Résultats d'analyse de Farbar Recovery Scan Tool (FRST) (x64) Version: 11-10-2017
Exécuté par Administrateur (administrateur) sur TITI-ANNAPC (13-10-2017 17:31:11)
Exécuté depuis C:\Users\Administrateur.Titi-annaPC\Desktop
Profils chargés: Administrateur & (Profils disponibles: Titianna & hugo & Administrateur)
Platform: Windows 10 Home Version 1703 170317-1834 (X64) Langue: Français (France)
Internet Explorer Version 11 (Navigateur par défaut: Edge)
Mode d'amorçage: Normal
Tutoriel pour Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processus (Avec liste blanche) =================

(Si un élément est inclus dans le fichier fixlist.txt, le processus sera arrêté. Le fichier ne sera pas déplacé.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Outertech) C:\Program Files\Cacheman\CachemanServ.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Greatis Software) C:\Program Files (x86)\UnHackMe\hackmon.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
() C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Lenovo) C:\Program Files\Lenovo\Lenovo Solution Center\LSCNotify.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe

==================== Registre (Avec liste blanche) ===========================

(Si un élément est inclus dans le fichier fixlist.txt, l'élément de Registre sera restauré à la valeur par défaut ou supprimé. Le fichier ne sera pas déplacé.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [18381792 2017-08-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_Dolby] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489920 2017-08-15] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_LENOVO_MICPKEY] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1489920 2017-08-15] (Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [287592 2013-08-07] (Intel Corporation)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM\...\Run: [Windows Mobile Device Center] => C:\WINDOWS\WindowsMobile\wmdc.exe [660360 2007-05-31] (Microsoft Corporation)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17718904 2017-06-08] (Logitech Inc.)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [3146704 2017-05-09] (Malwarebytes)
Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X]
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3068704 2017-08-05] (Valve Corporation)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [908160 2010-03-16] (Microsoft Corporation)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [Spotify Web Helper] => C:\Users\Titianna\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-03-08] (Spotify Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [Spotify] => C:\Users\Titianna\AppData\Roaming\Spotify\Spotify.exe [7114352 2017-03-08] (Spotify Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [Discord] => C:\Users\Titianna\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1052488 2017-09-10] ()
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-06] (Disc Soft Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\...\MountPoints2: {848d4b36-6230-11e6-9609-806e6f6e6963} - "D:\setup.exe"
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3068704 2017-08-05] (Valve Corporation)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [OfficeSyncProcess] => C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE [908160 2010-03-16] (Microsoft Corporation)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [Spotify Web Helper] => C:\Users\Titianna\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1446000 2017-03-08] (Spotify Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [Spotify] => C:\Users\Titianna\AppData\Roaming\Spotify\Spotify.exe [7114352 2017-03-08] (Spotify Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [Discord] => C:\Users\Titianna\AppData\Local\Discord\app-0.0.297\Discord.exe [64290304 2017-01-04] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1052488 2017-09-10] ()
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [4701888 2017-02-06] (Disc Soft Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27742168 2017-06-07] (Skype Technologies S.A.)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\...\MountPoints2: {848d4b36-6230-11e6-9609-806e6f6e6963} - "D:\setup.exe"
HKU\S-1-5-21-1114435371-2908550854-996330473-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958714\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517120 2017-03-18] (Microsoft Corporation)
HKU\S-1-5-21-1114435371-2908550854-996330473-1003-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026860\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517120 2017-03-18] (Microsoft Corporation)
HKU\S-1-5-21-1114435371-2908550854-996330473-500\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5913720 2017-05-23] (Safer-Networking Ltd.)
HKU\S-1-5-21-1114435371-2908550854-996330473-500\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-500\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958835\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5913720 2017-05-23] (Safer-Networking Ltd.)
HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958835\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958835\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173027058\...\Run: [Spybot-S&D Cleaning] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDCleaner.exe [5913720 2017-05-23] (Safer-Networking Ltd.)
HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173027058\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [9832152 2017-08-03] (Piriform Ltd)
HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173027058\...\Policies\Explorer: [NoDesktopCleanupWizard] 1
Startup: C:\Users\Titianna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Alertes de surveillance de l'encre - HP Deskjet 2540 series.lnk [2017-02-18]
ShortcutTarget: Alertes de surveillance de l'encre - HP Deskjet 2540 series.lnk -> C:\Program Files\HP\HP Deskjet 2540 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)
BootExecute: autocheck autochk * Partizan

==================== Internet (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, s'il s'agit d'un élément du Registre, il sera supprimé ou restauré à la valeur par défaut.)

Hosts: Il y a plus d'un élément dans hosts. Voir la section Hosts de Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.0.254
Tcpip\Parameters: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{2750395d-8a7b-11e7-8c49-806e6f6e6963}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{430fa53a-5013-4f4e-9959-02a2e61e4bc6}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{5d2f762e-fd4f-42e3-9794-743e12374728}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{a157cd27-cd2b-4daa-9a09-fc7544801067}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{a157cd27-cd2b-4daa-9a09-fc7544801067}: [DhcpNameServer] 192.168.0.254
Tcpip\..\Interfaces\{d0f6180e-4b4a-41ee-876a-9817005afbf3}: [NameServer] 8.8.8.8
Tcpip\..\Interfaces\{f18db2a2-64f6-4325-bb8e-b33c2b21e328}: [DhcpNameServer] 192.168.0.254

Internet Explorer:
==================
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131282805724173980&GUID=1FE8243F-BFC2-41B6-BDC4-BD416FC889A0
HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://go.microsoft.com/fwlink/?LinkID=617910&ResetID=131282805724173980&GUID=1FE8243F-BFC2-41B6-BDC4-BD416FC889A0
SearchScopes: HKU\S-1-5-21-1114435371-2908550854-996330473-500 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958835 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1114435371-2908550854-996330473-500-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173027058 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-26] (Oracle Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-26] (Oracle Corporation)

FireFox:
========
FF DefaultProfile: yomjpx8a.default
FF ProfilePath: C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Mozilla\Firefox\Profiles\yomjpx8a.default [2017-10-13]
FF NewTab: Mozilla\Firefox\Profiles\yomjpx8a.default ->
FF Homepage: Mozilla\Firefox\Profiles\yomjpx8a.default -> about:blank
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_26_0_0_137.dll [2017-07-13] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_137.dll [2017-07-13] ()
FF Plugin-x32: @haitao.com/npHaitaoPlugin -> C:\Users\Titianna\AppData\Local\htyh\application\htwebHelper.dll [Pas de fichier]
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-26] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017172958349: @squareclock.com/SQ3DPlayer_Production_Castorama_Internet -> C:\Users\Titianna\AppData\Local\SquareClock.Production_Castorama_Internet\NPSQ3D.dll [2016-12-31] (SquareClock SAS)
FF Plugin HKU\S-1-5-21-1114435371-2908550854-996330473-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-10132017173026662: @squareclock.com/SQ3DPlayer_Production_Castorama_Internet -> C:\Users\Titianna\AppData\Local\SquareClock.Production_Castorama_Internet\NPSQ3D.dll [2016-12-31] (SquareClock SAS)
FF ExtraCheck: C:\Program Files (x86)\mozilla firefox\defaults\pref\enpsysau.js [2017-08-16]

Chrome:
=======
CHR Profile: C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default [2017-10-13]
CHR Extension: (Slides) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-12]
CHR Extension: (Docs) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-12]
CHR Extension: (Google Drive) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-10-08]
CHR Extension: (YouTube) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-10-08]
CHR Extension: (Adobe Acrobat) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-10-08]
CHR Extension: (Sheets) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-12]
CHR Extension: (Google Docs hors connexion) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-10-12]
CHR Extension: (Paiements via le Chrome Web Store) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-10-08]
CHR Extension: (Gmail) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-10-08]
CHR Extension: (Chrome Media Router) - C:\Users\Administrateur.Titi-annaPC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-10-08]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx

==================== Services (Avec liste blanche) ====================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc.)
S3 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [404816 2017-10-02] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1517576 2017-06-15] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-11-07] (BitRaider, LLC)
S4 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [437880 2015-10-08] (BlueStack Systems, Inc.)
S4 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [417400 2015-10-08] (BlueStack Systems, Inc.)
S4 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [855672 2015-10-08] (BlueStack Systems, Inc.)
R2 CachemanService; C:\Program Files\Cacheman\CachemanServ.exe [500936 2017-03-30] (Outertech)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [1471168 2017-02-06] (Disc Soft Ltd)
S4 hddrsrv; C:\Program Files (x86)\HDD Regenerator\hrsrv.exe [82144 2013-05-08] ()
S4 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
S4 ImControllerService; C:\Program Files\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [59216 2016-07-01] (Lenovo Group Limited)
S4 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
S4 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Fichier non signé]
S4 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Fichier non signé]
S4 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [223008 2015-06-24] (Intel Corporation)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-06-08] (Logitech Inc.)
S4 LSC.Services.SystemService; C:\Program Files\Lenovo\Lenovo Solution Center\App\LSC.Services.SystemService.exe [273232 2016-06-02] (Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4470736 2017-05-09] (Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2122248 2017-02-13] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2184208 2017-02-13] (Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1450824 2017-09-10] (Overwolf LTD)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1269824 2017-06-21] (Bitdefender)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1776864 2017-05-23] (Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2131760 2017-05-23] (Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233936 2017-05-23] (Safer-Networking Ltd.)
S2 STCServ; C:\Program Files\Intel\STCServ\STCServ.exe [8095456 2015-03-16] (Intel Corporation)
S4 SUService; C:\Program Files (x86)\Lenovo\System Update\SUService.exe [21536 2016-05-25] ()
S4 SZDrvSvc; C:\Program Files (x86)\Clarus\Samsung Drive Manager\SZDrvSvc.exe [18432 2015-08-19] (Clarus, Inc.) [Fichier non signé]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10351856 2016-12-15] (TeamViewer GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [342264 2017-03-18] (Microsoft Corporation)
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [2136480 2017-07-11] (Microsoft Corporation)
S4 XTU3SERVICE; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe [19192 2015-09-30] (Intel(R) Corporation)

