Format du document : text/plain
Prévisualisation
Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08-2017
Exécuté par rc692 (administrateur) sur DESKTOP-HVKIPN9 (14-08-2017 14:21:45)
Exécuté depuis C:\Users\rc692\Desktop\FRST64
Profils chargés: rc692 (Profils disponibles: defaultuser0 & rc692)
Platform: Windows 10 Pro Version 1607 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Chrome)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processus (Avec liste blanche) =================
(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe
(Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe
(RaMMicHaeL) C:\Program Files (x86)\Unchecky\bin\unchecky_bg.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.5\GoogleCrashHandler64.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(ACD Systems) C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\acdIDInTouch2.exe
(SFX TEAM) C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe
() C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\ACDSeeCommanderUltimate10.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(AVAST Software s.r.o.) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch.exe
(Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe
(Murray Hurps Software Pty Ltd) C:\Program Files (x86)\Ad Muncher\AdMunch64.exe
(Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
(Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
(FastStone Soft) C:\Program Files (x86)\FastStone Capture\FSCapture.exe
() C:\Program Files (x86)\Wondershare\Video Converter Ultimate\WSVCUUpdateHelper.exe
(Glarysoft Ltd) C:\Program Files (x86)\Glary Utilities 5\Integrator.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Easy Printer Manager\ScrPrint.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registre (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [213832 2017-07-19] (AVAST Software)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [456704 2012-02-20] ()
HKLM\...\Run: [ACUW10FR] => C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\acdIDInTouch2.exe [2157000 2017-07-07] (ACD Systems)
HKLM-x32\...\Run: [Ad Muncher] => C:\Program Files (x86)\Ad Muncher\AdMunch.exe [560760 2017-04-11] (Murray Hurps Software Pty Ltd)
HKLM-x32\...\Run: [SystemExplorerAutoStart] => "C:\Program Files (x86)\System Explorer\SystemExplorer.exe" /TRAY
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM-x32\...\Run: [WSVCUUpdateHelper.exe] => C:\Program Files (x86)\Wondershare\Video Converter Ultimate\WSVCUUpdateHelper.exe [28896 2017-08-10] ()
HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION
HKLM\...\Policies\Explorer: [LinkResolveIgnoreLinkInfo] 1
HKLM\...\Policies\Explorer: [NoInternetOpenWith] 1
HKLM\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\...\Policies\Explorer: [NoResolveSearch] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-19\...\Policies\Explorer: [TaskbarNoNotification] 1
HKU\S-1-5-20\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-20\...\Policies\Explorer: [TaskbarNoNotification] 1
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Run: [GUDelayStartup] => C:\Program Files (x86)\Glary Utilities 5\StartupManager.exe [44024 2017-08-07] (Glarysoft Ltd)
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Run: [SuperCopier2.exe] => C:\Program Files (x86)\SuperCopier2\SuperCopier2.exe [955392 2009-08-16] (SFX TEAM)
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Run: [ACDSeeCommanderUltimate10] => C:\Program Files\ACD Systems\ACDSee Ultimate\10.0\ACDSeeCommanderUltimate10.exe [3439584 2017-04-27] ()
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Run: [CCleaner] => C:\Program Files\CCleaner\CCleaner64.exe [9818328 2017-06-30] (Piriform Ltd)
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Policies\Explorer: [TaskbarNoNotification] 1
HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Policies\Explorer: [HideSCAHealth] 0
Startup: C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\FastStone Capture.lnk [2017-05-16]
ShortcutTarget: FastStone Capture.lnk -> C:\Program Files (x86)\FastStone Capture\FSCapture.exe (FastStone Soft)
Startup: C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ISCTsysTray.vbs [2017-08-14] ()
BootExecute: autocheck autochk *
GroupPolicy: Restriction - Chrome <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
==================== Internet (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)
Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{1218fbba-dfbb-48a0-b32b-73df26990b13}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{c4969b5c-9ae0-4b49-9a79-a7d16d0dcc3f}: [DhcpNameServer] 192.168.0.254
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page =
SearchScopes: HKU\S-1-5-21-814929793-790616712-3190561773-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2017-07-12] (Internet Download Manager, Tonec Inc.)
BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2017-03-28] (IObit)
BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2017-07-12] (Internet Download Manager, Tonec Inc.)
BHO-x32: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2017-07-06] (BitComet)
Handler: WSWSVCUchrome - Pas de valeur CLSID
FireFox:
========
FF DefaultProfile: fjojdibt.default
FF ProfilePath: C:\Users\rc692\AppData\Roaming\Mozilla\Firefox\Profiles\fjojdibt.default [2017-08-14]
FF Extension: (Hotspot Shield Free VPN Proxy – Unblock Sites) - C:\Users\rc692\AppData\Roaming\Mozilla\Firefox\Profiles\fjojdibt.default\Extensions\hotspot-shield@anchorfree.com.xpi [2017-08-08]
FF Extension: (S3.Google Translator) - C:\Users\rc692\AppData\Roaming\Mozilla\Firefox\Profiles\fjojdibt.default\Extensions\s3google@translator.xpi [2017-08-08]
FF Extension: (Avast SafePrice) - C:\Users\rc692\AppData\Roaming\Mozilla\Firefox\Profiles\fjojdibt.default\Extensions\sp@avast.com.xpi [2017-07-03]
FF Extension: (Avast Online Security) - C:\Users\rc692\AppData\Roaming\Mozilla\Firefox\Profiles\fjojdibt.default\Extensions\wrc@avast.com.xpi [2017-07-03]
FF Extension: (Adblock Plus) - C:\Users\rc692\AppData\Roaming\Mozilla\Firefox\Profiles\fjojdibt.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-08-08]
FF Extension: (Click-to-Play staged rollout) - C:\Program Files\Mozilla Firefox\browser\features\clicktoplay-rollout@mozilla.org.xpi [2017-08-03] [non signé]
FF Extension: (Follow-on Search Telemetry) - C:\Program Files\Mozilla Firefox\browser\features\followonsearch@mozilla.com.xpi [2017-08-03] [non signé]
FF Extension: (Shield Recipe Client) - C:\Program Files\Mozilla Firefox\browser\features\shield-recipe-client@mozilla.org.xpi [2017-08-03] [non signé]
FF HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi
FF Extension: (Pas de nom) - C:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2017-07-14]
FF HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\rc692\AppData\Roaming\IDM\idmmzcc5
FF Extension: (IDM CC) - C:\Users\rc692\AppData\Roaming\IDM\idmmzcc5 [2017-08-14] [non signé]
FF HKU\S-1-5-21-814929793-790616712-3190561773-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi
FF Extension: (IDM integration) - C:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-01-26]
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-29] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-30] (Google Inc.)
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Pas de fichier]
Chrome:
=======
CHR HomePage: Default -> qwant.com
CHR StartupUrls: Default -> "hxxps://www.bing.com/search","hxxp://iron-start.com/"
CHR NewTab: Default -> "active": false,
"entry": "chrome-extension://icpgjfneehieebagbmdbhnlpiopdcmna/main.html"
CHR Session Restore: Default -> est activé.
