cjoint

Publicité


Publicité

Format du document : text/plain

Prévisualisation

ÿþOTL logfile created on: 5/6/2017 17:01:48 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\DOM\Downloads
Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.11.9600.18638)
Locale: 0000040c | Country: France | Language: FRA | Date Format: M/d/yyyy

3.13 Gb Total Physical Memory | 0.62 Gb Available Physical Memory | 19.85% Memory free
6.55 Gb Paging File | 3.63 Gb Available in Paging File | 55.49% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 931.41 Gb Total Space | 694.79 Gb Free Space | 74.60% Space Free | Partition Type: NTFS
Drive E: | 931.51 Gb Total Space | 239.13 Gb Free Space | 25.67% Space Free | Partition Type: NTFS
Drive I: | 931.51 Gb Total Space | 720.61 Gb Free Space | 77.36% Space Free | Partition Type: NTFS
Drive J: | 2794.39 Gb Total Space | 1183.39 Gb Free Space | 42.35% Space Free | Partition Type: NTFS

Computer Name: DOM-PC | User Name: DOM | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - [2031/11/11 15:50:55 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2017/05/06 16:59:55 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\DOM\Downloads\OTL.exe
PRC - [2017/05/05 17:10:57 | 000,521,160 | ---- | M] (Mozilla Corporation) -- C:\Program Files\Mozilla Firefox\firefox.exe
PRC - [2017/05/03 22:21:34 | 000,504,440 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper.exe
PRC - [2017/05/03 22:21:33 | 006,462,072 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps.exe
PRC - [2017/05/03 22:21:22 | 000,450,168 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
PRC - [2017/05/03 22:21:19 | 015,553,656 | ---- | M] (Node.js) -- C:\Program Files\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
PRC - [2017/05/03 22:21:15 | 019,387,512 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\nvstreamsrv\NvStreamUserAgent.exe
PRC - [2017/05/03 22:20:56 | 001,693,816 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
PRC - [2017/05/01 22:53:11 | 000,425,408 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
PRC - [2017/05/01 22:39:42 | 001,828,472 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
PRC - [2017/04/29 00:54:48 | 000,288,848 | ---- | M] (Google Inc.) -- C:\Program Files\Google\Update\1.3.33.5\GoogleCrashHandler.exe
PRC - [2017/03/28 19:24:44 | 003,499,640 | ---- | M] (Adobe Systems Inc.) -- C:\Program Files\Adobe\Acrobat 11.0\Acrobat\acrotray.exe
PRC - [2017/03/17 13:06:22 | 000,099,704 | ---- | M] (TomTom) -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe
PRC - [2017/03/08 05:56:21 | 000,271,360 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
PRC - [2017/02/27 10:55:02 | 002,227,312 | ---- | M] (Adobe Systems, Incorporated) -- C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe
PRC - [2017/02/02 23:21:46 | 000,082,640 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2017/01/17 17:09:22 | 000,274,040 | ---- | M] (Intel Corporation) -- C:\Windows\System32\igfxCUIService.exe
PRC - [2017/01/15 13:10:18 | 008,152,576 | ---- | M] (Realtek Semiconductor) -- C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe
PRC - [2016/12/30 00:58:00 | 000,099,792 | ---- | M] (Actual Tools) -- C:\Program Files\Actual Multiple Monitors\LogonScreenService.exe
PRC - [2016/12/21 15:31:50 | 003,783,744 | ---- | M] (O&O Software GmbH) -- C:\Program Files\OO Software\Defrag\oodtray.exe
PRC - [2016/12/21 15:31:38 | 001,413,696 | ---- | M] (O&O Software GmbH) -- C:\Program Files\OO Software\Defrag\oodag.exe
PRC - [2016/09/08 15:47:54 | 000,071,872 | ---- | M] (Nalpeiron Ltd.) -- C:\Windows\System32\NLSSRV32.EXE
PRC - [2016/09/08 15:47:52 | 000,281,280 | ---- | M] (Nitro Software, Inc.) -- C:\Program Files\Nitro\Pro 11\NitroPDFDriverService11.exe
PRC - [2016/08/29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2016/08/15 14:42:30 | 001,688,864 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Mouse and Keyboard Center\ipoint.exe
PRC - [2016/08/15 14:42:30 | 001,163,552 | ---- | M] (Microsoft Corporation) -- C:\Program Files\Microsoft Mouse and Keyboard Center\itype.exe
PRC - [2016/07/29 11:31:20 | 000,057,344 | ---- | M] (Code Sector) -- C:\Program Files\TeraCopy\TeraCopyService.exe
PRC - [2016/07/22 09:21:08 | 000,754,784 | ---- | M] (DEVGURU Co., LTD.) -- C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
PRC - [2016/05/06 20:23:49 | 002,219,184 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2016/03/31 16:39:28 | 000,411,648 | ---- | M] (Wondershare) -- C:\Program Files\Wondershare\WAF\2.2.0.5\WsAppService.exe
PRC - [2016/02/23 17:51:49 | 001,879,488 | ---- | M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe
PRC - [2015/03/21 10:54:50 | 000,327,680 | ---- | M] () -- C:\Program Files\Serviio\bin\ServiioService.exe
PRC - [2015/01/11 14:36:09 | 006,466,416 | ---- | M] (Crystal Rich Ltd) -- C:\Program Files\USB Safely Remove\USBSafelyRemove.exe
PRC - [2015/01/09 21:26:14 | 001,129,328 | ---- | M] (Crystal Rich Ltd) -- C:\Program Files\USB Safely Remove\USBSRService.exe
PRC - [2014/05/28 10:10:36 | 000,016,232 | ---- | M] (Intel Corporation) -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
PRC - [2013/10/17 11:49:40 | 002,761,760 | ---- | M] (Disc Soft Ltd) -- C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
PRC - [2013/08/27 14:22:40 | 000,595,968 | ---- | M] (Intel(R) Corporation) -- C:\Program Files\Intel\iCLS Client\HeciServer.exe
PRC - [2013/08/01 10:57:22 | 000,954,648 | ---- | M] (ASUSTeK Computer Inc.) -- C:\Program Files\ASUS\AAHM\1.00.22\aaHMSvc.exe
PRC - [2013/05/07 09:45:40 | 000,936,728 | ---- | M] () -- C:\Program Files\ASUS\AXSP\1.02.00\atkexComSvc.exe
PRC - [2012/03/02 17:00:26 | 000,025,504 | ---- | M] (Samsung Electronics Co., Ltd.) -- C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe
PRC - [2011/01/12 16:41:42 | 000,810,144 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe


[color=#E56717]========== Modules (No Company Name) ==========[/color]

MOD - [2017/05/03 22:21:22 | 001,040,504 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
MOD - [2017/05/03 22:20:53 | 065,709,176 | ---- | M] () -- C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
MOD - [2017/05/03 21:28:29 | 002,448,504 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\Downloader.node
MOD - [2017/05/03 21:28:29 | 000,587,200 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
MOD - [2017/05/03 21:28:29 | 000,511,424 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NvBackendAPINode.node
MOD - [2017/05/03 21:28:29 | 000,480,192 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
MOD - [2017/05/03 21:28:29 | 000,463,992 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NvGameStreamAPINode.node
MOD - [2017/05/03 21:28:29 | 000,391,616 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\DriverInstall.node
MOD - [2017/05/03 21:28:29 | 000,386,496 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
MOD - [2017/05/03 21:28:29 | 000,385,472 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NvUtil.node
MOD - [2017/05/03 21:28:29 | 000,364,480 | ---- | M] () -- \\?\C:\Program Files\NVIDIA Corporation\NvNode\NVAccountAPINode.node
MOD - [2017/03/13 16:13:46 | 000,048,296 | ---- | M] () -- C:\Program Files\FileZilla FTP Client\fzshellext.dll
MOD - [2017/01/21 17:27:36 | 012,992,512 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\fb06ad4bc55b9c3ca68a3f9259d826cd\System.Windows.Forms.ni.dll
MOD - [2017/01/21 17:27:30 | 001,626,112 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System.Drawing\1d52bd4ac5e0a6422058a5d62c9f6d9d\System.Drawing.ni.dll
MOD - [2017/01/21 17:27:28 | 010,265,600 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\System\1be7a15b1f33bf22e4f53aaf45518c77\System.ni.dll
MOD - [2017/01/21 17:27:23 | 019,595,776 | ---- | M] () -- C:\Windows\assembly\NativeImages_v4.0.30319_32\mscorlib\7582400666d289c016013ad0f6e0e3e6\mscorlib.ni.dll
MOD - [2013/09/05 01:14:10 | 004,300,456 | ---- | M] () -- C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE14\Cultures\office.odf
MOD - [2012/09/23 20:43:56 | 000,010,240 | ---- | M] () -- C:\Program Files\Adobe\Acrobat 11.0\Acrobat\locale\fr_fr\acrotray.fra


[color=#E56717]========== Services (SafeList) ==========[/color]

SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Spybot -- (SDUpdateService)
SRV - File not found [On_Demand | Stopped] -- C:\Program Files\Spybot -- (SDScannerService)
SRV - File not found [Disabled | Stopped] -- C:\Program Files\IObit\Advanced SystemCare\ASCService.exe -- (AdvancedSystemCareService9)
SRV - [2017/05/05 17:10:56 | 000,175,560 | ---- | M] (Mozilla Foundation) [Disabled | Stopped] -- C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2017/05/03 22:21:28 | 000,450,168 | ---- | M] (NVIDIA Corporation) [Auto | Stopped] -- C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe -- (NvTelemetryContainer)
SRV - [2017/05/03 22:21:22 | 000,450,168 | ---- | M] (NVIDIA Corporation) [On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerNetworkService)
SRV - [2017/05/03 22:21:22 | 000,450,168 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe -- (NvContainerLocalSystem)
SRV - [2017/05/01 22:53:11 | 000,425,408 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe -- (NVDisplay.ContainerLocalSystem)
SRV - [2017/04/11 17:15:56 | 000,271,448 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2017/03/25 20:47:49 | 000,103,936 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IEEtwCollector.exe -- (IEEtwCollectorService)
SRV - [2017/03/17 13:06:22 | 000,099,704 | ---- | M] (TomTom) [Auto | Running] -- C:\Program Files\TomTom HOME 2\TomTomHOMEService.exe -- (TomTomHOMEService)
SRV - [2017/02/27 10:55:02 | 002,227,312 | ---- | M] (Adobe Systems, Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\AdobeGCClient\AGSService.exe -- (AGSService)
SRV - [2017/02/02 23:21:46 | 000,082,640 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2017/01/17 17:09:22 | 000,274,040 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Windows\System32\igfxCUIService.exe -- (igfxCUIService1.0.0.0)
SRV - [2017/01/17 17:09:14 | 000,280,696 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Windows\System32\IntelCpHeciSvc.exe -- (cphs)
SRV - [2016/12/30 00:58:00 | 000,099,792 | ---- | M] (Actual Tools) [Auto | Running] -- C:\Program Files\Actual Multiple Monitors\LogonScreenService.exe -- (amm_LSService)
SRV - [2016/12/21 15:31:38 | 001,413,696 | ---- | M] (O&O Software GmbH) [Auto | Running] -- C:\Program Files\OO Software\Defrag\oodag.exe -- (OODefragAgent)
SRV - [2016/11/03 12:05:48 | 000,032,736 | ---- | M] (The OpenVPN Project) [On_Demand | Stopped] -- C:\Program Files\OpenVPN\bin\openvpnserv.exe -- (OpenVPNService)
SRV - [2016/09/08 15:47:54 | 000,071,872 | ---- | M] (Nalpeiron Ltd.) [Auto | Running] -- C:\Windows\System32\NLSSRV32.EXE -- (nlsX86cc)
SRV - [2016/09/08 15:47:52 | 000,281,280 | ---- | M] (Nitro Software, Inc.) [Auto | Running] -- C:\Program Files\Nitro\Pro 11\NitroPDFDriverService11.exe -- (NitroDriverReadSpool11)
SRV - [2016/08/21 15:05:24 | 000,935,424 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\System32\diagtrack.dll -- (DiagTrack)
SRV - [2016/07/29 11:31:20 | 000,057,344 | ---- | M] (Code Sector) [Auto | Running] -- C:\Program Files\TeraCopy\TeraCopyService.exe -- (TeraCopyService)
SRV - [2016/07/22 09:21:08 | 000,754,784 | ---- | M] (DEVGURU Co., LTD.) [Auto | Running] -- C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe -- (ss_conn_service)
SRV - [2016/05/26 15:22:08 | 000,116,368 | ---- | M] (Wondershare) [On_Demand | Stopped] -- C:\Program Files\Wondershare\MobileGo\DriverInstall.exe -- (WsDrvInst)
SRV - [2016/03/31 16:39:28 | 000,411,648 | ---- | M] (Wondershare) [Auto | Running] -- C:\Program Files\Wondershare\WAF\2.2.0.5\WsAppService.exe -- (WsAppService)
SRV - [2016/03/21 13:22:00 | 003,472,128 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Reg Organizer\StartupCheckingService.exe -- (Chemtable Startup Checking)
SRV - [2016/02/23 17:51:49 | 001,879,488 | ---- | M] (NVIDIA Corporation) [Auto | Running] -- C:\Program Files\NVIDIA Corporation\NetService\NvNetworkService.exe -- (NvNetworkService)
SRV - [2015/12/15 07:53:16 | 002,190,032 | ---- | M] (AnchorFree Inc.) [Disabled | Stopped] -- C:\Program Files\Hotspot Shield\bin\cmw_srv.exe -- (hshld)
SRV - [2015/12/15 07:47:34 | 000,864,464 | ---- | M] (AnchorFree Inc.) [Disabled | Stopped] -- C:\Program Files\Hotspot Shield\bin\hsswd.exe -- (HssWd)
SRV - [2015/11/11 00:17:34 | 000,096,600 | ---- | M] () [Disabled | Stopped] -- C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE -- (HssTrayService)
SRV - [2015/10/09 15:15:26 | 002,934,048 | ---- | M] (IObit) [Auto | Stopped] -- C:\Program Files\IObit\LiveUpdate\LiveUpdate.exe -- (LiveUpdateSvc)
SRV - [2015/08/10 11:06:16 | 001,087,320 | ---- | M] (Disc Soft Ltd) [Disabled | Stopped] -- C:\Program Files\DAEMON Tools Ultra\DiscSoftBusService.exe -- (Disc Soft Ultra Bus Service)
SRV - [2015/05/11 15:55:58 | 000,029,912 | ---- | M] (AOMEI Tech Co., Ltd.) [Disabled | Stopped] -- C:\Program Files\AOMEI Backupper\ABService.exe -- (Backupper Service)
SRV - [2015/03/21 10:54:50 | 000,327,680 | ---- | M] () [Auto | Running] -- C:\Program Files\Serviio\bin\ServiioService.exe -- (Serviio)
SRV - [2015/02/17 11:05:26 | 005,436,176 | ---- | M] (TeamViewer GmbH) [Disabled | Stopped] -- C:\Program Files\TeamViewer\TeamViewer_Service.exe -- (TeamViewer)
SRV - [2015/01/09 21:26:14 | 001,129,328 | ---- | M] (Crystal Rich Ltd) [Auto | Running] -- C:\Program Files\USB Safely Remove\USBSRService.exe -- (USBSafelyRemoveService)
SRV - [2014/11/24 13:48:30 | 002,165,560 | ---- | M] (AVG Technologies) [On_Demand | Stopped] -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesService32.exe -- (TuneUp.UtilitiesSvc)
SRV - [2014/06/03 22:02:22 | 001,343,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\Wat\WatAdminSvc.exe -- (WatAdminSvc)
SRV - [2014/05/28 10:10:36 | 000,016,232 | ---- | M] (Intel Corporation) [Auto | Running] -- C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe -- (IAStorDataMgrSvc)
SRV - [2014/03/20 11:43:04 | 000,398,296 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS)
SRV - [2014/03/20 11:43:02 | 000,154,584 | ---- | M] (Intel Corporation) [Disabled | Stopped] -- C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe -- (jhi_service)
SRV - [2013/12/19 01:41:02 | 030,814,400 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service)
SRV - [2013/08/27 14:23:50 | 000,642,520 | ---- | M] (Intel(R) Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe -- (Intel(R)
SRV - [2013/08/27 14:22:40 | 000,595,968 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Program Files\Intel\iCLS Client\HeciServer.exe -- (Intel(R)
SRV - [2013/08/01 10:57:22 | 000,954,648 | ---- | M] (ASUSTeK Computer Inc.) [Auto | Running] -- C:\Program Files\ASUS\AAHM\1.00.22\aaHMSvc.exe -- (asHmComSvc)
SRV - [2013/07/18 16:39:40 | 000,762,192 | ---- | M] (Nero AG) [Disabled | Stopped] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate)
SRV - [2013/06/05 17:34:12 | 000,019,456 | ---- | M] (Clarus, Inc.) [Disabled | Stopped] -- C:\Program Files\Clarus\Samsung Drive Manager\SZDrvSvc.exe -- (SZDrvSvc)
SRV - [2013/05/27 06:57:27 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\mpsvc.dll -- (WinDefend)
SRV - [2013/05/07 09:45:40 | 000,936,728 | ---- | M] () [Auto | Running] -- C:\Program Files\ASUS\AXSP\1.02.00\atkexComSvc.exe -- (asComSvc)
SRV - [2013/02/12 15:05:28 | 000,768,776 | ---- | M] (AgileBits) [Disabled | Stopped] -- C:\Program Files\1Password\Agile1pService.exe -- (Agile1Password)
SRV - [2012/04/24 14:37:56 | 000,169,752 | ---- | M] (Intel Corporation) [On_Demand | Stopped] -- C:\Program Files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe -- (ICCS)
SRV - [2012/03/02 17:00:26 | 000,025,504 | ---- | M] (Samsung Electronics Co., Ltd.) [Auto | Running] -- C:\Program Files\Samsung\AllShare\AllShareDMS\AllShareDMS.exe -- (SamsungAllShareV2.0)
SRV - [2012/03/02 17:00:20 | 000,027,584 | ---- | M] (Samsung Electronics Co., Ltd.) [On_Demand | Stopped] -- C:\Program Files\Samsung\AllShare\AllShareSlideShowService.exe -- (SimpleSlideShowServer)
SRV - [2012/01/23 19:19:32 | 001,858,048 | ---- | M] (MAGIX AG) [Disabled | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\FABS.exe -- (Fabs)
SRV - [2011/04/26 14:54:12 | 002,702,848 | ---- | M] (MAGIX®) [On_Demand | Stopped] -- C:\Program Files\Common Files\MAGIX Services\Database\bin\fbserver.exe -- (FirebirdServerMAGIXInstance)
SRV - [2011/01/12 16:44:02 | 000,033,584 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2011/01/12 16:41:42 | 000,810,144 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)
SRV - [2010/02/19 14:37:14 | 000,517,096 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard)
SRV - [2009/07/14 03:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/14 03:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2007/05/31 09:21:24 | 000,379,784 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\wcescomm.dll -- (WcesComm)
SRV - [2007/05/31 09:21:18 | 000,183,688 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Windows\WindowsMobile\rapimgr.dll -- (RapiMgr)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\rdvgkmd.sys -- (VGPU)
DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\tsusbhub.sys -- (tsusbhub)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\synth3dvsc.sys -- (Synth3dVsc)
DRV - File not found [Kernel | Disabled | Running] -- C:\Windows\system32\drivers\IOMap.sys -- (IOMap)
DRV - File not found [Kernel | On_Demand | Stopped] -- System32\drivers\dgderdrv.sys -- (dgderdrv)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (cpuz139)
DRV - File not found [Kernel | Auto | Stopped] -- -- (adfs)
DRV - [2017/05/03 22:21:29 | 000,042,104 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvvad32v.sys -- (nvvad_WaveExtensible)
DRV - [2017/05/03 22:21:15 | 000,027,768 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys -- (NvStreamKms)
DRV - [2017/05/02 00:28:55 | 012,277,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm)
DRV - [2017/04/02 18:12:15 | 000,184,880 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvhda32v.sys -- (NVHDA)
DRV - [2017/04/01 02:41:38 | 000,069,160 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nvvhci.sys -- (nvvhci)
DRV - [2017/02/22 15:02:00 | 000,040,104 | ---- | M] (RapidSolution Software AG) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tbhsd.sys -- (tbhsd)
DRV - [2017/02/22 15:01:35 | 000,022,696 | ---- | M] (Audials AG) [Kernel | System | Running] -- C:\Windows\System32\drivers\RrNetCapFilterDriver.sys -- (RrNetCapFilterDriver)
DRV - [2017/01/17 17:16:21 | 001,993,736 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaStorA.sys -- (iaStorA)
DRV - [2017/01/17 17:16:21 | 000,028,144 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iaStorF.sys -- (iaStorF)
DRV - [2017/01/17 17:05:08 | 000,170,560 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\TeeDriver.sys -- (MEI)
DRV - [2016/12/16 09:53:12 | 000,036,376 | ---- | M] (VS Revo Group) [File_System | On_Demand | Stopped] -- C:\Windows\System32\drivers\revoflt.sys -- (Revoflt)
DRV - [2016/11/15 16:41:00 | 000,838,664 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iusb3xhc.sys -- (iusb3xhc)
DRV - [2016/11/15 16:37:16 | 000,394,216 | ---- | M] (Intel(R) Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\IntcDAud.sys -- (IntcDAud)
DRV - [2016/11/15 16:37:06 | 000,075,416 | ---- | M] (Alcor Micro, Corp.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\AmUStor.sys -- (AmUStor)
DRV - [2016/09/05 06:47:38 | 000,147,072 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudmdm.sys -- (ssudmdm)
DRV - [2016/09/05 06:47:32 | 000,109,184 | ---- | M] (Samsung Electronics Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssudbus.sys -- (dg_ssudbus)
DRV - [2016/07/22 07:19:58 | 000,044,776 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\WirelessKeyboardFilter.sys -- (WirelessKeyboardFilter)
DRV - [2016/02/08 18:11:27 | 000,039,992 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtultrausbbus.sys -- (dtultrausbbus)
DRV - [2016/02/08 18:10:13 | 000,025,016 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtultrascsibus.sys -- (dtultrascsibus)
DRV - [2015/12/09 15:19:54 | 000,083,248 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dc3d.sys -- (dc3d)
DRV - [2015/11/12 19:27:10 | 000,026,104 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dfx12.sys -- (DFX12)
DRV - [2015/11/05 11:48:20 | 000,117,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\rmcast.sys -- (RMCAST)
DRV - [2015/10/25 12:19:41 | 000,404,776 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\iusb3hub.sys -- (iusb3hub)
DRV - [2015/10/12 22:51:06 | 000,036,968 | ---- | M] (Anchorfree Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\taphss6.sys -- (taphss6)
DRV - [2015/10/09 18:48:23 | 000,025,768 | ---- | M] (Synaptics Incorporated) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\Smb_driver_Intel.sys -- (SmbDrvI)
DRV - [2015/04/30 00:01:06 | 000,020,256 | ---- | M] (Western Digital Technologies) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\wdcsam.sys -- (WDC_SAM)
DRV - [2015/02/26 00:00:00 | 000,129,720 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\ammntdrv.sys -- (ammntdrv)
DRV - [2015/02/26 00:00:00 | 000,026,424 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\System32\ambakdrv.sys -- (ambakdrv)
DRV - [2015/02/26 00:00:00 | 000,014,392 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\amwrtdrv.sys -- (amwrtdrv)
DRV - [2015/01/31 17:12:58 | 000,051,928 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2015/01/31 17:08:24 | 000,023,840 | ---- | M] (REALiX(tm)) [Kernel | System | Running] -- C:\Windows\System32\drivers\HWiNFO32.SYS -- (HWiNFO32)
DRV - [2015/01/20 11:45:57 | 000,025,088 | ---- | M] (TeamViewer GmbH) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\teamviewervpn.sys -- (teamviewervpn)
DRV - [2015/01/15 18:21:03 | 000,243,128 | ---- | M] (Disc Soft Ltd) [Kernel | System | Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01)
DRV - [2014/11/24 13:31:18 | 000,012,320 | ---- | M] (TuneUp Software) [Kernel | On_Demand | Stopped] -- C:\Program Files\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver32.sys -- (TuneUpUtilitiesDrv)
DRV - [2014/11/21 20:12:20 | 000,035,363 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\System32\windrvNT.sys -- (windrvNT)
DRV - [2014/11/07 03:30:47 | 000,026,824 | ---- | M] (CyberLink Corp.) [2015/01/10 19:07:52] [Kernel | Auto | Running] -- C:\Program Files\CyberLink\PowerDVD14\Common\NavFilter\000.fcl -- ({C5F942FD-1110-4664-86CE-0C6BDA305235})
DRV - [2014/11/02 10:24:33 | 000,024,704 | ---- | M] (Disc Soft Ltd) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\dtscsibus.sys -- (dtscsibus)
DRV - [2014/08/25 11:49:22 | 000,016,880 | ---- | M] (Intel Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\iusb3hcs.sys -- (iusb3hcs)
DRV - [2014/06/16 08:01:38 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdm.sys -- (sscdmdm)
DRV - [2014/06/16 08:01:38 | 000,136,776 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdbus.sys -- (sscdbus)
DRV - [2014/06/16 08:01:38 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\sscdmdfl.sys -- (sscdmdfl)
DRV - [2014/06/16 08:01:30 | 000,153,672 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdm.sys -- (ssadmdm)
DRV - [2014/06/16 08:01:30 | 000,136,904 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadbus.sys -- (ssadbus)
DRV - [2014/06/16 08:01:30 | 000,130,248 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadserd.sys -- (ssadserd)
DRV - [2014/06/16 08:01:30 | 000,017,864 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ssadmdfl.sys -- (ssadmdfl)
DRV - [2014/01/12 11:05:46 | 000,076,288 | ---- | M] (Nuvoton Technology Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nuvserial.sys -- (Serial)
DRV - [2014/01/12 11:05:46 | 000,017,920 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\nuvserenum.sys -- (Serenum)
DRV - [2013/10/02 02:42:31 | 000,049,152 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt)
DRV - [2013/08/22 14:40:22 | 000,035,288 | ---- | M] (The OpenVPN Project) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\tap0901.sys -- (tap0901)
DRV - [2013/08/06 15:13:30 | 000,018,944 | ---- | M] (Apple Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\netaapl.sys -- (Netaapl)
DRV - [2013/03/28 15:17:24 | 000,126,720 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ASUSumsc.sys -- (ASUSumsc)
DRV - [2013/03/28 15:17:24 | 000,023,808 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ASUSstpt.sys -- (ASUSstpt)
DRV - [2013/01/16 15:46:20 | 000,018,048 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\ASUS\ASUS PC Diagnostics\ATSZIO.sys -- (ATSZIO)
DRV - [2012/12/13 17:41:10 | 000,024,424 | ---- | M] (Windows (R) Win 7 DDK provider) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\dfx11_1.sys -- (DFX11_1)
DRV - [2012/08/23 16:44:32 | 000,014,848 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport)
DRV - [2012/08/22 11:54:16 | 000,014,720 | ---- | M] () [Kernel | System | Running] -- C:\Windows\System32\drivers\AsIO.sys -- (AsIO)
DRV - [2012/06/21 14:57:52 | 000,089,008 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Clarus\Samsung Drive Manager\mvd23.sys -- (mvd23)
DRV - [2012/06/21 14:57:40 | 000,018,864 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\Clarus\Samsung Drive Manager\mdf16.sys -- (mdf16)
DRV - [2012/05/17 12:57:08 | 000,022,040 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\ICCWDT.sys -- (ICCWDT)
DRV - [2011/09/20 12:25:28 | 000,037,448 | ---- | M] (MCCI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\ASUSFILTER.sys -- (ASUSFILTER)
DRV - [2011/01/05 03:29:00 | 000,025,728 | ---- | M] (Google Inc) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\androidusb.sys -- (androidusb)
DRV - [2010/12/21 15:04:06 | 000,137,144 | ---- | M] (ESET) [File_System | Auto | Running] -- C:\Windows\System32\drivers\eamonm.sys -- (eamonm)
DRV - [2010/12/21 15:04:06 | 000,115,008 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2010/12/21 13:47:38 | 000,095,384 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2010/11/20 14:30:15 | 000,175,360 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2010/11/20 14:30:15 | 000,040,704 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2010/11/20 14:30:15 | 000,028,032 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2010/11/20 11:59:44 | 000,035,968 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2010/11/20 11:14:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2010/11/20 11:14:41 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2010/07/04 21:51:26 | 000,004,096 | ---- | M] () [Kernel | Unavailable | Unknown] -- C:\Program Files\Unlocker\UnlockerDriver5.sys -- (UnlockerDriver5)
DRV - [2009/09/09 11:23:38 | 000,042,496 | ---- | M] (Intel Corporation) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\flashud.sys -- (int0800)
DRV - [2007/09/25 16:59:46 | 000,015,152 | ---- | M] () [Kernel | On_Demand | Stopped] -- C:\Program Files\MediaCoder\SysInfo.sys -- (CrystalSysInfo)
DRV - [2007/08/08 09:03:52 | 000,476,288 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emBDA.sys -- (USB28xxBGA)
DRV - [2007/08/08 09:03:52 | 000,038,656 | ---- | M] (eMPIA Technology, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\emOEM.sys -- (USB28xxOEM)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://www.google.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{0b4d26f6-61a8-4463-99dd-5f2fe0400fa6}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default Download Directory = C:\Users\DOM\Downloads
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.google.com
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = http://g.msn.fr/0SEFRFR/SAOS02
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.com/
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = fr-FR
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = E4 7C 5F 95 F5 E7 D0 01 [binary data]
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 03 96 93 AA 19 7B D2 01 [binary data]
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = Reg Error: Value error.
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\..\SearchScopes\{49EA0158-F4C2-4A6B-AB0B-A5D179830A4E}: "URL" = https://fr.search.yahoo.com/search?p={searchTerms}&fr=yset_ie_syc_oracle&type=orcl_default
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\..\SearchScopes\{A1C5E755-06B1-40AD-A8F1-BDBA204E504C}: "URL" = http://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:{language}:{referrer:source}&ie={inputEncoding?}&oe={outputEncoding?}&rlz=1I7ASUM_frFR591
IE - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]


