Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x86) Version: 11-06-2017
Exécuté par widen-finalis (administrateur) sur YOUCAM8WAIT (12-06-2017 14:56:37)
Exécuté depuis C:\Users\widen-finalis\Desktop
Profils chargés: widen-finalis (Profils disponibles: widen-finalis & Acronis Agent User)
Platform: Microsoft Windows 7 Édition Starter Service Pack 1 (X86) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Safe Mode (minimal)
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(IObit) C:\Program Files\IObit\Advanced SystemCare Ultimate\ASCAvSvc.exe
(IObit) C:\Program Files\IObit\Advanced SystemCare Ultimate\ASCAvWsc.exe
() C:\Program Files\EaseUS\EaseUS EverySync\bin\EaseUSEverySyncCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe

==================== Registre (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [Malwarebytes TrayApp] => C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
HKLM\...\Run: [PowerDVD17Agent] => C:\Program Files\CyberLink\PowerDVD17\PowerDVD17Agent.exe [527400 2017-04-26] (CyberLink Corp.)
HKLM\...\Run: [YouCam Service7] => C:\Program Files\CyberLink\YouCam7\YouCamService7.exe [466712 2017-04-28] (CyberLink Corp.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\...\Run: [Advanced SystemCare Ultimate] => C:\Program Files\IObit\Advanced SystemCare Ultimate\ASCTray.exe [3023136 2016-12-26] (IObit)
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\...\Run: [FileHippo.com] => C:\Program Files\FileHippo.com\FileHippo.AppManager.exe [10566352 2015-09-02] ()
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 6\CyberGhost.exe [1229360 2017-03-22] (CyberGhost S.R.L.)
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\...\Run: [Free Download Manager] => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe [8158408 2017-05-18] (FreeDownloadManager.org)
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\...\MountPoints2: {bee88473-eaff-11e6-aa90-1c750822b622} - D:\DTVP30_Launcher.exe
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2016-12-15] (Microsoft Corporation)
ShellExecuteHooks: Pas de nom - {A5BE62CA-DE0F-4764-A0CB-4044816DB174} - C:\Program Files\tuEagles\EagleObj.dll [87416 2017-06-11] ()
ShellIconOverlayIdentifiers: [ EaseUSEverySyncedOverlay] -> {52103F52-9856-43F7-B5C4-A026FD84288C} => C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll [2015-10-19] (TODO: )
ShellIconOverlayIdentifiers: [ EaseUSEverySyncFailedOverlay] -> {A6D755FC-42D6-46BF-8A5D-1F810C3FCEA6} => C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll [2015-10-19] (TODO: )
ShellIconOverlayIdentifiers: [ EaseUSEverySyncingOverlay] -> {0F45C9C8-E236-4CEC-A858-BFEB47D8CD3C} => C:\Program Files\EaseUS\EaseUS EverySync\bin\EverySyncExplorerOverlay.dll [2015-10-19] (TODO: )
ShellIconOverlayIdentifiers: [egisPSDP] -> {30A0A3F6-38AC-4C53-BB8B-0D95238E25BA} => C:\Program Files\EgisTec MyWinLocker\x86\psdprotect.dll [2010-05-27] (Egis Technology Inc.)
BootExecute: autocheck autochk *

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{7BA90B8A-91B0-4866-B0C4-D9F86999818B}: [NameServer] 8.26.56.26,8.20.247.20
Tcpip\..\Interfaces\{CFB4C46D-1B8B-4FB1-A605-36FA4CB6F2AA}: [DhcpNameServer] 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.fr/?q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.fr/
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.fr/
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://fr.yahoo.com/?fr=fp-comodo&type=19_1150005_57.0.2987.93_u_hp
HKU\S-1-5-21-4183021106-2149456055-877251859-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-4183021106-2149456055-877251859-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: TSC Internet Explorer BHO -> {12BE9EF0-90BE-4FA8-8341-78157FB9132C} -> C:\Program Files\TechSmith\Morae\BrowserExtensions\InternetExplorer\InternetExplorerBHO.dll [2015-09-29] (TechSmith Corporation)
BHO: Pas de nom -> {13D67BB7-DB5F-48AA-884D-7A5D94168509} -> Pas de fichier
BHO: IeUrlFilter Class -> {2DD257A3-5028-41AE-A1E7-A12F76A08893} -> C:\Program Files\COMODO\COMODO Secure Shopping\cssbho32.dll [2017-04-01] (COMODO)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-06-12] (Oracle Corporation)
BHO: Programme d'aide de l'Assistant de connexion Windows Live -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-01-22] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2017-06-11] (Google Inc.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-06-12] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll [2017-06-11] (Google Inc.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_131-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-00131-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_131-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_131-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Acer\Acer VCM\Skype4COM.dll [2008-07-03] (Skype Technologies)

FireFox:
========
FF HKLM\...\Firefox\Extensions: [{00F0643E-B367-4779-B45D-7046EBA37A88}] - C:\Program Files\Steganos Privacy Suite 18\spmplugin3 => non trouvé(e)
FF HKLM\...\Firefox\Extensions: [MoraeFirefoxExtension@techsmith.com] - C:\Program Files\TechSmith\Morae\BrowserExtensions\Firefox\morae_firefox_extension-1.0-fx-windows.xpi
FF Extension: (Morae Firefox Extension) - C:\Program Files\TechSmith\Morae\BrowserExtensions\Firefox\morae_firefox_extension-1.0-fx-windows.xpi [2015-09-29]
FF HKLM\...\Firefox\Extensions: [ISVCU@iSkysoft.com] - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi
FF Extension: (iSkysoft iMedia Converter Deluxe) - C:\ProgramData\iSkysoft\Video Converter Ultimate\ISVCU@iSkysoft.com_xpi [2017-06-11]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Corporation)
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-04-06] (Foxit Corporation)
FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-06-12] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-06-12] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-11] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-06-11] (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-4183021106-2149456055-877251859-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-4183021106-2149456055-877251859-1000: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2017-05-20] (Tracker Software Products (Canada) Ltd.)

Chrome:
=======
CHR HKLM\...\Chrome\Extension: [cfmjkokphadmhbenfjjecfbhbbonbjcb] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-4183021106-2149456055-877251859-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [hcjjaajflhellmcfcecojihhmdbjmmlm] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 .AVQWindowsMonitorService; C:\Program Files\Avanquest\Fix-It\AVQWinMonEngine.exe [249704 2015-07-20] (Avanquest Software)
S3 AcronisAgent; C:\Program Files\Common Files\Acronis\Agent\agent.exe [2140656 2016-01-14] (Acronis)
S3 AcrSch2Svc; C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe [917984 2016-03-17] (Acronis International GmbH)
S2 AdvancedSystemCareService10; C:\Program Files\IObit\Advanced SystemCare Ultimate\ASCService.exe [1013024 2017-04-05] (IObit)
S3 AQFileRestoreSrv; C:\Program Files\Avanquest\Fix-It\AQFileRestoreSrv.exe [82816 2015-07-20] (Avanquest Software)
R2 ASCAntivirusSrv; C:\Program Files\IObit\Advanced SystemCare Ultimate\ascavsvc.exe [1931552 2017-01-06] (IObit)
S2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [87088 2017-03-22] (CyberGhost S.R.L)
S2 CmdAgent; C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe [8152448 2017-04-23] (COMODO)
S3 cmdvirth; C:\Program Files\COMODO\COMODO Internet Security\cmdvirth.exe [2080448 2017-04-23] (COMODO)
S2 COSService.exe; C:\Program Files\COMODO\COMMON\COSService.exe [3087040 2014-10-07] (COMODO Security Solutions)
S3 csssrv; C:\Program Files\COMODO\COMODO Secure Shopping\csssrv.exe [2305720 2017-04-01] (COMODO)
S2 DigitalWave.Update.Service; C:\Program Files\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-03-22] (Digital Wave Ltd.)
S3 Disc Soft Pro Bus Service; C:\Program Files\DAEMON Tools Pro\DiscSoftBusServicePro.exe [1967296 2017-05-17] (Disc Soft Ltd)
S2 DragonUpdater; C:\Program Files\Comodo\Dragon\dragon_updater.exe [2273432 2017-04-28] (Comodo)
S3 ePowerSvc; C:\Program Files\Acer\Acer ePower Management\ePowerSvc.exe [735776 2010-06-11] (Acer Incorporated)
S3 ESLoadService; C:\Program Files\EaseUS\EaseUS EverySync\bin\ESLoadService.exe [43048 2015-10-19] (TODO: )
S3 Fix-It Task Manager; C:\Program Files\Avanquest\Fix-It\MXTask.exe [534472 2015-07-20] (Avanquest Software)
S3 GsServer; C:\Program Files\Siber Systems\GoodSync\gs-server.exe [4990688 2017-05-19] ()
S3 isesrv; C:\Program Files\COMODO\Internet Security Essentials\isesrv.exe [118480 2017-03-30] (COMODO)
S3 MacriumService; C:\Program Files\Macrium\Common\MacriumService.exe [3121832 2016-12-12] (Paramount Software UK Ltd)
S3 mfevtp; C:\Windows\system32\mfevtps.exe [238288 2017-02-05] (McAfee, Inc.)
S3 MMS; C:\Program Files\BackupClient\BackupAndRecovery\mms.exe [10887328 2016-11-08] ()
S3 MWLService; C:\Program Files\EgisTec MyWinLocker\x86\MWLService.exe [305520 2010-05-27] (Egis Technology Inc.)
S3 NMSAccess; C:\Windows\system32\NMSAccessU.exe [71096 2009-01-12] ()
S3 rscp; C:\Program Files\Reason\Security\Protection\rscp\bin\rscp_svc.exe [303896 2017-06-11] ()
S2 rsEngineSvc; C:\Program Files\Reason\Security\rsEngineSvc.exe [89880 2016-09-30] (Reason Software Company Inc.)
S3 RS_Service; C:\Program Files\Acer\Acer VCM\RS_Service.exe [260640 2010-01-30] (Acer Incorporated)
S3 SyncBackTouch; C:\Program Files\2BrightSparks\SyncBackTouch\SyncBackTouchSvc.exe [4715576 2016-09-30] (2BrightSparks Pte. Ltd.)
S3 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [72016 2017-05-05] (Code Sector)
S3 tuEaglesService; C:\Program Files\tuEagles\eglsrv.exe [342392 2017-06-11] ()
S3 Updater Service; C:\Program Files\Acer\Acer Updater\UpdaterService.exe [243232 2010-01-29] (Acer Group)
S3 VCOMCloudAgent; C:\Program Files\Avanquest\Fix-It\VcomCloudAgent.exe [142720 2015-07-20] (Avanquest Software North America)
S3 WebUpdate4; C:\Windows\system32\WebUpdateSvc4.exe [412776 2013-11-25] (Data Perceptions / PowerProgrammer)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
S3 WiseBootAssistant; C:\Program Files\Wise\Wise Care 365\BootTime.exe [650560 2017-05-03] (WiseCleaner.com)
S3 Start Menu Logon Manager; "C:\Program Files\ReviverSoft\Start Menu Reviver\StartMenuReviverService.exe" [X]

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AQFileRestore; C:\Windows\System32\DRIVERS\AQFileRestore.sys [18488 2015-07-20] ()
R0 bdisk; C:\Windows\System32\drivers\bdisk.sys [78816 2014-10-07] (COMODO Security Solutions Inc.)
R0 CBUfs; C:\Windows\System32\drivers\CBUFS.sys [278240 2014-10-07] (COMODO Security Solutions Inc.)
R0 cbvd; C:\Windows\System32\DRIVERS\cbvd.sys [572040 2014-10-07] (COMODO Security Solutions Inc.)
S1 cgnetfilter1521; C:\Windows\System32\drivers\cgnetfilter1521.sys [70432 2017-03-22] (Windows (R) Win 7 DDK provider)
S3 CLMirrorDriver; C:\Windows\System32\DRIVERS\CLMirrorDriver.sys [21264 2017-05-02] (CyberLink)
R3 CLVirtualBus01; C:\Windows\System32\DRIVERS\CLVirtualBus01.sys [79624 2014-11-05] (CyberLink)
S3 clwvd7; C:\Windows\System32\DRIVERS\clwvd7.sys [43800 2016-06-02] (CyberLink Corporation)
R1 cmdcss; C:\Windows\system32\drivers\cmdcss.sys [95976 2017-04-01] (COMODO)
R1 cmderd; C:\Windows\System32\DRIVERS\cmderd.sys [27504 2017-03-28] (COMODO)
S1 cmdGuard; C:\Windows\System32\DRIVERS\cmdguard.sys [662864 2017-03-28] (COMODO)
S1 cmdHlp; C:\Windows\System32\DRIVERS\cmdhlp.sys [53344 2017-03-28] (COMODO)
R3 dtproscsibus; C:\Windows\System32\DRIVERS\dtproscsibus.sys [26168 2017-06-10] (Disc Soft Ltd)
S3 dtultrascsibus; C:\Windows\System32\DRIVERS\dtultrascsibus.sys [26168 2016-12-15] (Disc Soft Ltd)
S3 dtultrausbbus; C:\Windows\System32\DRIVERS\dtultrausbbus.sys [40504 2016-12-15] (Disc Soft Ltd)
S2 egldrv; C:\Program Files\tuEagles\egldrv.sys [69392 2017-06-11] ()
S2 eglFS; C:\Program Files\tuEagles\eglfs.sys [14096 2017-06-11] ()
S2 eglNokl; C:\Program Files\tuEagles\eglnokl.sys [13584 2017-06-11] ()
S2 eglPS; C:\Program Files\tuEagles\eglps.sys [13024 2017-06-11] ()
S1 ElRawDisk; C:\Windows\system32\drivers\rsdrv.sys [22312 2009-02-12] (EldoS Corporation)
S1 ESProtectionDriver; C:\Windows\system32\drivers\mbae.sys [59936 2017-05-31] ()
R3 ETD; C:\Windows\System32\DRIVERS\ETD.sys [109960 2010-04-13] (ELAN Microelectronic Corp.)