CHR Profile: C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default [2017-08-14]
CHR Extension: (Google Traduction) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2017-05-22]
CHR Extension: (Google Drive) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-04-11]
CHR Extension: (Proxy gratuit pour débloquer n’importe quel site | Touch VPN) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\bihmplhobchoageeokmgbdihknkjbknd [2017-07-02]
CHR Extension: (YouTube) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-04-11]
CHR Extension: (Adblock Plus) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2017-07-12]
CHR Extension: (uBlock Origin) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2017-07-21]
CHR Extension: (Notifier for Gmail™) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcjichoefijpinlfnjghokpkojhlhkgl [2017-07-04]
CHR Extension: (BitComet Download Extension for Chrome) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhigneefebkcagnpnpbibganpmfgebnk [2017-07-14]
CHR Extension: (Multiple Account Checker for Gmail™) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnimhgelcnggigekhdjlifjpndgmnglm [2017-05-22]
CHR Extension: (Dog and Cat) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\elnglhfdppjbphpefmijnblkjibihhbo [2017-08-10]
CHR Extension: (uBlock Adblock Plus) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdecnmmdccnkogcidionikojplkjfgie [2017-07-02]
CHR Extension: (Watcher for Yahoo! Mail™) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\gdipdemlhefmipmnlbejoccjegankhle [2017-04-15]
CHR Extension: (Qwant.com) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnlkiofnhhoahaiimdicppgemmmomijo [2017-08-05]
CHR Extension: (New Tab Redirect) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\icpgjfneehieebagbmdbhnlpiopdcmna [2017-08-10]
CHR Extension: (Bitmotion - New Tab) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\iinglghmhcgdgjjlafobajghjamdchik [2017-08-03]
CHR Extension: (Open Plugins) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\kmafpcnknacbcgigikdfmjfnmimhpkkg [2017-08-03]
CHR Extension: (IDM Integration Module) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-07-15]
CHR Extension: (Service proxy et VPN Hotspot Shield gratuit - Déblocage de sites) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbejmccbhkncgokjcmghpfloaajcffj [2017-07-23]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-04-11]
CHR Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2017-07-29]
CHR Extension: (Checker Plus for Gmail™) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\oeopbcgkkoapgobdbedcemjljbihmemj [2017-08-12]
CHR Extension: (Bookmax - Online Bookmark Manager) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofjpkfadmfhloombfmmlllnbhkoehckm [2017-05-22]
CHR Extension: (Gmail) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-04-11]
CHR Extension: (Chrome Media Router) - C:\Users\rc692\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-08-10]
CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2017-07-14]
CHR HKLM-x32\...\Chrome\Extension: [dhigneefebkcagnpnpbibganpmfgebnk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [iinglghmhcgdgjjlafobajghjamdchik] - hxxps://clients2.google.com/service/update2/crx
Opera:
=======
OPR Extension: (Notifier for Gmail™) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\flkijckbigolpahbkklilflpmkalfohc [2017-06-03]
OPR Extension: (ImTranslator: Traducteur, Dictionnaire, Voix) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\glaedmooikiamindhmfcfccncmmdagge [2017-08-04]
OPR Extension: (uBlock Origin) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2017-08-04]
OPR Extension: (Google Traduction) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2017-08-04]
OPR Extension: (Amazon Assistant for Opera) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2017-07-04]
OPR Extension: (IDM Integration Module) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2017-07-15]
OPR Extension: (Adblock Plus) - C:\Users\rc692\AppData\Roaming\Opera Software\Opera Stable\Extensions\oidhhegpmlfpoeialbgcdocjalghfpkp [2017-07-15]
==================== Services (Avec liste blanche) ====================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7430992 2017-07-19] (AVAST Software s.r.o.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [263312 2017-07-19] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [311592 2017-07-19] (AVAST Software)
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2017-07-06] (www.BitComet.com)
S3 lfsvc; C:\Windows\SysWOW64\lfsvc.dll [22528 2017-04-11] (Microsoft Corporation) [Fichier non signé]
R2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [458176 2016-12-29] (NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [2889888 2017-08-01] (Microsoft Corporation)
R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2014-12-20] (Mister Group)
R2 Unchecky; C:\Program Files (x86)\Unchecky\bin\unchecky_svc.exe [302872 2017-08-11] (RaMMicHaeL)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347320 2017-04-28] (Microsoft Corporation)
S4 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103712 2017-08-01] (Microsoft Corporation)
R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.224\WsAppService.exe [473824 2017-04-20] (Wondershare)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [118496 2017-08-10] (Wondershare)
===================== Pilotes (Avec liste blanche) ======================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
R1 aswbidsdriver; C:\Windows\system32\drivers\aswbidsdrivera.sys [320008 2017-07-19] (AVAST Software s.r.o.)
R0 aswbidsh; C:\Windows\system32\drivers\aswbidsha.sys [198976 2017-07-19] (AVAST Software s.r.o.)
R0 aswblog; C:\Windows\system32\drivers\aswbloga.sys [343288 2017-07-19] (AVAST Software s.r.o.)
R0 aswbuniv; C:\Windows\system32\drivers\aswbuniva.sys [57728 2017-07-19] (AVAST Software s.r.o.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [46984 2017-07-03] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [41800 2017-07-03] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [146704 2017-08-09] (AVAST Software)
R1 aswNetSec; C:\Windows\system32\drivers\aswNetSec.sys [554528 2017-07-03] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [110352 2017-07-03] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\drivers\aswRvrt.sys [84392 2017-07-03] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1015880 2017-08-09] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [585608 2017-07-03] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [198768 2017-07-03] (AVAST Software)
R0 aswVmm; C:\Windows\system32\drivers\aswVmm.sys [361336 2017-07-03] (AVAST Software)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R1 GUBootStartup; C:\Windows\System32\drivers\GUBootStartup.sys [20160 2017-04-11] (Glarysoft Ltd)
R1 GUSBootStartup; C:\Windows\System32\drivers\GUSBootStartup.sys [20160 2017-07-18] (Glarysoft Ltd)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 netr28x; C:\Windows\System32\drivers\netr28x.sys [2504192 2016-07-16] (MediaTek Inc.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nvaewu.inf_amd64_8baa9d083edacf87\nvlddmkm.sys [14190520 2017-01-17] (NVIDIA Corporation)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()
S0 WdBoot; C:\Windows\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
S3 wdm_usb; C:\Windows\system32\DRIVERS\usb2ser.sys [151184 2016-07-15] (MBB)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
==================== NetSvcs (Avec liste blanche) ===================
(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)
==================== Un mois - Créés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-08-14 14:21 - 2017-08-14 14:21 - 000000000 ____D C:\Users\rc692\Desktop\FRST64
2017-08-14 14:13 - 2017-08-14 14:14 - 000000000 ____D C:\Users\rc692\Downloads\FRST
2017-08-14 14:11 - 2017-08-14 14:21 - 000000000 ____D C:\FRST
2017-08-14 14:11 - 2017-08-14 14:11 - 000000000 ____D C:\ProgramData\SWCUTemp
2017-08-14 13:48 - 2017-08-14 14:16 - 000000000 ____D C:\Users\rc692\AppData\Roaming\IDM
2017-08-14 13:48 - 2017-08-14 13:51 - 000000000 ____D C:\Users\rc692\AppData\Roaming\DMCache
2017-08-14 13:48 - 2017-08-14 13:48 - 000001192 _____ C:\Users\rc692\Desktop\Internet Download Manager.lnk
2017-08-14 13:48 - 2017-08-14 13:48 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Download Manager
2017-08-14 13:48 - 2017-08-14 13:48 - 000000000 ____D C:\ProgramData\IDM
2017-08-14 13:48 - 2017-08-14 13:48 - 000000000 ____D C:\Program Files (x86)\Internet Download Manager
2017-08-14 13:45 - 2017-08-14 13:45 - 000001318 _____ C:\Users\rc692\Desktop\Windows 10 Manager.lnk
2017-08-14 13:45 - 2017-08-14 13:45 - 000001306 _____ C:\Users\rc692\Desktop\1-Click Cleaner.lnk
2017-08-14 13:45 - 2017-08-14 13:45 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Yamicsoft
2017-08-14 13:45 - 2017-08-14 13:45 - 000000000 ____D C:\Program Files\Yamicsoft
2017-08-14 10:09 - 2017-08-14 10:09 - 005477221 _____ C:\Users\rc692\Documents\découpage d'un film avec VLC - YouTube.MP4
2017-08-14 09:52 - 2017-08-14 09:52 - 014876301 _____ C:\Users\rc692\Documents\Meilleur Logiciel de Montage Vidéo 2017 - Filmora.MKV
2017-08-14 08:19 - 2017-08-14 08:19 - 000000995 _____ C:\Users\Public\Desktop\Wondershare Filmora.lnk
2017-08-14 08:18 - 2017-08-14 10:46 - 000000000 ____D C:\Users\rc692\Documents\Wondershare Filmora
2017-08-14 08:18 - 2017-08-14 08:18 - 000000000 ____D C:\ProgramData\Wondershare Video Editor