FF - user.js..browser.search.openintab: false

FF - HKLM\Software\MozillaPlugins\@adobe.com/AuthorwarePlayer: C:\Windows\system32\Macromed\AUTHORWA\np32asw.dll (Macromedia, Inc.)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_25_0_0_148.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw_1218158.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@canon.com/EPPEX: C:\Program Files\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll (CANON INC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Program Files\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Web Player Plug-In,version=1.0.0: C:\Program Files\DivX\DivX Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf: C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp: C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf: C:\Program Files\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll (Foxit Corporation)
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf: C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll File not found
FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@intel-webapi.intel.com/Intel WebAPI updater: C:\Program Files\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.131.2: C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.131.2: C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\5.1.50906.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@Nero.com/KM: C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@veetle.com/vbp;version=0.9.17: C:\Program Files\Veetle\VLCBroadcast\npvbp.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetleCorePlugin,version=0.9.19: C:\Program Files\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@veetle.com/veetlePlayerPlugin,version=0.9.18: C:\Program Files\Veetle\Player\npvlc.dll (Veetle Inc)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.2: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.0-pre3: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.1: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.4: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.2.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
FF - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
FF - HKLM\Software\MozillaPlugins\ZEON/PDF,version=2.0: C:\Program Files\Nuance\Power PDF\bin\nppdf.dll (Zeon Corporation)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products (Canada) Ltd.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\web2pdfextension.15@web2pdf.adobedotcom: C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Browser\WCFirefoxExtn [2017/04/16 10:12:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.3\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 36.0.4\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 37.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.1\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 38.0.5\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 39.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 54.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 54.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2017/04/16 10:14:08 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2016/05/06 20:23:32 | 000,000,000 | ---D | M]

[2014/07/03 21:19:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Extensions
[2014/07/03 21:19:22 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Extensions\home2@tomtom.com
[2016/12/06 18:08:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\26xddfaz.default-1403018231760\extensions
[2017/04/15 17:52:58 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\8k1suz6s.default-1479033267943\browser-extension-data
[2017/04/15 17:52:59 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\8k1suz6s.default-1479033267943\browser-extension-data\@emojikeyboard
[2017/01/14 11:50:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\8k1suz6s.default-1479033267943\extension-data
[2017/04/15 17:52:52 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\8k1suz6s.default-1479033267943\extensions
[2016/12/21 16:32:00 | 000,000,000 | ---D | M] (iCloud Bookmarks) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\8k1suz6s.default-1479033267943\extensions\firefoxdav@icloud.com
[2016/09/20 18:02:10 | 000,000,000 | ---D | M] (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\Firefox\Profiles\ghqx5278.default-1441029210849\extensions
[2017/04/15 17:52:51 | 001,260,242 | ---- | M] () (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\firefox\profiles\8k1suz6s.default-1479033267943\extensions\@emojikeyboard.xpi
[2017/01/29 17:48:06 | 000,740,571 | ---- | M] () (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\firefox\profiles\8k1suz6s.default-1479033267943\extensions\osb@quicksaver.xpi
[2016/11/23 19:42:17 | 001,055,311 | ---- | M] () (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\firefox\profiles\8k1suz6s.default-1479033267943\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2017/04/27 17:51:11 | 000,044,954 | ---- | M] () (No name found) -- C:\Users\DOM\AppData\Roaming\mozilla\firefox\profiles\8k1suz6s.default-1479033267943\features\{062b409a-2039-4111-8142-bb1303202969}\shield-recipe-client@mozilla.org.xpi
[2017/04/26 21:30:50 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\mozilla firefox\browser\extensions
[2010/01/06 01:27:44 | 000,060,928 | ---- | M] (Adobe Systems, Inc.) -- C:\Program Files\mozilla firefox\plugins\npContribute.dll

[color=#E56717]========== Chrome ==========[/color]

CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf\14.1_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\baampgkagbmhnlhleemfbpecfjpakffj\5_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb\1.13.2_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.60_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\dmligekldedfmmggibffmbkpnonibilk\1.1_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmbgaklkmjakoegficnlkhebmhkjfich\2.7_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\hlhbmnfdcklajeaeikfinieljfegamko\2.4.7_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.2_0\
CHR - Extension: No name found = C:\Users\DOM\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\5817.313.0.3_1\

O1 HOSTS File: ([2016/10/22 18:30:37 | 000,457,530 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 activate.adobe.com
O1 - Hosts: 127.0.0.1 practivate.adobe.com
O1 - Hosts: 127.0.0.1 ereg.adobe.com
O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com
O1 - Hosts: 127.0.0.1 wip3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-3.adobe.com
O1 - Hosts: 127.0.0.1 3dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com
O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com
O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com
O1 - Hosts: 127.0.0.1 activate-sea.adobe.com
O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com
O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com
O1 - Hosts: 127.0.0.1 adobe.activate.com
O1 - Hosts: 127.0.0.1 hl2rcv.adobe.com
O1 - Hosts: 127.0.0.1 209.34.83.73:443
O1 - Hosts: 127.0.0.1 209.34.83.73:43
O1 - Hosts: 127.0.0.1 209.34.83.73
O1 - Hosts: 127.0.0.1 209.34.83.67:443
O1 - Hosts: 127.0.0.1 209.34.83.67:43
O1 - Hosts: 127.0.0.1 209.34.83.67
O1 - Hosts: 127.0.0.1 ood.opsource.net
O1 - Hosts: 127.0.0.1 CRL.VERISIGN.NET
O1 - Hosts: 127.0.0.1 199.7.52.190:80
O1 - Hosts: 15724 more lines...
O2 - BHO: (Canon Easy-WebPrint EX BHO) - {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll (CANON INC.)
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Nuance PDF Toolbar Helper) - {940361F8-7F16-4498-AB43-2EFFE0235AFA} - C:\Program Files\Nuance\Power PDF\Bin\SZeonIEFavClient.dll (Zeon Corporation)
O2 - BHO: (Adobe Acrobat Create PDF Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (1Password) - {CB1A24DA-7416-4921-A0CF-5AA1160AAE2A} - C:\PROGRA~1\1PASSW~1\AGILE1~1.DLL (AgileBits)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll (Oracle Corporation)
O2 - BHO: (Adobe Acrobat Create PDF from Selection) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (Nuance PDF) - {BED78D9C-A025-4FE9-B3BA-27E6D376A3D5} - C:\Program Files\Nuance\Power PDF\Bin\SZeonIEFavClient.dll (Zeon Corporation)
O3 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\..\Toolbar\WebBrowser: (Adobe Acrobat Create PDF Toolbar) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\..\Toolbar\WebBrowser: (Canon Easy-WebPrint EX) - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll (CANON INC.)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
O4 - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [OODefragTray] C:\Program Files\OO Software\Defrag\oodtray.exe (O&O Software GmbH)
O4 - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RtkNGUI.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [ShadowPlay] C:\Windows\System32\nvspcap.dll (NVIDIA Corporation)
O4 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000..\Run: [IP Hider Pro] C:\Program Files\IP Hider Pro\IPHiderPro.exe (IP Hider Pro)
O4 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000..\Run: [USB Safely Remove] C:\Program Files\USB Safely Remove\USBSafelyRemove.exe (Crystal Rich Ltd)
O4 - HKU\.DEFAULT..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O4 - HKU\S-1-5-18..\RunOnce: [SPReview] C:\Windows\System32\SPReview\SPReview.exe (Microsoft Corporation)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoCDBurning = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoChangeStartMenu = 0
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoClose = 0
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLogOff = 0
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoSimpleNetIDList = 1
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1
O7 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1
O8 - Extra context menu item: &Envoyer à OneNote - res://C:\PROGRA~1\MICROS~2\Office14\ONBttnIE.dll/105 File not found
O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
O8 - Extra context menu item: Ajouter à un fichier PDF existant - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Ajouter la cible du lien à un fichier PDF existant - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir au format Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir la cible du lien au format Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\WCIEActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office14\EXCEL.EXE/3000 File not found
O8 - Extra context menu item: Ouvrir avec l'Assistant Convert - C:\Program Files\Nuance\Power PDF\cnvres_fre.dll (Nuance Communications, Inc.)
O8 - Extra context menu item: Ouvrir avec Power PDF - C:\Program Files\Nuance\Power PDF\Bin\PlusIEContextMenu.dll (Zeon Corporation)
O9 - Extra Button: 1Password - {00FAC6C9-C494-4AD8-B3C0-DE677AFDDBD8} - C:\PROGRA~1\1PASSW~1\AGILE1~1.DLL (AgileBits)
O9 - Extra 'Tools' menuitem : 1Password - {00FAC6C9-C494-4AD8-B3C0-DE677AFDDBD8} - C:\PROGRA~1\1PASSW~1\AGILE1~1.DLL (AgileBits)
O9 - Extra Button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Notes &liées OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O15 - HKU\S-1-5-21-3826502444-2126025144-1840911512-1000\..Trusted Domains: localhost ([]* in Sites de confiance)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4832E915-2EED-4CB5-84B6-CC46889EBDCD}: DhcpNameServer = 89.2.0.1 89.2.0.2
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4832E915-2EED-4CB5-84B6-CC46889EBDCD}: NameServer = 8.8.8.8,8.8.4.4
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{76D460D4-A796-479C-9881-CF3E61000AE6}: DhcpNameServer = 192.168.0.1
O20 - AppInit_DLLs: (C:\Windows\system32\nvinit.dll) - C:\Windows\System32\nvinit.dll (NVIDIA Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - File not found
O20 - Winlogon\Notify\SDWinLogon: DllName - (SDWinLogon.dll) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O27 - HKLM IFEO\asc.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\backupper.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\dtagent.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\dtlauncher.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\hsscp.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\regorganizer.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\tomtomhome.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\unins000.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\uninst.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O27 - HKLM IFEO\uninstall.exe: Debugger - C:\Program Files\AVG\AVG PC TuneUp\TUAutoReactivator32.exe (AVG Technologies)
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 23:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^ - - File not found
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Aggiorna ESET license.lnk - - File not found
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^MobileGo Service.lnk - C:\PROGRA~1\WONDER~1\MobileGo\MOBILE~1.EXE - (Wondershare)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^O&O Defrag Tray.lnk - C:\Windows\Installer\{FA428DAF-3C74-49D1-8429-BEDDC101ABF9}\app_icon.ico - ()
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk - C:\PROGRA~1\Clarus\SAMSUN~1\ABRTMon.exe - (Clarus, Inc.)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Samsung Drive Manager Real-Time.lnk.CommonStartup - C:\PROGRA~1\Clarus\SAMSUN~1\ABRTMon.exe - (Clarus, Inc.)
MsConfig - StartUpFolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Update ESET's license.lnk - - File not found
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk - C:\Users\DOM\AppData\Local\MEGAsync\MEGAsync.exe - (Mega Limited)
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^MEGAsync.lnk.Startup - - File not found
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Serviio.lnk - C:\PROGRA~1\Serviio\bin\SERVII~2.EXE - ()
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Serviio.lnk.Startup - - File not found
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Stardock ObjectDock.lnk - C:\PROGRA~1\Stardock\OBJECT~1\OBJECT~1.EXE - (Stardock)
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Stardock ObjectDock.lnk.Startup - - File not found
MsConfig - StartUpFolder: C:^Users^DOM^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^zSpeedup.lnk - Reg Error: Value error. - File not found
MsConfig - StartUpReg: [b]AceStream[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]Acrobat Assistant 8.0[/b] - hkey= - key= - C:\Program Files\Adobe\Acrobat 11.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
MsConfig - StartUpReg: [b]Actual Multiple Monitors[/b] - hkey= - key= - C:\Program Files\Actual Multiple Monitors\ActualMultipleMonitorsCenter.exe (Actual Tools)
MsConfig - StartUpReg: [b]Adobe ARM[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]AdobeAAMUpdater-1.0[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]AdobeCS6ServiceManager[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]Advanced SystemCare 9[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Agile1pAgent[/b] - hkey= - key= - C:\Program Files\1Password\Agile1pAgent.exe (AgileBits)
MsConfig - StartUpReg: [b]AllShareAgent[/b] - hkey= - key= - C:\Program Files\Samsung\AllShare\AllShareAgent.exe (Samsung Electronics Co., Ltd.)
MsConfig - StartUpReg: [b]AppleIEDAV[/b] - hkey= - key= - C:\Program Files\Common Files\Apple\Internet Services\AppleIEDAV.exe (Apple Inc.)
MsConfig - StartUpReg: [b]ApplePhotoStreams[/b] - hkey= - key= - C:\Program Files\Common Files\Apple\Internet Services\ApplePhotoStreams.exe (Apple Inc.)
MsConfig - StartUpReg: [b]AudialsNotifier[/b] - hkey= - key= - C:\Program Files\Audials\Audials 2017\AudialsNotifier.exe ()
MsConfig - StartUpReg: [b]BCSSync[/b] - hkey= - key= - C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation)
MsConfig - StartUpReg: [b]BDRegion[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]BitTorrent[/b] - hkey= - key= - C:\Users\DOM\AppData\Roaming\BitTorrent\BitTorrent.exe (BitTorrent Inc.)
MsConfig - StartUpReg: [b]BlueStacks Agent[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]CCleaner Monitoring[/b] - hkey= - key= - C:\Program Files\CCleaner\CCleaner.exe (Piriform Ltd)
MsConfig - StartUpReg: [b]Clarus Drive Manager[/b] - hkey= - key= - C:\Program Files\Clarus\Samsung Drive Manager\Drive Manager.exe (Clarus, Inc.)
MsConfig - StartUpReg: [b]Cobian Backup 11 interface[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]DAEMON Tools Pro Agent[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Pro\DTAgent.exe (Disc Soft Ltd)
MsConfig - StartUpReg: [b]DAEMON Tools Ultra Agent[/b] - hkey= - key= - C:\Program Files\DAEMON Tools Ultra\DTAgent.exe (Disc Soft Ltd)
MsConfig - StartUpReg: [b]DFX[/b] - hkey= - key= - C:\Program Files\DFX\DFX.exe ()
MsConfig - StartUpReg: [b]DivXMediaServer[/b] - hkey= - key= - C:\Program Files\DivX\DivX Media Server\DivXMediaServer.exe (DivX, LLC)
MsConfig - StartUpReg: [b]DivXUpdate[/b] - hkey= - key= - C:\Program Files\DivX\DivX Update\DivXUpdate.exe (DivX, LLC)
MsConfig - StartUpReg: [b]DLLSuite2016[/b] - hkey= - key= - C:\Program Files\DLL Suite\DLLSuite.exe (VskSoft Crack UZ1)
MsConfig - StartUpReg: [b]eMuleAutoStart[/b] - hkey= - key= - C:\Program Files\eMule\emule.exe (http://www.emule-project.net)
MsConfig - StartUpReg: [b]HDD Regenerator[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]HipServ Agent[/b] - hkey= - key= - C:\Program Files\Raidsonic\ICY BOX Desktop Applications\HipServAgent\HipServAgent.exe (Axentra Corporation)
MsConfig - StartUpReg: [b]IAStorIcon[/b] - hkey= - key= - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe (Intel Corporation)
MsConfig - StartUpReg: [b]iCloudDrive[/b] - hkey= - key= - C:\Program Files\Common Files\Apple\Internet Services\iCloudDrive.exe (Apple Inc.)
MsConfig - StartUpReg: [b]iCloudPhotos[/b] - hkey= - key= - C:\Program Files\Common Files\Apple\Internet Services\iCloudPhotos.exe (Apple Inc.)
MsConfig - StartUpReg: [b]iCloudServices[/b] - hkey= - key= - C:\Program Files\Common Files\Apple\Internet Services\iCloudServices.exe (Apple Inc.)
MsConfig - StartUpReg: [b]iFunBox[/b] - hkey= - key= - C:\Program Files\i-Funbox DevTeam\iFunBox.exe (i-Funbox.com)
MsConfig - StartUpReg: [b]IP Hider Pro[/b] - hkey= - key= - C:\Program Files\IP Hider Pro\IPHiderPro.exe (IP Hider Pro)
MsConfig - StartUpReg: [b]ISUSPM[/b] - hkey= - key= - C:\ProgramData\FLEXnet\Connect\11\isuspm.exe (Flexera Software LLC.)
MsConfig - StartUpReg: [b]iTunesHelper[/b] - hkey= - key= - C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
MsConfig - StartUpReg: [b]KBD[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]KiesPreload[/b] - hkey= - key= - C:\Program Files\Samsung\Kies\Kies.exe (Samsung)
MsConfig - StartUpReg: [b]KiesTrayAgent[/b] - hkey= - key= - C:\Program Files\Samsung\Kies\KiesTrayAgent.exe (Samsung Electronics Co., Ltd.)
MsConfig - StartUpReg: [b]MimBoot[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]MMTray[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]MyDriveConnect.exe[/b] - hkey= - key= - C:\Program Files\MyDrive Connect\TomTom MyDrive Connect.exe (TomTom)
MsConfig - StartUpReg: [b]NetLimiter[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]Neuf Media Center[/b] - hkey= - key= - C:\Program Files\SFR\Media Center\MediaCenter.exe (SFR)
MsConfig - StartUpReg: [b]Nuance PDF Professional 6-reminder[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Nuance Power PDF Advanced-reminder[/b] - hkey= - key= - C:\Program Files\Nuance\Power PDF\Ereg\Ereg.exe (Nuance Communications, Inc.)
MsConfig - StartUpReg: [b]NuanPowerPdf1NPDFLM[/b] - hkey= - key= - C:\Program Files\Nuance\Power PDF\NPDFLM.exe (Nuance Communications, Inc.)
MsConfig - StartUpReg: [b]OODefragTray[/b] - hkey= - key= - C:\Program Files\OO Software\Defrag\oodtray.exe (O&O Software GmbH)
MsConfig - StartUpReg: [b]PDF6 Registry Controller[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]PDFHook[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]PDFPrint[/b] - hkey= - key= - C:\Program Files\PDF24\pdf24.exe (Geek Software GmbH)
MsConfig - StartUpReg: [b]PeerBlock[/b] - hkey= - key= - C:\Program Files\PeerBlock\peerblock.exe (PeerBlock, LLC)
MsConfig - StartUpReg: [b]PowerDVD14Agent[/b] - hkey= - key= - C:\Program Files\CyberLink\PowerDVD14\PowerDVD14Agent.exe (CyberLink Corp.)
MsConfig - StartUpReg: [b]PowerPDF Registry Controller[/b] - hkey= - key= - C:\Program Files\Nuance\Power PDF\RegistryController.exe (Nuance Communications, Inc.)
MsConfig - StartUpReg: [b]PowerPDFInboxMonitor[/b] - hkey= - key= - C:\Program Files\Nuance\Power PDF\InboxMonitor.exe (Nuance Communications, Inc.)
MsConfig - StartUpReg: [b]QuickTime Task[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]RemoteControl10[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]SDTray[/b] - hkey= - key= - C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe (Safer-Networking Ltd.)
MsConfig - StartUpReg: [b]Skype[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]Spn2006[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - StartUpReg: [b]Spybot-S&D Cleaning[/b] - hkey= - key= - C:\Program Files\Spybot - Search & Destroy 2\SDCleaner.exe (Safer-Networking Ltd.)
MsConfig - StartUpReg: [b]Super Hide IP[/b] - hkey= - key= - C:\Program Files\SuperHideIP\SuperHideIP.exe (SuperHideIP.Com)
MsConfig - StartUpReg: [b]swg[/b] - hkey= - key= - C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe (Google Inc.)
MsConfig - StartUpReg: [b]SwitchBoard[/b] - hkey= - key= - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)
MsConfig - StartUpReg: [b]Syncios device service[/b] - hkey= - key= - C:\Program Files\Anvsoft\Syncios\SynciosDeviceService.exe ()
MsConfig - StartUpReg: [b]TomTomHOME.exe[/b] - hkey= - key= - C:\Program Files\TomTom HOME 2\TomTomHOMERunner.exe (TomTom)
MsConfig - StartUpReg: [b]USB3MON[/b] - hkey= - key= - C:\Program Files\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe (Intel Corporation)
MsConfig - StartUpReg: [b]uTorrent[/b] - hkey= - key= - C:\Users\DOM\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc.)
MsConfig - StartUpReg: [b]VirtualCloneDrive[/b] - hkey= - key= - C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
MsConfig - StartUpReg: [b]WinService32[/b] - hkey= - key= - File not found
MsConfig - StartUpReg: [b]Wondershare Helper Compact.exe[/b] - hkey= - key= - C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Wondershare)
MsConfig - StartUpReg: [b]Xvid[/b] - hkey= - key= - Reg Error: Value error. File not found
MsConfig - State: "startup" - 2
MsConfig - State: "bootini" - 2
MsConfig - State: "services" - 2