R3 EUCR; C:\Windows\System32\DRIVERS\EUCR6SK.SYS [82768 2010-06-17] (ENE Technology Inc.)
S3 GridinSoftAntiRansomwareDriver; C:\Windows\System32\DRIVERS\gsars.sys [17480 2016-10-13] ()
S3 GridinSoftTrafficInspectDriver; C:\Windows\System32\DRIVERS\gsinspect.sys [33552 2017-03-02] ()
S1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [17472 2017-06-08] (Glarysoft Ltd)
S3 GUMHFilters; C:\Program Files\Glarysoft\Malware Hunter\Native\winxp_x86\GUMHFilter.sys [40888 2017-05-19] (GlarySoft Ltd)
S1 GUSBootStartup; C:\Windows\System32\drivers\GUSBootStartup.sys [17472 2017-06-08] (Glarysoft Ltd)
S1 inspect; C:\Windows\System32\DRIVERS\inspect.sys [104816 2017-03-28] (COMODO)
S1 isedrv; C:\Windows\system32\drivers\isedrv.sys [40952 2017-03-30] (COMODO)
R3 KeyScrambler; C:\Windows\System32\drivers\keyscrambler.sys [211536 2015-08-18] (QFX Software Corporation)
S2 MBAMChameleon; C:\Windows\system32\drivers\MBAMChameleon.sys [152512 2017-02-05] (Malwarebytes)
S3 MBAMProtection; C:\Windows\system32\drivers\mbam.sys [39360 2017-02-05] (Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [220088 2017-06-08] (Malwarebytes)
S3 MBAMWebProtection; C:\Windows\system32\drivers\mwac.sys [63264 2017-02-05] (Malwarebytes)
S3 MDA_NTDRV; C:\Windows\system32\MDA_NTDRV.sys [44032 2016-05-20] ()
S0 mfehidk; C:\Windows\System32\drivers\mfehidk.sys [648552 2017-02-05] (McAfee, Inc.)
S3 mferkdet; C:\Windows\System32\drivers\mferkdet.sys [91840 2017-02-05] (McAfee, Inc.)
S3 mv2; C:\Windows\System32\DRIVERS\mv2.sys [12904 2013-10-24] (UVNC BVBA)
S1 mwlPSDFilter; C:\Windows\System32\DRIVERS\mwlPSDFilter.sys [18992 2009-06-03] (Egis Technology Inc.)
S1 mwlPSDNServ; C:\Windows\System32\DRIVERS\mwlPSDNServ.sys [16432 2009-06-03] (Egis Technology Inc.)
S1 mwlPSDVDisk; C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys [60976 2009-06-03] (Egis Technology Inc.)
S2 PfFilter; C:\Program Files\IObit\Protected Folder\pffilter.sys [60608 2015-03-31] (IObit Information Technology)
R0 reparse; C:\Windows\System32\DRIVERS\cbreparse.sys [574368 2014-10-07] (COMODO Security Solutions Inc.)
S1 rsblk; C:\Windows\System32\drivers\rsblk.sys [49424 2015-09-23] ()
S1 SLEE_19_DRIVER; C:\Windows\system32\drivers\Sleen19.sys [99928 2014-10-24] (Softwareentwicklung Remus - ArchiCrypt - )
S3 tap0901; C:\Windows\System32\DRIVERS\tap0901.sys [23040 2016-04-21] (The OpenVPN Project)
R0 tib; C:\Windows\System32\DRIVERS\tib.sys [802648 2017-02-04] (Acronis International GmbH)
S2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [166232 2017-02-04] (Acronis International GmbH)
S3 TrojanKillerDriver; C:\Windows\System32\DRIVERS\gtkdrv.sys [27408 2017-05-17] (Windows (R) Win 7 DDK provider)
U3 TrueSight; C:\Windows\System32\drivers\TrueSight.sys [24688 2017-06-12] ()
S3 Trufos; C:\Windows\System32\DRIVERS\TRUFOS.sys [458656 2016-11-02] (BitDefender S.R.L.)
R3 vdbus; C:\Windows\System32\DRIVERS\vdbus.sys [718056 2014-10-07] (COMODO Security Solutions Inc.)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [171352 2017-02-04] (Acronis International GmbH)
S1 xlkfs; C:\Windows\System32\DRIVERS\xlkfs.sys [39664 2016-05-26] (XOSLAB.COM)
S2 {A14A8EF6-B11D-4356-9ECC-4B937E6CC626}; C:\Program Files\CyberLink\PowerDVD17\Common\NavFilter\000.fcl [33048 2017-05-03] (CyberLink Corp.)
S3 avchv; system32\DRIVERS\avchv.sys [X]
U3 DfSdkS; pas de ImagePath
S1 epp; \??\L:\data - emsisoft\bin32\epp.sys [X]
S3 MBAMFarflt; \??\C:\Windows\system32\drivers\farflt.sys [X]
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [Fichier non signé]

========================== MD5 Pilotes =======================

C:\Windows\system32\drivers\1394ohci.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\ACPI.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\acpipmi.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\adp94xx.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\adpahci.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\adpu320.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\afd.sys F81BB7E487EDCEAB630A7EE66CF23913
C:\Windows\system32\drivers\agp440.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\djsvs.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\aliide.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\amdagp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\amdide.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\amdk8.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\amdppm.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\amdsata.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\amdsbs.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\amdxata.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\appid.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\AQFileRestore.sys E5A3749F881AEF9355DE3D23BA01E1AD
C:\Windows\system32\drivers\arc.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\arcsas.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\asyncmac.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\atapi.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\bxvbdx.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\b57nd60x.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\bdisk.sys BB00D8CB8A0BF6A191BDBFAEC921B0A4
C:\Windows\system32\Drivers\Beep.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\blbdrive.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\bowser.sys FCAFAEF6798D7B51FF029F99A9898961
C:\Windows\system32\drivers\BrFiltLo.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\BrFiltUp.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\Brserid.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\BrSerWdm.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\BrUsbMdm.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\BrUsbSer.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\bthmodem.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\CBUFS.sys 3569990D104CEDD124E93C383DC8D58A
C:\Windows\System32\DRIVERS\cbvd.sys 28CE29F34E3260ABD14EA9A0E6231BB3
C:\Windows\System32\DRIVERS\cdfs.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\cdrom.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\cgnetfilter1521.sys FDD648512FD4D4E7E2FEE41BF84B9879
C:\Windows\system32\drivers\circlass.sys ==> Le MD5 est légitime
C:\Windows\System32\CLFS.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\CLMirrorDriver.sys 51853084F6D842026392335CCC338D67
C:\Windows\System32\DRIVERS\CLVirtualBus01.sys BDF8CB4E8D283534BCF09284B858EB17
C:\Windows\System32\DRIVERS\clwvd7.sys 17144B26B7D7BF0E87B3C20F7A2D36F7
C:\Windows\system32\drivers\CmBatt.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\cmdcss.sys 2970D03C1954668522C18BEE30DE57CC
C:\Windows\System32\DRIVERS\cmderd.sys 7C0F8DC6E8EB324643634E021758B510
C:\Windows\System32\DRIVERS\cmdguard.sys CC1BA54B4232B70D7AEE29EFF67937BC
C:\Windows\System32\DRIVERS\cmdhlp.sys 4095A5A3D914D1A6FAFAAEA8110231BF
C:\Windows\system32\drivers\cmdide.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\cng.sys 780FFC005741C9316576086155E55F56
C:\Windows\System32\drivers\compbatt.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\CompositeBus.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\crcdisk.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\dfsc.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\discache.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\disk.sys B7B470F163002A0D0E381EE45834BF6B
C:\Windows\system32\drivers\drmkaud.sys A3F684B866A7D89AE396276CE7AFD416
C:\Windows\System32\DRIVERS\dtproscsibus.sys 4F334F8BF3AC669FD655E69A3B866239
C:\Windows\System32\DRIVERS\dtultrascsibus.sys 827CB1B4643BA99BD5E75732447D3B58
C:\Windows\System32\DRIVERS\dtultrausbbus.sys 5EF653C5F3010993630F098CFB28AB5A
C:\Windows\System32\drivers\dxgkrnl.sys 4B21D102E49E9D44C478D6766A7FCBE5
C:\Windows\system32\drivers\evbdx.sys ==> Le MD5 est légitime
C:\Program Files\tuEagles\egldrv.sys 171E69281BB8A183387A330F21063AD3
C:\Program Files\tuEagles\eglfs.sys 36488A2690BF0F2397775E1B780360BD
C:\Program Files\tuEagles\eglnokl.sys 4582DF90AC07C23605E00A58EBBACD7A
C:\Program Files\tuEagles\eglps.sys 54688CDFE192DD73F7A877CCF94DE028
C:\Windows\system32\drivers\rsdrv.sys B8EAC99B14772BDC36CA963AED109FA2
C:\Windows\system32\drivers\elxstor.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\errdev.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\mbae.sys C00BBCAEDCC2A3503D0FC27DD96D97C8
C:\Windows\System32\DRIVERS\ETD.sys 7C87DF14552A5E0270DBD906BAFF85FB
C:\Windows\System32\DRIVERS\EUCR6SK.SYS 4FAB8DFAF156E048AD514EABD268AB3A
C:\Windows\system32\Drivers\exfat.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\fastfat.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\fdc.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\fileinfo.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\filetrace.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\flpydisk.sys ==> Le MD5 est légitimeB
C:\Windows\System32\drivers\fltmgr.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\fltsrv.sys D3CEEE9BFE81504D422C764075EBAB76
C:\Windows\System32\drivers\FsDepends.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\Fs_Rec.sys 7DAE5EBCC80E45D3253F4923DC424D05
C:\Windows\System32\DRIVERS\fvevol.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\gagp30kx.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\gsars.sys 540FF85FB693E03C8940ECAD1D23D7DB
C:\Windows\System32\DRIVERS\gsinspect.sys 07DE3E7A109069B56059BF910FB55CF6
C:\Windows\System32\drivers\GUBootStartup.sys 05C11D2DA6B396F6AD8C590D32CF81D7
C:\Program Files\Glarysoft\Malware Hunter\Native\winxp_x86\GUMHFilter.sys 63C1F5C2C1F96EB1F0B1120B64D9A531
C:\Windows\System32\drivers\GUSBootStartup.sys 7E2722165591E58D16E64B8FB850BB83
C:\Windows\system32\drivers\hcw85cir.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\HdAudio.sys A5EF29D5315111C80A5C1ABAD14C8972
C:\Windows\system32\drivers\HDAudBus.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\HidBatt.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\hidbth.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\hidir.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\hidusb.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\HpSAMD.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\HTTP.sys 487569E5DA56A5A432FF8AF6D3599CF9
C:\Windows\System32\drivers\hwpolicy.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\i8042prt.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\iaStor.sys D80AA0907748D7CC8EFAB3773F32629B
C:\Windows\system32\drivers\iaStorV.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\igdkmd32.sys D0074897C6BC132F3980EA4654BF7FB9
C:\Windows\system32\drivers\iirsp.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\inspect.sys 9BC1FFC1308542DA3A03BD94231EFE84
C:\Windows\System32\drivers\RTKVHDA.sys 8C92829CCAE93139B90C46389FBEF4CF
C:\Windows\system32\drivers\intelide.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\intelppm.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\ipfltdrv.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\IPMIDrv.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\ipnat.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\irenum.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\isapnp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\msiscsi.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\isedrv.sys 048C878140F1DA2C560820EBFB541EB8
C:\Windows\system32\drivers\kbdclass.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\kbdhid.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\keyscrambler.sys 71A8EC3404DDC816584F6EC3CAFF8DB0