2017-08-14 08:18 - 2017-08-14 08:18 - 000000000 ____D C:\Program Files\Wondershare
2017-08-14 08:18 - 2017-03-17 11:43 - 001250304 _____ (CineForm Inc.) C:\Windows\system32\CFDecode64.ax
2017-08-13 08:37 - 2017-08-13 08:38 - 000000000 ____D C:\Vera
2017-08-13 07:50 - 2017-08-13 07:50 - 000000000 ____D C:\ProgramData\temp
2017-08-13 06:56 - 2017-08-13 06:56 - 000000000 ____D C:\Program Files (x86)\WondershareUpdate
2017-08-13 06:49 - 2017-08-13 06:49 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Boilsoft
2017-08-12 20:15 - 2009-08-07 18:50 - 000273851 _____ ( Author: William Hedrick) C:\Users\rc692\Downloads\EjectUSB.exe
2017-08-12 18:30 - 2017-08-12 19:59 - 3536571038 _____ C:\Users\rc692\Downloads\Brimstone.2016.MULTI.1080p.HDLight.x264.AC3-EXTREME.mkv
2017-08-12 18:23 - 2017-08-12 18:23 - 000000000 ____D C:\Users\rc692\AppData\Roaming\ChromeSecu
2017-08-12 18:21 - 2017-08-14 13:52 - 000000000 ____D C:\Users\rc692\AppData\Roaming\ISCTsysTray
2017-08-12 17:48 - 2017-08-12 17:49 - 000000000 ____D C:\Users\rc692\Downloads\pdf-xchange.viewer.pro.2.5.322
2017-08-12 07:10 - 2017-08-12 07:11 - 000000000 ____D C:\Users\rc692\AppData\Roaming\SumatraPDF
2017-08-12 07:10 - 2017-08-12 07:10 - 000001948 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SumatraPDF.lnk
2017-08-12 07:10 - 2017-08-12 07:10 - 000000000 ____D C:\Program Files\SumatraPDF
2017-08-11 18:38 - 2017-08-11 18:38 - 000004048 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1491932247
2017-08-11 18:38 - 2017-08-11 18:38 - 000001304 _____ C:\Users\Public\Desktop\Wondershare Video Converter Ultimate.lnk
2017-08-11 18:38 - 2017-08-11 18:38 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk
2017-08-10 16:58 - 2017-08-01 22:23 - 000389316 __RSH C:\bootmgr
2017-08-10 16:58 - 2016-07-16 13:43 - 000000001 ___SH C:\BOOTNXT
2017-08-10 15:20 - 2017-07-31 17:14 - 000835576 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-08-10 15:20 - 2017-07-31 17:14 - 000177648 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-10 15:09 - 2017-08-01 21:27 - 000118112 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2017-08-10 15:09 - 2017-08-01 21:22 - 001860288 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Store.dll
2017-08-10 15:09 - 2017-08-01 21:21 - 000857440 _____ (Microsoft Corporation) C:\Windows\system32\WWAHost.exe
2017-08-10 15:09 - 2017-08-01 21:18 - 008169536 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2017-08-10 15:09 - 2017-08-01 21:17 - 022220856 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2017-08-10 15:09 - 2017-08-01 21:17 - 001600632 _____ (Microsoft Corporation) C:\Windows\system32\sppobjs.dll
2017-08-10 15:09 - 2017-08-01 21:13 - 002532192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2017-08-10 15:09 - 2017-08-01 20:58 - 000299008 _____ (Microsoft Corporation) C:\Windows\system32\rdpinit.exe
2017-08-10 15:09 - 2017-08-01 20:57 - 000415744 _____ (Microsoft Corporation) C:\Windows\system32\rdpshell.exe
2017-08-10 15:09 - 2017-08-01 20:54 - 000042496 _____ (Microsoft Corporation) C:\Windows\system32\tokenbinding.dll
2017-08-10 15:09 - 2017-08-01 20:53 - 000123904 _____ (Microsoft Corporation) C:\Windows\system32\mssprxy.dll
2017-08-10 15:09 - 2017-08-01 20:52 - 000237568 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Diagnostics.dll
2017-08-10 15:09 - 2017-08-01 20:48 - 000211968 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgent.exe
2017-08-10 15:09 - 2017-08-01 20:47 - 000748544 _____ (Microsoft Corporation) C:\Windows\system32\StoreAgent.dll
2017-08-10 15:09 - 2017-08-01 20:47 - 000049664 _____ (Microsoft Corporation) C:\Windows\system32\TokenBrokerUI.dll
2017-08-10 15:09 - 2017-08-01 20:46 - 000349184 _____ (Microsoft Corporation) C:\Windows\system32\SearchProtocolHost.exe
2017-08-10 15:09 - 2017-08-01 20:46 - 000315904 _____ (Microsoft Corporation) C:\Windows\system32\Phoneutil.dll
2017-08-10 15:09 - 2017-08-01 20:46 - 000260608 _____ (Microsoft Corporation) C:\Windows\system32\InstallAgentUserBroker.exe
2017-08-10 15:09 - 2017-08-01 20:46 - 000147456 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll
2017-08-10 15:09 - 2017-08-01 20:46 - 000078336 _____ (Microsoft Corporation) C:\Windows\system32\wsqmcons.exe
2017-08-10 15:09 - 2017-08-01 20:45 - 000805888 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2017-08-10 15:09 - 2017-08-01 20:45 - 000561664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.ApplicationModel.Wallet.dll
2017-08-10 15:09 - 2017-08-01 20:45 - 000472064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2017-08-10 15:09 - 2017-08-01 20:45 - 000425984 _____ (Microsoft Corporation) C:\Windows\system32\aadcloudap.dll
2017-08-10 15:09 - 2017-08-01 20:44 - 000642048 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Xaml.InkControls.dll
2017-08-10 15:09 - 2017-08-01 20:43 - 000966144 _____ (Microsoft Corporation) C:\Windows\system32\sbe.dll
2017-08-10 15:09 - 2017-08-01 20:43 - 000963584 _____ (Microsoft Corporation) C:\Windows\system32\WebcamUi.dll
2017-08-10 15:09 - 2017-08-01 20:42 - 000775168 _____ (Microsoft Corporation) C:\Windows\system32\GamePanel.exe
2017-08-10 15:09 - 2017-08-01 20:40 - 002716672 _____ (Microsoft Corporation) C:\Windows\system32\WsmSvc.dll
2017-08-10 15:09 - 2017-08-01 20:40 - 000800768 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Security.Authentication.Web.Core.dll
2017-08-10 15:09 - 2017-08-01 20:39 - 009129984 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2017-08-10 15:09 - 2017-08-01 20:35 - 001908224 _____ (Microsoft Corporation) C:\Windows\system32\AzureSettingSyncProvider.dll
2017-08-10 15:09 - 2017-08-01 20:33 - 000230400 _____ (Microsoft Corporation) C:\Windows\system32\windowslivelogin.dll
2017-08-10 15:09 - 2017-08-01 20:32 - 008114688 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2017-08-10 15:09 - 2017-08-01 20:32 - 004596224 _____ (Microsoft Corporation) C:\Windows\system32\xpsrchvw.exe
2017-08-10 15:09 - 2017-08-01 20:32 - 003401216 _____ (Microsoft Corporation) C:\Windows\system32\tquery.dll
2017-08-10 15:09 - 2017-08-01 20:30 - 002916864 _____ (Microsoft Corporation) C:\Windows\system32\CertEnroll.dll
2017-08-10 15:09 - 2017-08-01 20:30 - 001643008 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Speech.dll
2017-08-10 15:09 - 2017-08-01 20:30 - 000305152 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2017-08-10 15:09 - 2017-08-01 20:29 - 004743680 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2017-08-10 15:09 - 2017-08-01 20:29 - 000874496 _____ (Microsoft Corporation) C:\Windows\system32\TokenBroker.dll
2017-08-10 15:09 - 2017-08-01 20:27 - 008076288 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2017-08-10 15:09 - 2017-08-01 20:27 - 002695680 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Logon.dll
2017-08-10 15:09 - 2017-08-01 20:27 - 002538496 _____ (Microsoft Corporation) C:\Windows\system32\mssrch.dll
2017-08-10 15:09 - 2017-08-01 20:27 - 001984000 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2017-08-10 15:09 - 2017-08-01 20:27 - 000903680 _____ (Microsoft Corporation) C:\Windows\system32\SearchIndexer.exe
2017-08-10 15:09 - 2017-08-01 20:27 - 000774656 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.dll
2017-08-10 15:09 - 2017-08-01 20:27 - 000765440 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.Sensors.dll
2017-08-10 15:09 - 2017-08-01 20:26 - 001513472 _____ (Microsoft Corporation) C:\Windows\system32\win32kbase.sys
2017-08-10 15:09 - 2017-08-01 20:25 - 001726976 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Immersive.dll
2017-08-10 15:09 - 2017-08-01 20:24 - 003299840 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2017-08-10 15:09 - 2017-08-01 20:24 - 001121280 _____ (Microsoft Corporation) C:\Windows\system32\aadtb.dll
2017-08-10 15:09 - 2017-08-01 20:24 - 000998912 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2017-08-10 15:09 - 2017-08-01 20:23 - 003615744 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2017-08-10 15:09 - 2017-08-01 19:20 - 002264344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2017-08-10 15:09 - 2017-08-01 19:20 - 001431232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Store.dll
2017-08-10 15:09 - 2017-08-01 19:20 - 000781144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WWAHost.exe
2017-08-10 15:09 - 2017-08-01 19:20 - 000116576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CloudExperienceHostCommon.dll
2017-08-10 15:09 - 2017-08-01 19:19 - 001980776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2017-08-10 15:09 - 2017-08-01 19:19 - 000577976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2017-08-10 15:09 - 2017-08-01 19:19 - 000339896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Faultrep.dll
2017-08-10 15:09 - 2017-08-01 19:19 - 000266080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFault.exe
2017-08-10 15:09 - 2017-08-01 19:19 - 000120416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WerFaultSecure.exe
2017-08-10 15:09 - 2017-08-01 19:18 - 000139104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wermgr.exe
2017-08-10 15:09 - 2017-08-01 19:16 - 006665952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-08-10 15:09 - 2017-08-01 19:16 - 004023552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2017-08-10 15:09 - 2017-08-01 19:16 - 001845512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfmp4srcsnk.dll
