao\Desktop\download - Raccourci.lnk
2017-02-01 14:28 - 2016-08-28 13:44 - 00003586 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2017-02-01 14:28 - 2016-08-28 13:44 - 00003462 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2017-02-01 13:59 - 2016-09-15 08:20 - 00000000 ____D C:\home
2017-02-01 13:59 - 2015-04-27 10:44 - 00000000 ____D C:\pyxvital 0
2017-02-01 13:59 - 2015-01-26 17:50 - 00000000 ____D C:\Program Files (x86)\MSI Afterburner
2017-02-01 13:59 - 2015-01-24 23:51 - 00000000 ____D C:\Program Files (x86)\Creative
2017-02-01 13:59 - 2015-01-24 18:43 - 00000000 ____D C:\Intel
2017-02-01 13:55 - 2015-05-21 10:43 - 00000000 ____D C:\Program Files (x86)\APICEM
2017-01-25 16:12 - 2016-08-28 13:39 - 00000000 ____D C:\Users\Bao
2017-01-25 10:47 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp

==================== Fichiers à la racine de certains dossiers =======

2015-10-09 11:25 - 2015-10-09 11:25 - 0000017 _____ () C:\Users\Bao\AppData\Local\resmon.resmoncfg

Certains fichiers dans TEMP:
====================
2017-02-17 18:21 - 2017-02-17 18:21 - 0696832 _____ () C:\Users\Bao\AppData\Local\Temp\sqlite-3.8.10.1-705b3692-48fa-4ad8-9bf2-1dc7bb616399-sqlitejdbc.dll
2017-02-11 09:48 - 2017-02-11 09:48 - 0696832 _____ () C:\Users\Remplacant\AppData\Local\Temp\sqlite-3.8.10.1-823a5ec1-5b5d-48d9-a375-8824fbfffd69-sqlitejdbc.dll
2017-02-10 20:07 - 2017-02-10 20:07 - 0696832 _____ () C:\Users\Remplacant\AppData\Local\Temp\sqlite-3.8.10.1-9ba2e362-81fe-4c4f-96f4-9a02c06f3eb3-sqlitejdbc.dll
2017-02-10 20:08 - 2017-02-10 20:08 - 0695808 _____ () C:\Users\Remplacant\AppData\Local\Temp\sqlite-3.8.11-0a015c66-38f8-4f0a-9d64-a57291462dc7-sqlitejdbc.dll
2017-02-10 20:08 - 2017-02-10 20:08 - 0695808 _____ () C:\Users\Remplacant\AppData\Local\Temp\sqlite-3.8.11-39af377a-6317-46f9-8c44-35435fa67691-sqlitejdbc.dll
2017-02-10 20:08 - 2017-02-10 20:08 - 0695808 _____ () C:\Users\Remplacant\AppData\Local\Temp\sqlite-3.8.11-82751744-c2fa-4be7-93dc-9a4b2ba9b490-sqlitejdbc.dll

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-02-13 15:18

==================== Fin de FRST.txt ============================