C:\Windows\System32\Drivers\ksecdd.sys 0C51E9B34F3521806C78325E511E93EF
C:\Windows\System32\Drivers\ksecpkg.sys CC5B7CF2D08FDDAF1112FE2785F33FAC
C:\Windows\System32\DRIVERS\L1C62x86.sys 1A91EAAD2D73758140B3B7B6AD736573
C:\Windows\System32\DRIVERS\lltdio.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\lsi_fc.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\lsi_sas.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\lsi_sas2.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\lsi_scsi.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\luafv.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\MBAMChameleon.sys EBEE7C1D4A0DBCCE5449252F2F2DDCB4
C:\Windows\system32\drivers\mbam.sys D9351F554ED0784764DB0564186906AE
C:\Windows\system32\drivers\MBAMSwissArmy.sys 56E4DE5761F5313CCD82A89815FFA716
C:\Windows\system32\drivers\mwac.sys 47EDF3E9AF296D7836A50179AC0F3749
C:\Windows\system32\MDA_NTDRV.sys B28A051A70CFDEAC6EAC78CF476D9877
C:\Windows\system32\drivers\megasas.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\MegaSR.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\mfehidk.sys 19D2D9C507D0E7A577807303FE96501B
C:\Windows\System32\drivers\mferkdet.sys 6EA4C5591F7EEE370EF4E93ECDD4EFAE
C:\Windows\System32\drivers\modem.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\monitor.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\mouclass.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\mouhid.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\mountmgr.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\mpio.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\mpsdrv.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\mrxdav.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\mrxsmb.sys E900BD16B9EE8F09609D7FBE2027B376
C:\Windows\System32\DRIVERS\mrxsmb10.sys 34F71B69DD2875AF07C4DDF19563C457
C:\Windows\System32\DRIVERS\mrxsmb20.sys 14063258261AA807DAADC9233422A5E5
C:\Windows\system32\drivers\msahci.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\msdsm.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\Msfs.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\mshidkmdf.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\msisadrv.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\MSKSSRV.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\MSPCLOCK.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\MSPQM.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\MsRPC.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\mssmbios.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\MSTEE.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\MTConfig.sys ==> Le MD5 est légitime
C:\Windows\System32\Drivers\mup.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\mv2.sys 797BDDFB4388C89E513B495CDF11BEF5
C:\Windows\System32\DRIVERS\mwlPSDFilter.sys CB47C414E083CA6E50E634B148F28F64
C:\Windows\System32\DRIVERS\mwlPSDNServ.sys 647B953019559BFF07536F5C6121F333
C:\Windows\System32\DRIVERS\mwlPSDVDisk.sys 5A236A36DB8687D1E64DC81C03EAABE1
C:\Windows\System32\DRIVERS\nwifi.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\ndis.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\ndiscap.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\ndistapi.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\ndisuio.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\ndiswan.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\NDProxy.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\netbios.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\netbt.sys A00996C9BFEF29A93B9F21DBE1DC502D
C:\Windows\System32\DRIVERS\NETw5s32.sys A520AED8926AD6185031B9B18F55397E
C:\Windows\system32\drivers\nfrd960.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\Npfs.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\nsiproxy.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\Ntfs.sys 978E7A2E4BF4E8E70D0776EF0D9E97FB
C:\Windows\system32\Drivers\Null.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\nvraid.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\nvstor.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\nv_agp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\ohci1394.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\parport.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\partmgr.sys 3F34A1B4C5F6475F320C275E63AFCE9B
C:\Windows\system32\drivers\parvdm.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\pci.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\pciide.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\pcmcia.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\pcw.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\peauth.sys ==> Le MD5 est légitime
C:\Program Files\IObit\Protected Folder\pffilter.sys FDFE12EACDD40B37253D5173C56694AE
C:\Windows\System32\DRIVERS\raspptp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\processr.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\pacer.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\ql2300.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\ql40xx.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\qwavedrv.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\rasacd.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\AgileVpn.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\rasl2tp.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\raspppoe.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\rassstp.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\rdbss.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\rdpbus.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\RDPCDD.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\rdpencdd.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\rdprefmp.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\RDPWD.sys CD9214A6AE17D188D17C3CF8CB9CC693
C:\Windows\System32\drivers\rdyboost.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\cbreparse.sys 54514292779318B9E43B6C848F795772
C:\Windows\System32\drivers\rsblk.sys CF30D43BD112080BAF33667651CBD1B0
C:\Windows\System32\DRIVERS\rspndr.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sbp2port.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\scfilter.sys ==> Le MD5 est légitime
C:\Windows\system32\Drivers\secdrv.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\serenum.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\serial.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sermouse.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sffdisk.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sffp_mmc.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sffp_sd.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sfloppy.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sisagp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\SiSRaid2.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\sisraid4.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\Sleen19.sys 56BD034721A65983AA6382CD6B3B33D0
C:\Windows\System32\DRIVERS\smb.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\snapman.sys 5D9D177CF16256E49F669563C15B37E9
C:\Windows\system32\Drivers\spldr.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\srv.sys D86EA722F3337AA3F0253B6E359E6796
C:\Windows\System32\DRIVERS\srv2.sys 1931823AC05967E5F79B791E9FFC2398
C:\Windows\System32\DRIVERS\srvnet.sys 50A2FC7B0408F15B77E056076BBB6252
C:\Windows\system32\drivers\stexstor.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\swenum.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\tap0901.sys F49967C396969B71C3A72537DB03A68B
C:\Windows\System32\drivers\tcpip.sys C7E41209132B9CF084CCEA8593F61328
C:\Windows\System32\DRIVERS\tcpip.sys C7E41209132B9CF084CCEA8593F61328
C:\Windows\System32\drivers\tcpipreg.sys A4BF8BE9D1F7D563C7868AC7B2561545
C:\Windows\System32\drivers\tdpipe.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\tdtcp.sys 2C2C5AFE7EE4F620D69C23C0617651A8
C:\Windows\System32\DRIVERS\tdx.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\termdd.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\tib.sys E7294F1807024457049C69FA522283DE
C:\Windows\System32\DRIVERS\tib_mounter.sys A5F87EDA0FCD8879BEEEB9ABB0C40F1F
C:\Windows\System32\DRIVERS\gtkdrv.sys 7AA2B282A9AFA31B0B965F338A6D3A0E
C:\Windows\System32\drivers\TrueSight.sys 0C997B061E3C66BD9E927C1288EB1CC7
C:\Windows\System32\DRIVERS\TRUFOS.sys 9B4E2F5A6DCBFF5B23F2CF25D4D868BC
C:\Windows\System32\DRIVERS\tssecsrv.sys 6C5139E4283249518F7743D7043775B3
C:\Windows\System32\drivers\tsusbflt.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\tunnel.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\uagp35.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\udfs.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\uliagpkx.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\umbus.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\umpass.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\usbccgp.sys 0803FBA9FE829D61AE26EC0BCC910C46
C:\Windows\system32\drivers\usbcir.sys 2352AB5F9F8F097BF9D41D5A4718A041
C:\Windows\system32\drivers\usbehci.sys D40855F89B69305140BBD7E9A3BA2DA6
C:\Windows\System32\DRIVERS\usbhub.sys EDF2DF71C4F1E13A6AC75F5224DE655A
C:\Windows\system32\drivers\usbohci.sys 9828C8D14CC2676421778F0DE638CF97
C:\Windows\system32\drivers\usbprint.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\USBSTOR.SYS ==> Le MD5 est légitime
C:\Windows\system32\drivers\usbuhci.sys 800AABFD625EEFF899F7E5496BDE37AB
C:\Windows\System32\Drivers\usbvideo.sys DE014425522610BEDCA3821BB8C0F1D5
C:\Windows\System32\DRIVERS\vdbus.sys 28A9058838B27F1D944F803FF8987F23
C:\Windows\System32\drivers\vdrvroot.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\vgapnp.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\vga.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\vhdmp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\viaagp.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\viac7.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\viaide.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\volmgr.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\volmgrx.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\volsnap.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\volume_tracker.sys 5E780F0D2298236D65177A127B140C68
C:\Windows\system32\drivers\vsmraid.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\vwifibus.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\vwififlt.sys 7090D3436EEB4E7DA3373090A23448F7
C:\Windows\system32\drivers\wacompen.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\wanarp.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\wanarp.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\wd.sys ==> Le MD5 est légitime
C:\Windows\System32\DRIVERS\wdcsam.sys 5A833408ACFEADB92C7BEB2E7DB6B9BF
C:\Windows\System32\drivers\Wdf01000.sys 25944D2CC49E0A6C581D02A74B7D6645
C:\Windows\System32\DRIVERS\wfplwf.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\wimmount.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\wmiacpi.sys ==> Le MD5 est légitime
C:\Windows\system32\drivers\ws2ifsl.sys ==> Le MD5 est légitime
C:\Windows\System32\drivers\WudfPf.sys 06E6F32C8D0A3F66D956F57B43A2E070
C:\Windows\System32\DRIVERS\WUDFRd.sys 867C301E8B790040AE9CF6486E8041DF
C:\Windows\System32\DRIVERS\xlkfs.sys FD182627381FB54884A2BA7C91008B5E
C:\Program Files\CyberLink\PowerDVD17\Common\NavFilter\000.fcl 30728671690E137A0767956634A8747F

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-06-12 14:56 - 2017-06-12 14:57 - 00041557 _____ C:\Users\widen-finalis\Desktop\FRST.txt