SafeBootMin: Base - Driver Group
SafeBootMin: Boot Bus Extender - Driver Group
SafeBootMin: Boot file system - Driver Group
SafeBootMin: File system - Driver Group
SafeBootMin: Filter - Driver Group
SafeBootMin: HelpSvc - Service
SafeBootMin: NTDS - File not found
SafeBootMin: PCI Configuration - Driver Group
SafeBootMin: PNP Filter - Driver Group
SafeBootMin: Primary disk - Driver Group
SafeBootMin: sacsvr - Service
SafeBootMin: SCSI Class - Driver Group
SafeBootMin: System Bus Extender - Driver Group
SafeBootMin: TBS - Service
SafeBootMin: vmms - Service
SafeBootMin: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootMin: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootMin: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootMin: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootMin: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootMin: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootMin: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootMin: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootMin: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootMin: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootMin: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootMin: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootMin: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootMin: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootMin: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootMin: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootMin: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootMin: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

SafeBootNet: Base - Driver Group
SafeBootNet: Boot Bus Extender - Driver Group
SafeBootNet: Boot file system - Driver Group
SafeBootNet: File system - Driver Group
SafeBootNet: Filter - Driver Group
SafeBootNet: HelpSvc - Service
SafeBootNet: Messenger - Service
SafeBootNet: NDIS Wrapper - Driver Group
SafeBootNet: NetBIOSGroup - Driver Group
SafeBootNet: NetDDEGroup - Driver Group
SafeBootNet: Network - Driver Group
SafeBootNet: NetworkProvider - Driver Group
SafeBootNet: NTDS - File not found
SafeBootNet: PCI Configuration - Driver Group
SafeBootNet: PNP Filter - Driver Group
SafeBootNet: PNP_TDI - Driver Group
SafeBootNet: Primary disk - Driver Group
SafeBootNet: rdsessmgr - Service
SafeBootNet: sacsvr - Service
SafeBootNet: SCSI Class - Driver Group
SafeBootNet: Streams Drivers - Driver Group
SafeBootNet: System Bus Extender - Driver Group
SafeBootNet: TBS - Service
SafeBootNet: TDI - Driver Group
SafeBootNet: vmms - Service
SafeBootNet: WinDefend - C:\Program Files\Windows Defender\mpsvc.dll (Microsoft Corporation)
SafeBootNet: WudfUsbccidDriver - Driver
SafeBootNet: {36FC9E60-C465-11CF-8056-444553540000} - Universal Serial Bus controllers
SafeBootNet: {4D36E965-E325-11CE-BFC1-08002BE10318} - CD-ROM Drive
SafeBootNet: {4D36E967-E325-11CE-BFC1-08002BE10318} - DiskDrive
SafeBootNet: {4D36E969-E325-11CE-BFC1-08002BE10318} - Standard floppy disk controller
SafeBootNet: {4D36E96A-E325-11CE-BFC1-08002BE10318} - Hdc
SafeBootNet: {4D36E96B-E325-11CE-BFC1-08002BE10318} - Keyboard
SafeBootNet: {4D36E96F-E325-11CE-BFC1-08002BE10318} - Mouse
SafeBootNet: {4D36E972-E325-11CE-BFC1-08002BE10318} - Net
SafeBootNet: {4D36E973-E325-11CE-BFC1-08002BE10318} - NetClient
SafeBootNet: {4D36E974-E325-11CE-BFC1-08002BE10318} - NetService
SafeBootNet: {4D36E975-E325-11CE-BFC1-08002BE10318} - NetTrans
SafeBootNet: {4D36E977-E325-11CE-BFC1-08002BE10318} - PCMCIA Adapters
SafeBootNet: {4D36E97B-E325-11CE-BFC1-08002BE10318} - SCSIAdapter
SafeBootNet: {4D36E97D-E325-11CE-BFC1-08002BE10318} - System
SafeBootNet: {4D36E980-E325-11CE-BFC1-08002BE10318} - Floppy disk drive
SafeBootNet: {50DD5230-BA8A-11D1-BF5D-0000F805F530} - Smart card readers
SafeBootNet: {533C5B84-EC70-11D2-9505-00C04F79DEAF} - Volume shadow copy
SafeBootNet: {6BDD1FC1-810F-11D0-BEC7-08002BE2092F} - IEEE 1394 Bus host controllers
SafeBootNet: {71A27CDD-812A-11D0-BEC7-08002BE2092F} - Volume
SafeBootNet: {745A17A0-74D3-11D0-B6FE-00A0C90F57DA} - Human Interface Devices
SafeBootNet: {D48179BE-EC20-11D1-B6B8-00C04FA372A7} - SBP2 IEEE 1394 Devices
SafeBootNet: {D94EE5D8-D189-4994-83D2-F68D7D41B0E6} - SecurityDevices

ActiveX: {22d6f312-b0f6-11d0-94ab-0080c74c7e95} - Microsoft Windows Media Player 12.0
ActiveX: {2C7339CF-2B09-4501-B3F3-F3508C9228ED} - %SystemRoot%\system32\regsvr32.exe /s /n /i:/UserInstall %SystemRoot%\system32\themeui.dll
ActiveX: {30500C7C-2206-3DC6-9792-96E95A04669D} - .NET Framework
ActiveX: {3911CF56-9EF2-39BA-846A-C27BD3CD0685} - .NET Framework
ActiveX: {3af36230-a269-11d1-b5bf-0000f8051515} - Offline Browsing Pack
ActiveX: {3C3901C5-3455-3E0A-A214-0B093A5070A6} - .NET Framework
ActiveX: {44BBA840-CC51-11CF-AAFA-00AA00B6015C} - "%ProgramFiles%\Windows Mail\WinMail.exe" OCInstallUserConfigOE
ActiveX: {44BBA855-CC51-11CF-AAFA-00AA00B6015F} - DirectDrawEx
ActiveX: {45ea75a0-a269-11d1-b5bf-0000f8051515} - Internet Explorer Help
ActiveX: {476F88BA-08DD-32D8-A8B0-E85EE28CB27F} - .NET Framework
ActiveX: {4903D172-DCCB-392F-93A3-34CA9D47FE3D} - .NET Framework
ActiveX: {4f645220-306d-11d2-995d-00c04f98bbc9} - Microsoft Windows Script 5.6
ActiveX: {5fd399c0-a70a-11d1-9948-00c04f98bbc9} - Internet Explorer Setup Tools
ActiveX: {630b1da0-b465-11d1-9948-00c04f98bbc9} - Browsing Enhancements
ActiveX: {66C64F22-FC60-4E6C-A6B5-F0D580E680CE} - C:\Windows\System32\ie4uinit.exe -EnableTLS
ActiveX: {6BF52A52-394A-11d3-B153-00C04F79FAA6} - Microsoft Windows Media Player
ActiveX: {6fab99d0-bab8-11d1-994a-00c04f98bbc9} - MSN Site Access
ActiveX: {7790769C-0471-11d2-AF11-00C04FA35D02} - Address Book 7
ActiveX: {7C028AF8-F614-47B3-82DA-BA94E41B1089} - .NET Framework
ActiveX: {7D715857-A67C-4C2F-A929-038448584D63} - C:\Windows\System32\ie4uinit.exe -DisableSSL3
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4340} - regsvr32.exe /s /n /i:U shell32.dll
ActiveX: {89820200-ECBD-11cf-8B85-00AA005B4383} - C:\Windows\System32\ie4uinit.exe -UserConfig
ActiveX: {89B4C1CD-B018-4511-B0A1-5476DBF70820} - C:\Windows\system32\Rundll32.exe C:\Windows\system32\mscories.dll,Install
ActiveX: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "C:\Program Files\Google\Chrome\Application\58.0.3029.96\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level
ActiveX: {9381D8F2-0288-11D0-9501-00AA00B911A5} - Dynamic HTML Data Binding
ActiveX: {C6BAF60B-6E91-453F-BFF9-D3789CFEFCDD} - .NET Framework
ActiveX: {C9E9A340-D1F1-11D0-821E-444553540600} - Internet Explorer Core Fonts
ActiveX: {D27CDB6E-AE6D-11CF-96B8-444553540000} - Adobe Flash Player
ActiveX: {de5aed00-a4bf-11d1-9948-00c04f98bbc9} - HTML Help
ActiveX: {E92B03AB-B707-11d2-9CBD-0000F87A369E} - Active Directory Service Interface
ActiveX: >{22d6f312-b0f6-11d0-94ab-0080c74c7e95} - %SystemRoot%\system32\unregmp2.exe /ShowWMP

Drivers32: msacm.ac3acm - C:\Windows\System32\ac3acm.acm (fccHandler)
Drivers32: msacm.l3acm - C:\Windows\System32\l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acmp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:\Windows\System32\l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.vorbis - C:\Windows\System32\vorbis.acm (HMS http://hp.vector.co.jp/authors/VA012897/)
Drivers32: MSVideo8 - C:\Windows\System32\vfwwdm32.dll (Microsoft Corporation)
Drivers32: vidc.cvid - C:\Windows\System32\iccvid.dll (Radius Inc.)
Drivers32: VIDC.FFDS - C:\Windows\System32\ff_vfw.dll ()
Drivers32: VIDC.FICV - C:\Windows\System32\ficvdec_x86.dll ()
Drivers32: VIDC.LAGS - C:\Windows\System32\lagarith.dll ( )
Drivers32: VIDC.X264 - C:\Windows\System32\x264vfw.dll (x264vfw project)
Drivers32: VIDC.XVID - C:\Windows\System32\xvidvfw.dll ()

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2031/11/11 15:50:55 | 000,049,152 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2031/11/11 15:50:44 | 001,158,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2031/11/11 15:50:44 | 001,080,832 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2031/11/11 15:50:44 | 000,364,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2031/11/11 15:50:44 | 000,293,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2031/11/11 15:50:44 | 000,249,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2031/11/11 15:50:44 | 000,220,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2031/11/11 15:50:44 | 000,207,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2031/11/11 15:50:44 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2031/11/11 15:50:44 | 000,010,752 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,009,728 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2031/11/11 15:50:44 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2031/11/11 15:50:44 | 000,005,632 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2031/11/11 15:50:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2031/11/11 15:50:44 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,002,560 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2031/11/11 15:49:21 | 001,505,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2031/11/11 15:48:04 | 000,000,000 | ---D | C] -- C:\Users\DOM\AppData\Roaming\Mozilla
[2031/11/11 15:48:04 | 000,000,000 | ---D | C] -- C:\Users\DOM\AppData\Local\Mozilla
[2031/11/11 15:47:46 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Maintenance Service
[2031/11/11 15:47:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Mozilla
[2031/11/11 15:42:58 | 000,000,000 | ---D | C] -- C:\Windows\System32\appmgmt
[2031/11/11 15:42:18 | 000,538,112 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\objsel.dll
[2031/11/11 15:42:17 | 000,051,200 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cngprovider.dll
[2031/11/11 15:42:17 | 000,049,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adprovider.dll
[2031/11/11 15:42:17 | 000,048,128 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\capiprovider.dll
[2031/11/11 15:42:17 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dpapiprovider.dll
[2031/11/11 15:42:17 | 000,036,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dimsroam.dll
[2031/11/11 15:42:17 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wincredprovider.dll
[2031/11/11 15:41:41 | 000,175,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netcorehc.dll
[2031/11/11 15:41:41 | 000,156,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncsi.dll
[2031/11/11 15:41:41 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\netevent.dll
[2031/11/11 15:41:25 | 000,245,760 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\OxpsConverter.exe
[2031/11/11 15:41:15 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\SmartcardCredentialProvider.dll
[2031/11/11 15:41:01 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cryptdlg.dll
[2031/11/11 15:40:58 | 000,903,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certutil.exe
[2031/11/11 15:40:57 | 000,043,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\certenc.dll
[2031/11/11 15:40:49 | 000,149,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\storport.sys
[2031/11/11 15:40:49 | 000,027,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\Diskdump.sys
[2031/11/11 15:40:49 | 000,002,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iologmsg.dll
[2031/11/11 15:40:35 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cscript.exe
[2031/11/11 15:40:32 | 000,656,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\nshwfp.dll
[2031/11/11 15:40:32 | 000,216,576 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\FWPUCLNT.DLL
[2031/11/11 15:40:31 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
[2031/11/11 15:40:29 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidclass.sys
[2031/11/11 15:40:29 | 000,025,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\hidparse.sys
[2031/11/11 15:40:18 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wwanprotdim.dll
[2031/11/11 15:39:44 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcore6.dll
[2031/11/11 15:39:44 | 000,044,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dhcpcsvc6.dll
[2031/11/11 15:39:40 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\RNDISMP.sys
[2031/11/11 15:39:23 | 000,381,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wer.dll
[2031/11/11 15:38:40 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip
[2031/11/11 15:32:10 | 000,594,944 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_isv.exe
[2031/11/11 15:32:10 | 000,572,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate.exe
[2031/11/11 15:32:10 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp.exe
[2031/11/11 15:32:10 | 000,508,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RMActivate_ssp_isv.exe
[2031/11/11 15:32:10 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc.dll
[2031/11/11 15:32:10 | 000,423,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_isv.dll
[2031/11/11 15:32:10 | 000,390,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msdrm.dll
[2031/11/11 15:32:09 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp_isv.dll
[2031/11/11 15:32:09 | 000,087,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\secproc_ssp.dll
[2031/11/11 15:29:14 | 000,000,000 | ---D | C] -- C:\Users\DOM\AppData\Roaming\Macromedia
[2031/11/11 15:29:04 | 000,000,000 | ---D | C] -- C:\Users\DOM\AppData\Roaming\Google
[2017/05/06 11:15:10 | 000,000,000 | ---D | C] -- C:\Program Files\Windows Sidebar
[2017/05/06 10:04:13 | 000,000,000 | -H-D | C] -- C:\Users\Public\Documents\AdobeGC
[2017/05/05 16:47:30 | 000,134,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvStreaming.exe
[2017/05/05 16:43:10 | 000,406,736 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvumdshim.dll
[2017/05/05 16:43:09 | 009,014,792 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvptxJitCompiler.dll
[2017/05/05 16:43:08 | 008,805,416 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvopencl.dll
[2017/05/05 16:43:07 | 028,592,760 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2017/05/05 16:43:07 | 012,277,880 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2017/05/05 16:43:07 | 001,095,800 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco3238205.dll
[2017/05/05 16:43:07 | 000,991,168 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NvFBC.dll
[2017/05/05 16:43:07 | 000,929,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco3238205.dll
[2017/05/05 16:43:07 | 000,911,992 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NvIFR.dll
[2017/05/05 16:43:07 | 000,577,728 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvfatbinaryLoader.dll
[2017/05/05 16:43:07 | 000,499,136 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\NvIFROpenGL.dll
[2017/05/05 16:43:07 | 000,426,128 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvEncodeAPI.dll
[2017/05/05 16:43:07 | 000,148,016 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvinit.dll
[2017/05/05 16:43:07 | 000,131,720 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvoglshim32.dll
[2017/05/05 16:43:06 | 013,401,256 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll
[2017/05/05 16:43:06 | 009,245,560 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2017/05/05 16:43:06 | 003,012,032 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2017/05/05 16:43:03 | 035,281,528 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2017/05/05 16:37:05 | 000,143,480 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvaudcap32v.dll
[2017/05/05 16:37:05 | 000,042,104 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvvad32v.sys
[2017/04/26 21:44:21 | 001,095,616 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco3238189.dll
[2017/04/26 21:44:21 | 000,929,912 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco3238189.dll
[2017/04/26 16:51:45 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Java
[2017/04/11 20:54:29 | 004,604,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
[2017/04/11 20:54:27 | 002,400,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
[2017/04/11 20:54:26 | 002,055,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inetcpl.cpl
[2017/04/11 20:54:26 | 000,308,456 | ---- | C] (Adobe Systems Incorporated) -- C:\Windows\System32\atmfd.dll
[2017/04/11 20:54:25 | 001,329,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\quartz.dll
[2017/04/11 20:54:25 | 001,155,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtmlmedia.dll
[2017/04/11 20:54:25 | 000,346,320 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iedkcs32.dll
[2017/04/11 20:54:25 | 000,218,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\dxgmms1.sys
[2017/04/11 20:54:24 | 004,000,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntkrnlpa.exe
[2017/04/11 20:54:24 | 000,667,648 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MsSpellCheckingFacility.exe
[2017/04/11 20:54:23 | 003,945,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ntoskrnl.exe
[2017/04/11 20:54:22 | 000,805,376 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdosys.dll
[2017/04/11 20:54:22 | 000,693,248 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
[2017/04/11 20:54:22 | 000,689,664 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
[2017/04/11 20:54:22 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mfmjpegdec.dll
[2017/04/11 20:54:22 | 000,067,584 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\asycfilt.dll
[2017/04/11 20:54:19 | 002,953,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wucltux.dll
[2017/04/11 20:54:19 | 000,710,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieapfltr.dll
[2017/04/11 20:54:19 | 000,400,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\srcore.dll
[2017/04/11 20:54:19 | 000,174,080 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuwebv.dll
[2017/04/11 20:54:18 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapi.dll
[2017/04/11 20:54:18 | 000,262,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rstrui.exe
[2017/04/11 20:54:17 | 000,476,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
[2017/04/11 20:54:17 | 000,341,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\html.iec
[2017/04/11 20:54:16 | 000,620,032 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9diag.dll
[2017/04/11 20:54:16 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtmsft.dll
[2017/04/11 20:54:16 | 000,279,040 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dxtrans.dll
[2017/04/11 20:54:16 | 000,221,184 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpudd.dll
[2017/04/11 20:54:15 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
[2017/04/11 20:54:15 | 000,223,232 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ncrypt.dll
[2017/04/11 20:54:15 | 000,171,008 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
[2017/04/11 20:54:15 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msrating.dll
[2017/04/11 20:54:15 | 000,141,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rpchttp.dll
[2017/04/11 20:54:15 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieUnatt.exe
[2017/04/11 20:54:15 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\cdd.dll
[2017/04/11 20:54:15 | 000,103,936 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollector.exe
[2017/04/11 20:54:15 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wudriver.dll
[2017/04/11 20:54:15 | 000,091,136 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\inseng.dll
[2017/04/11 20:54:15 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\MshtmlDac.dll
[2017/04/11 20:54:15 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\JavaScriptCollectionAgent.dll
[2017/04/11 20:54:15 | 000,047,616 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwproxystub.dll
[2017/04/11 20:54:15 | 000,047,104 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
[2017/04/11 20:54:14 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidpolicyconverter.exe
[2017/04/11 20:54:14 | 000,082,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\bcrypt.dll
[2017/04/11 20:54:14 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\WinSetupUI.dll
[2017/04/11 20:54:14 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\fontsub.dll
[2017/04/11 20:54:14 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
[2017/04/11 20:54:14 | 000,050,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidapi.dll
[2017/04/11 20:54:14 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\setbcdlocale.dll
[2017/04/11 20:54:14 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\auditpol.exe
[2017/04/11 20:54:14 | 000,038,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\csrsrv.dll
[2017/04/11 20:54:14 | 000,035,840 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups2.dll
[2017/04/11 20:54:14 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wuapp.exe
[2017/04/11 20:54:14 | 000,034,304 | ---- | C] (Adobe Systems) -- C:\Windows\System32\atmlib.dll
[2017/04/11 20:54:14 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
[2017/04/11 20:54:14 | 000,030,208 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wups.dll
[2017/04/11 20:54:14 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll
[2017/04/11 20:54:14 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\wu.upgrade.ps.dll
[2017/04/11 20:54:14 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\dciman32.dll
[2017/04/11 20:54:14 | 000,006,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\apisetschema.dll
[2017/04/11 20:54:14 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
[2017/04/11 20:54:14 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
[2017/04/11 20:54:13 | 002,746,880 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\rdpcorets.dll
[2017/04/11 20:54:13 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\appidcertstorecheck.exe
[2017/04/11 20:54:13 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
[2017/04/11 20:54:13 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
[2017/04/11 20:54:13 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
[2017/04/11 20:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
[2017/04/11 20:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
[2017/04/11 20:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
[2017/04/11 20:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
[2017/04/11 20:54:13 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
[2017/04/11 20:54:13 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
[2017/04/11 20:54:12 | 000,690,688 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\adtschema.dll
[2017/04/11 20:54:12 | 000,146,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msaudite.dll
[2017/04/11 20:54:11 | 002,724,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
[2017/04/11 20:54:11 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msobjs.dll
[2017/04/11 20:54:10 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RdpGroupPolicyExtension.dll
[2017/04/11 20:54:10 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieetwcollectorres.dll
[2017/04/09 17:52:39 | 000,000,000 | ---D | C] -- C:\Users\DOM\AppData\Roaming\MPC-BE
[2017/04/09 17:52:00 | 000,000,000 | ---D | C] -- C:\ProgramData\MPC-BE
[2017/04/09 17:52:00 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-BE
[2017/04/09 17:51:57 | 000,000,000 | ---D | C] -- C:\Program Files\MPC-BE
[2017/04/06 20:42:43 | 000,069,160 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvvhci.sys
[2017/04/06 20:42:41 | 000,184,880 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvhda32v.sys
[2017/04/06 20:42:41 | 000,044,592 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvhdap32.dll
[2017/04/06 20:42:38 | 001,097,272 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco3238165.dll
[2017/04/06 20:42:38 | 000,929,728 | ---- | C] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco3238165.dll
[2015/06/21 11:54:32 | 000,081,408 | ---- | C] (Microsoft Corporation) -- C:\Program Files\taskkill.exe
[2015/04/21 01:30:14 | 007,972,896 | ---- | C] (TeamViewer GmbH) -- C:\Users\DOM\AppData\Roaming\TeamViewer_Setup_fr.exe