2017-08-10 15:09 - 2017-08-01 19:15 - 020967840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2017-08-10 15:09 - 2017-08-01 19:15 - 001360464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetsrc.dll
2017-08-10 15:09 - 2017-08-01 19:15 - 001277856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfasfsrcsnk.dll
2017-08-10 15:09 - 2017-08-01 19:15 - 000981888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfnetcore.dll
2017-08-10 15:09 - 2017-08-01 19:10 - 000306800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.MediaControl.dll
2017-08-10 15:09 - 2017-08-01 19:07 - 005686784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Data.Pdf.dll
2017-08-10 15:09 - 2017-08-01 18:59 - 000035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tokenbinding.dll
2017-08-10 15:09 - 2017-08-01 18:58 - 000040960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBrokerUI.dll
2017-08-10 15:09 - 2017-08-01 18:56 - 000177664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Diagnostics.dll
2017-08-10 15:09 - 2017-08-01 18:56 - 000123904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.HostName.dll
2017-08-10 15:09 - 2017-08-01 18:55 - 000087040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-08-10 15:09 - 2017-08-01 18:54 - 000505856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\bcastdvr.exe
2017-08-10 15:09 - 2017-08-01 18:54 - 000184320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UserMgrProxy.dll
2017-08-10 15:09 - 2017-08-01 18:54 - 000180224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgent.exe
2017-08-10 15:09 - 2017-08-01 18:53 - 000557568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\StoreAgent.dll
2017-08-10 15:09 - 2017-08-01 18:52 - 000533504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\FXSCOMEX.dll
2017-08-10 15:09 - 2017-08-01 18:52 - 000117760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AuthBroker.dll
2017-08-10 15:09 - 2017-08-01 18:51 - 000483840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.AllJoyn.dll
2017-08-10 15:09 - 2017-08-01 18:51 - 000426496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.ApplicationModel.Wallet.dll
2017-08-10 15:09 - 2017-08-01 18:51 - 000388608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2017-08-10 15:09 - 2017-08-01 18:51 - 000306688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieproxy.dll
2017-08-10 15:09 - 2017-08-01 18:51 - 000223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallAgentUserBroker.exe
2017-08-10 15:09 - 2017-08-01 18:51 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWWIN.EXE
2017-08-10 15:09 - 2017-08-01 18:50 - 000431616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\efswrt.dll
2017-08-10 15:09 - 2017-08-01 18:50 - 000284672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepsync.dll
2017-08-10 15:09 - 2017-08-01 18:50 - 000260096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Phoneutil.dll
2017-08-10 15:09 - 2017-08-01 18:50 - 000125952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apprepapi.dll
2017-08-10 15:09 - 2017-08-01 18:49 - 004615168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.dll
2017-08-10 15:09 - 2017-08-01 18:48 - 000297472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
2017-08-10 15:09 - 2017-08-01 18:48 - 000267776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncryptprov.dll
2017-08-10 15:09 - 2017-08-01 18:47 - 000846336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WebcamUi.dll
2017-08-10 15:09 - 2017-08-01 18:47 - 000787968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sbe.dll
2017-08-10 15:09 - 2017-08-01 18:47 - 000661504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WpcWebFilter.dll
2017-08-10 15:09 - 2017-08-01 18:47 - 000525824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintDialogs.dll
2017-08-10 15:09 - 2017-08-01 18:47 - 000396288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\werui.dll
2017-08-10 15:09 - 2017-08-01 18:47 - 000368128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2017-08-10 15:09 - 2017-08-01 18:45 - 002333184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2017-08-10 15:09 - 2017-08-01 18:45 - 001985536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certmgr.dll
2017-08-10 15:09 - 2017-08-01 18:42 - 018364928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2017-08-10 15:09 - 2017-08-01 18:41 - 000248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dlnashext.dll
2017-08-10 15:09 - 2017-08-01 18:40 - 019415040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2017-08-10 15:09 - 2017-08-01 18:40 - 012187136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2017-08-10 15:09 - 2017-08-01 18:39 - 007626240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2017-08-10 15:09 - 2017-08-01 18:39 - 001255936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\AzureSettingSyncProvider.dll
2017-08-10 15:09 - 2017-08-01 18:38 - 000458752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wlidprov.dll
2017-08-10 15:09 - 2017-08-01 18:37 - 012349440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
2017-08-10 15:09 - 2017-08-01 18:37 - 003520512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xpsrchvw.exe
2017-08-10 15:09 - 2017-08-01 18:37 - 002641920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2017-08-10 15:09 - 2017-08-01 18:37 - 000647168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comuid.dll
2017-08-10 15:09 - 2017-08-01 18:37 - 000468992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.InkControls.dll
2017-08-10 15:09 - 2017-08-01 18:36 - 007468544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2017-08-10 15:09 - 2017-08-01 18:35 - 000675840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.dll
2017-08-10 15:09 - 2017-08-01 18:34 - 001170944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Speech.dll
2017-08-10 15:09 - 2017-08-01 18:34 - 000886272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aadtb.dll
2017-08-10 15:09 - 2017-08-01 18:34 - 000709120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll
2017-08-10 15:09 - 2017-08-01 18:33 - 006031872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2017-08-10 15:09 - 2017-08-01 18:33 - 000589312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Devices.Sensors.dll
2017-08-10 15:09 - 2017-08-01 18:32 - 002682880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netshell.dll
2017-08-10 15:09 - 2017-08-01 18:32 - 002648576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CertEnroll.dll
2017-08-10 15:09 - 2017-08-01 18:31 - 003664896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2017-08-10 15:09 - 2017-08-01 18:31 - 001988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2017-08-10 15:09 - 2017-08-01 18:31 - 000773120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SearchIndexer.exe
2017-08-10 15:09 - 2017-08-01 18:31 - 000690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TokenBroker.dll
2017-08-10 15:09 - 2017-08-01 18:31 - 000598528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.dll
2017-08-10 15:09 - 2017-08-01 18:31 - 000566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ShareHost.dll
2017-08-10 15:09 - 2017-08-01 18:31 - 000542208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.Connectivity.dll
2017-08-10 15:09 - 2017-08-01 18:30 - 002997248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2017-08-10 15:09 - 2017-08-01 18:30 - 002482688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2017-08-10 15:09 - 2017-08-01 18:30 - 001886720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Logon.dll
2017-08-10 15:09 - 2017-08-01 18:30 - 001556992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Immersive.dll
2017-08-10 15:09 - 2017-08-01 18:30 - 001013248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Web.Http.dll
2017-08-10 15:09 - 2017-08-01 18:30 - 000751104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2017-08-10 15:09 - 2017-08-01 18:30 - 000711168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Search.dll
2017-08-10 15:09 - 2017-08-01 18:29 - 003106304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2017-08-10 15:09 - 2017-08-01 18:28 - 000783360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000866816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswdat10.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000641536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mswstr10.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000616448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrepl40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000518144 _____ C:\Windows\SysWOW64\msjetoledb40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000475648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxbde40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000375808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspbde40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000343552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000339968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msexcl40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000310272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000290816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjtes40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000240640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msltus40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000144896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjint40.dll
2017-08-10 15:09 - 2017-08-01 16:15 - 000083968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjter40.dll