===================== Pilotes (Avec liste blanche) ======================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)

S3 AcpiCtlDrv; C:\WINDOWS\System32\drivers\AcpiCtlDrv.sys [25880 2012-07-17] (Intel Corporation)
S0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [49448 2016-08-18] (Advanced Micro Devices, Inc.)
R3 athr; C:\WINDOWS\System32\drivers\athw10x.sys [4318648 2017-05-15] (Qualcomm Atheros Communications, Inc.)
R3 AtiHDAudioService; C:\WINDOWS\system32\drivers\AtihdWT6.sys [101376 2017-01-14] (Advanced Micro Devices)
R0 AVGIDSHA; C:\WINDOWS\System32\DRIVERS\avgidsha.sys [261376 2016-06-01] (AVG Technologies CZ, s.r.o.)
S2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [146040 2015-10-08] (BlueStack Systems)
S3 CMUAC; C:\WINDOWS\system32\DRIVERS\CMUAC.sys [613888 2014-10-09] (C-MEDIA)
S3 DFX11_1; C:\WINDOWS\system32\drivers\dfx11_1x64.sys [28008 2015-08-31] (Windows (R) Win 7 DDK provider)
S3 DFX12; C:\WINDOWS\system32\drivers\dfx12x64.sys [39048 2015-11-15] (Windows (R) Win 7 DDK provider)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [131712 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-02-17] (Disc Soft Ltd)
R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-02-17] (Disc Soft Ltd)
S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [18528 2014-11-18] () [Fichier non signé]
S3 epmntdrv; C:\WINDOWS\SysWOW64\epmntdrv.sys [15968 2014-11-18] () [Fichier non signé]
R3 ETDSMBus; C:\WINDOWS\System32\drivers\ETDSMBus.sys [32840 2017-08-15] (ELAN Microelectronic Corp.)
S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [10848 2014-11-18] () [Fichier non signé]
S3 EuGdiDrv; C:\WINDOWS\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () [Fichier non signé]
R3 GeneStor; C:\WINDOWS\system32\DRIVERS\GeneStor.sys [130648 2016-12-07] (GenesysLogic)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [26528 2015-10-13] (REALiX(tm))
S3 hxctlflt; C:\WINDOWS\system32\DRIVERS\hxctlflt.sys [111104 2009-02-09] (Guillemot Corporation)
R2 iocbios2; C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\Drivers\IocDriver\64bit\iocbios2.sys [30224 2015-05-28] (Intel Corporation)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-06-08] (Logitech Inc.)
R3 MBAMSwissArmy; C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [253856 2017-10-13] (Malwarebytes)
S3 mdf16; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mdf16.sys [20400 2012-06-21] ()
S3 mvd23; C:\Program Files (x86)\Clarus\Samsung Drive Manager\mvd23.sys [99248 2012-06-21] ()
S3 PAC7302; C:\WINDOWS\system32\DRIVERS\PAC7302.SYS [527360 2007-09-10] (PixArt Imaging Inc.)
U0 Partizan; C:\Windows\SysWOW64\drivers\Partizan.sys [40304 2017-10-04] (Greatis Software)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [984032 2017-08-15] (Realtek )
S3 SDFRd; C:\WINDOWS\System32\drivers\SDFRd.sys [31128 2017-03-18] ()
S3 SmbDrv; C:\WINDOWS\System32\drivers\Smb_driver_AMDASF.sys [33448 2015-10-06] (Synaptics Incorporated)
S3 SmbDrvI; C:\WINDOWS\system32\DRIVERS\Smb_driver_Intel.sys [33448 2015-10-06] (Synaptics Incorporated)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2016-09-05] (Samsung Electronics Co., Ltd.)
R3 VBAudioHFVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_hfvaio64_win7.sys [33512 2017-03-20] (Windows (R) Win 7 DDK provider)
R3 VBAudioVMAUXVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmauxvaio64_win7.sys [41192 2017-03-20] (Windows (R) Win 7 DDK provider)
R3 VBAudioVMVAIOMME; C:\WINDOWS\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-03-20] (Windows (R) Win 7 DDK provider)
R1 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [132120 2016-11-21] (Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [206416 2016-11-21] (Oracle Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44632 2017-03-18] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [294816 2017-03-18] (Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [121248 2017-03-18] (Microsoft Corporation)
R1 wfcre; C:\WINDOWS\System32\drivers\wfcre.sys [132992 2017-09-15] ()
S3 wsvd; C:\WINDOWS\system32\DRIVERS\wsvd.sys [102376 2012-06-13] ("CyberLink)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [36808 2016-08-08] (Wellbia.com Co., Ltd.)
S3 xspirit; C:\WINDOWS\xspirit.sys [19088 2016-08-02] ()
R3 XtuAcpiDriver; C:\WINDOWS\System32\drivers\XtuAcpiDriver.sys [63840 2015-07-10] (Intel Corporation)

==================== NetSvcs (Avec liste blanche) ===================

(Si un élément est inclus dans le fichier fixlist.txt, il sera supprimé du Registre. Le fichier ne sera pas déplacé, sauf s'il est inscrit séparément.)