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2031/11/11 15:50:55 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
[2031/11/11 15:50:44 | 001,158,144 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsPrint.dll
[2031/11/11 15:50:44 | 001,080,832 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10.dll
[2031/11/11 15:50:44 | 000,364,544 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\XpsGdiConverter.dll
[2031/11/11 15:50:44 | 000,293,376 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\dxgi.dll
[2031/11/11 15:50:44 | 000,249,856 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1core.dll
[2031/11/11 15:50:44 | 000,220,160 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10core.dll
[2031/11/11 15:50:44 | 000,207,872 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\WindowsCodecsExt.dll
[2031/11/11 15:50:44 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d10_1.dll
[2031/11/11 15:50:44 | 000,010,752 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,009,728 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
[2031/11/11 15:50:44 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
[2031/11/11 15:50:44 | 000,005,632 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,004,096 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,003,584 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-advapi32-l2-1-0.dll
[2031/11/11 15:50:44 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll
[2031/11/11 15:50:44 | 000,003,072 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-shell32-l1-1-0.dll
[2031/11/11 15:50:44 | 000,002,560 | -H-- | M] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll
[2031/11/11 15:49:21 | 001,505,280 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\d3d11.dll
[2017/05/06 16:51:54 | 000,023,504 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2017/05/06 16:51:53 | 000,023,504 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2017/05/06 16:25:09 | 000,000,432 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts.ics
[2017/05/06 16:24:09 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2017/05/06 16:24:05 | 2518,528,000 | -HS- | M] () -- C:\hiberfil.sys
[2017/05/06 14:14:52 | 000,170,200 | ---- | M] (Malwarebytes) -- C:\Windows\System32\drivers\MBAMSwissArmy.sys
[2017/05/06 10:43:44 | 004,102,600 | ---- | M] () -- C:\Users\DOM\Desktop\adwcleaner_6.046.exe
[2017/05/06 10:09:39 | 000,001,033 | ---- | M] () -- C:\Users\DOM\Desktop\IP Hider Pro.lnk
[2017/05/05 16:38:31 | 000,001,374 | ---- | M] () -- C:\Users\Public\Desktop\GeForce Experience.lnk
[2017/05/05 06:23:03 | 006,983,608 | ---- | M] () -- C:\Windows\System32\perfh00C.dat
[2017/05/05 06:23:02 | 002,515,996 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2017/05/05 06:23:02 | 002,190,300 | ---- | M] () -- C:\Windows\System32\perfc00C.dat
[2017/05/05 06:22:59 | 001,897,402 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2017/05/04 17:25:55 | 000,000,118 | ---- | M] () -- C:\Windows\KaceHD410.ini
[2017/05/03 22:21:33 | 001,477,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvspcap.dll
[2017/05/03 22:21:32 | 001,317,496 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvspbridge.dll
[2017/05/03 22:21:32 | 000,100,472 | ---- | M] () -- C:\Windows\System32\NvRtmpStreamer32.dll
[2017/05/03 22:21:29 | 000,042,104 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvvad32v.sys
[2017/05/03 22:21:28 | 000,143,480 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvaudcap32v.dll
[2017/05/03 21:28:28 | 000,001,951 | ---- | M] () -- C:\Windows\NvTelemetryContainerRecovery.bat
[2017/05/03 17:16:14 | 000,157,725 | ---- | M] () -- C:\Users\DOM\Desktop\012_EdOffrePrix_577.pdf
[2017/05/02 00:28:55 | 035,281,528 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcompiler.dll
[2017/05/02 00:28:55 | 028,592,760 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvoglv32.dll
[2017/05/02 00:28:55 | 017,423,240 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvwgf2um.dll
[2017/05/02 00:28:55 | 013,401,256 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvd3dum.dll
[2017/05/02 00:28:55 | 012,277,880 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\drivers\nvlddmkm.sys
[2017/05/02 00:28:55 | 009,245,560 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuda.dll
[2017/05/02 00:28:55 | 009,014,792 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvptxJitCompiler.dll
[2017/05/02 00:28:55 | 008,805,416 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvopencl.dll
[2017/05/02 00:28:55 | 003,592,312 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvapi.dll
[2017/05/02 00:28:55 | 003,012,032 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcuvid.dll
[2017/05/02 00:28:55 | 001,095,800 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco3238205.dll
[2017/05/02 00:28:55 | 000,991,168 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\NvFBC.dll
[2017/05/02 00:28:55 | 000,929,912 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco3238205.dll
[2017/05/02 00:28:55 | 000,911,992 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\NvIFR.dll
[2017/05/02 00:28:55 | 000,577,728 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvfatbinaryLoader.dll
[2017/05/02 00:28:55 | 000,499,136 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\NvIFROpenGL.dll
[2017/05/02 00:28:55 | 000,426,128 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvEncodeAPI.dll
[2017/05/02 00:28:55 | 000,406,736 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvumdshim.dll
[2017/05/02 00:28:55 | 000,148,016 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvinit.dll
[2017/05/02 00:28:55 | 000,131,720 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvoglshim32.dll
[2017/05/02 00:28:55 | 000,037,368 | ---- | M] () -- C:\Windows\System32\nvinfo.pb
[2017/05/01 22:52:54 | 000,001,951 | ---- | M] () -- C:\Windows\NvContainerRecovery.bat
[2017/05/01 22:39:42 | 004,004,288 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvcpl.dll
[2017/05/01 22:39:42 | 002,102,392 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvc.dll
[2017/05/01 22:39:39 | 001,762,936 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvsvcr.dll
[2017/05/01 22:39:39 | 000,462,968 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nv3dappshext.dll
[2017/05/01 22:39:39 | 000,381,888 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvmctray.dll
[2017/05/01 22:39:39 | 000,081,856 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nv3dappshextr.dll
[2017/05/01 22:39:39 | 000,068,728 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvshext.dll
[2017/05/01 22:14:49 | 000,134,592 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvStreaming.exe
[2017/04/26 16:50:59 | 000,095,808 | ---- | M] (Oracle Corporation) -- C:\Windows\System32\WindowsAccessBridge.dll
[2017/04/25 10:56:53 | 007,944,687 | ---- | M] () -- C:\Windows\System32\nvcoproc.bin
[2017/04/20 03:50:37 | 001,095,616 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispco3238189.dll
[2017/04/20 03:50:37 | 000,929,912 | ---- | M] (NVIDIA Corporation) -- C:\Windows\System32\nvdispgenco3238189.dll
[2017/04/15 08:35:33 | 016,446,384 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2017/04/11 17:15:55 | 000,802,904 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
[2017/04/11 17:15:55 | 000,144,472 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2031/11/11 15:47:52 | 000,001,121 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2017/05/06 10:59:41 | 004,102,600 | ---- | C] () -- C:\Users\DOM\Desktop\adwcleaner_6.046.exe
[2017/05/05 16:47:05 | 000,525,600 | ---- | C] () -- C:\Windows\System32\vulkan-1.dll
[2017/05/05 16:47:05 | 000,233,760 | ---- | C] () -- C:\Windows\System32\vulkaninfo.exe
[2017/05/03 17:15:18 | 000,157,725 | ---- | C] () -- C:\Users\DOM\Desktop\012_EdOffrePrix_577.pdf
[2017/04/27 21:42:59 | 000,000,118 | ---- | C] () -- C:\Windows\KaceHD410.ini
[2017/04/26 21:44:26 | 000,037,368 | ---- | C] () -- C:\Windows\System32\nvinfo.pb
[2017/04/06 20:42:35 | 000,000,669 | ---- | C] () -- C:\Windows\System32\nv-vk32.json
[2017/03/10 23:17:28 | 000,525,600 | ---- | C] () -- C:\Windows\System32\vulkan-1-1-0-42-1.dll
[2017/03/10 23:17:20 | 000,233,760 | ---- | C] () -- C:\Windows\System32\vulkaninfo-1-1-0-42-1.exe
[2017/02/27 19:56:56 | 000,001,456 | ---- | C] () -- C:\Users\DOM\AppData\Local\Adobe Enregistrer pour le Web 13.0 Prefs
[2017/02/04 15:28:22 | 000,000,016 | ---- | C] () -- C:\ProgramData\mntemp
[2017/02/03 16:43:25 | 000,000,098 | ---- | C] () -- C:\Windows\KaceHD.ini
[2017/01/17 17:09:39 | 000,143,872 | ---- | C] () -- C:\Windows\System32\igdail32.dll
[2017/01/17 17:09:24 | 000,000,889 | ---- | C] () -- C:\Windows\System32\DPTopologyApp.exe.config
[2017/01/17 17:09:22 | 000,080,384 | ---- | C] () -- C:\Windows\System32\igfxCUIServicePS.dll
[2017/01/17 17:09:19 | 000,000,889 | ---- | C] () -- C:\Windows\System32\Gfxv4_0.exe.config
[2017/01/17 17:09:17 | 000,010,240 | ---- | C] ( ) -- C:\Windows\System32\igfxEMLibv2_0.dll
[2017/01/17 17:09:17 | 000,010,240 | ---- | C] ( ) -- C:\Windows\System32\igfxEMLib.dll
[2017/01/17 17:09:16 | 000,005,120 | ---- | C] ( ) -- C:\Windows\System32\igfxLHMLibv2_0.dll
[2017/01/17 17:09:16 | 000,005,120 | ---- | C] ( ) -- C:\Windows\System32\igfxLHMLib.dll
[2017/01/17 17:09:15 | 000,069,632 | ---- | C] ( ) -- C:\Windows\System32\igfxDHLibv2_0.dll
[2017/01/17 17:09:15 | 000,010,752 | ---- | C] ( ) -- C:\Windows\System32\igfxDILibv2_0.dll
[2017/01/17 17:09:15 | 000,010,752 | ---- | C] ( ) -- C:\Windows\System32\igfxDILib.dll
[2017/01/17 17:09:14 | 000,182,784 | ---- | C] () -- C:\Windows\System32\igdde32.dll
[2017/01/17 17:09:14 | 000,059,904 | ---- | C] ( ) -- C:\Windows\System32\igfxDHLib.dll
[2017/01/17 17:09:07 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
[2017/01/15 13:10:16 | 007,704,619 | ---- | C] () -- C:\Windows\System32\drivers\RTAIODAT.DAT
[2017/01/15 13:10:06 | 000,197,440 | ---- | C] () -- C:\Windows\System32\AcpiServiceVnA.dll
[2017/01/15 13:10:06 | 000,096,600 | ---- | C] () -- C:\Windows\System32\audioLibVc.dll
[2016/11/24 16:54:07 | 000,674,816 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2016/11/24 16:54:07 | 000,216,064 | ---- | C] ( ) -- C:\Windows\System32\lagarith.dll
[2016/11/24 16:54:06 | 000,282,112 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2016/11/24 16:54:06 | 000,112,128 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2016/11/15 16:37:06 | 000,041,952 | ---- | C] () -- C:\Windows\System32\AmUStor.ini
[2016/11/15 16:37:06 | 000,000,124 | ---- | C] () -- C:\Windows\System32\VendorCmd6485_SetSSC.bin
[2016/11/15 16:37:06 | 000,000,032 | ---- | C] () -- C:\Windows\System32\VendorCommand_MS1bit.bin
[2016/11/15 16:37:06 | 000,000,008 | ---- | C] () -- C:\Windows\System32\CardDetect6420.bin
[2016/11/15 16:37:06 | 000,000,008 | ---- | C] () -- C:\Windows\System32\CardDetect6366.bin
[2016/11/15 16:37:06 | 000,000,008 | ---- | C] () -- C:\Windows\System32\CardDetect6362.bin
[2016/11/15 16:37:06 | 000,000,008 | ---- | C] () -- C:\Windows\System32\CardDetect6361.bin
[2016/11/15 16:37:06 | 000,000,008 | ---- | C] () -- C:\Windows\System32\CardDetect6339.bin
[2016/11/12 17:50:25 | 007,944,687 | ---- | C] () -- C:\Windows\System32\nvcoproc.bin
[2016/11/05 17:12:20 | 000,022,328 | ---- | C] () -- C:\Windows\System32\drivers\PnkBstrK.sys
[2016/11/05 17:12:20 | 000,022,328 | ---- | C] () -- C:\Users\DOM\AppData\Roaming\PnkBstrK.sys
[2016/11/05 17:12:05 | 000,107,832 | ---- | C] () -- C:\Windows\System32\PnkBstrB.exe
[2016/11/05 17:12:02 | 000,682,280 | ---- | C] () -- C:\Windows\System32\pbsvc.exe
[2016/11/05 17:12:02 | 000,066,872 | ---- | C] () -- C:\Windows\System32\PnkBstrA.exe
[2016/10/14 17:47:46 | 000,000,232 | ---- | C] () -- C:\Windows\System32\dllhost.exe.config
[2016/10/14 17:46:39 | 001,179,672 | ---- | C] () -- C:\Windows\unins000.exe
[2016/10/14 17:46:39 | 000,006,749 | ---- | C] () -- C:\Windows\unins000.dat
[2016/03/01 19:26:36 | 000,000,028 | ---- | C] () -- C:\Windows\Robota.INI
[2015/12/20 12:14:07 | 005,035,768 | -H-- | C] () -- C:\Windows\System32\mlfcache.dat
[2015/11/19 19:30:31 | 000,100,472 | ---- | C] () -- C:\Windows\System32\NvRtmpStreamer32.dll
[2015/11/14 19:08:11 | 000,147,456 | ---- | C] () -- C:\Windows\System32\gswin32.exe
[2015/11/14 19:08:11 | 000,139,264 | ---- | C] () -- C:\Windows\System32\gswin32c.exe
[2015/11/14 19:08:10 | 012,574,720 | ---- | C] () -- C:\Windows\System32\gsdll32.dll
[2015/10/27 22:55:37 | 000,000,124 | ---- | C] () -- C:\Windows\KaceHD408.ini
[2015/10/23 16:57:06 | 000,000,031 | ---- | C] () -- C:\Windows\WebUpdateSvc4.INI
[2015/10/09 18:45:51 | 000,000,640 | ---- | C] () -- C:\Windows\System32\VendorCmd6435.bin
[2015/10/09 18:45:51 | 000,000,032 | ---- | C] () -- C:\Windows\System32\VendorCmd6485.bin
[2015/10/09 18:45:51 | 000,000,032 | ---- | C] () -- C:\Windows\System32\VendorCmd6465.bin
[2015/10/09 18:45:51 | 000,000,008 | ---- | C] () -- C:\Windows\System32\CardDetect6485.bin
[2015/08/09 04:52:04 | 017,493,192 | ---- | C] () -- C:\Windows\System32\igd11dxva32.dll
[2015/08/07 23:34:08 | 006,725,182 | ---- | C] () -- C:\Windows\System32\igdclbif.bin
[2015/07/04 18:24:55 | 000,000,082 | ---- | C] () -- C:\Windows\System32\winsevr.dat
[2015/07/04 18:24:36 | 000,129,720 | ---- | C] () -- C:\Windows\System32\ammntdrv.sys
[2015/07/04 18:24:36 | 000,026,424 | ---- | C] () -- C:\Windows\System32\ambakdrv.sys
[2015/07/04 18:24:36 | 000,014,392 | ---- | C] () -- C:\Windows\System32\amwrtdrv.sys
[2015/02/23 18:32:50 | 001,730,048 | ---- | C] () -- C:\Users\DOM\ZHPCleaner.exe
[2015/02/01 15:43:54 | 000,000,009 | -HS- | C] () -- C:\Users\DOM\AppData\Roaming\windata.xpd
[2015/01/25 18:12:14 | 000,002,086 | ---- | C] () -- C:\Users\DOM\AppData\Roaming\ORH
[2014/10/14 17:02:37 | 000,001,794 | ---- | C] () -- C:\Users\DOM\AppData\Roaming\waver_2.95.dat
[2014/09/25 18:02:19 | 000,000,538 | RHS- | C] () -- C:\ProgramData\ntuser.pol
[2014/06/25 16:31:10 | 002,120,774 | ---- | C] () -- C:\Users\DOM\Localizable.strings
[2014/06/04 19:17:24 | 000,007,629 | ---- | C] () -- C:\Users\DOM\AppData\Local\resmon.resmoncfg
[2014/06/03 14:22:24 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2005/04/08 04:16:43 | 001,529,288 | -H-- | C] () -- C:\Users\DOM\AppData\Roaming\DOMv1.18.0 - Trial versionlog.dat

[color=#E56717]========== ZeroAccess Check ==========[/color]

[2009/07/14 06:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2016/08/29 17:12:50 | 012,880,384 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 14:19:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 03:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

[color=#E56717]========== LOP Check ==========[/color]

[2016/02/16 19:09:38 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Ableton
[2016/11/25 20:45:28 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\AC3Filter
[2017/01/27 20:39:19 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Actual Tools
[2016/12/13 23:01:43 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Agile Web Solutions
[2016/09/19 16:40:34 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\ahelper
[2015/07/11 18:07:53 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\AnvsoftPdfTools
[2015/01/12 17:40:14 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\AVG
[2017/03/04 20:40:30 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\BitTorrent
[2015/05/17 18:00:03 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\BSD Concept
[2016/12/22 17:08:02 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\BSplayer
[2017/02/24 17:09:21 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\BSplayer PRO
[2016/11/24 18:06:05 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\calibre
[2014/10/24 17:05:43 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Canneverbe Limited
[2014/12/04 20:30:33 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Canon
[2015/03/13 23:17:19 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\CBL-Electronics
[2016/06/01 17:52:42 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\ChemTable Software
[2015/02/04 18:54:42 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\com.adobe.formscentral.FormsCentralForAcrobat
[2014/11/11 19:18:51 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\com.adobe.WidgetBrowser
[2016/05/08 15:51:57 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\CrystalIdea Software
[2016/10/06 15:47:20 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Cyberduck
[2016/01/26 16:36:03 | 000,000,000 | -HSD | M] -- C:\Users\DOM\AppData\Roaming\Cyberduck Updater AU
[2016/12/20 23:02:15 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DAEMON Tools Pro
[2014/11/02 10:24:17 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DAEMON Tools Ult
[2014/11/02 10:24:57 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DAEMON Tools Ultra
[2015/09/15 17:37:47 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DesktopDPO-658e69d0149cb4f5f5e5415bc10e2d8d
[2015/11/09 18:50:26 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DigitalDJ17
[2015/03/16 18:43:04 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DigitalVolcano
[2017/02/15 19:17:17 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\DiskAid
[2014/10/08 14:19:31 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\dlg
[2016/10/06 17:31:44 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Downloaded Installations
[2017/01/17 17:02:29 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Easeware
[2016/10/19 17:13:23 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\EQATEC Analytics
[2015/04/10 17:08:31 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Eusing
[2017/03/20 18:11:20 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\FileZilla
[2015/07/04 18:44:21 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Foxit Software
[2016/09/01 18:37:42 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\GHISLER
[2016/09/19 16:40:40 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\gSyncit
[2017/03/15 19:29:59 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\HD Tune Pro
[2016/10/14 17:49:59 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\HMYGSetting
[2015/11/08 13:03:37 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Hotspot Shield
[2014/06/23 18:30:53 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iFunBox.NXGen
[2017/02/15 19:22:27 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iFunbox_UserCache
[2014/07/03 18:37:57 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\ihelper2014
[2017/03/26 19:04:17 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Image-Line
[2017/02/15 19:22:00 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iMazing
[2017/03/20 19:02:19 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iMobie
[2017/03/20 18:49:47 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iMobie Inc
[2017/05/06 16:21:59 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\IObit
[2016/09/30 19:47:50 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\IP Hider Pro
[2016/11/18 19:53:16 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\IsolatedStorage
[2015/01/25 23:39:55 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iterate_GmbH
[2015/11/12 19:24:42 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\iZotope
[2016/11/14 18:11:56 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\keit.co
[2016/03/08 17:51:26 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Locktime
[2016/03/08 17:46:07 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Locktime Software
[2016/01/29 19:26:45 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\MAGIX
[2016/09/19 16:40:42 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\MAGIX Music Maker 2016 Live
[2016/11/01 17:00:12 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Mediatronic
[2016/12/10 15:03:18 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Mirillis
[2017/02/15 19:23:03 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\MOBILedit! PhoneCopier
[2015/09/07 18:27:51 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\mojosoft
[2016/10/20 18:14:06 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Molotov
[2017/04/09 17:53:23 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\MPC-BE
[2014/11/07 19:35:26 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Musicmatch
[2014/07/05 08:18:11 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\naviextras
[2017/02/04 15:36:02 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Nitro
[2016/06/27 16:24:23 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Nitro PDF
[2014/10/30 15:32:28 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Notepad++
[2016/03/23 17:25:18 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Nuance
[2015/07/04 18:26:52 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Opera Software
[2016/07/01 15:34:06 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Oracle
[2016/02/16 19:28:38 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\PDF Architect 4
[2014/06/14 16:44:37 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\PearlMountain
[2014/09/02 14:38:39 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\PhotoCollageMax
[2017/05/06 16:21:58 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\ProductData
[2015/03/14 16:31:42 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\redsn0w
[2015/09/28 18:52:49 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Samsung
[2016/04/10 20:42:30 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Serviio-Console-Wrapper
[2014/08/28 16:35:28 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\SFR
[2015/01/26 16:45:15 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Soda PDF 3D Reader
[2016/04/27 17:33:29 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\SolidDocuments
[2015/11/20 22:08:36 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\SongManager
[2016/01/29 15:44:02 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Soundplant
[2014/11/11 18:50:52 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\StageManager.BD092818F67280F4B42B04877600987F0111B594.1
[2015/11/14 20:53:23 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Stardock
[2014/09/02 14:33:44 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\StreamTorrent
[2014/08/26 20:01:13 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\SumatraPDF
[2014/10/27 19:09:24 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\SuperHideIP
[2016/10/22 15:15:23 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Syncios
[2016/12/21 19:24:57 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\SynciOS Data Transfer
[2015/09/03 22:18:07 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\TaiG
[2015/08/31 19:16:17 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\TaiGPro
[2015/08/15 12:23:51 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\TeamViewer
[2014/12/07 19:12:35 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Teiron
[2017/05/06 16:21:58 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\TeraCopy
[2015/11/29 19:36:24 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Thunderbird
[2014/07/03 21:19:22 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\TomTom
[2014/10/09 16:57:19 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\UDC Profiles
[2015/09/03 22:18:06 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Ulead Systems
[2017/05/06 16:27:25 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\USBSafelyRemove
[2017/05/06 16:21:58 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\uTorrent
[2014/08/20 17:57:28 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\VOS
[2015/04/22 17:46:48 | 000,000,000 | RHSD | M] -- C:\Users\DOM\AppData\Roaming\Windows samata
[2016/03/09 21:39:19 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\WindSolutions
[2016/11/28 21:51:54 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Wondershare
[2017/01/20 19:00:40 | 000,000,000 | -HSD | M] -- C:\Users\DOM\AppData\Roaming\wyUpdate AU
[2016/09/19 16:40:43 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\XBMC
[2014/06/25 22:45:15 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Xilisoft
[2016/07/05 15:46:31 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Yamicsoft
[2015/11/14 19:11:55 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\YCanPDF
[2015/10/21 17:19:32 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\YoWindow
[2016/03/23 17:39:18 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\Zeon
[2017/03/24 18:16:44 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\ZHP
[2015/12/07 20:30:00 | 000,000,000 | ---D | M] -- C:\Users\DOM\AppData\Roaming\{2A82324E-1E3C-4E88-A68A-8BA11B0417FE}

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2015/02/06 16:54:40 | 000,000,110 | ---- | M] () -- C:\.dir
[2017/01/23 19:39:20 | 000,000,002 | ---- | M] () -- C:\11.txt
[2016/09/20 18:01:18 | 000,000,145 | ---- | M] () -- C:\aSPL_PBD.LOG
[2009/06/10 23:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2015/01/12 21:06:28 | 000,006,728 | ---- | M] () -- C:\bootsqm.dat
[2014/10/22 17:47:20 | 000,036,924 | ---- | M] () -- C:\ComboFix.txt
[2009/06/10 23:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
[2015/02/23 18:47:17 | 000,000,000 | ---- | M] () -- C:\essai.txt
[2017/05/06 16:24:05 | 2518,528,000 | -HS- | M] () -- C:\hiberfil.sys
[2014/11/23 11:25:40 | 000,000,076 | ---- | M] () -- C:\hook.log
[2014/06/16 15:44:56 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2016/01/20 12:20:16 | 000,051,412 | ---- | M] () -- C:\License.rtf
[2014/06/16 15:44:56 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2017/05/06 16:24:06 | 3672,612,864 | -HS- | M] () -- C:\pagefile.sys
[2016/06/09 18:38:06 | 000,001,024 | -H-- | M] () -- C:\SYSTAG.BIN
[2015/02/24 19:39:35 | 000,000,011 | ---- | M] () -- C:\trace.ini
[2014/11/25 15:16:33 | 000,000,030 | ---- | M] () -- C:\WTControl_debug_log.txt

[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]

[color=#A23BEC]< %PROGRAMFILES%\*.* >[/color]
[2009/07/14 06:41:57 | 000,000,174 | -HS- | M] () -- C:\Program Files\desktop.ini
[2015/06/21 11:54:32 | 000,081,408 | ---- | M] (Microsoft Corporation) -- C:\Program Files\taskkill.exe