2017-08-10 15:09 - 2017-07-12 08:17 - 000081760 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\stornvme.sys
2017-08-10 15:09 - 2017-07-12 08:15 - 000496872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dnsapi.dll
2017-08-10 15:09 - 2017-07-12 08:12 - 001706488 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll
2017-08-10 15:09 - 2017-07-12 08:12 - 001573280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2017-08-10 15:09 - 2017-07-12 08:00 - 000223072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2017-08-10 15:09 - 2017-07-12 07:55 - 000607072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupEngine.dll
2017-08-10 15:09 - 2017-07-12 07:55 - 000111968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupApi.dll
2017-08-10 15:09 - 2017-07-12 07:52 - 004312760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2017-08-10 15:09 - 2017-07-12 07:35 - 000008704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dabapi.dll
2017-08-10 15:09 - 2017-07-12 07:32 - 000227328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\container.dll
2017-08-10 15:09 - 2017-07-12 07:32 - 000068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\frprov.dll
2017-08-10 15:09 - 2017-07-12 07:31 - 000130560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdeploy.dll
2017-08-10 15:09 - 2017-07-12 07:31 - 000022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\perfnet.dll
2017-08-10 15:09 - 2017-07-12 07:30 - 000034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nshhttp.dll
2017-08-10 15:09 - 2017-07-12 07:29 - 000328192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\daxexec.dll
2017-08-10 15:09 - 2017-07-12 07:29 - 000025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\httpapi.dll
2017-08-10 15:09 - 2017-07-12 07:25 - 000364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NetSetupShim.dll
2017-08-10 15:09 - 2017-07-12 07:24 - 000124928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\scmdisk0101.sys
2017-08-10 15:09 - 2017-07-12 07:23 - 000671232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\netlogon.dll
2017-08-10 15:09 - 2017-07-12 07:23 - 000238592 _____ (Microsoft Corporation) C:\Windows\system32\MusNotification.exe
2017-08-10 15:09 - 2017-07-12 07:23 - 000216576 _____ (Microsoft Corporation) C:\Windows\system32\RdpRelayTransport.dll
2017-08-10 15:09 - 2017-07-12 07:23 - 000098304 _____ (Microsoft Corporation) C:\Windows\system32\MusNotificationUx.exe
2017-08-10 15:09 - 2017-07-12 07:23 - 000076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\updatepolicy.dll
2017-08-10 15:09 - 2017-07-12 07:21 - 000711680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2017-08-10 15:09 - 2017-07-12 07:19 - 006474752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mspaint.exe
2017-08-10 15:09 - 2017-07-12 07:18 - 000525312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\LogonController.dll
2017-08-10 15:09 - 2017-07-12 07:17 - 000552960 _____ (Microsoft Corporation) C:\Windows\system32\MusUpdateHandlers.dll
2017-08-10 15:09 - 2017-07-12 07:17 - 000252416 _____ (Microsoft Corporation) C:\Windows\system32\ubpm.dll
2017-08-10 15:09 - 2017-07-12 07:15 - 000893440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autochk.exe
2017-08-10 15:09 - 2017-07-12 07:15 - 000029184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iscsium.dll
2017-08-10 15:09 - 2017-07-12 07:14 - 000536064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\untfs.dll
2017-08-10 15:09 - 2017-07-12 07:13 - 000855040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autofmt.exe
2017-08-10 15:09 - 2017-07-12 07:12 - 002750464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2017-08-10 15:09 - 2017-07-12 07:12 - 000091648 _____ (Microsoft Corporation) C:\Windows\system32\updatepolicy.dll
2017-08-10 15:09 - 2017-07-12 07:11 - 002154496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2017-08-10 15:09 - 2017-07-12 07:10 - 000878592 _____ (Microsoft Corporation) C:\Windows\SysWOW64\autoconv.exe
2017-08-10 15:09 - 2017-07-12 07:10 - 000546304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uReFS.dll
2017-08-10 15:09 - 2017-07-12 07:09 - 003291136 _____ (Microsoft Corporation) C:\Windows\system32\mispace.dll
2017-08-10 15:09 - 2017-07-12 07:09 - 000641024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MCRecvSrc.dll
2017-08-10 15:09 - 2017-07-12 07:08 - 002861056 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2017-08-10 15:09 - 2017-07-12 07:07 - 001572352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2017-08-10 15:09 - 2017-07-12 07:06 - 000549376 _____ (Microsoft Corporation) C:\Windows\system32\usocore.dll
2017-08-10 15:09 - 2017-07-12 07:05 - 000565248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rasapi32.dll
2017-08-10 15:09 - 2017-07-12 07:03 - 000826880 _____ (Microsoft Corporation) C:\Windows\system32\netlogon.dll
2017-08-10 15:09 - 2017-07-12 07:02 - 000869888 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2017-08-10 15:09 - 2017-07-12 06:59 - 002318336 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2017-08-10 15:09 - 2017-07-12 06:58 - 000392192 _____ (Microsoft Corporation) C:\Windows\system32\wuuhext.dll
2017-08-10 15:09 - 2017-07-12 04:49 - 000448629 _____ C:\Windows\system32\ApnDatabase.xml
2017-08-10 15:09 - 2017-03-04 08:14 - 000588288 _____ (Microsoft Corporation) C:\Windows\system32\wlidprov.dll
2017-08-10 15:09 - 2017-03-04 08:07 - 000909312 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Search.dll
2017-08-10 15:09 - 2017-03-04 08:05 - 001328640 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Web.Http.dll
2017-08-10 15:09 - 2017-03-04 08:05 - 000134144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ErrorDetails.dll
2017-08-10 15:09 - 2016-08-02 10:13 - 001081856 _____ (Microsoft Corporation) C:\Windows\system32\Chakradiag.dll
2017-08-10 15:08 - 2017-08-01 21:32 - 000133984 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2017-08-10 15:08 - 2017-08-01 21:31 - 007780192 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2017-08-10 15:08 - 2017-08-01 21:29 - 000376672 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2017-08-10 15:08 - 2017-08-01 21:25 - 000168800 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2017-08-10 15:08 - 2017-08-01 21:22 - 000360040 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsAdminFlows.exe
2017-08-10 15:08 - 2017-08-01 21:21 - 002759712 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2017-08-10 15:08 - 2017-08-01 21:21 - 000624048 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2017-08-10 15:08 - 2017-08-01 21:21 - 000295264 _____ (Microsoft Corporation) C:\Windows\system32\WerFault.exe
2017-08-10 15:08 - 2017-08-01 21:21 - 000146784 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHostCommon.dll
2017-08-10 15:08 - 2017-08-01 21:21 - 000124072 _____ (Microsoft Corporation) C:\Windows\system32\WerFaultSecure.exe
2017-08-10 15:08 - 2017-08-01 21:21 - 000026976 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2017-08-10 15:08 - 2017-08-01 21:20 - 002446704 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2017-08-10 15:08 - 2017-08-01 21:20 - 000684344 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2017-08-10 15:08 - 2017-08-01 21:20 - 000557408 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\spaceport.sys
2017-08-10 15:08 - 2017-08-01 21:20 - 000383776 _____ (Microsoft Corporation) C:\Windows\system32\Faultrep.dll
2017-08-10 15:08 - 2017-08-01 21:20 - 000144736 _____ (Microsoft Corporation) C:\Windows\system32\wermgr.exe
2017-08-10 15:08 - 2017-08-01 21:20 - 000079712 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmcl.sys
2017-08-10 15:08 - 2017-08-01 21:18 - 004260064 _____ (Microsoft Corporation) C:\Windows\system32\mfcore.dll
2017-08-10 15:08 - 2017-08-01 21:18 - 001983408 _____ (Microsoft Corporation) C:\Windows\system32\mfmp4srcsnk.dll
2017-08-10 15:08 - 2017-08-01 21:18 - 001702392 _____ (Microsoft Corporation) C:\Windows\system32\mfasfsrcsnk.dll
2017-08-10 15:08 - 2017-08-01 21:18 - 000092512 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll
2017-08-10 15:08 - 2017-08-01 21:17 - 001072248 _____ (Microsoft Corporation) C:\Windows\system32\mfnetcore.dll
2017-08-10 15:08 - 2017-08-01 21:17 - 000244816 _____ (Microsoft Corporation) C:\Windows\system32\mfps.dll
2017-08-10 15:08 - 2017-08-01 21:17 - 000241504 _____ (Microsoft Corporation) C:\Windows\system32\CloudExperienceHost.dll
2017-08-10 15:08 - 2017-08-01 21:13 - 001102176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys
2017-08-10 15:08 - 2017-08-01 21:13 - 000387872 _____ (Microsoft Corporation) C:\Windows\system32\wmpps.dll
2017-08-10 15:08 - 2017-08-01 21:01 - 007218176 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Data.Pdf.dll
2017-08-10 15:08 - 2017-08-01 20:57 - 000372736 _____ (Microsoft Corporation) C:\Windows\system32\RDXTaskFactory.dll
2017-08-10 15:08 - 2017-08-01 20:52 - 022569472 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2017-08-10 15:08 - 2017-08-01 20:52 - 000080896 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vmbkmclr.sys
2017-08-10 15:08 - 2017-08-01 20:51 - 000113664 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.ServiceDiscovery.Dnssd.dll
2017-08-10 15:08 - 2017-08-01 20:50 - 000099328 _____ (Microsoft Corporation) C:\Windows\system32\browserbroker.dll
2017-08-10 15:08 - 2017-08-01 20:48 - 000289792 _____ (Microsoft Corporation) C:\Windows\system32\DeveloperOptionsSettingsHandlers.dll