2017-06-12 14:50 - 2017-06-12 14:50 - 00145464 _____ C:\Windows\Minidump\061217-37830-01.dmp
2017-06-12 14:46 - 2017-06-12 14:56 - 00000000 ____D C:\FRST
2017-06-12 14:38 - 2017-03-22 09:39 - 00070432 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\cgnetfilter1521.sys
2017-06-12 14:37 - 2017-06-12 14:37 - 00000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2017-06-12 14:33 - 2017-06-12 14:33 - 00000000 ____D C:\Users\widen-finalis\Documents\lfs ultra & 100% sécurisé finalis part C DU 13 AVRIL
2017-06-12 14:28 - 2017-06-12 14:33 - 00000000 ____D C:\Users\widen-finalis\Documents\ad-aware_cyberlink_macrorit_amazingshare_vexe_noemie_a le brulog
2017-06-12 14:11 - 2017-06-12 14:32 - 00000000 ____D C:\AdwCleaner
2017-06-12 13:58 - 2017-06-12 13:57 - 04110280 _____ C:\Users\widen-finalis\Desktop\adwcleaner_6.047.exe
2017-06-12 13:58 - 2017-06-12 13:57 - 01776640 _____ (Farbar) C:\Users\widen-finalis\Desktop\FRST.exe
2017-06-12 10:39 - 2017-06-12 10:39 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\VOS
2017-06-12 10:38 - 2017-03-02 14:53 - 59034276 _____ (Emco Software) C:\Users\widen-finalis\Documents\EMCO Malware Destroyer.por.exe
2017-06-12 10:35 - 2017-06-12 10:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\A-PDF to Video
2017-06-12 10:35 - 2017-06-12 10:35 - 00000000 ____D C:\Program Files\Common Files\VisioForge Shared
2017-06-12 10:35 - 2017-06-12 10:35 - 00000000 ____D C:\Program Files\A-PDF to Video
2017-06-12 10:33 - 2017-06-12 10:33 - 00000000 ____D C:\Users\widen-finalis\Desktop\SpyHunter.4.25.6.4782.Portable.KaranPC
2017-06-12 07:51 - 2017-06-12 07:51 - 00001220 _____ C:\Users\Public\Desktop\Ashampoo Music Studio 4.lnk
2017-06-12 07:51 - 2017-06-12 07:51 - 00000213 _____ C:\Users\Public\Desktop\Your Software Deals.url
2017-06-12 07:21 - 2017-06-12 07:21 - 00000000 ____D C:\Program Files\Common Files\Java
2017-06-12 06:40 - 2017-06-12 06:40 - 00001269 _____ C:\Users\Public\Desktop\Free Download Manager 5.lnk
2017-06-12 06:36 - 2017-06-12 06:16 - 00268864 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2017-06-12 06:31 - 2017-06-12 06:31 - 00001261 _____ C:\Users\Public\Desktop\Ashampoo Burning Studio 18.lnk
2017-06-12 06:31 - 2017-06-12 06:31 - 00000221 _____ C:\Users\Public\Desktop\Ashampoo Deals.url
2017-06-12 06:27 - 2017-06-12 06:35 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\CyberGhost
2017-06-12 06:20 - 2017-06-12 06:22 - 00000000 ____D C:\Program Files\TAP-Windows
2017-06-12 06:13 - 2017-06-12 06:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 6
2017-06-12 06:12 - 2017-06-12 06:28 - 00000000 ____D C:\Program Files\CyberGhost 6
2017-06-12 06:11 - 2017-06-12 06:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Macrium
2017-06-12 06:01 - 2017-06-12 06:01 - 02738408 _____ (WiseVideoSuite.com ) C:\Users\widen-finalis\Downloads\wvdsetup.exe
2017-06-12 06:01 - 2017-06-12 06:01 - 01498248 _____ (WiseCleaner.com ) C:\Users\widen-finalis\Downloads\wmosetup.exe
2017-06-12 06:00 - 2017-06-12 06:04 - 39544696 _____ (Cole Williams Software Limited) C:\Users\widen-finalis\Downloads\windows.7.codec.pack.v4.1.6.setup.exe
2017-06-12 06:00 - 2017-06-12 06:04 - 39544696 _____ (Cole Williams Software Limited) C:\Users\widen-finalis\Downloads\windows.7.codec.pack.v4.1.6.setup (1).exe
2017-06-12 06:00 - 2017-06-12 06:01 - 10121952 _____ (WinZip) C:\Users\widen-finalis\Downloads\wzro32.exe
2017-06-12 06:00 - 2017-06-12 06:01 - 08421872 _____ (WiseCleaner.com ) C:\Users\widen-finalis\Downloads\wisecare365.exe
2017-06-12 06:00 - 2017-06-12 06:00 - 06927767 _____ C:\Users\widen-finalis\Downloads\supercopier-windows-x86-1.2.3.6-setup.exe
2017-06-12 05:59 - 2017-06-12 06:04 - 42605016 _____ (FreeDownloadManager.ORG ) C:\Users\widen-finalis\Downloads\fdm5_x86_setup (1).exe
2017-06-12 05:59 - 2017-06-12 06:02 - 14000928 _____ (IObit) C:\Users\widen-finalis\Downloads\iobituninstaller.exe
2017-06-12 05:59 - 2017-06-12 06:01 - 07790192 _____ (Reason Software Company Inc.) C:\Users\widen-finalis\Downloads\reason-core-security-setup (1).exe
2017-06-12 05:59 - 2017-06-12 06:00 - 03209624 _____ (GridinSoft, LLC. ) C:\Users\widen-finalis\Downloads\anti-ransomware.exe
2017-06-12 05:57 - 2017-06-12 06:00 - 107025624 _____ (Ashampoo GmbH & Co. KG ) C:\Users\widen-finalis\Downloads\ashampoo_burning_studio_18_18.0.4_sm.exe
2017-06-12 05:57 - 2017-06-12 05:59 - 17977200 _____ (CyberGhost S.R.L. ) C:\Users\widen-finalis\Downloads\cg_6.1.0_44375.exe
2017-06-12 05:55 - 2017-06-12 05:55 - 00000000 ____D C:\Users\widen-finalis\Downloads\Macrium
2017-06-12 05:53 - 2017-06-12 05:54 - 00000000 ____D C:\Users\widen-finalis\Documents\Mes téléchargements Filehippo
2017-06-12 05:46 - 2017-06-12 05:46 - 00001998 _____ C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileHippo App Manager.lnk
2017-06-12 05:46 - 2017-06-12 05:46 - 00001241 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Update Pro.lnk
2017-06-12 05:46 - 2017-06-12 05:46 - 00000384 _____ C:\Windows\Tasks\SoftwareUpdate Pro.job
2017-06-12 05:46 - 2017-06-12 05:46 - 00000000 ____D C:\Program Files\FileHippo.com
2017-06-12 05:44 - 2017-06-12 05:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2017-06-12 05:43 - 2017-06-12 05:43 - 00000000 ____D C:\Program Files\FreeCodecPack
2017-06-12 05:43 - 2017-06-12 05:43 - 00000000 ____D C:\Program Files\DVDVideoSoft
2017-06-12 05:43 - 2017-06-12 05:43 - 00000000 ____D C:\Program Files\Common Files\DVDVideoSoft
2017-06-12 05:39 - 2017-06-12 05:53 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\DVDVideoSoft
2017-06-11 20:53 - 2017-06-11 20:53 - 00637527 _____ C:\Users\widen-finalis\Desktop\UsbFix_Report.txt
2017-06-11 15:44 - 2017-06-12 14:50 - 267365849 _____ C:\Windows\MEMORY.DMP
2017-06-11 15:44 - 2017-06-12 14:50 - 00000000 ____D C:\Windows\Minidump
2017-06-11 15:44 - 2017-06-11 15:45 - 00145472 _____ C:\Windows\Minidump\061117-104458-01.dmp
2017-06-11 14:50 - 2017-06-11 14:50 - 00000000 ____D C:\Users\Public\Documents\CyberLink
2017-06-11 13:20 - 2017-06-12 12:53 - 00024688 _____ C:\Windows\system32\Drivers\TrueSight.sys
2017-06-11 12:50 - 2017-06-11 12:50 - 00000000 ____D C:\Users\widen-finalis\Documents\Ashampoo Burning Studio 2017
2017-06-11 12:39 - 2017-06-11 12:39 - 00000000 ____D C:\Users\widen-finalis\Documents\Video Watermarker
2017-06-11 12:39 - 2017-06-11 12:39 - 00000000 ____D C:\ProgramData\VideoWatermarker
2017-06-11 12:39 - 2017-06-11 12:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Video Watermarker
2017-06-11 12:39 - 2017-06-11 12:39 - 00000000 ____D C:\Program Files\Video Watermarker
2017-06-11 12:39 - 2017-06-07 16:00 - 00032392 _____ (Axis) C:\Windows\system32\PCWinSoftPBar.ocx
2017-06-11 12:39 - 2016-02-29 20:05 - 00020480 _____ (Microsoft) C:\Windows\system32\FileDemultiplexorMP.dll
2017-06-11 12:39 - 2016-02-16 08:56 - 00229376 _____ (GDCL (www.gdcl.co.uk)) C:\Windows\system32\mp4mux.dll
2017-06-11 12:39 - 2016-02-16 08:56 - 00189952 _____ (GDCL (www.gdcl.co.uk)) C:\Windows\system32\mp4demux.dll
2017-06-11 12:39 - 2014-09-29 17:19 - 00316416 _____ C:\Windows\system32\ff_kernelDeint.dll
2017-06-11 12:39 - 2008-01-27 15:59 - 00413696 _____ (Gabest) C:\Windows\system32\FLVSplitter.ax
2017-06-11 12:39 - 2006-10-11 11:03 - 00264528 _____ (Microsoft Corporation) C:\Windows\system32\MPG4DS32.AX
2017-06-11 12:39 - 2006-10-11 11:03 - 00008608 _____ C:\Windows\system32\mpeg4ax.cat
2017-06-11 12:39 - 2006-10-11 11:03 - 00008587 _____ C:\Windows\system32\msaudio.cat
2017-06-11 12:37 - 2017-06-11 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDFPasswordRecover
2017-06-11 12:37 - 2017-06-11 12:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paste As File (SharewareOnSale)
2017-06-11 12:37 - 2017-06-11 12:37 - 00000000 ____D C:\Program Files\PDFPasswordRecover
2017-06-11 12:37 - 2017-06-11 12:37 - 00000000 ____D C:\Program Files\Paste As File (SharewareOnSale)
2017-06-11 12:35 - 2017-06-11 12:35 - 00000000 ____D C:\Users\Public\CyberLink
2017-06-11 12:17 - 2017-03-30 08:12 - 00993192 _____ (SosVirus) C:\Users\widen-finalis\Documents\processclose_2_08.01.17.1.exe
2017-06-11 12:13 - 2017-06-11 12:13 - 00003181 _____ C:\Users\widen-finalis\Documents\processclose_1.0.0.3(1).exe - Raccourci.lnk
2017-06-11 11:06 - 2017-06-11 12:22 - 00007916 _____ C:\Users\widen-finalis\Desktop\Rkill.txt
2017-06-11 10:14 - 2016-06-02 05:47 - 00043800 _____ (CyberLink Corporation) C:\Windows\system32\Drivers\clwvd7.sys
2017-06-11 09:30 - 2017-06-11 09:18 - 00000000 _____ C:\Users\widen-finalis\Desktop\rkill.com
2017-06-11 09:29 - 2017-06-11 09:18 - 00000000 _____ C:\Users\widen-finalis\Desktop\iExplore.exe
2017-06-11 09:28 - 2017-06-11 09:18 - 00000000 _____ C:\Users\widen-finalis\Desktop\rkill.exe
2017-06-11 09:25 - 2017-06-11 09:25 - 00002853 _____ C:\Users\widen-finalis\Desktop\rkill.com - Raccourci.pif
2017-06-11 09:25 - 2017-06-11 09:25 - 00000594 _____ C:\Users\widen-finalis\Desktop\rkill.zip - Raccourci.lnk
2017-06-11 09:25 - 2017-06-11 09:25 - 00000308 _____ C:\Users\widen-finalis\Desktop\iExplore.exe - Raccourci.lnk
2017-06-11 09:25 - 2017-06-11 09:25 - 00000295 _____ C:\Users\widen-finalis\Desktop\rkill.exe - Raccourci.lnk
2017-06-11 09:25 - 2017-06-11 09:25 - 00000000 ___HD C:\Windows\PIF
2017-06-11 09:17 - 2017-06-11 09:17 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PhotoDirector 8
2017-06-11 09:17 - 2017-06-11 09:17 - 00000000 ____D C:\Program Files\Common Files\Nikon
2017-06-11 09:05 - 2017-06-11 09:07 - 00001617 _____ C:\Users\widen-finalis\Downloads\téléchargement.htm
2017-06-11 08:50 - 2017-06-11 08:50 - 00000000 ____D C:\ProgramData\PDVD
2017-06-11 08:39 - 2017-06-11 10:24 - 00000000 ____D C:\ProgramData\SUPPORTDIR
2017-06-11 07:55 - 2017-06-11 07:55 - 00002215 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-06-11 07:54 - 2017-06-11 07:54 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Sun
2017-06-11 07:50 - 2017-06-12 06:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-06-11 07:50 - 2017-06-12 06:17 - 00095808 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2017-06-11 07:49 - 2017-06-11 07:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Folder Hider
2017-06-11 07:48 - 2017-06-11 07:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speccy
2017-06-11 07:48 - 2017-06-11 07:48 - 00000000 ____D C:\Program Files\Speccy
2017-06-11 07:46 - 2017-06-11 07:55 - 00000000 ____D C:\Program Files\Recuva
2017-06-11 07:46 - 2017-06-11 07:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2017-06-11 07:38 - 2017-06-11 07:38 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\iSkysoft
2017-06-11 07:38 - 2017-06-11 07:38 - 00000000 ____D C:\Program Files\Common Files\iSkysoft
2017-06-11 07:36 - 2017-06-12 07:20 - 00000000 ____D C:\ProgramData\Oracle
2017-06-11 07:36 - 2017-06-11 07:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iSkysoft
2017-06-11 07:34 - 2017-05-02 19:44 - 00030480 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\CLMirrorDriver.dll
2017-06-11 07:34 - 2017-05-02 19:44 - 00021264 _____ (CyberLink) C:\Windows\system32\Drivers\CLMirrorDriver.sys
2017-06-11 07:30 - 2015-02-27 14:38 - 00721263 _____ () C:\Windows\system32\ISCM64.dll
2017-06-11 07:30 - 2015-02-27 14:38 - 00214528 _____ () C:\Windows\system32\ISCM32.dll
2017-06-11 07:27 - 2017-06-11 07:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Defraggler
2017-06-11 07:27 - 2017-06-11 07:27 - 00000000 ____D C:\ProgramData\iSkysoft iMedia Converter Deluxe
2017-06-11 07:26 - 2017-06-11 07:58 - 00000000 ____D C:\Program Files\Defraggler
2017-06-11 07:26 - 2017-06-11 07:30 - 00000000 ____D C:\ProgramData\Google
2017-06-11 07:24 - 2017-06-11 07:24 - 00000000 ____D C:\ProgramData\iSkysoft