[color=#A23BEC]< %PROGRAMFILES%\*. >[/color]
[2016/12/13 23:03:03 | 000,000,000 | ---D | M] -- C:\Program Files\1Password
[2015/03/19 23:00:44 | 000,000,000 | ---D | M] -- C:\Program Files\Acer Inc
[2016/11/05 17:08:05 | 000,000,000 | ---D | M] -- C:\Program Files\Activision
[2017/01/27 17:42:29 | 000,000,000 | ---D | M] -- C:\Program Files\Actual Multiple Monitors
[2015/07/11 18:16:14 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe
[2014/10/31 18:52:09 | 000,000,000 | ---D | M] -- C:\Program Files\Adobe Media Player
[2014/09/25 17:30:10 | 000,000,000 | ---D | M] -- C:\Program Files\Aiseesoft Studio
[2014/06/05 22:30:58 | 000,000,000 | ---D | M] -- C:\Program Files\AmUStor
[2014/09/01 18:03:21 | 000,000,000 | ---D | M] -- C:\Program Files\Anuman Interactive
[2016/06/22 18:15:19 | 000,000,000 | ---D | M] -- C:\Program Files\AnvSoft
[2017/03/20 18:53:24 | 000,000,000 | ---D | M] -- C:\Program Files\AnyTrans
[2015/09/03 22:20:24 | 000,000,000 | ---D | M] -- C:\Program Files\AOMEI Backupper
[2017/04/01 10:51:11 | 000,000,000 | ---D | M] -- C:\Program Files\Apple Software Update
[2015/12/01 18:26:01 | 000,000,000 | ---D | M] -- C:\Program Files\Ashampoo
[2017/03/26 19:09:19 | 000,000,000 | ---D | M] -- C:\Program Files\ASIO4ALL v2
[2015/01/02 11:55:24 | 000,000,000 | ---D | M] -- C:\Program Files\ASUS
[2017/02/24 15:19:30 | 000,000,000 | ---D | M] -- C:\Program Files\Audials
[2015/01/12 17:39:50 | 000,000,000 | ---D | M] -- C:\Program Files\AVG
[2017/01/28 19:24:07 | 000,000,000 | ---D | M] -- C:\Program Files\Avira
[2014/08/22 08:56:02 | 000,000,000 | ---D | M] -- C:\Program Files\AVS4YOU
[2016/11/03 19:56:13 | 000,000,000 | ---D | M] -- C:\Program Files\Black_Box
[2015/09/25 17:22:50 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour
[2015/04/11 15:04:20 | 000,000,000 | ---D | M] -- C:\Program Files\Bonjour Print Services
[2014/07/11 20:35:11 | 000,000,000 | ---D | M] -- C:\Program Files\Calibre2
[2014/12/04 20:17:34 | 000,000,000 | ---D | M] -- C:\Program Files\Canon
[2014/12/04 20:28:34 | 000,000,000 | -H-D | M] -- C:\Program Files\CanonBJ
[2015/09/03 22:18:34 | 000,000,000 | ---D | M] -- C:\Program Files\CCleaner
[2014/10/24 17:05:41 | 000,000,000 | ---D | M] -- C:\Program Files\CDBurnerXP
[2016/05/08 18:43:25 | 000,000,000 | ---D | M] -- C:\Program Files\CDex
[2014/09/22 19:20:57 | 000,000,000 | ---D | M] -- C:\Program Files\Clarus
[2014/06/10 16:40:56 | 000,000,000 | ---D | M] -- C:\Program Files\Cloudbrain
[2015/06/04 19:41:21 | 000,000,000 | ---D | M] -- C:\Program Files\Cobian Backup 11
[2017/04/26 16:51:45 | 000,000,000 | ---D | M] -- C:\Program Files\Common Files
[2014/10/24 21:35:46 | 000,000,000 | ---D | M] -- C:\Program Files\Corel
[2016/03/21 16:29:02 | 000,000,000 | ---D | M] -- C:\Program Files\Cyberduck
[2015/01/10 19:43:06 | 000,000,000 | ---D | M] -- C:\Program Files\CyberLink
[2015/01/15 18:22:08 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Pro
[2016/02/08 18:12:34 | 000,000,000 | ---D | M] -- C:\Program Files\DAEMON Tools Ultra
[2015/07/04 20:30:54 | 000,000,000 | ---D | M] -- C:\Program Files\DaumBack
[2017/01/28 11:25:17 | 000,000,000 | ---D | M] -- C:\Program Files\Deskshare
[2015/12/22 17:57:09 | 000,000,000 | ---D | M] -- C:\Program Files\DFX
[2015/07/05 12:10:54 | 000,000,000 | ---D | M] -- C:\Program Files\DigiDNA
[2015/09/21 19:29:50 | 000,000,000 | ---D | M] -- C:\Program Files\DivX
[2017/05/06 16:22:10 | 000,000,000 | ---D | M] -- C:\Program Files\DLL Suite
[2014/07/13 14:01:41 | 000,000,000 | ---D | M] -- C:\Program Files\DLLSuite
[2016/02/18 17:30:03 | 000,000,000 | ---D | M] -- C:\Program Files\Doremisoft
[2017/01/14 12:18:30 | 000,000,000 | ---D | M] -- C:\Program Files\Driver Magician
[2015/03/16 18:42:23 | 000,000,000 | ---D | M] -- C:\Program Files\Duplicate Cleaner Pro
[2017/03/15 18:53:55 | 000,000,000 | ---D | M] -- C:\Program Files\DVD Maker
[2016/01/11 18:39:21 | 000,000,000 | ---D | M] -- C:\Program Files\eBookConverter
[2014/06/03 14:52:00 | 000,000,000 | ---D | M] -- C:\Program Files\Elaborate Bytes
[2016/09/19 16:40:24 | 000,000,000 | ---D | M] -- C:\Program Files\eMule
[2016/05/06 20:23:28 | 000,000,000 | ---D | M] -- C:\Program Files\ESET
[2016/06/02 15:47:51 | 000,000,000 | ---D | M] -- C:\Program Files\EuroPlus
[2015/09/03 22:18:23 | 000,000,000 | ---D | M] -- C:\Program Files\FastStone Image Viewer
[2014/06/03 14:13:08 | 000,000,000 | -HSD | M] -- C:\Program Files\Fichiers communs
[2017/03/20 17:23:36 | 000,000,000 | ---D | M] -- C:\Program Files\FileZilla FTP Client
[2014/06/24 14:26:38 | 000,000,000 | ---D | M] -- C:\Program Files\FinalWire
[2014/11/21 20:28:36 | 000,000,000 | ---D | M] -- C:\Program Files\Folder Lock
[2015/07/04 18:47:50 | 000,000,000 | ---D | M] -- C:\Program Files\Foxit Software
[2016/09/19 16:40:24 | 000,000,000 | ---D | M] -- C:\Program Files\Free WMA MP3 Converter
[2015/04/10 17:13:04 | 000,000,000 | ---D | M] -- C:\Program Files\FreeVideoConverter.biz
[2016/03/04 15:55:19 | 000,000,000 | ---D | M] -- C:\Program Files\Google
[2014/06/19 15:43:40 | 000,000,000 | ---D | M] -- C:\Program Files\GPU-Z
[2015/06/29 18:09:19 | 000,000,000 | ---D | M] -- C:\Program Files\Hardcoded Software
[2017/03/15 19:19:15 | 000,000,000 | ---D | M] -- C:\Program Files\HD Tune Pro
[2016/06/09 18:50:50 | 000,000,000 | ---D | M] -- C:\Program Files\HDD Regenerator
[2015/12/15 18:25:06 | 000,000,000 | ---D | M] -- C:\Program Files\Hotspot Shield
[2017/01/28 11:37:43 | 000,000,000 | ---D | M] -- C:\Program Files\i-Funbox DevTeam
[2017/04/16 10:08:09 | 000,000,000 | ---D | M] -- C:\Program Files\Image-Line
[2016/11/05 17:16:58 | 000,000,000 | -H-D | M] -- C:\Program Files\InstallShield Installation Information
[2015/08/15 12:23:50 | 000,000,000 | ---D | M] -- C:\Program Files\Intel
[2017/04/12 17:34:56 | 000,000,000 | ---D | M] -- C:\Program Files\Internet Explorer
[2017/05/06 14:07:25 | 000,000,000 | ---D | M] -- C:\Program Files\IObit
[2017/05/06 16:22:10 | 000,000,000 | ---D | M] -- C:\Program Files\IP Hider Pro
[2017/01/27 17:02:35 | 000,000,000 | ---D | M] -- C:\Program Files\iPhone Explorer
[2017/03/25 19:27:18 | 000,000,000 | ---D | M] -- C:\Program Files\iPod
[2017/03/25 19:28:23 | 000,000,000 | ---D | M] -- C:\Program Files\iTunes
[2015/11/13 18:06:19 | 000,000,000 | ---D | M] -- C:\Program Files\iZotope
[2015/05/27 15:39:25 | 000,000,000 | ---D | M] -- C:\Program Files\Jasc Software Inc
[2017/04/26 16:52:02 | 000,000,000 | ---D | M] -- C:\Program Files\Java
[2017/02/15 15:39:37 | 000,000,000 | ---D | M] -- C:\Program Files\K-Lite Codec Pack
[2014/10/16 14:42:53 | 000,000,000 | ---D | M] -- C:\Program Files\Lavalys
[2015/11/13 18:11:54 | 000,000,000 | ---D | M] -- C:\Program Files\ma-config.com
[2015/01/02 11:52:27 | 000,000,000 | ---D | M] -- C:\Program Files\MagicISO
[2016/01/29 18:21:01 | 000,000,000 | ---D | M] -- C:\Program Files\MAGIX
[2016/08/30 17:08:24 | 000,000,000 | ---D | M] -- C:\Program Files\Malwarebytes Anti-Malware
[2015/05/05 17:16:30 | 000,000,000 | ---D | M] -- C:\Program Files\Manual
[2014/10/09 19:58:33 | 000,000,000 | ---D | M] -- C:\Program Files\MarkAny
[2014/06/24 20:26:50 | 000,000,000 | ---D | M] -- C:\Program Files\Max Recorder
[2016/11/01 17:00:27 | 000,000,000 | ---D | M] -- C:\Program Files\MediaCoder
[2016/10/02 09:13:29 | 000,000,000 | ---D | M] -- C:\Program Files\MediaInfo
[2015/11/17 15:54:16 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Analysis Services
[2014/10/15 20:34:50 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft ASP.NET
[2009/07/14 09:50:24 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Games
[2015/09/04 07:26:00 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft IntelliType Pro
[2017/01/14 11:17:48 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Mouse and Keyboard Center
[2015/11/17 15:59:00 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Office
[2017/04/12 17:17:35 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Silverlight
[2015/11/17 15:58:57 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft SQL Server Compact Edition
[2015/11/17 15:58:57 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Sync Framework
[2015/11/17 15:59:33 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Synchronization Services
[2014/06/03 15:20:15 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft Visual Studio 8
[2017/01/15 13:12:23 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft XNA
[2015/11/17 15:58:57 | 000,000,000 | ---D | M] -- C:\Program Files\Microsoft.NET
[2015/03/14 15:44:48 | 000,000,000 | ---D | M] -- C:\Program Files\MOBILedit! PhoneCopier
[2015/09/07 18:27:51 | 000,000,000 | ---D | M] -- C:\Program Files\MOJOSOFT
[2014/11/23 21:06:37 | 000,000,000 | ---D | M] -- C:\Program Files\Moo0
[2016/12/25 12:45:24 | 000,000,000 | ---D | M] -- C:\Program Files\Movavi Video Converter 14
[2017/05/06 16:22:10 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Firefox
[2017/05/06 16:22:10 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Maintenance Service
[2016/09/19 16:40:26 | 000,000,000 | ---D | M] -- C:\Program Files\Mozilla Thunderbird
[2016/09/19 16:40:26 | 000,000,000 | ---D | M] -- C:\Program Files\MP3Gain
[2016/03/09 21:39:34 | 000,000,000 | ---D | M] -- C:\Program Files\MP3Parse
[2014/11/23 23:22:03 | 000,000,000 | ---D | M] -- C:\Program Files\Mp4Gain
[2017/04/09 17:52:00 | 000,000,000 | ---D | M] -- C:\Program Files\MPC-BE
[2015/11/17 16:00:16 | 000,000,000 | ---D | M] -- C:\Program Files\MSBuild
[2016/01/29 19:21:59 | 000,000,000 | ---D | M] -- C:\Program Files\MSXML 4.0
[2017/04/15 09:03:36 | 000,000,000 | ---D | M] -- C:\Program Files\Musicmatch
[2017/03/18 16:25:10 | 000,000,000 | ---D | M] -- C:\Program Files\MyDrive Connect
[2016/08/16 13:30:44 | 000,000,000 | ---D | M] -- C:\Program Files\Naviextras
[2015/05/14 18:07:47 | 000,000,000 | ---D | M] -- C:\Program Files\Nero
[2016/10/06 17:32:09 | 000,000,000 | ---D | M] -- C:\Program Files\Nitro
[2016/09/19 16:40:27 | 000,000,000 | ---D | M] -- C:\Program Files\Notepad++
[2015/01/10 19:44:37 | 000,000,000 | ---D | M] -- C:\Program Files\NSIS Uninstall Information
[2016/03/23 17:24:06 | 000,000,000 | ---D | M] -- C:\Program Files\Nuance
[2017/05/06 16:22:10 | 000,000,000 | ---D | M] -- C:\Program Files\NVIDIA Corporation
[2016/09/19 16:40:28 | 000,000,000 | ---D | M] -- C:\Program Files\Okdo Document Converter Professional
[2017/03/05 10:41:55 | 000,000,000 | ---D | M] -- C:\Program Files\OO Software
[2016/11/25 19:15:52 | 000,000,000 | ---D | M] -- C:\Program Files\OpenVPN
[2015/05/05 19:45:30 | 000,000,000 | ---D | M] -- C:\Program Files\Outsim
[2014/07/12 18:37:49 | 000,000,000 | ---D | M] -- C:\Program Files\PDF Reader
[2017/01/27 19:13:38 | 000,000,000 | ---D | M] -- C:\Program Files\PDF Technologies
[2016/09/19 16:40:28 | 000,000,000 | ---D | M] -- C:\Program Files\PDF24
[2016/09/14 17:40:10 | 000,000,000 | ---D | M] -- C:\Program Files\PDFCreator
[2017/02/15 16:51:21 | 000,000,000 | ---D | M] -- C:\Program Files\PeerBlock
[2014/09/02 14:38:14 | 000,000,000 | ---D | M] -- C:\Program Files\PhotoCollageMax
[2016/06/07 16:40:43 | 000,000,000 | ---D | M] -- C:\Program Files\Picture Collage Maker Pro
[2015/04/16 17:10:07 | 000,000,000 | ---D | M] -- C:\Program Files\Piriform Ltd
[2016/06/06 15:59:21 | 000,000,000 | ---D | M] -- C:\Program Files\Primera Technology
[2016/02/15 19:20:38 | 000,000,000 | ---D | M] -- C:\Program Files\QuickTime
[2015/06/02 16:30:07 | 000,000,000 | ---D | M] -- C:\Program Files\Raidsonic
[2014/09/06 09:55:09 | 000,000,000 | ---D | M] -- C:\Program Files\Realtek
[2009/07/14 06:52:30 | 000,000,000 | ---D | M] -- C:\Program Files\Reference Assemblies
[2016/06/01 17:52:13 | 000,000,000 | ---D | M] -- C:\Program Files\Reg Organizer
[2015/09/03 22:18:15 | 000,000,000 | ---D | M] -- C:\Program Files\SAM CoDeC Pack
[2015/09/28 18:51:39 | 000,000,000 | ---D | M] -- C:\Program Files\Samsung
[2017/03/06 19:40:22 | 000,000,000 | ---D | M] -- C:\Program Files\Screaming Frog SEO Spider
[2014/09/23 16:44:12 | 000,000,000 | ---D | M] -- C:\Program Files\Serge_LAGIER
[2016/04/14 22:01:05 | 000,000,000 | ---D | M] -- C:\Program Files\Serviio
[2015/12/15 16:48:53 | 000,000,000 | ---D | M] -- C:\Program Files\SFR
[2014/10/08 17:08:31 | 000,000,000 | ---D | M] -- C:\Program Files\Sniper Elite 3
[2014/08/27 18:12:55 | 000,000,000 | ---D | M] -- C:\Program Files\SoftOrbits Photo Retoucher
[2016/09/19 16:40:28 | 000,000,000 | ---D | M] -- C:\Program Files\SopCast
[2015/02/05 20:06:07 | 000,000,000 | ---D | M] -- C:\Program Files\Spybot - Search & Destroy 2
[2015/11/14 20:50:43 | 000,000,000 | ---D | M] -- C:\Program Files\Stardock
[2014/10/27 19:08:51 | 000,000,000 | ---D | M] -- C:\Program Files\SuperHideIP
[2015/10/09 18:48:36 | 000,000,000 | ---D | M] -- C:\Program Files\Synaptics
[2017/01/29 12:17:04 | 000,000,000 | ---D | M] -- C:\Program Files\SysTools PDF Unlocker - v3.0 (Demo Version)
[2015/09/03 22:18:15 | 000,000,000 | ---D | M] -- C:\Program Files\TaigPro
[2016/05/08 18:46:29 | 000,000,000 | ---D | M] -- C:\Program Files\TAP-Windows
[2016/10/05 17:46:55 | 000,000,000 | ---D | M] -- C:\Program Files\TapinRadio
[2015/08/15 12:23:51 | 000,000,000 | ---D | M] -- C:\Program Files\TeamViewer
[2016/09/25 12:16:07 | 000,000,000 | ---D | M] -- C:\Program Files\TeraCopy
[2017/04/18 20:28:42 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom HOME 2
[2014/07/04 14:04:42 | 000,000,000 | ---D | M] -- C:\Program Files\TomTom International B.V
[2014/09/22 13:29:05 | 000,000,000 | ---D | M] -- C:\Program Files\Tracker Software
[2017/01/04 15:50:04 | 000,000,000 | ---D | M] -- C:\Program Files\TVA-Calc
[2016/05/07 09:29:21 | 000,000,000 | ---D | M] -- C:\Program Files\UlisesSoft
[2014/10/09 16:54:05 | 000,000,000 | ---D | M] -- C:\Program Files\Universal Document Converter
[2015/08/15 12:23:51 | 000,000,000 | ---D | M] -- C:\Program Files\Unlocker
[2015/04/14 17:46:22 | 000,000,000 | ---D | M] -- C:\Program Files\USB Safely Remove
[2016/09/12 16:30:10 | 000,000,000 | ---D | M] -- C:\Program Files\uTorrent
[2014/09/01 18:05:02 | 000,000,000 | ---D | M] -- C:\Program Files\Veetle
[2016/07/02 17:05:18 | 000,000,000 | ---D | M] -- C:\Program Files\ViaMichelin
[2014/06/06 15:00:05 | 000,000,000 | ---D | M] -- C:\Program Files\VideoLAN
[2017/02/16 15:09:06 | 000,000,000 | ---D | M] -- C:\Program Files\VirtualDJ
[2014/11/03 20:31:16 | 000,000,000 | ---D | M] -- C:\Program Files\Visicom Media
[2014/06/24 17:15:31 | 000,000,000 | ---D | M] -- C:\Program Files\VS Revo Group
[2017/04/16 10:00:19 | 000,000,000 | ---D | M] -- C:\Program Files\VstPlugins
[2017/04/06 20:46:37 | 000,000,000 | ---D | M] -- C:\Program Files\VulkanRT
[2016/07/02 18:57:49 | 000,000,000 | ---D | M] -- C:\Program Files\Webteh
[2015/04/08 17:21:16 | 000,000,000 | ---D | M] -- C:\Program Files\Western Digital
[2014/06/24 16:21:18 | 000,000,000 | ---D | M] -- C:\Program Files\Western Digital Corporation
[2015/12/07 22:49:20 | 000,000,000 | ---D | M] -- C:\Program Files\Wide Angle Software
[2016/06/08 17:40:20 | 000,000,000 | ---D | M] -- C:\Program Files\Windows CE Tools
[2014/06/04 16:09:47 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Defender
[2014/06/03 22:43:44 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Mail
[2016/09/21 15:13:21 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Media Player
[2014/06/03 14:13:08 | 000,000,000 | ---D | M] -- C:\Program Files\Windows NT
[2014/06/03 22:43:43 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Photo Viewer
[2014/06/03 22:43:44 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Portable Devices
[2017/05/06 16:22:04 | 000,000,000 | ---D | M] -- C:\Program Files\Windows Sidebar
[2016/07/09 11:36:22 | 000,000,000 | ---D | M] -- C:\Program Files\WinRAR
[2015/01/03 15:39:10 | 000,000,000 | ---D | M] -- C:\Program Files\WinZip
[2016/10/14 17:46:51 | 000,000,000 | ---D | M] -- C:\Program Files\Wondershare
[2015/09/15 19:35:26 | 000,000,000 | ---D | M] -- C:\Program Files\Zebra-Media

[color=#A23BEC]< MD5 for: AGP440.SYS >[/color]
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\erdnt\cache\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\drivers\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\System32\DriverStore\FileRepository\machine.inf_x86_neutral_a97a2a0d0fbc6696\AGP440.sys
[2009/07/14 03:26:15 | 000,053,312 | ---- | M] (Microsoft Corporation) MD5=507812C3054C21CEF746B6EE3D04DD6E -- C:\Windows\winsxs\x86_machine.inf_31bf3856ad364e35_6.1.7601.17514_none_bc1a57271cf2f285\AGP440.sys

[color=#A23BEC]< MD5 for: APPMGMTS.DLL >[/color]
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\erdnt\cache\appmgmts.dll
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\System32\appmgmts.dll
[2009/07/14 03:14:53 | 000,149,504 | ---- | M] (Microsoft Corporation) MD5=A45D184DF6A8803DA13A0B329517A64A -- C:\Windows\winsxs\x86_microsoft-windows-g..oftwareinstallation_31bf3856ad364e35_6.1.7600.16385_none_81a53e87bd5d36aa\appmgmts.dll

[color=#A23BEC]< MD5 for: ATAPI.SYS >[/color]
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\erdnt\cache\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\drivers\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_a5025d31bee4647c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_x86_neutral_fab873f3e8a3315c\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.17514_none_df3f92057fcbe7a7\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.18231_none_df26d4d57fdef5b0\atapi.sys
[2009/07/14 03:26:15 | 000,021,584 | ---- | M] (Microsoft Corporation) MD5=338C86357871C167A96AB976519BF59E -- C:\Windows\winsxs\x86_mshdc.inf_31bf3856ad364e35_6.1.7601.22414_none_dfc9143c98e9a6c4\atapi.sys

[color=#A23BEC]< MD5 for: AUTOCHK.EXE >[/color]
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\System32\autochk.exe
[2010/11/20 14:16:54 | 000,668,160 | ---- | M] (Microsoft Corporation) MD5=F88A52EB62019D6A62FDD9E08034DBD8 -- C:\Windows\winsxs\x86_microsoft-windows-autochk_31bf3856ad364e35_6.1.7601.17514_none_e3fb573520033bfa\autochk.exe

[color=#A23BEC]< MD5 for: BEEP.SYS >[/color]
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\erdnt\cache\beep.sys
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\System32\drivers\beep.sys
[2009/07/14 01:45:01 | 000,006,144 | ---- | M] (Microsoft Corporation) MD5=505506526A9D467307B3C393DEDAF858 -- C:\Windows\winsxs\x86_microsoft-windows-beepsys_31bf3856ad364e35_6.1.7600.16385_none_c3f6f77668f0ddcc\beep.sys

[color=#A23BEC]< MD5 for: CNGAUDIT.DLL >[/color]
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\erdnt\cache\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\System32\cngaudit.dll
[2009/07/14 03:15:06 | 000,012,288 | ---- | M] (Microsoft Corporation) MD5=50BA656134F78AF64E4DD3C8B6FEFD7E -- C:\Windows\winsxs\x86_microsoft-windows-cngaudit-dll_31bf3856ad364e35_6.1.7600.16385_none_e83a414890e8132b\cngaudit.dll

[color=#A23BEC]< MD5 for: EXPLORER.EXE >[/color]
[2011/02/26 07:19:21 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=0FB9C74046656D1579A64660AD67B746 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.21669_none_54149f9ef14031fc\explorer.exe
[2014/06/24 11:42:02 | 004,818,848 | ---- | M] (Safer-Networking Ltd.) MD5=280C014187E24860A7C860329513208F -- C:\Program Files\Spybot - Search & Destroy 2\explorer.exe
[2010/11/20 14:17:09 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=40D777B7A95E00593EB1568C68514493 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17514_none_53bc10fdd7fe87ca\explorer.exe
[2016/08/29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\explorer.exe
[2016/08/29 16:55:07 | 002,972,672 | ---- | M] (Microsoft Corporation) MD5=6DDCA324434FFA506CF7DC4E51DB7935 -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.23537_none_5432df58f129e196\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\erdnt\cache\explorer.exe
[2011/02/25 07:30:54 | 002,616,320 | ---- | M] (Microsoft Corporation) MD5=8B88EBBB05A0E56B7DCC708498C02B3E -- C:\Windows\winsxs\x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7601.17567_none_5389023fd8245f84\explorer.exe

[color=#A23BEC]< MD5 for: HIDSERV.DLL >[/color]
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\System32\hidserv.dll
[2009/07/14 03:15:24 | 000,049,152 | ---- | M] (Microsoft Corporation) MD5=2BC6F6A1992B3A77F5F41432CA6B3B6B -- C:\Windows\winsxs\x86_microsoft-windows-hid-user_31bf3856ad364e35_6.1.7600.16385_none_d6829e90e8c23da8\hidserv.dll

[color=#A23BEC]< MD5 for: IASTORV.SYS >[/color]
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\drivers\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_0bcee2057afcc090\iaStorV.sys
[2011/03/11 07:38:51 | 000,332,160 | ---- | M] (Intel Corporation) MD5=5CD5F9A5444E6CDCB0AC89BD62D8B76E -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17577_none_b0daddb9e6380745\iaStorV.sys
[2011/03/11 07:28:00 | 000,332,160 | ---- | M] (Intel Corporation) MD5=778D0E6D7D9EBA0C403BADBAAD41DB20 -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.21680_none_b152a892ff64119f\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\System32\DriverStore\FileRepository\iastorv.inf_x86_neutral_668286aa35d55928\iaStorV.sys
[2010/11/20 14:29:54 | 000,332,160 | ---- | M] (Intel Corporation) MD5=A3CAE5D281DB4CFF7CFF8233507EE5AD -- C:\Windows\winsxs\x86_iastorv.inf_31bf3856ad364e35_6.1.7601.17514_none_b118bc63e60a139a\iaStorV.sys