2017-08-10 15:08 - 2017-08-01 20:48 - 000223744 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2017-08-10 15:08 - 2017-08-01 20:47 - 000691200 _____ (Microsoft Corporation) C:\Windows\system32\ieproxy.dll
2017-08-10 15:08 - 2017-08-01 20:47 - 000651264 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Devices.AllJoyn.dll
2017-08-10 15:08 - 2017-08-01 20:47 - 000268800 _____ (Microsoft Corporation) C:\Windows\system32\UserMgrProxy.dll
2017-08-10 15:08 - 2017-08-01 20:47 - 000223744 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.HostName.dll
2017-08-10 15:08 - 2017-08-01 20:46 - 000590336 _____ (Microsoft Corporation) C:\Windows\system32\efswrt.dll
2017-08-10 15:08 - 2017-08-01 20:46 - 000379904 _____ (Microsoft Corporation) C:\Windows\system32\apprepsync.dll
2017-08-10 15:08 - 2017-08-01 20:46 - 000176128 _____ (Microsoft Corporation) C:\Windows\system32\apprepapi.dll
2017-08-10 15:08 - 2017-08-01 20:46 - 000094720 _____ (Microsoft Corporation) C:\Windows\system32\wercplsupport.dll
2017-08-10 15:08 - 2017-08-01 20:45 - 000456192 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2017-08-10 15:08 - 2017-08-01 20:45 - 000451072 _____ (Microsoft Corporation) C:\Windows\system32\werui.dll
2017-08-10 15:08 - 2017-08-01 20:45 - 000171008 _____ (Microsoft Corporation) C:\Windows\system32\DWWIN.EXE
2017-08-10 15:08 - 2017-08-01 20:44 - 001010176 _____ (Microsoft Corporation) C:\Windows\system32\enterprisecsps.dll
2017-08-10 15:08 - 2017-08-01 20:43 - 000945664 _____ (Microsoft Corporation) C:\Windows\system32\iphlpsvc.dll
2017-08-10 15:08 - 2017-08-01 20:43 - 000156672 _____ (Microsoft Corporation) C:\Windows\system32\wersvc.dll
2017-08-10 15:08 - 2017-08-01 20:42 - 006288384 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.dll
2017-08-10 15:08 - 2017-08-01 20:41 - 002222080 _____ (Microsoft Corporation) C:\Windows\system32\certmgr.dll
2017-08-10 15:08 - 2017-08-01 20:40 - 000945664 _____ (Microsoft Corporation) C:\Windows\system32\WpcWebFilter.dll
2017-08-10 15:08 - 2017-08-01 20:39 - 001281536 _____ (Microsoft Corporation) C:\Windows\system32\werconcpl.dll
2017-08-10 15:08 - 2017-08-01 20:39 - 000353280 _____ (Microsoft Corporation) C:\Windows\system32\windows.immersiveshell.serviceprovider.dll
2017-08-10 15:08 - 2017-08-01 20:39 - 000323072 _____ (Microsoft Corporation) C:\Windows\system32\ncryptprov.dll
2017-08-10 15:08 - 2017-08-01 20:38 - 013441536 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
2017-08-10 15:08 - 2017-08-01 20:38 - 001589760 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2017-08-10 15:08 - 2017-08-01 20:37 - 013091328 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2017-08-10 15:08 - 2017-08-01 20:36 - 023677440 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2017-08-10 15:08 - 2017-08-01 20:36 - 000295424 _____ (Microsoft Corporation) C:\Windows\system32\dlnashext.dll
2017-08-10 15:08 - 2017-08-01 20:34 - 001837056 _____ (Microsoft Corporation) C:\Windows\system32\workfolderssvc.dll
2017-08-10 15:08 - 2017-08-01 20:33 - 004749824 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers_nt.dll
2017-08-10 15:08 - 2017-08-01 20:33 - 000167936 _____ (Microsoft Corporation) C:\Windows\system32\ErrorDetails.dll
2017-08-10 15:08 - 2017-08-01 20:32 - 000821248 _____ (Microsoft Corporation) C:\Windows\system32\comuid.dll
2017-08-10 15:08 - 2017-08-01 20:30 - 000913920 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.dll
2017-08-10 15:08 - 2017-08-01 20:29 - 002852864 _____ (Microsoft Corporation) C:\Windows\system32\SystemSettingsThresholdAdminFlowUI.dll
2017-08-10 15:08 - 2017-08-01 20:28 - 002895360 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2017-08-10 15:08 - 2017-08-01 20:28 - 001490432 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2017-08-10 15:08 - 2017-08-01 20:27 - 004149248 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2017-08-10 15:08 - 2017-08-01 20:27 - 000716800 _____ (Microsoft Corporation) C:\Windows\system32\ShareHost.dll
2017-08-10 15:08 - 2017-08-01 20:26 - 001949696 _____ (Microsoft Corporation) C:\Windows\system32\PeerDistSvc.dll
2017-08-10 15:08 - 2017-08-01 20:26 - 000701952 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.Connectivity.dll
2017-08-10 15:08 - 2017-08-01 20:24 - 000924672 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Networking.BackgroundTransfer.dll
2017-08-10 15:08 - 2017-08-01 20:23 - 000886784 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll
2017-08-10 15:08 - 2017-07-12 08:16 - 000646688 _____ (Microsoft Corporation) C:\Windows\system32\dnsapi.dll
2017-08-10 15:08 - 2017-07-12 08:15 - 002213760 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll
2017-08-10 15:08 - 2017-07-12 08:15 - 000101216 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2017-08-10 15:08 - 2017-07-12 08:14 - 001886896 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2017-08-10 15:08 - 2017-07-12 08:13 - 002253664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2017-08-10 15:08 - 2017-07-12 08:09 - 001181024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2017-08-10 15:08 - 2017-07-12 08:02 - 002186592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys
2017-08-10 15:08 - 2017-07-12 08:02 - 000402776 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys
2017-08-10 15:08 - 2017-07-12 08:01 - 000715104 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\vhdmp.sys
2017-08-10 15:08 - 2017-07-12 08:01 - 000156000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wfplwfs.sys
2017-08-10 15:08 - 2017-07-12 08:00 - 000160608 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\pacer.sys
2017-08-10 15:08 - 2017-07-12 08:00 - 000095584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\sdstor.sys
2017-08-10 15:08 - 2017-07-12 07:59 - 001100128 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2017-08-10 15:08 - 2017-07-12 07:59 - 000989024 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2017-08-10 15:08 - 2017-07-12 07:59 - 000947040 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.efi
2017-08-10 15:08 - 2017-07-12 07:59 - 000857952 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupEngine.dll
2017-08-10 15:08 - 2017-07-12 07:59 - 000148832 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupApi.dll
2017-08-10 15:08 - 2017-07-12 07:56 - 000277856 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2017-08-10 15:08 - 2017-07-12 07:55 - 004674872 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2017-08-10 15:08 - 2017-07-12 07:25 - 000066560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\wcnfs.sys
2017-08-10 15:08 - 2017-07-12 07:24 - 000025088 _____ (Microsoft Corporation) C:\Windows\system32\perfnet.dll
2017-08-10 15:08 - 2017-07-12 07:24 - 000013824 _____ (Microsoft Corporation) C:\Windows\system32\dabapi.dll
2017-08-10 15:08 - 2017-07-12 07:23 - 000328192 _____ (Microsoft Corporation) C:\Windows\system32\container.dll
2017-08-10 15:08 - 2017-07-12 07:23 - 000084480 _____ (Microsoft Corporation) C:\Windows\system32\frprov.dll
2017-08-10 15:08 - 2017-07-12 07:22 - 000033280 _____ (Microsoft Corporation) C:\Windows\system32\wcimage.dll
2017-08-10 15:08 - 2017-07-12 07:21 - 000329728 _____ (Microsoft Corporation) C:\Windows\system32\wc_storage.dll
2017-08-10 15:08 - 2017-07-12 07:21 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\dab.dll
2017-08-10 15:08 - 2017-07-12 07:21 - 000042496 _____ (Microsoft Corporation) C:\Windows\system32\nshhttp.dll
2017-08-10 15:08 - 2017-07-12 07:20 - 000031232 _____ (Microsoft Corporation) C:\Windows\system32\httpapi.dll
2017-08-10 15:08 - 2017-07-12 07:19 - 000488960 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupShim.dll
2017-08-10 15:08 - 2017-07-12 07:19 - 000463872 _____ (Microsoft Corporation) C:\Windows\system32\daxexec.dll
2017-08-10 15:08 - 2017-07-12 07:19 - 000156160 _____ (Microsoft Corporation) C:\Windows\system32\fdeploy.dll
2017-08-10 15:08 - 2017-07-12 07:16 - 000431616 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2017-08-10 15:08 - 2017-07-12 07:16 - 000142848 _____ (Microsoft Corporation) C:\Windows\system32\profsvcext.dll
2017-08-10 15:08 - 2017-07-12 07:15 - 000265216 _____ (Microsoft Corporation) C:\Windows\system32\dnsrslvr.dll
2017-08-10 15:08 - 2017-07-12 07:13 - 001478656 _____ (Microsoft Corporation) C:\Windows\system32\RecoveryDrive.exe
2017-08-10 15:08 - 2017-07-12 07:12 - 000970240 _____ (Microsoft Corporation) C:\Windows\system32\autochk.exe
2017-08-10 15:08 - 2017-07-12 07:12 - 000035328 _____ (Microsoft Corporation) C:\Windows\system32\iscsium.dll
2017-08-10 15:08 - 2017-07-12 07:11 - 000576512 _____ (Microsoft Corporation) C:\Windows\system32\untfs.dll
2017-08-10 15:08 - 2017-07-12 07:10 - 000927232 _____ (Microsoft Corporation) C:\Windows\system32\autofmt.exe
2017-08-10 15:08 - 2017-07-12 07:07 - 000954880 _____ (Microsoft Corporation) C:\Windows\system32\autoconv.exe
2017-08-10 15:08 - 2017-07-12 07:07 - 000629248 _____ (Microsoft Corporation) C:\Windows\system32\uReFS.dll
2017-08-10 15:08 - 2017-07-12 07:06 - 000956416 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.desktop.dll
2017-08-10 15:08 - 2017-07-12 07:06 - 000937984 _____ (Microsoft Corporation) C:\Windows\system32\MCRecvSrc.dll
2017-08-10 15:08 - 2017-07-12 07:03 - 001692160 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentExtensions.onecore.dll
2017-08-10 15:08 - 2017-07-12 07:03 - 000779776 _____ (Microsoft Corporation) C:\Windows\system32\cscui.dll
2017-08-10 15:08 - 2017-07-12 07:01 - 002279424 _____ (Microsoft Corporation) C:\Windows\system32\AppXDeploymentServer.dll