==================== Un mois - Créés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-10-13 17:10 - 2017-10-13 17:10 - 000003802 _____ C:\WINDOWS\System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2017-10-12 17:55 - 2017-03-18 22:57 - 000271872 _____ (Microsoft Corporation) C:\WINDOWS\system32\magnify.exe
2017-10-11 19:12 - 2017-09-30 07:49 - 001004136 _____ (Microsoft Corporation) C:\WINDOWS\system32\ucrtbase.dll
2017-10-11 19:12 - 2017-09-30 07:45 - 000511896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbhub.sys
2017-10-11 19:12 - 2017-09-30 07:42 - 000820120 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2017-10-11 19:12 - 2017-09-30 07:41 - 000259400 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe
2017-10-11 19:12 - 2017-09-30 07:40 - 000336320 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe
2017-10-11 19:12 - 2017-09-30 07:40 - 000173976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\usbccgp.sys
2017-10-11 19:12 - 2017-09-30 07:36 - 002672024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tcpip.sys
2017-10-11 19:12 - 2017-09-30 04:29 - 001408536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\gdi32full.dll
2017-10-11 19:12 - 2017-09-30 04:29 - 000804784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2017-10-11 19:12 - 2017-09-30 04:26 - 001333136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msctf.dll
2017-10-11 19:12 - 2017-09-30 04:26 - 001292872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2017-10-11 19:12 - 2017-09-30 04:10 - 001839872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll
2017-10-11 19:12 - 2017-09-30 04:10 - 000606072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\oleaut32.dll
2017-10-11 19:12 - 2017-09-30 04:10 - 000508344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dnsapi.dll
2017-10-11 19:12 - 2017-09-30 04:10 - 000480920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\advapi32.dll
2017-10-11 19:12 - 2017-09-30 04:09 - 002259760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2017-10-11 19:12 - 2017-09-30 04:09 - 000787712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll
2017-10-11 19:12 - 2017-09-30 04:06 - 004471368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\explorer.exe
2017-10-11 19:12 - 2017-09-30 04:05 - 005827744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll
2017-10-11 19:12 - 2017-09-30 04:05 - 002603744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\OneCoreUAPCommonProxyStub.dll
2017-10-11 19:12 - 2017-09-30 04:05 - 001266544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.appcore.dll
2017-10-11 19:12 - 2017-09-30 04:05 - 000750488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2017-10-11 19:12 - 2017-09-30 04:05 - 000559000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-10-11 19:12 - 2017-09-30 04:04 - 004215184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.StateRepository.dll
2017-10-11 19:12 - 2017-09-30 04:04 - 000612120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wer.dll
2017-10-11 19:12 - 2017-09-30 04:04 - 000519680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppXDeploymentClient.dll
2017-10-11 19:12 - 2017-09-30 04:04 - 000438096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.dll
2017-10-11 19:12 - 2017-09-30 04:04 - 000347544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-10-11 19:12 - 2017-09-30 04:04 - 000182680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppxAllUserStore.dll
2017-10-11 19:12 - 2017-09-30 04:03 - 020373408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-10-11 19:12 - 2017-09-30 04:03 - 006768288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll
2017-10-11 19:12 - 2017-09-30 04:03 - 001439032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2017-10-11 19:12 - 2017-09-30 04:02 - 000175512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\basecsp.dll
2017-10-11 19:12 - 2017-09-30 04:01 - 000124544 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\sspicli.dll
2017-10-11 19:12 - 2017-09-29 09:45 - 002953216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-10-11 19:12 - 2017-09-29 09:44 - 000133120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\t2embed.dll
2017-10-11 19:12 - 2017-09-29 09:43 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-10-11 19:12 - 2017-09-29 09:43 - 000142336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\smartscreenps.dll
2017-10-11 19:12 - 2017-09-29 09:43 - 000060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll
2017-10-11 19:12 - 2017-09-29 09:42 - 000018944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mgmtapi.dll
2017-10-11 19:12 - 2017-09-29 09:41 - 013844992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-10-11 19:12 - 2017-09-29 09:41 - 000110080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BitLockerCsp.dll
2017-10-11 19:12 - 2017-09-29 09:40 - 006728192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-10-11 19:12 - 2017-09-29 09:40 - 000371200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll
2017-10-11 19:12 - 2017-09-29 09:40 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-10-11 19:12 - 2017-09-29 09:39 - 020511232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-10-11 19:12 - 2017-09-29 09:39 - 000364032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 005721600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 002671616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tquery.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 001135616 ____R (The ICU Project) C:\WINDOWS\SysWOW64\icuuc.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 000471040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TpmCoreProvisioning.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webio.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 000370688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\FirewallAPI.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 000308224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2017-10-11 19:12 - 2017-09-29 09:38 - 000229376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\scksp.dll
2017-10-11 19:12 - 2017-09-29 09:37 - 000306688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Graphics.dll
2017-10-11 19:12 - 2017-09-29 09:37 - 000038400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBrokerUI.dll
2017-10-11 19:12 - 2017-09-29 09:36 - 019337216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-10-11 19:12 - 2017-09-29 09:36 - 000590336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PCPKsp.dll
2017-10-11 19:12 - 2017-09-29 09:35 - 003654656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll
2017-10-11 19:12 - 2017-09-29 09:34 - 006255616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-10-11 19:12 - 2017-09-29 09:34 - 002859520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2017-10-11 19:12 - 2017-09-29 09:34 - 000798720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TokenBroker.dll
2017-10-11 19:12 - 2017-09-29 09:34 - 000787456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-10-11 19:12 - 2017-09-29 09:34 - 000434176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinapi.dll
2017-10-11 19:12 - 2017-09-29 09:33 - 007598080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-10-11 19:12 - 2017-09-29 09:33 - 004559360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll
2017-10-11 19:12 - 2017-09-29 09:33 - 001506816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\quartz.dll
2017-10-11 19:12 - 2017-09-29 09:32 - 002782720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2017-10-11 19:12 - 2017-09-29 09:32 - 002340864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\DWrite.dll
2017-10-11 19:12 - 2017-09-29 09:32 - 001627136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2017-10-11 19:12 - 2017-09-29 09:32 - 001244160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Phone.dll
2017-10-11 19:12 - 2017-09-29 09:32 - 000128512 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssprxy.dll
2017-10-11 19:12 - 2017-09-29 09:32 - 000035840 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys
2017-10-11 19:12 - 2017-09-29 09:31 - 003107328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstsc.exe
2017-10-11 19:12 - 2017-09-29 09:31 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe
2017-10-11 19:12 - 2017-09-29 09:31 - 000168448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe
2017-10-11 19:12 - 2017-09-29 09:31 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll
2017-10-11 19:12 - 2017-09-29 09:29 - 001460736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_fs.dll
2017-10-11 19:12 - 2017-09-29 09:29 - 001318912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wsp_health.dll
2017-10-11 19:12 - 2017-09-29 09:29 - 000724992 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll
2017-10-11 19:12 - 2017-09-29 09:29 - 000157696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpchttp.dll
2017-10-11 19:12 - 2017-09-29 09:29 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-10-11 19:12 - 2017-09-29 09:29 - 000083456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpdbusenum.dll
2017-10-11 19:12 - 2017-09-29 09:28 - 000681472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\clusapi.dll
2017-10-11 19:12 - 2017-09-29 09:28 - 000473088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\resutils.dll