[color=#A23BEC]< MD5 for: IMM32.DLL >[/color]
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\erdnt\cache\imm32.dll
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\System32\imm32.dll
[2010/11/20 14:19:22 | 000,118,272 | ---- | M] (Microsoft Corporation) MD5=4A8E2F20809CC161107FAA94F6CF2685 -- C:\Windows\winsxs\x86_microsoft-windows-imm32_31bf3856ad364e35_6.1.7601.17514_none_5e5d8801d8ad160d\imm32.dll

[color=#A23BEC]< MD5 for: KERNEL32.DLL >[/color]
[2014/04/12 04:06:41 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=0ACC3056081E646E242A8EAB2348271A -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22653_none_96229535cdccb191\kernel32.dll
[2016/01/22 08:02:00 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=2362B7281A39807F1AA3550333A194BC -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19135_none_95b07a76b49d3198\kernel32.dll
[2016/01/22 08:07:56 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=250AFE0C57C1A0BE64C81A7C53903B90 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23338_none_963d1a05cdb81a8e\kernel32.dll
[2016/03/18 00:26:26 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=4D1BC518FF64EB70F6B9218A6FBFDEF6 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23392_none_95f638c1cdee2a2a\kernel32.dll
[2010/11/20 14:19:26 | 000,857,600 | ---- | M] (Microsoft Corporation) MD5=5553784D774CA845380650E010BBDA2C -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.17514_none_95c54f2cb48da1b9\kernel32.dll
[2016/03/16 20:26:58 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=6B3E0C54C759F6D1E2142434A6035FBD -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23391_none_95f53877cdef10d3\kernel32.dll
[2012/11/30 07:01:46 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=6D0D4B00C7CB4FA829F396A83B327894 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.22177_none_9610ed07cdd95d0c\kernel32.dll
[2016/01/16 20:35:36 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=7EA71253A1049C0D2C3F656FA0760D6E -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.19131_none_95ac794eb4a0cc3c\kernel32.dll
[2015/05/09 07:41:31 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=8D5CC74BFA8F947CB283527806DB7B1F -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23049_none_963344b1cdbf5861\kernel32.dll
[2015/05/09 05:13:42 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=957655757F43858692289B96F73716D8 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18847_none_95a7cf30b4a352a7\kernel32.dll
[2016/01/17 02:13:18 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=9B5E09D2BA0986CC915EAD5633F0CA30 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23334_none_963918ddcdbbb532\kernel32.dll
[2012/11/30 06:47:44 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=AE09B85158C66E2C154C5C9B3C0027B3 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18015_none_95c62f30b48ce2ee\kernel32.dll
[2017/03/08 06:22:21 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=E79038D7DE7CA76CBDD9B2DF061C17A1 -- C:\Windows\System32\kernel32.dll
[2017/03/08 06:22:21 | 000,872,448 | ---- | M] (Microsoft Corporation) MD5=E79038D7DE7CA76CBDD9B2DF061C17A1 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.23714_none_964ec04dcdab71ec\kernel32.dll
[2014/03/04 11:17:13 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=F74FFA7654702F81884BDB41EB80DAC2 -- C:\Windows\erdnt\cache\kernel32.dll
[2014/03/04 11:17:13 | 000,868,352 | ---- | M] (Microsoft Corporation) MD5=F74FFA7654702F81884BDB41EB80DAC2 -- C:\Windows\winsxs\x86_microsoft-windows-kernel32_31bf3856ad364e35_6.1.7601.18409_none_95d507dcb48120f5\kernel32.dll

[color=#A23BEC]< MD5 for: MSWSOCK.DLL >[/color]
[2031/11/11 15:51:01 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=6547D445C4B69DC0083B619AC642DF04 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.22444_none_bac3d364a4c3ea89\mswsock.dll
[2010/11/20 14:19:56 | 000,232,448 | ---- | M] (Microsoft Corporation) MD5=8999B8631C7FD9F7F9EC3CAFD953BA24 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.17514_none_ba5ac0f18b8dd799\mswsock.dll
[2016/05/11 17:19:16 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=A88241C2A519AFD2C99A40000F9113E6 -- C:\Windows\System32\mswsock.dll
[2016/05/11 17:19:16 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=A88241C2A519AFD2C99A40000F9113E6 -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.23451_none_bab5ebd2a4ced416\mswsock.dll
[2031/11/11 15:51:01 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\erdnt\cache\mswsock.dll
[2031/11/11 15:51:01 | 000,231,424 | ---- | M] (Microsoft Corporation) MD5=E94C583CDE2348950155F2AF2876F34D -- C:\Windows\winsxs\x86_microsoft-windows-w..-infrastructure-bsp_31bf3856ad364e35_6.1.7601.18254_none_ba2f64c78bae6989\mswsock.dll

[color=#A23BEC]< MD5 for: NDIS.SYS >[/color]
[2012/08/22 19:05:16 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=15B74B6283CEBCCE3054C1001CA01B5E -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.22097_none_aa0491cf93ad1c31\ndis.sys
[2015/10/13 00:32:56 | 000,713,152 | ---- | M] (Microsoft Corporation) MD5=43C1C599FF590C875764CB6254A506B6 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.23235_none_aa435dc7937e55cc\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=8C9C922D71F1CD4DEF73F186416B7896 -- C:\Windows\erdnt\cache\ndis.sys
[2012/08/22 19:16:46 | 000,712,048 | ---- | M] (Microsoft Corporation) MD5=8C9C922D71F1CD4DEF73F186416B7896 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17939_none_a9bdfee47a5cd154\ndis.sys
[2015/10/13 06:50:31 | 000,712,640 | ---- | M] (Microsoft Corporation) MD5=9804FB2E46077F2977552347DFCA7E05 -- C:\Windows\System32\drivers\ndis.sys
[2015/10/13 06:50:31 | 000,712,640 | ---- | M] (Microsoft Corporation) MD5=9804FB2E46077F2977552347DFCA7E05 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.19030_none_a9b4bda47a653a28\ndis.sys
[2010/11/20 14:30:06 | 000,712,576 | ---- | M] (Microsoft Corporation) MD5=E7C54812A2AAF43316EB6930C1FFA108 -- C:\Windows\winsxs\x86_microsoft-windows-ndis_31bf3856ad364e35_6.1.7601.17514_none_a9ce95b27a512623\ndis.sys

[color=#A23BEC]< MD5 for: NETLOGON.DLL >[/color]
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\erdnt\cache\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\System32\netlogon.dll
[2010/11/20 14:20:28 | 000,563,712 | ---- | M] (Microsoft Corporation) MD5=C1809B9907ADEDAF16F50C894100883B -- C:\Windows\winsxs\x86_microsoft-windows-security-netlogon_31bf3856ad364e35_6.1.7601.17514_none_ffbf212e963c0162\netlogon.dll

[color=#A23BEC]< MD5 for: NTFS.SYS >[/color]
[2010/11/20 14:30:06 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=33C3093D09017CFE2E219F2472BFF6EB -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17514_none_a87893a87b2db29e\ntfs.sys
[2016/01/08 20:58:53 | 001,214,400 | ---- | M] (Microsoft Corporation) MD5=6A059E33CC5175A4CC65CDFFE10CFB40 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.23318_none_a905fe599447f391\ntfs.sys
[2011/03/11 07:39:00 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=81189C3D7763838E55C397759D49007A -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.17577_none_a83ab4fe7b5ba649\ntfs.sys
[2014/01/24 04:00:31 | 001,213,376 | ---- | M] (Microsoft Corporation) MD5=90EE3C4BD199287D2630C5232F459367 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.22580_none_a8b267299487cd1d\ntfs.sys
[2016/01/11 20:54:03 | 001,212,352 | ---- | M] (Microsoft Corporation) MD5=978E7A2E4BF4E8E70D0776EF0D9E97FB -- C:\Windows\System32\drivers\ntfs.sys
[2016/01/11 20:54:03 | 001,212,352 | ---- | M] (Microsoft Corporation) MD5=978E7A2E4BF4E8E70D0776EF0D9E97FB -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.19116_none_a87a5f147b2c23f2\ntfs.sys
[2014/01/24 04:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) MD5=C8DFF8D07755A66C7A4A738930F0FEAC -- C:\Windows\erdnt\cache\ntfs.sys
[2014/01/24 04:18:22 | 001,212,352 | ---- | M] (Microsoft Corporation) MD5=C8DFF8D07755A66C7A4A738930F0FEAC -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.18378_none_a83b9ab47b5adef3\ntfs.sys
[2011/03/11 07:28:10 | 001,211,264 | ---- | M] (Microsoft Corporation) MD5=E2EDE3F02F95B896A1C7C6F0CC0C4083 -- C:\Windows\winsxs\x86_microsoft-windows-ntfs_31bf3856ad364e35_6.1.7601.21680_none_a8b27fd79487b0a3\ntfs.sys

[color=#A23BEC]< MD5 for: NVSTOR.SYS >[/color]
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\drivers\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_0276fc3b3ea60d41\nvstor.sys
[2011/03/11 07:39:00 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=4380E59A170D88C4F1022EFF6719A8A4 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17577_none_3ba44e691d6eb11d\nvstor.sys
[2011/03/11 07:28:10 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=66D468654A58594F5F3BA63D5AD5B1AF -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.21680_none_3c1c1942369abb77\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\System32\DriverStore\FileRepository\nvraid.inf_x86_neutral_dd659ed032d28a14\nvstor.sys
[2010/11/20 14:30:06 | 000,143,744 | ---- | M] (NVIDIA Corporation) MD5=9283C58EBAA2618F93482EB5DABCEC82 -- C:\Windows\winsxs\x86_nvraid.inf_31bf3856ad364e35_6.1.7601.17514_none_3be22d131d40bd72\nvstor.sys

[color=#A23BEC]< MD5 for: PROQUOTA.EXE >[/color]
[2010/11/20 14:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\System32\proquota.exe
[2010/11/20 14:17:30 | 000,028,672 | ---- | M] (Microsoft Corporation) MD5=2E77BAB79F078654782F83F0A0AEFE31 -- C:\Windows\winsxs\x86_microsoft-windows-proquota_31bf3856ad364e35_6.1.7601.17514_none_29ce61c2f0a740f4\proquota.exe

[color=#A23BEC]< MD5 for: QMGR.DLL >[/color]
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\erdnt\cache\qmgr.dll
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\System32\qmgr.dll
[2010/11/20 14:20:58 | 000,585,728 | ---- | M] (Microsoft Corporation) MD5=E585445D5021971FAE10393F0F1C3961 -- C:\Windows\winsxs\x86_microsoft-windows-bits-client_31bf3856ad364e35_6.1.7601.17514_none_25982ed857b42497\qmgr.dll

[color=#A23BEC]< MD5 for: SCECLI.DLL >[/color]
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\erdnt\cache\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\System32\scecli.dll
[2010/11/20 14:21:04 | 000,175,616 | ---- | M] (Microsoft Corporation) MD5=8124944EC89D6A1815E4E53F5B96AAF4 -- C:\Windows\winsxs\x86_microsoft-windows-s..urationengineclient_31bf3856ad364e35_6.1.7601.17514_none_3a154c47375d881d\scecli.dll

[color=#A23BEC]< MD5 for: SPOOLSV.EXE >[/color]
[2010/11/20 14:17:45 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=866A43013535DC8587C258E43579C764 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17514_none_d8530d0d1fcade21\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\erdnt\cache\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\System32\spoolsv.exe
[2012/02/11 07:37:49 | 000,317,440 | ---- | M] (Microsoft Corporation) MD5=9AEA093B8F9C37CF45538382CABA2475 -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.17777_none_d815322f1ff8cc1a\spoolsv.exe
[2012/02/11 07:21:14 | 000,317,952 | ---- | M] (Microsoft Corporation) MD5=CAE10A25F936C053E41CBE0FA06FF15D -- C:\Windows\winsxs\x86_microsoft-windows-printing-spooler-core_31bf3856ad364e35_6.1.7601.21921_none_d8cedec038f3454c\spoolsv.exe

[color=#A23BEC]< MD5 for: SVCHOST.EXE >[/color]
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\erdnt\cache\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\System32\svchost.exe
[2009/07/14 03:14:41 | 000,020,992 | ---- | M] (Microsoft Corporation) MD5=54A47F6B5E09A77E61649109C6A08866 -- C:\Windows\winsxs\x86_microsoft-windows-services-svchost_31bf3856ad364e35_6.1.7600.16385_none_b591afc466a15356\svchost.exe
[2016/03/10 14:07:16 | 000,960,480 | ---- | M] (MalwareBytes) MD5=F86A4139730504047F52CCFB8C47E9F5 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\svchost.exe

[color=#A23BEC]< MD5 for: TERMSRV.DLL >[/color]
[2014/07/16 04:56:37 | 000,525,824 | ---- | M] (Microsoft Corporation) MD5=278F31DD3BFDE48F2E1FFF882FBD24B5 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22750_none_9100f2c4cbc7f167\termsrv.dll
[2010/11/20 14:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\erdnt\cache\termsrv.dll
[2010/11/20 14:21:28 | 000,521,216 | ---- | M] (Microsoft Corporation) MD5=382C804C92811BE57829D8E550A900E2 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.17514_none_90a6abb3b286306d\termsrv.dll
[2014/10/14 03:50:04 | 000,526,848 | ---- | M] (Microsoft Corporation) MD5=DD01319264B6D19E379BDD079A27DA91 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.22843_none_910ec574cbbd1ea2\termsrv.dll
[2014/07/17 03:39:49 | 000,523,264 | ---- | M] (Microsoft Corporation) MD5=E05E31F7BF577228E27CFFCA5B54ABBD -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18540_none_908223ffb2a23885\termsrv.dll
[2014/10/14 03:50:50 | 000,523,776 | ---- | M] (Microsoft Corporation) MD5=FCFD4F50419B4BC72E80066DA10D2E54 -- C:\Windows\System32\termsrv.dll
[2014/10/14 03:50:50 | 000,523,776 | ---- | M] (Microsoft Corporation) MD5=FCFD4F50419B4BC72E80066DA10D2E54 -- C:\Windows\winsxs\x86_microsoft-windows-t..teconnectionmanager_31bf3856ad364e35_6.1.7601.18637_none_9093f7d7b293cb1c\termsrv.dll

[color=#A23BEC]< MD5 for: USERINIT.EXE >[/color]
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\erdnt\cache\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\System32\userinit.exe
[2010/11/20 14:17:48 | 000,026,624 | ---- | M] (Microsoft Corporation) MD5=61AC3EFDFACFDD3F0F11DD4FD4044223 -- C:\Windows\winsxs\x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7601.17514_none_de3024012ff21116\userinit.exe

[color=#A23BEC]< MD5 for: VOLSNAP.SYS >[/color]
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\drivers\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\System32\DriverStore\FileRepository\volume.inf_x86_neutral_6dee0205881d1a1d\volsnap.sys
[2010/11/20 14:30:16 | 000,245,632 | ---- | M] (Microsoft Corporation) MD5=F497F67932C6FA693D7DE2780631CFE7 -- C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7601.17514_none_17be216c5a5713d8\volsnap.sys

[color=#A23BEC]< MD5 for: WININET.DLL >[/color]
[2015/07/16 20:42:02 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=0AC8CD2138FD10C4A0E2FF08F892359C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17959_none_87ee4767fea9c0d8\wininet.dll
[2016/06/10 19:45:19 | 002,392,576 | ---- | M] (Microsoft Corporation) MD5=167ADC25991BC960DDC2D9651C55B6FF -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18376_none_88316dc1fe76fc24\wininet.dll
[2016/10/22 18:12:44 | 002,444,800 | ---- | M] (Microsoft Corporation) MD5=19465502D25C5B7D54B792E3695C2A90 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18524_none_8816fa07fe8b8211\wininet.dll
[2016/09/01 02:43:05 | 002,445,824 | ---- | M] (Microsoft Corporation) MD5=42B01C859A89EEA6237DBD9A290DF857 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18449_none_8823589ffe8218f3\wininet.dll
[2010/11/20 14:21:36 | 000,980,992 | ---- | M] (Microsoft Corporation) MD5=44214C94911C7CFB1D52CB64D5E8368D -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.7601.17514_none_1eaaa4a07717236e\wininet.dll
[2016/01/22 07:07:28 | 002,120,704 | ---- | M] (Microsoft Corporation) MD5=5CB71C6DB91BAC78E1F0E9953CAB8969 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18204_none_88356937fe74fb90\wininet.dll
[2014/11/22 03:00:20 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=5E4E0E43E0A5BF9F089696DFA7A3D677 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17501_none_88153be5fe8d0559\wininet.dll
[2016/09/30 06:46:52 | 002,444,288 | ---- | M] (Microsoft Corporation) MD5=61677B630A8BF2C21391C21537FACBE6 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18499_none_88285a11fe7d97a6\wininet.dll
[2015/06/19 19:15:43 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=63B01F72FD727D5736DBEF54174D8F93 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17914_none_87eab827feacdb57\wininet.dll
[2016/08/02 06:56:28 | 002,393,088 | ---- | M] (Microsoft Corporation) MD5=64829F4ED34D8339EC39D32204718ADD -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18426_none_88219c63fe839962\wininet.dll
[2014/11/06 03:52:35 | 001,892,864 | ---- | M] (Microsoft Corporation) MD5=6DD7D61A8EF3DFEC4FAEFEB395E77424 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17420_none_8822232dfe830275\wininet.dll
[2017/03/25 20:55:14 | 002,767,360 | ---- | M] (Microsoft Corporation) MD5=71AF57EAD18A04E0A685757D3A4C598F -- C:\Windows\System32\wininet.dll
[2017/03/25 20:55:14 | 002,767,360 | ---- | M] (Microsoft Corporation) MD5=71AF57EAD18A04E0A685757D3A4C598F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18638_none_880ccf45fe931ddd\wininet.dll
[2014/05/30 09:21:10 | 001,790,976 | ---- | M] (Microsoft Corporation) MD5=771CDBC3D62437D6DB070820BB1EDCCF -- C:\Windows\erdnt\cache\wininet.dll
[2014/05/30 09:21:10 | 001,790,976 | ---- | M] (Microsoft Corporation) MD5=771CDBC3D62437D6DB070820BB1EDCCF -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17126_none_88420a41fe6b4868\wininet.dll
[2014/09/19 01:59:11 | 001,810,944 | ---- | M] (Microsoft Corporation) MD5=7AE80F921027CF88CB9D0433088A3E55 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17358_none_882f3db7fe78ff91\wininet.dll
[2015/10/30 23:51:28 | 002,011,136 | ---- | M] (Microsoft Corporation) MD5=832CA97817B20B74E2D74A8154630311 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18097_none_8853c751fe5cf4a0\wininet.dll
[2017/03/02 18:53:59 | 002,767,360 | ---- | M] (Microsoft Corporation) MD5=8CD829CA7ACCC8AF5FA246AC41F47D43 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18617_none_880ae579fe94d18e\wininet.dll
[2016/04/23 05:12:38 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=8EF022E16150BFAFC7DBB795C43C6BA2 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18314_none_882b9995fe7c30d8\wininet.dll
[2015/08/15 06:43:00 | 001,951,232 | ---- | M] (Microsoft Corporation) MD5=A8C80A92549AFDD6891C8159D4C0A107 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18015_none_884bf291fe63f6a6\wininet.dll
[2014/03/01 04:32:16 | 001,820,160 | ---- | M] (Microsoft Corporation) MD5=AAFEAB4FC9D70253F8C7E353E879E8A2 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.16521_none_88173a93fe8b3ae0\wininet.dll
[2015/11/10 01:17:36 | 002,011,136 | ---- | M] (Microsoft Corporation) MD5=B60461B5CED2BFAE1A870C61C66966C4 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18124_none_884239b7fe6b124d\wininet.dll
[2014/07/25 12:05:23 | 001,792,512 | ---- | M] (Microsoft Corporation) MD5=B945BAA81B4805AD6BDDF4D026DCFB47 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17239_none_8837f647fe72ca93\wininet.dll
[2015/03/13 04:20:28 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=C46904F2E9E121A91DDDABB48D7648C3 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17728_none_8800fd29fe9c2350\wininet.dll
[2015/04/21 17:02:00 | 001,882,112 | ---- | M] (Microsoft Corporation) MD5=CB5F450D21B9D76B7F01D006E4AEDB40 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17801_none_87f4cc21fea5592c\wininet.dll
[2014/06/19 00:13:59 | 001,791,488 | ---- | M] (Microsoft Corporation) MD5=CCC198257901BEEA2FBF8EB1E7678356 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17207_none_883522f9fe754b4c\wininet.dll
[2014/08/18 22:46:48 | 001,812,992 | ---- | M] (Microsoft Corporation) MD5=D58988722C72D265B51A54103DFC2C6F -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17280_none_883dc4c1fe6d629d\wininet.dll
[2015/09/16 04:37:26 | 002,011,136 | ---- | M] (Microsoft Corporation) MD5=E401E66CCB2AE219CF41F7F901C410C1 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18059_none_884f9899fe60c286\wininet.dll
[2014/06/04 15:34:08 | 001,789,440 | ---- | M] (Microsoft Corporation) MD5=E4E829EE073E046B0EB19B5FECB19B8C -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17041_none_884f4ca9fe60df00\wininet.dll
[2015/05/23 04:20:35 | 001,950,720 | ---- | M] (Microsoft Corporation) MD5=E4EB138060BAE0DBAB1A3B71A3141FE7 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17843_none_87f89fb9fea1f1ca\wininet.dll
[2015/02/20 03:01:25 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=EA6EA6912F27F05C61D8D747517EB47E -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17691_none_88136e93fe8d0559\wininet.dll
[2016/02/08 21:43:04 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=EDB9618FF3238EF0FC2734F584B13A33 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18230_none_8838c535fe71e111\wininet.dll
[2016/03/31 01:05:23 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=EE3825FFE3F31B7FCB7B4A284197361B -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18282_none_883d9917fe6d9306\wininet.dll
[2015/01/12 03:00:17 | 001,888,256 | ---- | M] (Microsoft Corporation) MD5=F285D499EC42969D963CA49EADA63218 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.17633_none_880d3f47fe92a091\wininet.dll
[2016/11/12 19:05:59 | 002,444,800 | ---- | M] (Microsoft Corporation) MD5=F4F5123B45BFCFD2F035280FDCB5BBBE -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18537_none_8817b5f9fe8ae84b\wininet.dll
[2016/05/20 22:42:45 | 002,121,216 | ---- | M] (Microsoft Corporation) MD5=FDD35A049C278F21F475C488FDA918AB -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18349_none_882e288bfe79fd02\wininet.dll
[2015/12/12 18:41:25 | 002,011,136 | ---- | M] (Microsoft Corporation) MD5=FFA261B9252C71A6910B4F19FDC1EA57 -- C:\Windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_11.2.9600.18163_none_884651a7fe675e08\wininet.dll

[color=#A23BEC]< MD5 for: WININIT.EXE >[/color]
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\erdnt\cache\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\System32\wininit.exe
[2009/07/14 03:14:45 | 000,096,256 | ---- | M] (Microsoft Corporation) MD5=B5C5DCAD3899512020D135600129D665 -- C:\Windows\winsxs\x86_microsoft-windows-wininit_31bf3856ad364e35_6.1.7600.16385_none_30c90ef265a43c13\wininit.exe

[color=#A23BEC]< MD5 for: WINLOGON.EXE >[/color]
[2014/07/16 04:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014/07/16 04:56:14 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=4F37B93C14AEE313BEC52A23AFB15C2E -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22750_none_7224b2134c7555fa\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\System32\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2014/07/17 03:39:27 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=52449FD429D6053B78AE564DEF303870 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18540_none_71a5e34e334f9d18\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2010/11/20 14:17:54 | 000,286,720 | ---- | M] (Microsoft Corporation) MD5=6D13E1406F50C66E2A95D97F22C47560 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.17514_none_71ca6b0233339500\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\erdnt\cache\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\erdnt\cache\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014/03/04 11:17:02 | 000,304,128 | ---- | M] (Microsoft Corporation) MD5=998507B046BA314CE8245364C686FA67 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.18409_none_71da23b23327143c\winlogon.exe
[2014/03/04 12:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe
[2014/03/04 12:39:02 | 000,304,640 | ---- | M] (Microsoft Corporation) MD5=D53972F87D850CD2EB4B29B60CAFDD77 -- C:\Windows\winsxs\x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7601.22616_none_7255f1994c4f8119\winlogon.exe
[2016/03/10 14:07:16 | 000,960,480 | ---- | M] (MalwareBytes) MD5=F86A4139730504047F52CCFB8C47E9F5 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe
[2016/03/10 14:07:16 | 000,960,480 | ---- | M] (MalwareBytes) MD5=F86A4139730504047F52CCFB8C47E9F5 -- C:\Program Files\Malwarebytes Anti-Malware\Chameleon\Windows\winlogon.exe