2017-06-11 07:24 - 2017-06-11 07:24 - 00000000 ____D C:\Program Files\iSkysoft
2017-06-11 07:23 - 2017-06-11 07:47 - 00000000 ____D C:\Program Files\Google
2017-06-11 07:21 - 2017-06-11 07:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-06-11 07:20 - 2017-06-11 07:21 - 00000000 ____D C:\Program Files\CCleaner
2017-06-11 07:11 - 2017-06-11 07:12 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RegSeeker
2017-06-11 07:11 - 2017-06-11 07:12 - 00000000 ____D C:\Program Files\RegSeeker
2017-06-11 07:05 - 2017-06-11 07:05 - 00002721 _____ C:\Users\widen-finalis\Documents\tidymymusic_full1686.exe - Raccourci.lnk
2017-06-11 07:04 - 2017-06-11 07:04 - 00002724 _____ C:\Users\widen-finalis\Documents\clés de license filmora pro edition (last inedit app paid + bonus tidymymusic)(1).txt - Raccourci.lnk
2017-06-11 07:04 - 2017-06-11 07:04 - 00002701 _____ C:\Users\widen-finalis\Documents\clés de license filmora pro edition (last inedit app paid + bonus tidymymusic).txt - Raccourci.lnk
2017-06-11 07:03 - 2017-06-11 07:03 - 00000374 _____ C:\Windows\Tasks\Ashampoo Privacy Protector Weekly Security Scan.job
2017-06-11 07:02 - 2017-06-11 07:20 - 00000000 ____D C:\Users\Public\Documents\iSkysoft
2017-06-11 06:57 - 2017-06-11 06:57 - 00023146 _____ C:\Users\widen-finalis\AppData\Roaming\DMGR_0M0D1V0A1O1O1V0M1T1C1Q1I1H0I0EtJ1V1S1F1F1J1L1G1NtF1R1F1H.txt
2017-06-11 06:49 - 2017-06-11 07:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Video Downloader
2017-06-11 06:49 - 2017-06-11 07:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Memory Optimizer
2017-06-11 06:48 - 2017-06-11 06:48 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_CLVirtualBus01_01009.Wdf
2017-06-11 06:48 - 2014-10-07 13:14 - 03087040 _____ (COMODO Security Solutions) C:\Windows\system32\Drivers\COSService.exe
2017-06-11 06:47 - 2017-06-11 06:47 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_vdbus_01009.Wdf
2017-06-11 06:44 - 2017-06-11 06:44 - 00000000 ____D C:\Program Files\Common Files\CyberLink
2017-06-11 06:43 - 2014-11-05 11:17 - 00079624 _____ (CyberLink) C:\Windows\system32\Drivers\CLVirtualBus01.sys
2017-06-11 06:40 - 2017-06-11 06:40 - 56134208 _____ (Oracle Corporation) C:\Users\widen-finalis\Downloads\JavaSetup.exe
2017-06-11 06:38 - 2017-06-11 07:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Folder Hider Pro
2017-06-11 06:37 - 2017-06-11 06:37 - 00000332 _____ C:\Windows\Tasks\Cyberlink Trigger Task.job
2017-06-11 06:35 - 2017-06-11 06:35 - 01349462 _____ ( ) C:\Users\widen-finalis\Downloads\JavaSetup_2114535057.exe
2017-06-11 06:34 - 2017-06-11 10:23 - 00000000 ____D C:\Program Files\NSIS Uninstall Information
2017-06-11 06:32 - 2017-06-11 06:32 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Zemana
2017-06-11 06:30 - 2017-06-11 10:22 - 00000000 ____D C:\ProgramData\install_backup
2017-06-11 06:25 - 2017-06-11 06:25 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\CyberLink
2017-06-11 06:24 - 2017-06-11 08:45 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\CyberLink
2017-06-11 06:19 - 2017-06-11 14:43 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Pluto TV
2017-06-11 06:18 - 2017-06-11 06:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2017-06-11 06:17 - 2017-06-12 14:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2017-06-11 06:17 - 2017-06-11 06:17 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Lavasoft
2017-06-11 06:17 - 2017-06-11 06:17 - 00000000 ____D C:\ProgramData\WinZip
2017-06-11 06:16 - 2017-06-11 14:43 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Lavasoft
2017-06-11 06:16 - 2017-06-11 10:23 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Media Suite
2017-06-11 06:16 - 2017-06-11 06:17 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\MetroSidebar
2017-06-11 06:14 - 2017-06-11 14:43 - 00000000 ____D C:\ProgramData\Lavasoft
2017-06-11 06:14 - 2017-06-11 06:56 - 00000000 ____D C:\Program Files\WiPS Multimedia 2.1
2017-06-11 06:14 - 2017-06-11 06:14 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RAR Password Cracker
2017-06-11 06:14 - 2017-06-11 06:14 - 00000000 ____D C:\Program Files\RAR Password Cracker
2017-06-11 06:13 - 2017-06-11 06:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SkinPack
2017-06-11 06:12 - 2017-06-11 06:17 - 00000000 ____D C:\ProgramData\CLSK
2017-06-11 06:12 - 2017-06-11 06:12 - 08350584 _____ C:\Users\widen-finalis\Downloads\FlashPlayerPro [1].exe
2017-06-11 06:12 - 2017-06-11 06:12 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WallpaperAnime
2017-06-11 06:12 - 2017-06-11 06:12 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\WallpaperAnime
2017-06-11 06:11 - 2017-06-11 06:12 - 01622176 _____ (Kofacab ) C:\Users\widen-finalis\Downloads\JavaPlugin.exe
2017-06-11 06:11 - 2017-06-11 06:11 - 31183872 _____ (Microsoft Corporation) C:\Windows\system32\imageres.dll
2017-06-11 06:10 - 2017-06-11 06:10 - 01622176 _____ (Kofacab ) C:\Users\widen-finalis\Downloads\FlashPlayerPro.exe
2017-06-11 06:09 - 2017-06-11 06:13 - 00000000 ____D C:\SkinPack
2017-06-11 06:07 - 2017-06-11 06:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IconPack
2017-06-11 06:06 - 2017-06-11 14:45 - 00000000 ____D C:\Program Files\3ULelRhQur
2017-06-11 06:05 - 2017-06-11 06:10 - 00000000 ____D C:\W7P_Backups
2017-06-11 06:04 - 2017-06-11 06:07 - 00000000 ____D C:\IconPack
2017-06-11 06:04 - 2017-06-11 06:04 - 00009522 _____ C:\Windows\Retafte.bmp
2017-06-11 06:04 - 2017-06-11 06:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elcomsoft Password Recovery
2017-06-11 06:04 - 2017-06-11 06:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Porn
2017-06-11 06:04 - 2017-06-11 06:04 - 00000000 ____D C:\ProgramData\Elcomsoft Password Recovery
2017-06-11 06:04 - 2017-06-11 06:04 - 00000000 ____D C:\Program Files\Elcomsoft Password Recovery
2017-06-11 06:04 - 2017-06-11 06:04 - 00000000 ____D C:\Program Files\Elcomsoft
2017-06-11 06:04 - 2017-06-11 06:04 - 00000000 ____D C:\Program Files\Common Files\Wise Installation Wizard
2017-06-11 06:03 - 2017-06-11 06:04 - 00000000 ____D C:\Program Files\tuEagles
2017-06-11 06:03 - 2017-06-11 06:03 - 00123768 _____ C:\Windows\NFCHS.exe
2017-06-11 06:01 - 2017-06-11 06:01 - 00001089 _____ C:\ProgramData\Microsoft\Windows\Start Menu\All-In-One Protector 7.0.0.lnk
2017-06-11 06:01 - 2017-06-11 06:01 - 00000000 ____D C:\Users\widen-finalis\Documents\All-In-One Protector
2017-06-11 06:01 - 2017-06-11 06:01 - 00000000 ____D C:\ProgramData\Mirage
2017-06-11 06:01 - 2017-06-11 06:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\All-In-One Protector 7
2017-06-11 06:01 - 2017-06-11 06:01 - 00000000 ____D C:\Program Files\All-In-One Protector 7
2017-06-11 05:54 - 2017-06-11 05:54 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Mirage Computer Systems
2017-06-11 05:15 - 2017-06-11 05:15 - 00001452 _____ C:\Users\widen-finalis\Desktop\UsbFix.lnk
2017-06-11 05:15 - 2017-06-11 05:15 - 00000000 ____D C:\UsbFix
2017-06-10 22:45 - 2017-06-10 22:45 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Viv
2017-06-10 22:45 - 2017-06-10 22:45 - 00000000 ____D C:\ProgramData\LopeSoft
2017-06-10 22:42 - 2017-06-10 22:42 - 00000000 ____D C:\Windows\ERUNT
2017-06-10 22:21 - 2017-06-10 22:42 - 00001281 _____ C:\DelFix.txt
2017-06-10 22:07 - 2017-06-10 22:07 - 00000000 ____D C:\ProgramData\explauncher
2017-06-10 22:05 - 2017-06-10 22:05 - 00026168 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtproscsibus.sys
2017-06-10 22:05 - 2017-06-10 22:05 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Easy File Locker
2017-06-10 22:05 - 2017-06-10 22:05 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\DAEMON Tools Pro
2017-06-10 22:05 - 2017-06-10 22:05 - 00000000 ____D C:\Users\Public\Documents\EFL
2017-06-10 22:05 - 2017-06-10 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DAEMON Tools Pro
2017-06-10 22:05 - 2017-06-10 22:05 - 00000000 ____D C:\Program Files\Easy File Locker
2017-06-10 22:05 - 2017-06-10 22:05 - 00000000 ____D C:\Program Files\DAEMON Tools Pro
2017-06-10 22:04 - 2017-06-10 22:09 - 00000254 ____H C:\Windows\Tasks\MORE_ChatAppDailyScheduleTask.job
2017-06-10 22:04 - 2017-06-10 22:04 - 00002889 _____ C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Install Clean Up.lnk
2017-06-10 22:04 - 2017-06-10 22:04 - 00000246 ____H C:\Windows\Tasks\MORE_ChatAppScheduleTask.job
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Remo Suite
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\muCommander
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Unreal Commander
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LopeSoft
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\ProgramData\DAEMON Tools Pro
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Program Files\Windows Installer Clean Up
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Program Files\muCommander
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Program Files\MSECACHE
2017-06-10 22:04 - 2017-06-10 22:04 - 00000000 ____D C:\Program Files\LopeSoft
2017-06-10 22:03 - 2017-06-10 22:03 - 00000254 ____H C:\Windows\Tasks\MORE_SIE1.job
2017-06-10 22:03 - 2017-06-10 22:03 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Remo MORE
2017-06-10 22:03 - 2017-06-10 22:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo MORE
2017-06-10 22:03 - 2017-06-10 22:03 - 00000000 ____D C:\Program Files\Remo MORE
2017-06-10 22:03 - 2015-09-23 15:18 - 00049424 _____ C:\Windows\system32\Drivers\rsblk.sys
2017-06-10 22:02 - 2017-06-10 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Outlook [PST]
2017-06-10 22:02 - 2017-06-10 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover for Android
2017-06-10 22:02 - 2017-06-10 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Drive Wipe
2017-06-10 22:02 - 2017-06-10 22:02 - 00000000 ____D C:\Program Files\Remo Repair Outlook [PST]
2017-06-10 22:02 - 2017-06-10 22:02 - 00000000 ____D C:\Program Files\Remo Recover for Android 2.0
2017-06-10 22:02 - 2017-06-10 22:02 - 00000000 ____D C:\Program Files\Remo Drive Wipe
2017-06-10 22:02 - 2015-10-28 17:27 - 07963240 _____ (Advanced Messaging Systems LLC) C:\Windows\system32\rsror32.dll
2017-06-10 22:02 - 2015-10-28 17:27 - 02451048 _____ (Advanced Messaging Systems LLC) C:\Windows\system32\rsrorx32.dll
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair ZIP
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Word
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair Registry
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Privacy Cleaner
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Outlook Backup & Migrate
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo File Eraser 2.0
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\Program Files\Remo Repair ZIP 2.0
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\Program Files\Remo Repair Word 2.0
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\Program Files\Remo Privacy Cleaner
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\Program Files\Remo Outlook Backup & Migrate
2017-06-10 22:01 - 2017-06-10 22:01 - 00000000 ____D C:\Program Files\Remo File Eraser 2.0
2017-06-10 22:00 - 2017-06-10 22:03 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Remo
2017-06-10 22:00 - 2017-06-10 22:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover Outlook Express
2017-06-10 22:00 - 2017-06-10 22:02 - 00000000 ____D C:\Program Files\Remo Recover Outlook Express
2017-06-10 22:00 - 2017-06-10 22:01 - 00000000 ____D C:\Program Files\Remo Repair Registry
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair RAR
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair PowerPoint