2017-10-11 19:12 - 2017-09-29 09:28 - 000458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\NgcCtnr.dll
2017-10-11 19:12 - 2017-09-29 09:28 - 000297984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mcbuilder.exe
2017-10-11 19:12 - 2017-09-29 09:28 - 000104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Robocopy.exe
2017-10-11 19:12 - 2017-09-29 09:28 - 000040448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cipher.exe
2017-10-11 19:12 - 2017-09-29 09:27 - 000409600 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2017-10-11 19:12 - 2017-09-29 09:27 - 000350720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Graphics.dll
2017-10-11 19:12 - 2017-09-29 09:26 - 008213504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-10-11 19:12 - 2017-09-29 09:25 - 008199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-10-11 19:12 - 2017-09-29 09:24 - 003377664 _____ (Microsoft Corporation) C:\WINDOWS\system32\tquery.dll
2017-10-11 19:12 - 2017-09-29 09:24 - 001628672 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserDataService.dll
2017-10-11 19:12 - 2017-09-29 09:23 - 004730368 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll
2017-10-11 19:12 - 2017-09-29 09:21 - 003304448 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstsc.exe
2017-10-11 19:12 - 2017-09-29 09:21 - 000414208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv.sys
2017-10-11 19:12 - 2017-09-29 09:20 - 000385536 _____ (Microsoft Corporation) C:\WINDOWS\system32\bdesvc.dll
2017-10-11 19:12 - 2017-09-29 09:20 - 000286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb10.sys
2017-10-11 19:12 - 2017-09-29 09:19 - 000306176 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveui.dll
2017-10-11 19:12 - 2017-09-29 09:18 - 000215040 _____ (Microsoft Corporation) C:\WINDOWS\system32\manage-bde.exe
2017-10-11 19:12 - 2017-09-29 09:18 - 000141312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerDeviceEncryption.exe
2017-10-11 19:12 - 2017-09-29 07:40 - 000804312 _____ C:\WINDOWS\SysWOW64\locale.nls
2017-10-11 19:12 - 2017-09-29 07:40 - 000804312 _____ C:\WINDOWS\system32\locale.nls
2017-10-11 19:12 - 2017-09-20 17:08 - 000640512 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mswstr10.dll
2017-10-11 19:12 - 2017-09-20 17:08 - 000345088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msexcl40.dll
2017-10-11 19:12 - 2017-09-20 17:08 - 000008704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msjint40.dll
2017-10-11 19:12 - 2017-09-19 01:09 - 000554400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS
2017-10-11 19:12 - 2017-09-19 00:20 - 000049664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tetheringclient.dll
2017-10-11 19:12 - 2017-09-19 00:15 - 000648704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApiPublic.dll
2017-10-11 19:11 - 2017-09-30 07:52 - 001595152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gdi32full.dll
2017-10-11 19:11 - 2017-09-30 07:51 - 001458320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msctf.dll
2017-10-11 19:11 - 2017-09-30 07:51 - 001147288 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe
2017-10-11 19:11 - 2017-09-30 07:51 - 000661224 _____ (Microsoft Corporation) C:\WINDOWS\system32\dnsapi.dll
2017-10-11 19:11 - 2017-09-30 07:50 - 001346112 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2017-10-11 19:11 - 2017-09-30 07:50 - 001068208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2017-10-11 19:11 - 2017-09-30 07:50 - 001024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe
2017-10-11 19:11 - 2017-09-30 07:49 - 000777400 _____ (Microsoft Corporation) C:\WINDOWS\system32\oleaut32.dll
2017-10-11 19:11 - 2017-09-30 07:49 - 000135576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecdd.sys
2017-10-11 19:11 - 2017-09-30 07:48 - 008319384 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-10-11 19:11 - 2017-09-30 07:48 - 002399728 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll
2017-10-11 19:11 - 2017-09-30 07:48 - 002327448 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2017-10-11 19:11 - 2017-09-30 07:48 - 000644696 _____ (Microsoft Corporation) C:\WINDOWS\system32\advapi32.dll
2017-10-11 19:11 - 2017-09-30 07:47 - 002969880 _____ (Microsoft Corporation) C:\WINDOWS\system32\CoreUIComponents.dll
2017-10-11 19:11 - 2017-09-30 07:47 - 001194792 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll
2017-10-11 19:11 - 2017-09-30 07:44 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys
2017-10-11 19:11 - 2017-09-30 07:44 - 000181912 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspicli.dll
2017-10-11 19:11 - 2017-09-30 07:43 - 007318888 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll
2017-10-11 19:11 - 2017-09-30 07:43 - 002442136 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys
2017-10-11 19:11 - 2017-09-30 07:42 - 004848952 _____ (Microsoft Corporation) C:\WINDOWS\explorer.exe
2017-10-11 19:11 - 2017-09-30 07:42 - 001506712 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.appcore.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 005477600 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneCoreUAPCommonProxyStub.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 005304496 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.StateRepository.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 002086808 _____ (Microsoft Corporation) C:\WINDOWS\system32\UpdateAgent.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 000961944 _____ (Microsoft Corporation) C:\WINDOWS\system32\efscore.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 000654976 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentClient.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 000651672 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-10-11 19:11 - 2017-09-30 07:41 - 000257432 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppxAllUserStore.dll
2017-10-11 19:11 - 2017-09-30 07:41 - 000228248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mrxsmb20.sys
2017-10-11 19:11 - 2017-09-30 07:40 - 000724704 _____ (Microsoft Corporation) C:\WINDOWS\system32\wer.dll
2017-10-11 19:11 - 2017-09-30 07:40 - 000642680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-10-11 19:11 - 2017-09-30 07:40 - 000558912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.dll
2017-10-11 19:11 - 2017-09-30 07:40 - 000408984 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-10-11 19:11 - 2017-09-30 07:40 - 000184728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\appid.sys
2017-10-11 19:11 - 2017-09-30 07:40 - 000072944 _____ (Microsoft Corporation) C:\WINDOWS\system32\easinvoker.exe
2017-10-11 19:11 - 2017-09-30 07:39 - 021351760 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-10-11 19:11 - 2017-09-30 07:39 - 000203672 _____ (Microsoft Corporation) C:\WINDOWS\system32\basecsp.dll
2017-10-11 19:11 - 2017-09-30 07:38 - 007910072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll
2017-10-11 19:11 - 2017-09-30 07:38 - 002239136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2017-10-11 19:11 - 2017-09-30 07:36 - 000057976 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsass.exe
2017-10-11 19:11 - 2017-09-30 04:10 - 001150776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ucrtbase.dll
2017-10-11 19:11 - 2017-09-29 09:46 - 023678976 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-10-11 19:11 - 2017-09-29 09:39 - 011888640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2017-10-11 19:11 - 2017-09-29 09:34 - 017370624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-10-11 19:11 - 2017-09-29 09:34 - 003669504 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-10-11 19:11 - 2017-09-29 09:33 - 000658944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2017-10-11 19:11 - 2017-09-29 09:33 - 000175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\t2embed.dll
2017-10-11 19:11 - 2017-09-29 09:32 - 002199552 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-10-11 19:11 - 2017-09-29 09:32 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreenps.dll
2017-10-11 19:11 - 2017-09-29 09:32 - 000087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll
2017-10-11 19:11 - 2017-09-29 09:32 - 000064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups.dll
2017-10-11 19:11 - 2017-09-29 09:32 - 000029184 _____ (Microsoft Corporation) C:\WINDOWS\system32\sspisrv.dll
2017-10-11 19:11 - 2017-09-29 09:32 - 000023040 _____ (Microsoft Corporation) C:\WINDOWS\system32\mgmtapi.dll
2017-10-11 19:11 - 2017-09-29 09:31 - 000113152 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhosdeployment.dll
2017-10-11 19:11 - 2017-09-29 09:31 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\efssvc.dll
2017-10-11 19:11 - 2017-09-29 09:30 - 023686144 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-10-11 19:11 - 2017-09-29 09:30 - 007931392 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-10-11 19:11 - 2017-09-29 09:30 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll
2017-10-11 19:11 - 2017-09-29 09:30 - 000179200 _____ (Microsoft Corporation) C:\WINDOWS\system32\BitLockerCsp.dll
2017-10-11 19:11 - 2017-09-29 09:30 - 000064512 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-10-11 19:11 - 2017-09-29 09:30 - 000043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmTasks.dll