2017-08-10 15:08 - 2017-07-12 07:01 - 000266752 _____ (Microsoft Corporation) C:\Windows\system32\NetSetupSvc.dll
2017-08-10 15:08 - 2017-07-12 07:00 - 002370048 _____ (Microsoft Corporation) C:\Windows\system32\wlansvc.dll
2017-08-10 15:08 - 2017-07-12 06:59 - 006664192 _____ (Microsoft Corporation) C:\Windows\system32\mspaint.exe
2017-08-10 15:08 - 2017-07-12 06:59 - 000632320 _____ (Microsoft Corporation) C:\Windows\system32\rasapi32.dll
2017-08-10 15:08 - 2017-07-12 06:58 - 001231872 _____ (Microsoft Corporation) C:\Windows\system32\dosvc.dll
2017-08-10 15:08 - 2017-07-12 06:58 - 001130496 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2017-08-10 15:08 - 2017-07-12 06:57 - 000735744 _____ (Microsoft Corporation) C:\Windows\system32\LogonController.dll
2017-08-10 15:08 - 2017-07-12 06:56 - 001826816 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2017-08-10 15:08 - 2017-03-04 08:57 - 000372432 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.MediaControl.dll
2017-08-10 15:08 - 2017-03-04 08:16 - 000187904 _____ (Microsoft Corporation) C:\Windows\system32\dialclient.dll
2017-08-10 15:08 - 2016-09-07 07:24 - 000057400 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2017-08-09 21:04 - 2017-08-09 21:04 - 001015880 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2017-08-09 21:04 - 2017-08-09 21:04 - 000146704 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys
2017-08-09 08:00 - 2017-08-09 08:00 - 001060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll
2017-08-09 08:00 - 2017-08-09 08:00 - 000348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll
2017-08-09 07:52 - 2017-08-09 08:54 - 000000000 ___RD C:\Run-Command 2.72 Portable
2017-08-08 18:56 - 2017-08-08 19:03 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-08-08 18:56 - 2017-08-08 19:02 - 000000000 ____D C:\Users\rc692\AppData\LocalLow\Mozilla
2017-08-08 18:56 - 2017-08-08 19:01 - 000000000 ____D C:\Users\rc692\AppData\Local\Mozilla
2017-08-08 18:56 - 2017-08-08 18:56 - 000001011 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-08-08 18:56 - 2017-08-08 18:56 - 000000999 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-08-08 18:56 - 2017-08-08 18:56 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Mozilla
2017-08-08 18:56 - 2017-08-08 18:56 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-08 18:54 - 2017-08-08 18:55 - 037313520 _____ (Mozilla) C:\Users\rc692\Downloads\Firefox Setup 55.0.exe
2017-08-08 08:45 - 2017-08-08 08:45 - 000003396 _____ C:\Windows\System32\Tasks\GlaryInitialize 5
2017-08-08 08:43 - 2017-08-08 08:43 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Obsidium
2017-08-08 08:43 - 2017-04-11 11:57 - 000112840 _____ (Wondershare Software) C:\Windows\system32\WSPDFelementMonitor.dll
2017-08-08 08:42 - 2017-08-08 08:42 - 000001310 _____ C:\Users\Public\Desktop\PDFelement 6 Pro.lnk
2017-08-08 08:42 - 2017-08-08 08:42 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2017-08-08 08:42 - 2017-08-08 08:42 - 000000000 ____D C:\ProgramData\PDFelement 6 Pro
2017-08-06 12:06 - 2017-08-06 12:06 - 000008192 _____ C:\Windows\system32\config\userdiff
2017-08-06 10:52 - 2017-08-07 07:14 - 000003813 _____ C:\Windows\diagwrn.xml
2017-08-06 10:52 - 2017-08-07 07:14 - 000003813 _____ C:\Windows\diagerr.xml
2017-08-03 11:24 - 2017-08-14 09:39 - 000296720 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-03 08:04 - 2017-08-14 14:14 - 000004174 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{6B454733-6D60-4A62-9FF8-27B162EEF0D2}
2017-08-03 07:51 - 2017-08-03 07:51 - 000000734 __RSH C:\ProgramData\ntuser.pol
2017-08-03 07:35 - 2017-08-03 07:38 - 000000000 ____D C:\Users\rc692\Documents\MacPaw CleanMyPC 1.8.8.962 + Patch [CracksNow]
2017-07-31 16:58 - 2017-07-31 16:58 - 000000000 ____D C:\Users\rc692\AppData\Local\SSScan
2017-07-31 10:11 - 2017-08-11 18:40 - 000000000 ____D C:\Users\rc692\AppData\Local\Wondershare
2017-07-31 10:11 - 2015-02-27 10:35 - 000000232 _____ C:\Windows\SysWOW64\dllhost.exe.config
2017-07-31 10:08 - 2017-08-14 08:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-07-31 10:08 - 2017-08-11 18:38 - 000000000 ____D C:\Program Files (x86)\Wondershare
2017-07-31 09:48 - 2017-08-04 18:40 - 000001127 _____ C:\Users\rc692\Desktop\USBDeview.cfg
2017-07-31 09:48 - 2015-09-19 08:12 - 000171616 _____ (NirSoft) C:\Users\rc692\Desktop\USBDeview.exe
2017-07-27 09:33 - 2017-07-27 09:33 - 000000000 ____D C:\Users\rc692\Desktop\Atlas
2017-07-23 08:12 - 2017-08-11 18:40 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Wondershare
2017-07-20 18:43 - 2017-07-20 18:43 - 000003996 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1492185044
2017-07-20 18:43 - 2017-07-20 18:43 - 000001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Navigateur Opera.lnk
2017-07-20 07:29 - 2017-07-20 07:29 - 000000000 ____D C:\Users\Public\Documents\sun
2017-07-19 19:44 - 2017-07-19 19:44 - 051580928 _____ C:\Windows\system32\config\COMPONENTS.iobit
2017-07-19 17:38 - 2017-07-19 17:38 - 000400464 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2017-07-19 17:38 - 2017-07-19 17:38 - 000343288 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbloga.sys
2017-07-19 17:38 - 2017-07-19 17:38 - 000320008 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2017-07-19 17:38 - 2017-07-19 17:38 - 000198976 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbidsha.sys
2017-07-19 17:38 - 2017-07-19 17:38 - 000146664 _____ (AVAST Software) C:\Windows\system32\Drivers\aswmonflt.sys.150047872971803
2017-07-19 17:38 - 2017-07-19 17:38 - 000061304 _____ () C:\Windows\system32\Drivers\lpsport.sys
2017-07-19 17:38 - 2017-07-19 17:38 - 000057728 _____ (AVAST Software s.r.o.) C:\Windows\system32\Drivers\aswbuniva.sys
2017-07-19 17:38 - 2017-07-19 17:38 - 000003994 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2017-07-19 17:38 - 2017-07-03 12:50 - 000585608 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2017-07-19 17:38 - 2017-07-03 12:50 - 000361336 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2017-07-19 17:38 - 2017-07-03 12:50 - 000198768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2017-07-19 17:38 - 2017-07-03 12:50 - 000110352 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2017-07-19 17:38 - 2017-07-03 12:50 - 000084392 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2017-07-19 17:38 - 2017-07-03 12:50 - 000046984 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2017-07-19 17:38 - 2017-07-03 12:49 - 000554528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNetSec.sys
2017-07-19 17:38 - 2017-07-03 12:49 - 000041800 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2017-07-18 11:05 - 2017-08-07 09:27 - 000000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 5.3
2017-07-18 11:05 - 2017-07-18 11:05 - 000001209 _____ C:\Users\Public\Desktop\LibreOffice 5.3.lnk
2017-07-18 09:48 - 2017-07-18 09:48 - 000020160 _____ (Glarysoft Ltd) C:\Windows\system32\Drivers\GUSBootStartup.sys
2017-07-18 08:20 - 2017-07-18 08:20 - 000000000 ____D C:\Users\rc692\AppData\Roaming\dvdcss
2017-07-16 21:09 - 2017-07-04 14:07 - 007137216 _____ (Geek Unіnstaller) C:\Users\rc692\Desktop\geek.exe
2017-07-16 17:28 - 2017-07-16 17:28 - 000000620 _____ C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Downloads.lnk
2017-07-16 14:32 - 2017-07-16 14:32 - 000000000 ____D C:\Users\rc692\AppData\Local\Black Bird Cleaner Software
2017-07-15 19:36 - 2017-07-15 19:36 - 000001331 _____ C:\Users\Public\Desktop\Ashampoo Photo Commander 15.lnk
2017-07-15 19:36 - 2017-07-15 19:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2017-07-15 19:36 - 2017-07-15 19:36 - 000000000 ____D C:\Program Files (x86)\Ashampoo
==================== Un mois - Modifiés - fichiers et dossiers ========
(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)
2017-08-14 14:12 - 2017-04-11 19:05 - 009897758 _____ C:\Windows\system32\PerfStringBackup.INI
2017-08-14 14:12 - 2016-07-17 00:40 - 004981232 _____ C:\Windows\system32\perfh00C.dat
2017-08-14 14:12 - 2016-07-17 00:40 - 001427502 _____ C:\Windows\system32\perfc00C.dat
2017-08-14 14:07 - 2017-04-11 19:18 - 000000000 ____D C:\Program Files (x86)\Glary Utilities 5
2017-08-14 14:06 - 2017-04-11 19:28 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-14 14:06 - 2017-04-11 18:54 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-14 14:06 - 2016-07-16 08:04 - 000524288 _____ C:\Windows\system32\config\BBI
2017-08-14 13:52 - 2017-04-12 07:18 - 000000000 ____D C:\Users\rc692\AppData\Local\CrashDumps
2017-08-14 13:48 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\AppReadiness
2017-08-14 13:45 - 2017-04-11 19:23 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Yamicsoft
2017-08-14 13:39 - 2016-07-16 13:45 - 000000000 ____D C:\Windows\INF
2017-08-14 10:44 - 2017-05-25 08:47 - 000000000 ____D C:\Users\rc692\AppData\Roaming\vlc
2017-08-14 10:21 - 2017-04-12 17:45 - 000000000 ____D C:\Users\rc692\Downloads\Video
2017-08-14 08:28 - 2017-04-11 21:35 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Notepad++
2017-08-14 08:16 - 2017-04-11 18:54 - 000000000 ____D C:\Windows\system32\SleepStudy
2017-08-13 20:21 - 2016-07-16 13:47 - 000000000 ___HD C:\Program Files\WindowsApps
2017-08-12 20:11 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-08-12 17:52 - 2017-04-11 19:14 - 000000000 ____D C:\Users\rc692\AppData\Roaming\BitComet
2017-08-12 11:31 - 2017-04-11 19:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tracker Software