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Repair MOV
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Remo Recover FREE Edition
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\Program Files\Remo Repair RAR 2.0
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\Program Files\Remo Repair PowerPoint 2.0
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\Program Files\Remo Repair MOV 2.0
2017-06-10 22:00 - 2017-06-10 22:00 - 00000000 ____D C:\Program Files\Remo Recover FREE Edition
2017-06-10 22:00 - 2009-02-12 15:11 - 00022312 _____ (EldoS Corporation) C:\Windows\system32\Drivers\rsdrv.sys
2017-06-10 21:59 - 2017-06-10 21:59 - 00000000 ____D C:\Users\widen-finalis\Documents\Speed Install
2017-06-10 21:59 - 2017-06-10 21:59 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\iGetting Audio
2017-06-10 21:59 - 2017-06-10 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VivPDF Editor
2017-06-10 21:59 - 2017-06-10 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Speed Install
2017-06-10 21:59 - 2017-06-10 21:59 - 00000000 ____D C:\Program Files\iGetting Audio
2017-06-10 21:58 - 2017-06-10 21:58 - 00000065 _____ C:\Users\Public\Documents\pre_fileassoc.tmp
2017-06-10 21:58 - 2017-06-10 21:58 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\trolCommander
2017-06-10 21:58 - 2017-06-10 21:58 - 00000000 ____D C:\ProgramData\Caphyon
2017-06-10 21:58 - 2017-06-10 21:58 - 00000000 ____D C:\Program Files\VivPDF Editor
2017-06-10 21:58 - 2017-06-10 21:58 - 00000000 ____D C:\Program Files\trolCommander
2017-06-10 21:57 - 2017-06-10 21:58 - 00000000 ____D C:\ProgramData\regid.2003-04.com.caphyon
2017-06-10 21:57 - 2017-06-10 21:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Installer 13.8.1
2017-06-10 21:57 - 2017-06-10 21:57 - 00000000 ____D C:\Program Files\Caphyon
2017-06-10 17:59 - 2017-06-10 19:00 - 00115651 _____ C:\QuickScript.txt
2017-06-10 16:37 - 2017-06-10 16:39 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tracker Software
2017-06-10 16:37 - 2017-05-20 10:30 - 00125632 _____ (Tracker Software Products (Canada) Ltd.) C:\Windows\system32\pxcpm5L.dll
2017-06-10 16:36 - 2017-06-10 16:39 - 00000638 _____ C:\Windows\Tasks\TrackerAutoUpdate.job
2017-06-10 16:35 - 2017-06-10 16:39 - 00000000 ____D C:\Program Files\Tracker Software
2017-06-10 16:35 - 2017-06-10 16:35 - 00000000 ____D C:\ProgramData\Tracker Software
2017-06-10 16:35 - 2017-06-10 16:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF-XChange PDF Viewer
2017-06-10 16:33 - 2017-06-10 16:33 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\JAM Software
2017-06-10 16:33 - 2017-06-10 16:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TreeSize Free
2017-06-10 16:33 - 2017-06-10 16:33 - 00000000 ____D C:\Program Files\JAM Software
2017-06-10 16:20 - 2017-06-10 16:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 8 - Codec Pack
2017-06-10 16:20 - 2017-06-10 16:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 7 - Codec Pack
2017-06-10 16:18 - 2017-06-10 16:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows 10 - Codec Pack
2017-06-10 16:18 - 2017-06-10 16:19 - 00000000 ____D C:\ProgramData\Hotspot Shield
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\Program Files\Haali
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\Program Files\FFMPEG Core Files
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\Program Files\ffdshow
2017-06-10 16:16 - 2017-06-10 16:16 - 00000000 ____D C:\Program Files\AC3Filter
2017-06-10 16:15 - 2017-06-11 06:05 - 00000000 ____D C:\Program Files\3DYD Youtube Source
2017-06-10 16:15 - 2017-06-10 16:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2017-06-10 16:15 - 2017-06-10 16:15 - 00000000 ____D C:\Program Files\MadVR
2017-06-10 16:15 - 2017-06-10 16:15 - 00000000 ____D C:\Program Files\DirectVobSub
2017-06-10 16:15 - 2017-06-10 16:15 - 00000000 ____D C:\Program Files\DCoder Image Source
2017-06-10 16:15 - 2017-06-10 16:15 - 00000000 ____D C:\Program Files\7-Zip
2017-06-10 16:12 - 2017-06-10 16:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2017-06-10 16:12 - 2017-06-10 16:14 - 00000000 ____D C:\Program Files\LAV Filters
2017-06-10 16:12 - 2017-06-10 16:13 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Fast Spell Checker
2017-06-10 16:12 - 2017-06-10 16:12 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Fast Spell Checker
2017-06-10 16:12 - 2017-06-10 16:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zoom Player
2017-06-10 16:12 - 2017-06-10 16:12 - 00000000 ____D C:\Program Files\Fast Spell Checker
2017-06-10 16:12 - 2017-06-10 16:12 - 00000000 ____D C:\Program Files\Bass Audio Decoder
2017-06-10 16:11 - 2017-06-10 16:12 - 00000000 ____D C:\ProgramData\Zoom Player
2017-06-10 16:11 - 2017-06-10 16:12 - 00000000 ____D C:\Program Files\Zoom Player
2017-06-10 07:13 - 2017-06-10 07:13 - 00000000 ____D C:\ProgramData\FileOpen
2017-06-09 21:01 - 2017-06-09 21:01 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\La_Cle_USB_du_Photographe_Nomade_Version_Allegee_2.0.1
2017-06-09 20:37 - 2017-06-10 22:14 - 00000000 ____D C:\Users\widen-finalis\Desktop\cadeaux jes-jes m-moulu st-j conr 17_3 & lfsu100%sf pt Z
2017-06-09 20:09 - 2017-06-09 20:09 - 16486254 _____ C:\Users\widen-finalis\Downloads\SkinPack Windows Phone10.sfx.exe
2017-06-09 15:13 - 2017-06-09 15:13 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\MPC-HC
2017-06-09 15:12 - 2017-06-09 15:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC
2017-06-09 15:12 - 2017-06-09 15:12 - 00000000 ____D C:\Program Files\MPC-HC
2017-06-09 15:11 - 2017-06-09 15:12 - 13230856 _____ (MPC-HC Team ) C:\Users\widen-finalis\Downloads\MPC-HC.1.7.11.x86.exe
2017-06-09 15:02 - 2017-06-09 15:02 - 00000000 ____D C:\Users\widen-finalis\Documents\FlashIntegro
2017-06-09 15:02 - 2017-06-09 15:02 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\FlashIntegro
2017-06-09 15:00 - 2017-06-09 15:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlashIntegro
2017-06-09 14:59 - 2017-06-09 15:00 - 00000000 ____D C:\Program Files\FlashIntegro
2017-06-09 14:59 - 2017-06-09 14:59 - 00000000 ____D C:\Program Files\Common Files\FlashIntegro
2017-06-09 14:59 - 2017-05-12 11:38 - 00071480 _____ (Flash-Integro LLC) C:\Windows\system32\mslvddsfilter3.ax
2017-06-09 14:59 - 2005-08-01 18:43 - 00245760 _____ () C:\Windows\system32\lame.ax
2017-06-09 14:59 - 2004-12-10 09:03 - 00438272 _____ (On2.com) C:\Windows\system32\vp6vfw.dll
2017-06-09 14:59 - 2004-09-06 15:06 - 00053248 _____ C:\Windows\system32\xvid.ax
2017-06-09 14:59 - 2004-02-04 20:11 - 00081920 _____ (fccHandler) C:\Windows\system32\AC3ACM.acm
2017-06-09 14:59 - 2003-05-22 11:26 - 00638976 _____ (DivXNetworks, Inc.) C:\Windows\system32\divx.dll
2017-06-09 14:59 - 2003-05-22 11:26 - 00221215 _____ (DivXNetworks, Inc.) C:\Windows\system32\divxdec.ax
2017-06-09 14:59 - 2003-05-21 22:50 - 00261632 _____ (MainConcept) C:\Windows\system32\mcdvd_32.dll
2017-06-09 14:59 - 2003-05-21 22:50 - 00156910 _____ C:\Windows\WMSysPr8.prx
2017-06-09 14:59 - 2003-05-21 22:50 - 00082944 _____ (Voxware, Inc.) C:\Windows\system32\vct3216.acm
2017-06-09 14:59 - 2003-05-21 22:50 - 00038912 _____ (NCT Company) C:\Windows\system32\alf2cd.acm
2017-06-09 14:59 - 2003-05-21 22:50 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\msxml3a.dll
2017-06-09 14:59 - 2003-03-25 04:49 - 00098304 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\Windows\system32\L3CODECX.AX
2017-06-09 14:59 - 2002-08-19 23:41 - 00413760 _____ (Microsoft Corporation) C:\Windows\system32\mpg4c32.dll
2017-06-09 14:59 - 2000-03-14 19:55 - 00013239 _____ (SHARP Corporation) C:\Windows\system32\Scg726.acm
2017-06-09 14:40 - 2017-06-09 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eassos System Restore
2017-06-09 14:40 - 2017-06-09 14:40 - 00000000 ____D C:\Program Files\Eassos System Restore
2017-06-09 14:39 - 2017-06-09 14:39 - 00000000 ____D C:\ProgramData\SharewareOnSale Notifier
2017-06-09 14:30 - 2017-06-12 06:25 - 00001134 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2017-06-09 14:30 - 2017-06-12 06:25 - 00001128 _____ C:\Users\Public\Desktop\WinRAR.lnk
2017-06-09 14:30 - 2017-06-12 06:25 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-09 14:30 - 2017-06-12 06:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-06-09 14:30 - 2017-06-12 06:25 - 00000000 ____D C:\Program Files\WinRAR
2017-06-09 14:30 - 2017-06-09 14:30 - 02063064 _____ C:\Users\widen-finalis\Downloads\wrar540fr.exe
2017-06-09 14:30 - 2017-06-09 14:30 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\WinRAR
2017-06-09 08:06 - 2017-06-09 08:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Laplink PCmover Professional
2017-06-09 08:06 - 2017-06-09 08:06 - 00000000 ____D C:\Program Files\Laplink
2017-06-09 07:58 - 2017-06-09 07:58 - 00000000 ____D C:\_Backup.RC
2017-06-09 07:58 - 2016-06-13 22:54 - 146379680 _____ (Laplink Software, Inc. ) C:\Users\widen-finalis\Documents\PCmover_EN.exe
2017-06-09 07:57 - 2017-06-10 15:12 - 00000000 ____D C:\ProgramData\Avanquest
2017-06-09 07:57 - 2017-06-09 07:57 - 00002094 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fix-It Utilities Professional.lnk
2017-06-09 07:57 - 2017-06-09 07:57 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Avanquest
2017-06-09 07:57 - 2017-06-09 07:57 - 00000000 ____D C:\Users\Public\Documents\Avanquest Software
2017-06-09 07:57 - 2017-06-09 07:57 - 00000000 ____D C:\Program Files\Avanquest
2017-06-09 07:57 - 2015-07-20 20:17 - 00018488 ____N C:\Windows\system32\Drivers\AQFileRestore.sys
2017-06-09 07:57 - 2013-10-24 14:03 - 00024680 _____ (UVNC BVBA) C:\Windows\system32\mv2.dll
2017-06-09 07:57 - 2013-10-24 14:03 - 00012904 _____ (UVNC BVBA) C:\Windows\system32\Drivers\mv2.sys
2017-06-09 07:57 - 2012-02-09 12:58 - 00035000 _____ C:\Windows\system32\mxntdfg.exe
2017-06-09 07:48 - 2017-06-09 07:58 - 00000000 ____D C:\_Backup
2017-06-08 23:45 - 2017-04-01 06:53 - 00263352 _____ (COMODO) C:\Windows\system32\cmdkbdcss32.dll
2017-06-08 23:45 - 2017-04-01 06:52 - 00338560 _____ (COMODO) C:\Windows\system32\cssguard32.dll
2017-06-08 23:45 - 2017-04-01 06:52 - 00095976 _____ (COMODO) C:\Windows\system32\Drivers\cmdcss.sys
2017-06-08 23:45 - 2017-04-01 06:52 - 00041376 _____ (COMODO) C:\Windows\system32\csscsr32.dll
2017-06-08 23:26 - 2017-06-08 23:26 - 00000000 ____D C:\VTRoot
2017-06-08 23:24 - 2017-06-08 23:39 - 00003060 _____ C:\Windows\system32\Drivers\fvstore.dat
2017-06-08 11:10 - 2017-06-08 08:33 - 00006508 _____ C:\Users\widen-finalis\Desktop\QuickScript_08_06_2017_11_10_30.txt
2017-06-08 08:08 - 2017-06-08 08:08 - 00000400 _____ C:\Windows\Tasks\RunAsStdUser Task.job
2017-06-08 08:07 - 2017-06-08 08:08 - 00000000 ____D C:\ProgramData\ProductData
2017-06-08 08:07 - 2017-06-08 08:07 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
2017-06-08 08:07 - 2017-06-08 08:07 - 00000000 ____D C:\ProgramData\BDLogging
2017-06-08 08:07 - 2016-11-02 19:11 - 00458656 _____ (BitDefender S.R.L.) C:\Windows\system32\Drivers\trufos.sys
2017-06-08 08:04 - 2017-06-12 14:41 - 00000000 ____D C:\Users\widen-finalis\AppData\LocalLow\IObit
2017-06-08 08:04 - 2017-06-08 08:04 - 00000000 ____D C:\ProgramData\{D76294E6-03B8-4971-AF2E-3F846161A690}
2017-06-08 08:04 - 2017-06-08 08:04 - 00000000 ____D C:\ProgramData\{ACBCD40A-42A8-4FF9-BD42-ABCD14998CBA}
2017-06-08 08:02 - 2017-06-08 08:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare Ultimate
2017-06-08 07:56 - 2017-06-07 20:04 - 85754840 _____ (IObit ) C:\Users\widen-finalis\Documents\advanced-systemcare-ultimate_10-1-0-91_fr_432775.exe