2017-10-11 19:11 - 2017-09-29 09:29 - 008333312 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2017-10-11 19:11 - 2017-09-29 09:29 - 000550400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys
2017-10-11 19:11 - 2017-09-29 09:29 - 000461824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansec.dll
2017-10-11 19:11 - 2017-09-29 09:29 - 000433152 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll
2017-10-11 19:11 - 2017-09-29 09:29 - 000304640 _____ (Microsoft Corporation) C:\WINDOWS\system32\dusmsvc.dll
2017-10-11 19:11 - 2017-09-29 09:29 - 000052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\ServiceWorkerHost.exe
2017-10-11 19:11 - 2017-09-29 09:28 - 000699904 _____ (Microsoft Corporation) C:\WINDOWS\system32\FlightSettings.dll
2017-10-11 19:11 - 2017-09-29 09:28 - 000556032 _____ (Microsoft Corporation) C:\WINDOWS\system32\TpmCoreProvisioning.dll
2017-10-11 19:11 - 2017-09-29 09:28 - 000527360 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-10-11 19:11 - 2017-09-29 09:28 - 000256000 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-10-11 19:11 - 2017-09-29 09:28 - 000254976 _____ (Microsoft Corporation) C:\WINDOWS\system32\scksp.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 012803072 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 001321984 ____R (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 000616960 _____ (Microsoft Corporation) C:\WINDOWS\system32\WindowManagement.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 000565760 _____ (Microsoft Corporation) C:\WINDOWS\system32\webio.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 000538624 _____ (Microsoft Corporation) C:\WINDOWS\system32\FirewallAPI.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 000524800 _____ (Microsoft Corporation) C:\WINDOWS\system32\TileDataRepository.dll
2017-10-11 19:11 - 2017-09-29 09:27 - 000412160 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-10-11 19:11 - 2017-09-29 09:26 - 002809344 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-10-11 19:11 - 2017-09-29 09:26 - 001468928 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.desktop.dll
2017-10-11 19:11 - 2017-09-29 09:26 - 001269760 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2017-10-11 19:11 - 2017-09-29 09:26 - 000772096 _____ (Microsoft Corporation) C:\WINDOWS\system32\PCPKsp.dll
2017-10-11 19:11 - 2017-09-29 09:26 - 000356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2017-10-11 19:11 - 2017-09-29 09:26 - 000045056 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBrokerUI.dll
2017-10-11 19:11 - 2017-09-29 09:25 - 004175872 _____ (Microsoft Corporation) C:\WINDOWS\system32\StartTileData.dll
2017-10-11 19:11 - 2017-09-29 09:25 - 002760704 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Shell.UnifiedTile.CuratedTileCollections.dll
2017-10-11 19:11 - 2017-09-29 09:25 - 000586240 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppReadiness.dll
2017-10-11 19:11 - 2017-09-29 09:24 - 003307008 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2017-10-11 19:11 - 2017-09-29 09:24 - 002503680 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.pcshell.dll
2017-10-11 19:11 - 2017-09-29 09:24 - 001886208 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-10-11 19:11 - 2017-09-29 09:24 - 001307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-10-11 19:11 - 2017-09-29 09:24 - 000684032 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 005557760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 003140096 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 002730496 _____ (Microsoft Corporation) C:\WINDOWS\system32\smartscreen.exe
2017-10-11 19:11 - 2017-09-29 09:23 - 002446336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 002055680 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-10-11 19:11 - 2017-09-29 09:23 - 001887744 _____ (Microsoft Corporation) C:\WINDOWS\system32\FntCache.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 001605632 _____ (Microsoft Corporation) C:\WINDOWS\system32\quartz.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 001460224 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 001398784 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 001052672 _____ (Microsoft Corporation) C:\WINDOWS\system32\TokenBroker.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 000986624 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 000972288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MPSSVC.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 000841216 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 000756224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 000647168 _____ (Microsoft Corporation) C:\WINDOWS\system32\RDXService.dll
2017-10-11 19:11 - 2017-09-29 09:23 - 000512000 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinapi.dll
2017-10-11 19:11 - 2017-09-29 09:22 - 002829824 _____ (Microsoft Corporation) C:\WINDOWS\system32\DWrite.dll
2017-10-11 19:11 - 2017-09-29 09:22 - 001802240 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2017-10-11 19:11 - 2017-09-29 09:22 - 001438208 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Phone.dll
2017-10-11 19:11 - 2017-09-29 09:22 - 000407040 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-10-11 19:11 - 2017-09-29 09:21 - 000722944 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys
2017-10-11 19:11 - 2017-09-29 09:21 - 000476160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2017-10-11 19:11 - 2017-09-29 09:21 - 000324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceEnroller.exe
2017-10-11 19:11 - 2017-09-29 09:21 - 000154624 _____ (Microsoft Corporation) C:\WINDOWS\system32\regsvc.dll
2017-10-11 19:11 - 2017-09-29 09:21 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\TabSvc.dll
2017-10-11 19:11 - 2017-09-29 09:21 - 000124928 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2017-10-11 19:11 - 2017-09-29 09:20 - 001811456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_health.dll
2017-10-11 19:11 - 2017-09-29 09:20 - 000804864 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvewiz.dll
2017-10-11 19:11 - 2017-09-29 09:20 - 000194560 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpchttp.dll
2017-10-11 19:11 - 2017-09-29 09:20 - 000150016 _____ (Microsoft Corporation) C:\WINDOWS\system32\iscsiexe.dll
2017-10-11 19:11 - 2017-09-29 09:19 - 002088448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsp_fs.dll
2017-10-11 19:11 - 2017-09-29 09:19 - 000325120 _____ (Microsoft Corporation) C:\WINDOWS\system32\fvecpl.dll
2017-10-11 19:11 - 2017-09-29 09:19 - 000208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscsvc.dll
2017-10-11 19:11 - 2017-09-29 09:18 - 002438656 _____ (Microsoft Corporation) C:\WINDOWS\system32\ResetEngine.dll
2017-10-11 19:11 - 2017-09-29 09:18 - 001527296 _____ (Microsoft Corporation) C:\WINDOWS\system32\RecoveryDrive.exe
2017-10-11 19:11 - 2017-09-29 09:18 - 000893440 _____ (Microsoft Corporation) C:\WINDOWS\system32\clusapi.dll
2017-10-11 19:11 - 2017-09-29 09:18 - 000603136 _____ (Microsoft Corporation) C:\WINDOWS\system32\resutils.dll
2017-10-11 19:11 - 2017-09-29 09:18 - 000347648 _____ (Microsoft Corporation) C:\WINDOWS\system32\mcbuilder.exe
2017-10-11 19:11 - 2017-09-29 09:18 - 000130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Robocopy.exe
2017-10-11 19:11 - 2017-09-29 09:18 - 000046592 _____ (Microsoft Corporation) C:\WINDOWS\system32\cipher.exe
2017-10-11 19:11 - 2017-09-19 01:20 - 001065104 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2017-10-11 19:11 - 2017-09-19 01:20 - 000900376 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe
2017-10-11 19:11 - 2017-09-19 01:18 - 000965024 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.efi
2017-10-11 19:11 - 2017-09-19 01:17 - 001395664 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2017-10-11 19:11 - 2017-09-19 01:17 - 001186464 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe
2017-10-11 19:11 - 2017-09-19 01:17 - 000821664 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.exe
2017-10-11 19:11 - 2017-09-19 01:11 - 001018272 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2017-10-11 19:11 - 2017-09-19 00:26 - 000060416 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2017-10-11 19:11 - 2017-09-19 00:25 - 000117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\eShims.dll
2017-10-11 19:11 - 2017-09-19 00:23 - 000210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2017-10-11 19:11 - 2017-09-19 00:20 - 000831488 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApiPublic.dll
2017-10-11 19:00 - 2017-10-11 19:01 - 000106816 _____ C:\Users\Titianna\Downloads\FixWin10.zip
2017-10-11 18:56 - 2017-10-11 18:57 - 038257112 _____ (Tweaking.com) C:\Users\Titianna\Downloads\tweaking.com_windows_repair_aio_setup.exe
2017-10-11 18:54 - 2017-10-11 18:55 - 001790024 _____ (Malwarebytes) C:\Users\Titianna\Downloads\JRT.exe
2017-10-09 20:25 - 2008-04-14 02:11 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\system32\appmgr.dll
2017-10-09 20:25 - 2001-08-23 13:00 - 000034871 _____ C:\WINDOWS\system32\gpedit.msc
2017-10-09 20:20 - 2017-10-09 20:20 - 000876029 _____ C:\Users\Titianna\Downloads\gpedit_msc.zip
2017-10-09 20:14 - 2017-10-09 20:22 - 000707354 _____ C:\WINDOWS\unins000.exe
2017-10-09 20:14 - 2017-10-09 20:22 - 000003665 _____ C:\WINDOWS\unins000.dat