2017-08-12 07:33 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\rescache
2017-08-12 07:10 - 2017-04-11 19:21 - 000000000 ____D C:\Program Files\Tracker Software
2017-08-11 18:38 - 2017-07-03 22:12 - 000000000 ____D C:\ProgramData\Wondershare
2017-08-10 17:56 - 2017-04-11 19:00 - 000000000 ____D C:\Users\rc692
2017-08-10 17:00 - 2017-04-11 19:01 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-08-10 16:57 - 2016-07-17 00:46 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ___RD C:\Program Files\Windows Defender
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\system32\oobe
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\ShellExperiences
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\Provisioning
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\PolicyDefinitions
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\bcastdvr
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2017-08-10 16:57 - 2016-07-16 13:47 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2017-08-10 15:20 - 2016-07-16 13:36 - 000000000 ____D C:\Windows\CbsTemp
2017-08-10 15:16 - 2017-04-11 19:36 - 000000000 ____D C:\Windows\system32\MRT
2017-08-10 15:13 - 2017-04-11 19:35 - 140394280 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2017-08-10 15:06 - 2017-04-11 19:11 - 000002270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-08-10 15:06 - 2017-04-11 19:11 - 000002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-10 15:05 - 2017-04-12 17:45 - 000000000 ____D C:\Users\rc692\Downloads\Compressed
2017-08-10 15:03 - 2017-05-24 15:32 - 000004772 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2017-08-10 15:03 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\system32\Macromed
2017-08-09 21:12 - 2017-04-11 19:08 - 000000000 ____D C:\ProgramData\Unchecky
2017-08-09 08:52 - 2017-05-31 20:36 - 000001850 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Q-Dir.lnk
2017-08-09 08:52 - 2017-05-31 20:36 - 000001844 _____ C:\Users\Public\Desktop\Q-Dir.lnk
2017-08-09 08:52 - 2017-05-31 20:33 - 000000000 ____D C:\Program Files\Q-Dir
2017-08-08 11:18 - 2016-12-13 19:33 - 000000000 ____D C:\Users\rc692\Documents\PDF
2017-08-08 08:45 - 2017-04-11 19:18 - 000001161 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5.lnk
2017-08-08 08:45 - 2017-04-11 19:18 - 000001149 _____ C:\Users\Public\Desktop\Glary Utilities 5.lnk
2017-08-08 08:43 - 2017-04-11 19:21 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-07 09:28 - 2017-07-07 07:02 - 000000000 ____D C:\Windows\system32\UNP
2017-08-07 09:28 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2017-08-07 09:28 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\system32\spool
2017-08-07 09:28 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\system32\NDF
2017-08-07 09:27 - 2017-07-14 09:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2017-08-07 09:27 - 2017-07-07 07:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ACD Systems
2017-08-07 09:27 - 2017-07-06 18:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet (64-bit)
2017-08-07 09:27 - 2017-05-31 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Q-Dir
2017-08-07 09:27 - 2017-05-25 08:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2017-08-07 09:27 - 2017-05-19 11:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FILEminimizer Suite 8.0
2017-08-07 09:27 - 2017-05-16 07:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FastStone Capture
2017-08-07 09:27 - 2017-05-09 08:29 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-07 09:27 - 2017-05-09 08:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2017-08-07 09:27 - 2017-04-30 07:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Explorer
2017-08-07 09:27 - 2017-04-28 09:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\(Default)
2017-08-07 09:27 - 2017-04-16 09:33 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SuperCopier2
2017-08-07 09:27 - 2017-04-11 21:42 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unlocker
2017-08-07 09:27 - 2017-04-11 21:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++
2017-08-07 09:27 - 2017-04-11 21:34 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers
2017-08-07 09:27 - 2017-04-11 20:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DLL Suite 9.0
2017-08-07 09:27 - 2017-04-11 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Folderico
2017-08-07 09:27 - 2017-04-11 19:31 - 000000000 ____D C:\ProgramData\Samsung
2017-08-07 09:27 - 2017-04-11 19:27 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2017-08-07 09:27 - 2017-04-11 19:27 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2017-08-07 09:27 - 2017-04-11 19:22 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\QTranslate
2017-08-07 09:27 - 2017-04-11 19:22 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NFOPad
2017-08-07 09:27 - 2017-04-11 19:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities 5
2017-08-07 09:27 - 2017-04-11 19:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ad Muncher
2017-08-07 09:27 - 2017-04-11 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IObit Uninstaller
2017-08-07 09:27 - 2017-04-11 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unchecky
2017-08-07 09:27 - 2016-07-16 13:47 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2017-08-07 09:27 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\LiveKernelReports
2017-08-07 09:27 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\Cursors
2017-08-07 07:18 - 2017-04-11 19:53 - 000000000 ____D C:\Windows\Panther
2017-08-07 07:17 - 2017-04-11 19:53 - 000008192 __RSH C:\BOOTSECT.BAK
2017-08-07 07:15 - 2016-07-16 13:47 - 000000000 ____D C:\Windows\Registration
2017-08-06 15:49 - 2017-04-11 18:58 - 000000000 ____D C:\Users\defaultuser0
2017-08-02 07:42 - 2017-04-27 19:07 - 000160256 ___SH C:\Users\rc692\Desktop\Thumbs.db
2017-07-31 18:56 - 2017-04-20 18:31 - 000000000 ___RD C:\Users\rc692\Documents\Scan
2017-07-31 10:15 - 2017-07-03 22:13 - 000000000 ____D C:\Users\rc692\Documents\Wondershare MediaServer
2017-07-31 10:13 - 2017-04-11 20:42 - 000000000 ____D C:\Program Files (x86)\DLL Suite
2017-07-31 10:06 - 2017-04-11 21:42 - 000000000 ____D C:\Program Files\Unlocker
2017-07-27 09:40 - 2017-04-28 09:53 - 000000105 _____ C:\Windows\KaceHD410.ini
2017-07-25 09:37 - 2017-04-11 19:01 - 000000000 ____D C:\Users\rc692\AppData\Local\Packages
2017-07-25 08:08 - 2017-02-28 07:50 - 000000000 ___RD C:\Users\rc692\Documents\PDF-Disques.Series
2017-07-20 18:43 - 2017-04-14 17:50 - 000000000 ____D C:\Program Files (x86)\Opera
2017-07-20 07:52 - 2017-07-14 07:45 - 000000000 ____D C:\ProgramData\IObit
2017-07-20 07:52 - 2017-04-20 15:05 - 000000000 ____D C:\AdwCleaner
2017-07-20 07:52 - 2017-04-11 19:09 - 000000000 ____D C:\Users\rc692\AppData\LocalLow\IObit
2017-07-20 07:52 - 2017-04-11 19:09 - 000000000 ____D C:\Program Files (x86)\IObit
2017-07-20 07:52 - 2017-04-11 19:07 - 000000000 ____D C:\Users\rc692\AppData\Roaming\IObit
2017-07-20 07:44 - 2017-05-25 08:48 - 000000000 ____D C:\Program Files (x86)\Mirillis
2017-07-20 07:43 - 2017-05-27 11:34 - 000000000 ____D C:\Program Files (x86)\Glarysoft
2017-07-20 07:43 - 2017-04-11 19:18 - 000000000 ____D C:\Users\rc692\AppData\Roaming\GlarySoft
2017-07-18 11:05 - 2017-04-19 11:39 - 000000000 ____D C:\Program Files\LibreOffice 5
2017-07-18 08:21 - 2017-05-23 07:52 - 000000000 ____D C:\Users\rc692\Documents\Distributeur Atlas
2017-07-18 08:19 - 2017-04-11 22:01 - 000000000 ____D C:\ProgramData\GlarySoft
2017-07-16 14:33 - 2017-04-11 19:06 - 000000000 ____D C:\Program Files\WinRAR
2017-07-16 14:32 - 2017-04-19 14:16 - 000000000 ____D C:\Users\rc692\AppData\Roaming\Thinstall
2017-07-16 14:32 - 2017-04-19 14:16 - 000000000 ____D C:\Users\rc692\AppData\Local\Thinstall
2017-07-15 19:36 - 2017-04-11 21:00 - 000000000 ____D C:\ProgramData\Ashampoo
2017-07-15 12:10 - 2017-05-25 08:57 - 000000000 ____D C:\Users\rc692\AppData\Local\Mirillis
2017-07-15 07:51 - 2017-04-28 09:52 - 000000000 ____D C:\Program Files (x86)\Atlas HD-x00 AIO PC Tools
==================== Fichiers à la racine de certains dossiers =======
2017-04-13 06:39 - 2017-04-13 06:39 - 000292878 ___SH () C:\Program Files\ShedkoFolderico4_7926157.ico
2017-04-13 06:39 - 2017-04-13 06:39 - 000292878 ___SH () C:\Program Files (x86)\ShedkoFolderico4_1179619847.ico
2017-05-12 07:43 - 2017-05-12 07:43 - 000000016 _____ () C:\ProgramData\mntemp
Fichiers à déplacer ou supprimer:
====================
C:\Users\rc692\ZHPCleaner.exe
==================== Bamital & volsnap ======================
(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)
C:\Windows\system32\winlogon.exe => Le fichier est signé numériquement
C:\Windows\system32\wininit.exe => Le fichier est signé numériquement
C:\Windows\explorer.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\Windows\system32\svchost.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\Windows\system32\services.exe => Le fichier est signé numériquement
C:\Windows\system32\User32.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\Windows\system32\userinit.exe => Le fichier est signé numériquement
C:\Windows\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\Windows\system32\rpcss.dll => Le fichier est signé numériquement
C:\Windows\system32\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\Windows\system32\Drivers\volsnap.sys => Le fichier est signé numériquement
LastRegBack: 2017-08-06 07:22
==================== Fin de FRST.txt ============================