2017-06-08 07:52 - 2017-06-08 07:52 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Icecream
2017-06-08 07:52 - 2017-06-08 07:52 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\CrashRpt
2017-06-08 07:52 - 2017-06-08 07:52 - 00000000 ____D C:\Users\widen-finalis\.Icecream Screen Recorder
2017-06-08 07:47 - 2017-06-08 07:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinMend
2017-06-08 07:46 - 2017-06-08 07:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Unlocker
2017-06-08 07:46 - 2017-06-08 07:46 - 00000000 ____D C:\Program Files\WinMend
2017-06-08 07:41 - 2017-06-11 09:30 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\TeraCopy
2017-06-08 07:41 - 2017-06-08 07:41 - 00000000 ___HD C:\Users\widen-finalis\AppData\Roaming\Obsidium
2017-06-08 07:41 - 2017-06-08 07:41 - 00000000 ___HD C:\Users\widen-finalis\.obs32
2017-06-08 07:41 - 2017-06-08 07:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2017-06-08 07:39 - 2017-06-12 06:09 - 00001841 _____ C:\ProgramData\Microsoft\Windows\Start Menu\TeraCopy.lnk
2017-06-08 07:39 - 2017-06-08 07:39 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Xilisoft
2017-06-08 07:36 - 2017-06-10 22:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Runtime Software
2017-06-08 07:36 - 2017-06-10 22:14 - 00000000 ____D C:\Program Files\Runtime Software
2017-06-08 07:35 - 2017-06-08 07:35 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PerigeeCopy
2017-06-08 07:35 - 2017-06-08 07:35 - 00000000 ____D C:\Program Files\PerigeeCopy
2017-06-08 07:34 - 2017-06-08 07:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MiniCopier
2017-06-08 07:34 - 2017-06-08 07:34 - 00000000 ____D C:\Program Files\MiniCopier
2017-06-08 07:33 - 2017-06-08 07:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xilisoft
2017-06-08 07:31 - 2017-06-08 07:32 - 00000000 ____D C:\ProgramData\Xilisoft
2017-06-08 07:31 - 2017-06-08 07:32 - 00000000 ____D C:\Program Files\Xilisoft
2017-06-08 07:31 - 2017-06-08 07:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Fast File Copy by Daanav.com
2017-06-08 07:31 - 2017-06-08 07:31 - 00000000 ____D C:\Program Files\Fast File Copy by Daanav.com
2017-06-08 07:23 - 2017-06-08 07:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\free-video-splitter
2017-06-08 07:23 - 2017-06-08 07:23 - 00000000 ____D C:\Program Files\free-video-splitter
2017-06-08 07:21 - 2017-06-08 07:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GiliSoft
2017-06-08 07:21 - 2017-06-08 07:22 - 00000000 ____D C:\Program Files\GiliSoft
2017-06-08 07:18 - 2017-06-08 07:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xiph.Org
2017-06-08 07:18 - 2017-06-08 07:18 - 00000000 ____D C:\Program Files\Common Files\WebM Project
2017-06-08 07:17 - 2017-06-08 07:17 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Icecream Screen Recorder
2017-06-08 07:17 - 2017-06-08 07:17 - 00000000 ____D C:\Program Files\Xiph.Org
2017-06-08 07:16 - 2017-06-08 07:21 - 00000000 ____D C:\Users\Public\Foxit Software
2017-06-08 07:16 - 2017-06-08 07:17 - 00000000 ____D C:\Program Files\Icecream Screen Recorder
2017-06-08 07:14 - 2017-06-08 07:14 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Foxit AgentInformation
2017-06-08 07:14 - 2017-06-08 07:14 - 00000000 ____D C:\ProgramData\Foxit ContentPlatform
2017-06-08 07:13 - 2017-06-08 07:16 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Foxit Software
2017-06-08 07:13 - 2017-06-08 07:13 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Debugmode
2017-06-08 07:13 - 2017-06-08 07:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2017-06-08 07:13 - 2017-06-08 07:13 - 00000000 ____D C:\Program Files\DebugMode
2017-06-08 07:10 - 2017-06-08 07:26 - 00000000 ____D C:\Program Files\Foxit Software
2017-06-08 07:08 - 2017-06-08 07:08 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Black Bird Cleaner Software
2017-06-08 07:08 - 2017-06-08 07:08 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Adobe_Systems_Incorporate
2017-06-08 07:07 - 2017-06-08 07:09 - 00000000 ____D C:\Users\widen-finalis\Documents\My Digital Editions
2017-06-08 07:07 - 2017-06-08 07:07 - 00002152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Digital Editions 4.5.lnk
2017-06-08 07:07 - 2017-06-08 07:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anti-Locky
2017-06-08 07:07 - 2017-06-08 07:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe
2017-06-08 07:07 - 2009-08-24 22:08 - 00028160 _____ (mst software GmbH, Germany) C:\Windows\system32\DfSdkBt.exe
2017-06-08 07:06 - 2017-06-12 06:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Anti-Ransomware
2017-06-08 07:06 - 2017-06-08 07:06 - 00000278 _____ C:\Windows\Tasks\GridinSoft Anti-Ransomware.job
2017-06-08 07:06 - 2017-03-02 19:16 - 00033552 _____ C:\Windows\system32\Drivers\gsinspect.sys
2017-06-08 07:06 - 2016-10-13 18:05 - 00017480 _____ C:\Windows\system32\Drivers\gsars.sys
2017-06-08 07:05 - 2017-06-12 06:44 - 00000000 ____D C:\Program Files\GridinSoft Anti-Ransomware
2017-06-08 07:05 - 2017-06-08 07:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BDAntiRansomware
2017-06-08 07:05 - 2017-06-08 07:05 - 00000000 ____D C:\Program Files\Bitdefender
2017-06-08 07:04 - 2017-06-08 07:04 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Black Bird Image Optimizer
2017-06-08 07:04 - 2017-06-08 07:04 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Black Bird Cleaner
2017-06-08 07:04 - 2017-06-08 07:04 - 00000000 ____D C:\Program Files\Black Bird Image Optimizer
2017-06-08 07:04 - 2017-06-08 07:04 - 00000000 ____D C:\Program Files\Black Bird Cleaner
2017-06-08 07:03 - 2017-06-08 07:04 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Black Bird System Info
2017-06-08 07:03 - 2017-06-08 07:04 - 00000000 ____D C:\Program Files\Black Bird System Info
2017-06-08 07:03 - 2017-06-08 07:03 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CHM Editor
2017-06-08 07:03 - 2017-06-08 07:03 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DIY DataRecovery CHK-Mate
2017-06-08 07:03 - 2017-06-08 07:03 - 00000000 ____D C:\Program Files\Gridinsoft
2017-06-08 07:03 - 2017-06-08 07:03 - 00000000 ____D C:\Program Files\DIY DataRecovery CHK-Mate
2017-06-08 06:58 - 2017-06-11 14:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Easy
2017-06-08 06:58 - 2017-06-08 06:58 - 00000422 _____ C:\Windows\Tasks\Driver Easy Scheduled Scan.job
2017-06-08 06:57 - 2017-06-08 06:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ePUBee
2017-06-08 06:57 - 2017-06-08 06:57 - 00000000 ____D C:\Program Files\ePUBee
2017-06-08 06:54 - 2017-06-08 06:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS EverySync 3.0
2017-06-08 06:52 - 2017-06-08 06:52 - 00000000 ____D C:\ProgramData\Teorex
2017-06-08 06:51 - 2017-06-08 06:51 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Freeraser
2017-06-08 06:51 - 2017-06-08 06:51 - 00000000 ____D C:\Program Files\Codyssey
2017-06-08 06:49 - 2017-06-08 06:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GoodSync
2017-06-08 06:48 - 2017-06-08 06:49 - 00000000 ____D C:\ProgramData\GoodSync
2017-06-08 06:45 - 2017-06-08 06:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GridinSoft Anti-Malware
2017-06-08 06:44 - 2017-06-08 06:48 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\GoodSync
2017-06-08 06:43 - 2017-06-12 05:46 - 00001200 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malware Hunter.lnk
2017-06-08 06:43 - 2017-06-12 05:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glarysoft
2017-06-08 06:42 - 2017-06-12 05:46 - 00000258 _____ C:\Windows\Tasks\GMHSkipUAC.job
2017-06-08 06:42 - 2017-06-08 06:42 - 00017472 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUSBootStartup.sys
2017-06-08 06:42 - 2017-06-08 06:42 - 00000000 ____D C:\ProgramData\GridinSoft
2017-06-08 06:42 - 2017-06-08 06:42 - 00000000 ____D C:\ProgramData\Glarysoft
2017-06-08 06:42 - 2017-06-08 06:42 - 00000000 ____D C:\Program Files\Siber Systems
2017-06-08 06:41 - 2017-06-12 05:46 - 00000000 ____D C:\Program Files\Glarysoft
2017-06-08 06:41 - 2017-06-08 06:46 - 00000000 ____D C:\Program Files\GridinSoft Anti-Malware
2017-06-08 06:41 - 2017-06-08 06:41 - 00001115 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FreeFileSync.lnk
2017-06-08 06:41 - 2017-06-08 06:41 - 00001085 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RealTimeSync.lnk
2017-06-08 06:39 - 2017-06-08 06:42 - 00000000 ____D C:\Program Files\FreeFileSync
2017-06-08 06:39 - 2017-06-08 06:40 - 00001568 _____ C:\GUDownLoaddebug.txt
2017-06-08 06:38 - 2017-06-08 06:38 - 00017472 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUBootStartup.sys
2017-06-08 06:38 - 2017-06-08 06:38 - 00001054 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2017-06-08 06:38 - 2017-06-08 06:38 - 00000336 _____ C:\Windows\Tasks\GlaryInitialize 5.job
2017-06-08 06:38 - 2017-06-08 06:38 - 00000238 _____ C:\Windows\Tasks\GU5SkipUAC.job
2017-06-08 06:38 - 2017-06-08 06:38 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2017-06-08 06:37 - 2017-06-12 05:46 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\GlarySoft
2017-06-08 06:37 - 2017-06-08 06:37 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\DiskDefrag
2017-06-08 06:34 - 2017-06-08 06:51 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Kotobee Author
2017-06-08 06:34 - 2017-06-08 06:41 - 00000000 ____D C:\Program Files\Glary Utilities 5
2017-06-08 06:33 - 2017-06-08 06:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Author
2017-06-08 06:32 - 2017-06-08 06:34 - 00000000 ____D C:\Program Files\Kotobee Author
2017-06-08 06:31 - 2017-06-08 06:31 - 00000000 ____D C:\ProgramData\Sun
2017-06-08 06:31 - 2017-06-08 06:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Publisher
2017-06-08 06:30 - 2017-06-08 06:31 - 00000000 ____D C:\Program Files\Kotobee Publisher
2017-06-08 06:30 - 2017-06-08 06:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kotobee Reader
2017-06-08 06:30 - 2017-06-08 06:29 - 00411368 _____ (Sun Microsystems, Inc.) C:\Windows\system32\deploytk.dll
2017-06-08 06:29 - 2017-06-12 06:47 - 00000000 ____D C:\Program Files\Java
2017-06-08 06:29 - 2017-06-08 06:30 - 00000000 ____D C:\Program Files\Kotobee Reader
2017-06-08 06:28 - 2017-06-08 06:28 - 00000000 ____D C:\Users\widen-finalis\AppData\LocalLow\Sun
2017-06-08 06:27 - 2017-06-11 06:05 - 00000000 ____D C:\MARMITON
2017-06-08 06:26 - 2017-06-08 06:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiCommander
2017-06-08 06:26 - 2017-06-08 06:26 - 00000000 ____D C:\Program Files\MultiCommander
2017-06-08 06:25 - 2017-06-08 06:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Random Password Generator
2017-06-08 06:24 - 2017-06-08 06:24 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\BlackParrot
2017-06-08 06:24 - 2017-06-08 06:24 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ScanPapyrus
2017-06-08 06:24 - 2017-06-08 06:24 - 00000000 ____D C:\Program Files\ScanPapyrus
2017-06-08 06:23 - 2017-06-08 06:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Protected Folder
2017-06-08 06:21 - 2017-06-11 13:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-06-08 06:21 - 2017-06-11 13:19 - 00000000 ____D C:\Program Files\RogueKiller
2017-06-08 06:20 - 2017-06-11 12:58 - 00000000 ____D C:\ProgramData\RogueKiller
2017-06-08 06:20 - 2017-06-08 06:20 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UCheck
2017-06-08 06:20 - 2017-06-08 06:20 - 00000000 ____D C:\Program Files\UCheck
2017-06-08 06:15 - 2017-06-08 06:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sanwhole
2017-06-08 06:15 - 2017-06-08 06:15 - 00000000 ____D C:\Program Files\Sanwhole