2017-10-09 20:14 - 2017-10-09 20:15 - 000000000 ____D C:\WINDOWS\SysWOW64\GPBAK
2017-10-09 20:14 - 2017-10-09 20:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-10-09 20:14 - 2008-04-14 02:11 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2017-10-09 20:14 - 2001-08-23 13:00 - 000034871 _____ C:\WINDOWS\SysWOW64\gpedit.msc
2017-10-09 20:13 - 2017-10-09 20:21 - 000000000 ____D C:\Users\Titianna\Downloads\gpedit
2017-10-09 19:27 - 2017-10-09 19:27 - 000875012 _____ C:\Users\Titianna\Downloads\ajouter-gpedit-msc.zip
2017-10-09 19:26 - 2017-10-09 19:26 - 000000144 _____ C:\Users\Titianna\Downloads\ActiverWinDefender.reg
2017-10-09 19:20 - 2017-10-09 19:21 - 000000000 ____D C:\Users\Titianna\AppData\Local\Clarus
2017-10-08 19:10 - 2017-10-07 19:29 - 000000814 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171008-191033.backup
2017-10-08 15:49 - 2017-10-08 15:49 - 000215416 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\localisation appart.pdf
2017-10-08 15:49 - 2017-10-08 15:49 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\LocalLow\Temp
2017-10-08 15:33 - 2017-10-08 15:33 - 000008407 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\images.jfif
2017-10-08 12:16 - 2017-10-08 12:16 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\ElevatedDiagnostics
2017-10-07 19:27 - 2017-10-07 19:27 - 000000194 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\hosts-perm.bat
2017-10-07 19:24 - 2017-10-13 17:30 - 000001279 _____ C:\Users\Public\Desktop\Avira.lnk
2017-10-07 19:24 - 2017-10-07 19:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2017-10-07 19:24 - 2017-10-07 19:24 - 000000000 ____D C:\ProgramData\Avira
2017-10-07 19:12 - 2017-10-07 19:14 - 000002773 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\OOSU10.ini
2017-10-07 19:09 - 2017-10-07 19:09 - 000743488 _____ (O&O Software GmbH) C:\Users\Administrateur.Titi-annaPC\Downloads\OOSU10.exe
2017-10-07 19:06 - 2017-10-07 19:06 - 000000424 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\activer_windows_defender.reg
2017-10-07 18:58 - 2017-10-13 17:19 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\comhosts
2017-10-07 16:58 - 2017-10-07 16:58 - 011230792 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\RogueKillerCMD_portable64.exe
2017-10-07 12:10 - 2017-10-06 19:47 - 000000089 __RSH C:\WINDOWS\system32\Drivers\etc\hosts.old
2017-10-06 20:00 - 2017-10-06 20:00 - 000030948 _____ C:\ProgramData\agent.update.1507312831.bdinstall.bin
2017-10-06 19:29 - 2017-10-13 17:28 - 000000000 ____D C:\Program Files\Bitdefender Agent
2017-10-06 19:29 - 2017-10-06 19:29 - 000048797 _____ C:\ProgramData\agent.1507310957.bdinstall.bin
2017-10-06 19:29 - 2017-10-06 19:29 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2017-10-06 19:20 - 2017-10-06 19:20 - 000353632 _____ C:\Users\Titianna\Downloads\rsthosts_2.0.exe
2017-10-05 23:44 - 2017-10-05 23:44 - 009932992 _____ C:\Users\Titianna\Downloads\bitdefender_isecurity.exe
2017-10-05 23:42 - 2017-10-05 23:43 - 058402264 _____ (Panda Security, S.L.) C:\Users\Titianna\Downloads\FREEAV.exe
2017-10-05 23:41 - 2017-10-05 23:41 - 001980152 _____ (Panda Security, S.L.) C:\Users\Titianna\Downloads\PANDAFREEAV.exe
2017-10-05 23:41 - 2017-10-05 23:41 - 000000000 ____D C:\ProgramData\Panda Security
2017-10-05 18:49 - 2017-10-05 18:49 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\SUPERAntiSpyware.com
2017-10-05 18:27 - 2017-10-13 17:28 - 000000764 _____ C:\WINDOWS\SysWOW64\PARTIZAN.TXT
2017-10-05 18:25 - 2017-10-13 17:24 - 000000000 ____D C:\@RestoreQuarantine
2017-10-04 20:29 - 2017-10-04 20:29 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\MicrosoftEdge
2017-10-04 20:28 - 2017-10-04 20:28 - 000811903 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\regrunlog.txt
2017-10-04 20:27 - 2017-10-04 20:27 - 000001087 _____ C:\Users\Public\Desktop\Trojan Killer.lnk
2017-10-04 20:27 - 2017-10-04 20:27 - 000000000 ____D C:\Program Files (x86)\Trojan Killer
2017-10-04 20:26 - 2017-10-04 20:27 - 058600312 _____ (Gridinsoft LLC. ) C:\Users\Administrateur.Titi-annaPC\Downloads\trojan-killer-portable_1.1.23(1).exe
2017-10-04 20:23 - 2017-10-04 20:23 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\SUPERAntiSpyware.com
2017-10-04 20:22 - 2017-10-13 17:24 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\Documents\RegRun2
2017-10-04 20:22 - 2017-10-13 17:22 - 000000000 ____D C:\Users\Public\Documents\regruninfo
2017-10-04 20:22 - 2017-10-12 17:18 - 000000000 ____D C:\ProgramData\RegRun
2017-10-04 20:22 - 2017-10-07 12:10 - 000003430 _____ C:\WINDOWS\System32\Tasks\UnHackMe Task Scheduler
2017-10-04 20:22 - 2017-10-07 12:10 - 000001088 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\UnHackMe.lnk
2017-10-04 20:22 - 2017-10-07 12:10 - 000000002 RSHOT C:\WINDOWS\winstart.bat
2017-10-04 20:22 - 2017-10-07 12:10 - 000000002 RSHOT C:\WINDOWS\SysWOW64\CONFIG.NT
2017-10-04 20:22 - 2017-10-07 12:10 - 000000002 RSHOT C:\WINDOWS\SysWOW64\AUTOEXEC.NT
2017-10-04 20:22 - 2017-10-07 12:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\UnHackMe
2017-10-04 20:22 - 2017-10-07 12:10 - 000000000 ____D C:\Program Files (x86)\UnHackMe
2017-10-04 20:22 - 2017-10-04 20:22 - 000040304 _____ (Greatis Software) C:\WINDOWS\SysWOW64\Drivers\Partizan.sys
2017-10-04 20:22 - 2017-10-04 20:22 - 000000000 ____D C:\ProgramData\SUPERAntiSpyware.com
2017-10-04 20:22 - 2017-08-30 11:47 - 000014984 _____ (Greatis Software, LLC.) C:\WINDOWS\SysWOW64\Drivers\UnHackMeDrv.sys
2017-10-04 20:22 - 2015-12-28 11:32 - 000049968 _____ (Greatis Software) C:\WINDOWS\system32\partizan.exe
2017-10-04 20:21 - 2017-08-30 10:47 - 018883320 _____ (Greatis Software, LLC. ) C:\Users\Administrateur.Titi-annaPC\Downloads\unhackme_setup.exe
2017-10-04 20:20 - 2017-10-04 20:21 - 058600312 _____ (Gridinsoft LLC. ) C:\Users\Administrateur.Titi-annaPC\Downloads\trojan-killer-portable_1.1.23.exe
2017-10-04 20:19 - 2017-10-04 20:19 - 018858624 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\unhackme-920_9.20.0.620.zip
2017-10-04 20:18 - 2017-10-04 20:18 - 005961128 _____ (SosVirus) C:\Users\Administrateur.Titi-annaPC\Downloads\adsfix_4_04.10.17.5.exe
2017-10-04 20:17 - 2017-10-07 19:25 - 000002906 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\Rkill.txt
2017-10-04 20:17 - 2017-10-04 20:17 - 001792640 _____ (Bleeping Computer, LLC) C:\Users\Administrateur.Titi-annaPC\Downloads\rkill_2.9.1.0.exe
2017-10-04 20:13 - 2017-10-04 20:13 - 030595768 _____ (SUPERAntiSpyware) C:\Users\Administrateur.Titi-annaPC\Downloads\SUPERAntiSpyware.exe
2017-10-04 20:13 - 2017-10-04 20:13 - 030595768 _____ (SUPERAntiSpyware) C:\Users\Administrateur.Titi-annaPC\Downloads\SUPERAntiSpyware (1).exe
2017-10-04 20:02 - 2017-10-04 20:03 - 000034558 _____ C:\TDSSKiller.3.1.0.15_04.10.2017_20.02.45_log.txt
2017-10-04 20:02 - 2017-10-04 20:02 - 000013538 _____ C:\TDSSKiller.3.1.0.15_04.10.2017_20.02.19_log.txt
2017-10-04 20:01 - 2017-10-04 20:01 - 000460049 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171004-200143.backup
2017-10-04 20:01 - 2017-10-02 23:36 - 000460153 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171004-200139.backup
2017-10-04 19:28 - 2017-10-05 18:39 - 000979567 _____ C:\Users\Titianna\Desktop\mb-clean-results.txt
2017-10-04 19:28 - 2017-10-04 19:28 - 000000025 _____ C:\Users\Titianna\Desktop\mb-licenseinfo.txt
2017-10-04 18:39 - 2017-10-04 18:39 - 004833792 _____ (Geza Kovacs) C:\Users\Titianna\Downloads\unetbootin-windows-655.exe
2017-10-04 18:38 - 2017-10-04 18:44 - 699400192 _____ C:\Users\Titianna\Downloads\bitdefender-rescue-cd.iso
2017-10-04 18:35 - 2017-10-04 18:35 - 000204856 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\ZHPDiag.txt
2017-10-04 18:31 - 2017-10-04 18:31 - 002903936 _____ C:\Users\Titianna\Downloads\ZHPDiag3.exe
2017-10-04 18:31 - 2017-10-04 18:31 - 000000939 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\ZHPDiag.lnk
2017-10-04 18:17 - 2017-10-04 18:17 - 000387584 _____ C:\Users\Titianna\Downloads\rescue2usb.exe
2017-10-03 19:22 - 2017-10-04 18:27 - 336128000 _____ C:\Users\Titianna\Downloads\kav_rescue_10.iso
2017-10-03 19:07 - 2017-10-03 19:07 - 005320784 _____ (Avira Operations GmbH & Co. KG) C:\Users\Titianna\Downloads\avira_fr_av_59d3c3bfc9aa4__ws.exe
2017-10-03 07:25 - 2017-10-03 07:25 - 008250832 _____ (Malwarebytes) C:\Users\Titianna\Downloads\adwcleaner_7.0.3.1.exe
2017-10-03 07:24 - 2017-10-03 07:24 - 008250832 _____ (Malwarebytes) C:\Users\Administrateur.Titi-annaPC\Downloads\adwcleaner_7.0.3.1.exe
2017-10-03 00:04 - 2017-10-03 00:05 - 035867864 _____ (Adlice Software ) C:\Users\Titianna\Downloads\RogueKiller_setup.exe
2017-10-03 00:01 - 2017-09-15 21:15 - 000000000 ____D C:\Users\Titianna\Downloads\Malwarebytes PREMIUM V3.2.2.2029 (Final) & Keygen URET
2017-10-02 23:56 - 2017-10-02 23:59 - 069091481 _____ C:\Users\Titianna\Downloads\Malwarebytes PREMIUM V3.2.2.2029 (Final) & Keygen URET.rar
2017-10-02 23:44 - 2017-10-02 23:44 - 002941824 _____ C:\Users\Titianna\Downloads\ZHPCleaner(1).exe
2017-10-02 23:36 - 2017-10-02 23:36 - 000000290 __RSH C:\Users\Titianna\ntuser.pol
2017-10-02 23:36 - 2017-10-02 23:36 - 000000290 __RSH C:\Users\Administrateur.Titi-annaPC\ntuser.pol
2017-10-02 23:36 - 2017-10-02 23:35 - 000460192 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233600.backup