[color=#A23BEC]< MD5 for: WS2_32.DLL >[/color]
[2016/05/11 17:19:26 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=59EA5753EBDAE42CF92FD5B6E7AE4D53 -- C:\Windows\System32\ws2_32.dll
[2016/05/11 17:19:26 | 000,206,336 | ---- | M] (Microsoft Corporation) MD5=59EA5753EBDAE42CF92FD5B6E7AE4D53 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.23451_none_f51a458f45d91b4c\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\erdnt\cache\ws2_32.dll
[2010/11/20 14:21:38 | 000,206,848 | ---- | M] (Microsoft Corporation) MD5=7FF15A4F092CD4A96055BA69F903E3E9 -- C:\Windows\winsxs\x86_microsoft-windows-w..nfrastructure-ws232_31bf3856ad364e35_6.1.7601.17514_none_f4bf1aae2c981ecf\ws2_32.dll

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\ *.sys /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\System32\config\* .sav >[/color]

[color=#A23BEC]< c:\$recycle.bin\*.* /s >[/color]
[2014/08/22 18:08:37 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-20\desktop.ini
[2017/05/06 16:48:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$I0E4U2Y.log
[2017/05/06 16:48:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$I263KMA
[2017/05/06 16:48:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$IATMJFY.dbg
[2017/05/06 16:48:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$IGA0ZNJ.log
[2017/05/06 16:48:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$IHUYYW6.exe
[2017/05/06 16:48:55 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$INWAOZW
[2017/05/06 16:48:53 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$IPBQHYN.dmp
[2017/05/06 16:48:48 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$IR72P4B
[2017/05/06 16:48:49 | 000,000,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$IV2VDG5.log
[2017/05/04 18:07:29 | 000,000,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R0E4U2Y.log
[2017/05/04 21:55:05 | 000,524,288 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R263KMA
[2017/05/06 16:24:19 | 000,007,994 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RATMJFY.dbg
[2017/05/05 14:13:56 | 000,004,576 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RGA0ZNJ.log
[2017/05/06 16:07:20 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RHUYYW6.exe
[2017/05/06 15:52:10 | 000,524,288 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RNWAOZW
[2017/05/04 21:55:54 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RPBQHYN.dmp
[2017/05/03 20:28:42 | 000,013,582 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RV2VDG5.log
[2014/07/04 17:44:59 | 000,000,129 | -HS- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\desktop.ini
[58 c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\*.tmp files -> c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\*.tmp -> ]
[2017/05/06 10:28:46 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R0U3VO4.tmp_dir1494059326\exe4jlib.jar
[2017/05/06 10:28:46 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R0U3VO4.tmp_dir1494059326\i4jdel.exe
[2017/05/05 17:06:03 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R32SPEQ.tmp_dir1493996763\exe4jlib.jar
[2017/05/05 17:06:03 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R32SPEQ.tmp_dir1493996763\i4jdel.exe
[2017/05/06 09:35:31 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R41223H.tmp_dir1494056131\exe4jlib.jar
[2017/05/06 09:35:31 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R41223H.tmp_dir1494056131\i4jdel.exe
[2017/05/05 17:38:27 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R63NVXX.tmp_dir1493998707\exe4jlib.jar
[2017/05/05 17:38:27 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R63NVXX.tmp_dir1493998707\i4jdel.exe
[2009/07/14 03:16:13 | 000,082,944 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\sbdrop.dll
[2010/11/20 14:17:41 | 001,174,016 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\sidebar.exe
[2009/07/14 03:16:19 | 000,108,544 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\wlsrvc.dll
[2009/07/14 04:06:30 | 000,002,048 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\en-US\sbdrop.dll.mui
[2009/07/14 04:02:08 | 000,018,944 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\en-US\Sidebar.exe.mui
[2009/07/27 14:55:10 | 000,002,560 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\fr-FR\sbdrop.dll.mui
[2009/07/27 14:55:10 | 000,021,504 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\fr-FR\Sidebar.exe.mui
[2009/06/10 23:37:49 | 000,006,772 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\drag.png
[2009/06/10 23:37:49 | 000,003,347 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\icon.png
[2009/06/10 23:37:50 | 000,006,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\logo.png
[2009/07/14 04:02:20 | 000,019,102 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\en-US\calendar.html
[2009/07/14 04:04:20 | 000,001,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\en-US\gadget.xml
[2009/07/14 04:03:48 | 000,004,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\en-US\css\calendar.css
[2009/07/14 04:04:08 | 000,065,288 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\en-US\js\calendar.js
[2009/07/27 14:55:10 | 000,019,106 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\fr-FR\calendar.html
[2009/07/27 14:55:10 | 000,001,014 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,004,848 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\fr-FR\css\calendar.css
[2009/07/27 14:55:10 | 000,065,296 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\fr-FR\js\calendar.js
[2009/06/10 23:37:49 | 000,001,702 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bg-desk.png
[2009/06/10 23:37:49 | 000,001,367 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bg-dock.png
[2009/06/10 23:37:49 | 000,001,174 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bg-today.png
[2009/06/10 23:37:49 | 000,000,201 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bNext-disable.png
[2009/06/10 23:37:49 | 000,000,413 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bNext-down.png
[2009/06/10 23:37:49 | 000,000,578 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bNext-hot.png
[2009/06/10 23:37:49 | 000,000,203 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bNext.png
[2009/06/10 23:37:49 | 000,000,217 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bPrev-disable.png
[2009/06/10 23:37:49 | 000,000,409 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bPrev-down.png
[2009/06/10 23:37:49 | 000,000,574 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bPrev-hot.png
[2009/06/10 23:37:49 | 000,000,216 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\bPrev.png
[2009/06/10 23:37:49 | 000,002,262 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_double.png
[2009/06/10 23:37:49 | 000,003,009 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_double_bkg.png
[2009/06/10 23:37:49 | 000,003,541 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_double_orange.png
[2009/06/10 23:37:49 | 000,003,026 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_ring_docked.png
[2009/06/10 23:37:49 | 000,001,500 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_single.png
[2009/06/10 23:37:49 | 000,003,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_single_bkg.png
[2009/06/10 23:37:49 | 000,004,773 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_single_bkg_orange.png
[2009/06/10 23:37:49 | 000,002,726 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\calendar_single_orange.png
[2009/06/10 23:37:49 | 000,000,214 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\corner.png
[2009/06/10 23:37:49 | 000,001,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\curl-hot.png
[2009/06/10 23:37:49 | 000,000,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\curl.png
[2009/06/10 23:37:50 | 000,000,150 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\month.png
[2009/06/10 23:37:50 | 000,000,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\rings-desk.png
[2009/06/10 23:37:50 | 000,000,334 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Calendar.Gadget\images\rings-dock.png
[2009/06/10 23:37:50 | 000,023,429 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\drag.png
[2009/06/10 23:37:50 | 000,011,788 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\icon.png
[2009/06/10 23:37:53 | 000,006,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\logo.png
[2009/07/14 04:10:34 | 000,004,172 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\clock.html
[2009/07/14 04:07:30 | 000,001,003 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\gadget.xml
[2009/07/14 04:01:18 | 000,010,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\settings.html
[2009/07/14 04:03:26 | 000,000,674 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\css\clock.css
[2009/07/14 04:07:12 | 000,001,374 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\css\settings.css
[2009/07/14 04:07:14 | 000,018,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\js\clock.js
[2009/07/14 04:08:32 | 000,023,630 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\js\settings.js
[2009/07/14 04:01:38 | 000,009,612 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\en-US\js\timeZones.js
[2009/07/27 14:55:10 | 000,004,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\clock.html
[2009/07/27 14:55:10 | 000,001,029 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,010,306 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\settings.html
[2009/07/27 14:55:10 | 000,000,674 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\css\clock.css
[2009/07/27 14:55:10 | 000,001,374 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\css\settings.css
[2009/07/27 14:55:10 | 000,018,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\js\clock.js
[2009/07/27 14:55:10 | 000,023,638 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\js\settings.js
[2009/07/27 14:55:10 | 000,009,612 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\fr-FR\js\timeZones.js
[2009/06/10 23:37:50 | 000,025,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\cronometer.png
[2009/06/10 23:37:50 | 000,000,306 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\cronometer_dot.png
[2009/06/10 23:37:50 | 000,000,381 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\cronometer_h.png
[2009/06/10 23:37:51 | 000,000,434 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\cronometer_m.png
[2009/06/10 23:37:51 | 000,003,171 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\cronometer_s.png
[2009/06/10 23:37:51 | 000,029,780 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\cronometer_settings.png
[2009/06/10 23:37:51 | 000,030,641 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\diner.png
[2009/06/10 23:37:51 | 000,002,944 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\diner_dot.png
[2009/06/10 23:37:51 | 000,000,368 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\diner_h.png
[2009/06/10 23:37:51 | 000,000,402 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\diner_m.png
[2009/06/10 23:37:51 | 000,002,956 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\diner_s.png
[2009/06/10 23:37:51 | 000,032,695 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\diner_settings.png
[2009/06/10 23:37:51 | 000,034,670 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\flower.png
[2009/06/10 23:37:51 | 000,000,321 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\flower_dot.png
[2009/06/10 23:37:51 | 000,000,388 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\flower_h.png
[2009/06/10 23:37:51 | 000,000,439 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\flower_m.png
[2009/06/10 23:37:51 | 000,003,092 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\flower_s.png
[2009/06/10 23:37:51 | 000,033,403 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\flower_settings.png
[2009/06/10 23:37:51 | 000,015,614 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\modern.png
[2009/06/10 23:37:51 | 000,002,966 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\modern_dot.png
[2009/06/10 23:37:51 | 000,002,922 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\modern_h.png
[2009/06/10 23:37:51 | 000,002,940 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\modern_m.png
[2009/06/10 23:37:51 | 000,003,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\modern_s.png
[2009/06/10 23:37:51 | 000,020,945 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\modern_settings.png
[2009/06/10 23:37:51 | 000,025,608 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\novelty.png
[2009/06/10 23:37:51 | 000,002,903 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\novelty_dot.png
[2009/06/10 23:37:51 | 000,002,959 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\novelty_h.png
[2009/06/10 23:37:51 | 000,002,979 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\novelty_m.png
[2009/06/10 23:37:51 | 000,002,919 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\novelty_s.png
[2009/06/10 23:37:51 | 000,028,718 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\novelty_settings.png
[2009/06/10 23:37:51 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_box_bottom.png
[2009/06/10 23:37:51 | 000,000,135 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_box_divider_left.png
[2009/06/10 23:37:51 | 000,000,135 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_box_divider_right.png
[2009/06/10 23:37:51 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_box_left.png
[2009/06/10 23:37:51 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_box_right.png
[2009/06/10 23:37:51 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_box_top.png
[2009/06/10 23:37:51 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_corner_bottom_left.png
[2009/06/10 23:37:51 | 000,000,165 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_corner_bottom_right.png
[2009/06/10 23:37:51 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_corner_top_left.png
[2009/06/10 23:37:51 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_corner_top_right.png
[2009/06/10 23:37:51 | 000,000,131 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_divider.png
[2009/06/10 23:37:51 | 000,000,145 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_divider_left.png
[2009/06/10 23:37:51 | 000,000,139 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_divider_right.png
[2009/06/10 23:37:51 | 000,000,697 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_left_disabled.png
[2009/06/10 23:37:51 | 000,001,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_left_hover.png
[2009/06/10 23:37:51 | 000,001,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_left_pressed.png
[2009/06/10 23:37:51 | 000,000,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_left_rest.png
[2009/06/10 23:37:51 | 000,000,697 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_right_disabled.png
[2009/06/10 23:37:51 | 000,001,047 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_right_hover.png
[2009/06/10 23:37:51 | 000,001,119 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_right_pressed.png
[2009/06/10 23:37:51 | 000,000,856 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\settings_right_rest.png
[2009/06/10 23:37:52 | 000,000,288 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\spacer_highlights.png
[2009/06/10 23:37:52 | 000,020,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\square.png
[2009/06/10 23:37:52 | 000,000,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\square_dot.png
[2009/06/10 23:37:52 | 000,000,475 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\square_h.png
[2009/06/10 23:37:52 | 000,000,458 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\square_m.png
[2009/06/10 23:37:52 | 000,003,119 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\square_s.png
[2009/06/10 23:37:52 | 000,019,847 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\square_settings.png
[2009/06/10 23:37:52 | 000,020,891 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\system.png
[2009/06/10 23:37:52 | 000,000,243 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\system_dot.png
[2009/06/10 23:37:52 | 000,000,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\system_h.png
[2009/06/10 23:37:52 | 000,000,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\system_m.png
[2009/06/10 23:37:52 | 000,003,003 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\system_s.png
[2009/06/10 23:37:52 | 000,023,101 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\system_settings.png
[2009/06/10 23:37:52 | 000,019,515 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\trad.png
[2009/06/10 23:37:52 | 000,003,019 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\trad_dot.png
[2009/06/10 23:37:52 | 000,000,351 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\trad_h.png
[2009/06/10 23:37:52 | 000,000,361 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\trad_m.png
[2009/06/10 23:37:53 | 000,003,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\trad_s.png
[2009/06/10 23:37:53 | 000,021,381 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Clock.Gadget\images\trad_settings.png
[2009/06/10 23:37:56 | 000,020,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\drag.png
[2009/06/10 23:37:56 | 000,009,186 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\icon.png
[2009/06/10 23:38:00 | 000,006,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\logo.png
[2009/07/14 04:06:08 | 000,004,630 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\en-US\cpu.html
[2009/07/14 04:06:36 | 000,000,993 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\en-US\gadget.xml
[2009/07/14 04:01:24 | 000,001,372 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\en-US\css\cpu.css
[2009/07/14 04:10:18 | 000,018,348 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\en-US\js\cpu.js
[2009/07/27 14:55:10 | 000,004,644 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\fr-FR\cpu.html
[2009/07/27 14:55:10 | 000,001,029 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,001,372 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\fr-FR\css\cpu.css
[2009/07/27 14:55:10 | 000,018,364 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\fr-FR\js\cpu.js
[2009/06/10 23:37:56 | 000,017,126 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\back.png
[2009/06/10 23:37:56 | 000,026,193 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\back_lrg.png
[2009/06/10 23:37:56 | 000,000,346 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\dial.png
[2009/06/10 23:37:59 | 000,003,217 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\dialdot.png
[2009/06/10 23:37:59 | 000,004,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\dialdot_lrg.png
[2009/06/10 23:37:56 | 000,003,081 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\dial_lrg.png
[2009/06/10 23:37:59 | 000,003,075 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\dial_lrg_sml.png
[2009/06/10 23:37:59 | 000,003,026 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\dial_sml.png
[2009/06/10 23:37:59 | 000,000,308 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\glass.png
[2009/06/10 23:37:59 | 000,000,443 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\CPU.Gadget\images\glass_lrg.png
[2009/06/10 23:38:02 | 000,016,491 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\drag.png
[2009/06/10 23:38:02 | 000,006,889 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\icon.png
[2009/06/10 23:38:02 | 000,005,930 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\logo.png
[2009/07/14 04:06:32 | 000,006,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\currency.html
[2009/07/14 04:09:50 | 000,001,958 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\gadget.xml
[2009/07/14 04:09:02 | 000,019,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\css\currency.css
[2009/07/14 04:05:10 | 000,066,782 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\js\currency.js
[2009/07/14 04:10:02 | 000,000,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\js\init.js
[2009/07/14 04:05:46 | 000,005,662 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\js\library.js
[2009/07/14 04:09:14 | 000,011,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\js\localizedStrings.js
[2009/07/14 04:03:38 | 000,007,720 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\en-US\js\service.js
[2009/07/27 14:55:10 | 000,006,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\currency.html
[2009/07/27 14:55:10 | 000,001,930 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,019,502 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\css\currency.css
[2009/07/27 14:55:10 | 000,066,782 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\js\currency.js
[2009/07/27 14:55:10 | 000,000,724 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\js\init.js
[2009/07/27 14:55:10 | 000,005,662 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\js\library.js
[2009/07/27 14:55:10 | 000,011,606 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\js\localizedStrings.js
[2009/07/27 14:55:10 | 000,007,720 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\fr-FR\js\service.js
[2009/06/10 23:38:02 | 000,012,585 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\activity16v.png
[2009/06/10 23:38:02 | 000,000,512 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\add_down.png
[2009/06/10 23:38:02 | 000,000,420 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\add_over.png
[2009/06/10 23:38:02 | 000,000,228 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\add_up.png
[2009/06/10 23:38:02 | 000,016,491 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\base-docked.png
[2009/06/10 23:38:02 | 000,043,622 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\base-undocked-2.png
[2009/06/10 23:38:02 | 000,054,042 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\base-undocked-3.png
[2009/06/10 23:38:02 | 000,062,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\base-undocked-4.png
[2009/06/10 23:38:02 | 000,002,963 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\combo-hover-left.png
[2009/06/10 23:38:02 | 000,002,885 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\combo-hover-middle.png
[2009/06/10 23:38:02 | 000,002,979 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\combo-hover-right.png
[2009/06/10 23:38:02 | 000,000,772 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\delete_down.png
[2009/06/10 23:38:02 | 000,000,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\delete_over.png
[2009/06/10 23:38:02 | 000,000,477 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\delete_up.png
[2009/06/10 23:38:02 | 000,003,268 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\graph_down.png
[2009/06/10 23:38:02 | 000,003,428 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\graph_over.png
[2009/06/10 23:38:02 | 000,002,929 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\graph_up.png
[2009/06/10 23:38:02 | 000,000,729 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\info.png
[2009/06/10 23:38:02 | 000,003,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\row_over.png
[2009/06/10 23:38:02 | 000,002,831 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Currency.Gadget\images\triangle.png
[2009/06/10 23:45:13 | 000,006,642 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\flyout.html
[2009/06/10 23:45:13 | 000,010,574 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\main.html
[2009/07/14 03:19:48 | 000,053,248 | ---- | M] (Microsoft Corporation) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\MCESidebarCtrl.dll
[2009/06/10 23:45:13 | 000,022,626 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\settings.html
[2009/06/10 23:45:13 | 000,003,860 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\css\flyout.css
[2009/06/10 23:45:13 | 000,006,572 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\css\main.css
[2009/06/10 23:45:13 | 000,001,644 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\css\settings.css
[2009/06/11 00:45:02 | 000,001,244 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\en-US\gadget.xml
[2009/07/27 14:55:08 | 000,001,153 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\fr-FR\gadget.xml
[2009/06/10 23:45:13 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_left_mousedown.png
[2009/06/10 23:45:13 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_left_mouseout.png
[2009/06/10 23:45:13 | 000,000,184 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_left_mouseover.png
[2009/06/10 23:45:13 | 000,001,692 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mousedown.png
[2009/06/10 23:45:13 | 000,001,692 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mouseout.png
[2009/06/10 23:45:13 | 000,001,725 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_MCELogo_mouseover.png
[2009/06/10 23:45:13 | 000,006,100 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_play.png
[2009/06/10 23:45:13 | 000,000,179 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_right_mousedown.png
[2009/06/10 23:45:13 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_right_mouseout.png
[2009/06/10 23:45:13 | 000,000,176 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\button_right_mouseover.png
[2009/06/10 23:45:13 | 000,025,070 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\default_thumb.jpg
[2009/06/10 23:45:13 | 000,005,762 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\ehshellLogo.png
[2009/06/10 23:45:13 | 000,187,794 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\flyout_background.png
[2009/06/10 23:45:13 | 000,001,526 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Flyout_Thumbnail_Shadow.png
[2009/06/10 23:45:13 | 000,150,964 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Background_Loading.png
[2009/06/10 23:45:13 | 000,053,091 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Background_QuickLaunch.png
[2009/06/10 23:45:13 | 000,034,536 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Main_Gradient.png
[2009/06/10 23:45:13 | 000,000,255 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Empty.png
[2009/06/10 23:45:13 | 000,000,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Full.png
[2009/06/10 23:45:13 | 000,000,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Star_Half.png
[2009/06/10 23:45:13 | 000,004,857 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_Waitcursor.gif
[2009/06/10 23:45:13 | 000,001,011 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\Gadget_WMC_LogoText.png
[2009/06/10 23:45:13 | 000,003,389 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\logo.png
[2009/06/10 23:45:13 | 000,012,071 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\images\main_background.png
[2009/06/10 23:45:13 | 000,060,636 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\js\main.js
[2009/06/10 23:45:13 | 000,029,096 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\MediaCenter.Gadget\js\settings.js
[2009/06/10 23:38:11 | 000,031,315 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\drag.png
[2009/06/10 23:38:11 | 000,009,563 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\icon.png
[2009/06/10 23:38:11 | 000,006,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\logo.png
[2009/07/14 04:03:54 | 000,001,010 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\gadget.xml
[2009/07/14 04:05:54 | 000,003,436 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\picturePuzzle.html
[2009/07/14 04:08:06 | 000,005,482 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\settings.html
[2009/07/14 04:05:28 | 000,004,466 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\css\picturePuzzle.css
[2009/07/14 04:05:34 | 000,005,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\css\settings.css
[2009/07/14 04:02:22 | 000,047,778 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\js\picturePuzzle.js
[2009/07/14 04:08:58 | 000,009,854 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\en-US\js\settings.js
[2009/07/27 14:55:10 | 000,001,019 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,003,450 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\picturePuzzle.html
[2009/07/27 14:55:10 | 000,005,496 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\settings.html
[2009/07/27 14:55:10 | 000,004,466 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\css\picturePuzzle.css
[2009/07/27 14:55:10 | 000,005,204 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\css\settings.css
[2009/07/27 14:55:10 | 000,047,846 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\js\picturePuzzle.js
[2009/07/27 14:55:10 | 000,009,862 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\fr-FR\js\settings.js
[2009/06/10 23:38:11 | 000,002,850 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\0.png
[2009/06/10 23:38:11 | 000,021,283 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\1.png
[2009/06/10 23:38:11 | 000,024,128 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\10.png
[2009/06/10 23:38:11 | 000,026,934 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\11.png
[2009/06/10 23:38:11 | 000,029,200 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\2.png
[2009/06/10 23:38:11 | 000,024,397 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\3.png
[2009/06/10 23:38:11 | 000,015,852 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\4.png
[2009/06/10 23:38:11 | 000,025,021 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\5.png
[2009/06/10 23:38:11 | 000,028,448 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\6.png
[2009/06/10 23:38:11 | 000,018,747 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\7.png
[2009/06/10 23:38:11 | 000,021,159 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\8.png
[2009/06/10 23:38:11 | 000,021,275 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\9.png
[2009/06/10 23:38:11 | 000,018,089 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\background.png
[2009/06/10 23:38:11 | 000,041,941 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\daisies.png
[2009/06/10 23:38:11 | 000,000,233 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\glow.png
[2009/06/10 23:38:11 | 000,003,445 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\hint_down.png
[2009/06/10 23:38:11 | 000,003,332 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\hint_over.png
[2009/06/10 23:38:11 | 000,003,381 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\hint_up.png
[2009/06/10 23:38:11 | 000,000,140 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_box_bottom.png
[2009/06/10 23:38:11 | 000,000,135 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_left.png
[2009/06/10 23:38:11 | 000,000,135 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_box_divider_right.png
[2009/06/10 23:38:11 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_box_left.png
[2009/06/10 23:38:11 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_box_right.png
[2009/06/10 23:38:11 | 000,000,137 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_box_top.png
[2009/06/10 23:38:11 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_left.png
[2009/06/10 23:38:11 | 000,000,165 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_bottom_right.png
[2009/06/10 23:38:11 | 000,000,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_left.png
[2009/06/10 23:38:11 | 000,000,168 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_corner_top_right.png
[2009/06/10 23:38:11 | 000,000,131 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_divider.png
[2009/06/10 23:38:11 | 000,000,145 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_left.png
[2009/06/10 23:38:11 | 000,000,139 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_divider_right.png
[2009/06/10 23:38:11 | 000,000,697 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_left_disabled.png
[2009/06/10 23:38:11 | 000,001,050 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_left_hover.png
[2009/06/10 23:38:11 | 000,001,124 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_left_pressed.png
[2009/06/10 23:38:11 | 000,000,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_left_rest.png
[2009/06/10 23:38:11 | 000,000,697 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_right_disabled.png
[2009/06/10 23:38:11 | 000,001,047 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_right_hover.png
[2009/06/10 23:38:11 | 000,001,119 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_right_pressed.png
[2009/06/10 23:38:11 | 000,000,856 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\settings_right_rest.png
[2009/06/10 23:38:11 | 000,001,199 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\setting_back.png
[2009/06/10 23:38:11 | 000,003,471 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\shuffle_down.png
[2009/06/10 23:38:11 | 000,003,379 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\shuffle_over.png