2017-06-08 06:12 - 2017-06-08 06:12 - 00163093 _____ C:\Windows\Animated Wallpaper Maker Uninstaller.exe
2017-06-08 06:12 - 2017-06-08 06:12 - 00049165 _____ C:\Windows\system32\wuwuninst.exe
2017-06-08 06:12 - 2017-06-08 06:12 - 00000000 ____D C:\Users\widen-finalis\Documents\Animated Wallpaper Examples
2017-06-08 06:12 - 2017-06-08 06:12 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Animated Wallpaper Maker
2017-06-08 06:12 - 2017-06-08 06:12 - 00000000 ____D C:\Program Files\Animated Wallpaper Maker
2017-06-08 06:11 - 2017-06-08 06:11 - 00000266 _____ C:\Windows\Tasks\Process Lasso Core Engine Only.job
2017-06-08 06:11 - 2017-06-08 06:11 - 00000260 _____ C:\Windows\Tasks\Process Lasso Management Console (GUI).job
2017-06-08 06:11 - 2017-06-08 06:11 - 00000000 ____D C:\ProgramData\ProcessLasso
2017-06-08 06:11 - 2017-06-08 06:11 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Process Lasso
2017-06-08 06:10 - 2017-06-10 22:53 - 00000000 ____D C:\Program Files\Start Menu X
2017-06-08 06:10 - 2017-06-10 21:59 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Start Menu X
2017-06-08 06:10 - 2017-06-08 06:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico
2017-06-08 06:10 - 2017-06-08 06:52 - 00000000 ____D C:\Program Files\Folderico
2017-06-08 06:10 - 2017-06-08 06:11 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\ProcessLasso
2017-06-08 06:10 - 2017-06-08 06:11 - 00000000 ____D C:\Program Files\Process Lasso
2017-06-08 06:10 - 2017-06-08 06:10 - 00000000 ____D C:\ProgramData\Folderico
2017-06-08 06:09 - 2017-06-08 06:09 - 00000000 ____D C:\Windows\system32\PolicyDefinitions
2017-06-08 06:09 - 2017-06-08 06:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot Anti-Beacon
2017-06-08 06:09 - 2017-06-08 06:09 - 00000000 ____D C:\Program Files\Spybot Anti-Beacon
2017-06-08 06:08 - 2017-06-10 21:59 - 00000000 ____D C:\ProgramData\StartMenuX
2017-06-08 06:08 - 2017-06-08 06:10 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\StartMenuX
2017-06-08 06:07 - 2017-06-08 06:08 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\2BrightSparks
2017-06-08 06:07 - 2017-06-08 06:07 - 00000000 ____D C:\ProgramData\2BrightSparks
2017-06-08 06:07 - 2013-10-04 12:54 - 00692224 _____ C:\Windows\system32\SyncBackPro.dll
2017-06-08 06:07 - 2009-01-12 08:15 - 00071096 _____ C:\Windows\system32\NMSAccessU.exe
2017-06-08 06:06 - 2017-06-08 06:08 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\2BrightSparks
2017-06-08 06:06 - 2017-06-08 06:07 - 00000000 ____D C:\Program Files\2BrightSparks
2017-06-08 06:06 - 2017-06-08 06:06 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trojan Remover
2017-06-08 06:05 - 2017-06-08 06:06 - 00000000 ____D C:\Program Files\Trojan Remover
2017-06-08 06:05 - 2017-06-08 06:05 - 00000000 ____D C:\ProgramData\Simply Super Software
2017-06-08 06:00 - 2017-06-08 07:09 - 00000193 _____ C:\Windows\WORDPAD.INI
2017-06-08 05:59 - 2017-06-10 21:38 - 00000000 ____D C:\Windows\system32\Codecs
2017-06-08 05:57 - 2017-06-08 05:58 - 00000000 ____D C:\Program Files\Trojan Killer
2017-06-08 05:56 - 2017-06-08 07:07 - 00000000 ____D C:\Program Files\AxBx
2017-06-08 05:56 - 2017-06-08 05:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\USB Key Vaccine 2016
2017-06-08 05:52 - 2017-06-08 05:54 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\SIB
2017-06-08 05:50 - 2017-06-11 06:05 - 00000000 ____D C:\Program Files\Windows Boot Genius
2017-06-08 05:50 - 2017-06-08 05:55 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows Boot Genius
2017-06-08 05:49 - 2017-06-08 05:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wise Care 365
2017-06-08 05:48 - 2017-06-11 07:49 - 00000000 ____D C:\Program Files\Wise
2017-06-08 05:48 - 2017-06-08 05:48 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Digiarty
2017-06-08 05:48 - 2017-06-08 05:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Digiarty
2017-06-08 05:47 - 2017-06-08 05:47 - 00000000 ____D C:\Program Files\Digiarty
2017-06-08 05:44 - 2017-06-08 07:41 - 00000000 ____D C:\Program Files\TechSmith
2017-06-08 05:44 - 2017-06-08 05:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Morae
2017-06-08 05:42 - 2017-06-08 05:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Silent Install Builder 5
2017-06-08 05:42 - 2017-06-08 05:42 - 00000000 ____D C:\Program Files\Silent Install Builder 5
2017-06-08 05:24 - 2017-06-11 10:28 - 00000000 ____D C:\Program Files\CyberLink
2017-06-08 05:24 - 2017-06-08 05:24 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Application Manager
2017-06-08 05:22 - 2017-06-11 10:26 - 00000000 ____D C:\ProgramData\Temp
2017-06-08 05:22 - 2017-06-11 10:22 - 00000000 ____D C:\ProgramData\install_clap
2017-06-08 05:22 - 2017-06-11 09:18 - 00000000 ____D C:\ProgramData\CyberLink
2017-06-08 05:14 - 2017-06-08 05:15 - 00000000 ____D C:\Users\widen-finalis\Desktop\others applications
2017-06-08 05:12 - 2017-06-12 10:40 - 00000000 ___RD C:\Users\widen-finalis\Desktop\lfsu-cewbé-100%s suite 5.5 + barrow2à4-widen-lfsu100%sf p 1 to Z apps + ManageMyBarrow2à4_&_Widen
2017-06-08 04:56 - 2017-06-08 04:58 - 03680147 _____ (www.Amazing-Share.com ) C:\Users\widen-finalis\Downloads\free_partition_manager.exe
2017-06-08 04:43 - 2017-03-30 05:10 - 00236792 _____ (COMODO) C:\Windows\system32\iseguard32.dll
2017-06-08 04:43 - 2017-03-30 05:10 - 00040952 _____ (COMODO) C:\Windows\system32\Drivers\isedrv.sys
2017-06-06 01:00 - 2017-06-06 01:00 - 01180160 _____ C:\Windows\a5640b48cc8fc28816fecf9f3c99a8da.exe
2017-06-06 01:00 - 2017-06-06 01:00 - 00037160 _____ C:\Windows\uninstaller.dat
2017-05-17 17:21 - 2017-05-17 17:21 - 00027408 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\gtkdrv.sys

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-06-12 14:57 - 2017-02-05 12:14 - 13617706 _____ C:\Windows\ntbtlog.txt
2017-06-12 14:56 - 2017-02-04 21:31 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\CrashDumps
2017-06-12 14:51 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2017-06-12 14:47 - 2017-02-05 16:33 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Free Download Manager
2017-06-12 14:46 - 2016-12-12 23:45 - 00747154 _____ C:\Windows\system32\perfh00C.dat
2017-06-12 14:46 - 2016-12-12 23:45 - 00149646 _____ C:\Windows\system32\perfc00C.dat
2017-06-12 14:46 - 2010-09-17 08:37 - 01667292 _____ C:\Windows\system32\PerfStringBackup.INI
2017-06-12 14:45 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\inf
2017-06-12 14:44 - 2017-02-04 18:48 - 00794624 _____ C:\Windows\system32\Drivers\sfi.dat
2017-06-12 14:41 - 2017-02-04 19:02 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\IObit
2017-06-12 14:41 - 2017-02-04 19:02 - 00000000 ____D C:\Program Files\Common Files\IObit
2017-06-12 14:36 - 2016-12-14 20:06 - 00000000 ____D C:\ProgramData\IObit
2017-06-12 07:51 - 2016-12-20 05:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2017-06-12 07:50 - 2016-12-20 05:28 - 00000000 ____D C:\ProgramData\Ashampoo
2017-06-12 07:50 - 2016-12-20 05:28 - 00000000 ____D C:\Program Files\Ashampoo
2017-06-12 07:23 - 2017-02-05 18:29 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Software Informer
2017-06-12 06:40 - 2017-02-05 16:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Download Manager
2017-06-12 06:11 - 2016-12-21 15:27 - 00000000 ____D C:\Program Files\Macrium
2017-06-12 06:10 - 2017-02-04 18:31 - 00000000 ____D C:\Program Files\Comodo
2017-06-12 06:09 - 2016-12-14 20:00 - 00000000 ____D C:\Program Files\TeraCopy
2017-06-12 05:47 - 2017-02-05 18:29 - 00000000 ____D C:\Program Files\Software Informer
2017-06-12 05:47 - 2017-02-05 16:18 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Software Informer
2017-06-11 15:34 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-06-11 15:34 - 2009-07-14 06:34 - 00009696 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-06-11 14:56 - 2016-12-14 20:06 - 00000000 ____D C:\Program Files\IObit
2017-06-11 14:50 - 2017-02-04 18:17 - 00060696 _____ C:\Windows\system32\GDIPFONTCACHEV1.DAT
2017-06-11 14:49 - 2017-02-04 17:38 - 00272088 _____ C:\Windows\system32\FNTCACHE.DAT
2017-06-11 14:45 - 2016-12-15 07:03 - 00000000 ____D C:\Program Files\Lavasoft
2017-06-11 12:37 - 2016-12-14 20:40 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Downloaded Installations
2017-06-11 10:29 - 2010-09-17 09:03 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2017-06-11 08:01 - 2016-12-15 08:52 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Google
2017-06-11 07:42 - 2017-02-05 13:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-06-11 07:38 - 2017-02-05 13:48 - 00000000 ____D C:\Program Files\Malwarebytes
2017-06-11 07:36 - 2017-02-04 18:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
2017-06-11 06:12 - 2009-07-14 04:37 - 00000000 ____D C:\Windows\Cursors
2017-06-11 06:11 - 2016-12-17 05:59 - 03848704 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2017-06-11 06:06 - 2009-07-14 01:41 - 00705536 _____ (Microsoft Corporation) C:\Windows\system32\imagesp1.dll
2017-06-11 06:05 - 2010-09-17 09:37 - 00000000 ____D C:\Program Files\Adobe
2017-06-10 21:58 - 2009-07-14 06:52 - 00000000 ____D C:\Program Files\MSBuild
2017-06-10 16:38 - 2016-12-14 20:39 - 00000000 ____D C:\ProgramData\Package Cache
2017-06-10 15:34 - 2016-12-12 16:03 - 00000000 ____D C:\Users\widen-finalis
2017-06-08 11:12 - 2016-12-14 20:05 - 00000000 ____D C:\Program Files\Unlocker
2017-06-08 11:12 - 2016-12-14 19:57 - 00000000 ____D C:\Program Files\Copy Handler
2017-06-08 07:50 - 2016-12-14 19:37 - 00000000 ____D C:\ProgramData\Wondershare
2017-06-08 07:50 - 2016-12-14 19:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-06-08 07:50 - 2016-12-14 19:30 - 00000000 ____D C:\Program Files\Wondershare
2017-06-08 07:33 - 2016-12-14 19:56 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\KillCopy
2017-06-08 07:26 - 2016-12-14 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Copy Handler
2017-06-08 07:01 - 2016-12-14 19:55 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\eufsc
2017-06-08 06:34 - 2016-12-14 17:20 - 00000000 ____D C:\Users\widen-finalis\AppData\LocalLow\Mozilla
2017-06-08 06:34 - 2016-12-14 06:45 - 00000000 ____D C:\Users\widen-finalis\AppData\Roaming\Mozilla
2017-06-08 06:30 - 2017-02-05 16:43 - 00000000 ____D C:\Users\widen-finalis\Downloads\1AVShare179-o3o0mn
2017-06-08 06:29 - 2017-02-04 18:42 - 00000000 ____D C:\Users\Acronis Agent User
2017-06-08 06:18 - 2016-12-14 10:04 - 00000000 ____D C:\Users\widen-finalis\AppData\Local\Adobe
2017-06-08 05:30 - 2017-02-05 13:50 - 00220088 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2017-06-08 04:42 - 2017-02-04 17:20 - 00000000 ____D C:\ProgramData\Comodo
2017-05-31 11:09 - 2017-02-05 13:49 - 00059936 _____ C:\Windows\system32\Drivers\mbae.sys

==================== Fichiers à la racine de certains dossiers =======

2017-06-11 06:57 - 2017-06-11 06:57 - 0023146 _____ () C:\Users\widen-finalis\AppData\Roaming\DMGR_0M0D1V0A1O1O1V0M1T1C1Q1I1H0I0EtJ1V1S1F1F1J1L1G1NtF1R1F1H.txt
2010-09-17 09:19 - 2010-03-03 00:59 - 0131984 _____ () C:\ProgramData\FullRemove.exe

Certains fichiers dans TEMP:
====================
2017-06-11 12:54 - 2016-01-22 08:09 - 1310232 _____ (Microsoft Corporation) C:\Users\widen-finalis\AppData\Local\Temp\dllnt_dump.dll
2016-04-11 22:35 - 2016-04-11 22:35 - 0818968 _____ (Google Inc.) C:\Users\widen-finalis\AppData\Local\Temp\GoogleUpdateSetup_1.3.21.169.exe
2017-06-11 06:58 - 2017-06-11 07:46 - 0000000 ____D () C:\Users\widen-finalis\AppData\Local\Temp\PrivacyProtector.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2016-12-15 11:28

==================== Fin de FRST.txt ============================