2017-10-02 23:36 - 2017-10-02 23:35 - 000460192 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233603.backup
2017-10-02 23:36 - 2017-10-02 23:35 - 000460192 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233601.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000467342 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233517.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000466156 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233518.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000465421 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233519.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000464566 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233520.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000463461 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233521.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000462598 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233522.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000461908 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233523.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000460724 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233524.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000460599 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233528.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000460415 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233532.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000460376 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233535.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000460376 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233533.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000460339 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233558.backup
2017-10-02 23:35 - 2017-10-02 23:35 - 000000428 _____ C:\WINDOWS\wininit.ini
2017-10-02 23:35 - 2017-10-02 20:37 - 000467854 ____R C:\WINDOWS\system32\Drivers\etc\hosts.20171002-233516.backup
2017-10-02 20:37 - 2017-09-30 23:00 - 000014372 _____ C:\WINDOWS\system32\Drivers\etc\hosts.20171002-203708.backup
2017-10-02 20:27 - 2017-10-13 17:31 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\Desktop\FRST-OlderVersion
2017-10-02 12:50 - 2017-10-02 12:50 - 000438784 _____ C:\WINDOWS\241fa81dfc970c66f347061c3693674e.exe
2017-10-02 12:50 - 2017-10-02 12:50 - 000051643 _____ C:\WINDOWS\uninstaller.dat
2017-09-30 22:11 - 2017-09-30 22:11 - 000000004 _____ C:\ProgramData\gfe.3rew
2017-09-30 22:04 - 2017-10-13 17:18 - 000000000 __SHD C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Windows_Firewall.{4026492F-2F69-46B8-B9BF-5654FC07E423}
2017-09-30 22:04 - 2017-10-13 17:18 - 000000000 ____D C:\Users\Administrateur\AppData\Local\comhosts
2017-09-30 22:04 - 2017-09-30 22:04 - 000000000 __SHD C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Backup.{B98A2BEA-7D42-4558-8BD1-832F41BAC6FD}
2017-09-30 22:04 - 2017-09-28 22:18 - 000000222 ___RH C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\2.cmd
2017-09-30 22:04 - 2017-09-27 21:19 - 000000000 ___HD C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\kernels
2017-09-30 22:04 - 2017-08-09 14:58 - 000000069 ___RH C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\1.cmd
2017-09-30 22:04 - 2017-07-14 14:09 - 000630136 ___RH C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\winlogon-ppi-ul5.dll
2017-09-30 22:04 - 2017-07-14 14:09 - 000001512 ___RH C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\winlogon.pep5
2017-09-30 22:04 - 2017-07-10 10:44 - 000000143 _____ C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\WINLOG.del
2017-09-30 22:04 - 2017-07-10 10:38 - 000000074 ___RH C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\3.cmd
2017-09-30 22:04 - 2016-11-02 14:46 - 000648704 _____ C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\MSTC.del
2017-09-30 22:04 - 2013-10-05 04:38 - 000970912 ___RH (Microsoft Corporation) C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\msvcr120.dll
2017-09-30 22:03 - 2017-10-07 19:12 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\memorycool
2017-09-30 22:03 - 2017-09-30 22:03 - 001750232 _____ (BitTorrent Inc.) C:\Users\Administrateur.Titi-annaPC\Downloads\astuce pour avoir reallifecam en entier
2017-09-29 21:46 - 2017-09-29 21:47 - 000001017 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2017-09-29 21:46 - 2017-09-29 21:47 - 000001005 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2017-09-29 21:44 - 2017-09-29 21:45 - 000246024 _____ (Mozilla) C:\Users\Titianna\Downloads\Firefox Installer(1).exe
2017-09-29 21:43 - 2017-09-29 21:43 - 000002299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2017-09-29 21:43 - 2017-09-29 21:43 - 000002261 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2017-09-29 21:37 - 2017-10-02 23:54 - 000002372 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-09-29 21:37 - 2017-10-02 23:53 - 000002390 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-09-29 21:34 - 2017-09-29 21:35 - 001130328 _____ (Google Inc.) C:\Users\Titianna\Downloads\ChromeSetup(1).exe
2017-09-29 21:11 - 2017-09-29 21:40 - 000000000 ____D C:\Users\Titianna\AppData\Local\Mozilla
2017-09-29 21:11 - 2017-09-29 21:19 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\Mozilla
2017-09-29 21:09 - 2017-09-29 21:10 - 008249808 _____ (Malwarebytes) C:\Users\Titianna\Downloads\adwcleaner_7.0.3.0.exe
2017-09-29 19:37 - 2017-09-29 19:37 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\excdir
2017-09-29 19:32 - 2017-09-29 21:11 - 000000034 _____ C:\Users\Public\Documents\{DE764086-1C0A-4DD3-90BA-0B93BDD794BE}
2017-09-29 19:31 - 2017-09-29 19:31 - 000002097 _____ C:\Users\hugo\Desktop\Gооglе Сhrоmе.lnk
2017-09-29 19:31 - 2017-09-29 19:31 - 000002069 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Моzillа Firеfох.lnk
2017-09-29 19:12 - 2017-09-29 19:12 - 000000000 ____D C:\Users\Titianna\AppData\Local\FonePaw
2017-09-29 19:09 - 2017-09-29 19:09 - 000001139 _____ C:\SysMon.exe.config
2017-09-29 19:09 - 2017-09-29 19:09 - 000000019 _____ C:\SysMon.exe.bin
2017-09-29 19:06 - 2017-09-29 19:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2017-09-29 19:06 - 2017-09-29 19:06 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2017-09-29 19:04 - 2017-09-29 19:04 - 000140800 _____ C:\Users\Administrateur.Titi-annaPC\AppData\Local\installer.dat
2017-09-29 18:51 - 2017-09-29 18:51 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\FonePaw
2017-09-29 18:50 - 2017-09-29 18:50 - 024021720 _____ (FonePaw ) C:\Users\Titianna\Downloads\ios-system-recovery.exe
2017-09-29 18:40 - 2017-09-29 18:40 - 000000000 ____D C:\Users\Titianna\Downloads\recboot
2017-09-29 18:39 - 2017-09-29 18:39 - 000480165 _____ C:\Users\Titianna\Downloads\RecBoot-1-3-WIN.zip
2017-09-29 18:10 - 2017-09-29 18:10 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\redsn0w
2017-09-29 18:09 - 2017-09-29 18:09 - 017279732 _____ C:\Users\Titianna\Downloads\redsn0w_win_0.9.15b3.zip
2017-09-29 18:09 - 2012-11-01 14:32 - 000000000 ____D C:\Users\Titianna\Downloads\redsn0w_win_0.9.15b3
2017-09-29 17:57 - 2017-09-29 17:57 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Tenorshare
2017-09-29 17:57 - 2017-09-29 17:57 - 000000000 ____D C:\Tenorshare
2017-09-29 17:55 - 2017-09-29 17:56 - 021375112 _____ C:\Users\Administrateur.Titi-annaPC\Downloads\iPhoneCareProtrial503.exe
2017-09-29 00:01 - 2017-09-29 00:01 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\Aiseesoft Studio
2017-09-29 00:01 - 2017-09-29 00:01 - 000000000 ____D C:\ProgramData\Aiseesoft Studio
2017-09-28 23:58 - 2017-09-29 00:00 - 038681936 _____ (Aiseesoft Studio ) C:\Users\Titianna\Downloads\foneeraser.exe
2017-09-28 23:46 - 2017-09-28 23:46 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\Tenorshare
2017-09-28 23:40 - 2017-09-29 17:44 - 000000000 ____D C:\Program Files (x86)\ReiBoot
2017-09-28 23:40 - 2017-09-29 17:40 - 000001072 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\ReiBoot.lnk
2017-09-28 23:40 - 2017-09-28 23:40 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ReiBoot
2017-09-28 23:39 - 2017-09-28 23:39 - 009896504 _____ C:\Users\Titianna\Downloads\reiboot.exe
2017-09-21 23:54 - 2017-09-02 12:03 - 000000000 ____D C:\Users\Titianna\Downloads\Klaus Schulze - 2017 - Androgyn
2017-09-21 21:33 - 2017-09-10 03:38 - 000000000 ____D C:\Users\Titianna\Downloads\Je n'aime toujours pas le classique, mais ça j'aime bien
2017-09-21 21:18 - 2017-09-21 23:34 - 480441234 _____ C:\Users\Titianna\Downloads\Klaus Schulze - 2017 - Androgy..wawacity.ec..n.rar
2017-09-21 21:14 - 2017-09-21 21:45 - 350182370 _____ C:\Users\Titianna\Downloads\Je n'aime pas le piano mais ça j'aime bien.rar
2017-09-21 21:12 - 2017-09-21 21:20 - 180909078 _____ C:\Users\Titianna\Downloads\Je n'aime toujours pas le classique, mais ça j'aime bien.rar
2017-09-20 18:35 - 2017-09-20 18:35 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\Apple Computer
2017-09-20 18:33 - 2017-09-20 18:33 - 000000000 ____D C:\WINDOWS\System32\Tasks\Apple
2017-09-20 18:33 - 2017-09-20 18:33 - 000000000 ____D C:\Program Files (x86)\Apple Software Update
2017-09-16 11:08 - 2017-09-16 11:09 - 008182736 _____ (Malwarebytes) C:\Users\Administrateur.Titi-annaPC\Downloads\adwcleaner_7.0.2.1.exe
2017-09-15 03:40 - 2017-09-15 03:40 - 000132992 ____N C:\WINDOWS\system32\Drivers\wfcre.sys