[2009/06/10 23:38:11 | 000,003,421 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\shuffle_up.png
[2009/06/10 23:38:11 | 000,000,220 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\tile16.png
[2009/06/10 23:38:11 | 000,003,289 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\tile_bezel.png
[2009/06/10 23:38:11 | 000,002,883 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\tile_drop_shadow.png
[2009/06/10 23:38:11 | 000,003,388 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\timer_down.png
[2009/06/10 23:38:11 | 000,003,383 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\timer_over.png
[2009/06/10 23:38:11 | 000,003,300 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\PicturePuzzle.Gadget\Images\timer_up.png
[2009/06/10 23:38:17 | 000,008,513 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\drag.png
[2009/06/10 23:38:17 | 000,007,431 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\icon.png
[2009/06/10 23:38:21 | 000,006,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\logo.png
[2009/07/14 04:02:44 | 000,002,154 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\flyout.html
[2009/07/14 04:06:06 | 000,001,005 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\gadget.xml
[2009/07/14 04:08:10 | 000,010,012 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\RSSFeeds.html
[2009/07/14 04:06:28 | 000,003,326 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\settings.html
[2009/07/14 04:03:46 | 000,002,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\css\flyout.css
[2009/07/14 04:05:52 | 000,003,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\css\RSSFeeds.css
[2009/07/14 04:06:32 | 000,001,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\css\settings.css
[2009/07/14 04:09:06 | 000,110,308 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\js\RSSFeeds.js
[2009/07/14 04:09:16 | 000,005,542 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\en-US\js\settings.js
[2009/07/27 14:55:10 | 000,002,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\flyout.html
[2009/07/27 14:55:10 | 000,001,015 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,010,028 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\RSSFeeds.html
[2009/07/27 14:55:10 | 000,003,340 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\settings.html
[2009/07/27 14:55:10 | 000,002,962 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\css\flyout.css
[2009/07/27 14:55:10 | 000,003,016 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\css\RSSFeeds.css
[2009/07/27 14:55:10 | 000,001,254 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\css\settings.css
[2009/07/27 14:55:10 | 000,110,422 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\js\RSSFeeds.js
[2009/07/27 14:55:10 | 000,005,542 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\fr-FR\js\settings.js
[2009/06/10 23:38:17 | 000,004,969 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\16-on-black.gif
[2009/06/10 23:38:18 | 000,000,293 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\buttonDown_Off.png
[2009/06/10 23:38:18 | 000,000,463 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\buttonDown_On.png
[2009/06/10 23:38:18 | 000,000,280 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\buttonUp_Off.png
[2009/06/10 23:38:18 | 000,000,451 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\buttonUp_On.png
[2009/06/10 23:38:18 | 000,004,395 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\flyoutBack.png
[2009/06/10 23:38:18 | 000,000,252 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\item_hover_docked.png
[2009/06/10 23:38:20 | 000,002,979 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\item_hover_floating.png
[2009/06/10 23:38:21 | 000,002,926 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\item_hover_flyout.png
[2009/06/10 23:38:21 | 000,003,242 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\navBack.png
[2009/06/10 23:38:21 | 000,005,980 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_docked.png
[2009/06/10 23:38:21 | 000,008,942 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\rssBackBlue_Undocked.png
[2009/06/10 23:38:21 | 000,001,696 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\rssLogo.gif
[2009/06/10 23:38:21 | 000,002,957 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_docked.png
[2009/06/10 23:38:21 | 000,002,999 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_floating.png
[2009/06/10 23:38:21 | 000,001,266 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\RSSFeeds.Gadget\images\rss_headline_glow_flyout.png
[2009/06/10 23:38:28 | 000,030,069 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\drag.png
[2009/06/10 23:38:28 | 000,010,034 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\icon.png
[2009/06/10 23:38:29 | 000,006,166 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\logo.png
[2009/07/14 04:06:10 | 000,000,989 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\en-US\gadget.xml
[2009/07/14 04:07:16 | 000,006,416 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\en-US\settings.html
[2009/07/14 04:09:34 | 000,003,428 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\en-US\slideShow.html
[2009/07/14 04:07:00 | 000,001,296 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\en-US\css\settings.css
[2009/07/14 04:09:54 | 000,004,528 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\en-US\css\slideShow.css
[2009/07/14 04:10:04 | 000,055,660 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\en-US\js\slideShow.js
[2009/07/27 14:55:10 | 000,000,986 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,006,456 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\fr-FR\settings.html
[2009/07/27 14:55:10 | 000,003,428 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\fr-FR\slideShow.html
[2009/07/27 14:55:10 | 000,001,296 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\fr-FR\css\settings.css
[2009/07/27 14:55:10 | 000,004,528 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\fr-FR\css\slideShow.css
[2009/07/27 14:55:10 | 000,055,774 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\fr-FR\js\slideShow.js
[2009/06/10 23:38:28 | 000,003,462 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\blank.png
[2009/06/10 23:38:28 | 000,003,063 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\next_down.png
[2009/06/10 23:38:28 | 000,003,065 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\next_hov.png
[2009/06/10 23:38:28 | 000,002,903 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\next_rest.png
[2009/06/10 23:38:28 | 000,003,018 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\pause_down.png
[2009/06/10 23:38:28 | 000,003,027 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\pause_hov.png
[2009/06/10 23:38:28 | 000,002,833 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\pause_rest.png
[2009/06/10 23:38:28 | 000,003,058 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\play_down.png
[2009/06/10 23:38:28 | 000,003,062 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\play_hov.png
[2009/06/10 23:38:29 | 000,002,886 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\play_rest.png
[2009/06/10 23:38:29 | 000,003,062 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\prev_down.png
[2009/06/10 23:38:29 | 000,003,077 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\prev_hov.png
[2009/06/10 23:38:29 | 000,002,904 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\prev_rest.png
[2009/06/10 23:38:29 | 000,003,162 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\reveal_down.png
[2009/06/10 23:38:29 | 000,003,161 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\reveal_hov.png
[2009/06/10 23:38:29 | 000,002,982 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\reveal_rest.png
[2009/06/10 23:38:29 | 000,400,256 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\Tulip.jpg
[2009/06/10 23:38:28 | 000,003,574 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\in_sidebar\bg_sidebar.png
[2009/06/10 23:38:28 | 000,003,511 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\in_sidebar\slideshow_glass_frame.png
[2009/06/10 23:38:28 | 000,005,513 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\SlideShow.Gadget\images\on_desktop\slideshow_glass_frame.png
[2009/06/10 23:38:05 | 000,012,896 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\drag.png
[2009/06/10 23:38:05 | 000,012,960 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\icon.png
[2009/06/10 23:38:08 | 000,005,930 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\logo.png
[2009/07/14 04:09:38 | 000,001,990 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\gadget.xml
[2009/07/14 04:03:32 | 000,008,382 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\settings.html
[2009/07/14 04:06:54 | 000,016,190 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\weather.html
[2009/07/14 04:09:24 | 000,000,974 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\css\localizedSettings.css
[2009/07/14 04:08:04 | 000,010,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\css\settings.css
[2009/07/14 04:03:04 | 000,024,636 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\css\weather.css
[2009/07/14 04:02:08 | 000,001,820 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\js\highDpiImageSwap.js
[2009/07/14 04:03:14 | 000,043,776 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\js\library.js
[2009/07/14 04:06:12 | 000,014,476 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\js\localizedStrings.js
[2009/07/14 04:07:56 | 000,057,960 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\js\settings.js
[2009/07/14 04:01:50 | 000,135,370 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\en-US\js\weather.js
[2009/07/27 14:55:10 | 000,001,970 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\gadget.xml
[2009/07/27 14:55:10 | 000,008,382 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\settings.html
[2009/07/27 14:55:10 | 000,016,190 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\weather.html
[2009/07/27 14:55:10 | 000,000,974 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\css\localizedSettings.css
[2009/07/27 14:55:10 | 000,010,118 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\css\settings.css
[2009/07/27 14:55:10 | 000,024,636 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\css\weather.css
[2009/07/27 14:55:10 | 000,001,820 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\js\highDpiImageSwap.js
[2009/07/27 14:55:10 | 000,043,776 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\js\library.js
[2009/07/27 14:55:10 | 000,014,980 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\js\localizedStrings.js
[2009/07/27 14:55:10 | 000,057,960 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\js\settings.js
[2009/07/27 14:55:10 | 000,135,370 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\fr-FR\js\weather.js
[2009/06/10 23:38:05 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\1.png
[2009/06/10 23:38:05 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\10.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\11.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\12.png
[2009/06/10 23:38:06 | 000,004,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\13.png
[2009/06/10 23:38:06 | 000,004,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\14.png
[2009/06/10 23:38:06 | 000,004,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\15.png
[2009/06/10 23:38:06 | 000,004,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\16.png
[2009/06/10 23:38:06 | 000,007,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\17.png
[2009/06/10 23:38:06 | 000,007,182 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\18.png
[2009/06/10 23:38:06 | 000,006,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\19.png
[2009/06/10 23:38:06 | 000,000,043 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\1px.gif
[2009/06/10 23:38:06 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\2.png
[2009/06/10 23:38:06 | 000,006,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\20.png
[2009/06/10 23:38:06 | 000,006,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\21.png
[2009/06/10 23:38:06 | 000,006,073 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\22.png
[2009/06/10 23:38:06 | 000,005,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\23.png
[2009/06/10 23:38:06 | 000,005,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\24.png
[2009/06/10 23:38:06 | 000,005,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\25.png
[2009/06/10 23:38:06 | 000,005,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\26.png
[2009/06/10 23:38:06 | 000,005,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\27.png
[2009/06/10 23:38:06 | 000,005,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\28.png
[2009/06/10 23:38:06 | 000,004,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\29.png
[2009/06/10 23:38:06 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\3.png
[2009/06/10 23:38:06 | 000,004,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\30.png
[2009/06/10 23:38:06 | 000,005,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\31.png
[2009/06/10 23:38:06 | 000,005,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\32.png
[2009/06/10 23:38:06 | 000,004,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\33.png
[2009/06/10 23:38:06 | 000,004,112 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\34.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\35.png
[2009/06/10 23:38:06 | 000,005,855 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\36.png
[2009/06/10 23:38:06 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\37.png
[2009/06/10 23:38:06 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\38.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\39.png
[2009/06/10 23:38:06 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\4.png
[2009/06/10 23:38:06 | 000,006,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\40.png
[2009/06/10 23:38:06 | 000,004,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\41.png
[2009/06/10 23:38:06 | 000,004,405 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\42.png
[2009/06/10 23:38:06 | 000,004,405 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\43.png
[2009/06/10 23:38:06 | 000,002,846 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\44.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\45.png
[2009/06/10 23:38:06 | 000,004,066 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\46.png
[2009/06/10 23:38:06 | 000,005,206 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\47.png
[2009/06/10 23:38:06 | 000,005,889 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\5.png
[2009/06/10 23:38:06 | 000,005,889 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\6.png
[2009/06/10 23:38:06 | 000,005,889 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\7.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\8.png
[2009/06/10 23:38:06 | 000,005,457 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\9.png
[2009/06/10 23:38:06 | 000,012,338 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\activity16v.png
[2009/06/10 23:38:06 | 000,000,426 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\alertIcon.png
[2009/06/10 23:38:06 | 000,003,294 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_close_down.png
[2009/06/10 23:38:06 | 000,003,295 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_close_down_BIDI.png
[2009/06/10 23:38:06 | 000,003,291 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_close_over.png
[2009/06/10 23:38:06 | 000,003,240 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_close_up.png
[2009/06/10 23:38:06 | 000,003,573 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_search_down.png
[2009/06/10 23:38:06 | 000,003,581 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_search_down_BIDI.png
[2009/06/10 23:38:06 | 000,003,559 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_search_over.png
[2009/06/10 23:38:06 | 000,003,582 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_search_over_BIDI.png
[2009/06/10 23:38:06 | 000,003,432 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_search_up.png
[2009/06/10 23:38:06 | 000,003,456 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\btn_search_up_BIDI.png
[2009/06/10 23:38:06 | 000,002,814 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\divider-horizontal.png
[2009/06/10 23:38:06 | 000,002,813 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\divider-vertical.png
[2009/06/10 23:38:06 | 000,008,801 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked-loading.png
[2009/06/10 23:38:06 | 000,010,062 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_cloudy.png
[2009/06/10 23:38:06 | 000,009,861 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_few-showers.png
[2009/06/10 23:38:06 | 000,010,544 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_foggy.png
[2009/06/10 23:38:06 | 000,011,882 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_hail.png
[2009/06/10 23:38:06 | 000,008,564 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter.png
[2009/06/10 23:38:06 | 000,010,958 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-first-quarter_partly-cloudy.png
[2009/06/10 23:38:06 | 000,008,804 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-full.png
[2009/06/10 23:38:06 | 000,011,053 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-full_partly-cloudy.png
[2009/06/10 23:38:06 | 000,008,621 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter.png
[2009/06/10 23:38:06 | 000,011,142 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-last-quarter_partly-cloudy.png
[2009/06/10 23:38:06 | 000,009,498 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-new.png
[2009/06/10 23:38:06 | 000,011,631 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-new_partly-cloudy.png
[2009/06/10 23:38:06 | 000,009,012 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent.png
[2009/06/10 23:38:06 | 000,011,379 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waning-crescent_partly-cloudy.png
[2009/06/10 23:38:06 | 000,008,636 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous.png
[2009/06/10 23:38:06 | 000,011,061 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waning-gibbous_partly-cloudy.png
[2009/06/10 23:38:06 | 000,008,870 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent.png
[2009/06/10 23:38:06 | 000,011,038 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-crescent_partly-cloudy.png
[2009/06/10 23:38:06 | 000,008,707 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous.png
[2009/06/10 23:38:06 | 000,011,101 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_moon-waxing-gibbous_partly-cloudy.png
[2009/06/10 23:38:06 | 000,012,659 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_rainy.png
[2009/06/10 23:38:06 | 000,013,161 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_snow.png
[2009/06/10 23:38:06 | 000,012,239 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_thunderstorm.png
[2009/06/10 23:38:06 | 000,012,841 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_black_windy.png
[2009/06/10 23:38:06 | 000,008,609 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_blue_partly-cloudy.png
[2009/06/10 23:38:06 | 000,011,939 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_blue_snow.png
[2009/06/10 23:38:06 | 000,011,493 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_blue_sun.png
[2009/06/10 23:38:06 | 000,012,998 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_blue_windy.png
[2009/06/10 23:38:06 | 000,010,537 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_cloudy.png
[2009/06/10 23:38:06 | 000,010,704 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_few-showers.png
[2009/06/10 23:38:06 | 000,010,044 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_foggy.png
[2009/06/10 23:38:06 | 000,012,401 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_hail.png
[2009/06/10 23:38:06 | 000,012,883 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_rainy.png
[2009/06/10 23:38:06 | 000,012,974 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_snow.png
[2009/06/10 23:38:06 | 000,012,757 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\docked_gray_thunderstorm.png
[2009/06/10 23:38:06 | 000,000,325 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\grayStateIcon.png
[2009/06/10 23:38:06 | 000,000,373 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\greenStateIcon.png
[2009/06/10 23:38:06 | 000,000,729 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\info.png
[2009/06/10 23:38:06 | 000,000,399 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\notConnectedStateIcon.png
[2009/06/10 23:38:06 | 000,000,399 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\redStateIcon.png
[2009/06/10 23:38:06 | 000,000,482 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\search_background.png
[2009/06/10 23:38:06 | 000,030,094 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked-loading.png
[2009/06/10 23:38:06 | 000,028,123 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_cloudy.png
[2009/06/10 23:38:06 | 000,028,035 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_few-showers.png
[2009/06/10 23:38:06 | 000,032,480 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_foggy.png
[2009/06/10 23:38:06 | 000,031,406 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_hail.png
[2009/06/10 23:38:06 | 000,019,451 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter.png
[2009/06/10 23:38:06 | 000,024,821 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-first-quarter_partly-cloudy.png
[2009/06/10 23:38:06 | 000,020,194 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-full.png
[2009/06/10 23:38:06 | 000,026,089 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-full_partly-cloudy.png
[2009/06/10 23:38:06 | 000,018,960 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter.png
[2009/06/10 23:38:06 | 000,025,006 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-last-quarter_partly-cloudy.png
[2009/06/10 23:38:07 | 000,021,898 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-new.png
[2009/06/10 23:38:07 | 000,027,366 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-new_partly-cloudy.png
[2009/06/10 23:38:07 | 000,019,841 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent.png
[2009/06/10 23:38:07 | 000,025,705 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-crescent_partly-cloudy.png
[2009/06/10 23:38:07 | 000,019,335 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous.png
[2009/06/10 23:38:07 | 000,025,339 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waning-gibbous_partly-cloudy.png
[2009/06/10 23:38:07 | 000,019,923 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent.png
[2009/06/10 23:38:07 | 000,025,685 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-crescent_partly-cloudy.png
[2009/06/10 23:38:07 | 000,019,536 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous.png
[2009/06/10 23:38:07 | 000,025,122 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_moon-waxing-gibbous_partly-cloudy.png
[2009/06/10 23:38:07 | 000,038,125 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_rainy.png
[2009/06/10 23:38:07 | 000,037,260 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_snow.png
[2009/06/10 23:38:07 | 000,031,296 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_thunderstorm.png
[2009/06/10 23:38:07 | 000,039,992 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_black_windy.png
[2009/06/10 23:38:07 | 000,027,357 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_blue_partly-cloudy.png
[2009/06/10 23:38:07 | 000,041,932 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_blue_snow.png
[2009/06/10 23:38:07 | 000,036,702 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_blue_sun.png
[2009/06/10 23:38:07 | 000,048,212 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_blue_windy.png
[2009/06/10 23:38:07 | 000,033,156 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_cloudy.png
[2009/06/10 23:38:07 | 000,033,872 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_few-showers.png
[2009/06/10 23:38:07 | 000,035,133 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_foggy.png
[2009/06/10 23:38:07 | 000,038,152 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_hail.png
[2009/06/10 23:38:07 | 000,042,818 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_rainy.png
[2009/06/10 23:38:07 | 000,041,183 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_snow.png
[2009/06/10 23:38:07 | 000,037,584 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\undocked_gray_thunderstorm.png
[2009/06/10 23:38:07 | 000,000,652 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\120DPI\(120DPI)alertIcon.png
[2009/06/10 23:38:07 | 000,000,429 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\120DPI\(120DPI)grayStateIcon.png
[2009/06/10 23:38:07 | 000,000,559 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\120DPI\(120DPI)greenStateIcon.png
[2009/06/10 23:38:07 | 000,000,680 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\120DPI\(120DPI)notConnectedStateIcon.png
[2009/06/10 23:38:07 | 000,000,680 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\120DPI\(120DPI)redStateIcon.png
[2009/06/10 23:38:07 | 000,000,993 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\144DPI\(144DPI)alertIcon.png
[2009/06/10 23:38:07 | 000,000,578 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\144DPI\(144DPI)grayStateIcon.png
[2009/06/10 23:38:07 | 000,000,752 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\144DPI\(144DPI)greenStateIcon.png
[2009/06/10 23:38:07 | 000,000,963 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\144DPI\(144DPI)notConnectedStateIcon.png
[2009/06/10 23:38:07 | 000,000,963 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Gadgets\Weather.Gadget\images\144DPI\(144DPI)redStateIcon.png
[2009/09/25 15:00:00 | 000,000,620 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\gadget.xml
[2009/09/25 15:00:00 | 000,003,591 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\main.html
[2009/09/25 15:00:00 | 000,005,862 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\css\main.css
[2009/09/25 15:00:00 | 000,001,945 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\bg_button.png
[2009/09/25 15:00:00 | 000,007,337 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\bg_error.png
[2009/09/25 15:00:00 | 000,005,462 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\bg_gadget.png
[2009/09/25 15:00:00 | 000,000,043 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\blank.gif
[2009/09/25 15:00:00 | 000,001,802 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_economy_active.png
[2009/09/25 15:00:00 | 000,001,766 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_economy_default.png
[2009/09/25 15:00:00 | 000,001,799 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_economy_hover.png
[2009/09/25 15:00:00 | 000,001,748 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_economy_pressed.png
[2009/09/25 15:00:00 | 000,001,936 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_standard_active.png
[2009/09/25 15:00:00 | 000,001,796 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_standard_default.png
[2009/09/25 15:00:00 | 000,001,807 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_standard_hover.png
[2009/09/25 15:00:00 | 000,001,773 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_standard_pressed.png
[2009/09/25 15:00:00 | 000,002,027 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_turbo_active.png
[2009/09/25 15:00:00 | 000,001,913 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_turbo_default.png
[2009/09/25 15:00:00 | 000,001,995 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_turbo_hover.png
[2009/09/25 15:00:00 | 000,001,895 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\button_turbo_pressed.png
[2009/09/25 15:00:00 | 000,006,492 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\logo.png
[2009/09/25 15:00:00 | 000,013,183 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\logotu.png
[2009/09/25 15:00:00 | 000,002,424 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\progress_balloon_economy.png
[2009/09/25 15:00:00 | 000,002,319 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\progress_balloon_standard.png
[2009/09/25 15:00:00 | 000,002,318 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\progress_balloon_turbo.png
[2009/09/25 15:00:00 | 000,001,075 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\progress_bar_economy.png
[2009/09/25 15:00:00 | 000,001,064 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\progress_bar_standard.png
[2009/09/25 15:00:00 | 000,001,075 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\progress_bar_turbo.png
[2009/09/25 15:00:00 | 000,010,845 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\status_critical.png
[2009/09/25 15:00:00 | 000,012,045 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\status_critical_hover.png
[2009/09/25 15:00:00 | 000,012,512 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\status_good.png
[2009/09/25 15:00:00 | 000,013,760 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\status_good_hover.png
[2009/09/25 15:00:00 | 000,010,690 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\status_warning.png
[2009/09/25 15:00:00 | 000,012,019 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\images\status_warning_hover.png
[2009/09/25 15:00:00 | 000,000,744 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\js\com.js
[2009/09/25 15:00:00 | 000,130,266 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\js\jquery.js
[2009/09/25 15:00:00 | 000,007,876 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\js\main.js
[2009/09/25 15:00:00 | 000,006,919 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\js\sprintf.js
[2009/09/25 15:00:00 | 000,008,585 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R7CKN45\Shared Gadgets\TuneUpUtilities.gadget\js\status.js
[2017/05/06 14:10:31 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R9M0UHZ.tmp_dir1494072631\exe4jlib.jar
[2017/05/06 14:10:31 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$R9M0UHZ.tmp_dir1494072631\i4jdel.exe
[2017/05/04 16:27:11 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RAK2OYL.tmp_dir1493908031\exe4jlib.jar
[2017/05/04 16:27:11 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RAK2OYL.tmp_dir1493908031\i4jdel.exe
[2017/05/03 20:02:57 | 001,371,480 | ---- | M] (Google Inc.) -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RD8IJMT.tmp\setup.exe
[2017/05/03 20:02:55 | 000,004,171 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RD8IJMT.tmp\SETUP_PATCH.PACKED.7Z
[2017/05/06 15:54:38 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RGZL7WM.tmp_dir1494078878\exe4jlib.jar
[2017/05/06 15:54:38 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RGZL7WM.tmp_dir1494078878\i4jdel.exe
[2017/05/03 18:30:37 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RILLG43.tmp_dir1493829037\exe4jlib.jar
[2017/05/03 18:30:37 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RILLG43.tmp_dir1493829037\i4jdel.exe
[2017/05/06 14:42:40 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RLUN9N2.tmp_dir1494074560\exe4jlib.jar
[2017/05/06 14:42:40 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RLUN9N2.tmp_dir1494074560\i4jdel.exe
[2017/05/03 16:48:34 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RLYZAHU.tmp_dir1493822914\exe4jlib.jar
[2017/05/03 16:48:34 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RLYZAHU.tmp_dir1493822914\i4jdel.exe
[2017/05/03 20:02:57 | 000,000,000 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RR72P4B\metadata
[2017/05/03 20:28:43 | 000,000,040 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RR72P4B\settings.dat
[2017/05/05 06:18:09 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RTCNCW6.tmp_dir1493957889\exe4jlib.jar
[2017/05/05 06:18:09 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RTCNCW6.tmp_dir1493957889\i4jdel.exe
[2017/05/06 10:01:07 | 000,029,902 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RZN5GJQ.tmp_dir1494057667\exe4jlib.jar
[2017/05/06 10:01:07 | 000,035,224 | ---- | M] () -- c:\$recycle.bin\S-1-5-21-3826502444-2126025144-1840911512-1000\$RZN5GJQ.tmp_dir1494057667\i4jdel.exe
[2009/07/14 06:53:46 | 000,032,496 | ---- | C] () -- C:\Windows\Tasks\SCHEDLGU.TXT
[2009/07/14 06:53:47 | 000,000,006 | -H-- | C] () -- C:\Windows\Tasks\SA.DAT

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 256 bytes -> C:\Windows:nlsPreferences
@Alternate Data Stream - 164 bytes -> C:\ProgramData\Temp:F9CFE070

< End of report >

Publicité


Signaler le contenu de ce document

Publicité