==================== Un mois - Modifiés - fichiers et dossiers ========

(Si un élément est inclus dans le fichier fixlist.txt, le fichier/dossier sera déplacé.)

2017-10-13 17:32 - 2017-08-30 12:05 - 000029646 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\FRST.txt
2017-10-13 17:31 - 2017-08-30 12:05 - 002401792 _____ (Farbar) C:\Users\Administrateur.Titi-annaPC\Desktop\FRST64.exe
2017-10-13 17:31 - 2017-08-26 17:51 - 002647728 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-10-13 17:31 - 2017-08-21 17:02 - 000000000 ____D C:\FRST
2017-10-13 17:31 - 2017-03-20 07:10 - 001245830 _____ C:\WINDOWS\system32\perfh00C.dat
2017-10-13 17:31 - 2017-03-20 07:10 - 000281934 _____ C:\WINDOWS\system32\perfc00C.dat
2017-10-13 17:28 - 2017-09-02 11:44 - 000253856 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-10-13 17:28 - 2017-08-26 17:55 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-10-13 17:26 - 2017-03-18 13:40 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2017-10-13 17:20 - 2017-08-26 17:29 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2017-10-13 17:05 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\AppReadiness
2017-10-13 17:05 - 2015-05-10 01:53 - 000000000 ____D C:\AdwCleaner
2017-10-13 17:01 - 2017-08-26 17:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2017-10-12 19:49 - 2015-10-11 17:47 - 000000000 _____ C:\Recovery.txt
2017-10-12 17:08 - 2017-03-18 23:03 - 000000000 ___HD C:\Program Files\WindowsApps
2017-10-12 17:02 - 2015-09-10 07:54 - 000000000 __RHD C:\Users\Public\AccountPictures
2017-10-12 17:00 - 2017-03-18 23:01 - 000000000 ____D C:\WINDOWS\INF
2017-10-11 19:22 - 2017-08-26 17:26 - 000472440 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-10-11 19:19 - 2017-03-18 23:03 - 000230400 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2017-10-11 19:19 - 2017-03-18 23:03 - 000207872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2017-10-11 19:19 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\ShellExperiences
2017-10-11 19:19 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\Provisioning
2017-10-11 19:18 - 2017-03-18 22:51 - 000000000 ____D C:\WINDOWS\CbsTemp
2017-10-11 19:14 - 2016-04-02 20:14 - 000000000 ____D C:\Users\Titianna\Downloads\FixWin 10.0.1.0
2017-10-11 19:13 - 2016-01-02 17:12 - 000000000 ____D C:\Users\Titianna\Documents\Fichiers Outlook
2017-10-11 19:05 - 2017-08-26 17:55 - 000004174 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{E8E0F3C8-90DC-4A90-973C-741F014A2778}
2017-10-11 18:47 - 2016-11-20 14:36 - 000000000 ____D C:\Users\Titianna\AppData\LocalLow\Mozilla
2017-10-09 20:27 - 2017-03-07 21:30 - 000000000 ____D C:\Users\Titianna\AppData\Local\CrashDumps
2017-10-09 19:00 - 2017-02-03 04:26 - 000000000 ____D C:\Users\Titianna\AppData\Local\Overwolf
2017-10-08 12:41 - 2017-08-21 15:55 - 000010872 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\ZHPCleaner.txt
2017-10-08 12:41 - 2017-08-21 15:38 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\ZHP
2017-10-08 12:20 - 2017-08-21 15:38 - 000000808 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\ZHPCleaner.lnk
2017-10-08 12:19 - 2017-08-29 12:09 - 002950528 _____ C:\Users\Administrateur.Titi-annaPC\ZHPCleaner.exe
2017-10-08 12:19 - 2017-08-26 17:31 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC
2017-10-07 19:24 - 2017-04-14 18:22 - 000000000 ____D C:\Program Files (x86)\Avira
2017-10-07 19:23 - 2015-10-11 18:00 - 000000000 ____D C:\ProgramData\Package Cache
2017-10-07 19:12 - 2017-03-18 23:03 - 000000000 ____D C:\Program Files\Hide Imgrated Snow Screensaver
2017-10-07 19:02 - 2017-08-29 12:07 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\CrashDumps
2017-10-07 17:02 - 2017-08-16 20:22 - 000028272 _____ C:\WINDOWS\system32\Drivers\TrueSight.sys
2017-10-06 20:08 - 2017-08-16 20:22 - 000001092 _____ C:\Users\Public\Desktop\RogueKiller.lnk
2017-10-06 19:49 - 2016-07-16 13:47 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2017-10-06 17:21 - 2017-08-27 11:44 - 000000000 ____D C:\Users\Titianna\AppData\Local\Deployment
2017-10-05 18:20 - 2017-08-26 17:55 - 000000000 ____D C:\WINDOWS\System32\Tasks\Lenovo
2017-10-04 20:16 - 2017-08-30 11:28 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\LocalLow\Mozilla
2017-10-04 20:07 - 2017-01-04 19:11 - 000000000 ____D C:\Program Files (x86)\Origin Games
2017-10-04 19:30 - 2017-01-20 17:16 - 000000000 ____D C:\Program Files (x86)\Hi-Rez Studios
2017-10-04 18:32 - 2017-08-21 15:38 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\ZHP
2017-10-04 18:12 - 2015-10-31 21:14 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\DAEMON Tools Lite
2017-10-03 00:06 - 2016-09-19 19:18 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Adobe
2017-10-03 00:05 - 2017-08-16 20:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2017-10-03 00:05 - 2017-08-16 20:22 - 000000000 ____D C:\Program Files\RogueKiller
2017-10-02 23:36 - 2017-08-26 17:31 - 000000000 ____D C:\Users\Titianna
2017-10-02 20:38 - 2017-08-30 12:14 - 000139189 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\Shortcut.txt
2017-10-02 20:38 - 2017-08-30 12:07 - 000125556 _____ C:\Users\Administrateur.Titi-annaPC\Desktop\Addition.txt
2017-10-02 20:25 - 2016-09-19 19:19 - 000002482 _____ C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-10-02 20:25 - 2016-09-19 19:19 - 000000000 ___RD C:\Users\Administrateur.Titi-annaPC\OneDrive
2017-10-02 20:24 - 2017-02-24 00:38 - 000000290 __RSH C:\ProgramData\ntuser.pol
2017-10-02 20:24 - 2016-09-24 02:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-10-02 20:24 - 2015-10-11 18:17 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-10-02 20:23 - 2016-09-19 19:18 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Local\Packages
2017-09-30 22:07 - 2017-08-26 17:28 - 000000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2017-09-30 22:07 - 2017-08-26 17:28 - 000000000 ____D C:\WINDOWS\system32\DAX2
2017-09-30 22:06 - 2017-08-29 11:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-09-30 12:51 - 2015-11-01 15:36 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\vlc
2017-09-29 21:47 - 2017-08-29 11:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2017-09-29 21:43 - 2016-04-22 10:41 - 000000000 ____D C:\Program Files (x86)\Google
2017-09-29 21:18 - 2016-09-07 18:15 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Applications Chrome
2017-09-29 19:32 - 2017-09-02 11:44 - 000188352 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-09-29 19:32 - 2017-09-02 11:44 - 000101784 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-09-29 19:32 - 2017-09-02 11:44 - 000093600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-09-29 19:32 - 2017-09-02 11:44 - 000045472 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-09-29 19:32 - 2015-11-13 13:01 - 000000000 ____D C:\ProgramData\AMD
2017-09-29 19:32 - 2015-11-13 13:01 - 000000000 ____D C:\Program Files\ATI
2017-09-29 19:32 - 2015-10-13 19:44 - 000000000 ____D C:\ProgramData\Intel
2017-09-29 19:31 - 2017-06-15 15:47 - 000000000 ____D C:\Users\Titianna\Desktop\lol
2017-09-28 18:53 - 2015-10-20 23:15 - 000000000 ____D C:\Users\Titianna\AppData\Roaming\TS3Client
2017-09-23 02:56 - 2016-01-02 00:16 - 000000000 ____D C:\Program Files\CCleaner
2017-09-20 18:35 - 2016-11-14 18:07 - 000000000 ____D C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\Apple Computer
2017-09-20 18:33 - 2016-09-30 14:24 - 000002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2017-09-20 18:30 - 2015-10-11 18:09 - 000000000 ____D C:\Users\Titianna\AppData\Local\Publishers
2017-09-15 08:31 - 2017-03-18 23:03 - 000000000 ____D C:\WINDOWS\rescache
2017-09-15 08:27 - 2017-02-03 04:27 - 000000000 ____D C:\Program Files (x86)\Overwolf
2017-09-15 07:34 - 2015-10-11 18:12 - 000002428 _____ C:\Users\Titianna\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-09-15 07:34 - 2015-10-11 15:26 - 000000000 ___RD C:\Users\Titianna\OneDrive

==================== Fichiers à la racine de certains dossiers =======

2017-09-30 22:04 - 2017-08-09 14:58 - 000000069 ___RH () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\1.cmd
2017-09-30 22:04 - 2017-09-28 22:18 - 000000222 ___RH () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\2.cmd
2017-09-30 22:04 - 2017-07-10 10:38 - 000000074 ___RH () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\3.cmd
2017-09-30 22:04 - 2016-11-02 14:46 - 000648704 _____ () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\MSTC.del
2017-09-30 22:04 - 2013-10-05 04:38 - 000970912 ___RH (Microsoft Corporation) C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\msvcr120.dll
2017-09-27 21:45 - 2017-09-27 21:45 - 000145382 _____ () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\throne_1200x437-1-534x437.ico
2017-09-30 22:04 - 2017-07-10 10:44 - 000000143 _____ () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\WINLOG.del
2017-09-30 22:04 - 2017-07-14 14:09 - 000630136 ___RH () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\winlogon-ppi-ul5.dll
2017-09-30 22:04 - 2017-07-14 14:09 - 000001512 ___RH () C:\Users\Administrateur.Titi-annaPC\AppData\Roaming\winlogon.pep5
2017-09-29 19:04 - 2017-09-29 19:04 - 000140800 _____ () C:\Users\Administrateur.Titi-annaPC\AppData\Local\installer.dat
2017-10-06 19:29 - 2017-10-06 19:29 - 000048797 _____ () C:\ProgramData\agent.1507310957.bdinstall.bin
2017-10-06 20:00 - 2017-10-06 20:00 - 000030948 _____ () C:\ProgramData\agent.update.1507312831.bdinstall.bin
2015-10-13 18:16 - 2015-10-13 18:16 - 000000057 _____ () C:\ProgramData\Ament.ini
2017-08-26 17:28 - 2017-08-26 17:28 - 000000000 ____H () C:\ProgramData\DP45977C.lfl
2017-09-30 22:11 - 2017-09-30 22:11 - 000000004 _____ () C:\ProgramData\gfe.3rew
2017-07-22 14:28 - 2017-07-22 14:28 - 000000054 _____ () C:\ProgramData\serverclasscache.ini
2017-08-15 12:14 - 2017-08-15 12:14 - 000000060 _____ () C:\ProgramData\SoftwareUpdateTemp.xml

Fichiers à déplacer ou supprimer:
====================
C:\Users\Administrateur.Titi-annaPC\ZHPCleaner.exe


Certains fichiers dans TEMP:
====================
2017-08-29 12:17 - 2017-09-05 07:26 - 001930840 _____ (Microsoft Corporation) C:\Users\Administrateur.Titi-annaPC\AppData\Local\Temp\dllnt_dump.dll
2017-10-05 19:00 - 2017-09-05 07:26 - 001930840 _____ (Microsoft Corporation) C:\Users\Titianna\AppData\Local\Temp\dllnt_dump.dll
2017-08-26 23:18 - 2017-08-26 23:18 - 000740416 _____ (Oracle Corporation) C:\Users\Titianna\AppData\Local\Temp\jre-8u144-windows-au.exe
2017-10-05 23:41 - 2017-10-05 23:42 - 058402264 _____ (Panda Security, S.L.) C:\Users\Titianna\AppData\Local\Temp\{D0BF4292-66B2-4547-BC00-DD9890470E65}.exe

==================== Bamital & volsnap ======================

(Il n'y a pas de correction automatique pour les fichiers qui ne satisfont pas à la vérification.)

C:\WINDOWS\system32\winlogon.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\wininit.exe => Le fichier est signé numériquement
C:\WINDOWS\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\explorer.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\svchost.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\services.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\User32.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\userinit.exe => Le fichier est signé numériquement
C:\WINDOWS\system32\rpcss.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\SysWOW64\dnsapi.dll => Le fichier est signé numériquement
C:\WINDOWS\system32\Drivers\volsnap.sys => Le fichier est signé numériquement

LastRegBack: 2017-10-04 22:56

==================== Fin de FRST.txt ============================